jumpserver/apps/perms/api/database_app_permission_relation.py

# coding: utf-8
#
from rest_framework import generics
from django.db.models import F, Value
from django.db.models.functions import Concat
from django.shortcuts import get_object_or_404

from common.permissions import IsOrgAdmin
from .base import RelationViewSet
from .. import models, serializers

__all__ = [
    'DatabaseAppPermissionUserRelationViewSet',
    'DatabaseAppPermissionUserGroupRelationViewSet',
    'DatabaseAppPermissionAllUserListApi',
    'DatabaseAppPermissionDatabaseAppRelationViewSet',
    'DatabaseAppPermissionAllDatabaseAppListApi',
    'DatabaseAppPermissionSystemUserRelationViewSet',
]


class DatabaseAppPermissionUserRelationViewSet(RelationViewSet):
    serializer_class = serializers.DatabaseAppPermissionUserRelationSerializer
    m2m_field = models.DatabaseAppPermission.users.field
    permission_classes = (IsOrgAdmin,)
    filter_fields = [
        'id', 'user', 'databaseapppermission'
    ]
    search_fields = ('user__name', 'user__username', 'databaseapppermission__name')

    def get_queryset(self):
        queryset = super().get_queryset()
        queryset = queryset.annotate(user_display=F('user__name'))
        return queryset


class DatabaseAppPermissionUserGroupRelationViewSet(RelationViewSet):
    serializer_class = serializers.DatabaseAppPermissionUserGroupRelationSerializer
    m2m_field = models.DatabaseAppPermission.user_groups.field
    permission_classes = (IsOrgAdmin,)
    filter_fields = [
        'id', "usergroup", "databaseapppermission"
    ]
    search_fields = ["usergroup__name", "databaseapppermission__name"]

    def get_queryset(self):
        queryset = super().get_queryset()
        queryset = queryset \
            .annotate(usergroup_display=F('usergroup__name'))
        return queryset


class DatabaseAppPermissionAllUserListApi(generics.ListAPIView):
    permission_classes = (IsOrgAdmin,)
    serializer_class = serializers.DatabaseAppPermissionAllUserSerializer
    filter_fields = ("username", "name")
    search_fields = filter_fields

    def get_queryset(self):
        pk = self.kwargs.get("pk")
        perm = get_object_or_404(models.DatabaseAppPermission, pk=pk)
        users = perm.get_all_users().only(
            *self.serializer_class.Meta.only_fields
        )
        return users


class DatabaseAppPermissionDatabaseAppRelationViewSet(RelationViewSet):
    serializer_class = serializers.DatabaseAppPermissionDatabaseAppRelationSerializer
    m2m_field = models.DatabaseAppPermission.database_apps.field
    permission_classes = (IsOrgAdmin,)
    filter_fields = [
        'id', 'databaseapp', 'databaseapppermission',
    ]
    search_fields = [
        "id", "databaseapp__name", "databaseapppermission__name"
    ]

    def get_queryset(self):
        queryset = super().get_queryset()
        queryset = queryset \
            .annotate(databaseapp_display=F('databaseapp__name'))
        return queryset


class DatabaseAppPermissionAllDatabaseAppListApi(generics.ListAPIView):
    permission_classes = (IsOrgAdmin,)
    serializer_class = serializers.DatabaseAppPermissionAllDatabaseAppSerializer
    filter_fields = ("name",)
    search_fields = filter_fields

    def get_queryset(self):
        pk = self.kwargs.get("pk")
        perm = get_object_or_404(models.DatabaseAppPermission, pk=pk)
        database_apps = perm.get_all_database_apps().only(
            *self.serializer_class.Meta.only_fields
        )
        return database_apps


class DatabaseAppPermissionSystemUserRelationViewSet(RelationViewSet):
    serializer_class = serializers.DatabaseAppPermissionSystemUserRelationSerializer
    m2m_field = models.DatabaseAppPermission.system_users.field
    permission_classes = (IsOrgAdmin,)
    filter_fields = [
        'id', 'systemuser', 'databaseapppermission'
    ]
    search_fields = [
        'databaseapppermission__name', 'systemuser__name', 'systemuser__username'
    ]

    def get_queryset(self):
        queryset = super().get_queryset()
        queryset = queryset.annotate(
            systemuser_display=Concat(
                F('systemuser__name'), Value('('), F('systemuser__username'),
                Value(')')
            )
        )
        return queryset