From 8c01c2555acd273e638615f01098f58877e15a74 Mon Sep 17 00:00:00 2001 From: Antoine Nguyen Date: Mon, 24 Jun 2024 10:04:37 +0200 Subject: [PATCH 1/2] Restrict GET request to /audit-trail to SuperAdmins only --- modoboa/core/api/v2/viewsets.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/modoboa/core/api/v2/viewsets.py b/modoboa/core/api/v2/viewsets.py index 2dd4dd17c..8061df4e4 100644 --- a/modoboa/core/api/v2/viewsets.py +++ b/modoboa/core/api/v2/viewsets.py @@ -12,6 +12,7 @@ from modoboa.admin.api.v1 import serializers as admin_v1_serializers from modoboa.core.api.v1 import serializers as core_v1_serializers from modoboa.core.api.v1 import viewsets as core_v1_viewsets from modoboa.lib import pagination +from modoboa.lib.permissions import IsSuperUser from modoboa.lib.throttle import GetThrottleViewsetMixin from ... import constants @@ -149,7 +150,7 @@ class LogViewSet(GetThrottleViewsetMixin, viewsets.ReadOnlyModelViewSet): pagination_class = pagination.CustomPageNumberPagination permission_classes = ( permissions.IsAuthenticated, - permissions.DjangoModelPermissions, + IsSuperUser, ) queryset = models.Log.objects.all() search_fields = ["logger", "level", "message"] From 281be86df3df333bfdcfb8331a66b1ebbff1f5a7 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 25 Jun 2024 12:59:28 +0000 Subject: [PATCH 2/2] Bump django-phonenumber-field[phonenumbers] from 7.3.0 to 8.0.0 Bumps [django-phonenumber-field[phonenumbers]](https://github.com/stefanfoulis/django-phonenumber-field) from 7.3.0 to 8.0.0. - [Release notes](https://github.com/stefanfoulis/django-phonenumber-field/releases) - [Changelog](https://github.com/stefanfoulis/django-phonenumber-field/blob/main/CHANGELOG.rst) - [Commits](https://github.com/stefanfoulis/django-phonenumber-field/compare/7.3.0...8.0.0) --- updated-dependencies: - dependency-name: django-phonenumber-field[phonenumbers] dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index 13ed9a525..9da3e13fc 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,6 +1,6 @@ django>4.0,<5.0 django-ckeditor==6.7.1 -django-phonenumber-field[phonenumbers]==7.3.0 +django-phonenumber-field[phonenumbers]==8.0.0 django-reversion==5.0.12 django-xforwardedfor-middleware==2.0 django-otp==1.4.1