mirror of https://github.com/jumpserver/jumpserver
[Update] Merge with bugfix
commit
fa02e3fb75
|
@ -60,10 +60,6 @@ class AuthBook(AssetUser):
|
||||||
self.version = 1
|
self.version = 1
|
||||||
self.save()
|
self.save()
|
||||||
|
|
||||||
def set_version_and_latest(self):
|
|
||||||
self.set_version()
|
|
||||||
self.set_to_latest()
|
|
||||||
|
|
||||||
def get_related_assets(self):
|
def get_related_assets(self):
|
||||||
return [self.asset]
|
return [self.asset]
|
||||||
|
|
||||||
|
|
|
@ -53,7 +53,7 @@ class AssetUserSerializer(AuthSerializerMixin, BulkOrgResourceModelSerializer):
|
||||||
if not validated_data.get("name") and validated_data.get("username"):
|
if not validated_data.get("name") and validated_data.get("username"):
|
||||||
validated_data["name"] = validated_data["username"]
|
validated_data["name"] = validated_data["username"]
|
||||||
instance = AssetUserManager.create(**validated_data)
|
instance = AssetUserManager.create(**validated_data)
|
||||||
instance.set_version_and_latest()
|
instance.set_to_latest()
|
||||||
return instance
|
return instance
|
||||||
|
|
||||||
|
|
||||||
|
|
|
@ -9,7 +9,7 @@ from django.dispatch import receiver
|
||||||
|
|
||||||
from common.utils import get_logger, timeit
|
from common.utils import get_logger, timeit
|
||||||
from common.decorator import on_transaction_commit
|
from common.decorator import on_transaction_commit
|
||||||
from .models import Asset, SystemUser, Node
|
from .models import Asset, SystemUser, Node, AuthBook
|
||||||
from .tasks import (
|
from .tasks import (
|
||||||
update_assets_hardware_info_util,
|
update_assets_hardware_info_util,
|
||||||
test_asset_connectivity_util,
|
test_asset_connectivity_util,
|
||||||
|
@ -189,3 +189,9 @@ def on_asset_nodes_remove(sender, instance=None, action='', model=None,
|
||||||
def on_node_update_or_created(sender, **kwargs):
|
def on_node_update_or_created(sender, **kwargs):
|
||||||
# 刷新节点
|
# 刷新节点
|
||||||
Node.refresh_nodes()
|
Node.refresh_nodes()
|
||||||
|
|
||||||
|
|
||||||
|
@receiver(post_save, sender=AuthBook)
|
||||||
|
def on_authbook_created(sender, instance=None, created=True, **kwargs):
|
||||||
|
if created and instance:
|
||||||
|
instance.set_version()
|
||||||
|
|
|
@ -25,7 +25,7 @@
|
||||||
|
|
||||||
<div class="wrapper wrapper-content">
|
<div class="wrapper wrapper-content">
|
||||||
<div class="row">
|
<div class="row">
|
||||||
<div class="col-lg-3" id="split-left" style="padding-left: 3px">
|
<div class="col-lg-3" id="split-left" style="padding-left: 3px;overflow: auto;max-height: 500px">
|
||||||
<div class="ibox float-e-margins">
|
<div class="ibox float-e-margins">
|
||||||
<div class="ibox-content mailbox-content" style="padding-top: 0;padding-left: 1px">
|
<div class="ibox-content mailbox-content" style="padding-top: 0;padding-left: 1px">
|
||||||
<div class="file-manager ">
|
<div class="file-manager ">
|
||||||
|
|
|
@ -32,8 +32,7 @@
|
||||||
}
|
}
|
||||||
</style>
|
</style>
|
||||||
|
|
||||||
|
<div class="ibox treebox float-e-margins" style="overflow:auto;">
|
||||||
<div class="ibox float-e-margins">
|
|
||||||
<div class="ibox-content mailbox-content" style="padding-top: 0;padding-left: 1px">
|
