# -*- coding: utf-8 -*- # from rest_framework import generics from django.db.models import F, Value from django.db.models.functions import Concat from django.shortcuts import get_object_or_404 from orgs.mixins.api import OrgBulkModelViewSet from orgs.utils import current_org from common.permissions import IsOrgAdmin from .. import serializers from .. import models __all__ = [ 'AssetPermissionUserRelationViewSet', 'AssetPermissionUserGroupRelationViewSet', 'AssetPermissionAssetRelationViewSet', 'AssetPermissionNodeRelationViewSet', 'AssetPermissionSystemUserRelationViewSet', 'AssetPermissionAllAssetListApi', 'AssetPermissionAllUserListApi', ] class RelationMixin(OrgBulkModelViewSet): def get_queryset(self): queryset = self.model.objects.all() org_id = current_org.org_id() if org_id is not None: queryset = queryset.filter(assetpermission__org_id=org_id) queryset = queryset.annotate(assetpermission_display=F('assetpermission__name')) return queryset class AssetPermissionUserRelationViewSet(RelationMixin): serializer_class = serializers.AssetPermissionUserRelationSerializer model = models.AssetPermission.users.through permission_classes = (IsOrgAdmin,) filterset_fields = [ 'id', "user", "assetpermission", ] search_fields = ("user__name", "user__username", "assetpermission__name") def get_queryset(self): queryset = super().get_queryset() queryset = queryset \ .annotate(user_display=F('user__name')) return queryset class AssetPermissionAllUserListApi(generics.ListAPIView): permission_classes = (IsOrgAdmin,) serializer_class = serializers.AssetPermissionAllUserSerializer filter_fields = ("username", "name") search_fields = filter_fields def get_queryset(self): pk = self.kwargs.get("pk") perm = get_object_or_404(models.AssetPermission, pk=pk) users = perm.get_all_users().only( *self.serializer_class.Meta.only_fields ) return users class AssetPermissionUserGroupRelationViewSet(RelationMixin): serializer_class = serializers.AssetPermissionUserGroupRelationSerializer model = models.AssetPermission.user_groups.through permission_classes = (IsOrgAdmin,) filterset_fields = [ 'id', "usergroup", "assetpermission" ] search_fields = ["usergroup__name", "assetpermission__name"] def get_queryset(self): queryset = super().get_queryset() queryset = queryset \ .annotate(usergroup_display=F('usergroup__name')) return queryset class AssetPermissionAssetRelationViewSet(RelationMixin): serializer_class = serializers.AssetPermissionAssetRelationSerializer model = models.AssetPermission.assets.through permission_classes = (IsOrgAdmin,) filterset_fields = [ 'id', 'asset', 'assetpermission', ] search_fields = ["id", "asset__hostname", "asset__ip", "assetpermission__name"] def get_queryset(self): queryset = super().get_queryset() queryset = queryset \ .annotate(asset_display=F('asset__hostname')) return queryset class AssetPermissionAllAssetListApi(generics.ListAPIView): permission_classes = (IsOrgAdmin,) serializer_class = serializers.AssetPermissionAllAssetSerializer filter_fields = ("hostname", "ip") search_fields = filter_fields def get_queryset(self): pk = self.kwargs.get("pk") perm = get_object_or_404(models.AssetPermission, pk=pk) assets = perm.get_all_assets().only( *self.serializer_class.Meta.only_fields ) return assets class AssetPermissionNodeRelationViewSet(RelationMixin): serializer_class = serializers.AssetPermissionNodeRelationSerializer model = models.AssetPermission.nodes.through permission_classes = (IsOrgAdmin,) filterset_fields = [ 'id', 'node', 'assetpermission', ] search_fields = ["node__value", "assetpermission__name"] def get_queryset(self): queryset = super().get_queryset() queryset = queryset \ .annotate(node_key=F('node__key')) return queryset class AssetPermissionSystemUserRelationViewSet(RelationMixin): serializer_class = serializers.AssetPermissionSystemUserRelationSerializer model = models.AssetPermission.system_users.through permission_classes = (IsOrgAdmin,) filterset_fields = [ 'id', 'systemuser', 'assetpermission', ] search_fields = [ "assetpermission__name", "systemuser__name", "systemuser__username" ] def get_queryset(self): queryset = super().get_queryset() queryset = queryset \ .annotate(systemuser_display=Concat( F('systemuser__name'), Value('('), F('systemuser__username'), Value(')') )) return queryset