From 18b04c85c3d82e4cc3ecdce8cf09c9b0985d4dd6 Mon Sep 17 00:00:00 2001 From: Antoine Nguyen Date: Mon, 28 Jul 2025 13:54:45 +0200 Subject: [PATCH] Allow all privileged users to read parameters. --- modoboa/parameters/api/v2/viewsets.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/modoboa/parameters/api/v2/viewsets.py b/modoboa/parameters/api/v2/viewsets.py index 1ecc56668..2bfa5d1b5 100644 --- a/modoboa/parameters/api/v2/viewsets.py +++ b/modoboa/parameters/api/v2/viewsets.py @@ -4,7 +4,7 @@ from drf_spectacular.utils import extend_schema, OpenApiParameter from rest_framework import permissions, response, viewsets from rest_framework.decorators import action -from modoboa.lib.permissions import CanCreateDomain, IsSuperUser +from modoboa.lib.permissions import IsPrivilegedUser, IsSuperUser from modoboa.lib.throttle import GetThrottleViewsetMixin from . import serializers @@ -93,7 +93,7 @@ class GlobalParametersViewSet(BaseParametersViewSet): def get_permissions(self): if self.action == "retrieve": - return [permissions.IsAuthenticated(), CanCreateDomain()] + return [permissions.IsAuthenticated(), IsPrivilegedUser()] return [permissions.IsAuthenticated(), IsSuperUser()] def _get_parameter_values(self, request, app: str) -> dict: