jumpserver/jasset/views.py

# coding:utf-8

import ast

from django.db.models import Q
from django.template import RequestContext
from django.shortcuts import render_to_response

from jasset.models import IDC, Asset, BisGroup, AssetAlias
from jperm.models import Perm, SudoPerm
from django.shortcuts import redirect
from jumpserver.api import *

cryptor = PyCrypt(KEY)


class RaiseError(Exception):
    pass


def httperror(request, emg):
    message = emg
    return render_to_response('error.html', locals(), context_instance=RequestContext(request))


def get_host_groups(groups):
    ret = []
    for group_id in groups:
        group = BisGroup.objects.filter(id=group_id)
        if group:
            group = group[0]
            ret.append(group)
    return ret


def get_host_depts(depts):
    ret = []
    for dept_id in depts:
        dept = DEPT.objects.filter(id=dept_id)
        if dept:
            dept = dept[0]
            ret.append(dept)
    return ret


def db_host_insert(ip, port, idc, jtype, group, dept, active, comment, username='', password=''):
    """ 添加主机时数据库操作函数 """
    idc = IDC.objects.filter(id=idc)
    if idc:
        idc = idc[0]
    if jtype == 'M':
        password = cryptor.encrypt(password)
        a = Asset(ip=ip, port=port,
                  login_type=jtype, idc=idc,
                  is_active=int(active),
                  comment=comment,
                  username=username,
                  password=password)
    else:
        a = Asset(ip=ip, port=port,
                  login_type=jtype, idc=idc,
                  is_active=int(active),
                  comment=comment)
    a.save()

    all_group = BisGroup.objects.get(name='ALL')
    groups = get_host_groups(group)
    groups.append(all_group)

    depts = get_host_depts(dept)

    a.bis_group = groups
    a.dept = depts
    a.save()
        
        
def db_host_update(ip, port, idc, jtype, group, dept, active, comment, host, username='', password=''):
    """ 修改主机时数据库操作函数 """
    idc = IDC.objects.filter(id=idc)
    if idc:
        idc = idc[0]
    groups = get_host_groups(group)
    depts = get_host_depts(dept)
    host.ip = ip
    host.port = port
    host.login_type = jtype
    host.idc = idc
    host.is_active = int(active)
    host.comment = comment

    if jtype == 'M':
        print password, host.password
        if password != host.password:
            password = cryptor.encrypt(password)
            print password
        host.password = password
        host.username = username
        host.password = password
    host.save()
    host.bis_group = groups
    host.dept = depts
    host.save()


def batch_host_edit(j_id, j_ip, j_idc, j_port, j_type, j_group, j_dept, j_active, j_comment, j_user='', j_password=''):
    """ 批量修改主机函数 """
    groups, depts = [], []
    is_active = {u'是': '1', u'否': '2'}
    login_types = {'LDAP': 'L', 'MAP': 'M'}
    for group in j_group[0].split():
        c = BisGroup.objects.get(name=group.strip())
        groups.append(c)
    for d in j_dept[0].split():
        p = DEPT.objects.get(name=d.strip())
        depts.append(p)
    j_type = login_types[j_type]
    j_idc = IDC.objects.get(name=j_idc)
    a = Asset.objects.get(id=j_id)
    if j_type == 'M':
        if a.password != j_password:
            j_password = cryptor.decrypt(j_password)
        a.ip = j_ip
        a.port = j_port
        a.login_type = j_type
        a.idc = j_idc
        a.is_active = j_active
        a.comment = j_comment
        a.username = j_user
        a.password = j_password
    else:
        a.ip = j_ip
        a.port = j_port
        a.idc = j_idc
        a.login_type = j_type
        a.is_active = is_active[j_active]
        a.comment = j_comment
    a.save()
    a.bis_group = groups
    a.dept = depts
    a.save()


