From 0bdef2a0f4bf33222ebc5daeabb3fc812827af99 Mon Sep 17 00:00:00 2001 From: "Jens L." Date: Fri, 15 Nov 2024 14:21:22 +0100 Subject: [PATCH] rbac: fix incorrect object_description for object-level permissions (#12029) Signed-off-by: Jens Langhammer --- authentik/rbac/api/rbac_roles.py | 2 +- authentik/rbac/api/rbac_users.py | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/authentik/rbac/api/rbac_roles.py b/authentik/rbac/api/rbac_roles.py index bd84923b14..2a21ece46a 100644 --- a/authentik/rbac/api/rbac_roles.py +++ b/authentik/rbac/api/rbac_roles.py @@ -53,7 +53,7 @@ class ExtraRoleObjectPermissionSerializer(RoleObjectPermissionSerializer): except LookupError: return None objects = get_objects_for_group(instance.group, f"{app_label}.view_{model}", model_class) - obj = objects.first() + obj = objects.filter(pk=instance.object_pk).first() if not obj: return None return str(obj) diff --git a/authentik/rbac/api/rbac_users.py b/authentik/rbac/api/rbac_users.py index 8951a5df8c..82cad8b3bf 100644 --- a/authentik/rbac/api/rbac_users.py +++ b/authentik/rbac/api/rbac_users.py @@ -53,7 +53,7 @@ class ExtraUserObjectPermissionSerializer(UserObjectPermissionSerializer): except LookupError: return None objects = get_objects_for_user(instance.user, f"{app_label}.view_{model}", model_class) - obj = objects.first() + obj = objects.filter(pk=instance.object_pk).first() if not obj: return None return str(obj)