Allows for plugin secrets to be updated (#1811)

* Allows for plugin secrets to be updated

* Adding plugin instance permissions

src/dispatch/models.py

@@ -6,7 +6,7 @@
 from pydantic.fields import Field
 from pydantic.networks import EmailStr
 from pydantic import BaseModel, validator
-from pydantic.types import conint, constr
+from pydantic.types import conint, constr, SecretStr
 
 from sqlalchemy import func
 from sqlalchemy.event import listens_for
@@ -115,9 +115,8 @@ class Config:
 
         json_encoders = {
             # custom output conversion for datetime
-            datetime: lambda v: v.strftime("%Y-%m-%dT%H:%M:%SZ")
-            if v
-            else None
+            datetime: lambda v: v.strftime("%Y-%m-%dT%H:%M:%SZ") if v else None,
+            SecretStr: lambda v: v.get_secret_value() if v else None,
         }
 
 

src/dispatch/plugin/views.py

@@ -25,13 +25,21 @@ def get_plugins(*, common: dict = Depends(common_parameters)):
     return search_filter_sort_paginate(model="Plugin", **common)
 
 
-@router.get("/instances", response_model=PluginInstancePagination)
+@router.get(
+    "/instances",
+    response_model=PluginInstancePagination,
+    dependencies=[Depends(PermissionsDependency([SensitiveProjectActionPermission]))],
+)
 def get_plugin_instances(*, common: dict = Depends(common_parameters)):
     """Get all plugin instances."""
     return search_filter_sort_paginate(model="PluginInstance", **common)
 
 
-@router.get("/instances/{plugin_instance_id}", response_model=PluginInstanceRead)
+@router.get(
+    "/instances/{plugin_instance_id}",
+    response_model=PluginInstanceRead,
+    dependencies=[Depends(PermissionsDependency([SensitiveProjectActionPermission]))],
+)
 def get_plugin_instance(*, db_session: Session = Depends(get_db), plugin_instance_id: PrimaryKey):
     """Get a plugin instance."""
     plugin = get_instance(db_session=db_session, plugin_instance_id=plugin_instance_id)