pulpcore 3.63.43__tar.gz → 3.63.45__tar.gz

{pulpcore-3.63.43 → pulpcore-3.63.45}/CHANGES.md

@@ -8,6 +8,49 @@
 
 [//]: # (towncrier release notes start)
 
+## 3.63.45 (2026-07-29) {: #3.63.45 }
+
+### REST API {: #3.63.45-rest-api }
+
+No significant changes.
+
+### Plugin API {: #3.63.45-plugin-api }
+
+No significant changes.
+
+### Pulp File {: #3.63.45-pulp-file }
+
+No significant changes.
+
+### Pulp Cert Guard {: #3.63.45-pulp-cert-guard }
+
+No significant changes.
+
+---
+
+## 3.63.44 (2026-07-28) {: #3.63.44 }
+
+### REST API {: #3.63.44-rest-api }
+
+#### Bugfixes {: #3.63.44-rest-api-bugfix }
+
+- Fixed domain list returning all domains to authenticated users instead of only domains they can view.
+  [#7898](https://github.com/pulp/pulpcore/issues/7898)
+
+### Plugin API {: #3.63.44-plugin-api }
+
+No significant changes.
+
+### Pulp File {: #3.63.44-pulp-file }
+
+No significant changes.
+
+### Pulp Cert Guard {: #3.63.44-pulp-cert-guard }
+
+No significant changes.
+
+---
+
 ## 3.63.43 (2026-07-20) {: #3.63.43 }
 
 ### REST API {: #3.63.43-rest-api }

{pulpcore-3.63.43 → pulpcore-3.63.45}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: pulpcore
-Version: 3.63.43
+Version: 3.63.45
 Summary: Pulp Django Application and Related Modules
 Home-page: https://pulpproject.org
 Author: Pulp Team

{pulpcore-3.63.43 → pulpcore-3.63.45}/pulp_certguard/app/__init__.py

@@ -6,6 +6,6 @@ class PulpCertGuardPluginAppConfig(PulpPluginAppConfig):
 
     name = "pulp_certguard.app"
     label = "certguard"
-    version = "3.63.43"
+    version = "3.63.45"
     python_package_name = "pulpcore"
     domain_compatible = True

{pulpcore-3.63.43 → pulpcore-3.63.45}/pulp_file/app/__init__.py

@@ -8,6 +8,6 @@ class PulpFilePluginAppConfig(PulpPluginAppConfig):
 
     name = "pulp_file.app"
     label = "file"
-    version = "3.63.43"
+    version = "3.63.45"
     python_package_name = "pulpcore"
     domain_compatible = True

{pulpcore-3.63.43 → pulpcore-3.63.45}/pulp_file/tests/functional/api/test_domains.py

@@ -3,7 +3,7 @@ import uuid
 
 import pytest
 
-from pulpcore.app import settings
+from pulpcore.app import settings  # noqa: TID251 Unfixable in old dynaconf version.
 from pulpcore.client.pulp_file import ApiException
 from pulpcore.client.pulpcore import ApiException as CoreApiException
 from pulpcore.client.pulpcore import Repair

{pulpcore-3.63.43 → pulpcore-3.63.45}/pulp_file/tests/functional/api/test_pulp_export.py

@@ -2,7 +2,7 @@ import uuid
 
 import pytest
 
-from pulpcore.app import settings
+from pulpcore.app import settings  # noqa: TID251 Unfixable in old dynaconf version.
 from pulpcore.client.pulpcore.exceptions import ApiException
 from pulpcore.constants import TASK_STATES
 

{pulpcore-3.63.43 → pulpcore-3.63.45}/pulpcore/app/apps.py

@@ -242,7 +242,7 @@ class PulpAppConfig(PulpPluginAppConfig):
     label = "core"
 
     # The version of this app
-    version = "3.63.43"
+    version = "3.63.45"
 
     # The python package name providing this app
     python_package_name = "pulpcore"

{pulpcore-3.63.43 → pulpcore-3.63.45}/pulpcore/app/authentication.py

@@ -10,7 +10,7 @@ from django.contrib.auth.backends import RemoteUserBackend
 from rest_framework.authentication import BaseAuthentication, RemoteUserAuthentication
 from rest_framework.exceptions import AuthenticationFailed
 
-from pulpcore.app import settings
+from pulpcore.app import settings  # noqa: TID251 Unfixable in old dynaconf version.
 
