You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
The RBAC_checks management command gives false positives about models without view permission #507
In AWX, which is coherently configured as far as I can tell
$ awx-manage RBAC_checks
Inspecting 31 role definitions
checking for minimum of view permission
Role definition ExecutionEnvironment Admin does not list any view permissions and this is considered invalid
It's totally fine. It shouldn't give this message.
A fix has been submitted in PR #1125. The root cause was that check_role_definitions unconditionally warned about missing view_ permissions without checking whether the content type even has a view_ permission registered. The fix skips the warning when the content type has no view_ permission in DABPermission, and also skips system-wide roles (content_type=None) since they have no content type to apply the check to.
Activity
aap-platform-services-cicd-bot-sa commentedon Sep 3, 2026
A fix has been submitted in PR #1125. The root cause was that
check_role_definitionsunconditionally warned about missingview_permissions without checking whether the content type even has aview_permission registered. The fix skips the warning when the content type has noview_permission inDABPermission, and also skips system-wide roles (content_type=None) since they have no content type to apply the check to.