mirror of
https://github.com/jumpserver/jumpserver.git
synced 2025-06-04 12:49:37 +00:00
* [Update] 暂存,优化解决不了问题 * [Update] 待续(小白) * [Update] 修改asset user * [Update] 计划再次更改 * [Update] 修改asset user * [Update] 暂存与喜爱 * [Update] Add id in * [Update] 阶段性完成ops task该做 * [Update] 修改asset user api * [Update] 修改asset user 任务,查看认证等 * [Update] 基本完成asset user改造 * [Update] dynamic user only allow 1 * [Update] 修改asset user task * [Update] 修改node admin user task api * [Update] remove file header license * [Update] 添加sftp root * [Update] 暂存 * [Update] 暂存 * [Update] 修改翻译 * [Update] 修改系统用户改为同名后,用户名改为空 * [Update] 基本完成CAS调研 * [Update] 支持cas server * [Update] 支持cas server * [Update] 添加requirements * [Update] 为方便调试添加mysql ipython到包中 * [Update] 添加huaweiyun翻译 * [Update] 增加下载session 录像 * [Update] 只有第一次通知replay离线的使用方法 * [Update] 暂存一下 * [Bugfix] 获取系统用户信息报错 * [Bugfix] 修改system user info * [Update] 改成清理10天git status * [Update] 修改celery日志保留时间 * [Update]修复部分pip包依赖的版本不兼容问题 (#3672) * [Update] 修复用户更新页面会清空用户public_key的问题 * Fix broken dependencies Co-authored-by: BaiJiangJie <32935519+BaiJiangJie@users.noreply.github.com> * [Update] 修改获取系统用户auth info * [Update] Remove log * [Bugfix] 修复sftp home设置的bug * [Update] 授权的系统用户添加sftp root * [Update] 修改系统用户关联的用户 * [Update] 修改placeholder * [Update] 优化获取授权的系统用户 * [Update] 修改tasks * [Update] tree service update * [Update] 暂存 * [Update] 基本完成用户授权树和资产树改造 * [Update] Dashbaord perf * [update] Add huawei cloud sdk requirements * [Updte] 优化dashboard页面 * [Update] system user auth info 添加id * [Update] 修改系统用户serializer * [Update] 优化api * [Update] LDAP Test Util (#3720) * [Update] LDAPTestUtil 1 * [Update] LDAPTestUtil 2 * [Update] LDAPTestUtil 3 * [Update] LDAPTestUtil 4 * [Update] LDAPTestUtil 5 * [Update] LDAPTestUtil 6 * [Update] LDAPTestUtil 7 * [Update] session 已添加is success,并且添加display serializer * [Bugfix] 修复无法删除空节点的bug * [Update] 命令记录分组织显示 * [Update] Session is_success 添加迁移文件 * [Update] 批量命令添加org_id * [Update] 修复一些文案,修改不绑定MFA,不能ssh登录 * [Update] 修改replay api, 返回session信息 * [Update] 解决无效es导致访问命令记录页面失败的问题 * [Update] 拆分profile view * [Update] 修改一个翻译 * [Update] 修改aysnc api框架 * [Update] 命令列表添加risk level * [Update] 完成录像打包下载 * [Update] 更改登陆otp页面 * [Update] 修改command 存储redis_level * [Update] 修改翻译 * [Update] 修改系统用户的用户列表字段 * [Update] 使用新logo和统一Jumpserver为JumpServer * [Update] 优化cloud task * [Update] 统一period task * [Update] 统一period form serializer字段 * [Update] 修改period task * [Update] 修改资产网关信息 * [Update] 用户授权资产树资产信息添加domain * [Update] 修改翻译 * [Update] 测试可连接性 * 1.5.7 bai (#3764) * [Update] 修复index页面Bug;修复测试资产用户可连接性问题; * [Update] 修改测试资产用户可连接 * [Bugfix] 修复backends问题 * [Update] 修改marksafe依赖版本 * [Update] 修改测试资产用户可连接性 * [Update] 修改检测服务器性能时获取percent值 * [Update] 更新依赖boto3=1.12.14 Co-authored-by: Yanzhe Lee <lee.yanzhe@yanzhe.org> Co-authored-by: BaiJiangJie <32935519+BaiJiangJie@users.noreply.github.com> Co-authored-by: Bai <bugatti_it@163.com>
290 lines
8.8 KiB
Python
290 lines
8.8 KiB
Python
# ~*~ coding: utf-8 ~*~
|
||
|
||
from collections import namedtuple
|
||
from rest_framework import status
|
||
from rest_framework.serializers import ValidationError
|
||
from rest_framework.response import Response
|
||
from django.utils.translation import ugettext_lazy as _
|
||
from django.shortcuts import get_object_or_404, Http404
|
||
|
||
from common.utils import get_logger, get_object_or_none
|
||
from common.tree import TreeNodeSerializer
|
||
from orgs.mixins.api import OrgModelViewSet
|
||
from orgs.mixins import generics
|
||
from ..hands import IsOrgAdmin
|
||
from ..models import Node
|
||
from ..tasks import (
|
||
update_node_assets_hardware_info_manual,
|
||
test_node_assets_connectivity_manual,
|
||
)
|
||
from .. import serializers
|
||
|
||
|
||
logger = get_logger(__file__)
|
||
__all__ = [
|
||
'NodeViewSet', 'NodeChildrenApi', 'NodeAssetsApi',
|
||
'NodeAddAssetsApi', 'NodeRemoveAssetsApi', 'NodeReplaceAssetsApi',
|
||
