ixgadmin/ixg_platform
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
ixg_platform/templates/ops
History
Exact
ixgadmin ef6f217e45 Gate the administration area by role, not by is_staff 
RBACMiddleware only guarded non-staff users, so any staff account stepped
past the role routing for /admin/ — an ops or buyer account with the flag
set could reach the admin index, which embeds the model registry, and a
later permission grant would have been inherited. Restrict /admin/ to the
admin role (superuser excepted) and hide the ops Admin link from non-admins.

Also close the second finding: the seed set is_staff only on creation, so
a buyer whose flag had drifted stayed staff on every re-run. Derive it from
the role on the update path too, and align existing rows with a one-off
migration so the flag never disagrees with the role.
2026-09-25 16:47:50 +00:00
..
base_ops.html Gate the administration area by role, not by is_staff 2026-09-25 16:47:50 +00:00
batch_detail.html Show the intake lineage and edit controls on the batch detail page 2026-09-17 14:48:23 +00:00
batch_form.html Add batch create, edit and lineage screens to the ops portal 2026-09-17 14:48:06 +00:00
batch_lineage.html Add batch create, edit and lineage screens to the ops portal 2026-09-17 14:48:06 +00:00
batch_list.html Add batch create, edit and lineage screens to the ops portal 2026-09-17 14:48:06 +00:00
capa_detail.html Move conditional status classes inside the class attribute 2026-09-17 14:48:14 +00:00
capa_list.html Move conditional status classes inside the class attribute 2026-09-17 14:48:14 +00:00
coa_review_detail.html Move conditional status classes inside the class attribute 2026-09-17 14:48:14 +00:00
coa_review_list.html Move conditional status classes inside the class attribute 2026-09-17 14:48:14 +00:00
collector_group_list.html Add the compliance registers to the ops portal 2026-09-25 16:26:59 +00:00
dashboard.html Quote the ops templates' HTML attributes so the classes apply 2026-09-17 13:57:53 +00:00
document_list.html Quote the ops templates' HTML attributes so the classes apply 2026-09-17 13:57:53 +00:00
esg_list.html Quote the ops templates' HTML attributes so the classes apply 2026-09-17 13:57:53 +00:00
eudr_detail.html Add the compliance registers to the ops portal 2026-09-25 16:26:59 +00:00
eudr_list.html Move conditional status classes inside the class attribute 2026-09-17 14:48:14 +00:00
facility_list.html Add the compliance registers to the ops portal 2026-09-25 16:26:59 +00:00
intake_form.html Move conditional status classes inside the class attribute 2026-09-17 14:48:14 +00:00
intake_list.html Quote the ops templates' HTML attributes so the classes apply 2026-09-17 13:57:53 +00:00
origin_zone_list.html Add the compliance registers to the ops portal 2026-09-25 16:26:59 +00:00
qc_detail.html Quote the ops templates' HTML attributes so the classes apply 2026-09-17 13:57:53 +00:00
qc_list.html Quote the ops templates' HTML attributes so the classes apply 2026-09-17 13:57:53 +00:00
qc_verify_detail.html Move conditional status classes inside the class attribute 2026-09-17 14:48:14 +00:00
qc_verify_list.html Quote the ops templates' HTML attributes so the classes apply 2026-09-17 13:57:53 +00:00
register_form.html Add the compliance registers to the ops portal 2026-09-25 16:26:59 +00:00
shipment_detail.html Add a shipment entry screen to the ops portal 2026-09-17 16:03:09 +00:00
shipment_form.html Add a shipment entry screen to the ops portal 2026-09-17 16:03:09 +00:00
shipment_list.html Add a shipment entry screen to the ops portal 2026-09-17 16:03:09 +00:00
specification_form.html Add the product specification screen to the ops portal 2026-09-25 16:35:45 +00:00
specification_list.html Add the product specification screen to the ops portal 2026-09-25 16:35:45 +00:00