mirror of https://github.com/jumpserver/jumpserver
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
133 lines
4.4 KiB
133 lines
4.4 KiB
# -*- coding: utf-8 -*-
|
|
#
|
|
|
|
import random
|
|
import time
|
|
|
|
from rest_framework import generics, permissions
|
|
from rest_framework.response import Response
|
|
from rest_framework_bulk import BulkModelViewSet
|
|
from rest_framework_bulk import ListBulkCreateUpdateDestroyAPIView
|
|
from rest_framework.pagination import LimitOffsetPagination
|
|
from django.shortcuts import get_object_or_404
|
|
from django.db.models import Q
|
|
|
|
from common.mixins import IDInFilterMixin
|
|
from common.utils import get_logger
|
|
from common.permissions import IsOrgAdmin, IsAppUser, IsOrgAdminOrAppUser
|
|
from ..models import Asset, SystemUser, AdminUser, Node
|
|
from .. import serializers
|
|
from ..tasks import update_asset_hardware_info_manual, \
|
|
test_asset_connectability_manual
|
|
from ..utils import LabelFilter
|
|
|
|
|
|
logger = get_logger(__file__)
|
|
__all__ = [
|
|
'AssetViewSet', 'AssetListUpdateApi',
|
|
'AssetRefreshHardwareApi', 'AssetAdminUserTestApi',
|
|
'AssetGatewayApi'
|
|
]
|
|
|
|
|
|
class AssetViewSet(IDInFilterMixin, LabelFilter, BulkModelViewSet):
|
|
"""
|
|
API endpoint that allows Asset to be viewed or edited.
|
|
"""
|
|
filter_fields = ("hostname", "ip")
|
|
search_fields = filter_fields
|
|
ordering_fields = ("hostname", "ip", "port", "cpu_cores")
|
|
queryset = Asset.objects.all()
|
|
serializer_class = serializers.AssetSerializer
|
|
pagination_class = LimitOffsetPagination
|
|
permission_classes = (permissions.AllowAny,)
|
|
|
|
def filter_node(self):
|
|
node_id = self.request.query_params.get("node_id")
|
|
if not node_id:
|
|
return
|
|
|
|
node = get_object_or_404(Node, id=node_id)
|
|
show_current_asset = self.request.query_params.get("show_current_asset")
|
|
|
|
if node.is_root():
|
|
if show_current_asset:
|
|
self.queryset = self.queryset.filter(
|
|
Q(nodes=node_id) | Q(nodes__isnull=True)
|
|
).distinct()
|
|
return
|
|
if show_current_asset:
|
|
self.queryset = self.queryset.filter(nodes=node).distinct()
|
|
else:
|
|
self.queryset = self.queryset.filter(
|
|
nodes__key__regex='^{}(:[0-9]+)*$'.format(node.key),
|
|
).distinct()
|
|
|
|
def filter_admin_user_id(self):
|
|
admin_user_id = self.request.query_params.get('admin_user_id')
|
|
if admin_user_id:
|
|
admin_user = get_object_or_404(AdminUser, id=admin_user_id)
|
|
self.queryset = self.queryset.filter(admin_user=admin_user)
|
|
|
|
def get_queryset(self):
|
|
self.queryset = super().get_queryset()\
|
|
.prefetch_related('labels', 'nodes')\
|
|
.select_related('admin_user')
|
|
self.filter_admin_user_id()
|
|
self.filter_node()
|
|
return self.queryset
|
|
|
|
|
|
class AssetListUpdateApi(IDInFilterMixin, ListBulkCreateUpdateDestroyAPIView):
|
|
"""
|
|
Asset bulk update api
|
|
"""
|
|
queryset = Asset.objects.all()
|
|
serializer_class = serializers.AssetSerializer
|
|
permission_classes = (IsOrgAdmin,)
|
|
|
|
|
|
class AssetRefreshHardwareApi(generics.RetrieveAPIView):
|
|
"""
|
|
Refresh asset hardware info
|
|
"""
|
|
queryset = Asset.objects.all()
|
|
serializer_class = serializers.AssetSerializer
|
|
permission_classes = (IsOrgAdmin,)
|
|
|
|
def retrieve(self, request, *args, **kwargs):
|
|
asset_id = kwargs.get('pk')
|
|
asset = get_object_or_404(Asset, pk=asset_id)
|
|
task = update_asset_hardware_info_manual.delay(asset)
|
|
return Response({"task": task.id})
|
|
|
|
|
|
class AssetAdminUserTestApi(generics.RetrieveAPIView):
|
|
"""
|
|
Test asset admin user connectivity
|
|
"""
|
|
queryset = Asset.objects.all()
|
|
permission_classes = (IsOrgAdmin,)
|
|
|
|
def retrieve(self, request, *args, **kwargs):
|
|
asset_id = kwargs.get('pk')
|
|
asset = get_object_or_404(Asset, pk=asset_id)
|
|
task = test_asset_connectability_manual.delay(asset)
|
|
return Response({"task": task.id})
|
|
|
|
|
|
class AssetGatewayApi(generics.RetrieveAPIView):
|
|
queryset = Asset.objects.all()
|
|
permission_classes = (IsOrgAdminOrAppUser,)
|
|
|
|
def retrieve(self, request, *args, **kwargs):
|
|
asset_id = kwargs.get('pk')
|
|
asset = get_object_or_404(Asset, pk=asset_id)
|
|
|
|
if asset.domain and \
|
|
asset.domain.gateways.filter(protocol=asset.protocol).exists():
|
|
gateway = random.choice(asset.domain.gateways.filter(protocol=asset.protocol))
|
|
serializer = serializers.GatewayWithAuthSerializer(instance=gateway)
|
|
return Response(serializer.data)
|
|
else:
|
|
return Response({"msg": "Not have gateway"}, status=404) |