mirror of
https://github.com/jumpserver/jumpserver.git
synced 2026-01-16 23:52:41 +00:00
4944ac8e75
* [Update] 修改config * [Update] 移动存储设置到到terminal中 * [Update] 修改permission 查看 * [Update] pre merge * [Update] 录像存储 * [Update] 命令存储 * [Update] 添加存储测试可连接性 * [Update] 修改 meta 值的 key 为大写 * [Update] 修改 Terminal 相关 Storage 配置 * [Update] 删除之前获取录像/命令存储的代码 * [Update] 修改导入失败 * [Update] 迁移文件添加default存储 * [Update] 删除之前代码，添加help_text信息 * [Update] 删除之前代码 * [Update] 删除之前代码 * [Update] 抽象命令/录像存储 APIView * [Update] 抽象命令/录像存储 APIView 1 * [Update] 抽象命令/录像存储 DictField * [Update] 抽象命令/录像存储列表页面 * [Update] 修复CustomDictField的bug * [Update] RemoteApp 页面添加 hidden * [Update] 用户页面添加用户关联授权 * [Update] 修改存储测试可连接性 target * [Update] 修改配置 * [Update] 修改存储前端 Form 渲染逻辑 * [Update] 修改存储细节 * [Update] 统一存储类型到 const 文件 * [Update] 修改迁移文件及Model，创建默认存储 * [Update] 修改迁移文件及Model初始化默认数据 * [Update] 修改迁移文件 * [Update] 修改迁移文件 * [Update] 修改迁移文件 * [Update] 修改迁移文件 * [Update] 修改迁移文件 * [Update] 修改迁移文件 * [Update] 修改迁移文件 * [Update] 限制删除默认存储配置，只允许创建扩展的存储类型 * [Update] 修改ip字段长度 * [Update] 修改ip字段长度 * [Update] 修改一些css * [Update] 修改关联 * [Update] 添加操作日志定时清理 * [Update] 修改记录syslog的instance encoder * [Update] 忽略登录产生的操作日志 * [Update] 限制更新存储时不覆盖原有AK SK 等字段 * [Update] 修改迁移文件添加comment字段 * [Update] 修改迁移文件 * [Update] 添加 comment 字段 * [Update] 修改默认存储no -> null * [Update] 修改细节 * [Update] 更新翻译（存储配置 * [Update] 修改定时任务注册，修改系统用户资产、节点关系api * [Update] 添加监控磁盘任务 * [Update] 修改session * [Update] 拆分serializer * [Update] 还原setting原来的manager
110 lines
3.6 KiB
Python
110 lines
3.6 KiB
Python
# ~*~ coding: utf-8 ~*~
|
|
# Copyright (C) 2014-2018 Beijing DuiZhan Technology Co.,Ltd. All Rights Reserved.
|
|
#
|
|
# Licensed under the GNU General Public License v2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.gnu.org/licenses/gpl-2.0.html
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
from django.db import transaction
|
|
from django.db.models import Count
|
|
from django.shortcuts import get_object_or_404
|
|
from rest_framework.response import Response
|
|
from orgs.mixins.api import OrgBulkModelViewSet
|
|
from orgs.mixins import generics
|
|
|
|
from common.utils import get_logger
|
|
from ..hands import IsOrgAdmin
|
|
from ..models import AdminUser, Asset
|
|
from .. import serializers
|
|
from ..tasks import test_admin_user_connectivity_manual
|
|
|
|
|
|
logger = get_logger(__file__)
|
|
__all__ = [
|
|
'AdminUserViewSet', 'ReplaceNodesAdminUserApi',
|
|
'AdminUserTestConnectiveApi', 'AdminUserAuthApi',
|
|
'AdminUserAssetsListView',
|
|
]
|
|
|
|
|
|
class AdminUserViewSet(OrgBulkModelViewSet):
|
|
"""
|
|
Admin user api set, for add,delete,update,list,retrieve resource
|
|
"""
|
|
model = AdminUser
|
|
filter_fields = ("name", "username")
|
|
search_fields = filter_fields
|
|
serializer_class = serializers.AdminUserSerializer
|
|
permission_classes = (IsOrgAdmin,)
|
|
|
|
def get_queryset(self):
|
|
queryset = super().get_queryset()
|
|
queryset = queryset.annotate(_assets_amount=Count('assets'))
|
|
return queryset
|
|
|
|
|
|
class AdminUserAuthApi(generics.UpdateAPIView):
|
|
model = AdminUser
|
|
serializer_class = serializers.AdminUserAuthSerializer
|
|
permission_classes = (IsOrgAdmin,)
|
|
|
|
|
|
class ReplaceNodesAdminUserApi(generics.UpdateAPIView):
|
|
model = AdminUser
|
|
serializer_class = serializers.ReplaceNodeAdminUserSerializer
|
|
permission_classes = (IsOrgAdmin,)
|
|
|
|
def update(self, request, *args, **kwargs):
|
|
admin_user = self.get_object()
|
|
serializer = self.serializer_class(data=request.data)
|
|
if serializer.is_valid():
|
|
nodes = serializer.validated_data['nodes']
|
|
assets = []
|
|
for node in nodes:
|
|
assets.extend([asset.id for asset in node.get_all_assets()])
|
|
|
|
with transaction.atomic():
|
|
Asset.objects.filter(id__in=assets).update(admin_user=admin_user)
|
|
|
|
return Response({"msg": "ok"})
|
|
else:
|
|
return Response({'error': serializer.errors}, status=400)
|
|
|
|
|
|
class AdminUserTestConnectiveApi(generics.RetrieveAPIView):
|
|
"""
|
|
Test asset admin user assets_connectivity
|
|
"""
|
|
model = AdminUser
|
|
permission_classes = (IsOrgAdmin,)
|
|
serializer_class = serializers.TaskIDSerializer
|
|
|
|
def retrieve(self, request, *args, **kwargs):
|
|
admin_user = self.get_object()
|
|
task = test_admin_user_connectivity_manual.delay(admin_user)
|
|
return Response({"task": task.id})
|
|
|
|
|
|
class AdminUserAssetsListView(generics.ListAPIView):
|
|
permission_classes = (IsOrgAdmin,)
|
|
serializer_class = serializers.AssetSimpleSerializer
|
|
filter_fields = ("hostname", "ip")
|
|
http_method_names = ['get']
|
|
search_fields = filter_fields
|
|
|
|
def get_object(self):
|
|
pk = self.kwargs.get('pk')
|
|
return get_object_or_404(AdminUser, pk=pk)
|
|
|
|
def get_queryset(self):
|
|
admin_user = self.get_object()
|
|
return admin_user.get_related_assets()
|