engineering/unrhodecode
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Merge pull request !2949 from rhodecode-enterprise-ce security-audit-improvements

Browse source 
Changes from branch: Security audit improvements
This commit is contained in:
Andrii Verbytskyi 2026-01-19 12:53:42 +00:00
commit 01e582003c
29 changed files with 423 additions and 26 deletions
Download patch file Download diff file Expand all files Collapse all files

8
rhodecode/apps/admin/tests/test_admin_users.py
View file

@ -42,7 +42,9 @@ class TestAdminUsersView(TestController):
response = self.app.get(route_path("users_data"), extra_environ=xhr_header)
all_users = (
User.query().filter(User.username.notin_([User.DEFAULT_USER, User.GHOST_USER, User.AI_USER])).count()
User.query()
.filter(User.username.notin_([User.DEFAULT_USER, User.GHOST_USER, User.AI_USER, User.SECURITY_USER]))
.count()
)
assert response.json["recordsTotal"] == all_users
@ -53,7 +55,9 @@ class TestAdminUsersView(TestController):
)
all_users = (
User.query().filter(User.username.notin_([User.DEFAULT_USER, User.GHOST_USER, User.AI_USER])).count()
User.query()
.filter(User.username.notin_([User.DEFAULT_USER, User.GHOST_USER, User.AI_USER, User.SECURITY_USER]))
.count()
)
assert response.json["recordsTotal"] == all_users
assert response.json["recordsFiltered"] == 0

2
rhodecode/apps/admin/views/users.py
View file

@ -106,7 +106,7 @@ class AdminUsersView(BaseAppView, DataGridAppView):
def user_actions(user_id, username):
return _render("user_actions", user_id, username)
excluded_users = User.username.notin_([User.DEFAULT_USER, User.GHOST_USER, User.AI_USER])
excluded_users = User.username.notin_([User.DEFAULT_USER, User.GHOST_USER, User.AI_USER, User.SECURITY_USER])
users_data_total_count = User.query().filter(excluded_users).count()
users_data_total_inactive_count = User.query().filter(excluded_users).filter(User.active != true()).count()