ADD: check, if user can acces the vlan

middleware/net_suite/modules/user_nd/views.py

@@ -3,10 +3,22 @@ from net_suite.model import *
 from net_suite import app
 from net_suite.views import login_required, get_db_conn, db
 import requests
-from flask import render_template, request, flash, jsonify, redirect, url_for
+from flask import render_template, request, flash, jsonify, redirect, url_for, abort
 
 
 @user_nd.route('/vlans/<ni_name>/<vlan>/ports')
 @login_required
 def get_dev_ports(ni_name, vlan):
-    return jsonify(NDPPort.get_nd_p_port_by_vlan(db, get_db_conn(), ni_name=str(ni_name), vlan_id=int(vlan)))
+    vlan = int(vlan)
+    s = request.environ['beaker.session']
+    areas = s['login'].get_areas(db=db, connection=get_db_conn())
+    vlan_valid = False
+    for a in areas:
+        if a.vlan:
+            print(a.vlan.ni_name, a.vlan.id)
+        if a.vlan is not None and a.vlan.id == vlan and a.vlan.ni_name == ni_name:
+            vlan_valid = True
+            break
+    if not vlan_valid:
+        return abort(404)
+    return jsonify(NDPPort.get_nd_p_port_by_vlan(db, get_db_conn(), ni_name=ni_name, vlan_id=vlan))