>Tf rddlmZmZddlmZddlmZmZmZdZ GddeZ GddeZ d S) )PrefetchQuerySet)CONSTRAINT_TOKEN_USER)get_permission_for_modelpermission_is_exemptqs_filter_from_constraints)RestrictedPrefetchRestrictedQuerySetc.eZdZdZdfd ZfdZxZS)r z Extend Django's Prefetch to accept a user and action to be passed to the `restrict()` method of the related object's queryset. viewNcl||_||_t|||dS)N)querysetto_attr) restrict_userrestrict_actionsuper__init__)selflookupuseractionrr __class__s 8/var/www/html/netbox-4.1.3/netbox/utilities/querysets.pyrzRestrictedPrefetch.__init__s8!% (GDDDDDc|j|jdt|x}rfd|DSS)N)rrc*g|]}|jdiS))restrict).0qsparamss r z.s+>>>bKBK))&))>>>r)rrrget_current_querysets)rlevel querysetsr!rs @rr#z(RestrictedPrefetch.get_current_querysetss^&*   55e<< <9 ?>>>>I>>> >  r)r NN)__name__ __module__ __qualname____doc__rr# __classcell__)rs@rr r sfEEEEEE         rr ceZdZddZdS)r r ct|j|}|r|jst|r|}n||jr||vr|}nYt|i}t|j ||}|jj |}| |}|S)a Filter the QuerySet to return only objects on which the specified user has been granted the specified permission. :param user: User instance :param action: The action which must be permitted (e.g. "view" for "dcim.view_site"); default is 'view' N)pk__in) rmodel is_superuserris_authenticatedget_all_permissionsnonerr_object_perm_cacheobjectsfilter)rrrpermission_requiredr tokensattrsallowed_objectss rrzRestrictedQuerySet.restrict(s7tz6JJ  5D% 5)=>Q)R)R 5BB\!6\:MUYUmUmUoUo:o:oBB &tF/t/FGZ/[]cddE#j077>>OO44B rN)r )r&r'r(rrrrr r &s(rr N) django.db.modelsrrusers.constantsrutilities.permissionsrrr__all__r r rrrr>s////////111111llllllllll  4          r