DRF滤波

Question

应用程序有一个票证模型：

class Ticket(models.Model):
    theme = models.ForeignKey(TicketTheme, on_delete=models.PROTECT)
    user = models.ForeignKey(User, related_name='user', on_delete=models.PROTECT)
    support = models.ForeignKey(User, on_delete=models.PROTECT)
    status = models.ForeignKey(Status, on_delete=models.PROTECT)
    created_at = models.DateTimeField(auto_now_add=True)
    updated_at = models.DateTimeField(auto_now=True)

以及票证中的消息模型：

class TicketMessage(models.Model):
    types = [
        ('user_msg', 'user_msg'),
        ('sys_msg', 'sys_msg')
    ]
    ticket = models.ForeignKey(Ticket, on_delete=models.PROTECT)
    text = models.CharField(max_length=250, default='')
    image = models.ImageField(upload_to='ticket_message_img/', default='')
    user = models.ForeignKey(User, on_delete=models.PROTECT)
    type = models.CharField(max_length=50, default='user_msg', choices=types)
    read = models.IntegerField(max_length=1, default=0)
    created_at = models.DateTimeField(auto_now_add=True)
    updated_at = models.DateTimeField(auto_now=True)

序列化程序：

class TicketSerializer(serializers.ModelSerializer):
    user = serializers.SlugRelatedField(
        slug_field='username',
        read_only=True
    )
    support = serializers.SlugRelatedField(
        slug_field='username', 
        read_only=True
        )
    theme = serializers.SlugRelatedField(
        slug_field='name',
        read_only = True
    )
    status = serializers.SlugRelatedField(
        slug_field='name',
        read_only=True
    )

    class Meta:
        model = Ticket
        fields = '__all__'

class TicketMessageSerializer(serializers.ModelSerializer):
    class Meta:
        model = TicketMessage
        fields = '__all__'

网址：

urlpatterns = [
    path('api/tickets/', views.TicketSerializerView.as_view()),
    path('api/tickets/<int:pk>/all_messages/', views.TicketAllMessagesSerializerView.as_view()),
    path('api/tickets/<int:pk>/messages/', views.TicketMessagesSerializerView.as_view()),
]

管制员：

class TicketSerializerView(generics.ListAPIView):
    queryset = Ticket.objects.all()
    serializer_class = TicketSerializer
    permission_classes = [permissions.IsAuthenticated]

    def create(self, validated_data):
        return Ticket.objects.create(**validated_data)
    
class TicketAllMessagesSerializerView(generics.ListAPIView):
    queryset = TicketMessage.objects.all()
    serializer_class = TicketMessageSerializer
    permission_classes = [permissions.IsAuthenticated]

class TicketMessagesPagination(PageNumberPagination):
    page_size = 10
    page_size_query_param = 'page_size'
    max_page_size = 1000

class TicketMessagesSerializerView(generics.ListAPIView):
    queryset = TicketMessage.objects.all()
    serializer_class = TicketMessageSerializer
    pagination_class = TicketMessagesPagination
    permission_classes = [permissions.IsAuthenticated]

问题：

1. 如何过滤控制器中特定票证的消息(通过票据pk)。现在，它将显示来自所有票证的所有消息。
2. 如何仅向创建票证的用户(用户字段)、管理员(超级用户)和将此票证用于处理(支持字段)的管理器(支持字段)提供对消息的访问。

*如果有关于守则的评论，你也很想知道

Answer 1

我重写了控制器、urls和序列化程序：

urlpatterns = [
    path('api/tickets/<int:ticket_id>/messages/',
          views.TicketMessageSerializerView.as_view()),
]


class TicketMessageSerializer(serializers.ModelSerializer):
    class Meta:
        model = TicketMessage
        fields = '__all__'


class TicketMessageSerializerView(generics.ListAPIView):
    queryset = TicketMessage.objects.all()
    serializer_class = TicketMessageSerializer

    def get_queryset(self, *args, **kwargs):
            return super().get_queryset(*args, **kwargs).filter(
                ticket__id=self.kwargs['ticket_id']
            )