Edit button visible despite object permission constraint on Interface #231

New Issue

MrUnknownDE · 2026-04-05T16:23:15+02:00

MrUnknownDE commented

2026-04-05 16:23:15 +02:00

Originally created by @Etibru on 3/4/2026

NetBox Edition

NetBox Community

NetBox Version

v4.4.10-Docker-3.4.2

Python Version

3.12

Steps to Reproduce

Create 2 tenants and 2 tenant groups (slug : bar and slug foo)
Create a device with interfaces
Create a permission on dcim.interface with a constraint such as :

{
 "device__tenant__group__slug": "foo"
}

Expected Behavior

If the Interface belongs to a Device whose Tenant Group slug is foo, the Edit button should be visible and functional.
If the Interface does not belong to a Device in tenant group foo, the Edit button should not be visible.

Observed Behavior

When the Interface belongs to a Device in tenant group foo, everything works correctly: the Edit button is visible and editing works.
However, when the Interface does not belong to a Device in tenant group foo, the Edit button is still visible.
If I click the button in this case, I get a "The requested page does not exist." (404) error.

*Originally created by @Etibru on 3/4/2026* ### NetBox Edition NetBox Community ### NetBox Version v4.4.10-Docker-3.4.2 ### Python Version 3.12 ### Steps to Reproduce 1. Create 2 tenants and 2 tenant groups (slug : bar and slug foo) 2. Create a device with interfaces 3. Create a permission on dcim.interface with a constraint such as : ```json { "device__tenant__group__slug": "foo" } ``` ### Expected Behavior If the Interface belongs to a Device whose Tenant Group slug is `foo`, the Edit button should be visible and functional. If the Interface does not belong to a Device in tenant group `foo`, the Edit button should not be visible. ### Observed Behavior When the Interface belongs to a Device in tenant group `foo`, everything works correctly: the Edit button is visible and editing works. However, when the Interface does not belong to a Device in tenant group `foo`, the Edit button is still visible. If I click the button in this case, I get a "The requested page does not exist." (404) error.

MrUnknownDE closed this issue

2026-04-05 16:23:15 +02:00

Sign in to join this conversation.

Branches Tags

main

21455-sql-indexes-audit

21357-register-model-actions

feature

20924-plugin-ui-components

21766-improve-test-coverage-for-sortable-table-columns

21157-export-template-public-models

21025-pre-render-config-contexts

21364-swagger

feature-ip-prefix-link

20911-dropdown-3

fix_module_substitution

21160-filterset

20911-dropdown-2

20044-elevation-stuck-lightmode

7604-filter-modifiers-v3

20660-script-load

19724-graphql

14884-script

19720-macaddress-interface-generic-relation

fix-19669-api-image-download

7604-filter-modifiers

19275-fixes-interface-bulk-edit

fix-17794-get_field_value_return_list

11507-show-aggregate-and-rir-on-api

9583-add_column_specific_search_field_to_tables

No Label netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox netbox severity: low severity: low severity: low severity: low severity: low severity: low severity: low severity: low severity: low severity: low severity: low severity: low severity: low severity: low severity: low severity: low severity: low severity: low severity: low type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug type: bug

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github/netbox#231