<div class="ibox-content mailbox-content" style="padding-top: 0;padding-left: 1px">
|
||||||
<div class="file-manager" id="tree-node-id">
|
<div class="file-manager" id="tree-node-id">
|
||||||
<div id="{% block treeID %}nodeTree{% endblock %}" class="ztree">
|
<div id="{% block treeID %}nodeTree{% endblock %}" class="ztree">
|
||||||
|
@ -306,6 +305,7 @@ function defaultCallback(action) {
|
||||||
|
|
||||||
|
|
||||||
$(document).ready(function () {
|
$(document).ready(function () {
|
||||||
|
$('.treebox').css('height', window.innerHeight - 180);
|
||||||
})
|
})
|
||||||
.on('click', '.btn-show-current-asset', function(){
|
.on('click', '.btn-show-current-asset', function(){
|
||||||
hideRMenu();
|
hideRMenu();
|
||||||
|
@ -322,4 +322,4 @@ $(document).ready(function () {
|
||||||
location.reload();
|
location.reload();
|
||||||
})
|
})
|
||||||
|
|
||||||
</script>
|
</script>
|
||||||
|
|
|
@ -396,7 +396,8 @@ defaults = {
|
||||||
'DEFAULT_ORG_SHOW_ALL_USERS': True,
|
'DEFAULT_ORG_SHOW_ALL_USERS': True,
|
||||||
'PERIOD_TASK_ENABLE': True,
|
'PERIOD_TASK_ENABLE': True,
|
||||||
'FORCE_SCRIPT_NAME': '',
|
'FORCE_SCRIPT_NAME': '',
|
||||||
'LOGIN_CONFIRM_ENABLE': False
|
'LOGIN_CONFIRM_ENABLE': False,
|
||||||
|
'WINDOWS_SKIP_ALL_MANUAL_PASSWORD': False,
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|
||||||
|
|
|
@ -242,6 +242,7 @@ class AdHoc(models.Model):
|
||||||
except AttributeError:
|
except AttributeError:
|
||||||
hid = str(uuid.uuid4())
|
hid = str(uuid.uuid4())
|
||||||
history = AdHocRunHistory(id=hid, adhoc=self, task=self.task)
|
history = AdHocRunHistory(id=hid, adhoc=self, task=self.task)
|
||||||
|
history.save()
|
||||||
time_start = time.time()
|
time_start = time.time()
|
||||||
date_start = timezone.now()
|
date_start = timezone.now()
|
||||||
is_success = False
|
is_success = False
|
||||||
|
|
|
@ -12,11 +12,14 @@ from django.conf import settings
|
||||||
from django.core.mail import send_mail
|
from django.core.mail import send_mail
|
||||||
from django.utils.translation import ugettext_lazy as _
|
from django.utils.translation import ugettext_lazy as _
|
||||||
|
|
||||||
from .models import Setting
|
|
||||||
from .utils import LDAPUtil
|
|
||||||
from common.permissions import IsOrgAdmin, IsSuperUser
|
from common.permissions import IsOrgAdmin, IsSuperUser
|
||||||
from common.utils import get_logger
|
from common.utils import get_logger
|
||||||
from .serializers import MailTestSerializer, LDAPTestSerializer, LDAPUserSerializer
|
from .models import Setting
|
||||||
|
from .utils import LDAPUtil
|
||||||
|
from .serializers import (
|
||||||
|
MailTestSerializer, LDAPTestSerializer, LDAPUserSerializer,
|
||||||
|
PublicSettingSerializer,
|
||||||
|
)
|
||||||
|
|
||||||
|
|
||||||
logger = get_logger(__file__)
|
logger = get_logger(__file__)
|
||||||
|
@ -245,3 +248,19 @@ class CommandStorageDeleteAPI(APIView):
|
||||||
storage_name = str(request.data.get('name'))
|
storage_name = str(request.data.get('name'))
|
||||||
Setting.delete_storage('TERMINAL_COMMAND_STORAGE', storage_name)
|
Setting.delete_storage('TERMINAL_COMMAND_STORAGE', storage_name)
|
||||||
return Response({"msg": _('Delete succeed')}, status=200)
