Squashed commit of the following:
commit 4081e22202693bd7c4ea00e95daad8e628c6fd5a
Author: Oliver Gorwits <oliver@cpan.org>
Date: Mon May 29 21:02:07 2023 +0100
large rename of check_acl* to acl_matches*
commit 3cfa284ddd24d68765c255578cc5c184afbdcd83
Author: Oliver Gorwits <oliver@cpan.org>
Date: Fri May 19 20:39:03 2023 +0100
update permission doc
commit 8c7bb93cc5e9fafb770f98f446e45cbd94b14894
Author: Oliver Gorwits <oliver@cpan.org>
Date: Wed May 17 21:50:07 2023 +0100
migrate most check_acl_only to acl_matches_only
commit c47f699f2a22f08f2f3e093ed0f24c891e6f9a82
Author: Oliver Gorwits <oliver@cpan.org>
Date: Wed May 17 21:39:19 2023 +0100
rename check_acl* to be acl_matches*
commit a884a22c3ab1f3262118c3a47ed8e25b0b0a7336
Author: Oliver Gorwits <oliver@cpan.org>
Date: Sun May 14 16:50:42 2023 +0100
update macsuck_no_deviceports to use acl_matches
commit 8c256af728721329b64d071fa529dfc844073ac6
Author: Oliver Gorwits <oliver@cpan.org>
Date: Sun May 7 22:54:33 2023 +0100
update hide_deviceports to use acl_matches multi @things
commit cd5d9978aba1da459be4fed4500f395df13f7784
Author: Oliver Gorwits <oliver@cpan.org>
Date: Sun May 7 22:53:38 2023 +0100
check_acl fix to allow all @things to offer a property before fallback to missing as empty string
commit 1a3ab9a7646e9f994f03126d45fc36e9e5a13ed5
Author: Oliver Gorwits <oliver@cpan.org>
Date: Tue May 2 15:31:17 2023 +0100
add ignore_deviceports to portproperties discover; improve comments
commit 51385ce89458dc939587dae902fda431719c22c9
Merge: b97c07d2 3f8ffe78
Author: Oliver Gorwits <oliver@cpan.org>
Date: Tue May 2 15:21:48 2023 +0100
Merge branch 'master' into og-acl_multidict
commit b97c07d237d750c1d9eb3095d8ff3908512eac2a
Author: Oliver Gorwits <oliver@cpan.org>
Date: Sat Mar 25 14:37:53 2023 +0000
add support for arrayref of items, and unblessed hash, to check_acl
282 lines
9.3 KiB
Perl
282 lines
9.3 KiB
Perl
package App::Netdisco::Web::Plugin::Device::Ports;
|
|
|
|
use Dancer ':syntax';
|
|
use Dancer::Plugin::DBIC;
|
|
use Dancer::Plugin::Auth::Extensible;
|
|
|
|
use App::Netdisco::Util::Permission 'acl_matches';
|
|
use App::Netdisco::Util::Port 'port_reconfig_check';
|
|
use App::Netdisco::Util::Web (); # for sort_port
|
|
use App::Netdisco::Web::Plugin;
|
|
|
|
register_device_tab({ tag => 'ports', label => 'Ports', provides_csv => 1 });
|
|
|
|
# device ports with a description (er, name) matching
|
|
get '/ajax/content/device/ports' => require_login sub {
|
|
my $q = param('q');
|
|
my $prefer = param('prefer');
|
|
$prefer = ''
|
|
unless defined $prefer and $prefer =~ m/^(?:port|name|vlan)$/;
|
|
|
|
my $device = schema(vars->{'tenant'})->resultset('Device')
|
|
->search_for_device($q) or send_error('Bad device', 400);
|
|
my $set = $device->ports->with_properties->with_custom_fields;
|
|
|
|
# refine by ports if requested
|
|
my $f = param('f');
|
|
if ($f) {
|
|
if (($prefer eq 'vlan') or (not $prefer and $f =~ m/^\d+$/)) {
|
|
return unless $f =~ m/^\d+$/;
|
|
}
|
|
else {
|
|
if (param('partial')) {
|
|
# change wildcard chars to SQL
|
|
$f =~ s/\*/%/g;
|
|
$f =~ s/\?/_/g;
|
|
# set wildcards at param boundaries
|
|
if ($f !~ m/[%_]/) {
|
|
$f =~ s/^\%*/%/;
|
|
$f =~ s/\%*$/%/;
|
|
}
|
|
# enable ILIKE op
|
|
$f = { (param('invert') ? '-not_ilike' : '-ilike') => $f };