 _logger = logging.getLogger(__name__)
 

{pulpcore-3.63.43 → pulpcore-3.63.45}/pulpcore/app/redis_connection.py

@@ -1,16 +1,16 @@
 from redis import Redis
 from redis.asyncio import Redis as aRedis
 
-from pulpcore.app.settings import settings
+from pulpcore.app.settings import settings  # noqa: TID251 Unfixable in old dynaconf version.
 
 _conn = None
 _a_conn = None
 
 
 def _get_connection_from_class(redis_class):
-    if not settings.get("CACHE_ENABLED"):
+    if not getattr(settings, "CACHE_ENABLED", None):
         return None
-    redis_url = settings.get("REDIS_URL")
+    redis_url = getattr(settings, "REDIS_URL", None)
     if redis_url is not None:
         return redis_class.from_url(redis_url)
     else:

{pulpcore-3.63.43 → pulpcore-3.63.45}/pulpcore/app/serializers/exporter.py

@@ -5,7 +5,7 @@ from gettext import gettext as _
 from rest_framework import serializers
 from rest_framework.validators import UniqueValidator
 
-from pulpcore.app import models, settings
+from pulpcore.app import models, settings  # noqa: TID251 Unfixable in old dynaconf version.
 from pulpcore.app.serializers import (
     DetailIdentityField,
     DetailRelatedField,

{pulpcore-3.63.43 → pulpcore-3.63.45}/pulpcore/app/serializers/importer.py

@@ -5,7 +5,7 @@ from django.core.exceptions import ObjectDoesNotExist
 from rest_framework import serializers
 from rest_framework.validators import UniqueValidator
 
-from pulpcore.app import models, settings
+from pulpcore.app import models, settings  # noqa: TID251 Unfixable in old dynaconf version.
 from pulpcore.app.serializers import (
     DetailIdentityField,
     ImportIdentityField,

{pulpcore-3.63.43 → pulpcore-3.63.45}/pulpcore/app/serializers/repository.py

@@ -6,7 +6,7 @@ from cryptography.x509 import load_pem_x509_certificate
 from rest_framework import fields, serializers
 from rest_framework_nested.serializers import NestedHyperlinkedModelSerializer
 
-from pulpcore.app import models, settings
+from pulpcore.app import models, settings  # noqa: TID251 Unfixable in old dynaconf version.
 from pulpcore.app.serializers import (
     DetailIdentityField,
     DetailRelatedField,

{pulpcore-3.63.43 → pulpcore-3.63.45}/pulpcore/app/tasks/importer.py

@@ -510,7 +510,7 @@ def pulp_import(importer_pk, path, toc, create_repositories):
         #
         # By default (setting is not-set), import will continue to use 100% of the available
         # workers.
-        import_workers_percent = int(settings.get("IMPORT_WORKERS_PERCENT", 100))
+        import_workers_percent = int(getattr(settings, "IMPORT_WORKERS_PERCENT", 100))
         total_workers = Worker.objects.online().count()
         import_workers = max(1, int(total_workers * (import_workers_percent / 100.0)))
 

{pulpcore-3.63.43 → pulpcore-3.63.45}/pulpcore/app/util.py

@@ -446,7 +446,7 @@ def configure_analytics():
     dispatch_interval = timedelta(days=1)
     name = "Post Anonymous Analytics Periodically"
     analytics = settings.ANALYTICS
-    if settings.get("TELEMETRY") is not None:
+    if getattr(settings, "TELEMETRY", None) is not None:
         deprecation_logger.warning("TELEMETRY setting is deprecated. Use ANALYTICS.")
         analytics = settings.TELEMETRY
     if analytics:

{pulpcore-3.63.43 → pulpcore-3.63.45}/pulpcore/app/views/importer.py

@@ -6,7 +6,7 @@ from drf_spectacular.utils import extend_schema
 from rest_framework.response import Response
 from rest_framework.views import APIView
 
-from pulpcore.app import settings
+from pulpcore.app import settings  # noqa: TID251 Unfixable in old dynaconf version.
 from pulpcore.app.serializers import PulpImportCheckResponseSerializer, PulpImportCheckSerializer
 
 