'NodeAddChildrenApi', 'NodeListAsTreeApi',
|
||
'NodeChildrenAsTreeApi',
|
||
'NodeTaskCreateApi',
|
||
]
|
||
|
||
|
||
class NodeViewSet(OrgModelViewSet):
|
||
model = Node
|
||
filter_fields = ('value', 'key', 'id')
|
||
search_fields = ('value', )
|
||
permission_classes = (IsOrgAdmin,)
|
||
serializer_class = serializers.NodeSerializer
|
||
|
||
# 仅支持根节点指直接创建,子节点下的节点需要通过children接口创建
|
||
def perform_create(self, serializer):
|
||
child_key = Node.org_root().get_next_child_key()
|
||
serializer.validated_data["key"] = child_key
|
||
serializer.save()
|
||
|
||
def perform_update(self, serializer):
|
||
node = self.get_object()
|
||
if node.is_org_root() and node.value != serializer.validated_data['value']:
|
||
msg = _("You can't update the root node name")
|
||
raise ValidationError({"error": msg})
|
||
return super().perform_update(serializer)
|
||
|
||
def destroy(self, request, *args, **kwargs):
|
||
node = self.get_object()
|
||
if node.has_children_or_has_assets():
|
||
error = _("Deletion failed and the node contains children or assets")
|
||
return Response(data={'error': error}, status=status.HTTP_403_FORBIDDEN)
|
||
return super().destroy(request, *args, **kwargs)
|
||
|
||
|
||
class NodeListAsTreeApi(generics.ListAPIView):
|
||
"""
|
||
获取节点列表树
|
||
[
|
||
{
|
||
"id": "",
|
||
"name": "",
|
||
"pId": "",
|
||
"meta": ""
|
||
}
|
||
]
|
||
"""
|
||
model = Node
|
||
permission_classes = (IsOrgAdmin,)
|
||
serializer_class = TreeNodeSerializer
|
||
|
||
@staticmethod
|
||
def to_tree_queryset(queryset):
|
||
queryset = [node.as_tree_node() for node in queryset]
|
||
return queryset
|
||
|
||
def filter_queryset(self, queryset):
|
||
queryset = super().filter_queryset(queryset)
|
||
queryset = self.to_tree_queryset(queryset)
|
||
return queryset
|
||
|
||
|
||
class NodeChildrenApi(generics.ListCreateAPIView):
|
||
permission_classes = (IsOrgAdmin,)
|
||
serializer_class = serializers.NodeSerializer
|
||
instance = None
|
||
is_initial = False
|
||
|
||
def initial(self, request, *args, **kwargs):
|
||
self.instance = self.get_object()
|
||
return super().initial(request, *args, **kwargs)
|
||
|
||
def perform_create(self, serializer):
|
||
data = serializer.validated_data
|
||
_id = data.get("id")
|
||
value = data.get("value")
|
||
if not value:
|
||
value = self.instance.get_next_child_preset_name()
|
||
node = self.instance.create_child(value=value, _id=_id)
|
||
# 避免查询 full value
|
||
node._full_value = node.value
|
||
serializer.instance = node
|
||
|
||
def get_object(self):
|
||
pk = self.kwargs.get('pk') or self.request.query_params.get('id')
|
||
key = self.request.query_params.get("key")
|
||
if not pk and not key:
|
||
node = Node.org_root()
|
||
self.is_initial = True
|
||
return node
|
||
if pk:
|
||
node = get_object_or_404(Node, pk=pk)
|
||
else:
|
||
node = get_object_or_404(Node, key=key)
|
||
return node
|
||
|
||
def get_queryset(self):
|
||
query_all = self.request.query_params.get("all", "0") == "all"
|
||
if not self.instance:
|
||
return Node.objects.none()
|
||
|
||
if self.is_initial:
|
||
with_self = True
|
||
else:
|
||
with_self = False
|
||
|
||
if query_all:
|
||
queryset = self.instance.get_all_children(with_self=with_self)
|
||
else:
|
||
queryset = self.instance.get_children(with_self=with_self)
|
||
return queryset
|
||
|
||
|
||
class NodeChildrenAsTreeApi(NodeChildrenApi):
|
||
"""
|
||
节点子节点作为树返回,
|
||
[
|
||
{
|
||
"id": "",
|
||
"name": "",
|
||
"pId": "",
|
||
"meta": ""
|
||
}
|
||
]
|
||
|
||
"""
|
||
model = Node
|
||
serializer_class = TreeNodeSerializer
|
||
http_method_names = ['get']
|
||
|
||
def get_queryset(self):
|
||
queryset = super().get_queryset()
|
||
queryset = [node.as_tree_node() for node in queryset]
|
||
queryset = self.add_assets_if_need(queryset)
|
||
queryset = sorted(queryset)
|
||
return queryset
|
||
|
||
def add_assets_if_need(self, queryset):
|
||
