NeoAnd/netbox
1
0
Fork 0
mirror of https://github.com/netbox-community/netbox.git synced 2025-07-25 18:08:38 -06:00
Code Issues Actions 7 Packages Projects Releases Wiki Activity

Restrict querysets for home, search views

Browse Source
This commit is contained in:
Jeremy Stretch 2020-06-01 13:36:57 -04:00
parent b6c38ceb73
commit a4af270ea8
1 changed files with 22 additions and 23 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

45
netbox/netbox/views.py
View File

@ -194,52 +194,51 @@ class HomeView(View):
def get(self, request): def get(self, request):
connected_consoleports = ConsolePort.objects.filter( connected_consoleports = ConsolePort.objects.restrict(request.user, 'view').filter(
connected_endpoint__isnull=False connected_endpoint__isnull=False
) )
connected_powerports = PowerPort.objects.filter( connected_powerports = PowerPort.objects.restrict(request.user, 'view').filter(
_connected_poweroutlet__isnull=False _connected_poweroutlet__isnull=False
) )
connected_interfaces = Interface.objects.filter( connected_interfaces = Interface.objects.restrict(request.user, 'view').filter(
_connected_interface__isnull=False, _connected_interface__isnull=False,
pk__lt=F('_connected_interface') pk__lt=F('_connected_interface')
) )
cables = Cable.objects.all()
stats = { stats = {
# Organization # Organization
'site_count': Site.objects.count(), 'site_count': Site.objects.restrict(request.user, 'view').count(),
'tenant_count': Tenant.objects.count(), 'tenant_count': Tenant.objects.restrict(request.user, 'view').count(),
# DCIM # DCIM
'rack_count': Rack.objects.count(), 'rack_count': Rack.objects.restrict(request.user, 'view').count(),
'devicetype_count': DeviceType.objects.count(), 'devicetype_count': DeviceType.objects.restrict(request.user, 'view').count(),
'device_count': Device.objects.count(), 'device_count': Device.objects.restrict(request.user, 'view').count(),
'interface_connections_count': connected_interfaces.count(), 'interface_connections_count': connected_interfaces.count(),
'cable_count': cables.count(), 'cable_count': Cable.objects.restrict(request.user, 'view').count(),
'console_connections_count': connected_consoleports.count(), 'console_connections_count': connected_consoleports.count(),
'power_connections_count': connected_powerports.count(), 'power_connections_count': connected_powerports.count(),
'powerpanel_count': PowerPanel.objects.count(), 'powerpanel_count': PowerPanel.objects.restrict(request.user, 'view').count(),
'powerfeed_count': PowerFeed.objects.count(), 'powerfeed_count': PowerFeed.objects.restrict(request.user, 'view').count(),
# IPAM # IPAM
'vrf_count': VRF.objects.count(), 'vrf_count': VRF.objects.restrict(request.user, 'view').count(),
'aggregate_count': Aggregate.objects.count(), 'aggregate_count': Aggregate.objects.restrict(request.user, 'view').count(),
'prefix_count': Prefix.objects.count(), 'prefix_count': Prefix.objects.restrict(request.user, 'view').count(),
'ipaddress_count': IPAddress.objects.count(), 'ipaddress_count': IPAddress.objects.restrict(request.user, 'view').count(),
'vlan_count': VLAN.objects.count(), 'vlan_count': VLAN.objects.restrict(request.user, 'view').count(),
# Circuits # Circuits
'provider_count': Provider.objects.count(), 'provider_count': Provider.objects.restrict(request.user, 'view').count(),
'circuit_count': Circuit.objects.count(), 'circuit_count': Circuit.objects.restrict(request.user, 'view').count(),
# Secrets # Secrets
'secret_count': Secret.objects.count(), 'secret_count': Secret.objects.restrict(request.user, 'view').count(),
# Virtualization # Virtualization
'cluster_count': Cluster.objects.count(), 'cluster_count': Cluster.objects.restrict(request.user, 'view').count(),
'virtualmachine_count': VirtualMachine.objects.count(), 'virtualmachine_count': VirtualMachine.objects.restrict(request.user, 'view').count(),
} }
@ -293,7 +292,7 @@ class SearchView(View):
for obj_type in obj_types: for obj_type in obj_types:
queryset = SEARCH_TYPES[obj_type]['queryset'] queryset = SEARCH_TYPES[obj_type]['queryset'].restrict(request.user, 'view')
filterset = SEARCH_TYPES[obj_type]['filterset'] filterset = SEARCH_TYPES[obj_type]['filterset']
table = SEARCH_TYPES[obj_type]['table'] table = SEARCH_TYPES[obj_type]['table']
url = SEARCH_TYPES[obj_type]['url'] url = SEARCH_TYPES[obj_type]['url']