perf: 优化授权规则 user-permission 用户授权相关的 API; 包括 assets, nodes, tree-asset, tree-node, tree-node-with-asset;

apps/perms/api/user_permission/tree/__init__.py

@@ -0,0 +1,3 @@
+from .asset import *
+from .node import *
+from .node_with_asset import *

apps/perms/api/user_permission/tree/asset.py

@@ -0,0 +1,48 @@
+from django.conf import settings
+from rest_framework.response import Response
+
+from assets.models import Asset
+from assets.api import SerializeToTreeNodeMixin
+from common.utils import get_logger
+
+from ..assets import UserDirectPermedAssetsApi
+from .mixin import RebuildTreeMixin
+
+logger = get_logger(__name__)
+
+
+__all__ = [
+    'UserDirectPermedAssetsAsTreeApi',
+    'UserUngroupAssetsAsTreeApi',
+]
+
+
+class AssetTreeMixin(RebuildTreeMixin, SerializeToTreeNodeMixin):
+    """ 将资产序列化成树节点的结构返回 """
+    filter_queryset: callable
+    get_queryset: callable
+
+    ordering = ('name',)
+    filterset_fields = ('id', 'name', 'address', 'comment')
+    search_fields = ('name', 'address', 'comment')
+
+    def list(self, request, *args, **kwargs):
+        assets = self.filter_queryset(self.get_queryset())
+        if request.query_params.get('search'):
+            """ 限制返回数量, 搜索的条件不精准时，会返回大量的无意义数据 """
+            assets = assets[:999]
+        data = self.serialize_assets(assets, None)
+        return Response(data=data)
+
+
+class UserDirectPermedAssetsAsTreeApi(AssetTreeMixin, UserDirectPermedAssetsApi):
+    """ 用户 '直接授权的资产' 作为树 """
+    pass
+
+
+class UserUngroupAssetsAsTreeApi(UserDirectPermedAssetsAsTreeApi):
+    """ 用户 '未分组节点的资产(直接授权的资产)' 作为树 """
+    def get_assets(self):
+        if settings.PERM_SINGLE_ASSET_TO_UNGROUP_NODE:
+            return super().get_assets()
+        return Asset.objects.none()

apps/perms/api/user_permission/tree/mixin.py

@@ -0,0 +1,17 @@
+from rest_framework.request import Request
+
+from users.models import User
+from perms.utils.user_permission import UserGrantedTreeRefreshController
+from common.http import is_true
+
+
+__all__ = ['RebuildTreeMixin']
+
+
+class RebuildTreeMixin:
+    user: User
+
+    def get(self, request: Request, *args, **kwargs):
+        force = is_true(request.query_params.get('rebuild_tree'))
+        UserGrantedTreeRefreshController(self.user).refresh_if_need(force)
+        return super().get(request, *args, **kwargs)

apps/perms/api/user_permission/tree/node.py

@@ -0,0 +1,39 @@
+from rest_framework.response import Response
+
+from assets.api import SerializeToTreeNodeMixin
+from common.utils import get_logger
+
+from .mixin import RebuildTreeMixin
+from ..nodes import (
+    UserAllPermedNodesApi,
+    UserPermedNodeChildrenApi,
+)
+
+logger = get_logger(__name__)
+
+__all__ = [
+    'UserAllPermedNodesAsTreeApi',
+    'UserPermedNodeChildrenAsTreeApi',
+]
+
+
+class NodeTreeMixin(RebuildTreeMixin, SerializeToTreeNodeMixin):
+    filter_queryset: callable
+    get_queryset: callable
+
+    def list(self, request, *args, **kwargs):
+        nodes = self.filter_queryset(self.get_queryset())
+        data = self.serialize_nodes(nodes, with_asset_amount=True)
+        return Response(data)
+
+
+class UserAllPermedNodesAsTreeApi(NodeTreeMixin, UserAllPermedNodesApi):
+    """ 用户 '授权的节点' 作为树 """
+    pass
+
+
+class UserPermedNodeChildrenAsTreeApi(NodeTreeMixin, UserPermedNodeChildrenApi):
+    """ 用户授权的节点下的子节点树 """
+    pass
+
+

