From 4690fc34b22ae7050ed6bbecc7850f941ec9459e Mon Sep 17 00:00:00 2001 From: Oliver Walters Date: Thu, 18 Jun 2026 09:24:17 +0000 Subject: [PATCH] [API] Adjust permissions for machine restart Can only be actioned by a staff user --- src/backend/InvenTree/machine/api.py | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/src/backend/InvenTree/machine/api.py b/src/backend/InvenTree/machine/api.py index bea28dfcfd..e2c17ff80f 100644 --- a/src/backend/InvenTree/machine/api.py +++ b/src/backend/InvenTree/machine/api.py @@ -3,6 +3,7 @@ from django.urls import include, path, re_path from drf_spectacular.utils import extend_schema +from rest_framework import permissions from rest_framework.exceptions import NotFound from rest_framework.response import Response from rest_framework.views import APIView @@ -200,7 +201,10 @@ class RegistryStatusView(APIView): - GET: Provide status data for the machine registry """ - permission_classes = [InvenTree.permissions.IsAuthenticatedOrReadScope] + permission_classes = [ + permissions.IsAuthenticated, + InvenTree.permissions.IsAdminOrReadScope, + ] serializer_class = MachineSerializers.MachineRegistryStatusSerializer