added restrict to query (#522)

netbox-community · Jul 4, 2024 · 142de46 · 142de46
1 parent 2600209
commit 142de46
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/netbox_topology_views/api/views.py b/netbox_topology_views/api/views.py
@@ -98,7 +98,7 @@ class ExportTopoToXML(PermissionRequiredMixin, ViewSet):
     def list(self, request):
 
         self.filterset = DeviceFilterSet
-        self.queryset = Device.objects.all().select_related(
+        self.queryset = Device.objects.restrict(request.user, 'view').select_related(
             "device_type", "role"
         )
         self.queryset = self.filterset(request.GET, self.queryset).qs

diff --git a/netbox_topology_views/views.py b/netbox_topology_views/views.py
@@ -697,7 +697,7 @@ class TopologyHomeView(PermissionRequiredMixin, View):
 
     def get(self, request):
         self.filterset = DeviceFilterSet
-        self.queryset = Device.objects.all().select_related(
+        self.queryset = Device.objects.restrict(request.user, 'view').select_related(
             "device_type", "role"
         )
         self.queryset = self.filterset(request.GET, self.queryset).qs