# coding:utf-8 import ast from django.db.models import Q from django.http import Http404 from django.http import HttpResponseRedirect from django.template import RequestContext from django.shortcuts import render_to_response from models import IDC, Asset, BisGroup from juser.models import UserGroup, DEPT from connect import PyCrypt, KEY from jlog.models import Log from jumpserver.views import jasset_host_edit, pages from jumpserver.api import * cryptor = PyCrypt(KEY) class RaiseError(Exception): pass def f_add_host(ip, port, idc, jtype, group, dept, active, comment, username='', password=''): groups, depts = [], [] idc = IDC.objects.get(name=idc) if jtype == 'M': print username, password a = Asset(ip=ip, port=port, login_type=jtype, idc=idc, is_active=int(active), comment=comment, username=username, password=password) else: a = Asset(ip=ip, port=port, login_type=jtype, idc=idc, is_active=int(active), comment=comment) a.save() all_group = BisGroup.objects.get(name='ALL') for g in group: c = BisGroup.objects.get(name=g) groups.append(c) groups.append(all_group) for d in dept: p = DEPT.objects.get(name=d) depts.append(p) a.bis_group = groups a.dept = depts a.save() @require_admin def add_host(request): login_types = {'L': 'LDAP', 'M': 'MAP'} header_title, path1, path2 = u'添加主机', u'资产管理', u'添加主机' eidc = IDC.objects.exclude(name='ALL') if is_super_user(request): edept = DEPT.objects.all() egroup = BisGroup.objects.exclude(name='ALL') eusergroup = UserGroup.objects.all() elif is_group_admin(request): dept_id = get_user_dept(request) user_id = request.session.get('user_id') edept = DEPT.objects.get(id=dept_id) egroup = edept.bisgroup_set.all() if request.method == 'POST': j_ip = request.POST.get('j_ip') j_idc = request.POST.get('j_idc') j_port = request.POST.get('j_port') j_type = request.POST.get('j_type') j_group = request.POST.getlist('j_group') j_active = request.POST.get('j_active') j_comment = request.POST.get('j_comment') j_dept = request.POST.getlist('j_dept') if is_group_admin(request) and not validate(request, asset_group=j_group, edept=j_dept): emg = u'添加失败,您无权操作!' return render_to_response('jasset/host_add.html', locals(), context_instance=RequestContext(request)) if Asset.objects.filter(ip=str(j_ip)): emg = u'该IP %s 已存在!' % j_ip return render_to_response('jasset/host_add.html', locals(), context_instance=RequestContext(request)) if j_type == 'M': j_user = request.POST.get('j_user') j_password = cryptor.encrypt(request.POST.get('j_password')) f_add_host(j_ip, j_port, j_idc, j_type, j_group, j_dept, j_active, j_comment, j_user, j_password) else: f_add_host(j_ip, j_port, j_idc, j_type, j_group, j_dept, j_active, j_comment) smg = u'主机 %s 添加成功' % j_ip return render_to_response('jasset/host_add.html', locals(), context_instance=RequestContext(request)) @require_admin def add_host_multi(request): header_title, path1, path2 = u'批量添加主机', u'资产管理', u'批量添加主机' login_types = {'LDAP': 'L', 'MAP': 'M'} dept_id = get_user_dept(request) if request.method == 'POST': multi_hosts = request.POST.get('j_multi').split('\n') for host in multi_hosts: if host == '': break j_ip, j_port, j_type, j_idc, j_groups, j_depts, j_active, j_comment = host.split() j_type = login_types[j_type] j_group = ast.literal_eval(j_groups) j_dept = ast.literal_eval(j_depts) if Asset.objects.filter(ip=str(j_ip)): emg = u'该IP %s 已存在!' % j_ip return render_to_response('jasset/host_add_multi.html', locals(), context_instance=RequestContext(request)) if j_type == 'M': j_user = request.POST.get('j_user') j_password = cryptor.encrypt(request.POST.get('j_password')) f_add_host(j_ip, j_port, j_idc, j_type, j_group, j_dept, j_active, j_comment, j_user, j_password) else: f_add_host(j_ip, j_port, j_idc, j_type, j_group, j_dept, j_active, j_comment) smg = u'批量添加添加成功' return