NeoAnd/netbox
1
0
Fork 0
mirror of https://github.com/netbox-community/netbox.git synced 2025-08-08 00:28:16 -06:00
Code Issues Actions 16 Packages Projects Releases Wiki Activity

Fixes: #16292 - Properly restrict GraphQL queries for querys with pk set

Browse Source
This commit is contained in:
Daniel Sheppard 2024-08-22 10:37:02 -05:00
parent 96802b4edb
commit 1e6d8dfb18
2 changed files with 18 additions and 49 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

66
netbox/ipam/graphql/schema.py
View File

@ -7,84 +7,52 @@ from ipam import models
from .types import * from .types import *
@strawberry.type @strawberry.type(name="Query")
class IPAMQuery: class IPAMQuery:
@strawberry.field asn: ASNType = strawberry_django.field()
def asn(self, id: int) -> ASNType:
return models.ASN.objects.get(pk=id)
asn_list: List[ASNType] = strawberry_django.field() asn_list: List[ASNType] = strawberry_django.field()
@strawberry.field asn_range: ASNRangeType = strawberry_django.field()
def asn_range(self, id: int) -> ASNRangeType:
return models.ASNRange.objects.get(pk=id)
asn_range_list: List[ASNRangeType] = strawberry_django.field() asn_range_list: List[ASNRangeType] = strawberry_django.field()
@strawberry.field aggregate: AggregateType = strawberry_django.field()
def aggregate(self, id: int) -> AggregateType:
return models.Aggregate.objects.get(pk=id)
aggregate_list: List[AggregateType] = strawberry_django.field() aggregate_list: List[AggregateType] = strawberry_django.field()
@strawberry.field ip_address: IPAddressType = strawberry_django.field()
def ip_address(self, id: int) -> IPAddressType:
return models.IPAddress.objects.get(pk=id)
ip_address_list: List[IPAddressType] = strawberry_django.field() ip_address_list: List[IPAddressType] = strawberry_django.field()
@strawberry.field ip_range: IPRangeType = strawberry_django.field()
def ip_range(self, id: int) -> IPRangeType:
return models.IPRange.objects.get(pk=id)
ip_range_list: List[IPRangeType] = strawberry_django.field() ip_range_list: List[IPRangeType] = strawberry_django.field()
@strawberry.field prefix: PrefixType = strawberry_django.field()
def prefix(self, id: int) -> PrefixType:
return models.Prefix.objects.get(pk=id)
prefix_list: List[PrefixType] = strawberry_django.field() prefix_list: List[PrefixType] = strawberry_django.field()
@strawberry.field rir: RIRType = strawberry_django.field()
def rir(self, id: int) -> RIRType:
return models.RIR.objects.get(pk=id)
rir_list: List[RIRType] = strawberry_django.field() rir_list: List[RIRType] = strawberry_django.field()
@strawberry.field role: RoleType = strawberry_django.field()
def role(self, id: int) -> RoleType:
return models.Role.objects.get(pk=id)
role_list: List[RoleType] = strawberry_django.field() role_list: List[RoleType] = strawberry_django.field()
@strawberry.field route_target: RouteTargetType = strawberry_django.field()
def route_target(self, id: int) -> RouteTargetType:
return models.RouteTarget.objects.get(pk=id)
route_target_list: List[RouteTargetType] = strawberry_django.field() route_target_list: List[RouteTargetType] = strawberry_django.field()
@strawberry.field service: ServiceType = strawberry_django.field()
def service(self, id: int) -> ServiceType:
return models.Service.objects.get(pk=id)
service_list: List[ServiceType] = strawberry_django.field() service_list: List[ServiceType] = strawberry_django.field()
@strawberry.field service_template: ServiceTemplateType = strawberry_django.field()
def service_template(self, id: int) -> ServiceTemplateType:
return models.ServiceTemplate.objects.get(pk=id)
service_template_list: List[ServiceTemplateType] = strawberry_django.field() service_template_list: List[ServiceTemplateType] = strawberry_django.field()
@strawberry.field fhrp_group: FHRPGroupType = strawberry_django.field()
def fhrp_group(self, id: int) -> FHRPGroupType:
return models.FHRPGroup.objects.get(pk=id)
fhrp_group_list: List[FHRPGroupType] = strawberry_django.field() fhrp_group_list: List[FHRPGroupType] = strawberry_django.field()
@strawberry.field fhrp_group_assignment: FHRPGroupAssignmentType = strawberry_django.field()
def fhrp_group_assignment(self, id: int) -> FHRPGroupAssignmentType:
return models.FHRPGroupAssignment.objects.get(pk=id)
fhrp_group_assignment_list: List[FHRPGroupAssignmentType] = strawberry_django.field() fhrp_group_assignment_list: List[FHRPGroupAssignmentType] = strawberry_django.field()
@strawberry.field vlan: VLANType = strawberry_django.field()
def vlan(self, id: int) -> VLANType:
return models.VLAN.objects.get(pk=id)
vlan_list: List[VLANType] = strawberry_django.field() vlan_list: List[VLANType] = strawberry_django.field()
@strawberry.field vlan_group: VLANGroupType = strawberry_django.field()
def vlan_group(self, id: int) -> VLANGroupType:
return models.VLANGroup.objects.get(pk=id)
vlan_group_list: List[VLANGroupType] = strawberry_django.field() vlan_group_list: List[VLANGroupType] = strawberry_django.field()
@strawberry.field vrf: VRFType = strawberry_django.field()
def vrf(self, id: int) -> VRFType:
return models.VRF.objects.get(pk=id)
vrf_list: List[VRFType] = strawberry_django.field() vrf_list: List[VRFType] = strawberry_django.field()

1
netbox/netbox/settings.py
View File

@ -764,6 +764,7 @@ LOCALE_PATHS = (
# #
STRAWBERRY_DJANGO = { STRAWBERRY_DJANGO = {
"TYPE_DESCRIPTION_FROM_MODEL_DOCSTRING": True, "TYPE_DESCRIPTION_FROM_MODEL_DOCSTRING": True,
"DEFAULT_PK_FIELD_NAME": "id",
"USE_DEPRECATED_FILTERS": True, "USE_DEPRECATED_FILTERS": True,
} }