mirror of
https://github.com/jumpserver/jumpserver.git
synced 2025-05-05 14:46:20 +00:00
* perf: change i18n
* perf: pam
* perf: change translate
* perf: add check account
* perf: add date field
* perf: add account filter
* perf: remove some js
* perf: add account status action
* perf: update pam
* perf: 修改 discover account
* perf: update filter
* perf: update gathered account
* perf: 修改账号同步
* perf: squash migrations
* perf: update pam
* perf: change i18n
* perf: update account risk
* perf: 更新风险发现
* perf: remove css
* perf: Admin connection token
* perf: Add a switch to check connectivity after changing the password, and add a custom ssh command for push tasks
* perf: Modify account migration files
* perf: update pam
* perf: remove to check account dir
* perf: Admin connection token
* perf: update check account
* perf: 优化发送结果
* perf: update pam
* perf: update bulk update create
* perf: prepaire using thread timer for bulk_create_decorator
* perf: update bulk create decorator
* perf: 优化 playbook manager
* perf: 优化收集账号的报表
* perf: Update poetry
* perf: Update Dockerfile with new base image tag
* fix: Account migrate 0012 file
* perf: 修改备份
* perf: update pam
* fix: Expand resource_type filter to include raw type
* feat: PAM Service (#14552)
* feat: PAM Service
* perf: import package name
---------
Co-authored-by: jiangweidong <1053570670@qq.com>
* perf: Change secret dashboard (#14551)
Co-authored-by: feng <1304903146@qq.com>
* perf: update migrations
* perf: 修改支持 pam
* perf: Change secret record table dashboard
* perf: update status
* fix: Automation send report
* perf: Change secret report
* feat: windows accounts gather
* perf: update change status
* perf: Account backup
* perf: Account backup report
* perf: Account migrate
* perf: update service to application
* perf: update migrations
* perf: update logo
* feat: oracle accounts gather (#14571)
* feat: oracle accounts gather
* feat: sqlserver accounts gather
* feat: postgresql accounts gather
* feat: mysql accounts gather
---------
Co-authored-by: wangruidong <940853815@qq.com>
* feat: mongodb accounts gather
* perf: Change secret
* perf: Migrate
* perf: Merge conflicting migration files
* perf: Change secret
* perf: Automation filter org
* perf: Account push
* perf: Random secret string
* perf: Enhance SQL query and update risk handling in accounts
* perf: Ticket filter assignee_id
* perf: 修改 account remote
* perf: 修改一些 adhoc 任务
* perf: Change secret
* perf: Remove push account extra api
* perf: update status
* perf: The entire organization can view activity log
* fix: risk field check
* perf: add account details api
* perf: add demo mode
* perf: Delete gather_account
* perf: Perfect solution to account version problem
* perf: Update status action to handle multiple accounts
* perf: Add GatherAccountDetailField and update serializers
* perf: Display account history in combination with password change records
* perf: Lina translate
* fix: Update mysql_filter to handle nested user info
* perf: Admin connection token validate_permission account
* perf: copy move account
* perf: account filter risk
* perf: account risk filter
* perf: Copy move account failed message
* fix: gather account sync account to asset
* perf: Pam dashboard
* perf: Account dashboard total accounts
* perf: Pam dashboard
* perf: Change secret filter account secret_reset
* perf: 修改 risk filter
* perf: pam translate
* feat: Check for leaked duplicate passwords. (#14711)
* feat: Check for leaked duplicate passwords.
* perf: Use SQLite instead of txt as leak password database
---------
Co-authored-by: jiangweidong <1053570670@qq.com>
Co-authored-by: 老广 <ibuler@qq.com>
* perf: merge with remote
* perf: Add risk change_password_add handle
* perf: Pam dashboard
* perf: check account manager import
* perf: 重构扫描
* perf: 修改 db
* perf: Gather account manager
* perf: update change db lib
* perf: dashboard
* perf: Account gather
* perf: 修改 asset get queryset
* perf: automation report
* perf: Pam account
* perf: Pam dashboard api
* perf: risk add account
* perf: 修改 risk check
* perf: Risk account
* perf: update risk add reopen action
* perf: add pylintrc
* Revert "perf: automation report"
This reverts commit 22aee54207
.
* perf: check account engine
* perf: Perf: Optimism Gather Report Style
* Perf: Remove unuser actions
* Perf: Perf push account
* perf: perf gather account
* perf: Automation report
* perf: Push account recorder
* perf: Push account record
* perf: Pam dashboard
* perf: perf
* perf: update intergration
* perf: integrations application detail add account tab page
* feat: Custom change password supports configuration of interactive items
* perf: Go and Python demo code
* perf: Custom secret change
* perf: add user filter
* perf: translate
* perf: Add demo code docs
* perf: update some i18n
* perf: update some i18n
* perf: Add Java, Node, Go, and cURL demo code
* perf: Translate
* perf: Change secret translate
* perf: Translate
* perf: update some i18n
* perf: translate
* perf: Ansible playbook
* perf: update some choice
* perf: update some choice
* perf: update account serializer remote unused code
* perf: conflict
* perf: update import
---------
Co-authored-by: ibuler <ibuler@qq.com>
Co-authored-by: feng <1304903146@qq.com>
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: wangruidong <940853815@qq.com>
Co-authored-by: jiangweidong <1053570670@qq.com>
Co-authored-by: feng626 <57284900+feng626@users.noreply.github.com>
Co-authored-by: zhaojisen <1301338853@qq.com>
185 lines
6.0 KiB
Python
185 lines
6.0 KiB
Python
# ~*~ coding: utf-8 ~*~
|
|
|
|
from django.db.models import Q
|
|
from django.utils.translation import gettext_lazy as _
|
|
from rest_framework.generics import get_object_or_404
|
|
from rest_framework.response import Response
|
|
|
|
from assets.locks import NodeAddChildrenLock
|
|
from common.exceptions import JMSException
|
|
from common.tree import TreeNodeSerializer
|
|
from common.utils import get_logger
|
|
from orgs.mixins import generics
|
|
from orgs.utils import current_org
|
|
from .mixin import SerializeToTreeNodeMixin
|
|
from .. import serializers
|
|
from ..const import AllTypes
|
|
from ..models import Node, Platform, Asset
|
|
|
|
logger = get_logger(__file__)
|
|
__all__ = [
|
|
'NodeChildrenApi',
|
|
'NodeChildrenAsTreeApi',
|
|
'CategoryTreeApi',
|
|
]
|
|
|
|
|
|
class NodeChildrenApi(generics.ListCreateAPIView):
|
|
"""
|
|
节点的增删改查
|
|
"""
|
|
serializer_class = serializers.NodeSerializer
|
|
search_fields = ('value',)
|
|
|
|
instance = None
|
|
is_initial = False
|
|
|
|
def initial(self, request, *args, **kwargs):
|
|
super().initial(request, *args, **kwargs)
|
|
self.instance = self.get_object()
|
|
|
|
def perform_create(self, serializer):
|
|
data = serializer.validated_data
|
|
_id = data.get("id")
|
|
value = data.get("value")
|
|
if value:
|
|
children = self.instance.get_children()
|
|
if children.filter(value=value).exists():
|
|
raise JMSException(_('The same level node name cannot be the same'))
|
|
else:
|
|
value = self.instance.get_next_child_preset_name()
|
|
with NodeAddChildrenLock(self.instance):
|
|
node = self.instance.create_child(value=value, _id=_id)
|
|
# 避免查询 full value
|
|
node._full_value = node.value
|
|
serializer.instance = node
|
|
|
|
def get_object(self):
|
|
pk = self.kwargs.get('pk') or self.request.query_params.get('id')
|
|
key = self.request.query_params.get("key")
|
|
|
|
if not pk and not key:
|
|
self.is_initial = True
|
|
if current_org.is_root():
|
|
node = None
|
|
else:
|
|
node = Node.org_root()
|
|
return node
|
|
if pk:
|
|
node = get_object_or_404(Node, pk=pk)
|
|
else:
|
|
node = get_object_or_404(Node, key=key)
|
|
return node
|
|
|
|
def get_org_root_queryset(self, query_all):
|
|
if query_all:
|
|
return Node.objects.all()
|
|
else:
|
|
return Node.org_root_nodes()
|
|
|
|
def get_queryset(self):
|
|
query_all = self.request.query_params.get("all", "0") == "all"
|
|
|
|
if self.is_initial and current_org.is_root():
|
|
return self.get_org_root_queryset(query_all)
|
|
|
|
if self.is_initial:
|
|
with_self = True
|
|
else:
|
|
with_self = False
|
|
|
|
if not self.instance:
|
|
return Node.objects.none()
|
|
|
|
if query_all:
|
|
queryset = self.instance.get_all_children(with_self=with_self)
|
|
else:
|
|
queryset = self.instance.get_children(with_self=with_self)
|
|
return queryset
|
|
|
|
|
|
class NodeChildrenAsTreeApi(SerializeToTreeNodeMixin, NodeChildrenApi):
|
|
"""
|
|
节点子节点作为树返回,
|
|
[
|
|
{
|
|
"id": "",
|
|
"name": "",
|
|
"pId": "",
|
|
"meta": ""
|
|
}
|
|
]
|
|
|
|
"""
|
|
model = Node
|
|
|
|
def filter_queryset(self, queryset):
|
|
""" queryset is Node queryset """
|
|
if not self.request.GET.get('search'):
|
|
return queryset
|
|
queryset = super().filter_queryset(queryset)
|
|
queryset = self.model.get_ancestor_queryset(queryset)
|
|
return queryset
|
|
|
|
def get_queryset_for_assets(self):
|
|
query_all = self.request.query_params.get("all", "0") == "all"
|
|
include_assets = self.request.query_params.get('assets', '0') == '1'
|
|
if not self.instance or not include_assets:
|
|
return Asset.objects.none()
|
|
if not self.request.GET.get('search') and self.instance.is_org_root():
|
|
return Asset.objects.none()
|
|
if query_all:
|
|
assets = self.instance.get_all_assets()
|
|
else:
|
|
assets = self.instance.get_assets()
|
|
return assets.only(
|
|
"id", "name", "address", "platform_id",
|
|
"org_id", "is_active", 'comment'
|
|
).prefetch_related('platform')
|
|
|
|
def filter_queryset_for_assets(self, assets):
|
|
search = self.request.query_params.get('search')
|
|
if search:
|
|
q = Q(name__icontains=search) | Q(address__icontains=search)
|
|
assets = assets.filter(q)
|
|
return assets
|
|
|
|
def list(self, request, *args, **kwargs):
|
|
nodes = self.filter_queryset(self.get_queryset()).order_by('value')
|
|
with_asset_amount = request.query_params.get('asset_amount', '1') == '1'
|
|
nodes = self.serialize_nodes(nodes, with_asset_amount=with_asset_amount)
|
|
assets = self.filter_queryset_for_assets(self.get_queryset_for_assets())
|
|
node_key = self.instance.key if self.instance else None
|
|
assets = self.serialize_assets(assets, node_key=node_key)
|
|
data = [*nodes, *assets]
|
|
return Response(data=data)
|
|
|
|
|
|
class CategoryTreeApi(SerializeToTreeNodeMixin, generics.ListAPIView):
|
|
serializer_class = TreeNodeSerializer
|
|
rbac_perms = {
|
|
'GET': 'assets.view_asset',
|
|
'list': 'assets.view_asset',
|
|
}
|
|
|
|
def get_assets(self):
|
|
key = self.request.query_params.get('key')
|
|
platform = Platform.objects.filter(id=key).first()
|
|
if not platform:
|
|
return []
|
|
assets = Asset.objects.filter(platform=platform).prefetch_related('platform')
|
|
return self.serialize_assets(assets, key)
|
|
|
|
def list(self, request, *args, **kwargs):
|
|
include_asset = self.request.query_params.get('assets', '0') == '1'
|
|
# 资源数量统计可选项 (asset, account)
|
|
count_resource = self.request.query_params.get('count_resource', 'asset')
|
|
|
|
if not self.request.query_params.get('key'):
|
|
nodes = AllTypes.to_tree_nodes(include_asset, count_resource=count_resource)
|
|
elif include_asset:
|
|
nodes = self.get_assets()
|
|
else:
|
|
nodes = []
|
|
return Response(data=nodes)
|