New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[api/radius] Fix BatchView permission and authorization #94
Comments
atb00ker
added a commit
to atb00ker/openwisp-radius
that referenced
this issue
Jul 17, 2020
atb00ker
added a commit
to atb00ker/openwisp-radius
that referenced
this issue
Jul 17, 2020
atb00ker
added a commit
to atb00ker/openwisp-radius
that referenced
this issue
Jul 17, 2020
atb00ker
added a commit
to atb00ker/openwisp-radius
that referenced
this issue
Jul 17, 2020
atb00ker
added a commit
to atb00ker/openwisp-radius
that referenced
this issue
Jul 17, 2020
atb00ker
added a commit
to atb00ker/openwisp-radius
that referenced
this issue
Jul 21, 2020
nemesifier
pushed a commit
that referenced
this issue
Jul 21, 2020
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
The
BatchView
of the API should be usable only by admin/staff users.The organization should be part of the URL, eg:
/api/v1/<org-slug>/radius/batch/
.It should use the user authentication from openwisp-users (not the other authentication designed to be used by freeradius).
It should use the django permissions to reject requests coming from users which do not have permissions to manipulate batch objects, it should allow superusers though.
Test will have to be changed. API docs need to be updated.
The text was updated successfully, but these errors were encountered: