mirror of
https://github.com/jumpserver/jumpserver.git
synced 2026-01-15 14:47:24 +00:00
* feat: 添加 RBAC 应用模块 * feat: 添加 RBAC Model、API * feat: 添加 RBAC Model、API 2 * feat: 添加 RBAC Model、API 3 * feat: 添加 RBAC Model、API 4 * feat: RBAC * feat: RBAC * feat: RBAC * feat: RBAC * feat: RBAC * feat: RBAC 整理权限位 * feat: RBAC 整理权限位2 * feat: RBAC 整理权限位2 * feat: RBAC 整理权限位 * feat: RBAC 添加默认角色 * feat: RBAC 添加迁移文件;迁移用户角色->用户角色绑定 * feat: RBAC 添加迁移文件;迁移用户角色->用户角色绑定 * feat: RBAC 修改用户模块API * feat: RBAC 添加组织模块迁移文件 & 修改组织模块API * feat: RBAC 添加组织模块迁移文件 & 修改组织模块API * feat: RBAC 修改用户角色属性的使用 * feat: RBAC No.1 * xxx * perf: 暂存 * perf: ... * perf(rbac): 添加 perms 到 profile serializer 中 * stash * perf: 使用init * perf: 修改migrations * perf: rbac * stash * stash * pref: 修改rbac * stash it * stash: 先去修复其他bug * perf: 修改 role 添加 users * pref: 修改 RBAC Model * feat: 添加权限的 tree api * stash: 暂存一下 * stash: 暂存一下 * perf: 修改 model verbose name * feat: 添加model各种 verbose name * perf: 生成 migrations * perf: 优化权限位 * perf: 添加迁移脚本 * feat: 添加组织角色迁移 * perf: 添加迁移脚本 * stash * perf: 添加migrateion * perf: 暂存一下 * perf: 修改rbac * perf: stash it * fix: 迁移冲突 * fix: 迁移冲突 * perf: 暂存一下 * perf: 修改 rbac 逻辑 * stash: 暂存一下 * perf: 修改内置角色 * perf: 解决 root 组织的问题 * perf: stash it * perf: 优化 rbac * perf: 优化 rolebinding 处理 * perf: 完成用户离开组织的问题 * perf: 暂存一下 * perf: 修改翻译 * perf: 去掉了 IsSuperUser * perf: IsAppUser 去掉完成 * perf: 修改 connection token 的权限 * perf: 去掉导入的问题 * perf: perms define 格式,修改 app 用户 的全新啊 * perf: 修改 permission * perf: 去掉一些 org admin * perf: 去掉部分 org admin * perf: 再去掉点 org admin role * perf: 再去掉部分 org admin * perf: user 角色搜索 * perf: 去掉很多 js * perf: 添加权限位 * perf: 修改权限 * perf: 去掉一个 todo * merge: with dev * fix: 修复冲突 Co-authored-by: Bai <bugatti_it@163.com> Co-authored-by: Michael Bai <baijiangjie@gmail.com> Co-authored-by: ibuler <ibuler@qq.com>
100 lines
3.2 KiB
Python
100 lines
3.2 KiB
Python
from django.db.transaction import on_commit
|
|
from orgs.models import Organization
|
|
from orgs.tasks import refresh_org_cache_task
|
|
from orgs.utils import current_org, tmp_to_org
|
|
|
|
from common.cache import Cache, IntegerField
|
|
from common.utils import get_logger
|
|
from users.models import UserGroup, User
|
|
from assets.models import Node, SystemUser, Domain, Gateway, Asset
|
|
from terminal.models import Session
|
|
from applications.models import Application
|
|
from perms.models import AssetPermission, ApplicationPermission
|
|
|
|
logger = get_logger(__file__)
|
|
|
|
|
|
class OrgRelatedCache(Cache):
|
|
|
|
def __init__(self):
|
|
super().__init__()
|
|
self.current_org = Organization.get_instance(current_org.id)
|
|
|
|
def get_current_org(self):
|
|
"""
|
|
暴露给子类控制组织的回调
|
|
1. 在交互式环境下能控制组织
|
|
2. 在 celery 任务下能控制组织
|
|
"""
|
|
return self.current_org
|
|
|
|
def compute_values(self, *fields):
|
|
with tmp_to_org(self.get_current_org()):
|
|
return super().compute_values(*fields)
|
|
|
|
def refresh_async(self, *fields):
|
|
"""
|
|
在事务提交之后再发送信号,防止因事务的隔离性导致未获得最新的数据
|
|
"""
|
|
def func():
|
|
logger.debug(f'CACHE: Send refresh task {self}.{fields}')
|
|
refresh_org_cache_task.delay(self, *fields)
|
|
on_commit(func)
|
|
|
|
def expire(self, *fields):
|
|
def func():
|
|
super(OrgRelatedCache, self).expire(*fields)
|
|
on_commit(func)
|
|
|
|
|
|
class OrgResourceStatisticsCache(OrgRelatedCache):
|
|
users_amount = IntegerField()
|
|
groups_amount = IntegerField(queryset=UserGroup.objects)
|
|
|
|
assets_amount = IntegerField()
|
|
nodes_amount = IntegerField(queryset=Node.objects)
|
|
admin_users_amount = IntegerField()
|
|
system_users_amount = IntegerField()
|
|
domains_amount = IntegerField(queryset=Domain.objects)
|
|
gateways_amount = IntegerField(queryset=Gateway.objects)
|
|
|
|
applications_amount = IntegerField(queryset=Application.objects)
|
|
|
|
asset_perms_amount = IntegerField(queryset=AssetPermission.objects)
|
|
app_perms_amount = IntegerField(queryset=ApplicationPermission.objects)
|
|
|
|
total_count_online_users = IntegerField()
|
|
total_count_online_sessions = IntegerField()
|
|
|
|
def __init__(self, org):
|
|
super().__init__()
|
|
self.org = org
|
|
|
|
def get_key_suffix(self):
|
|
return f'org_{self.org.id}'
|
|
|
|
def get_current_org(self):
|
|
return self.org
|
|
|
|
def compute_admin_users_amount(self):
|
|
return SystemUser.objects.filter(type=SystemUser.Type.admin).count()
|
|
|
|
def compute_system_users_amount(self):
|
|
return SystemUser.objects.filter(type=SystemUser.Type.common).count()
|
|
|
|
def compute_users_amount(self):
|
|
amount = User.get_org_users(self.org).count()
|
|
return amount
|
|
|
|
def compute_assets_amount(self):
|
|
if self.org.is_root():
|
|
return Asset.objects.all().count()
|
|
node = Node.org_root()
|
|
return node.assets_amount
|
|
|
|
def compute_total_count_online_users(self):
|
|
return Session.objects.filter(is_finished=False).values_list('user_id').distinct().count()
|
|
|
|
def compute_total_count_online_sessions(self):
|
|
return Session.objects.filter(is_finished=False).count()
|