@require_admin
def host_add(request):
    header_title, path1, path2 = u'添加主机', u'资产管理', u'添加主机'
    login_types = {'L': 'LDAP', 'M': 'MAP'}
    eidc = IDC.objects.exclude(name='ALL')
    if is_super_user(request):
        edept = DEPT.objects.all()
        egroup = BisGroup.objects.exclude(name='ALL')
    elif is_group_admin(request):
        dept = get_session_user_info(request)[5]
        egroup = dept.bisgroup_set.all()

    if request.method == 'POST':
        j_ip = request.POST.get('j_ip')
        j_idc = request.POST.get('j_idc')
        j_port = request.POST.get('j_port')
        j_type = request.POST.get('j_type')
        j_group = request.POST.getlist('j_group')
        j_active = request.POST.get('j_active')
        j_comment = request.POST.get('j_comment')
        j_dept = request.POST.getlist('j_dept')
        if is_group_admin(request) and not verify(request, asset_group=j_group, edept=j_dept):
            emg = u'添加失败,您无权操作!'
            return render_to_response('jasset/host_add.html', locals(), context_instance=RequestContext(request))

        if Asset.objects.filter(ip=str(j_ip)):
            emg = u'该IP %s 已存在!' % j_ip
            return render_to_response('jasset/host_add.html', locals(), context_instance=RequestContext(request))

        if j_type == 'M':
            j_user = request.POST.get('j_user')
            j_password = request.POST.get('j_password', '')
            db_host_insert(j_ip, j_port, j_idc, j_type, j_group, j_dept, j_active, j_comment, j_user, j_password)
        else:
            db_host_insert(j_ip, j_port, j_idc, j_type, j_group, j_dept, j_active, j_comment)
        smg = u'主机 %s 添加成功' % j_ip

    return render_to_response('jasset/host_add.html', locals(), context_instance=RequestContext(request))


@require_admin
def host_add_batch(request):
    header_title, path1, path2 = u'批量添加主机', u'资产管理', u'批量添加主机'
    login_types = {'LDAP': 'L', 'MAP': 'M'}
    dept_id = get_user_dept(request)
    if request.method == 'POST':
        multi_hosts = request.POST.get('j_multi').split('\n')
        for host in multi_hosts:
            if host == '':
                break
            j_ip, j_port, j_type, j_idc, j_groups, j_depts, j_active, j_comment = host.split()
            j_type = login_types[j_type]
            j_group = ast.literal_eval(j_groups)
            j_dept = ast.literal_eval(j_depts)

            if Asset.objects.filter(ip=str(j_ip)):
                emg = u'该IP %s 已存在!' % j_ip
                return render_to_response('jasset/host_add_multi.html', locals(),
                                          context_instance=RequestContext(request))

            if j_type == 'M':
                j_user = request.POST.get('j_user')
                j_password = cryptor.encrypt(request.POST.get('j_password'))
                db_host_insert(j_ip, j_port, j_idc, j_type, j_group, j_dept, j_active, j_comment, j_user, j_password)
            else:
                db_host_insert(j_ip, j_port, j_idc, j_type, j_group, j_dept, j_active, j_comment)

        smg = u'批量添加添加成功'
        return HttpResponseRedirect('/jasset/host_list/')

    return render_to_response('jasset/host_add_multi.html', locals(), context_instance=RequestContext(request))


@require_admin
def host_edit_batch(request):
    if request.method == 'POST':
        len_table = request.POST.get('len_table')
        for i in range(int(len_table)):
            j_id = "editable[" + str(i) + "][j_id]"
            j_ip = "editable[" + str(i) + "][j_ip]"
            j_port = "editable[" + str(i) + "][j_port]"
            j_dept = "editable[" + str(i) + "][j_dept]"
            j_idc = "editable[" + str(i) + "][j_idc]"
            j_type = "editable[" + str(i) + "][j_type]"
            j_group = "editable[" + str(i) + "][j_group]"
            j_active = "editable[" + str(i) + "][j_active]"
            j_comment = "editable[" + str(i) + "][j_comment]"

            j_id = request.POST.get(j_id).strip()
            j_ip = request.POST.get(j_ip).strip()
            j_port = request.POST.get(j_port).strip()
            j_dept = request.POST.getlist(j_dept)
            j_idc = request.POST.get(j_idc).strip()
            j_type = request.POST.get(j_type).strip()
            j_group = request.POST.getlist(j_group)
            j_active = request.POST.get(j_active).strip()
            j_comment = request.POST.get(j_comment).strip()

            batch_host_edit(j_id, j_ip, j_idc, j_port, j_type, j_group, j_dept, j_active, j_comment)

        return render_to_response('jasset/host_list.html')