|
return Response({"msg": _('Delete succeed')}, status=200)
|
||||||
|
|
||||||
|
|
||||||
|
class PublicSettingApi(generics.RetrieveAPIView):
|
||||||
|
permission_classes = ()
|
||||||
|
serializer_class = PublicSettingSerializer
|
||||||
|
|
||||||
|
def get_object(self):
|
||||||
|
c = settings.CONFIG
|
||||||
|
instance = {
|
||||||
|
"data": {
|
||||||
|
"WINDOWS_SKIP_ALL_MANUAL_PASSWORD": c.WINDOWS_SKIP_ALL_MANUAL_PASSWORD
|
||||||
|
}
|
||||||
|
}
|
||||||
|
return instance
|
||||||
|
|
||||||
|
|
||||||
|
|
|
@ -28,3 +28,6 @@ class LDAPUserSerializer(serializers.Serializer):
|
||||||
email = serializers.CharField()
|
email = serializers.CharField()
|
||||||
existing = serializers.BooleanField(read_only=True)
|
existing = serializers.BooleanField(read_only=True)
|
||||||
|
|
||||||
|
|
||||||
|
class PublicSettingSerializer(serializers.Serializer):
|
||||||
|
data = serializers.DictField(read_only=True)
|
||||||
|
|
|
@ -15,4 +15,5 @@ urlpatterns = [
|
||||||
path('terminal/replay-storage/delete/', api.ReplayStorageDeleteAPI.as_view(), name='replay-storage-delete'),
|
path('terminal/replay-storage/delete/', api.ReplayStorageDeleteAPI.as_view(), name='replay-storage-delete'),
|
||||||
path('terminal/command-storage/create/', api.CommandStorageCreateAPI.as_view(), name='command-storage-create'),
|
path('terminal/command-storage/create/', api.CommandStorageCreateAPI.as_view(), name='command-storage-create'),
|
||||||
path('terminal/command-storage/delete/', api.CommandStorageDeleteAPI.as_view(), name='command-storage-delete'),
|
path('terminal/command-storage/delete/', api.CommandStorageDeleteAPI.as_view(), name='command-storage-delete'),
|
||||||
|
path('public/', api.PublicSettingApi.as_view(), name='public-setting'),
|
||||||
]
|
]
|
||||||
|
|
|
@ -2,6 +2,7 @@
|
||||||
|
|
||||||
from django import forms
|
from django import forms
|
||||||
from django.utils.translation import gettext_lazy as _
|
from django.utils.translation import gettext_lazy as _
|
||||||
|
from django.conf import settings
|
||||||
|
|
||||||
from common.utils import validate_ssh_public_key
|
from common.utils import validate_ssh_public_key
|
||||||
from orgs.mixins.forms import OrgModelForm
|
from orgs.mixins.forms import OrgModelForm
|
||||||
|
@ -21,6 +22,20 @@ class UserCheckOtpCodeForm(forms.Form):
|
||||||
otp_code = forms.CharField(label=_('MFA code'), max_length=6)
|
otp_code = forms.CharField(label=_('MFA code'), max_length=6)
|
||||||
|
|
||||||
|
|
||||||
|
def get_source_choices():
|
||||||
|
choices_all = dict(User.SOURCE_CHOICES)
|
||||||
|
choices = [
|
||||||
|
(User.SOURCE_LOCAL, choices_all[User.SOURCE_LOCAL]),
|
||||||
|
]
|
||||||
|
if settings.AUTH_LDAP:
|
||||||
|
choices.append((User.SOURCE_LDAP, choices_all[User.SOURCE_LDAP]))
|
||||||
|
if settings.AUTH_OPENID:
|
||||||
|
choices.append((User.SOURCE_OPENID, choices_all[User.SOURCE_OPENID]))
|
||||||
|
if settings.AUTH_RADIUS:
|
||||||
|
choices.append((User.SOURCE_RADIUS, choices_all[User.SOURCE_RADIUS]))
|
||||||
|
return choices
|
||||||
|
|
||||||
|
|
||||||
class UserCreateUpdateFormMixin(OrgModelForm):
|
class UserCreateUpdateFormMixin(OrgModelForm):
|
||||||
