Machine users

epdb/views.py

@@ -1294,6 +1294,9 @@ def package(request, package_uuid):
         )
         users = users.filter(is_active=True).exclude(username="anonymous")
 
+        if not current_user.is_superuser:
+            users = users.exclude(principal_type=User.PrincipalType.APP)
+
         group_perms = GroupPackagePermission.objects.filter(package=current_package)
 
         if current_package.classification_level == current_package.Classification.SECRET:
@@ -1386,6 +1389,9 @@ def package(request, package_uuid):
         elif any([grantee_url, read, write, owner]):
             if "user" in grantee_url:
                 grantee = UserManager.get_user_lp(grantee_url)
+                if grantee.principal_type == current_user.PrincipalType.APP:
+                    if not request.user.is_superuser:
+                        return error(request, "You are not allowed to grant permissions to an app!")
             else:
                 grantee = GroupManager.get_group_lp(grantee_url)