@require_login
def host_edit_common_batch(request):
    user_id = request.session.get('user_id', '')
    u = User.objects.get(id=user_id)
    if request.method == 'POST':
        len_table = request.POST.get('len_table')
        for i in range(int(len_table)):
            j_id = "editable[" + str(i) + "][j_id]"
            j_alias = "editable[" + str(i) + "][j_alias]"
            j_id = request.POST.get(j_id).strip()
            j_alias = request.POST.get(j_alias).strip()
            a = Asset.objects.get(id=j_id)
            asset_alias = AssetAlias.objects.filter(user=u, host=a)
            if asset_alias:
                asset_alias = asset_alias[0]
                asset_alias.alias = j_alias
                asset_alias.save()
            else:
                AssetAlias.objects.create(user=u, host=a, alias=j_alias)
    return render_to_response('jasset/host_list_common.html')


@require_login
def host_list(request):
    header_title, path1, path2 = u'查看主机', u'资产管理', u'查看主机'
    keyword = request.GET.get('keyword', '')
    dept_id = get_user_dept(request)
    dept = DEPT.objects.get(id=dept_id)
    did = request.GET.get('did', '')
    gid = request.GET.get('gid', '')
    sid = request.GET.get('sid', '')
    if did:
        dept = DEPT.objects.get(id=did)
        posts = dept.asset_set.all()
        return render_to_response('jasset/host_list_nop.html', locals(), context_instance=RequestContext(request))

    elif gid:
        posts = []
        user_group = UserGroup.objects.get(id=gid)
        perms = Perm.objects.filter(user_group=user_group)
        for perm in perms:
            for post in perm.asset_group.asset_set.all():
                posts.append(post)
        posts = list(set(posts))
        return render_to_response('jasset/host_list_nop.html', locals(), context_instance=RequestContext(request))

    elif sid:
        posts = []
        user_group = UserGroup.objects.get(id=sid)
        perms = Perm.objects.filter(user_group=user_group)
        for perm in perms:
            for post in perm.asset_group.asset_set.all():
                posts.append(post)
        posts = list(set(posts))
        return render_to_response('jasset/host_list_nop.html', locals(), context_instance=RequestContext(request))

    else:
        if is_super_user(request):
            if keyword:
                posts = Asset.objects.filter(Q(ip__contains=keyword) | Q(idc__name__contains=keyword) |
                                             Q(bis_group__name__contains=keyword) | Q(
                    comment__contains=keyword)).distinct().order_by('ip')
            else:
                posts = Asset.objects.all().order_by('ip')
            contact_list, p, contacts, page_range, current_page, show_first, show_end = pages(posts, request)
            return render_to_response('jasset/host_list.html', locals(), context_instance=RequestContext(request))

        elif is_group_admin(request):
            if keyword:
                posts = Asset.objects.filter(Q(ip__contains=keyword) | Q(idc__name__contains=keyword) |
                                             Q(bis_group__name__contains=keyword) | Q(
                    comment__contains=keyword)).filter(dept=dept).distinct().order_by('ip')
            else:
                posts = Asset.objects.all().filter(dept=dept).order_by('ip')

            contact_list, p, contacts, page_range, current_page, show_first, show_end = pages(posts, request)
            return render_to_response('jasset/host_list.html', locals(), context_instance=RequestContext(request))

        elif is_common_user(request):
            user_id = get_session_user_info(request)[0]
            username = get_session_user_info(request)[1]
            posts = user_perm_asset_api(username)
            contact_list, p, contacts, page_range, current_page, show_first, show_end = pages(posts, request)
            return render_to_response('jasset/host_list_common.html', locals(),
                                      context_instance=RequestContext(request))


@require_admin
def host_del(request, offset):
    if offset == 'multi':
        len_list = request.POST.get("len_list")
        for i in range(int(len_list)):
            key = "id_list[" + str(i) + "]"
            jid = request.POST.get(key)
            if is_group_admin(request) and not validate(request, asset=[jid]):
                return HttpResponseRedirect('/jasset/host_list/')
            a = Asset.objects.get(id=jid).ip
            Asset.objects.filter(id=jid).delete()
            BisGroup.objects.filter(name=a).delete()
    else:
        jid = int(offset)
        if is_group_admin(request) and not validate(request, asset=[jid]):
            return HttpResponseRedirect('/jasset/host_list/')
        a = Asset.objects.get(id=jid).ip
        BisGroup.objects.filter(name=a).delete()
        Asset.objects.filter(id=jid).delete()
    return HttpResponseRedirect('/jasset/host_list/')


