openwisp / openwisp/openwisp-users
[feature] Restrict access to sensitive fields for non-superuser
Open
@pandafy is already working on this.
Since Sep 6, 2025.
enhancement
- Dominant language
- Python
- Stars
- 179
- Forks
- 96
- Avg merge
- 13h 40m
- Merged PRs (30d)
- 16
Description
Is your feature request related to a problem? Please describe.
Some shared objects in OpenWISP may contain sensitive information, such as passwords or private keys.
After #444, non-superusers will have read-only access to shared objects. Thus, they may get access to the sensitive information mention above which may cause security issues.
Describe the solution you'd like
Introduce reusable logic to flag specific model fields as sensitive.
Ensure that sensitive fields are automatically hidden in both the admin interface and the REST API when accessed by users who are not superusers.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.