mirror of
https://github.com/jumpserver/jumpserver.git
synced 2026-04-08 21:33:26 +00:00
* [Update] 暂存,优化解决不了问题 * [Update] 待续(小白) * [Update] 修改asset user * [Update] 计划再次更改 * [Update] 修改asset user * [Update] 暂存与喜爱 * [Update] Add id in * [Update] 阶段性完成ops task该做 * [Update] 修改asset user api * [Update] 修改asset user 任务,查看认证等 * [Update] 基本完成asset user改造 * [Update] dynamic user only allow 1 * [Update] 修改asset user task * [Update] 修改node admin user task api * [Update] remove file header license * [Update] 添加sftp root * [Update] 暂存 * [Update] 暂存 * [Update] 修改翻译 * [Update] 修改系统用户改为同名后,用户名改为空 * [Update] 基本完成CAS调研 * [Update] 支持cas server * [Update] 支持cas server * [Update] 添加requirements * [Update] 为方便调试添加mysql ipython到包中 * [Update] 添加huaweiyun翻译 * [Update] 增加下载session 录像 * [Update] 只有第一次通知replay离线的使用方法 * [Update] 暂存一下 * [Bugfix] 获取系统用户信息报错 * [Bugfix] 修改system user info * [Update] 改成清理10天git status * [Update] 修改celery日志保留时间 * [Update]修复部分pip包依赖的版本不兼容问题 (#3672) * [Update] 修复用户更新页面会清空用户public_key的问题 * Fix broken dependencies Co-authored-by: BaiJiangJie <32935519+BaiJiangJie@users.noreply.github.com> * [Update] 修改获取系统用户auth info * [Update] Remove log * [Bugfix] 修复sftp home设置的bug * [Update] 授权的系统用户添加sftp root * [Update] 修改系统用户关联的用户 * [Update] 修改placeholder * [Update] 优化获取授权的系统用户 * [Update] 修改tasks * [Update] tree service update * [Update] 暂存 * [Update] 基本完成用户授权树和资产树改造 * [Update] Dashbaord perf * [update] Add huawei cloud sdk requirements * [Updte] 优化dashboard页面 * [Update] system user auth info 添加id * [Update] 修改系统用户serializer * [Update] 优化api * [Update] LDAP Test Util (#3720) * [Update] LDAPTestUtil 1 * [Update] LDAPTestUtil 2 * [Update] LDAPTestUtil 3 * [Update] LDAPTestUtil 4 * [Update] LDAPTestUtil 5 * [Update] LDAPTestUtil 6 * [Update] LDAPTestUtil 7 * [Update] session 已添加is success,并且添加display serializer * [Bugfix] 修复无法删除空节点的bug * [Update] 命令记录分组织显示 * [Update] Session is_success 添加迁移文件 * [Update] 批量命令添加org_id * [Update] 修复一些文案,修改不绑定MFA,不能ssh登录 * [Update] 修改replay api, 返回session信息 * [Update] 解决无效es导致访问命令记录页面失败的问题 * [Update] 拆分profile view * [Update] 修改一个翻译 * [Update] 修改aysnc api框架 * [Update] 命令列表添加risk level * [Update] 完成录像打包下载 * [Update] 更改登陆otp页面 * [Update] 修改command 存储redis_level * [Update] 修改翻译 * [Update] 修改系统用户的用户列表字段 * [Update] 使用新logo和统一Jumpserver为JumpServer * [Update] 优化cloud task * [Update] 统一period task * [Update] 统一period form serializer字段 * [Update] 修改period task * [Update] 修改资产网关信息 * [Update] 用户授权资产树资产信息添加domain * [Update] 修改翻译 * [Update] 测试可连接性 * 1.5.7 bai (#3764) * [Update] 修复index页面Bug;修复测试资产用户可连接性问题; * [Update] 修改测试资产用户可连接 * [Bugfix] 修复backends问题 * [Update] 修改marksafe依赖版本 * [Update] 修改测试资产用户可连接性 * [Update] 修改检测服务器性能时获取percent值 * [Update] 更新依赖boto3=1.12.14 Co-authored-by: Yanzhe Lee <lee.yanzhe@yanzhe.org> Co-authored-by: BaiJiangJie <32935519+BaiJiangJie@users.noreply.github.com> Co-authored-by: Bai <bugatti_it@163.com>
163 lines
4.8 KiB
Python
163 lines
4.8 KiB
Python
# -*- coding: utf-8 -*-
|
|
#
|
|
from itertools import chain, groupby
|
|
from django.core.exceptions import MultipleObjectsReturned, ObjectDoesNotExist
|
|
|
|
from orgs.utils import current_org
|
|
from common.utils import get_logger, lazyproperty
|
|
from common.struct import QuerySetChain
|
|
|
|
from ..models import AssetUser, AuthBook
|
|
from .db import (
|
|
AuthbookBackend, SystemUserBackend, AdminUserBackend,
|
|
DynamicSystemUserBackend
|
|
)
|
|
|
|
logger = get_logger(__name__)
|
|
|
|
|
|
class NotSupportError(Exception):
|
|
pass
|
|
|
|
|
|
class AssetUserQueryset:
|
|
ObjectDoesNotExist = ObjectDoesNotExist
|
|
MultipleObjectsReturned = MultipleObjectsReturned
|
|
|
|
def __init__(self, backends=()):
|
|
self.backends = backends
|
|
self._distinct_queryset = None
|
|
|
|
def backends_queryset(self):
