How to filter by Contact Assignments in Constraints

[LukasIgel]

Hello everyone,

I am trying to define constraints for accessing network ressources by reading their assigned contacts. I first tried using tenants and tenant groups, but they are not flexible enough due to their strict hierarchical nature (only one parent allowed).

For example, I can access assigned contacts in constraints via __contacts. But how can I check its elements? For example I want to filter somewhat like this:

Site.objects.get(name="test-a-1").contacts.get(contact__name="test-contact") <ContactAssignment: test-contact -> test-a-1>

But instead of checking that one specific site, I want to filter all sites that contain a contact assignment with the given name. I don't how to write that query and I don't know how to translate that query into constraints JSON.