Skip to content

[feature] Restrict access to sensitive fields for non-superuser #448

@pandafy

Description

@pandafy

Is your feature request related to a problem? Please describe.
Some shared objects in OpenWISP may contain sensitive information, such as passwords or private keys.

After #444, non-superusers will have read-only access to shared objects. Thus, they may get access to the sensitive information mention above which may cause security issues.

Describe the solution you'd like
Introduce reusable logic to flag specific model fields as sensitive.

Ensure that sensitive fields are automatically hidden in both the admin interface and the REST API when accessed by users who are not superusers.

Metadata

Metadata

Assignees

Projects

Status

To do (Python & Django)

Status

Backlog

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions