Closes #16137: Remove is_staff boolean from User model #1288

New Issue

MrUnknownDE · 2026-04-05T22:59:42+02:00

MrUnknownDE commented

2026-04-05 22:59:42 +02:00

Originally created by @jeremystretch on 9/9/2025

Closes: #16137

Remove the is_staff boolean field from our custom User model
Remove the REMOTE_AUTH_STAFF_GROUPS and REMOTE_AUTH_STAFF_USERS configuration parameters
Introduced the IsSuperuser REST API permission to replace DRF's IsAdminUser (which evaluates is_staff)
Accessing UI & REST API views for RQ tasks now requires superuser permission
Accessing the installed plugins API view now requires superuser permission
Extend the RQ tasks view tests to check permissions enforcement consistently
RemoteUserBackend now infers is_staff from is_superuser
PluginMenuItem still supports the staff_only attribute, but it now maps to the is_superuser attribute on a user
Remove references to is_staff from the LDAP authentication docs

*Originally created by @jeremystretch on 9/9/2025* ### Closes: #16137 - Remove the `is_staff` boolean field from our custom User model - Remove the `REMOTE_AUTH_STAFF_GROUPS` and `REMOTE_AUTH_STAFF_USERS` configuration parameters - Introduced the `IsSuperuser` REST API permission to replace DRF's `IsAdminUser` (which evaluates `is_staff`) - Accessing UI & REST API views for RQ tasks now requires superuser permission - Accessing the installed plugins API view now requires superuser permission - Extend the RQ tasks view tests to check permissions enforcement consistently - `RemoteUserBackend` now infers `is_staff` from `is_superuser` - `PluginMenuItem` still supports the `staff_only` attribute, but it now maps to the `is_superuser` attribute on a user - Remove references to `is_staff` from the LDAP authentication docs

MrUnknownDE closed this issue

2026-04-05 22:59:42 +02:00

Sign in to join this conversation.

Branches Tags

main

21455-sql-indexes-audit

21357-register-model-actions

feature

20924-plugin-ui-components

21766-improve-test-coverage-for-sortable-table-columns

21157-export-template-public-models

21025-pre-render-config-contexts

21364-swagger

feature-ip-prefix-link

20911-dropdown-3

fix_module_substitution

21160-filterset

20911-dropdown-2

20044-elevation-stuck-lightmode

7604-filter-modifiers-v3

20660-script-load

19724-graphql

14884-script

19720-macaddress-interface-generic-relation

fix-19669-api-image-download

7604-filter-modifiers

19275-fixes-interface-bulk-edit

fix-17794-get_field_value_return_list

11507-show-aggregate-and-rir-on-api

9583-add_column_specific_search_field_to_tables

No Label

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github/netbox#1288

Closes #16137: Remove is_staff boolean from User model #1288

Closes: #16137

Closes #16137: Remove `is_staff` boolean from User model #1288