@require_super_user
def host_edit(request):
    header_title, path1, path2 = u'修改主机', u'资产管理', u'修改主机'
    actives = {1: u'激活', 0: u'禁用'}
    login_types = {'L': 'LDAP', 'M': 'MAP'}
    eidc = IDC.objects.all()
    egroup = BisGroup.objects.exclude(name='ALL')
    edept = DEPT.objects.all()
    host_id = request.GET.get('id', '')
    post = Asset.objects.filter(id=int(host_id))
    if post:
        post = post[0]
    else:
        return httperror(request, '没有此主机!')

    e_group = post.bis_group.all()
    e_dept = post.dept.all()

    if request.method == 'POST':
        j_ip = request.POST.get('j_ip', '')
        j_idc = request.POST.get('j_idc', '')
        j_port = request.POST.get('j_port', '')
        j_type = request.POST.get('j_type', '')
        j_dept = request.POST.getlist('j_dept', '')
        j_group = request.POST.getlist('j_group', '')
        j_active = request.POST.get('j_active', '')
        j_comment = request.POST.get('j_comment', '')

        if j_type == 'M':
            j_user = request.POST.get('j_user')
            j_password = request.POST.get('j_password')
            db_host_update(j_ip, j_port, j_idc, j_type, j_group, j_dept, j_active, j_comment, j_user, post, j_password, post)
        else:
            db_host_update(j_ip, j_port, j_idc, j_type, j_group, j_dept, j_active, j_comment, post)

        smg = u'主机 %s 修改成功' % j_ip
        return HttpResponseRedirect('/jasset/host_detail/?id=%s' % host_id)

    return render_to_response('jasset/host_edit.html', locals(), context_instance=RequestContext(request))


@require_admin
def host_edit_adm(request):
    header_title, path1, path2 = u'修改主机', u'资产管理', u'修改主机'
    actives = {1: u'激活', 0: u'禁用'}
    login_types = {'L': 'LDAP', 'M': 'MAP'}
    eidc = IDC.objects.all()
    dept = get_session_user_info(request)[5]
    egroup = BisGroup.objects.exclude(name='ALL').filter(dept=dept)
    host_id = request.GET.get('id', '')
    post = Asset.objects.filter(id=int(host_id))
    if post:
        post = post[0]
    else:
        return httperror(request, '没有此主机!')

    e_group = post.bis_group.all()

    if request.method == 'POST':
        j_ip = request.POST.get('j_ip')
        j_idc = request.POST.get('j_idc')
        j_port = request.POST.get('j_port')
        j_type = request.POST.get('j_type')
        j_dept = request.POST.getlist('j_dept')
        j_group = request.POST.getlist('j_group')
        j_active = request.POST.get('j_active')
        j_comment = request.POST.get('j_comment')

        if not verify(request, asset_group=j_group, edept=j_dept):
            emg = u'修改失败,您无权操作!'
            return render_to_response('jasset/host_edit.html', locals(), context_instance=RequestContext(request))

        if j_type == 'M':
            j_user = request.POST.get('j_user')
            j_password = request.POST.get('j_password')
            db_host_update(j_ip, j_port, j_idc, j_type, j_group, j_dept, j_active, j_comment, post, j_user, j_password)
        else:
            db_host_update(j_ip, j_port, j_idc, j_type, j_group, j_dept, j_active, j_comment, post)

        smg = u'主机 %s 修改成功' % j_ip
        return HttpResponseRedirect('/jasset/host_detail/?id=%s' % host_id)

    return render_to_response('jasset/host_edit.html', locals(), context_instance=RequestContext(request))


@require_login
def host_detail(request):
    header_title, path1, path2 = u'主机详细信息', u'资产管理', u'主机详情'
    host_id = request.GET.get('id', '')
    post = Asset.objects.filter(id=host_id)
    if not post:
        return httperror(request, '没有此主机!')
    post = post.first()

    if is_group_admin(request) and not verify(request, asset=[host_id]):
        return httperror(request, '您无权查看!')

    elif is_common_user(request):
        username = get_session_user_info[1]
        user_permed_hosts = user_perm_asset_api(username)
        if post not in user_permed_hosts:
            return httperror(request, '您无权查看!')
    else:
        log_all = Log.objects.filter(host=post.ip)
        log, log_more = log_all[:10], log_all[10:]
        user_permed_list = asset_perm_api(post)

    return render_to_response('jasset/host_detail.html', locals(), context_instance=RequestContext(request))


