fix: target frameworks filtered to the supported ones only when applying a mapping

backend/core/models.py

@@ -2847,6 +2847,8 @@ class ComplianceAssessment(Assessment):
     )
     show_documentation_score = models.BooleanField(default=False)
 
+    fields_to_check = ["name", "version"]
+
     class Meta:
         verbose_name = _("Compliance assessment")
         verbose_name_plural = _("Compliance assessments")

backend/core/views.py

@@ -3113,13 +3113,37 @@ def get_composer_data(request):
 # Compliance Assessment
 
 
+class FrameworkFilter(df.FilterSet):
+    baseline = df.ModelChoiceFilter(
+        queryset=ComplianceAssessment.objects.all(),
+        method="filter_framework",
+        label="Baseline",
+    )
+
+    def filter_framework(self, queryset, name, value):
+        if not value:
+            return queryset
+        source_framework = value.framework
+        target_framework_ids = list(
+            RequirementMappingSet.objects.filter(
+                source_framework=source_framework
+            ).values_list("target_framework__id", flat=True)
+        )
+        target_framework_ids.append(source_framework.id)
+        return queryset.filter(id__in=target_framework_ids)
+
+    class Meta:
+        model = Framework
+        fields = ["folder", "baseline"]
+
+
 class FrameworkViewSet(BaseModelViewSet):
     """
     API endpoint that allows frameworks to be viewed or edited.
     """
 
     model = Framework
-    filterset_fields = ["folder"]
+    filterset_class = FrameworkFilter
     search_fields = ["name", "description"]
     ordering_fields = ["name", "description"]
 

frontend/src/lib/components/Forms/ModelForm/ComplianceAssessmentForm.svelte

@@ -69,6 +69,7 @@
 	{form}
 	disabled={object.id}
 	optionsEndpoint="frameworks"
+	optionsDetailedUrlParameters={[['baseline', initialData.baseline]]}
 	field="framework"
 	cacheLock={cacheLocks['framework']}
 	bind:cachedValue={formDataCache['framework']}