mirror of
https://github.com/jumpserver/jumpserver.git
synced 2025-06-04 04:39:38 +00:00
03afa4f974
* fix: token 系统用户增加 protocol * fix: 修复清除orphan session时同时清除对应的 session_task * perf: 修改 connection token api * fix: 修复无法获取系统角色绑定的问题 * perf: 增加 db terminal 及 magnus 组件 * perf: 修改 migrations * fix: 修复AUTHENTICATION_BACKENDS相关的逻辑 * fix: 修改判断backend认证逻辑 * fix: 修复资产账号查看密码跳过mfa * fix: 修复用户组授权权限错误 * feat: 支持COS对象存储 * feat: 升级依赖 jms_storage==0.0.42 * fix: 修复 koko api 问题 * feat: 修改存储翻译信息 * perf: 修改 ticket 权限 * fix: 修复获取资产授权系统用户 get_queryset * perf: 抽取 ticket * perf: 修改 cmd filter 的权限 * fix: 修改 ticket perm * fix: 修复oidc依赖问题 Co-authored-by: Eric <xplzv@126.com> Co-authored-by: ibuler <ibuler@qq.com> Co-authored-by: 小冯 <xiaofeng@xiaofengdeMacBook-Pro.local> Co-authored-by: feng626 <1304903146@qq.com>
76 lines
2.8 KiB
Python
76 lines
2.8 KiB
Python
from django.db import models
|
|
from django.utils.translation import ugettext_lazy as _
|
|
|
|
|
|
class Scope(models.TextChoices):
|
|
system = 'system', _('System')
|
|
org = 'org', _('Organization')
|
|
|
|
|
|
exclude_permissions = (
|
|
# ('App', 'Model', 'Action', 'Resource') Model 和 Resource 可能不同
|
|
# users.add_user
|
|
('auth', '*', '*', '*'),
|
|
('authentication', 'loginconfirmsetting', '*', '*'),
|
|
('captcha', '*', '*', '*'),
|
|
('contenttypes', '*', '*', '*'),
|
|
('django_cas_ng', '*', '*', '*'),
|
|
('django_celery_beat', '*', '*', '*'),
|
|
('admin', '*', '*', '*'),
|
|
('sessions', '*', '*', '*'),
|
|
('notifications', '*', '*', '*'),
|
|
|
|
('applications', 'historicalaccount', '*', '*'),
|
|
('applications', 'databaseapp', '*', '*'),
|
|
('applications', 'k8sapp', '*', '*'),
|
|
('applications', 'remoteapp', '*', '*'),
|
|
('assets', 'adminuser', '*', '*'),
|
|
('assets', 'assetgroup', '*', '*'),
|
|
('assets', 'cluster', '*', '*'),
|
|
('assets', 'favoriteasset', '*', '*'),
|
|
('assets', 'historicalauthbook', '*', '*'),
|
|
('assets', 'assetuser', '*', '*'),
|
|
('authentication', 'privatetoken', '*', '*'),
|
|
('perms', 'databaseapppermission', '*', '*'),
|
|
('perms', 'k8sapppermission', '*', '*'),
|
|
('perms', 'remoteapppermission', '*', '*'),
|
|
('perms', 'userassetgrantedtreenoderelation', '*', '*'),
|
|
('perms', 'usergrantedmappingnode', '*', '*'),
|
|
('perms', 'permnode', '*', '*'),
|
|
('perms', 'rebuildusertreetask', '*', '*'),
|
|
('rbac', 'contenttype', '*', '*'),
|
|
('rbac', 'permission', 'add,delete,change', 'permission'),
|
|
('ops', 'adhoc', '*', '*'),
|
|
('ops', 'adhocexecution', '*', '*'),
|
|
('ops', 'celerytask', '*', '*'),
|
|
('ops', 'task', 'add,change', 'task'),
|
|
('orgs', 'organizationmember', '*', '*'),
|
|
('settings', 'setting', 'add,delete', 'setting'),
|
|
('audits', 'operatelog', 'add,delete,change', 'operatelog'),
|
|
('audits', 'passwordchangelog', 'add,change,delete', 'passwordchangelog'),
|
|
('audits', 'userloginlog', 'change,delete,change', 'userloginlog'),
|
|
('audits', 'ftplog', 'change,delete', 'ftplog'),
|
|
('terminal', 'session', 'delete', 'session'),
|
|
('tickets', 'ticket', '*', '*'),
|
|
('users', 'userpasswordhistory', '*', '*'),
|
|
('xpack', 'interface', 'add,delete', 'interface'),
|
|
)
|
|
|
|
|
|
only_system_permissions = (
|
|
('users', 'user', 'delete', 'user'),
|
|
('rbac', 'role', 'delete,add,change', 'role'),
|
|
('rbac', 'systemrole', '*', '*'),
|
|
('rbac', 'rolebinding', '*', '*'),
|
|
('rbac', 'systemrolebinding', '*', '*'),
|
|
('orgs', 'organization', '*', '*'),
|
|
('xpack', 'license', '*', '*'),
|
|
('settings', 'setting', '*', '*'),
|
|
)
|
|
|
|
only_org_permissions = (
|
|
)
|
|
|
|
system_exclude_permissions = list(exclude_permissions) + list(only_org_permissions)
|
|
org_exclude_permissions = list(exclude_permissions) + list(only_system_permissions)
|