rbac: fix incorrect object_description for object-level permissions (#…

…12029) Signed-off-by: Jens Langhammer <[email protected]>
goauthentik · Nov 15, 2024 · 0bdef2a · 0bdef2a
1 parent fcbee2e
commit 0bdef2a
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/authentik/rbac/api/rbac_roles.py b/authentik/rbac/api/rbac_roles.py
@@ -53,7 +53,7 @@ def get_object_description(self, instance: GroupObjectPermission) -> str | None:
         except LookupError:
             return None
         objects = get_objects_for_group(instance.group, f"{app_label}.view_{model}", model_class)
-        obj = objects.first()
+        obj = objects.filter(pk=instance.object_pk).first()
         if not obj:
             return None
         return str(obj)

diff --git a/authentik/rbac/api/rbac_users.py b/authentik/rbac/api/rbac_users.py
@@ -53,7 +53,7 @@ def get_object_description(self, instance: UserObjectPermission) -> str | None:
         except LookupError:
             return None
         objects = get_objects_for_user(instance.user, f"{app_label}.view_{model}", model_class)
-        obj = objects.first()
+        obj = objects.filter(pk=instance.object_pk).first()
         if not obj:
             return None
         return str(obj)