|
|
}
|
|
elsif (param('invert')) {
|
|
$f = { '!=' => $f };
|
|
}
|
|
|
|
if (($prefer eq 'port') or not $prefer and
|
|
$set->search({-or => ['me.port' => $f, 'me.descr' => $f]})->count) {
|
|
|
|
$set = $set->search({
|
|
-or => [
|
|
'me.port' => $f,
|
|
'me.descr' => $f,
|
|
'me.slave_of' => $f,
|
|
],
|
|
});
|
|
}
|
|
else {
|
|
$set = $set->search({'me.name' => $f});
|
|
return unless $set->count;
|
|
}
|
|
}
|
|
}
|
|
|
|
# filter for port status if asked
|
|
my %port_state = map {$_ => 1}
|
|
(ref [] eq ref param('port_state') ? @{param('port_state')}
|
|
: param('port_state') ? param('port_state') : ());
|
|
|
|
return unless scalar keys %port_state;
|
|
|
|
if (exists $port_state{free}) {
|
|
if (scalar keys %port_state == 1) {
|
|
$set = $set->only_free_ports({
|
|
age_num => (param('age_num') || 3),
|
|
age_unit => (param('age_unit') || 'months')
|
|
});
|
|
}
|
|
else {
|
|
$set = $set->with_is_free({
|
|
age_num => (param('age_num') || 3),
|
|
age_unit => (param('age_unit') || 'months')
|
|
});
|
|
}
|
|
delete $port_state{free};
|
|
# showing free ports requires showing down ports
|
|
++$port_state{down};
|
|
}
|
|
|
|
if (scalar keys %port_state < 3) {
|
|
my @combi = ();
|
|
|
|
push @combi, {'me.up' => 'up'}
|
|
if exists $port_state{up};
|
|
push @combi, {'me.up_admin' => 'up', 'me.up' => { '!=' => 'up'}}
|
|
if exists $port_state{down};
|
|
push @combi, {'me.up_admin' => { '!=' => 'up'}}
|
|
if exists $port_state{shut};
|
|
|
|
$set = $set->search({-or => \@combi});
|
|
}
|
|
|
|
# so far only the basic device_port data
|
|
# now begin to join tables depending on the selected columns/options
|
|
|
|
# get vlans on the port
|
|
# leave this query dormant (lazy) unless c_vmember is set or vlan filtering
|
|
my $vlans = $set->search(
|
|
{ param('p_hide1002') ?
|
|
(-or => ['port_vlans.vlan' => {'<', '1002'},
|
|
'port_vlans.vlan' => {'>', '1005'}]) : ()
|
|
}, {
|
|
select => [
|
|
'port',
|
|
{ count => 'port_vlans.vlan', -as => 'vlan_count' },
|
|
{ array_agg => \q{port_vlans.vlan ORDER BY port_vlans.vlan}, -as => 'vlan_set' },
|
|
{ array_agg => \q{COALESCE(NULLIF(vlan_entry.description,''), vlan_entry.vlan::text) ORDER BY vlan_entry.vlan}, -as => 'vlan_name_set' },
|
|
],
|
|
join => {'port_vlans' => 'vlan_entry'},
|
|
group_by => 'me.port',
|
|
});
|
|
|
|
if (param('c_vmember') or ($prefer eq 'vlan') or (not $prefer and $f =~ m/^\d+$/)) {
|
|
$vlans = { map {(
|
|
$_->port => {
|
|
# DBIC smart enough to work out this should be an arrayref :)
|
|
vlan_count => $_->get_column('vlan_count'),
|
|
vlan_set => $_->get_column('vlan_set'),
|
|
vlan_name_set => $_->get_column('vlan_name_set'),
|
|
},
|
|
)} $vlans->all };
|
|
}
|
|
|
|
if (param('p_vlan_names')) {
|
|
$set = $set->search({}, {
|
|
'join' => 'native_vlan',
|
|
'+select' => [qw/native_vlan.description/],
|
|
'+as' => [qw/native_vlan_name/],
|
|
});
|
|
}
|
|
|
|
# get aggregate master status (self join)
|
|
$set = $set->search({}, {
|
|
'join' => 'agg_master',
|
|
'+select' => [qw/agg_master.up_admin agg_master.up/],
|
|
'+as' => [qw/agg_master_up_admin agg_master_up/],
|
|
});
|
|
|
|
# make sure query asks for formatted timestamps when needed
|
|
$set = $set->with_times if param('c_lastchange');
