From 826d7c4dc39a0fd59bdc601c2245d1a575acd396 Mon Sep 17 00:00:00 2001 From: Prowler Bot Date: Mon, 20 Jan 2025 17:02:31 +0100 Subject: [PATCH] fix(rbac): remove invalid required permission (#6614) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Co-authored-by: Adrián Jesús Peña Rodríguez --- api/src/backend/api/v1/views.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/api/src/backend/api/v1/views.py b/api/src/backend/api/v1/views.py index 2f40e90fbc..c12da92026 100644 --- a/api/src/backend/api/v1/views.py +++ b/api/src/backend/api/v1/views.py @@ -1052,7 +1052,7 @@ class ScanViewSet(BaseRLSViewSet): """ if self.request.method in SAFE_METHODS: # No permissions required for GET requests - self.required_permissions = [Permissions.MANAGE_PROVIDERS] + self.required_permissions = [] else: # Require permission for non-GET requests self.required_permissions = [Permissions.MANAGE_SCANS]