@require_super_user
def idc_add(request):
    header_title, path1, path2 = u'添加IDC', u'资产管理', u'添加IDC'
    if request.method == 'POST':
        j_idc = request.POST.get('j_idc')
        j_comment = request.POST.get('j_comment')
        if IDC.objects.filter(name=j_idc):
            emg = u'该IDC已存在!'
            return render_to_response('jasset/idc_add.html', locals(), context_instance=RequestContext(request))
        else:
            smg = u'IDC:%s添加成功' % j_idc
            IDC.objects.create(name=j_idc, comment=j_comment)

    return render_to_response('jasset/idc_add.html', locals(), context_instance=RequestContext(request))


@require_admin
def idc_list(request):
    header_title, path1, path2 = u'查看IDC', u'资产管理', u'查看IDC'
    dept_id = get_user_dept(request)
    dept = DEPT.objects.get(id=dept_id)
    keyword = request.GET.get('keyword', '')
    if keyword:
        posts = IDC.objects.filter(Q(name__contains=keyword) | Q(comment__contains=keyword))
    else:
        posts = IDC.objects.exclude(name='ALL').order_by('id')
    contact_list, p, contacts, page_range, current_page, show_first, show_end = pages(posts, request)
    return render_to_response('jasset/idc_list.html', locals(), context_instance=RequestContext(request))


@require_super_user
def idc_edit(request):
    header_title, path1, path2 = u'编辑IDC', u'资产管理', u'编辑IDC'
    idc_id = request.GET.get('id')
    idc = IDC.objects.filter(id=idc_id)
    if idc:
        idc = idc[0]
        default = IDC.objects.get(name='默认').asset_set.all()
        eposts = Asset.objects.filter(idc=idc).order_by('ip')
        posts = [g for g in default if g not in eposts]
    else:
        emg = '此IDC不存在'

    if request.method == 'POST':
        idc_id = request.POST.get('id')
        j_idc = request.POST.get('j_idc')
        j_hosts = request.POST.getlist('j_hosts')
        j_comment = request.POST.get('j_comment')
        idc_default = request.POST.getlist('idc_default')

        idc = IDC.objects.filter(id=idc_id)
        if idc:
            idc.update(name=j_idc, comment=j_comment)
            for host_id in j_hosts:
                Asset.objects.filter(id=host_id).update(idc=idc[0])

            i = IDC.objects.get(name='默认')
            for host in idc_default:
                g = Asset.objects.filter(id=host).update(idc=i)
        else:
            emg = '此IDC不存在'
            return render_to_response('jasset/idc_edit.html', locals(), context_instance=RequestContext(request))

        return HttpResponseRedirect('/jasset/idc_list/?id=%s' % idc_id)

    return render_to_response('jasset/idc_edit.html', locals(), context_instance=RequestContext(request))


@require_admin
def idc_detail(request):
    header_title, path1, path2 = u'IDC详情', u'资产管理', u'IDC详情'
    login_types = {'L': 'LDAP', 'M': 'MAP'}
    idc_id = request.GET.get('id')
    idc_filter = IDC.objects.filter(id=idc_id)
    if idc_filter:
        idc = idc_filter[0]
    else:
        return httperror(request, '没有此IDC')
    dept_id = get_user_dept(request)
    dept = DEPT.objects.get(id=dept_id)
    if is_super_user(request):
        posts = Asset.objects.filter(idc=idc).order_by('ip')
    elif is_group_admin(request):
        posts = Asset.objects.filter(idc=idc, dept=dept).order_by('ip')
    contact_list, p, contacts, page_range, current_page, show_first, show_end = pages(posts, request)

    return render_to_response('jasset/idc_detail.html', locals(), context_instance=RequestContext(request))


@require_super_user
def idc_del(request):
    offset = request.GET.get('id', '')
    if offset == 'multi':
        len_list = request.POST.get("len_list")
        for i in range(int(len_list)):
            key = "id_list[" + str(i) + "]"
            gid = request.POST.get(key)
            IDC.objects.filter(id=gid).delete()
    else:
        gid = int(offset)
        IDC.objects.filter(id=gid).delete()
    return HttpResponseRedirect('/jasset/idc_list/')


