Disallow changing the owner of an API token #20476
Description
NetBox version
v4.4.2
Feature type
Change to existing functionality
Proposed functionality
Disallow the reassignment of an existing API token to a new user.
Use case
While the reassignment of a token to a new user allows for a change in ownership without replacing tokens on API clients, it also presents a moderate security concern. Prohibiting this would improve security of the NetBox APIs overall.
Database changes
N/A
External dependencies
N/A