mirror of
https://github.com/ansible/awx.git
synced 2024-10-31 23:51:09 +03:00
105 lines
3.4 KiB
Python
105 lines
3.4 KiB
Python
from django.http import HttpResponse
|
|
from django.views.decorators.csrf import csrf_exempt
|
|
from lib.main.models import *
|
|
from django.contrib.auth.models import User
|
|
from lib.main.serializers import *
|
|
from lib.main.rbac import *
|
|
from django.core.exceptions import PermissionDenied
|
|
from rest_framework import mixins
|
|
from rest_framework import generics
|
|
from rest_framework import permissions
|
|
from rest_framework.response import Response
|
|
from rest_framework import status
|
|
import exceptions
|
|
import datetime
|
|
from base_views import BaseList, BaseDetail, BaseSubList
|
|
|
|
class OrganizationsList(BaseList):
|
|
|
|
model = Organization
|
|
serializer_class = OrganizationSerializer
|
|
permission_classes = (CustomRbac,)
|
|
|
|
# I can see the organizations if:
|
|
# I am a superuser
|
|
# I am an admin of the organization
|
|
# I am a member of the organization
|
|
|
|
def _get_queryset(self):
|
|
''' I can see organizations when I am a superuser, or I am an admin or user in that organization '''
|
|
base = Organization.objects
|
|
if self.request.user.is_superuser:
|
|
return base.all()
|
|
return base.filter(
|
|
admins__in = [ self.request.user ]
|
|
).distinct() | base.filter(
|
|
users__in = [ self.request.user ]
|
|
).distinct()
|
|
|
|
class OrganizationsDetail(BaseDetail):
|
|
|
|
model = Organization
|
|
serializer_class = OrganizationSerializer
|
|
permission_classes = (CustomRbac,)
|
|
|
|
class OrganizationsAuditTrailList(BaseList):
|
|
|
|
model = AuditTrail
|
|
serializer_class = AuditTrailSerializer
|
|
permission_classes = (CustomRbac,)
|
|
|
|
class OrganizationsUsersList(BaseList):
|
|
|
|
model = User
|
|
serializer_class = UserSerializer
|
|
permission_classes = (CustomRbac,)
|
|
|
|
def _get_queryset(self):
|
|
''' to list users in the organization, I must be a superuser or org admin '''
|
|
organization = Organization.objects.get(pk=self.kwargs['pk'])
|
|
if not (self.request.user.is_superuser or self.request.user in organization.admins.all()):
|
|
raise PermissionDenied()
|
|
return User.objects.filter(organizations__in = [ organization ])
|
|
|
|
class OrganizationsAdminsList(BaseList):
|
|
|
|
model = User
|
|
serializer_class = UserSerializer
|
|
permission_classes = (CustomRbac,)
|
|
|
|
def _get_queryset(self):
|
|
''' to list admins in the organization, I must be a superuser or org admin '''
|
|
organization = Organization.objects.get(pk=self.kwargs['pk'])
|
|
if not self.request.user.is_superuser or self.request.user in organizations.admins.all():
|
|
raise PermissionDenied()
|
|
return User.objects.all(admin_of_organizations__in = [ organization ])
|
|
|
|
class OrganizationsProjectsList(BaseSubList):
|
|
|
|
model = Project
|
|
serializer_class = ProjectSerializer
|
|
permission_classes = (CustomRbac,)
|
|
|
|
parent_model = Organization # for sub list
|
|
relationship = 'projects' # " "
|
|
|
|
def _get_queryset(self):
|
|
''' to list projects in the organization, I must be a superuser or org admin '''
|
|
organization = Organization.objects.get(pk=self.kwargs['pk'])
|
|
if not (self.request.user.is_superuser or self.request.user in organization.admins.all()):
|
|
raise PermissionDenied()
|
|
return Project.objects.filter(organizations__in = [ organization ])
|
|
|
|
class OrganizationsTagsList(BaseList):
|
|
# FIXME: guts & tests
|
|
pass
|
|
|
|
class ProjectsDetail(BaseDetail):
|
|
|
|
model = Project
|
|
serializer_class = ProjectSerializer
|
|
permission_classes = (CustomRbac,)
|
|
|
|
|
|
|