mirror of https://github.com/jumpserver/jumpserver
parent
c32271ec6f
commit
b1daa4d357
|
@ -1,13 +1,12 @@
|
|||
# -*- coding: utf-8 -*-
|
||||
#
|
||||
from datetime import timedelta
|
||||
|
||||
from celery import shared_task
|
||||
from django.conf import settings
|
||||
from django.db.models import Max
|
||||
from django.utils import timezone
|
||||
from django.utils.translation import gettext_lazy as _
|
||||
|
||||
from audits.models import UserLoginLog
|
||||
from common.const.crontab import CRONTAB_AT_AM_TEN, CRONTAB_AT_PM_TWO
|
||||
from common.utils import get_logger
|
||||
from common.utils.timezone import utc_now
|
||||
|
@ -84,17 +83,7 @@ def check_user_expired_periodic():
|
|||
@register_as_period_task(crontab=CRONTAB_AT_PM_TWO)
|
||||
@tmp_to_root_org()
|
||||
def check_unused_users():
|
||||
now = utc_now()
|
||||
unused_usernames = []
|
||||
usernames_max_datetime = UserLoginLog.objects.values('username').annotate(max_datetime=Max('datetime'))
|
||||
for i in usernames_max_datetime:
|
||||
username = i['username']
|
||||
max_datetime = i['max_datetime']
|
||||
uncommon_users_ttl = settings.SECURITY_UNCOMMON_USERS_TTL
|
||||
if (now - max_datetime).seconds > uncommon_users_ttl * 24 * 60 * 60:
|
||||
unused_usernames.append(username)
|
||||
|
||||
if not unused_usernames:
|
||||
return
|
||||
|
||||
User.objects.filter(username__in=unused_usernames).update(is_active=False)
|
||||
uncommon_users_ttl = settings.SECURITY_UNCOMMON_USERS_TTL
|
||||
seconds_to_subtract = uncommon_users_ttl * 24 * 60 * 60
|
||||
t = utc_now() - timedelta(seconds=seconds_to_subtract)
|
||||
User.objects.filter(last_login__lte=t).update(is_active=False)
|
||||
|
|
Loading…
Reference in New Issue