mirror of https://github.com/jumpserver/jumpserver
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
57 lines
2.1 KiB
57 lines
2.1 KiB
from django.utils.translation import gettext as _ |
|
from django_filters import rest_framework as filters |
|
|
|
from common.drf.filters import BaseFilterSet |
|
from common.utils import is_uuid |
|
from rbac.models import Role, OrgRoleBinding, SystemRoleBinding |
|
from users.models.user import User |
|
from orgs.utils import current_org |
|
|
|
|
|
class UserFilter(BaseFilterSet): |
|
system_roles = filters.CharFilter(method='filter_system_roles') |
|
org_roles = filters.CharFilter(method='filter_org_roles') |
|
groups = filters.CharFilter(field_name="groups__name", lookup_expr='exact') |
|
group_id = filters.CharFilter(field_name="groups__id", lookup_expr='exact') |
|
exclude_group_id = filters.CharFilter( |
|
field_name="groups__id", lookup_expr='exact', exclude=True |
|
) |
|
|
|
class Meta: |
|
model = User |
|
fields = ( |
|
'id', 'username', 'email', 'name', |
|
'groups', 'group_id', 'exclude_group_id', |
|
'source', 'org_roles', 'system_roles', 'is_active', |
|
) |
|
|
|
@staticmethod |
|
def _get_role(value): |
|
from rbac.builtin import BuiltinRole |
|
roles = BuiltinRole.get_roles() |
|
for role in roles.values(): |
|
if _(role.name) == value: |
|
return role |
|
|
|
if is_uuid(value): |
|
return Role.objects.filter(id=value).first() |
|
else: |
|
return Role.objects.filter(name=value).first() |
|
|
|
def _filter_roles(self, queryset, value, scope): |
|
role = self._get_role(value) |
|
if not role: |
|
return queryset.none() |
|
|
|
rb_model = SystemRoleBinding if scope == Role.Scope.system.value else OrgRoleBinding |
|
user_ids = rb_model.objects.filter(role_id=role.id).values_list('user_id', flat=True) |
|
queryset = queryset.filter(id__in=user_ids).distinct() |
|
return queryset |
|
|
|
def filter_system_roles(self, queryset, name, value): |
|
queryset = self._filter_roles(queryset=queryset, value=value, scope=Role.Scope.system.value) |
|
return queryset |
|
|
|
def filter_org_roles(self, queryset, name, value): |
|
queryset = self._filter_roles(queryset=queryset, value=value, scope=Role.Scope.org.value) |
|
return queryset
|
|
|