mirror of
https://github.com/jumpserver/jumpserver.git
synced 2026-01-18 08:35:18 +00:00
ec8dca90d6
* perf: 整合系统用户和管理用户 * stash stash perf: 优化系统用户和资产的表结构 * perf: 添加信号 * perf: 添加算法 * perf: 去掉 asset user backends * perf: 整理系统用户api * perfF: 暂存一下 * stash * perf: 暂存一下 * perf: 暂存 * xxx * perf: ... * stash it * xxx * xxx * xxx * xxx * xxx * stash it * 修改Protocols * perf: 修改创建authbook信号 * perf: 添加auth info * .stash * perf: 基本完成 * perf: 修复完成 * perf: 修复更改的id * perf: 修复迁移过去数量不对的问题 * perf: 修改systemuser * fix: 修复批量编辑近期的问题 * fix: 修复authbook加载的问题 * xxx Co-authored-by: ibuler <ibuler@qq.com>
95 lines
2.8 KiB
Python
95 lines
2.8 KiB
Python
# -*- coding: utf-8 -*-
|
|
#
|
|
|
|
from django.db import models
|
|
from django.utils.translation import ugettext_lazy as _
|
|
|
|
from simple_history.models import HistoricalRecords
|
|
|
|
|
|
from .base import BaseUser, AbsConnectivity
|
|
|
|
__all__ = ['AuthBook']
|
|
|
|
|
|
class AuthBook(BaseUser, AbsConnectivity):
|
|
asset = models.ForeignKey('assets.Asset', on_delete=models.CASCADE, verbose_name=_('Asset'))
|
|
systemuser = models.ForeignKey('assets.SystemUser', on_delete=models.CASCADE, null=True, verbose_name=_("System user"))
|
|
version = models.IntegerField(default=1, verbose_name=_('Version'))
|
|
history = HistoricalRecords()
|
|
|
|
auth_attrs = ['username', 'password', 'private_key', 'public_key']
|
|
|
|
class Meta:
|
|
verbose_name = _('AuthBook')
|
|
unique_together = [('username', 'asset', 'systemuser')]
|
|
|
|
def __init__(self, *args, **kwargs):
|
|
super().__init__(*args, **kwargs)
|
|
self.auth_snapshot = {}
|
|
self.load_auth()
|
|
|
|
def get_or_systemuser_attr(self, attr):
|
|
val = getattr(self, attr, None)
|
|
if val:
|
|
return val
|
|
if self.systemuser:
|
|
return getattr(self.systemuser, attr, '')
|
|
return ''
|
|
|
|
def load_auth(self):
|
|
for attr in self.auth_attrs:
|
|
value = self.get_or_systemuser_attr(attr)
|
|
self.auth_snapshot[attr] = [getattr(self, attr), value]
|
|
setattr(self, attr, value)
|
|
|
|
def unload_auth(self):
|
|
if not self.systemuser:
|
|
return
|
|
|
|
for attr, values in self.auth_snapshot.items():
|
|
origin_value, loaded_value = values
|
|
current_value = getattr(self, attr, '')
|
|
if current_value == loaded_value:
|
|
setattr(self, attr, origin_value)
|
|
|
|
def save(self, *args, **kwargs):
|
|
self.unload_auth()
|
|
instance = super().save(*args, **kwargs)
|
|
self.load_auth()
|
|
return instance
|
|
|
|
@property
|
|
def username_display(self):
|
|
return self.get_or_systemuser_attr('username') or '*'
|
|
|
|
@property
|
|
def smart_name(self):
|
|
username = self.username_display
|
|
|
|
if self.asset:
|
|
asset = str(self.asset)
|
|
else:
|
|
asset = '*'
|
|
return '{}@{}'.format(username, asset)
|
|
|
|
def sync_to_system_user_account(self):
|
|
if self.systemuser:
|
|
return
|
|
matched = AuthBook.objects.filter(
|
|
asset=self.asset, systemuser__username=self.username
|
|
)
|
|
if not matched:
|
|
return
|
|
|
|
for i in matched:
|
|
i.password = self.password
|
|
i.private_key = self.private_key
|
|
i.public_key = self.public_key
|
|
i.comment = 'Update triggered by account {}'.format(self.id)
|
|
i.save(update_fields=['password', 'private_key', 'public_key'])
|
|
|
|
def __str__(self):
|
|
return self.smart_name
|
|
|