mirror of
https://github.com/jumpserver/jumpserver.git
synced 2026-07-16 17:15:18 +00:00
f235e20153
* [Feature] 1. perms actions - 添加 Action Model * [Feature] 2. perms actions - 添加 Action API * [Feature] 3. perms actions - 授权规则: 添加actions字段 * [Feature] 4. perms actions - 授权规则创建页面: 设置 actions 默认 all * [Feature] 5. perms actions - 资产授权工具: 动态给system_user设置actions属性; 修改授权相关的API-serializer类: 添加actions字段值 * [Feature] 6. perms actions - 更新API(用户使用系统用户连接资产时权限校验): 添加actions校验 * [Feature] 7. perms actions - 迁移文件中为已经存在的perms添加默认的action * [Feature] 8. perms actions - 创建授权规则时设置默认action(如果actions字段值为空) * [Feature] 9. check actions - 修改校验用户资产权限API逻辑(添加actions校验) * [Feature] 10. check actions - 修改注释 * [Feature] 11. check actions - 添加API: 获取用户指定资产和系统用户被授权的actions * [Feature] 12. check actions - 添加翻译信息
77 lines
3.3 KiB
Python
77 lines
3.3 KiB
Python
# coding:utf-8
|
|
|
|
from django.urls import path
|
|
from rest_framework import routers
|
|
from .. import api
|
|
|
|
app_name = 'perms'
|
|
|
|
router = routers.DefaultRouter()
|
|
router.register('actions', api.ActionViewSet, 'action')
|
|
router.register('asset-permissions', api.AssetPermissionViewSet, 'asset-permission')
|
|
|
|
urlpatterns = [
|
|
# 查询某个用户授权的资产和资产组
|
|
path('user/<uuid:pk>/assets/',
|
|
api.UserGrantedAssetsApi.as_view(), name='user-assets'),
|
|
path('user/assets/', api.UserGrantedAssetsApi.as_view(),
|
|
name='my-assets'),
|
|
path('user/<uuid:pk>/nodes/',
|
|
api.UserGrantedNodesApi.as_view(), name='user-nodes'),
|
|
path('user/nodes/', api.UserGrantedNodesApi.as_view(),
|
|
name='my-nodes'),
|
|
path('user/nodes/children/', api.UserGrantedNodeChildrenApi.as_view(),
|
|
name='my-node-children'),
|
|
path('user/<uuid:pk>/nodes/<uuid:node_id>/assets/',
|
|
api.UserGrantedNodeAssetsApi.as_view(), name='user-node-assets'),
|
|
path('user/nodes/<uuid:node_id>/assets/',
|
|
api.UserGrantedNodeAssetsApi.as_view(), name='my-node-assets'),
|
|
path('user/<uuid:pk>/nodes-assets/',
|
|
api.UserGrantedNodesWithAssetsApi.as_view(), name='user-nodes-assets'),
|
|
path('user/nodes-assets/', api.UserGrantedNodesWithAssetsApi.as_view(),
|
|
name='my-nodes-assets'),
|
|
path('user/<uuid:pk>/nodes-assets/tree/',
|
|
api.UserGrantedNodesWithAssetsAsTreeApi.as_view(), name='user-nodes-assets-as-tree'),
|
|
path('user/nodes-assets/tree/', api.UserGrantedNodesWithAssetsAsTreeApi.as_view(),
|
|
name='my-nodes-assets-as-tree'),
|
|
|
|
|
|
# 查询某个用户组授权的资产和资产组
|
|
path('user-group/<uuid:pk>/assets/',
|
|
api.UserGroupGrantedAssetsApi.as_view(), name='user-group-assets'),
|
|
path('user-group/<uuid:pk>/nodes/',
|
|
api.UserGroupGrantedNodesApi.as_view(), name='user-group-nodes'),
|
|
path('user-group/<uuid:pk>/nodes-assets/',
|
|
api.UserGroupGrantedNodesWithAssetsApi.as_view(),
|
|
name='user-group-nodes-assets'),
|
|
path('user-group/<uuid:pk>/nodes-assets/tree/',
|
|
api.UserGroupGrantedNodesWithAssetsAsTreeApi.as_view(),
|
|
name='user-group-nodes-assets-as-tree'),
|
|
path('user-group/<uuid:pk>/nodes/<uuid:node_id>/assets/',
|
|
api.UserGroupGrantedNodeAssetsApi.as_view(),
|
|
name='user-group-node-assets'),
|
|
|
|
# 用户和资产授权变更
|
|
path('asset-permissions/<uuid:pk>/user/remove/',
|
|
api.AssetPermissionRemoveUserApi.as_view(),
|
|
name='asset-permission-remove-user'),
|
|
path('asset-permissions/<uuid:pk>/user/add/',
|
|
api.AssetPermissionAddUserApi.as_view(),
|
|
name='asset-permission-add-user'),
|
|
path('asset-permissions/<uuid:pk>/asset/remove/',
|
|
api.AssetPermissionRemoveAssetApi.as_view(),
|
|
name='asset-permission-remove-asset'),
|
|
path('asset-permissions/<uuid:pk>/asset/add/',
|
|
api.AssetPermissionAddAssetApi.as_view(),
|
|
name='asset-permission-add-asset'),
|
|
|
|
# 验证用户是否有某个资产和系统用户的权限
|
|
path('asset-permission/user/validate/', api.ValidateUserAssetPermissionApi.as_view(),
|
|
name='validate-user-asset-permission'),
|
|
path('asset-permission/user/actions/', api.GetUserAssetPermissionActionsApi.as_view(),
|
|
name='get-user-asset-permission-actions'),
|
|
]
|
|
|
|
urlpatterns += router.urls
|
|
|