include_assets = self.request.query_params.get('assets', '0') == '1'
|
||
if not include_assets:
|
||
return queryset
|
||
assets = self.instance.get_assets().only(
|
||
"id", "hostname", "ip", "os",
|
||
"org_id", "protocols",
|
||
)
|
||
for asset in assets:
|
||
queryset.append(asset.as_tree_node(self.instance))
|
||
return queryset
|
||
|
||
def check_need_refresh_nodes(self):
|
||
if self.request.query_params.get('refresh', '0') == '1':
|
||
Node.refresh_nodes()
|
||
|
||
|
||
class NodeAssetsApi(generics.ListAPIView):
|
||
permission_classes = (IsOrgAdmin,)
|
||
serializer_class = serializers.AssetSerializer
|
||
|
||
def get_queryset(self):
|
||
node_id = self.kwargs.get('pk')
|
||
query_all = self.request.query_params.get('all')
|
||
instance = get_object_or_404(Node, pk=node_id)
|
||
if query_all:
|
||
return instance.get_all_assets()
|
||
else:
|
||
return instance.get_assets()
|
||
|
||
|
||
class NodeAddChildrenApi(generics.UpdateAPIView):
|
||
model = Node
|
||
permission_classes = (IsOrgAdmin,)
|
||
serializer_class = serializers.NodeAddChildrenSerializer
|
||
instance = None
|
||
|
||
def put(self, request, *args, **kwargs):
|
||
instance = self.get_object()
|
||
nodes_id = request.data.get("nodes")
|
||
children = [get_object_or_none(Node, id=pk) for pk in nodes_id]
|
||
for node in children:
|
||
if not node:
|
||
continue
|
||
node.parent = instance
|
||
return Response("OK")
|
||
|
||
|
||
class NodeAddAssetsApi(generics.UpdateAPIView):
|
||
model = Node
|
||
serializer_class = serializers.NodeAssetsSerializer
|
||
permission_classes = (IsOrgAdmin,)
|
||
instance = None
|
||
|
||
def perform_update(self, serializer):
|
||
assets = serializer.validated_data.get('assets')
|
||
instance = self.get_object()
|
||
instance.assets.add(*tuple(assets))
|
||
|
||
|
||
class NodeRemoveAssetsApi(generics.UpdateAPIView):
|
||
model = Node
|
||
serializer_class = serializers.NodeAssetsSerializer
|
||
permission_classes = (IsOrgAdmin,)
|
||
instance = None
|
||
|
||
def perform_update(self, serializer):
|
||
assets = serializer.validated_data.get('assets')
|
||
instance = self.get_object()
|
||
if instance != Node.org_root():
|
||
instance.assets.remove(*tuple(assets))
|
||
else:
|
||
assets = [asset for asset in assets if asset.nodes.count() > 1]
|
||
instance.assets.remove(*tuple(assets))
|
||
|
||
|
||
class NodeReplaceAssetsApi(generics.UpdateAPIView):
|
||
model = Node
|
||
serializer_class = serializers.NodeAssetsSerializer
|
||
permission_classes = (IsOrgAdmin,)
|
||
instance = None
|
||
|
||
def perform_update(self, serializer):
|
||
assets = serializer.validated_data.get('assets')
|
||
instance = self.get_object()
|
||
for asset in assets:
|
||
asset.nodes.set([instance])
|
||
|
||
|
||
class NodeTaskCreateApi(generics.CreateAPIView):
|
||
model = Node
|
||
serializer_class = serializers.NodeTaskSerializer
|
||
permission_classes = (IsOrgAdmin,)
|
||
|
||
def get_object(self):
|
||
node_id = self.kwargs.get('pk')
|
||
node = get_object_or_none(self.model, id=node_id)
|
||
return node
|
||
|
||
@staticmethod
|
||
def set_serializer_data(s, task):
|
||
data = getattr(s, '_data', {})
|
||
data["task"] = task.id
|
||
setattr(s, '_data', data)
|
||
|
||
@staticmethod
|
||
def refresh_nodes_cache():
|
||
Node.refresh_nodes()
|
||
Task = namedtuple('Task', ['id'])
|
||
task = Task(id="0")
|
||
return task
|
||
|
||
def perform_create(self, serializer):
|
||
action = serializer.validated_data["action"]
|
||
node = self.get_object()
|
||
if action == "refresh_cache" and node is None:
|
||
task = self.refresh_nodes_cache()
|
||
self.set_serializer_data(serializer, task)
|
||
return
|
||
if node is None:
|
||
raise Http404()
|
||
if action == "refresh":
|
||
task = update_node_assets_hardware_info_manual.delay(node)
|
||
else:
|
||
task = test_node_assets_connectivity_manual.delay(node)
|
||
self.set_serializer_data(serializer, task)
|
||
|