@require_admin
def group_add(request):
    header_title, path1, path2 = u'添加主机组', u'资产管理', u'添加主机组'
    if is_super_user(request):
        posts = Asset.objects.all()
        edept = DEPT.objects.all()
    elif is_group_admin(request):
        dept_id = get_user_dept(request)
        dept = DEPT.objects.get(id=dept_id)
        posts = Asset.objects.filter(dept=dept)
        edept = DEPT.objects.get(id=dept_id)

    if request.method == 'POST':
        j_group = request.POST.get('j_group', '')
        j_dept = request.POST.get('j_dept', '')
        j_hosts = request.POST.getlist('j_hosts', '')
        j_comment = request.POST.get('j_comment', '')

        try:
            print verify(request, asset=j_hosts, edept=[j_dept]), 'hehe'
            if is_group_admin(request) and not verify(request, asset=j_hosts, edept=[j_dept]):
                emg = u'添加失败, 您无权操作!'
                raise RaiseError

            elif BisGroup.objects.filter(name=j_group):
                emg = u'添加失败, 该主机组已存在!'
                raise RaiseError

        except RaiseError:
            pass

        else:
            j_dept = DEPT.objects.filter(id=j_dept).first()
            group = BisGroup.objects.create(name=j_group, dept=j_dept, comment=j_comment)
            for host in j_hosts:
                g = Asset.objects.get(id=host)
                group.asset_set.add(g)
            smg = u'主机组 %s 添加成功' % j_group

    return render_to_response('jasset/group_add.html', locals(), context_instance=RequestContext(request))


@require_admin
def group_list(request):
    header_title, path1, path2 = u'查看主机组', u'资产管理', u'查看主机组'
    dept_id = get_user_dept(request)
    dept = DEPT.objects.get(id=dept_id)
    keyword = request.GET.get('keyword', '')
    gid = request.GET.get('gid')
    sid = request.GET.get('sid')
    if gid:
        posts = []
        user_group = UserGroup.objects.get(id=gid)
        perms = Perm.objects.filter(user_group=user_group)
        for perm in perms:
            posts.append(perm.asset_group)

    elif sid:
        posts = []
        user_group = UserGroup.objects.get(id=sid)
        perms = Perm.objects.filter(user_group=user_group)
        for perm in perms:
            posts.append(perm.asset_group)

    else:
        if is_super_user(request):
            if keyword:
                posts = BisGroup.objects.exclude(name='ALL').filter(
                    Q(name__contains=keyword) | Q(comment__contains=keyword))
            else:
                posts = BisGroup.objects.exclude(name='ALL').order_by('id')
        elif is_group_admin(request):
            if keyword:
                posts = BisGroup.objects.filter(Q(name__contains=keyword) | Q(comment__contains=keyword)).filter(
                    dept=dept)
            else:
                posts = BisGroup.objects.filter(dept=dept).order_by('id')
    contact_list, p, contacts, page_range, current_page, show_first, show_end = pages(posts, request)
    return render_to_response('jasset/group_list.html', locals(), context_instance=RequestContext(request))


@require_admin
def group_edit(request):
    header_title, path1, path2 = u'编辑主机组', u'资产管理', u'编辑主机组'
    group_id = request.GET.get('id', '')
    group = BisGroup.objects.get(id=group_id)
    all = Asset.objects.all()
    dept_id = get_user_dept(request)
    eposts = Asset.objects.filter(bis_group=group).order_by('ip')

    if is_super_user(request):
        edept = DEPT.objects.all()
        posts = [g for g in all if g not in eposts]

    elif is_group_admin(request):
        dept = DEPT.objects.get(id=dept_id)
        all_dept = Asset.objects.filter(dept=dept)
        posts = [g for g in all_dept if g not in eposts]

    if request.method == 'POST':
        j_group = request.POST.get('j_group', '')
        j_hosts = request.POST.getlist('j_hosts', '')
        j_dept = request.POST.get('j_dept', '')
        j_comment = request.POST.get('j_comment', '')

        j_dept = DEPT.objects.filter(id=int(j_dept))
        j_dept = j_dept[0]

        group.asset_set.clear()
        for host in j_hosts:
            g = Asset.objects.get(id=host)
            group.asset_set.add(g)
        BisGroup.objects.filter(id=group_id).update(name=j_group, dept=j_dept, comment=j_comment)
        smg = u'主机组%s修改成功' % j_group
        return HttpResponseRedirect('/jasset/group_list')

    return render_to_response('jasset/group_edit.html', locals(), context_instance=RequestContext(request))