HttpResponseRedirect('/jasset/host_list/') return render_to_response('jasset/host_add_multi.html', locals(), context_instance=RequestContext(request)) @require_admin def batch_host_edit(request): if request.method == 'POST': len_table = request.POST.get('len_table') for i in range(int(len_table)): j_id = "editable[" + str(i) + "][j_id]" j_ip = "editable[" + str(i) + "][j_ip]" j_port = "editable[" + str(i) + "][j_port]" j_dept = "editable[" + str(i) + "][j_dept]" j_idc = "editable[" + str(i) + "][j_idc]" j_type = "editable[" + str(i) + "][j_type]" j_group = "editable[" + str(i) + "][j_group]" j_active = "editable[" + str(i) + "][j_active]" j_comment = "editable[" + str(i) + "][j_comment]" j_id = request.POST.get(j_id).strip() j_ip = request.POST.get(j_ip).strip() j_port = request.POST.get(j_port).strip() j_dept = request.POST.getlist(j_dept).strip() j_idc = request.POST.get(j_idc).strip() j_type = request.POST.get(j_type).strip() j_group = request.POST.getlist(j_group) j_active = request.POST.get(j_active).strip() j_comment = request.POST.get(j_comment).strip() print j_dept, j_group # # if is_group_admin(request) and not validate(request, asset=[j_id]): # emg = u'删除失败,您无权操作!' # print 'hehe' # return HttpResponseRedirect('/jasset/host_list/') if j_type == 'M': j_user = "editable[" + str(i) + "][j_user]" j_password = "editable[" + str(i) + "][j_password]" j_user = request.POST.get(j_user).strip() password = request.POST.get(j_password).strip() j_password = cryptor.encrypt(password) jasset_host_edit(j_id, j_ip, j_idc, j_port, j_type, j_group, j_dept, j_active, j_comment, j_user, j_password) else: jasset_host_edit(j_id, j_ip, j_idc, j_port, j_type, j_group, j_dept, j_active, j_comment) return render_to_response('jasset/host_list.html') @require_login def list_host(request): header_title, path1, path2 = u'查看主机', u'资产管理', u'查看主机' login_types = {'L': 'LDAP', 'M': 'MAP'} keyword = request.GET.get('keyword', '') dept_id = get_user_dept(request) dept = DEPT.objects.get(id=dept_id) if is_super_user(request): if keyword: posts = Asset.objects.filter(Q(ip__contains=keyword) | Q(idc__name__contains=keyword) | Q(bis_group__name__contains=keyword) | Q(comment__contains=keyword)).distinct().order_by('ip') else: posts = Asset.objects.all().order_by('ip') contact_list, p, contacts, page_range, current_page, show_first, show_end = pages(posts, request) elif is_group_admin(request): if keyword: posts = Asset.objects.filter(Q(ip__contains=keyword) | Q(idc__name__contains=keyword) | Q(bis_group__name__contains=keyword) | Q(comment__contains=keyword)).filter(dept=dept).distinct().order_by('ip') else: posts = Asset.objects.all().filter(dept=dept).order_by('ip') contact_list, p, contacts, page_range, current_page, show_first, show_end = pages(posts, request) elif is_common_user(request): user_id = request.session.get('user_id') username = User.objects.get(id=user_id).name posts = user_perm_asset_api(username) contact_list, p, contacts, page_range, current_page, show_first, show_end = pages(posts, request) print posts, username return render_to_response('jasset/host_list.html', locals(), context_instance=RequestContext(request)) @require_admin def host_del(request, offset): if offset == 'multi': len_list = request.POST.get("len_list") for i in range(int(len_list)): key = "id_list[" + str(i) + "]" jid = request.POST.get(key) print jid if is_group_admin(request) and not validate(request, asset=[jid]): emg = u'删除失败,您无权操作!' return HttpResponseRedirect('/jasset/host_list/') a = Asset.objects.get(id=jid).ip Asset.objects.filter(id=jid).delete() BisGroup.objects.filter(name=a).delete() else: jid = int(offset) if is_group_admin(request) and not validate(request, asset=[jid]): emg = u'删除失败,您无权操作!' return HttpResponseRedirect('/jasset/host_list/') a = Asset.objects.get(id=jid).ip