from django.utils.translation import ugettext_lazy as _ from rest_framework import serializers from acls.models.base import ActionChoices from common.serializers.fields import LabeledChoiceField, ObjectRelatedField from orgs.models import Organization from users.models import User common_help_text = _( "Format for comma-delimited string, with * indicating a match all. " ) class ACLUsersSerializer(serializers.Serializer): username_group = serializers.ListField( default=["*"], child=serializers.CharField(max_length=128), label=_("Username"), help_text=common_help_text, ) class ACLAssestsSerializer(serializers.Serializer): address_group_help_text = _( "Format for comma-delimited string, with * indicating a match all. " "Such as: " "192.168.10.1, 192.168.1.0/24, 10.1.1.1-10.1.1.20, 2001:db8:2de::e13, 2001:db8:1a:1110::/64" " (Domain name support)" ) name_group = serializers.ListField( default=["*"], child=serializers.CharField(max_length=128), label=_("Name"), help_text=common_help_text, ) address_group = serializers.ListField( default=["*"], child=serializers.CharField(max_length=1024), label=_("IP/Host"), help_text=address_group_help_text, ) class ACLAccountsSerializer(serializers.Serializer): username_group = serializers.ListField( default=["*"], child=serializers.CharField(max_length=128), label=_("Username"), help_text=common_help_text, ) class BaseUserAssetAccountACLSerializerMixin(serializers.Serializer): users = ACLUsersSerializer(label=_('User')) assets = ACLAssestsSerializer(label=_('Asset')) accounts = ACLAccountsSerializer(label=_('Account')) users_username_group = serializers.ListField( source='users.username_group', read_only=True, child=serializers.CharField(), label=_('User (username)') ) assets_name_group = serializers.ListField( source='assets.name_group', read_only=True, child=serializers.CharField(), label=_('Asset (name)') ) assets_address_group = serializers.ListField( source='assets.address_group', read_only=True, child=serializers.CharField(), label=_('Asset (address)') ) accounts_username_group = serializers.ListField( source='accounts.username_group', read_only=True, child=serializers.CharField(), label=_('Account (username)') ) reviewers = ObjectRelatedField( queryset=User.objects, many=True, required=False, label=_('Reviewers') ) reviewers_amount = serializers.IntegerField( read_only=True, source="reviewers.count", label=_('Reviewers amount') ) action = LabeledChoiceField( choices=ActionChoices.choices, default=ActionChoices.reject, label=_("Action") ) class Meta: fields_mini = ["id", "name"] fields_small = fields_mini + [ 'users_username_group', 'assets_address_group', 'assets_name_group', 'accounts_username_group', "users", "accounts", "assets", "is_active", "date_created", "date_updated", "priority", "action", "comment", "created_by", "org_id", ] fields_m2m = ["reviewers", "reviewers_amount"] fields = fields_small + fields_m2m extra_kwargs = { "priority": {"default": 50}, "is_active": {"default": True}, } def validate_reviewers(self, reviewers): action = self.initial_data.get('action') if not action and self.instance: action = self.instance.action if action != ActionChoices.review: return reviewers org_id = self.fields["org_id"].default() org = Organization.get_instance(org_id) if not org: error = _("The organization `{}` does not exist".format(org_id)) raise serializers.ValidationError(error) users = org.get_members() valid_reviewers = list(set(reviewers) & set(users)) if not valid_reviewers: error = _( "None of the reviewers belong to Organization `{}`".format(org.name) ) raise serializers.ValidationError(error) return valid_reviewers