Creating Permissions for IPAddress with Assigned Device Tag Constraint

[Kani999]

In NetBox, setting up permission constraints is crucial for managing access effectively. While it's straightforward to create permission constraints for certain fields like vid, configuring constraints for more complex relationships such as those involving IP addresses and assigned devices with specific tags can be challenging.

Currently, attempting to create a constraint for ipam.IPAddress with a condition like {"assigned_object__device__tags__name": "netop"} results in an error:

Invalid filter for <class 'ipam.models.ip.IPAddress'>: 
Field 'assigned_object' does not generate an automatic reverse relation 
and therefore cannot be used for reverse querying. 
If it is a GenericForeignKey, consider adding a GenericRelation.

This error indicates that direct querying on the assigned_object field is not supported due to the lack of an automatic reverse relation. Consequently, applying constraints based on the tags associated with assigned devices becomes non-trivial.

Our discussion aims to explore potential solutions or workarounds for this issue. Do you have any insights or examples on how to create permissions for IPAddress with constraints, particularly for accessing IP addresses associated with devices tagged as "Netop"? Let's collaborate and find a viable approach to address this challenge.