apps/perms/api/user_permission/tree/node_with_asset.py

@@ -0,0 +1,125 @@
+import abc
+
+from django.conf import settings
+from django.db.models import F, Value, CharField
+from rest_framework.generics import ListAPIView
+from rest_framework.response import Response
+
+from assets.models import Asset
+from assets.api import SerializeToTreeNodeMixin
+from perms.hands import Node
+from perms.models import PermNode
+from perms.utils.user_permission import (
+    UserGrantedNodesQueryUtils, UserGrantedAssetsQueryUtils,
+)
+from perms.utils.permission import AssetPermissionUtil
+from common.utils import get_object_or_none, lazyproperty
+from common.utils.common import timeit
+
+
+from ..mixin import SelfOrPKUserMixin
+from .mixin import RebuildTreeMixin
+
+__all__ = [
+    'UserPermedNodesWithAssetsAsTreeApi',
+    'UserPermedNodeChildrenWithAssetsAsTreeApi'
+]
+
+
+class BaseUserNodeWithAssetAsTreeApi(SelfOrPKUserMixin, RebuildTreeMixin, SerializeToTreeNodeMixin,
+                                     ListAPIView):
+
+    def list(self, request, *args, **kwargs):
+        nodes, assets = self.get_nodes_assets()
+        tree_nodes = self.serialize_nodes(nodes, with_asset_amount=True)
+        tree_assets = self.serialize_assets(assets, node_key=self.node_key_for_serializer_assets)
+        data = list(tree_nodes) + list(tree_assets)
+        return Response(data=data)
+
+    @abc.abstractmethod
+    def get_nodes_assets(self):
+        return [], []
+
+    @lazyproperty
+    def node_key_for_serializer_assets(self):
+        return None
+
+
+class UserPermedNodesWithAssetsAsTreeApi(BaseUserNodeWithAssetAsTreeApi):
+    query_node_util: UserGrantedNodesQueryUtils
+    query_asset_util: UserGrantedAssetsQueryUtils
+
+    def get_nodes_assets(self):
+        perm_ids = AssetPermissionUtil().get_permissions_for_user(self.request.user, flat=True)
+        self.query_node_util = UserGrantedNodesQueryUtils(self.request.user, perm_ids)
+        self.query_asset_util = UserGrantedAssetsQueryUtils(self.request.user, perm_ids)
+        ung_nodes, ung_assets = self._get_nodes_assets_for_ungrouped()
+        fav_nodes, fav_assets = self._get_nodes_assets_for_favorite()
+        all_nodes, all_assets = self._get_nodes_assets_for_all()
+        nodes = list(ung_nodes) + list(fav_nodes) + list(all_nodes)
+        assets = list(ung_assets) + list(fav_assets) + list(all_assets)
+        return nodes, assets
+
+    @timeit
+    def _get_nodes_assets_for_ungrouped(self):
+        if not settings.PERM_SINGLE_ASSET_TO_UNGROUP_NODE:
+            return [], []
+        node = self.query_node_util.get_ungrouped_node()
+        assets = self.query_asset_util.get_ungroup_assets()
+        assets = assets.annotate(parent_key=Value(node.key, output_field=CharField())) \
+            .prefetch_related('platform')
+        return [node], assets
+
+    @timeit
+    def _get_nodes_assets_for_favorite(self):
+        node = self.query_node_util.get_favorite_node()
+        assets = self.query_asset_util.get_favorite_assets()
+        assets = assets.annotate(parent_key=Value(node.key, output_field=CharField())) \
+            .prefetch_related('platform')
+        return [node], assets
+
+    def _get_nodes_assets_for_all(self):
+        nodes = self.query_node_util.get_whole_tree_nodes(with_special=False)
+        if settings.PERM_SINGLE_ASSET_TO_UNGROUP_NODE:
+            assets = self.query_asset_util.get_direct_granted_nodes_assets()
+        else:
+            assets = self.query_asset_util.get_all_granted_assets()
+        assets = assets.annotate(parent_key=F('nodes__key')).prefetch_related('platform')
+        return nodes, assets
+
+
+class UserPermedNodeChildrenWithAssetsAsTreeApi(BaseUserNodeWithAssetAsTreeApi):
+    """ 用户授权的节点的子节点与资产树 """
+
+    def get_nodes_assets(self):
+        nodes = PermNode.objects.none()
+        assets = Asset.objects.none()
+        query_node_util = UserGrantedNodesQueryUtils(self.user)
+        query_asset_util = UserGrantedAssetsQueryUtils(self.user)
+        node_key = self.query_node_key
+        if not node_key:
+            nodes = query_node_util.get_top_level_nodes()
+        elif node_key == PermNode.UNGROUPED_NODE_KEY:
+            assets = query_asset_util.get_ungroup_assets()
+        elif node_key == PermNode.FAVORITE_NODE_KEY:
+            assets = query_asset_util.get_favorite_assets()
+        else:
+            nodes = query_node_util.get_node_children(node_key)
+            assets = query_asset_util.get_node_assets(node_key)
+        assets = assets.prefetch_related('platform')
+        return nodes, assets
+
+    @lazyproperty
+    def query_node_key(self):
+        node_key = self.request.query_params.get('key', None)
+        if node_key is not None:
+            return node_key
+        node_id = self.request.query_params.get('id', None)
+        node = get_object_or_none(Node, id=node_id)
+        node_key = getattr(node, 'key', None)
+        return node_key
+
+    @lazyproperty
+    def node_key_for_serializer_assets(self):
+        return self.query_node_key
+