Casts a repo object before checking permission

fixes: #5619 (cherry picked from commit 93f241f)
pulp · Jul 23, 2024 · 1e3d238 · 1e3d238
1 parent b892d4b
commit 1e3d238
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 2 deletions.
diff --git a/CHANGES/5619.bugfix b/CHANGES/5619.bugfix
@@ -0,0 +1,2 @@
+Fixed a bug in `has_repo_or_repo_ver_param_model_or_obj_perms` function to make
+it work with plugin Repositories.
diff --git a/pulpcore/app/global_access_conditions.py b/pulpcore/app/global_access_conditions.py
@@ -479,9 +479,9 @@ def has_repo_or_repo_ver_param_model_or_obj_perms(request, view, action, permiss
     )
     serializer.is_valid(raise_exception=True)
     if repository := serializer.validated_data.get("repository"):
-        return request.user.has_perm(permission, repository)
+        return request.user.has_perm(permission, repository.cast())
     elif repo_ver := serializer.validated_data.get("repository_version"):
-        return request.user.has_perm(permission, repo_ver.repository)
+        return request.user.has_perm(permission, repo_ver.repository.cast())
     return True