rbac: fix incorrect object_description for object-level permissions

Signed-off-by: Jens Langhammer <jens@goauthentik.io>
goauthentik · Nov 14, 2024 · 26f7469 · 26f7469
1 parent bcb91d2
commit 26f7469
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/authentik/rbac/api/rbac_roles.py b/authentik/rbac/api/rbac_roles.py
@@ -53,7 +53,7 @@ def get_object_description(self, instance: GroupObjectPermission) -> str | None:
         except LookupError:
             return None
         objects = get_objects_for_group(instance.group, f"{app_label}.view_{model}", model_class)
-        obj = objects.first()
+        obj = objects.filter(pk=instance.object_pk).first()
         if not obj:
             return None
         return str(obj)

diff --git a/authentik/rbac/api/rbac_users.py b/authentik/rbac/api/rbac_users.py
@@ -53,7 +53,7 @@ def get_object_description(self, instance: UserObjectPermission) -> str | None:
         except LookupError:
             return None
         objects = get_objects_for_user(instance.user, f"{app_label}.view_{model}", model_class)
-        obj = objects.first()
+        obj = objects.filter(pk=instance.object_pk).first()
         if not obj:
             return None
         return str(obj)