mirror of
https://github.com/jumpserver/jumpserver.git
synced 2025-05-12 18:15:29 +00:00
* perf: change i18n
* perf: pam
* perf: change translate
* perf: add check account
* perf: add date field
* perf: add account filter
* perf: remove some js
* perf: add account status action
* perf: update pam
* perf: 修改 discover account
* perf: update filter
* perf: update gathered account
* perf: 修改账号同步
* perf: squash migrations
* perf: update pam
* perf: change i18n
* perf: update account risk
* perf: 更新风险发现
* perf: remove css
* perf: Admin connection token
* perf: Add a switch to check connectivity after changing the password, and add a custom ssh command for push tasks
* perf: Modify account migration files
* perf: update pam
* perf: remove to check account dir
* perf: Admin connection token
* perf: update check account
* perf: 优化发送结果
* perf: update pam
* perf: update bulk update create
* perf: prepaire using thread timer for bulk_create_decorator
* perf: update bulk create decorator
* perf: 优化 playbook manager
* perf: 优化收集账号的报表
* perf: Update poetry
* perf: Update Dockerfile with new base image tag
* fix: Account migrate 0012 file
* perf: 修改备份
* perf: update pam
* fix: Expand resource_type filter to include raw type
* feat: PAM Service (#14552)
* feat: PAM Service
* perf: import package name
---------
Co-authored-by: jiangweidong <1053570670@qq.com>
* perf: Change secret dashboard (#14551)
Co-authored-by: feng <1304903146@qq.com>
* perf: update migrations
* perf: 修改支持 pam
* perf: Change secret record table dashboard
* perf: update status
* fix: Automation send report
* perf: Change secret report
* feat: windows accounts gather
* perf: update change status
* perf: Account backup
* perf: Account backup report
* perf: Account migrate
* perf: update service to application
* perf: update migrations
* perf: update logo
* feat: oracle accounts gather (#14571)
* feat: oracle accounts gather
* feat: sqlserver accounts gather
* feat: postgresql accounts gather
* feat: mysql accounts gather
---------
Co-authored-by: wangruidong <940853815@qq.com>
* feat: mongodb accounts gather
* perf: Change secret
* perf: Migrate
* perf: Merge conflicting migration files
* perf: Change secret
* perf: Automation filter org
* perf: Account push
* perf: Random secret string
* perf: Enhance SQL query and update risk handling in accounts
* perf: Ticket filter assignee_id
* perf: 修改 account remote
* perf: 修改一些 adhoc 任务
* perf: Change secret
* perf: Remove push account extra api
* perf: update status
* perf: The entire organization can view activity log
* fix: risk field check
* perf: add account details api
* perf: add demo mode
* perf: Delete gather_account
* perf: Perfect solution to account version problem
* perf: Update status action to handle multiple accounts
* perf: Add GatherAccountDetailField and update serializers
* perf: Display account history in combination with password change records
* perf: Lina translate
* fix: Update mysql_filter to handle nested user info
* perf: Admin connection token validate_permission account
* perf: copy move account
* perf: account filter risk
* perf: account risk filter
* perf: Copy move account failed message
* fix: gather account sync account to asset
* perf: Pam dashboard
* perf: Account dashboard total accounts
* perf: Pam dashboard
* perf: Change secret filter account secret_reset
* perf: 修改 risk filter
* perf: pam translate
* feat: Check for leaked duplicate passwords. (#14711)
* feat: Check for leaked duplicate passwords.
* perf: Use SQLite instead of txt as leak password database
---------
Co-authored-by: jiangweidong <1053570670@qq.com>
Co-authored-by: 老广 <ibuler@qq.com>
* perf: merge with remote
* perf: Add risk change_password_add handle
* perf: Pam dashboard
* perf: check account manager import
* perf: 重构扫描
* perf: 修改 db
* perf: Gather account manager
* perf: update change db lib
* perf: dashboard
* perf: Account gather
* perf: 修改 asset get queryset
* perf: automation report
* perf: Pam account
* perf: Pam dashboard api
* perf: risk add account
* perf: 修改 risk check
* perf: Risk account
* perf: update risk add reopen action
* perf: add pylintrc
* Revert "perf: automation report"
This reverts commit 22aee54207
.
