mirror of
https://github.com/jumpserver/jumpserver.git
synced 2026-01-16 07:28:59 +00:00
* feat: 添加 RBAC 应用模块 * feat: 添加 RBAC Model、API * feat: 添加 RBAC Model、API 2 * feat: 添加 RBAC Model、API 3 * feat: 添加 RBAC Model、API 4 * feat: RBAC * feat: RBAC * feat: RBAC * feat: RBAC * feat: RBAC * feat: RBAC 整理权限位 * feat: RBAC 整理权限位2 * feat: RBAC 整理权限位2 * feat: RBAC 整理权限位 * feat: RBAC 添加默认角色 * feat: RBAC 添加迁移文件;迁移用户角色->用户角色绑定 * feat: RBAC 添加迁移文件;迁移用户角色->用户角色绑定 * feat: RBAC 修改用户模块API * feat: RBAC 添加组织模块迁移文件 & 修改组织模块API * feat: RBAC 添加组织模块迁移文件 & 修改组织模块API * feat: RBAC 修改用户角色属性的使用 * feat: RBAC No.1 * xxx * perf: 暂存 * perf: ... * perf(rbac): 添加 perms 到 profile serializer 中 * stash * perf: 使用init * perf: 修改migrations * perf: rbac * stash * stash * pref: 修改rbac * stash it * stash: 先去修复其他bug * perf: 修改 role 添加 users * pref: 修改 RBAC Model * feat: 添加权限的 tree api * stash: 暂存一下 * stash: 暂存一下 * perf: 修改 model verbose name * feat: 添加model各种 verbose name * perf: 生成 migrations * perf: 优化权限位 * perf: 添加迁移脚本 * feat: 添加组织角色迁移 * perf: 添加迁移脚本 * stash * perf: 添加migrateion * perf: 暂存一下 * perf: 修改rbac * perf: stash it * fix: 迁移冲突 * fix: 迁移冲突 * perf: 暂存一下 * perf: 修改 rbac 逻辑 * stash: 暂存一下 * perf: 修改内置角色 * perf: 解决 root 组织的问题 * perf: stash it * perf: 优化 rbac * perf: 优化 rolebinding 处理 * perf: 完成用户离开组织的问题 * perf: 暂存一下 * perf: 修改翻译 * perf: 去掉了 IsSuperUser * perf: IsAppUser 去掉完成 * perf: 修改 connection token 的权限 * perf: 去掉导入的问题 * perf: perms define 格式,修改 app 用户 的全新啊 * perf: 修改 permission * perf: 去掉一些 org admin * perf: 去掉部分 org admin * perf: 再去掉点 org admin role * perf: 再去掉部分 org admin * perf: user 角色搜索 * perf: 去掉很多 js * perf: 添加权限位 * perf: 修改权限 * perf: 去掉一个 todo * merge: with dev * fix: 修复冲突 Co-authored-by: Bai <bugatti_it@163.com> Co-authored-by: Michael Bai <baijiangjie@gmail.com> Co-authored-by: ibuler <ibuler@qq.com>
140 lines
4.0 KiB
Python
140 lines
4.0 KiB
Python
# -*- coding: utf-8 -*-
|
|
#
|
|
from collections import defaultdict
|
|
from django.db.models import F, Value, Model
|
|
from django.db.models.signals import m2m_changed
|
|
from django.db.models.functions import Concat
|
|
|
|
from common.utils import get_logger
|
|
from orgs.mixins.api import OrgBulkModelViewSet
|
|
from orgs.utils import current_org
|
|
from .. import models, serializers
|
|
|
|
__all__ = [
|
|
'SystemUserAssetRelationViewSet', 'SystemUserNodeRelationViewSet',
|
|
'SystemUserUserRelationViewSet', 'BaseRelationViewSet',
|
|
]
|
|
|
|
logger = get_logger(__name__)
|
|
|
|
|
|
class RelationMixin:
|
|
model: Model
|
|
|
|
def get_queryset(self):
|
|
queryset = self.model.objects.all()
|
|
if not current_org.is_root():
|
|
org_id = current_org.org_id()
|
|
queryset = queryset.filter(systemuser__org_id=org_id)
|
|
|
|
queryset = queryset.annotate(systemuser_display=Concat(
|
|
F('systemuser__name'), Value('('),
|
|
F('systemuser__username'), Value(')')
|
|
))
|
|
return queryset
|
|
|
|
def send_post_add_signal(self, instance):
|
|
if not isinstance(instance, list):
|
|
instance = [instance]
|
|
|
|
system_users_objects_map = defaultdict(list)
|
|
model, object_field = self.get_objects_attr()
|
|
|
|
for i in instance:
|
|
_id = getattr(i, object_field).id
|
|
system_users_objects_map[i.systemuser].append(_id)
|
|
|
|
sender = self.get_sender()
|
|
for system_user, object_ids in system_users_objects_map.items():
|
|
logger.debug('System user relation changed, send m2m_changed signals')
|
|
m2m_changed.send(
|
|
sender=sender, instance=system_user, action='post_add',
|
|
reverse=False, model=model, pk_set=set(object_ids)
|
|
)
|
|
|
|
def get_sender(self):
|
|
return self.model
|
|
|
|
def get_objects_attr(self):
|
|
return models.Asset, 'asset'
|
|
|
|
def perform_create(self, serializer):
|
|
instance = serializer.save()
|
|
self.send_post_add_signal(instance)
|
|
|
|
|
|
class BaseRelationViewSet(RelationMixin, OrgBulkModelViewSet):
|
|
pass
|
|
|
|
|
|
class SystemUserAssetRelationViewSet(BaseRelationViewSet):
|
|
serializer_class = serializers.SystemUserAssetRelationSerializer
|
|
model = models.SystemUser.assets.through
|
|
filterset_fields = [
|
|
'id', 'asset', 'systemuser',
|
|
]
|
|
search_fields = [
|
|
"id", "asset__hostname", "asset__ip",
|
|
"systemuser__name", "systemuser__username",
|
|
]
|
|
|
|
def get_objects_attr(self):
|
|
return models.Asset, 'asset'
|
|
|
|
def get_queryset(self):
|
|
queryset = super().get_queryset()
|
|
queryset = queryset.annotate(
|
|
asset_display=Concat(
|
|
F('asset__hostname'), Value('('),
|
|
F('asset__ip'), Value(')')
|
|
)
|
|
)
|
|
return queryset
|
|
|
|
|
|
class SystemUserNodeRelationViewSet(BaseRelationViewSet):
|
|
serializer_class = serializers.SystemUserNodeRelationSerializer
|
|
model = models.SystemUser.nodes.through
|
|
filterset_fields = [
|
|
'id', 'node', 'systemuser',
|
|
]
|
|
search_fields = [
|
|
"node__value", "systemuser__name", "systemuser__username"
|
|
]
|
|
|
|
def get_objects_attr(self):
|
|
return models.Node, 'node'
|
|
|
|
def get_queryset(self):
|
|
queryset = super().get_queryset()
|
|
queryset = queryset \
|
|
.annotate(node_key=F('node__key'))
|
|
return queryset
|
|
|
|
|
|
class SystemUserUserRelationViewSet(BaseRelationViewSet):
|
|
serializer_class = serializers.SystemUserUserRelationSerializer
|
|
model = models.SystemUser.users.through
|
|
filterset_fields = [
|
|
'id', 'user', 'systemuser',
|
|
]
|
|
search_fields = [
|
|
"user__username", "user__name",
|
|
"systemuser__name", "systemuser__username",
|
|
]
|
|
|
|
def get_objects_attr(self):
|
|
from users.models import User
|
|
return User, 'user'
|
|
|
|
def get_queryset(self):
|
|
queryset = super().get_queryset()
|
|
queryset = queryset.annotate(
|
|
user_display=Concat(
|
|
F('user__name'), Value('('),
|
|
F('user__username'), Value(')')
|
|
)
|
|
)
|
|
return queryset
|
|
|