|
|
|
|
# what kind of nodes are we interested in?
|
|
my $nodes_name = (param('n_archived') ? 'nodes' : 'active_nodes');
|
|
$nodes_name .= '_with_age' if param('n_age');
|
|
|
|
my $ips_name = ((param('n_ip4') and param('n_ip6')) ? 'ips'
|
|
: param('n_ip4') ? 'ip4s'
|
|
: 'ip6s');
|
|
|
|
if (param('c_nodes')) {
|
|
# retrieve active/all connected nodes, if asked for
|
|
$set = $set->search({}, { prefetch => [{$nodes_name => $ips_name}] });
|
|
$set = $set->search({}, { order_by => ["${nodes_name}.vlan", "${nodes_name}.mac", "${ips_name}.ip"] });
|
|
|
|
# retrieve wireless SSIDs, if asked for
|
|
$set = $set->search({}, { prefetch => [{$nodes_name => 'wireless'}] })
|
|
if param('n_ssid');
|
|
|
|
# retrieve NetBIOS, if asked for
|
|
$set = $set->search({}, { prefetch => [{$nodes_name => 'netbios'}] })
|
|
if param('n_netbios');
|
|
|
|
# retrieve vendor, if asked for
|
|
$set = $set->search({}, { prefetch => [{$nodes_name => 'oui'}] })
|
|
if param('n_vendor');
|
|
}
|
|
|
|
# retrieve SSID, if asked for
|
|
$set = $set->search({}, { prefetch => 'ssid' })
|
|
if param('c_ssid');
|
|
|
|
# retrieve neighbor devices, if asked for
|
|
#$set = $set->search({}, { prefetch => [{neighbor_alias => 'device'}] })
|
|
# if param('c_neighbors');
|
|
# retrieve neighbor devices, if asked for
|
|
$set = $set->search({}, {
|
|
join => 'neighbor_alias',
|
|
'+select' => ['neighbor_alias.ip', 'neighbor_alias.dns'],
|
|
'+as' => ['neighbor_ip', 'neighbor_dns'],
|
|
}) if param('c_neighbors');
|
|
|
|
# also get remote LLDP inventory if asked for
|
|
$set = $set->with_remote_inventory if param('n_inventory');
|
|
|
|
# run query
|
|
my @results = $set->all;
|
|
|
|
# filter for tagged vlan using existing agg query,
|
|
# which is better than join inflation
|
|
if (($prefer eq 'vlan') or (not $prefer and $f =~ m/^\d+$/)) {
|
|
if (param('invert')) {
|
|
@results = grep {
|
|
(!defined $_->vlan or $_->vlan ne $f)
|
|
and
|
|
(0 == scalar grep {defined and $_ ne $f} @{ $vlans->{$_->port}->{vlan_set} })
|
|
} @results;
|
|
}
|
|
else {
|
|
@results = grep {
|
|
(defined $_->vlan and $_->vlan eq $f)
|
|
or
|
|
(scalar grep {defined and $_ eq $f} @{ $vlans->{$_->port}->{vlan_set} })
|
|
} @results;
|
|
}
|
|
}
|
|
|
|
# filter out hidden ones
|
|
if (not param('p_include_hidden')) {
|
|
my $port_map = {};
|
|
my %to_hide = ();
|
|
|
|
map { push @{ $port_map->{$_->port} }, $_ }
|
|
grep { $_->port }
|
|
@results;
|
|
|
|
map { push @{ $port_map->{$_->port} }, $_ }
|
|
grep { $_->port }
|
|
$device->device_ips()->all;
|
|
|
|
foreach my $map (@{ setting('hide_deviceports')}) {
|
|
next unless ref {} eq ref $map;
|
|
|
|
foreach my $key (sort keys %$map) {
|
|
# lhs matches device, rhs matches port
|
|
next unless $key and $map->{$key};
|
|
next unless acl_matches($device, $key);
|
|
|
|
foreach my $port (sort keys %$port_map) {
|
|
next unless acl_matches($port_map->{$port}, $map->{$key});
|
|
++$to_hide{$port};
|
|
}
|
|
}
|
|
}
|
|
|
|
@results = grep { ! exists $to_hide{$_->port} } @results;
|
|
}
|
|
|
|
# sort ports
|
|
@results = sort { &App::Netdisco::Util::Web::sort_port($a->port, $b->port) } @results;
|
|
|
|
# add acl on port config
|
|
if (param('c_admin') and user_has_role('port_control')) {
|
|
map {$_->{portctl} = (port_reconfig_check($_) ? false : true)} @results;
|
|
}
|
|
|
|
# empty set would be a 'no records' msg
|
|
return unless scalar @results;
|
|
|
|
if (request->is_ajax) {
|
|
template 'ajax/device/ports.tt', {
|
|
results => \@results,
|
|
nodes => $nodes_name,
|
|
ips => $ips_name,
|
|
device => $device,
|
|
vlans => $vlans,
|
|
}, { layout => 'noop' };
|
|
}
|
|
else {
|
|
header( 'Content-Type' => 'text/comma-separated-values' );
|
|
template 'ajax/device/ports_csv.tt', {
|
|
results => \@results,
|
|
nodes => $nodes_name,
|
|
ips => $ips_name,
|
|
device => $device,
|
|
vlans => $vlans,
|
|
}, { layout => 'noop' };
|
|
}
|
|
};
|
|
|
|
true;
|