Skip to content

User without sufficient permission can create an IP address via FHRP group creation #10719

@jeremystretch

Description

@jeremystretch

NetBox version

v3.3.5

Python version

3.8

Steps to Reproduce

  1. Create a user with permission to view and create FHRP groups but not IP addresses.
  2. Authenticate as that user.
  3. Create an FHRP group with any valid values, and also specify an IP address and status.

Expected Behavior

The creation of an IP address should not be permitted, as the user lacks sufficient permissions.

Observed Behavior

The IP address is created.

Metadata

Metadata

Assignees

Labels

status: acceptedThis issue has been accepted for implementationtype: bugA confirmed report of unexpected behavior in the application

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions