# netbox-proxbox v0.0.11.post1

v0.0.11.post1 — Settings permission fix & sync improvements

| Field |Value |
| --- | --- |
| Canonical URL | https://emersonfelipesp.com/netbox-proxbox/releases/v0.0.11.post1 |
| GitHub URL | https://github.com/emersonfelipesp/netbox-proxbox/releases/tag/v0.0.11.post1 |
| Tag | v0.0.11.post1 |
| State | stable |
| Author | emersonfelipesp |
| Created | 2026-04-17 18:32 UTC |
| Published | 2026-04-17 18:43 UTC |
| Target | develop |
| Synced | 2026-08-25 06:41 UTC |
| Assets | 0 |

## Release notes

## What's Changed

### Bug Fixes

- **fix(api):** `ProxboxPluginSettingsViewSet` now overrides `get_permissions()` so GET/HEAD/OPTIONS require only `IsAuthenticated` instead of `ObjectPermissionRequiredMixin`. Any valid NetBox API token (v1 or v2) can read plugin settings without needing `view_proxboxpluginsettings` explicitly granted in NetBox admin. ([proxbox-api #45](https://github.com/emersonfelipesp/proxbox-api/issues/45))
- **fix(backend_sync):** Use `effective_token_value` for v1 token extraction in `_netbox_endpoint_backend_payload`; add fallback to FK token key for v2 when CharFields are empty; log warnings on missing credentials instead of silently sending an empty token.
- **fix(import):** Accept `version` and `repoid` headers in `ProxmoxEndpoint` CSV import.
- **fix(sync):** Retry on HTTP 429 (rate limit) responses during stage sync.
- **fix(api):** Add explicit `url` field to `NestedProxmoxStorageSerializer`.
- **fix(api):** Disable auto-generated `UniqueTogetherValidator` on `NestedProxmoxStorageSerializer` to prevent false validation errors.

### CI

- Gate PyPI publish on `validate-testpypi` (install + test matrix) instead of `e2e-docker-local`, so a pre-existing Docker infrastructure issue no longer blocks package release.
- Switch Proxmox mock container to `proxmox-sdk:dev-nginx` for HTTPS support in E2E stack.
- Various E2E mock data fixes: LXC mp0 disk, VM config types, cluster/resources id fields, snapshot subtype comparison.

### Root Cause (proxbox-api [#45](https://github.com/emersonfelipesp/proxbox-api/issues/45))

Two independent bugs caused HTTP 403 on `GET /api/plugins/proxbox/settings/`:

1. **This repo** — `ProxboxPluginSettingsViewSet` required explicit `view_proxboxpluginsettings` permission. Standard API tokens don't carry this by default. Fixed by overriding `get_permissions()` for safe HTTP methods.
2. **proxbox-api** — v2 auth header was built incorrectly (`nbt <key>:<secret>` instead of `Bearer nbt_<key>.<secret>`). Fixed in [proxbox-api v0.0.7.post1](https://github.com/emersonfelipesp/proxbox-api/releases/tag/v0.0.7.post1).

Both fixes together restore automatic token exchange between the plugin and the backend so `proxbox-api` can fetch `ProxboxPluginSettings` without manual permission setup.

## Assets

No binary assets attached.

Source archives:

| Format |URL |
| --- | --- |
| zip | https://api.github.com/repos/emersonfelipesp/netbox-proxbox/zipball/v0.0.11.post1 |
| tar.gz | https://api.github.com/repos/emersonfelipesp/netbox-proxbox/tarball/v0.0.11.post1 |