BisGroup.objects.filter(name=a).delete() Asset.objects.filter(id=jid).delete() return HttpResponseRedirect('/jasset/host_list/') @require_admin def host_edit(request): actives = {1: u'激活', 0: u'禁用'} login_types = {'L': 'LDAP', 'M': 'MAP'} header_title, path1, path2 = u'修改主机', u'资产管理', u'修改主机' groups, e_group, e_dept, depts = [], [], [], [] eidc = IDC.objects.all() egroup = BisGroup.objects.all() edept = DEPT.objects.all() offset = request.GET.get('id') for g in Asset.objects.get(id=int(offset)).bis_group.all(): e_group.append(g) for d in Asset.objects.get(id=int(offset)).dept.all(): e_dept.append(d) post = Asset.objects.get(id=int(offset)) if request.method == 'POST': j_ip = request.POST.get('j_ip') j_idc = request.POST.get('j_idc') j_port = request.POST.get('j_port') j_type = request.POST.get('j_type') j_dept = request.POST.getlist('j_dept') j_group = request.POST.getlist('j_group') j_active = request.POST.get('j_active') j_comment = request.POST.get('j_comment') j_idc = IDC.objects.get(name=j_idc) if is_group_admin(request) and not validate(request, asset_group=j_group, edept=j_dept): emg = u'修改失败,您无权操作!' return render_to_response('jasset/host_edit.html', locals(), context_instance=RequestContext(request)) for group in j_group: c = BisGroup.objects.get(name=group) groups.append(c) for dept in j_dept: d = DEPT.objects.get(name=dept) depts.append(d) a = Asset.objects.get(id=int(offset)) if j_type == 'M': if post.password == request.POST.get('j_password'): j_password = post.password else: j_password = cryptor.encrypt(request.POST.get('j_password')) j_user = request.POST.get('j_user') a.ip = j_ip a.port = j_port a.login_type = j_type a.idc = j_idc a.is_active = int(j_active) a.comment = j_comment a.username = j_user a.password = j_password else: a.ip = j_ip a.port = j_port a.idc = j_idc a.login_type = j_type a.is_active = int(j_active) a.comment = j_comment a.save() a.bis_group = groups a.dept = depts a.save() smg = u'主机 %s 修改成功' % j_ip return HttpResponseRedirect('/jasset/host_list') return render_to_response('jasset/host_edit.html', locals(), context_instance=RequestContext(request)) @require_login def jlist_ip(request, offset): header_title, path1, path2 = u'主机详细信息', u'资产管理', u'主机详情' login_types = {'L': 'LDAP', 'S': 'SSH_KEY', 'P': 'PASSWORD', 'M': 'MAP'} post = contact_list = Asset.objects.get(ip=str(offset)) log = Log.objects.filter(host=str(offset)) user_permed_list = asset_perm_api(Asset.objects.get(ip=str(offset))) return render_to_response('jasset/jlist_ip.html', locals(), context_instance=RequestContext(request)) @require_super_user def add_idc(request): header_title, path1, path2 = u'添加IDC', u'资产管理', u'添加IDC' if request.method == 'POST': j_idc = request.POST.get('j_idc') j_comment = request.POST.get('j_comment') if IDC.objects.filter(name=j_idc): emg = u'该IDC已存在!' return render_to_response('jasset/idc_add.html', locals(), context_instance=RequestContext(request)) else: smg = u'IDC:%s添加成功' % j_idc IDC.objects.create(name=j_idc, comment=j_comment) return render_to_response('jasset/idc_add.html', locals(), context_instance=RequestContext(request)) @require_admin def list_idc(request): header_title, path1, path2 = u'查看IDC', u'资产管理', u'查看IDC' keyword = request.GET.get('keyword', '') if keyword: posts = IDC.objects.filter(Q(name__contains=keyword) | Q(comment__contains=keyword)) else: posts = IDC.objects.all().order_by('id') contact_list, p, contacts, page_range, current_page, show_first, show_end = pages(posts, request) return render_to_response('jasset/idc_list.html', locals(), context_instance=RequestContext(request)) @require_super_user def edit_idc(request): header_title, path1, path2 = u'编辑IDC', u'资产管理', u'编辑IDC' edit = 1 idc_id = request.GET.get('id') j_idc = IDC.objects.get(id=idc_id) default = IDC.objects.get(name='默认').asset_set.all() eposts = contact_list = Asset.objects.filter(idc=j_idc).order_by('ip') posts = [g for g in default if g not in eposts] if request.method == 'POST': j_group = request.POST.get('j_idc') j_hosts = request.POST.getlist('j_hosts') j_comment = request.POST.get('j_comment') idc_default = request.POST.getlist('idc_default') for host in j_hosts: g = Asset.objects.get(id=host) Asset.objects.filter(id=host).update(idc=j_idc) for host in idc_default: g = Asset.objects.get(id=host) i = IDC.objects.get(name='默认') Asset.objects.filter(id=host).update(idc=i) return HttpResponseRedirect('/jasset/idc_detail/?id=%s' % idc_id) return render_to_response('jasset/idc_add.html', locals(), context_instance=RequestContext(request)) @require_super_user def del_idc(request, offset): if offset == 'multi': len_list = request.POST.get("len_list") for i in range(int(len_list)): key = "id_list[" + str(i) + "]" gid = request.POST.get(key) IDC.objects.filter(id=gid).delete() else: gid = int(offset) IDC.objects.filter(id=gid).delete() return HttpResponseRedirect('/jasset/idc_list/') @require_admin def add_group(request): header_title, path1, path2 = u'添加主机组', u'资产管理', u'添加主机组' if is_super_user(request): posts = Asset.objects.all() edept = DEPT.objects.all() elif is_group_admin(request): dept_id = get_user_dept(request) dept = DEPT.objects.get(id=dept_id) posts = Asset.objects.filter(dept=dept) edept = DEPT.objects.get(id=dept_id) if request.method == 'POST': j_group = request.POST.get('j_group') j_dept = request.POST.get('j_dept') j_hosts = request.POST.getlist('j_hosts') j_comment = request.POST.get('j_comment') if is_group_admin(request) and not validate(request, asset=j_hosts, edept=[j_dept]): emg = u'添加失败,您无权操作!' return render_to_response('jasset/group_add.html', locals(), context_instance=RequestContext(request)) j_dept = DEPT.objects.get(name=j_dept) if BisGroup.objects.filter(name=j_group): emg = u'该主机组已存在!' return render_to_response('jasset/group_add.html', locals(), context_instance=RequestContext(request)) else: BisGroup.objects.create(name=j_group, dept=j_dept, comment=j_comment) group = BisGroup.objects.get(name=j_group) for host in j_hosts: g = Asset.objects.get(id=host) group.asset_set.add(g) smg = u'主机组%s添加成功' % j_group return render_to_response('jasset/group_add.html', locals(), context_instance=RequestContext(request)) @require_admin def list_group(request): header_title, path1, path2 = u'查看主机组', u'资产管理', u'查看主机组' dept_id = get_user_dept(request) dept = DEPT.objects.get(id=dept_id) keyword = request.GET.get('keyword', '') if is_super_user(request): if keyword: posts = BisGroup.objects.exclude(name='ALL').filter(Q(name__contains=keyword) | Q(comment__contains=keyword)) else: posts = BisGroup.objects.exclude(name='ALL').order_by('id') elif is_group_admin(request): if keyword: posts = BisGroup.objects.filter(Q(name__contains=keyword) | Q(comment__contains=keyword)).filter(dept=dept) else: posts = BisGroup.objects.filter(dept=dept).order_by('id') contact_list, p, contacts, page_range, current_page, show_first, show_end = pages(posts, request) return render_to_response('jasset/group_list.html', locals(), context_instance=RequestContext(request)) @require_admin def edit_group(request): header_title, path1, path2 = u'编辑主机组', u'资产管理', u'编辑主机组' group_id = request.GET.get('id') group = BisGroup.objects.get(id=group_id) all = Asset.objects.all() dept_id = get_user_dept(request) eposts = contact_list = Asset.objects.filter(bis_group=group).order_by('ip') if is_super_user(request): edept = DEPT.objects.all() posts = [g for g in all if g not in eposts] elif is_group_admin(request): dept = DEPT.objects.get(id=dept_id) all_dept = Asset.objects.filter(dept=dept) posts = [g for g in all_dept if g not in eposts] if request.method == 'POST': j_group = request.POST.get('j_group') j_hosts = request.POST.getlist('j_hosts') j_comment = request.POST.get('j_comment') group.asset_set.clear() for host in j_hosts: g = Asset.objects.get(id=host) group.asset_set.add(g) BisGroup.objects.filter(id=group_id).update(name=j_group, comment=j_comment) smg = u'主机组%s修改成功' % j_group return HttpResponseRedirect('/jasset/group_detail/?id=%s' % group_id) return render_to_response('jasset/group_add.html', locals(), context_instance=RequestContext(request)) @require_admin def detail_group(request): header_title, path1, path2 = u'主机组详情', u'资产管理', u'主机组详情' login_types = {'L': 'LDAP', 'S': 'SSH_KEY', 'P': 'PASSWORD', 'M': 'MAP'} dept_id = get_user_dept(request) dept = DEPT.objects.get(id=dept_id) group_id = request.GET.get('id') group_name = BisGroup.objects.get(id=group_id).name b = BisGroup.objects.get(id=group_id) if is_super_user(request): posts = Asset.objects.filter(bis_group=b).order_by('ip') contact_list, p, contacts, page_range, current_page, show_first, show_end = pages(posts, request) elif is_group_admin(request): posts = Asset.objects.filter(bis_group=b).filter(dept=dept).order_by('ip') contact_list, p, contacts, page_range, current_page, show_first, show_end = pages(posts, request) return render_to_response('jasset/group_detail.html', locals(), context_instance=RequestContext(request)) def detail_idc(request): header_title, path1, path2 = u'IDC详情', u'资产管理', u'IDC详情' login_types = {'L': 'LDAP', 'M': 'MAP'} idc_id = request.GET.get('id') idc_name = IDC.objects.get(id=idc_id).name b = IDC.objects.get(id=idc_id) dept_id = get_user_dept(request) dept = DEPT.objects.get(id=dept_id) if is_super_user(request): posts = Asset.objects.filter(idc=b).order_by('ip') elif is_group_admin(request): posts = Asset.objects.filter(idc=b).filter(dept=dept).order_by('ip') contact_list, p, contacts, page_range, current_page, show_first, show_end = pages(posts, request) return render_to_response('jasset/idc_detail.html', locals(), context_instance=RequestContext(request)) @require_admin def group_del_host(request, offset): if request.method == 'POST': group_name = request.POST.get('group_name') if offset == 'group': group = BisGroup.objects.get(name=group_name) elif offset == 'idc': group = IDC.objects.get(name=group_name) len_list = request.POST.get("len_list") for i in range(int(len_list)): key = "id_list[" + str(i) + "]" jid = request.POST.get(key) g = Asset.objects.get(id=jid) if offset == 'group': group.asset_set.remove(g) elif offset == 'idc': Asset.objects.filter(id=jid).delete() BisGroup.objects.filter(name=g.ip).delete() return HttpResponseRedirect('/jasset/%s_detail/?id=%s' % (offset, group.id)) @require_admin def group_del(request, offset): if offset == 'multi': len_list = request.POST.get("len_list") for i in range(int(len_list)): key = "id_list[" + str(i) + "]" gid = request.POST.get(key) BisGroup.objects.filter(id=gid).delete() else: gid = int(offset) BisGroup.objects.filter(id=gid).delete() return HttpResponseRedirect('/jasset/jgroup_list/') def host_search(request): keyword = request.GET.get('keyword') login_types = {'L': 'LDAP', 'M': 'MAP'} dept_id = get_user_dept(request) dept = DEPT.objects.get(id=dept_id) if is_super_user(request): posts = Asset.objects.filter(Q(ip__contains=keyword) | Q(idc__name__contains=keyword) | Q(bis_group__name__contains=keyword) | Q( comment__contains=keyword)).distinct().order_by('ip') elif is_group_admin(request): posts = Asset.objects.filter(Q(ip__contains=keyword) | Q(idc__name__contains=keyword) | Q(bis_group__name__contains=keyword) | Q( comment__contains=keyword)).filter(dept=dept).distinct().order_by('ip') contact_list, p, contacts, page_range, current_page, show_first, show_end = pages(posts, request) return render_to_response('jasset/host_search.html', locals(), context_instance=RequestContext(request))