Closes #17010: Show admin navigation menu items only for staff & superusers (#20386)

This commit is contained in:
Jeremy Stretch
2025-09-19 15:52:16 -04:00
committed by GitHub
parent 55cda3ca45
commit 07a53c8315
2 changed files with 10 additions and 10 deletions

View File

@@ -412,7 +412,7 @@ ADMIN_MENU = Menu(
MenuItem( MenuItem(
link='users:user_list', link='users:user_list',
link_text=_('Users'), link_text=_('Users'),
auth_required=True, staff_only=True,
permissions=['users.view_user'], permissions=['users.view_user'],
buttons=( buttons=(
MenuItemButton( MenuItemButton(
@@ -432,7 +432,7 @@ ADMIN_MENU = Menu(
MenuItem( MenuItem(
link='users:group_list', link='users:group_list',
link_text=_('Groups'), link_text=_('Groups'),
auth_required=True, staff_only=True,
permissions=['users.view_group'], permissions=['users.view_group'],
buttons=( buttons=(
MenuItemButton( MenuItemButton(
@@ -452,14 +452,14 @@ ADMIN_MENU = Menu(
MenuItem( MenuItem(
link='users:token_list', link='users:token_list',
link_text=_('API Tokens'), link_text=_('API Tokens'),
auth_required=True, staff_only=True,
permissions=['users.view_token'], permissions=['users.view_token'],
buttons=get_model_buttons('users', 'token') buttons=get_model_buttons('users', 'token')
), ),
MenuItem( MenuItem(
link='users:objectpermission_list', link='users:objectpermission_list',
link_text=_('Permissions'), link_text=_('Permissions'),
auth_required=True, staff_only=True,
permissions=['users.view_objectpermission'], permissions=['users.view_objectpermission'],
buttons=get_model_buttons('users', 'objectpermission', actions=['add']) buttons=get_model_buttons('users', 'objectpermission', actions=['add'])
), ),
@@ -471,23 +471,23 @@ ADMIN_MENU = Menu(
MenuItem( MenuItem(
link='core:system', link='core:system',
link_text=_('System'), link_text=_('System'),
auth_required=True staff_only=True,
), ),
MenuItem( MenuItem(
link='core:plugin_list', link='core:plugin_list',
link_text=_('Plugins'), link_text=_('Plugins'),
auth_required=True staff_only=True,
), ),
MenuItem( MenuItem(
link='core:configrevision_list', link='core:configrevision_list',
link_text=_('Configuration History'), link_text=_('Configuration History'),
auth_required=True, staff_only=True,
permissions=['core.view_configrevision'] permissions=['core.view_configrevision'],
), ),
MenuItem( MenuItem(
link='core:background_queue_list', link='core:background_queue_list',
link_text=_('Background Tasks'), link_text=_('Background Tasks'),
auth_required=True staff_only=True,
), ),
), ),
), ),

View File

@@ -30,7 +30,7 @@ def nav(context):
continue continue
if not user.has_perms(item.permissions): if not user.has_perms(item.permissions):
continue continue
if item.staff_only and not user.is_staff: if item.staff_only and not any([user.is_staff, user.is_superuser]):
continue continue
buttons = [ buttons = [
button for button in item.buttons if user.has_perms(button.permissions) button for button in item.buttons if user.has_perms(button.permissions)