mirror of
https://github.com/jumpserver/jumpserver.git
synced 2026-04-04 19:32:41 +00:00
* perf: change i18n
* perf: pam
* perf: change translate
* perf: add check account
* perf: add date field
* perf: add account filter
* perf: remove some js
* perf: add account status action
* perf: update pam
* perf: 修改 discover account
* perf: update filter
* perf: update gathered account
* perf: 修改账号同步
* perf: squash migrations
* perf: update pam
* perf: change i18n
* perf: update account risk
* perf: 更新风险发现
* perf: remove css
* perf: Admin connection token
* perf: Add a switch to check connectivity after changing the password, and add a custom ssh command for push tasks
* perf: Modify account migration files
* perf: update pam
* perf: remove to check account dir
* perf: Admin connection token
* perf: update check account
* perf: 优化发送结果
* perf: update pam
* perf: update bulk update create
* perf: prepaire using thread timer for bulk_create_decorator
* perf: update bulk create decorator
* perf: 优化 playbook manager
* perf: 优化收集账号的报表
* perf: Update poetry
* perf: Update Dockerfile with new base image tag
* fix: Account migrate 0012 file
* perf: 修改备份
* perf: update pam
* fix: Expand resource_type filter to include raw type
* feat: PAM Service (#14552)
* feat: PAM Service
* perf: import package name
---------
Co-authored-by: jiangweidong <1053570670@qq.com>
* perf: Change secret dashboard (#14551)
Co-authored-by: feng <1304903146@qq.com>
* perf: update migrations
* perf: 修改支持 pam
* perf: Change secret record table dashboard
* perf: update status
* fix: Automation send report
* perf: Change secret report
* feat: windows accounts gather
* perf: update change status
* perf: Account backup
* perf: Account backup report
* perf: Account migrate
* perf: update service to application
* perf: update migrations
* perf: update logo
* feat: oracle accounts gather (#14571)
* feat: oracle accounts gather
* feat: sqlserver accounts gather
* feat: postgresql accounts gather
* feat: mysql accounts gather
---------
Co-authored-by: wangruidong <940853815@qq.com>
* feat: mongodb accounts gather
* perf: Change secret
* perf: Migrate
* perf: Merge conflicting migration files
* perf: Change secret
* perf: Automation filter org
* perf: Account push
* perf: Random secret string
* perf: Enhance SQL query and update risk handling in accounts
* perf: Ticket filter assignee_id
* perf: 修改 account remote
* perf: 修改一些 adhoc 任务
* perf: Change secret
* perf: Remove push account extra api
* perf: update status
* perf: The entire organization can view activity log
* fix: risk field check
* perf: add account details api
* perf: add demo mode
* perf: Delete gather_account
* perf: Perfect solution to account version problem
* perf: Update status action to handle multiple accounts
* perf: Add GatherAccountDetailField and update serializers
* perf: Display account history in combination with password change records
* perf: Lina translate
* fix: Update mysql_filter to handle nested user info
* perf: Admin connection token validate_permission account
* perf: copy move account
* perf: account filter risk
* perf: account risk filter
* perf: Copy move account failed message
* fix: gather account sync account to asset
* perf: Pam dashboard
* perf: Account dashboard total accounts
* perf: Pam dashboard
* perf: Change secret filter account secret_reset
* perf: 修改 risk filter
* perf: pam translate
* feat: Check for leaked duplicate passwords. (#14711)
* feat: Check for leaked duplicate passwords.
* perf: Use SQLite instead of txt as leak password database
---------
Co-authored-by: jiangweidong <1053570670@qq.com>
Co-authored-by: 老广 <ibuler@qq.com>
* perf: merge with remote
* perf: Add risk change_password_add handle
* perf: Pam dashboard
* perf: check account manager import
* perf: 重构扫描
* perf: 修改 db
* perf: Gather account manager
* perf: update change db lib
* perf: dashboard
* perf: Account gather
* perf: 修改 asset get queryset
* perf: automation report
* perf: Pam account
* perf: Pam dashboard api
* perf: risk add account
* perf: 修改 risk check
* perf: Risk account
* perf: update risk add reopen action
* perf: add pylintrc
* Revert "perf: automation report"
This reverts commit 22aee54207.