@require_admin
def group_detail(request):
    header_title, path1, path2 = u'主机组详情', u'资产管理', u'主机组详情'
    login_types = {'L': 'LDAP', 'S': 'SSH_KEY', 'P': 'PASSWORD', 'M': 'MAP'}
    dept_id = get_user_dept(request)
    dept = DEPT.objects.get(id=dept_id)
    group_id = request.GET.get('id')
    group_name = BisGroup.objects.get(id=group_id).name
    b = BisGroup.objects.get(id=group_id)
    if is_super_user(request):
        posts = Asset.objects.filter(bis_group=b).order_by('ip')
        contact_list, p, contacts, page_range, current_page, show_first, show_end = pages(posts, request)

    elif is_group_admin(request):
        posts = Asset.objects.filter(bis_group=b).filter(dept=dept).order_by('ip')
        contact_list, p, contacts, page_range, current_page, show_first, show_end = pages(posts, request)
    return render_to_response('jasset/group_detail.html', locals(), context_instance=RequestContext(request))


@require_admin
def group_del_host(request, offset):
    if request.method == 'POST':
        group_name = request.POST.get('group_name')
        if offset == 'group':
            group = BisGroup.objects.get(name=group_name)
        elif offset == 'idc':
            group = IDC.objects.get(name=group_name)
        len_list = request.POST.get("len_list")
        for i in range(int(len_list)):
            key = "id_list[" + str(i) + "]"
            jid = request.POST.get(key)
            g = Asset.objects.get(id=jid)
            if offset == 'group':
                group.asset_set.remove(g)
            elif offset == 'idc':
                Asset.objects.filter(id=jid).delete()
                BisGroup.objects.filter(name=g.ip).delete()

        return HttpResponseRedirect('/jasset/%s_detail/?id=%s' % (offset, group.id))


@require_admin
def group_del(request):
    offset = request.GET.get('id', '')
    if offset == 'multi':
        len_list = request.POST.get("len_list")
        for i in range(int(len_list)):
            key = "id_list[" + str(i) + "]"
            gid = request.POST.get(key)
            BisGroup.objects.filter(id=gid).delete()
    else:
        gid = int(offset)
        BisGroup.objects.filter(id=gid).delete()
    return HttpResponseRedirect('/jasset/group_list/')


def dept_host_ajax(request):
    dept_id = request.GET.get('id', '')
    if dept_id not in ['1', '2']:
        dept = DEPT.objects.filter(id=dept_id)
        if dept:
            dept = dept[0]
            hosts = dept.asset_set.all()
    else:
        hosts = Asset.objects.all()

    return render_to_response('jasset/dept_host_ajax.html', locals())


@require_login
def host_search(request):
    keyword = request.GET.get('keyword')
    login_types = {'L': 'LDAP', 'M': 'MAP'}
    dept_id = get_user_dept(request)
    dept = DEPT.objects.get(id=dept_id)
    if is_super_user(request):
        posts = Asset.objects.filter(Q(ip__contains=keyword) | Q(idc__name__contains=keyword) |
                                     Q(bis_group__name__contains=keyword) | Q(
            comment__contains=keyword)).distinct().order_by('ip')
    elif is_group_admin(request):
        posts = Asset.objects.filter(Q(ip__contains=keyword) | Q(idc__name__contains=keyword) |
                                     Q(bis_group__name__contains=keyword) | Q(
            comment__contains=keyword)).filter(dept=dept).distinct().order_by('ip')
    elif is_common_user(request):
        user_id = request.session.get('user_id')
        username = User.objects.get(id=user_id).name
        post_perm = user_perm_asset_api(username)
        post_all = Asset.objects.filter(Q(ip__contains=keyword) | Q(idc__name__contains=keyword) |
                                        Q(bis_group__name__contains=keyword) | Q(comment__contains=keyword)) \
            .distinct().order_by('ip')
        posts = list(set(post_all) & set(post_perm))
    contact_list, p, contacts, page_range, current_page, show_first, show_end = pages(posts, request)

    return render_to_response('jasset/host_search.html', locals(), context_instance=RequestContext(request))