Files
jumpserver/apps/assets/api/favorite_asset.py
LDX ec9e76e405 feat(assets): add user custom favorite folders (#16949)
* feat(assets): add user custom favorite folders

- Add FavoriteFolder model (per-user, nested via self parent FK)
- Add nullable folder FK on FavoriteAsset, allow one asset in multiple folders
- Add FavoriteFolderViewSet and folder filter on FavoriteAssetViewSet
- Serializer outputs asset_info for building connectable tree nodes
- Register favorite-folders route; exclude favoritefolder from rbac/audit

* feat(assets): register favorite-folders route and add migration

- Register favorite-folders router endpoint
- Add migration 0020 creating FavoriteFolder and folder FK on FavoriteAsset

* feat(rbac): exclude favoritefolder from permission management

Keep favoritefolder consistent with favoriteasset (user-owned, not RBAC managed)

* feat(audits): exclude FavoriteFolder from operate log
2026-06-26 16:29:25 +08:00

44 lines
1.4 KiB
Python

# -*- coding: utf-8 -*-
#
from rest_framework_bulk.generics import BulkModelViewSet
from common.permissions import IsValidUser
from orgs.utils import tmp_to_root_org
from ..models import FavoriteAsset, FavoriteFolder
from ..serializers import FavoriteAssetSerializer, FavoriteFolderSerializer
__all__ = ['FavoriteAssetViewSet', 'FavoriteFolderViewSet']
class FavoriteFolderViewSet(BulkModelViewSet):
serializer_class = FavoriteFolderSerializer
permission_classes = (IsValidUser,)
page_no_limit = True
def dispatch(self, request, *args, **kwargs):
with tmp_to_root_org():
return super().dispatch(request, *args, **kwargs)
def get_queryset(self):
return FavoriteFolder.objects.filter(user=self.request.user)
class FavoriteAssetViewSet(BulkModelViewSet):
serializer_class = FavoriteAssetSerializer
permission_classes = (IsValidUser,)
filterset_fields = ['asset', 'folder']
page_no_limit = True
def dispatch(self, request, *args, **kwargs):
with tmp_to_root_org():
return super().dispatch(request, *args, **kwargs)
def get_queryset(self):
queryset = FavoriteAsset.objects.filter(
user=self.request.user
).select_related('asset', 'asset__platform')
return queryset
def allow_bulk_destroy(self, qs, filtered):
return filtered.count() == 1