mirror of https://github.com/jumpserver/jumpserver
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
121 lines
4.1 KiB
121 lines
4.1 KiB
# coding: utf-8
|
|
#
|
|
from rest_framework import generics
|
|
from django.db.models import F, Value
|
|
from django.db.models.functions import Concat
|
|
from django.shortcuts import get_object_or_404
|
|
|
|
from common.permissions import IsOrgAdmin
|
|
from .base import RelationViewSet
|
|
from .. import models, serializers
|
|
|
|
__all__ = [
|
|
'DatabaseAppPermissionUserRelationViewSet',
|
|
'DatabaseAppPermissionUserGroupRelationViewSet',
|
|
'DatabaseAppPermissionAllUserListApi',
|
|
'DatabaseAppPermissionDatabaseAppRelationViewSet',
|
|
'DatabaseAppPermissionAllDatabaseAppListApi',
|
|
'DatabaseAppPermissionSystemUserRelationViewSet',
|
|
]
|
|
|
|
|
|
class DatabaseAppPermissionUserRelationViewSet(RelationViewSet):
|
|
serializer_class = serializers.DatabaseAppPermissionUserRelationSerializer
|
|
m2m_field = models.DatabaseAppPermission.users.field
|
|
permission_classes = (IsOrgAdmin,)
|
|
filter_fields = [
|
|
'id', 'user', 'databaseapppermission'
|
|
]
|
|
search_fields = ('user__name', 'user__username', 'databaseapppermission__name')
|
|
|
|
def get_queryset(self):
|
|
queryset = super().get_queryset()
|
|
queryset = queryset.annotate(user_display=F('user__name'))
|
|
return queryset
|
|
|
|
|
|
class DatabaseAppPermissionUserGroupRelationViewSet(RelationViewSet):
|
|
serializer_class = serializers.DatabaseAppPermissionUserGroupRelationSerializer
|
|
m2m_field = models.DatabaseAppPermission.user_groups.field
|
|
permission_classes = (IsOrgAdmin,)
|
|
filter_fields = [
|
|
'id', "usergroup", "databaseapppermission"
|
|
]
|
|
search_fields = ["usergroup__name", "databaseapppermission__name"]
|
|
|
|
def get_queryset(self):
|
|
queryset = super().get_queryset()
|
|
queryset = queryset \
|
|
.annotate(usergroup_display=F('usergroup__name'))
|
|
return queryset
|
|
|
|
|
|
class DatabaseAppPermissionAllUserListApi(generics.ListAPIView):
|
|
permission_classes = (IsOrgAdmin,)
|
|
serializer_class = serializers.DatabaseAppPermissionAllUserSerializer
|
|
filter_fields = ("username", "name")
|
|
search_fields = filter_fields
|
|
|
|
def get_queryset(self):
|
|
pk = self.kwargs.get("pk")
|
|
perm = get_object_or_404(models.DatabaseAppPermission, pk=pk)
|
|
users = perm.get_all_users().only(
|
|
*self.serializer_class.Meta.only_fields
|
|
)
|
|
return users
|
|
|
|
|
|
class DatabaseAppPermissionDatabaseAppRelationViewSet(RelationViewSet):
|
|
serializer_class = serializers.DatabaseAppPermissionDatabaseAppRelationSerializer
|
|
m2m_field = models.DatabaseAppPermission.database_apps.field
|
|
permission_classes = (IsOrgAdmin,)
|
|
filter_fields = [
|
|
'id', 'databaseapp', 'databaseapppermission',
|
|
]
|
|
search_fields = [
|
|
"id", "databaseapp__name", "databaseapppermission__name"
|
|
]
|
|
|
|
def get_queryset(self):
|
|
queryset = super().get_queryset()
|
|
queryset = queryset \
|
|
.annotate(databaseapp_display=F('databaseapp__name'))
|
|
return queryset
|
|
|
|
|
|
class DatabaseAppPermissionAllDatabaseAppListApi(generics.ListAPIView):
|
|
permission_classes = (IsOrgAdmin,)
|
|
serializer_class = serializers.DatabaseAppPermissionAllDatabaseAppSerializer
|
|
filter_fields = ("name",)
|
|
search_fields = filter_fields
|
|
|
|
def get_queryset(self):
|
|
pk = self.kwargs.get("pk")
|
|
perm = get_object_or_404(models.DatabaseAppPermission, pk=pk)
|
|
database_apps = perm.get_all_database_apps().only(
|
|
*self.serializer_class.Meta.only_fields
|
|
)
|
|
return database_apps
|
|
|
|
|
|
class DatabaseAppPermissionSystemUserRelationViewSet(RelationViewSet):
|
|
serializer_class = serializers.DatabaseAppPermissionSystemUserRelationSerializer
|
|
m2m_field = models.DatabaseAppPermission.system_users.field
|
|
permission_classes = (IsOrgAdmin,)
|
|
filter_fields = [
|
|
'id', 'systemuser', 'databaseapppermission'
|
|
]
|
|
search_fields = [
|
|
'databaseapppermission__name', 'systemuser__name', 'systemuser__username'
|
|
]
|
|
|
|
def get_queryset(self):
|
|
queryset = super().get_queryset()
|
|
queryset = queryset.annotate(
|
|
systemuser_display=Concat(
|
|
F('systemuser__name'), Value('('), F('systemuser__username'),
|
|
Value(')')
|
|
)
|
|
)
|
|
return queryset
|