jumpserver/apps/accounts/filters.py

# -*- coding: utf-8 -*-
#
from django.db.models import Q
from django.utils import timezone
from django_filters import rest_framework as drf_filters

from assets.models import Node
from common.drf.filters import BaseFilterSet
from .models import Account, GatheredAccount, ChangeSecretRecord


class AccountFilterSet(BaseFilterSet):
    ip = drf_filters.CharFilter(field_name='address', lookup_expr='exact')
    hostname = drf_filters.CharFilter(field_name='name', lookup_expr='exact')
    username = drf_filters.CharFilter(field_name="username", lookup_expr='exact')
    address = drf_filters.CharFilter(field_name="asset__address", lookup_expr='exact')
    asset_id = drf_filters.CharFilter(field_name="asset", lookup_expr='exact')
    asset = drf_filters.CharFilter(field_name='asset', lookup_expr='exact')
    assets = drf_filters.CharFilter(field_name='asset_id', lookup_expr='exact')
    nodes = drf_filters.CharFilter(method='filter_nodes')
    node_id = drf_filters.CharFilter(method='filter_nodes')
    has_secret = drf_filters.BooleanFilter(method='filter_has_secret')
    platform = drf_filters.CharFilter(field_name='asset__platform_id', lookup_expr='exact')
    category = drf_filters.CharFilter(field_name='asset__platform__category', lookup_expr='exact')
    type = drf_filters.CharFilter(field_name='asset__platform__type', lookup_expr='exact')
    latest_discovery = drf_filters.BooleanFilter(method='filter_latest')
    latest_accessed = drf_filters.BooleanFilter(method='filter_latest')
    latest_updated = drf_filters.BooleanFilter(method='filter_latest')
    latest_secret_changed = drf_filters.BooleanFilter(method='filter_latest')
    latest_secret_change_failed = drf_filters.BooleanFilter(method='filter_latest')
    is_zombie = drf_filters.BooleanFilter(method='filter_risk',)
    is_ghost = drf_filters.BooleanFilter(method='filter_risk',)
    is_weak_password = drf_filters.BooleanFilter(method='filter_risk',)
    long_time_no_change_secret = drf_filters.BooleanFilter(method='filter_long_time')
    long_time_no_verified = drf_filters.BooleanFilter(method='filter_long_time')

    @staticmethod
    def filter_has_secret(queryset, name, has_secret):
        q = Q(_secret__isnull=True) | Q(_secret='')
        if has_secret:
            return queryset.exclude(q)
        else:
            return queryset.filter(q)

    @staticmethod
    def filter_long_time(queryset, name, value):
        return queryset

    @staticmethod
    def filter_risk(queryset, name, value):
        return queryset

    @staticmethod
    def filter_latest(queryset, name, value):
        if not value:
            return queryset

        date = timezone.now() - timezone.timedelta(days=7)
        kwargs = {}

        if name == 'latest_discovery':
            kwargs.update({'date_created__gte': date, 'source': 'collected'})
        elif name == 'latest_accessed':
            kwargs.update({'date_last_access__gte': date})
        elif name == 'latest_updated':
            kwargs.update({'date_updated__gte': date})
        elif name == 'latest_secret_changed':
            kwargs.update({'date_change_secret__gt': date})

        if name == 'latest_secret_change_failed':
            queryset = queryset.filter(date_change_secret__gt=date).exclude(change_secret_status='ok')

        if kwargs:
            queryset = queryset.filter(date_last_access__gte=date)
        return queryset

    @staticmethod
    def filter_nodes(queryset, name, value):
        nodes = Node.objects.filter(id=value)
        if not nodes:
            return queryset

        node_qs = Node.objects.none()
        for node in nodes:
            node_qs |= node.get_all_children(with_self=True)
        node_ids = list(node_qs.values_list('id', flat=True))
        queryset = queryset.filter(asset__nodes__in=node_ids)
        return queryset

    class Meta:
        model = Account
        fields = ['id', 'asset', 'source_id', 'secret_type', 'category', 'type']


class GatheredAccountFilterSet(BaseFilterSet):
    node_id = drf_filters.CharFilter(method='filter_nodes')
    asset_id = drf_filters.CharFilter(field_name='asset_id', lookup_expr='exact')
    asset_name = drf_filters.CharFilter(field_name='asset__name', lookup_expr='icontains')

    @staticmethod
    def filter_nodes(queryset, name, value):
        return AccountFilterSet.filter_nodes(queryset, name, value)

    class Meta:
        model = GatheredAccount
        fields = ['id', 'username']


class ChangeSecretRecordFilterSet(BaseFilterSet):
    asset_name = drf_filters.CharFilter(field_name='asset__name', lookup_expr='icontains')
    account_username = drf_filters.CharFilter(field_name='account__username', lookup_expr='icontains')
    execution_id = drf_filters.CharFilter(field_name='execution_id', lookup_expr='exact')

    class Meta:
        model = ChangeSecretRecord
        fields = ['id', 'status', 'asset_id', 'execution']