Skip to content

Permissions constraints not working for MAC Address objects #19720

Open
@dhoffend

Description

@dhoffend

Deployment Type

Self-hosted

NetBox Version

v.4.3.1

Python Version

3.11

Steps to Reproduce

  1. Create Permission
  2. Select DCIM | MAC Address
  3. Set Constraints to {"assigned_object__device__tenant__name": "sometenantname"} or parent or virtual_machine or whatever

Expected Behavior

The ability to limit the add/view/edit/delete access to mac addresses that matches the permissions constraints

Observed Behavior

With the introduction of handling multiple MAC adresses per interface in v4.2 the mac address field was moved away from the device.interface into its own object.

Before v4.2 we could limit the object level permissions on interface level to restrict them to a tenant, site or other constraint settings. Starting with v4.2 we can't limit the access and people would be able to add/view/edit/delete mac addresses of devices they shouldn't have access too.

I consider this as a bug, cause before 4.2 we could limit the permissions on in interface level and now it's broken, no longer exists, not working due to internal missing relations.

Metadata

Metadata

Assignees

No one assigned

    Labels

    status: under reviewFurther discussion is needed to determine this issue's scope and/or implementationtype: bugA confirmed report of unexpected behavior in the application

    Type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions