mirror of
https://github.com/jumpserver/jumpserver.git
synced 2025-08-11 11:02:41 +00:00
37 lines
1.1 KiB
Python
37 lines
1.1 KiB
Python
from django.core.exceptions import PermissionDenied
|
|
|
|
from authentication.backends.base import JMSBaseAuthBackend
|
|
|
|
|
|
class RBACBackend(JMSBaseAuthBackend):
|
|
""" 只做权限校验 """
|
|
@staticmethod
|
|
def is_enabled():
|
|
return True
|
|
|
|
def authenticate(self):
|
|
return None
|
|
|
|
def username_allow_authenticate(self, username):
|
|
return False
|
|
|
|
def has_perm(self, user_obj, perm, obj=None):
|
|
# 扫描软件对 * 毕竟敏感，所以改成 none, 虽说这个 * 是我们自定义的标识
|
|
if perm == 'none':
|
|
return True
|
|
if not user_obj.is_active or not perm:
|
|
raise PermissionDenied()
|
|
if isinstance(perm, str):
|
|
perm_set = set(i.strip() for i in perm.split('|'))
|
|
elif isinstance(perm, (list, tuple, set)):
|
|
perm_set = set(perm)
|
|
else:
|
|
raise ValueError('perm must be str, list, tuple or set')
|
|
has_perm = bool(perm_set & set(user_obj.perms))
|
|
if not has_perm:
|
|
raise PermissionDenied()
|
|
return has_perm
|
|
|
|
# def has_module_perms(self, user_obj, app_label):
|
|
# return True
|