github/jumpserver
1
0
Fork 0
mirror of https://github.com/jumpserver/jumpserver.git synced 2025-09-15 23:08:20 +00:00
Code Issues Projects Releases Wiki Activity

perf: Perms system settings (#13435)

Browse Source 
Co-authored-by: feng <1304903146@qq.com>
This commit is contained in:
fit2bot
2024-06-17 17:40:03 +08:00
committed by GitHub
parent 8a5e86dfa7
commit 50ceca9f06
4 changed files with 384 additions and 350 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
apps/rbac/const.py
View File

@@ -122,6 +122,7 @@ exclude_permissions = (
('terminal', 'session', 'delete,share', 'session'),
('terminal', 'session', 'delete,change', 'command'),
('applications', '*', '*', '*'),
('settings', 'chatprompt', 'add,delete,change', 'chatprompt'),
)
only_system_permissions = (

66
apps/rbac/tree.py
View File

@@ -51,11 +51,20 @@ extra_nodes_data = [
{"id": "gather_account_node", "name": _("Gather account"), "pId": "accounts"},
{"id": "push_account_node", "name": _("Push account"), "pId": "accounts"},
{"id": "asset_change_plan_node", "name": _("Asset change auth"), "pId": "accounts"},
{"id": "terminal_node", "name": _("Terminal setting"), "pId": "view_setting"},
{'id': "task_center", "name": _("Job center"), "pId": "view_console"},
{'id': "my_assets", "name": _("My assets"), "pId": "view_workbench"},
{'id': "operation_center", "name": _('App ops'), "pId": "view_workbench"},
{'id': "remote_application", "name": _("Applet"), "pId": "view_setting"},
{'id': "notifications", "name": _("Notifications"), "pId": "view_setting"},
{'id': "features", "name": _("Features"), "pId": "view_setting"},
{'id': "authentication_setting", "name": _("Authentication"), "pId": "view_setting"},
{'id': "storage", "name": _("Storage"), "pId": "view_setting"},
{'id': "components", "name": _("Components"), "pId": "view_setting"},
{'id': "remote_app", "name": _("Applet"), "pId": "view_setting"},
{'id': "security", "name": _("Security"), "pId": "view_setting"},
{'id': "appearance", "name": _("Appearance"), "pId": "view_setting"},
{'id': "tasks", "name": _("Tasks"), "pId": "view_setting"},
{'id': "license", "name": _("License"), "pId": "view_setting"},
{'id': "other", "name": _("Other"), "pId": "view_setting"},
]
# 将 model 放到其它节点下，而不是本来的 app 中
@@ -75,10 +84,6 @@ special_pid_mapper = {
'xpack.strategy': 'cloud_import',
'xpack.strategyaction': 'cloud_import',
'xpack.strategyrule': 'cloud_import',
'terminal.applet': 'remote_application',
'terminal.applethost': 'remote_application',
'terminal.appletpublication': 'remote_application',
'terminal.applethostdeployment': 'remote_application',
'accounts.accountbackupautomation': "backup_account_node",
'accounts.accountbackupexecution': "backup_account_node",
"accounts.pushaccountautomation": "push_account_node",
@@ -92,15 +97,6 @@ special_pid_mapper = {
"accounts.view_changesecretexecution": "asset_change_plan_node",
"accounts.add_changesecretexecution": "asset_change_plan_node",
"accounts.view_changesecretrecord": "asset_change_plan_node",
'orgs.organization': 'view_setting',
'settings.setting': 'view_setting',
'terminal.terminal': 'terminal_node',
'terminal.commandstorage': 'terminal_node',
'terminal.replaystorage': 'terminal_node',
'terminal.status': 'terminal_node',
'terminal.task': 'terminal_node',
'terminal.endpoint': 'terminal_node',
'terminal.endpointrule': 'terminal_node',
'audits.ftplog': 'terminal',
'perms.view_myassets': 'my_assets',
'ops.celerytask': 'task_center',
@@ -111,9 +107,6 @@ special_pid_mapper = {
'ops.adhoc': 'operation_center',
'ops.playbook': 'operation_center',
'ops.jobexecution': 'operation_center',
"xpack.interface": "view_setting",
"settings.change_terminal": "terminal_node",
"settings.view_setting": "view_setting",
"rbac.view_console": "view_console",
"rbac.view_audit": "view_audit",
'audits.usersession': 'view_audit',
@@ -124,6 +117,42 @@ special_pid_mapper = {
'tickets.view_ticket': 'tickets'
}
special_setting_pid_mapper = {
"settings.change_email": "notifications",
"settings.change_sms": "notifications",
"settings.change_systemmsgsubscription": "notifications",
"settings.change_announcement": "features",
"settings.change_ticket": "features",
"settings.change_ops": "features",
"settings.change_vault": "features",
"settings.change_chatai": "features",
"settings.view_chatprompt": "features",
"settings.change_virtualapp": "features",
"settings.change_auth": "authentication_setting",
"terminal.replaystorage": "storage",
"terminal.commandstorage": "storage",
'terminal.applet': 'remote_app',
'terminal.applethost': 'remote_app',
'terminal.appletpublication': 'remote_app',
'terminal.applethostdeployment': 'remote_app',
"settings.change_terminal": "components",
"terminal.terminal": "components",
"terminal.view_terminal": "components",
"terminal.endpoint": "components",
"terminal.endpointrule": "components",
"terminal.status": "components",
"settings.change_security": "security",
"settings.change_interface": "appearance",
"terminal.task": "tasks",
"settings.change_clean": "tasks",
"settings.change_license": "license",
'orgs.organization': 'view_setting',
"settings.view_setting": "view_setting",
"settings.change_other": "other",
}
special_pid_mapper.update(special_setting_pid_mapper)
verbose_name_mapper = {
'orgs.organization': _("App organizations"),
'tickets.comment': _("Ticket comment"),
@@ -138,7 +167,6 @@ xpack_nodes = [
"assets.accountbackupplanexecution",
"rbac.orgrole", "rbac.orgrolebinding",
'assets.gathereduser',
'settings.change_interface', 'settings.change_sms',
'users.invite_user', 'users.remove_user',
]