mirror/netbox-community-netbox
1
0
Fork 0
mirror of https://github.com/netbox-community/netbox.git synced 2024-05-10 07:54:54 +00:00
Code Activity

Fix queryset restrictions

Browse Source
This commit is contained in:
jeremystretch
2021-12-10 12:52:48 -05:00
parent 35eabc0353
commit 661b3c4bfb
1 changed files with 4 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
netbox/ipam/api/views.py
View File

@ -155,7 +155,7 @@ class AvailablePrefixesView(ObjectValidationMixin, APIView):
queryset = Prefix.objects.all() queryset = Prefix.objects.all()
def get(self, request, pk): def get(self, request, pk):
prefix = get_object_or_404(self.queryset.restrict(request.user), pk=pk) prefix = get_object_or_404(Prefix.objects.restrict(request.user), pk=pk)
available_prefixes = prefix.get_available_prefixes() available_prefixes = prefix.get_available_prefixes()
serializer = serializers.AvailablePrefixSerializer(available_prefixes.iter_cidrs(), many=True, context={ serializer = serializers.AvailablePrefixSerializer(available_prefixes.iter_cidrs(), many=True, context={
@ -167,7 +167,8 @@ class AvailablePrefixesView(ObjectValidationMixin, APIView):
@advisory_lock(ADVISORY_LOCK_KEYS['available-prefixes']) @advisory_lock(ADVISORY_LOCK_KEYS['available-prefixes'])
def post(self, request, pk): def post(self, request, pk):
prefix = get_object_or_404(self.queryset.restrict(request.user), pk=pk) self.queryset = self.queryset.restrict(request.user, 'add')
prefix = get_object_or_404(Prefix.objects.restrict(request.user), pk=pk)
available_prefixes = prefix.get_available_prefixes() available_prefixes = prefix.get_available_prefixes()
# Validate Requested Prefixes' length # Validate Requested Prefixes' length
@ -262,6 +263,7 @@ class AvailableIPAddressesView(ObjectValidationMixin, APIView):
@advisory_lock(ADVISORY_LOCK_KEYS['available-ips']) @advisory_lock(ADVISORY_LOCK_KEYS['available-ips'])
def post(self, request, pk): def post(self, request, pk):
self.queryset = self.queryset.restrict(request.user, 'add')
parent = self.get_parent(request, pk) parent = self.get_parent(request, pk)
# Normalize to a list of objects # Normalize to a list of objects