* perf: check account engine
* perf: Perf: Optimism Gather Report Style
* Perf: Remove unuser actions
* Perf: Perf push account
* perf: perf gather account
* perf: Automation report
* perf: Push account recorder
* perf: Push account record
* perf: Pam dashboard
* perf: perf
* perf: update intergration
* perf: integrations application detail add account tab page
* feat: Custom change password supports configuration of interactive items
* perf: Go and Python demo code
* perf: Custom secret change
* perf: add user filter
* perf: translate
* perf: Add demo code docs
* perf: update some i18n
* perf: update some i18n
* perf: Add Java, Node, Go, and cURL demo code
* perf: Translate
* perf: Change secret translate
* perf: Translate
* perf: update some i18n
* perf: translate
* perf: Ansible playbook
* perf: update some choice
* perf: update some choice
* perf: update account serializer remote unused code
* perf: conflict
* perf: update import
---------
Co-authored-by: ibuler <ibuler@qq.com>
Co-authored-by: feng <1304903146@qq.com>
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: wangruidong <940853815@qq.com>
Co-authored-by: jiangweidong <1053570670@qq.com>
Co-authored-by: feng626 <57284900+feng626@users.noreply.github.com>
Co-authored-by: zhaojisen <1301338853@qq.com>
129 lines
5.1 KiB
Python
129 lines
5.1 KiB
Python
import uuid
|
|
|
|
from django.utils.translation import gettext_lazy as _
|
|
from rest_framework import serializers
|
|
|
|
from assets.models import Asset, Node
|
|
from common.serializers import WritableNestedModelSerializer
|
|
from common.serializers.fields import ReadableHiddenField, ObjectRelatedField
|
|
from ops.mixin import PeriodTaskSerializerMixin
|
|
from ops.models import Job, JobExecution
|
|
from orgs.mixins.serializers import BulkOrgResourceModelSerializer
|
|
from ops.serializers import JobVariableSerializer
|
|
|
|
|
|
class JobSerializer(BulkOrgResourceModelSerializer, PeriodTaskSerializerMixin, WritableNestedModelSerializer):
|
|
creator = ReadableHiddenField(default=serializers.CurrentUserDefault())
|
|
run_after_save = serializers.BooleanField(label=_("Run on save"), default=False, required=False)
|
|
nodes = serializers.ListField(required=False, child=serializers.CharField())
|
|
date_last_run = serializers.DateTimeField(label=_('Date last run'), read_only=True)
|
|
name = serializers.CharField(label=_('Name'), max_length=128, allow_blank=True, required=False)
|
|
assets = serializers.PrimaryKeyRelatedField(label=_('Assets'), queryset=Asset.objects, many=True, required=False)
|
|
nodes = ObjectRelatedField(label=_('Nodes'), queryset=Node.objects, many=True, required=False)
|
|
variable = JobVariableSerializer(many=True, required=False, allow_null=True, label=_('Variable'))
|
|
parameters = serializers.JSONField(label=_('Parameters'), default={}, write_only=True, required=False,
|
|
allow_null=True)
|
|
|
|
def to_internal_value(self, data):
|
|
instant = data.get('instant', False)
|
|
job_type = data.get('type', '')
|
|
_uid = str(uuid.uuid4()).split('-')[-1]
|
|
if instant:
|
|
data['name'] = f'job-{_uid}'
|
|
if job_type == 'upload_file':
|
|
data['name'] = f'upload_file-{_uid}'
|
|
return super().to_internal_value(data)
|
|
|
|
def get_request_user(self):
|
|
request = self.context.get('request')
|
|
user = request.user if request else None
|
|
return user
|
|
|
|
def get_periodic_variable(self, variables):
|
|
periodic_variable = {}
|
|
for variable in variables:
|
|
periodic_variable[variable['var_name']] = variable['default_value']
|
|
return periodic_variable
|
|
|
|
def validate(self, attrs):
|
|
attrs = super().validate(attrs)
|
|
if attrs.get('is_periodic') is True:
|
|
attrs['periodic_variable'] = self.get_periodic_variable(attrs.get('variable', []))
|
|
return attrs
|
|
|
|
class Meta:
|
|
model = Job
|
|
read_only_fields = [
|
|
"id", "date_last_run", "date_created",
|
|
"date_updated", "average_time_cost", "created_by", "material"
|
|
]
|
|
fields_m2m = ['variable']
|
|
fields = read_only_fields + [
|
|
"name", "instant", "type", "module",
|
|
"args", "playbook", "assets",
|
|
"runas_policy", "runas", "creator",
|
|
"use_parameter_define", "parameters_define",
|
|
"timeout", "chdir", "comment", "summary",
|
|
"is_periodic", "interval", "crontab", "nodes",
|
|
"run_after_save", "parameters", "periodic_variable"
|
|
] + fields_m2m
|
|
extra_kwargs = {
|
|
'average_time_cost': {'label': _('Duration')},
|
|
}
|
|
|
|
|
|
class FileSerializer(serializers.Serializer):
|
|
files = serializers.FileField(allow_empty_file=False, max_length=128)
|
|
|
|
class Meta:
|
|
ref_name = "JobFileSerializer"
|
|
|
|
|
|
class JobTaskStopSerializer(serializers.Serializer):
|
|
task_id = serializers.CharField(max_length=128)
|
|
|
|
class Meta:
|
|
ref_name = "JobTaskStopSerializer"
|
|
|
|
|
|
class JobExecutionSerializer(BulkOrgResourceModelSerializer):
|
|
creator = ReadableHiddenField(default=serializers.CurrentUserDefault())
|
|
job_type = serializers.ReadOnlyField(label=_("Job type"))
|
|
material = serializers.ReadOnlyField(label=_("Command"))
|
|
is_success = serializers.ReadOnlyField(label=_("Is success"))
|
|
is_finished = serializers.ReadOnlyField(label=_("Is finished"))
|
|
time_cost = serializers.ReadOnlyField(label=_("Duration"))
|
|
|
|
class Meta:
|
|
model = JobExecution
|
|
read_only_fields = ["id", "task_id", "timedelta", "time_cost",
|
|
'is_finished', 'date_start', 'date_finished',
|
|
'date_created', 'is_success', 'job_type',
|
|
'summary', 'material']
|
|
fields = read_only_fields + [
|
|
"job", "parameters", "creator"
|
|
]
|
|
extra_kwargs = {
|
|
"task_id": {
|
|
"label": _("Task id"),
|
|
},
|
|
"job": {
|
|
"label": _("Job"),
|
|
}
|
|
}
|
|
|
|
def validate_job(self, job_obj):
|
|
if job_obj.creator != self.context['request'].user:
|
|
raise serializers.ValidationError(_("You do not have permission for the current job."))
|
|
return job_obj
|
|
|
|
@staticmethod
|
|
def validate_parameters(parameters):
|
|
prefix = "jms_"
|
|
new_parameters = {}
|
|
for key, value in parameters.items():
|
|
if not key.startswith("jms_"):
|
|
key = prefix + key
|
|
new_parameters[key] = value
|
|
return new_parameters
|