Permissions by region/site?

[domainzero]

I'm not sure what the best way is to divide permissions based on site. I've started running into issues with limiting cable creation, module creation, etc by site or region.

My end goal is to have two separate regions or sites and have two groups of users that can only work on either site or region.

I have been assigning permissions and using constraints, but can't find a good way to do cables, modules, etc as I can't seem to use region/site

Any help would be appreciated.

[EAleg]

Same problem...
Can you attach your example of code for permissions?

[IdRatherStand]

We have done this in our environment, for the cables you should be able to use the side_a_termination or side_b_termination properties if I remember correctly.

Module creation I would imagine is done via parent device site assignment.

[dteknet]

If it's still actual question, I've found out how this can be achieved:

[{"_termination_a_device__site__name__in": ["SITE-A", "SITE-B"]}, {"_termination_b_device__site__name__in": ["SITE-A", "SITE-B"]}]

[domainzero]

termination_a and termination_b were removed in 3.3.0.
It's listed under breaking changes. You'll probably need to change your constraints to use the new names.

Here's the release notes.

[dteknet]

I'm aware of those. However, the new names listed are not available in constraints, unfortunately.

Invalid filter for <class 'dcim.models.cables.Cable'>: Cannot resolve keyword 'a_terminations' into field. Choices are: _abs_length, color, created, custom_field_data, id, journal_entries, label, last_updated, length, length_unit, status, tagged_items, tags, tenant, tenant_id, terminations, type

[julianstolp]

I tried to restricted the cable creation to one location. This worked for me:

{"terminations___device__location__slug__startswith": "xyz"}

Should be adaptable to multiple sites

[dteknet]

I tried to restricted the cable creation to one location. This worked for me:

{"terminations___device__location__slug__startswith": "xyz"}

Should be adaptable to multiple sites

Amazing! Thank you!
How can you explain the tripple-underscore? What does it mean?

[julianstolp]

It's listed in the code with underscore

netbox/netbox/dcim/models/cables.py

Line 240 in ab9c253

_device = models.ForeignKey(

[nebulite]

same issues, need group by region / site to control the devices belong to different region/site
version 3.3.9

[julianstolp]

If the devices are independent for each group you should use the tenant permissions.