|
|
return [b.get_queryset() for b in self.backends]
|
|
|
|
@lazyproperty
|
|
def backends_counts(self):
|
|
return [b.count() for b in self.backends]
|
|
|
|
def filter(self, hostname=None, ip=None, username=None,
|
|
assets=None, asset=None, node=None,
|
|
id=None, prefer_id=None, prefer=None, id__in=None):
|
|
if not assets and asset:
|
|
assets = [asset]
|
|
|
|
kwargs = dict(
|
|
hostname=hostname, ip=ip, username=username,
|
|
assets=assets, node=node, prefer=prefer, prefer_id=prefer_id,
|
|
id__in=id__in, union_id=id,
|
|
)
|
|
logger.debug("Filter: {}".format(kwargs))
|
|
backends = []
|
|
for backend in self.backends:
|
|
clone = backend.filter(**kwargs)
|
|
backends.append(clone)
|
|
return self._clone(backends)
|
|
|
|
def _clone(self, backends=None):
|
|
if backends is None:
|
|
backends = self.backends
|
|
return self.__class__(backends)
|
|
|
|
def search(self, item):
|
|
backends = []
|
|
for backend in self.backends:
|
|
new = backend.search(item)
|
|
backends.append(new)
|
|
return self._clone(backends)
|
|
|
|
def distinct(self):
|
|
logger.debug("Distinct asset user queryset")
|
|
queryset_chain = chain(*(backend.get_queryset() for backend in self.backends))
|
|
queryset_sorted = sorted(
|
|
queryset_chain,
|
|
key=lambda item: (item["asset_username"], item["score"]),
|
|
reverse=True,
|
|
)
|
|
results = groupby(queryset_sorted, key=lambda item: item["asset_username"])
|
|
final = [next(result[1]) for result in results]
|
|
self._distinct_queryset = final
|
|
return self
|
|
|
|
def get(self, latest=False, **kwargs):
|
|
queryset = self.filter(**kwargs)
|
|
if latest:
|
|
queryset = queryset.distinct()
|
|
queryset = list(queryset)
|
|
count = len(queryset)
|
|
if count == 1:
|
|
data = queryset[0]
|
|
return data
|
|
elif count > 1:
|
|
msg = 'Should return 1 record, but get {}'.format(count)
|
|
raise MultipleObjectsReturned(msg)
|
|
else:
|
|
msg = 'No record found(org is {})'.format(current_org.name)
|
|
raise ObjectDoesNotExist(msg)
|
|
|
|
def get_latest(self, **kwargs):
|
|
return self.get(latest=True, **kwargs)
|
|
|
|
@staticmethod
|
|
def to_asset_user(data):
|
|
obj = AssetUser()
|
|
for k, v in data.items():
|
|
setattr(obj, k, v)
|
|
return obj
|
|
|
|
@property
|
|
def queryset(self):
|
|
if self._distinct_queryset is not None:
|
|
return self._distinct_queryset
|
|
return QuerySetChain(self.backends_queryset())
|
|
|
|
def count(self):
|
|
if self._distinct_queryset is not None:
|
|
return len(self._distinct_queryset)
|
|
else:
|
|
return sum(self.backends_counts)
|
|
|
|
def __getitem__(self, ndx):
|
|
return self.queryset.__getitem__(ndx)
|
|
|
|
def __iter__(self):
|
|
self._data = iter(self.queryset)
|
|
return self
|
|
|
|
def __next__(self):
|
|
return self.to_asset_user(next(self._data))
|
|
|
|
|
|
class AssetUserManager:
|
|
support_backends = (
|
|
('db', AuthbookBackend),
|
|
('system_user', SystemUserBackend),
|
|
('admin_user', AdminUserBackend),
|
|
('system_user_dynamic', DynamicSystemUserBackend),
|
|
)
|
|
|
|
def __init__(self):
|
|
self.backends = [backend() for name, backend in self.support_backends]
|
|
self._queryset = AssetUserQueryset(self.backends)
|
|
|
|
def all(self):
|
|
return self._queryset
|
|
|
|
def delete(self, obj):
|
|
name_backends_map = dict(self.support_backends)
|
|
backend_name = obj.backend
|
|
backend_cls = name_backends_map.get(backend_name)
|
|
union_id = obj.union_id
|
|
if backend_cls:
|
|
backend_cls().delete(union_id)
|
|
else:
|
|
raise ObjectDoesNotExist("Not backend found")
|
|
|
|
@staticmethod
|
|
def create(**kwargs):
|
|
authbook = AuthBook(**kwargs)
|
|
authbook.save()
|
|
return authbook
|
|
|
|
def __getattr__(self, item):
|
|
return getattr(self._queryset, item)
|