{pulpcore-3.63.43 → pulpcore-3.63.45}/pulpcore/app/viewsets/domain.py

@@ -45,6 +45,7 @@ class DomainViewSet(
     serializer_class = DomainSerializer
     endpoint_name = "domains"
     filterset_class = DomainFilter
+    queryset_filtering_required_permission = "core.view_domain"
     DEFAULT_ACCESS_POLICY = {
         "statements": [
             {

{pulpcore-3.63.43 → pulpcore-3.63.45}/pulpcore/cache/cache.py

@@ -16,7 +16,7 @@ from pulpcore.app.redis_connection import (
     get_async_redis_connection,
     get_redis_connection,
 )
-from pulpcore.app.settings import settings
+from pulpcore.app.settings import settings  # noqa: TID251 Unfixable in old dynaconf version.
 from pulpcore.responses import ArtifactResponse
 
 DEFAULT_EXPIRES_TTL = settings.CACHE_SETTINGS["EXPIRES_TTL"]

{pulpcore-3.63.43 → pulpcore-3.63.45}/pulpcore/tasking/kafka.py

@@ -24,16 +24,16 @@ else:
 
     _logger = logging.getLogger(__name__)
     _kafka_producer = None
-    _producer_poll_timeout = settings.get("KAFKA_PRODUCER_POLL_TIMEOUT")
-    _security_protocol = settings.get("KAFKA_SECURITY_PROTOCOL")
-    _ssl_ca_pem = settings.get("KAFKA_SSL_CA_PEM")
-    _sasl_mechanism = settings.get("KAFKA_SASL_MECHANISM")
-    _sasl_username = settings.get("KAFKA_SASL_USERNAME")
-    _sasl_password = settings.get("KAFKA_SASL_PASSWORD")
-
-    _kafka_tasks_status_topic = settings.get("KAFKA_TASKS_STATUS_TOPIC")
-    _kafka_tasks_status_producer_sync_enabled = settings.get(
-        "KAFKA_TASKS_STATUS_PRODUCER_SYNC_ENABLED"
+    _producer_poll_timeout = getattr(settings, "KAFKA_PRODUCER_POLL_TIMEOUT", None)
+    _security_protocol = getattr(settings, "KAFKA_SECURITY_PROTOCOL", None)
+    _ssl_ca_pem = getattr(settings, "KAFKA_SSL_CA_PEM", None)
+    _sasl_mechanism = getattr(settings, "KAFKA_SASL_MECHANISM", None)
+    _sasl_username = getattr(settings, "KAFKA_SASL_USERNAME", None)
+    _sasl_password = getattr(settings, "KAFKA_SASL_PASSWORD", None)
+
+    _kafka_tasks_status_topic = getattr(settings, "KAFKA_TASKS_STATUS_TOPIC", None)
+    _kafka_tasks_status_producer_sync_enabled = getattr(
+        settings, "KAFKA_TASKS_STATUS_PRODUCER_SYNC_ENABLED", None
     )
 
     class KafkaProducerPollingWorker:

{pulpcore-3.63.43 → pulpcore-3.63.45}/pulpcore/tests/functional/api/test_auth.py

@@ -9,7 +9,7 @@ from base64 import b64encode
 
 import pytest
 
-from pulpcore.app import settings
+from pulpcore.app import settings  # noqa: TID251 Unfixable in old dynaconf version.
 from pulpcore.client.pulpcore import ApiException
 
 

{pulpcore-3.63.43 → pulpcore-3.63.45}/pulpcore/tests/functional/api/test_crud_domains.py