role_choices = ((i, n) for i, n in User.ROLE_CHOICES if i != User.ROLE_APP)
|
role_choices = ((i, n) for i, n in User.ROLE_CHOICES if i != User.ROLE_APP)
|
||||||
password = forms.CharField(
|
password = forms.CharField(
|
||||||
|
@ -31,6 +46,10 @@ class UserCreateUpdateFormMixin(OrgModelForm):
|
||||||
choices=role_choices, required=True,
|
choices=role_choices, required=True,
|
||||||
initial=User.ROLE_USER, label=_("Role")
|
initial=User.ROLE_USER, label=_("Role")
|
||||||
)
|
)
|
||||||
|
source = forms.ChoiceField(
|
||||||
|
choices=get_source_choices, required=True,
|
||||||
|
initial=User.SOURCE_LOCAL, label=_("Source")
|
||||||
|
)
|
||||||
public_key = forms.CharField(
|
public_key = forms.CharField(
|
||||||
label=_('ssh public key'), max_length=5000, required=False,
|
label=_('ssh public key'), max_length=5000, required=False,
|
||||||
widget=forms.Textarea(attrs={'placeholder': _('ssh-rsa AAAA...')}),
|
widget=forms.Textarea(attrs={'placeholder': _('ssh-rsa AAAA...')}),
|
||||||
|
@ -41,7 +60,8 @@ class UserCreateUpdateFormMixin(OrgModelForm):
|
||||||
model = User
|
model = User
|
||||||
fields = [
|
fields = [
|
||||||
'username', 'name', 'email', 'groups', 'wechat',
|
'username', 'name', 'email', 'groups', 'wechat',
|
||||||
'phone', 'role', 'date_expired', 'comment', 'otp_level'
|
'source', 'phone', 'role', 'date_expired',
|
||||||
|
'comment', 'otp_level'
|
||||||
]
|
]
|
||||||
widgets = {
|
widgets = {
|
||||||
'otp_level': forms.RadioSelect(),
|
'otp_level': forms.RadioSelect(),
|
||||||
|
|
|
@ -66,3 +66,4 @@ class UserGroupUpdateMemberSerializer(serializers.ModelSerializer):
|
||||||
def set_fields_queryset(self):
|
def set_fields_queryset(self):
|
||||||
users_field = self.fields['users']
|
users_field = self.fields['users']
|
||||||
users_field.child_relation.queryset = utils.get_current_org_members()
|
users_field.child_relation.queryset = utils.get_current_org_members()
|
||||||
|
|
||||||
|
|
|
@ -43,7 +43,6 @@ class UserSerializer(BulkSerializerMixin, serializers.ModelSerializer):
|
||||||
'is_valid': {'label': _('Is valid')},
|
'is_valid': {'label': _('Is valid')},
|
||||||
'is_expired': {'label': _('Is expired')},
|
'is_expired': {'label': _('Is expired')},
|
||||||
'avatar_url': {'label': _('Avatar url')},
|
'avatar_url': {'label': _('Avatar url')},
|
||||||
'source': {'read_only': True},
|
|
||||||
'created_by': {'read_only': True, 'allow_blank': True},
|
'created_by': {'read_only': True, 'allow_blank': True},
|
||||||
'can_update': {'read_only': True},
|
'can_update': {'read_only': True},
|
||||||
'can_delete': {'read_only': True},
|
'can_delete': {'read_only': True},
|
||||||
|
|
|
@ -21,6 +21,7 @@
|
||||||
<h3>{% trans 'Auth' %}</h3>
|
<h3>{% trans 'Auth' %}</h3>
|
||||||
{% block password %}{% endblock %}
|
{% block password %}{% endblock %}
|
||||||
{% bootstrap_field form.otp_level layout="horizontal" %}
|
{% bootstrap_field form.otp_level layout="horizontal" %}
|
||||||
|
{% bootstrap_field form.source layout="horizontal" %}
|
||||||
|
|
||||||
<div class="hr-line-dashed"></div>
|
<div class="hr-line-dashed"></div>
|
||||||
<h3>{% trans 'Security and Role' %}</h3>
|
<h3>{% trans 'Security and Role' %}</h3>
|
||||||
|
|
Loading…
Reference in New Issue