* perf: check account engine
* perf: Perf: Optimism Gather Report Style
* Perf: Remove unuser actions
* Perf: Perf push account
* perf: perf gather account
* perf: Automation report
* perf: Push account recorder
* perf: Push account record
* perf: Pam dashboard
* perf: perf
* perf: update intergration
* perf: integrations application detail add account tab page
* feat: Custom change password supports configuration of interactive items
* perf: Go and Python demo code
* perf: Custom secret change
* perf: add user filter
* perf: translate
* perf: Add demo code docs
* perf: update some i18n
* perf: update some i18n
* perf: Add Java, Node, Go, and cURL demo code
* perf: Translate
* perf: Change secret translate
* perf: Translate
* perf: update some i18n
* perf: translate
* perf: Ansible playbook
* perf: update some choice
* perf: update some choice
* perf: update account serializer remote unused code
* perf: conflict
* perf: update import
---------
Co-authored-by: ibuler <ibuler@qq.com>
Co-authored-by: feng <1304903146@qq.com>
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: wangruidong <940853815@qq.com>
Co-authored-by: jiangweidong <1053570670@qq.com>
Co-authored-by: feng626 <57284900+feng626@users.noreply.github.com>
Co-authored-by: zhaojisen <1301338853@qq.com>
91 lines
3.2 KiB
Python
91 lines
3.2 KiB
Python
import uuid
|
|
from collections import defaultdict
|
|
|
|
from celery import shared_task, current_task
|
|
from django.conf import settings
|
|
from django.db.models import Count
|
|
from django.utils.translation import gettext_noop, gettext_lazy as _
|
|
|
|
from accounts.const import AutomationTypes
|
|
from accounts.models import Account
|
|
from accounts.tasks.common import quickstart_automation_by_snapshot
|
|
from audits.const import ActivityChoices
|
|
from common.const.crontab import CRONTAB_AT_AM_TWO
|
|
from common.utils import get_logger
|
|
from ops.celery.decorator import register_as_period_task
|
|
from orgs.utils import tmp_to_root_org
|
|
|
|
logger = get_logger(__file__)
|
|
|
|
__all__ = ['remove_accounts_task']
|
|
|
|
|
|
@shared_task(
|
|
queue="ansible",
|
|
verbose_name=_('Remove account'),
|
|
activity_callback=lambda self, gather_account_ids, *args, **kwargs: (gather_account_ids, None),
|
|
description=_(
|
|
"""When clicking "Sync deletion" in 'Console - Gather Account - Gathered accounts' this
|
|
task will be executed"""
|
|
)
|
|
)
|
|
def remove_accounts_task(gather_account_ids):
|
|
from accounts.models import GatheredAccount
|
|
|
|
gather_accounts = GatheredAccount.objects.filter(
|
|
id__in=gather_account_ids
|
|
)
|
|
task_name = gettext_noop("Remove account")
|
|
|
|
task_snapshot = {
|
|
'assets': [str(i.asset_id) for i in gather_accounts],
|
|
'accounts': [{'asset': str(i.asset_id), 'username': i.username} for i in gather_accounts],
|
|
}
|
|
|
|
tp = AutomationTypes.remove_account
|
|
quickstart_automation_by_snapshot(task_name, tp, task_snapshot)
|
|
|
|
|
|
@shared_task(
|
|
verbose_name=_('Clean historical accounts'),
|
|
description=_(
|
|
"""Each time an asset account is updated, a historical account is generated, so it is
|
|
necessary to clean up the asset account history. The system will clean up excess account
|
|
records at 2 a.m. daily based on the configuration in the "System settings - Features -
|
|
Account storage - Record limit"""
|
|
)
|
|
)
|
|
@register_as_period_task(crontab=CRONTAB_AT_AM_TWO)
|
|
@tmp_to_root_org()
|
|
def clean_historical_accounts():
|
|
from audits.signal_handlers import create_activities
|
|
print("Clean historical accounts start.")
|
|
if settings.HISTORY_ACCOUNT_CLEAN_LIMIT >= 999:
|
|
return
|
|
limit = settings.HISTORY_ACCOUNT_CLEAN_LIMIT
|
|
|
|
history_ids_to_be_deleted = []
|
|
history_model = Account.history.model
|
|
history_id_mapper = defaultdict(list)
|
|
|
|
ids = history_model.objects.values('id').annotate(count=Count('id')) \
|
|
.filter(count__gte=limit).values_list('id', flat=True)
|
|
|
|
if not ids:
|
|
return
|
|
|
|
for i in history_model.objects.filter(id__in=ids):
|
|
_id = str(i.id)
|
|
history_id_mapper[_id].append(i.history_id)
|
|
|
|
for history_ids in history_id_mapper.values():
|
|
history_ids_to_be_deleted.extend(history_ids[limit:])
|
|
history_qs = history_model.objects.filter(history_id__in=history_ids_to_be_deleted)
|
|
|
|
resource_ids = list(history_qs.values_list('history_id', flat=True))
|
|
history_qs.delete()
|
|
|
|
task_id = current_task.request.id if current_task else str(uuid.uuid4())
|
|
detail = gettext_noop('Remove historical accounts that are out of range.')
|
|
create_activities(resource_ids, detail, task_id, action=ActivityChoices.task, org_id='')
|