User permission for Constraints

[alemsas]

I want to write a JSON expression for DCIM>Devices that user just can update the status of each devices!
anyone can help me??

[candlerb]

If by "JSON" you mean Custom Validators then AFAIK they can't see the user making the change, nor the before-and-after attribute values. Permissions only work at the level of entire objects, not individual attributes.

Your best bet, I think, would be to configure permissions so that the user cannot modify the device at all (i.e. withhold the "change" and "delete" permissions), and then write a Custom Script (which the user has permission to run) which lets them select a device and status to change.

You may want to add a Custom Link (button) on the Device page, to allow them more easily to navigate to the script to update the device status.

[alemsas]

thanks I wrote and ran my scripts!
but when I want to share these scripts with other users the permissions on object types doesnt work and the user get
No Scripts Found!
here is
Object Types

extras | script
extras | script module

and I get it view and change action!

[candlerb]

See https://docs.netbox.dev/en/stable/customization/custom-scripts/#running-custom-scripts

[alemsas]

again thanks!
I do above

but when I want to run with the traget user i get the error that you can see it in the right and bottem of my screenshot!
also I do this for user Extras > Script, Extras > ScriptModule, and Core > ManagedFile!

[alemsas]

the new role has been loaded but the device id not!

[candlerb]

I suspect the user still needs View permission on devices, so that the drop-down field can be populated.

BTW, to get rid of the scheduler settings (which you almost never want), add the following to your class:

class ChangeDeviceRole(Script):
    class Meta:
        scheduling_enabled = False

[alemsas]

It has been solved with above works!
thanks @candlerb