mirror of
https://github.com/jumpserver/jumpserver.git
synced 2025-05-20 14:00:05 +00:00
a2376d3afd
* [Update] 超级管理员可创建超级审计员并可设置审计员为组织审计员 * [Update] 修改小问题 * [Update] 修改普通用户角色可以是组织审计员 * [Update] 更改组织审计员切换组织问题 * [Update] 修改小问题 * [Update] 普通用户是组织审计员的页面左侧栏显示 * [Update] 修改删除权限问题和组织显示问题 * [Update] 优化逻辑 * [Update] 优化类名 * [Update] 修改小问题 * [Update] 优化逻辑 * [Update] 优化切换到某一个组织逻辑 * [Update] 修改用户详情页的 删除/更新 按钮是否可点击 * [Update] 优化代码 * [Update] 组织管理列表增加审计员显示 * [Update] 优化代码细节 * [Update] 优化权限类逻辑 * [Update] 优化导航菜单控制 * [Update] 优化页面控制逻辑 * [Update] 修改变量名错误问题 * [Update] 修改页面上的小问题 * [Update] 审计员或组织审计员能够更新个人部分信息 * [Update] 用户名为admin的用户不能被删除 * [Update] 不同用户在不同组织下扮演不同角色的权限不同，为了避免切换组织时出现403,重定向到index * [Update] 一个用户在同一个组织既是管理员又是审计员，隐藏个人信息模块，仅当是审计员，在当前组织显示个人信息模块 * [Update] 修改方法命名 * [Update] 优化代码细节 * [Update] 修改命令执行列表方法 * [Update] 优化用户之间操作的权限逻辑；添加 UserModel 的 property 属性；修改 Organization 的 related name 名称； * [Update] 修改OrgProcessor Anonymous问题 * [Update] 修改用户序列类校验组织和转换raw密码的逻辑
109 lines
3.6 KiB
Python
109 lines
3.6 KiB
Python
# -*- coding: utf-8 -*-
|
|
#
|
|
import time
|
|
from django.utils import timezone
|
|
from django.shortcuts import HttpResponse
|
|
from rest_framework import viewsets
|
|
from rest_framework import generics
|
|
from rest_framework.response import Response
|
|
from django.template import loader
|
|
|
|
|
|
from common.permissions import IsOrgAdminOrAppUser, IsOrgAuditor
|
|
from common.utils import get_logger
|
|
from ..backends import (
|
|
get_command_storage, get_multi_command_storage,
|
|
SessionCommandSerializer,
|
|
)
|
|
|
|
logger = get_logger(__name__)
|
|
__all__ = ['CommandViewSet', 'CommandExportApi']
|
|
|
|
|
|
class CommandQueryMixin:
|
|
command_store = get_command_storage()
|
|
permission_classes = [IsOrgAdminOrAppUser | IsOrgAuditor]
|
|
filter_fields = [
|
|
"asset", "system_user", "user", "session",
|
|
]
|
|
default_days_ago = 5
|
|
|
|
def get_queryset(self):
|
|
date_from, date_to = self.get_date_range()
|
|
q = self.request.query_params
|
|
multi_command_storage = get_multi_command_storage()
|
|
queryset = multi_command_storage.filter(
|
|
date_from=date_from, date_to=date_to, input=q.get("input"),
|
|
user=q.get("user"), asset=q.get("asset"),
|
|
system_user=q.get("system_user")
|
|
)
|
|
return queryset
|
|
|
|
def filter_queryset(self, queryset):
|
|
return queryset
|
|
|
|
def get_filter_fields(self):
|
|
fields = self.filter_fields
|
|
fields.extend(["date_from", "date_to"])
|
|
return fields
|
|
|
|
def get_date_range(self):
|
|
now = timezone.now()
|
|
days_ago = now - timezone.timedelta(days=self.default_days_ago)
|
|
default_start_st = days_ago.timestamp()
|
|
default_end_st = now.timestamp()
|
|
query_params = self.request.query_params
|
|
date_from_st = query_params.get("date_from") or default_start_st
|
|
date_to_st = query_params.get("date_to") or default_end_st
|
|
return float(date_from_st), float(date_to_st)
|
|
|
|
|
|
class CommandViewSet(CommandQueryMixin, viewsets.ModelViewSet):
|
|
"""接受app发送来的command log, 格式如下
|
|
{
|
|
"user": "admin",
|
|
"asset": "localhost",
|
|
"system_user": "web",
|
|
"session": "xxxxxx",
|
|
"input": "whoami",
|
|
"output": "d2hvbWFp", # base64.b64encode(s)
|
|
"timestamp": 1485238673.0
|
|
}
|
|
|
|
"""
|
|
command_store = get_command_storage()
|
|
serializer_class = SessionCommandSerializer
|
|
|
|
def create(self, request, *args, **kwargs):
|
|
serializer = self.serializer_class(data=request.data, many=True)
|
|
if serializer.is_valid():
|
|
ok = self.command_store.bulk_save(serializer.validated_data)
|
|
if ok:
|
|
return Response("ok", status=201)
|
|
else:
|
|
return Response("Save error", status=500)
|
|
else:
|
|
msg = "Command not valid: {}".format(serializer.errors)
|
|
logger.error(msg)
|
|
return Response({"msg": msg}, status=401)
|
|
|
|
|
|
class CommandExportApi(CommandQueryMixin, generics.ListAPIView):
|
|
serializer_class = SessionCommandSerializer
|
|
|
|
def list(self, request, *args, **kwargs):
|
|
queryset = self.filter_queryset(self.get_queryset())
|
|
|
|
template = 'terminal/command_report.html'
|
|
context = {
|
|
'queryset': queryset,
|
|
'total_count': len(queryset),
|
|
'now': time.time(),
|
|
}
|
|
content = loader.render_to_string(template, context, request)
|
|
content_type = 'application/octet-stream'
|
|
response = HttpResponse(content, content_type)
|
|
filename = 'command-report-{}.html'.format(int(time.time()))
|
|
response['Content-Disposition'] = 'attachment; filename="%s"' % filename
|
|
return response
|