Skip to content

[1.2.x] Restrict queryset for DataImportSession (#11602)#11605

Merged
SchrodingersGat merged 1 commit into1.2.xfrom
backport/1.2.x/pr-11602
Mar 24, 2026
Merged

[1.2.x] Restrict queryset for DataImportSession (#11602)#11605
SchrodingersGat merged 1 commit into1.2.xfrom
backport/1.2.x/pr-11602

Conversation

@github-actions
Copy link
Copy Markdown
Contributor

Backport

This will backport the following commits from master to 1.2.x:

Questions ?

Please refer to the Backport tool documentation

* Restrict queryset for DataImportSession

- Only allow non-staff users to see their own sessions

* Add unit test

* raise PermissionDenied if no user info available

(cherry picked from commit b98fc9c)
@SchrodingersGat SchrodingersGat added api Relates to the API security Relates to a security issue labels Mar 24, 2026
@SchrodingersGat SchrodingersGat added this to the 1.2.7 milestone Mar 24, 2026
@SchrodingersGat SchrodingersGat merged commit badd6e4 into 1.2.x Mar 24, 2026
5 checks passed
@SchrodingersGat SchrodingersGat deleted the backport/1.2.x/pr-11602 branch March 24, 2026 12:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

api Relates to the API security Relates to a security issue

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant