mirror of
https://github.com/jumpserver/jumpserver.git
synced 2025-10-22 16:31:33 +00:00
f235e20153
* [Feature] 1. perms actions - 添加 Action Model * [Feature] 2. perms actions - 添加 Action API * [Feature] 3. perms actions - 授权规则: 添加actions字段 * [Feature] 4. perms actions - 授权规则创建页面: 设置 actions 默认 all * [Feature] 5. perms actions - 资产授权工具: 动态给system_user设置actions属性; 修改授权相关的API-serializer类: 添加actions字段值 * [Feature] 6. perms actions - 更新API(用户使用系统用户连接资产时权限校验): 添加actions校验 * [Feature] 7. perms actions - 迁移文件中为已经存在的perms添加默认的action * [Feature] 8. perms actions - 创建授权规则时设置默认action(如果actions字段值为空) * [Feature] 9. check actions - 修改校验用户资产权限API逻辑(添加actions校验) * [Feature] 10. check actions - 修改注释 * [Feature] 11. check actions - 添加API: 获取用户指定资产和系统用户被授权的actions * [Feature] 12. check actions - 添加翻译信息
80 lines
2.8 KiB
Python
80 lines
2.8 KiB
Python
# ~*~ coding: utf-8 ~*~
|
|
|
|
from __future__ import absolute_import, unicode_literals
|
|
from django import forms
|
|
from django.utils.translation import ugettext_lazy as _
|
|
|
|
from orgs.mixins import OrgModelForm
|
|
from orgs.utils import current_org
|
|
from .models import AssetPermission
|
|
from assets.models import Asset
|
|
|
|
|
|
class AssetPermissionForm(OrgModelForm):
|
|
def __init__(self, *args, **kwargs):
|
|
super().__init__(*args, **kwargs)
|
|
users_field = self.fields.get('users')
|
|
if hasattr(users_field, 'queryset'):
|
|
users_field.queryset = current_org.get_org_users()
|
|
assets_field = self.fields.get('assets')
|
|
|
|
# 前端渲染优化, 防止过多资产
|
|
if not self.data:
|
|
instance = kwargs.get('instance')
|
|
if instance:
|
|
assets_field.queryset = instance.assets.all()
|
|
else:
|
|
assets_field.queryset = Asset.objects.none()
|
|
|
|
class Meta:
|
|
model = AssetPermission
|
|
exclude = (
|
|
'id', 'date_created', 'created_by', 'org_id'
|
|
)
|
|
widgets = {
|
|
'users': forms.SelectMultiple(
|
|
attrs={'class': 'select2', 'data-placeholder': _("User")}
|
|
),
|
|
'user_groups': forms.SelectMultiple(
|
|
attrs={'class': 'select2', 'data-placeholder': _("User group")}
|
|
),
|
|
'assets': forms.SelectMultiple(
|
|
attrs={'class': 'select2', 'data-placeholder': _("Asset")}
|
|
),
|
|
'nodes': forms.SelectMultiple(
|
|
attrs={'class': 'select2', 'data-placeholder': _("Node")}
|
|
),
|
|
'system_users': forms.SelectMultiple(
|
|
attrs={'class': 'select2', 'data-placeholder': _('System user')}
|
|
),
|
|
'actions': forms.SelectMultiple(
|
|
attrs={'class': 'select2', 'data-placeholder': _('Action')}
|
|
)
|
|
}
|
|
labels = {
|
|
'nodes': _("Node"),
|
|
}
|
|
help_texts = {
|
|
'actions': _('Tips: The RDP protocol does not support separate '
|
|
'controls for uploading or downloading files')
|
|
}
|
|
|
|
def clean_user_groups(self):
|
|
users = self.cleaned_data.get('users')
|
|
user_groups = self.cleaned_data.get('user_groups')
|
|
|
|
if not users and not user_groups:
|
|
raise forms.ValidationError(
|
|
_("User or group at least one required"))
|
|
return self.cleaned_data["user_groups"]
|
|
|
|
def clean_asset_groups(self):
|
|
assets = self.cleaned_data.get('assets')
|
|
asset_groups = self.cleaned_data.get('asset_groups')
|
|
|
|
if not assets and not asset_groups:
|
|
raise forms.ValidationError(
|
|
_("Asset or group at least one required"))
|
|
|
|
return self.cleaned_data["asset_groups"]
|