flows: fix inspector permission check (#12907)

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
2025-02-01 01:54:55 +01:00
parent 6d152bcc60
commit 5448dc93db
1 changed files with 3 additions and 1 deletions
--- a/authentik/flows/views/inspector.py
+++ b/authentik/flows/views/inspector.py
@ -78,7 +78,9 @@ class FlowInspectorView(APIView):
        self.flow = get_object_or_404(Flow.objects.select_related(), slug=flow_slug)
        if settings.DEBUG:
            return
-        if request.user.has_perm("authentik_flow.inspect_flow", self.flow):
+        if request.user.has_perm("authentik_flows.inspect_flow") or request.user.has_perm(
+            "authentik_flows.inspect_flow", self.flow
+        ):
            return
        raise Http404