15308555518/ MaxKB
1
0
Fork 0
mirror of https://github.com/1Panel-dev/MaxKB.git synced 2025-12-26 10:12:51 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

feat: add workspace validation to tool ID checks in serializers

This commit is contained in:
CaptainB 2025-07-08 12:40:42 +08:00
parent 8aa2c1437c
commit 8465ac67f0
1 changed files with 27 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

27
apps/tools/serializers/tool.py
View File

@ -288,6 +288,15 @@ class ToolSerializer(serializers.Serializer):
id = serializers.UUIDField(required=True, label=_('tool id'))
workspace_id = serializers.CharField(required=True, label=_('workspace id'))
def is_valid(self, *, raise_exception=False):
super().is_valid(raise_exception=True)
workspace_id = self.data.get('workspace_id')
query_set = QuerySet(Tool).filter(id=self.data.get('id'))
if workspace_id:
query_set = query_set.filter(workspace_id=workspace_id)
if not query_set.exists():
raise AppApiException(500, _('Tool id does not exist'))
def edit(self, instance, with_valid=True):
if with_valid:
self.is_valid(raise_exception=True)
@ -425,6 +434,15 @@ class ToolSerializer(serializers.Serializer):
user_id = serializers.UUIDField(required=True, label=_("User ID"))
image = UploadedImageField(required=True, label=_("picture"))
def is_valid(self, *, raise_exception=False):
super().is_valid(raise_exception=True)
workspace_id = self.data.get('workspace_id')
query_set = QuerySet(Tool).filter(id=self.data.get('id'))
if workspace_id:
query_set = query_set.filter(workspace_id=workspace_id)
if not query_set.exists():
raise AppApiException(500, _('Tool id does not exist'))
def edit(self, with_valid=True):
if with_valid:
self.is_valid(raise_exception=True)
@ -480,6 +498,15 @@ class ToolSerializer(serializers.Serializer):
workspace_id = serializers.CharField(required=True, label=_("workspace id"))
tool_id = serializers.UUIDField(required=True, label=_("tool id"))
def is_valid(self, *, raise_exception=False):
super().is_valid(raise_exception=True)
workspace_id = self.data.get('workspace_id')
query_set = QuerySet(Tool).filter(id=self.data.get('tool_id'))
if workspace_id:
query_set = query_set.filter(workspace_id=workspace_id)
if not query_set.exists():
raise AppApiException(500, _('Tool id does not exist'))
def add(self, instance, with_valid=True):
if with_valid:
self.is_valid(raise_exception=True)