AlanCoding

(awx) bash-5.1$ py.test awx/main/tests/functional/api/test_instance_group.py::test_instance_group_order_persistence awx/main/tests/docs/test_swagger_generation.py::TestSwaggerGeneration::test_sanity
========================================== test session starts ==========================================
platform linux -- Python 3.11.7, pytest-8.1.1, pluggy-1.5.0
django: version: 4.2.6, settings: awx.main.tests.settings_for_test (from ini)
rootdir: /awx_devel
configfile: pytest.ini
plugins: anyio-4.3.0, django-test-migrations-1.3.0, asyncio-0.23.6, cov-5.0.0, django-4.8.0, forked-1.6.0, mock-1.11.1, timeout-2.3.1, xdist-1.34.0
asyncio: mode=Mode.STRICT
collected 4 items                                                                                       

AlanCoding

-- Detecting notnull changes not implemented for this database backend

BEGIN;
-- Application: main
-- Model: Role
ALTER TABLE "main_rbac_roles"
	MODIFY "object_id" integer;
-- Model: RoleAncestorEntry
ALTER TABLE "main_rbac_role_ancestors"
	MODIFY "content_type_id" integer;

AlanCoding

{
    "count": 1,
    "next": null,
    "previous": null,
    "results": [
        {
            "id": 14,
            "type": "user",
            "url": "/api/v2/users/14/",
            "related": {

AlanCoding

{
    "role_permissions": {
        "awx.credential": [
            "awx.use_credential",
            "awx.change_credential",
            "awx.delete_credential",
            "awx.view_credential"
        ],
        "awx.executionenvironment": [
            "awx.change_executionenvironment",

AlanCoding

$ cargo run --release
info: syncing channel updates for '1.76-x86_64-unknown-linux-gnu'
info: latest update on 2024-02-08, rust version 1.76.0 (07dca489a 2024-02-04)
info: downloading component 'cargo'
info: downloading component 'clippy'
info: downloading component 'rust-std' for 'aarch64-apple-darwin'
info: downloading component 'rust-std' for 'wasm32-wasi'
info: downloading component 'rust-std' for 'x86_64-apple-darwin'
info: downloading component 'rust-std'
info: downloading component 'rustc'

AlanCoding

{
    "count": 55,
    "next": "/api/v2/organizations/33/access_list/?page=2",
    "previous": null,
    "results": [
        {
            "id": 1,
            "type": "user",
            "url": "/api/v2/users/1/",
            "related": {

AlanCoding

system_administrator
    instancegroup.admin_role
    credential.admin_role
    organization.admin_role
    workflowjobtemplate.admin_role
    project.admin_role
    instancegroup.use_role
    instancegroup.read_role
    credential.use_role
    credential.read_role

AlanCoding

This contains commands to demo the fix in this patch:

ansible/awx#14433

Background

Postgres documents the types of locking it uses here:

https://www.postgresql.org/docs/current/explicit-locking.html

AlanCoding

awx=# \d main_organization;
                                             Table "public.main_organization"
               Column                |           Type           | Collation | Nullable |             Default              
-------------------------------------+--------------------------+-----------+----------+----------------------------------
 id                                  | integer                  |           | not null | generated by default as identity
 created                             | timestamp with time zone |           | not null | 
 modified                            | timestamp with time zone |           | not null | 
 description                         | text                     |           | not null | 
 name                                | character varying(512)   |           | not null | 
 created_by_id                       | integer                  |           |          | 

AlanCoding

diff --git a/awx/main/access.py b/awx/main/access.py
index 34008d47c6..b9e671018b 100644
--- a/awx/main/access.py
+++ b/awx/main/access.py
@@ -306,7 +306,7 @@ class BaseAccess(object):
          - creating a new resource, user must have permission if
            resource is specified in `data`
          - editing an existing resource, user must have permission to resource
-           in `data`, as well as existing related resource on `obj`
+           in `data`