banquise/pelican-panel-mirror
14
0
Fork 1
mirror of https://github.com/pelican-dev/panel.git synced 2025-12-08 18:30:15 +01:00
Code Issues Packages Projects Releases Wiki Activity

fix: bypass tenant scoping in allocation queries (#1883)

Browse Source
This commit is contained in:
PalmarHealer 2025-11-13 05:48:25 +01:00 committed by GitHub
parent 20cb7850ef
commit 3f89c6ddd8
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 11 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
app/Services/Allocations/FindAssignableAllocationService.php
View File

@ -40,8 +40,13 @@ class FindAssignableAllocationService
// Attempt to find a given available allocation for a server. If one cannot be found // Attempt to find a given available allocation for a server. If one cannot be found
// we will fall back to attempting to create a new allocation that can be used for the // we will fall back to attempting to create a new allocation that can be used for the
// server. // server.
//
// Note: We use withoutGlobalScopes() to bypass Filament's tenant scoping when called
// from the Server panel context, which would otherwise filter allocations to only
// those belonging to the current server (making it impossible to find unassigned ones)
/** @var Allocation|null $allocation */ /** @var Allocation|null $allocation */
$allocation = $server->node->allocations() $allocation = Allocation::withoutGlobalScopes()
->where('node_id', $server->node_id)
->when($server->allocation, function ($query) use ($server) { ->when($server->allocation, function ($query) use ($server) {
$query->where('ip', $server->allocation->ip); $query->where('ip', $server->allocation->ip);
}) })
@ -81,7 +86,9 @@ class FindAssignableAllocationService
// Get all the currently allocated ports for the node so that we can figure out // Get all the currently allocated ports for the node so that we can figure out
// which port might be available. // which port might be available.
$ports = $server->node->allocations() // Use withoutGlobalScopes() to bypass tenant filtering.
$ports = Allocation::withoutGlobalScopes()
->where('node_id', $server->node_id)
->where('ip', $server->allocation->ip) ->where('ip', $server->allocation->ip)
->whereBetween('port', [$start, $end]) ->whereBetween('port', [$start, $end])
->pluck('port'); ->pluck('port');
@ -106,7 +113,8 @@ class FindAssignableAllocationService
]); ]);
/** @var Allocation $allocation */ /** @var Allocation $allocation */
$allocation = $server->node->allocations() $allocation = Allocation::withoutGlobalScopes()
->where('node_id', $server->node_id)
->where('ip', $server->allocation->ip) ->where('ip', $server->allocation->ip)
->where('port', $port) ->where('port', $port)
->firstOrFail(); ->firstOrFail();