8000 The RBAC_checks management command gives false positives about models without view permission · Issue #507 · ansible/django-ansible-base · GitHub
[go: up one dir, main page]

Skip to content

The RBAC_checks management command gives false positives about models without view permission #507

Open

Description

@AlanCoding

Bug Summary

In AWX, which is coherently configured as far as I can tell

$ awx-manage RBAC_checks
Inspecting 31 role definitions
  checking for minimum of view permission
Role definition ExecutionEnvironment Admin does not list any view permissions and this is considered invalid

It's totally fine. It shouldn't give this message.

Activity

  1. aap-platform-services-cicd-bot-sa commented on Sep 3, 2026

    @aap-platform-services-cicd-bot-sa
    Collaborator

    A fix has been submitted in PR #1125. The root cause was that check_role_definitions unconditionally warned about missing view_ permissions without checking whether the content type even has a view_ permission registered. The fix skips the warning when the content type has no view_ permission in DABPermission, and also skips system-wide roles (content_type=None) since they have no content type to apply the check to.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    app:rbacbugSomething isn't working

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions

      0