mirror of https://github.com/jumpserver/jumpserver
103 lines
3.5 KiB
Python
103 lines
3.5 KiB
Python
from django.db import models
|
|
from django.utils.translation import gettext_lazy as _
|
|
|
|
from accounts.const import SecretStrategy, SSHKeyStrategy, SecretType
|
|
from accounts.models import Account
|
|
from accounts.tasks import execute_account_automation_task
|
|
from assets.models.automations import (
|
|
BaseAutomation as AssetBaseAutomation,
|
|
AutomationExecution as AssetAutomationExecution
|
|
)
|
|
from common.db import fields
|
|
|
|
__all__ = ['AccountBaseAutomation', 'AutomationExecution', 'ChangeSecretMixin']
|
|
|
|
|
|
class AccountBaseAutomation(AssetBaseAutomation):
|
|
class Meta:
|
|
proxy = True
|
|
verbose_name = _("Account automation task")
|
|
|
|
@property
|
|
def execute_task(self):
|
|
return execute_account_automation_task
|
|
|
|
@property
|
|
def execution_model(self):
|
|
return AutomationExecution
|
|
|
|
|
|
class AutomationExecution(AssetAutomationExecution):
|
|
class Meta:
|
|
proxy = True
|
|
verbose_name = _("Automation execution")
|
|
verbose_name_plural = _("Automation executions")
|
|
permissions = [
|
|
('view_changesecretexecution', _('Can view change secret execution')),
|
|
('add_changesecretexection', _('Can add change secret execution')),
|
|
|
|
('view_gatheraccountsexecution', _('Can view gather accounts execution')),
|
|
('add_gatheraccountsexecution', _('Can add gather accounts execution')),
|
|
|
|
('view_pushaccountexecution', _('Can view push account execution')),
|
|
('add_pushaccountexecution', _('Can add push account execution')),
|
|
]
|
|
|
|
def start(self):
|
|
from accounts.automations.endpoint import ExecutionManager
|
|
manager = ExecutionManager(execution=self)
|
|
return manager.run()
|
|
|
|
|
|
class ChangeSecretRuleMixin(models.Model):
|
|
secret_strategy = models.CharField(
|
|
choices=SecretStrategy.choices, max_length=16,
|
|
default=SecretStrategy.custom, verbose_name=_('Secret strategy')
|
|
)
|
|
password_rules = models.JSONField(default=dict, verbose_name=_('Password rules'))
|
|
ssh_key_change_strategy = models.CharField(
|
|
choices=SSHKeyStrategy.choices, max_length=16,
|
|
default=SSHKeyStrategy.add, verbose_name=_('SSH key change strategy')
|
|
)
|
|
|
|
class Meta:
|
|
abstract = True
|
|
|
|
|
|
class ChangeSecretMixin(ChangeSecretRuleMixin):
|
|
secret_type = models.CharField(
|
|
choices=SecretType.choices, max_length=16,
|
|
default=SecretType.PASSWORD, verbose_name=_('Secret type')
|
|
)
|
|
secret = fields.EncryptTextField(blank=True, null=True, verbose_name=_('Secret'))
|
|
get_all_assets: callable # get all assets
|
|
|
|
class Meta:
|
|
abstract = True
|
|
|
|
def create_nonlocal_accounts(self, usernames, asset):
|
|
pass
|
|
|
|
def get_account_ids(self):
|
|
usernames = self.accounts
|
|
accounts = Account.objects.none()
|
|
for asset in self.get_all_assets():
|
|
self.create_nonlocal_accounts(usernames, asset)
|
|
accounts = accounts | asset.accounts.all()
|
|
account_ids = accounts.filter(
|
|
username__in=usernames, secret_type=self.secret_type
|
|
).values_list('id', flat=True)
|
|
return [str(_id) for _id in account_ids]
|
|
|
|
def to_attr_json(self):
|
|
attr_json = super().to_attr_json()
|
|
attr_json.update({
|
|
'secret': self.secret,
|
|
'secret_type': self.secret_type,
|
|
'accounts': self.get_account_ids(),
|
|
'password_rules': self.password_rules,
|
|
'secret_strategy': self.secret_strategy,
|
|
'ssh_key_change_strategy': self.ssh_key_change_strategy,
|
|
})
|
|
return attr_json
|