mirror of https://github.com/jumpserver/jumpserver
76 lines
2.6 KiB
Python
76 lines
2.6 KiB
Python
|
# -*- coding: utf-8 -*-
|
||
|
|
#
|
||
|
|
import uuid
|
||
|
|
from django.shortcuts import get_object_or_404
|
||
|
|
from rest_framework.views import APIView, Response
|
||
|
|
from rest_framework.generics import (
|
||
|
|
ListAPIView, get_object_or_404
|
||
|
|
)
|
||
|
|
|
||
|
|
from applications.models import Application
|
||
|
|
from perms.utils.application.permission import (
|
||
|
|
get_application_system_users_id
|
||
|
|
)
|
||
|
|
from perms.api.asset.user_permission.mixin import ForAdminMixin, ForUserMixin
|
||
|
|
from common.permissions import IsOrgAdminOrAppUser
|
||
|
|
from perms.hands import User, SystemUser
|
||
|
|
from perms import serializers
|
||
|
|
|
||
|
|
|
||
|
|
__all__ = [
|
||
|
|
'UserGrantedApplicationSystemUsersApi',
|
||
|
|
'MyGrantedApplicationSystemUsersApi',
|
||
|
|
'ValidateUserApplicationPermissionApi'
|
||
|
|
]
|
||
|
|
|
||
|
|
|
||
|
|
class GrantedApplicationSystemUsersMixin(ListAPIView):
|
||
|
|
serializer_class = serializers.ApplicationSystemUserSerializer
|
||
|
|
only_fields = serializers.ApplicationSystemUserSerializer.Meta.only_fields
|
||
|
|
user: None
|
||
|
|
|
||
|
|
def get_application_system_users_id(self, application):
|
||
|
|
return get_application_system_users_id(self.user, application)
|
||
|
|
|
||
|
|
def get_queryset(self):
|
||
|
|
application_id = self.kwargs.get('application_id')
|
||
|
|
application = get_object_or_404(Application, id=application_id)
|
||
|
|
system_users_id = self.get_application_system_users_id(application)
|
||
|
|
system_users = SystemUser.objects.filter(id__in=system_users_id)\
|
||
|
|
.only(*self.only_fields).order_by('priority')
|
||
|
|
return system_users
|
||
|
|
|
||
|
|
|
||
|
|
class UserGrantedApplicationSystemUsersApi(ForAdminMixin, GrantedApplicationSystemUsersMixin):
|
||
|
|
pass
|
||
|
|
|
||
|
|
|
||
|
|
class MyGrantedApplicationSystemUsersApi(ForUserMixin, GrantedApplicationSystemUsersMixin):
|
||
|
|
pass
|
||
|
|
|
||
|
|
|
||
|
|
class ValidateUserApplicationPermissionApi(APIView):
|
||
|
|
permission_classes = (IsOrgAdminOrAppUser,)
|
||
|
|
|
||
|
|
def get(self, request, *args, **kwargs):
|
||
|
|
user_id = request.query_params.get('user_id', '')
|
||
|
|
application_id = request.query_params.get('application_id', '')
|
||
|
|
system_user_id = request.query_params.get('system_user_id', '')
|
||
|
|
|
||
|
|
try:
|
||
|
|
user_id = uuid.UUID(user_id)
|
||
|
|
application_id = uuid.UUID(application_id)
|
||
|
|
system_user_id = uuid.UUID(system_user_id)
|
||
|
|
except ValueError:
|
||
|
|
return Response({'msg': False}, status=403)
|
||
|
|
|
||
|
|
user = get_object_or_404(User, id=user_id)
|
||
|
|
application = get_object_or_404(Application, id=application_id)
|
||
|
|
system_user = get_object_or_404(SystemUser, id=system_user_id)
|
||
|
|
|
||
|
|
system_users_id = get_application_system_users_id(user, application)
|
||
|
|
if system_user.id in system_users_id:
|
||
|
|
return Response({'msg': True}, status=200)
|
||
|
|
|
||
|
|
return Response({'msg': False}, status=403)
|