Fixes #4071: Enforce "view tag" permission on individual tag view

docs/release-notes/version-2.7.md

@@ -12,6 +12,7 @@
 * [#4049](https://github.com/netbox-community/netbox/issues/4049) - Restore missing `tags` field in IPAM service serializer
 * [#4052](https://github.com/netbox-community/netbox/issues/4052) - Fix error when bulk importing interfaces to virtual machines
 * [#4056](https://github.com/netbox-community/netbox/issues/4056) - Repair schema migration for Rack.outer_unit (from #3569)
+* [#4071](https://github.com/netbox-community/netbox/issues/4071) - Enforce "view tag" permission on individual tag view
 
 ---
 

netbox/extras/tests/test_views.py

@@ -17,9 +17,6 @@ class TagTestCase(StandardTestCases.Views):
     test_create_object = None
     test_import_objects = None
 
-    # TODO: Restore test when #4071 is resolved
-    test_get_object = None
-
     @classmethod
     def setUpTestData(cls):
 

netbox/extras/views.py

@@ -37,7 +37,8 @@ class TagListView(PermissionRequiredMixin, ObjectListView):
     template_name = 'extras/tag_list.html'
 
 
-class TagView(View):
+class TagView(PermissionRequiredMixin, View):
+    permission_required = 'extras.view_tag'
 
     def get(self, request, slug):