mirror of
https://github.com/jumpserver/jumpserver.git
synced 2026-01-17 16:09:04 +00:00
82d866db7d
* [Update] 分页获取用户授权资产 * [Update] 修改前端-用户授权资产分页 * [Update] 用户授权资产支持搜索 * [Update] 用户授权资产支持排序 * [Update] 用户授权的节点with资产Api，对资产进行排序 * [Update] 获取用户授权的节点下的资产的api，进行分页、排序、查询 * [Update] 抽象用户授权资产列表的查询，排序 * [Update] 优化小细节 * [Update] 删除无用导入 * [Update] 修改AssetFilterMixins目录从common到perms * [Update] 资产授权规则列表: 添加分页、搜索 * [Update] 添加管理用户，系统用户列表分页、搜索 * [Update] 用户组列表添加分页，搜索 * [Update] 资产标签列表添加分页、搜索 * [Update] 网域网关列表添加分页、搜索 * [Update] 命令过滤列表添加分页、搜索，修改翻译小细节 * [Update] 删除前端注释initDataTable * [Update] 修改文案，资产组-节点 * [Update] 普通用户资产列表添加分页、搜索
93 lines
3.1 KiB
Python
93 lines
3.1 KiB
Python
# ~*~ coding: utf-8 ~*~
|
|
# Copyright (C) 2014-2018 Beijing DuiZhan Technology Co.,Ltd. All Rights Reserved.
|
|
#
|
|
# Licensed under the GNU General Public License v2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.gnu.org/licenses/gpl-2.0.html
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
from django.db import transaction
|
|
from rest_framework import generics
|
|
from rest_framework.response import Response
|
|
from rest_framework_bulk import BulkModelViewSet
|
|
from rest_framework.pagination import LimitOffsetPagination
|
|
|
|
from common.mixins import IDInFilterMixin
|
|
from common.utils import get_logger
|
|
from ..hands import IsOrgAdmin
|
|
from ..models import AdminUser, Asset
|
|
from .. import serializers
|
|
from ..tasks import test_admin_user_connectability_manual
|
|
|
|
|
|
logger = get_logger(__file__)
|
|
__all__ = [
|
|
'AdminUserViewSet', 'ReplaceNodesAdminUserApi',
|
|
'AdminUserTestConnectiveApi', 'AdminUserAuthApi',
|
|
]
|
|
|
|
|
|
class AdminUserViewSet(IDInFilterMixin, BulkModelViewSet):
|
|
"""
|
|
Admin user api set, for add,delete,update,list,retrieve resource
|
|
"""
|
|
|
|
filter_fields = ("name", "username")
|
|
search_fields = filter_fields
|
|
queryset = AdminUser.objects.all()
|
|
serializer_class = serializers.AdminUserSerializer
|
|
permission_classes = (IsOrgAdmin,)
|
|
pagination_class = LimitOffsetPagination
|
|
|
|
def get_queryset(self):
|
|
queryset = super().get_queryset().all()
|
|
return queryset
|
|
|
|
|
|
class AdminUserAuthApi(generics.UpdateAPIView):
|
|
queryset = AdminUser.objects.all()
|
|
serializer_class = serializers.AdminUserAuthSerializer
|
|
permission_classes = (IsOrgAdmin,)
|
|
|
|
|
|
class ReplaceNodesAdminUserApi(generics.UpdateAPIView):
|
|
queryset = AdminUser.objects.all()
|
|
serializer_class = serializers.ReplaceNodeAdminUserSerializer
|
|
permission_classes = (IsOrgAdmin,)
|
|
|
|
def update(self, request, *args, **kwargs):
|
|
admin_user = self.get_object()
|
|
serializer = self.serializer_class(data=request.data)
|
|
if serializer.is_valid():
|
|
nodes = serializer.validated_data['nodes']
|
|
assets = []
|
|
for node in nodes:
|
|
assets.extend([asset.id for asset in node.get_all_assets()])
|
|
|
|
with transaction.atomic():
|
|
Asset.objects.filter(id__in=assets).update(admin_user=admin_user)
|
|
|
|
return Response({"msg": "ok"})
|
|
else:
|
|
return Response({'error': serializer.errors}, status=400)
|
|
|
|
|
|
class AdminUserTestConnectiveApi(generics.RetrieveAPIView):
|
|
"""
|
|
Test asset admin user connectivity
|
|
"""
|
|
queryset = AdminUser.objects.all()
|
|
permission_classes = (IsOrgAdmin,)
|
|
|
|
def retrieve(self, request, *args, **kwargs):
|
|
admin_user = self.get_object()
|
|
task = test_admin_user_connectability_manual.delay(admin_user)
|
|
return Response({"task": task.id})
|