@@ -307,3 +307,41 @@ def test_special_domain_creation(pulpcore_bindings, gen_object_with_cleanup, pul
     domain = gen_object_with_cleanup(pulpcore_bindings.DomainsApi, body, pulp_domain=random_name)
     assert "default/api/v3/" in domain.pulp_href
     assert random_name not in domain.pulp_href
+
+
+@pytest.mark.parallel
+def test_domain_list_queryset_scoping(pulpcore_bindings, gen_user, gen_object_with_cleanup):
+    """Test that domain list is scoped to domains the user can view."""
+    body = {
+        "name": str(uuid.uuid4()),
+        "storage_class": "pulpcore.app.models.storage.FileSystem",
+        "storage_settings": {"MEDIA_ROOT": ""},
+    }
+    domain = gen_object_with_cleanup(pulpcore_bindings.DomainsApi, body)
+    gen_object_with_cleanup(pulpcore_bindings.DomainsApi, {**body, "name": str(uuid.uuid4())})
+
+    # Authenticated users without view_domain see no domains
+    with gen_user():
+        assert pulpcore_bindings.DomainsApi.list().count == 0
+
+    # Object-level domain_viewer can see only that domain
+    with gen_user(object_roles=[("core.domain_viewer", domain.pulp_href)]):
+        domains = pulpcore_bindings.DomainsApi.list()
+        assert domains.count == 1
+        assert domains.results[0].pulp_href == domain.pulp_href
+
+    # Object-level domain_owner can see only that domain
+    with gen_user(object_roles=[("core.domain_owner", domain.pulp_href)]):
+        domains = pulpcore_bindings.DomainsApi.list()
+        assert domains.count == 1
+        assert domains.results[0].pulp_href == domain.pulp_href
+
+    # Domain creator sees domains they create (via creation_hooks), not others
+    creator = gen_user(model_roles=["core.domain_creator"])
+    with creator:
+        created = gen_object_with_cleanup(
+            pulpcore_bindings.DomainsApi, {**body, "name": str(uuid.uuid4())}
+        )
+        domains = pulpcore_bindings.DomainsApi.list()
+        assert domains.count == 1
+        assert domains.results[0].pulp_href == created.pulp_href

{pulpcore-3.63.43 → pulpcore-3.63.45}/pulpcore/tests/functional/api/using_plugin/test_filesystemexport.py

@@ -9,7 +9,7 @@ import uuid
 
 import pytest
 
-from pulpcore.app import settings
+from pulpcore.app import settings  # noqa: TID251 Unfixable in old dynaconf version.
 from pulpcore.client.pulp_file import RepositorySyncURL
 from pulpcore.client.pulpcore.exceptions import ApiException
 

{pulpcore-3.63.43 → pulpcore-3.63.45}/pulpcore/tests/functional/api/using_plugin/test_pulpimport.py

@@ -12,7 +12,7 @@ from pathlib import Path
 
 import pytest
 
-from pulpcore.app import settings
+from pulpcore.app import settings  # noqa: TID251 Unfixable in old dynaconf version.
 from pulpcore.client.pulp_file import RepositorySyncURL
 from pulpcore.client.pulpcore.exceptions import ApiException
 

{pulpcore-3.63.43 → pulpcore-3.63.45}/pulpcore.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: pulpcore
-Version: 3.63.43
+Version: 3.63.45
 Summary: Pulp Django Application and Related Modules
 Home-page: https://pulpproject.org
 Author: Pulp Team

{pulpcore-3.63.43 → pulpcore-3.63.45}/pyproject.toml

@@ -106,7 +106,7 @@ ignore = [
 [tool.bumpversion]
 # This section is managed by the plugin template. Do not edit manually.
 
-current_version = "3.63.43"
+current_version = "3.63.45"
 commit = false
 tag = false
 parse = "(?P<major>\\d+)\\.(?P<minor>\\d+)\\.(?P<alpha>0a)?(?P<patch>\\d+)(\\.(?P<release>[a-z]+))?"
@@ -162,7 +162,6 @@ replace = "version = \"{new_version}\""
 [[tool.bumpversion.files]]
 filename = "./setup.py"
 
-
 [tool.ruff]
 # This section is managed by the plugin template. Do not edit manually.
 line-length = 100
@@ -174,6 +173,7 @@ extend-exclude = [
 
 [tool.ruff.lint]
 # This section is managed by the plugin template. Do not edit manually.
+select = ["E4", "E7", "E9", "F"]
 extend-select = [
   "I",
   "INT",
@@ -184,6 +184,7 @@ extend-select = [
 [tool.ruff.lint.flake8-tidy-imports.banned-api]
 # This section is managed by the plugin template. Do not edit manually.
 "distutils".msg = "The 'distutils' module has been deprecated since Python 3.9."
+"pulpcore.app.settings".msg = "Always import 'settings' from 'django.conf' instead."
 
 [tool.ruff.lint.isort]
 # This section is managed by the plugin template. Do not edit manually.

{pulpcore-3.63.43 → pulpcore-3.63.45}/setup.py

@@ -8,7 +8,7 @@ with open("requirements.txt") as requirements:
 
 setup(
     name="pulpcore",
-    version="3.63.43",
+    version="3.63.45",
     description="Pulp Django Application and Related Modules",
     long_description=long_description,
     long_description_content_type="text/markdown",