mirror of https://github.com/jumpserver/jumpserver
667 lines
24 KiB
Python
667 lines
24 KiB
Python
# coding: utf-8
|
||
# Author: Guanghongwei
|
||
# Email: ibuler@qq.com
|
||
|
||
import random
|
||
from Crypto.PublicKey import RSA
|
||
|
||
from django.db.models import Q
|
||
from django.template import RequestContext
|
||
from django.db.models import ObjectDoesNotExist
|
||
|
||
from juser.user_api import *
|
||
|
||
|
||
def chg_role(request):
|
||
role = {'SU': 2, 'DA': 1, 'CU': 0}
|
||
user, dept = get_session_user_dept(request)
|
||
if request.session['role_id'] > 0:
|
||
request.session['role_id'] = 0
|
||
elif request.session['role_id'] == 0:
|
||
request.session['role_id'] = role.get(user.role, 0)
|
||
return HttpResponseRedirect('/')
|
||
|
||
|
||
@require_role(role='super')
|
||
def group_add(request):
|
||
"""
|
||
group add view for route
|
||
添加用户组的视图
|
||
"""
|
||
error = ''
|
||
msg = ''
|
||
header_title, path1, path2 = '添加用户组', '用户管理', '添加用户组'
|
||
user_all = User.objects.all()
|
||
|
||
if request.method == 'POST':
|
||
group_name = request.POST.get('group_name', '')
|
||
users_selected = request.POST.getlist('users_selected', '')
|
||
comment = request.POST.get('comment', '')
|
||
|
||
try:
|
||
if not group_name:
|
||
error = u'组名 不能为空'
|
||
raise ServerError(error)
|
||
|
||
if UserGroup.objects.filter(name=group_name):
|
||
error = u'组名已存在'
|
||
raise ServerError(error)
|
||
db_add_group(name=group_name, users_id=users_selected, comment=comment)
|
||
except ServerError:
|
||
pass
|
||
except TypeError:
|
||
error = u'添加小组失败'
|
||
else:
|
||
msg = u'添加组 %s 成功' % group_name
|
||
|
||
return render_to_response('juser/group_add.html', locals(), context_instance=RequestContext(request))
|
||
|
||
|
||
@require_role(role='super')
|
||
def group_list(request):
|
||
"""
|
||
list user group
|
||
用户组列表
|
||
"""
|
||
header_title, path1, path2 = '查看用户组', '用户管理', '查看用户组'
|
||
keyword = request.GET.get('search', '')
|
||
user_group_list = UserGroup.objects.all().order_by('name')
|
||
|
||
if keyword:
|
||
user_group_list = user_group_list.filter(Q(name__icontains=keyword) | Q(comment__icontains=keyword))
|
||
|
||
contacts, p, contacts, page_range, current_page, show_first, show_end = pages(user_group_list, request)
|
||
return render_to_response('juser/group_list.html', locals(), context_instance=RequestContext(request))
|
||
|
||
|
||
@require_role(role='super')
|
||
def group_del(request):
|
||
"""
|
||
del a group
|
||
删除用户组
|
||
"""
|
||
group_id = request.GET.get('id', '')
|
||
if not group_id:
|
||
return HttpResponseRedirect('/')
|
||
UserGroup.objects.filter(id=group_id).delete()
|
||
return HttpResponseRedirect('/juser/group_list/')
|
||
|
||
|
||
@require_role(role='super')
|
||
def group_del_ajax(request):
|
||
group_ids = request.POST.get('group_ids')
|
||
group_ids = group_ids.split(',')
|
||
for group_id in group_ids:
|
||
UserGroup.objects.filter(id=group_id).delete()
|
||
return HttpResponse('删除成功')
|
||
|
||
# @require_role(role='admin')
|
||
# def group_list_adm(request):
|
||
# header_title, path1, path2 = '查看部门小组', '用户管理', '查看小组'
|
||
# keyword = request.GET.get('search', '')
|
||
# did = request.GET.get('did', '')
|
||
# user, dept = get_session_user_dept(request)
|
||
# contact_list = dept.usergroup_set.all().order_by('name')
|
||
#
|
||
# if keyword:
|
||
# contact_list = contact_list.filter(Q(name__icontains=keyword) | Q(comment__icontains=keyword))
|
||
#
|
||
# contact_list, p, contacts, page_range, current_page, show_first, show_end = pages(contact_list, request)
|
||
# return render_to_response('juser/group_list.html', locals(), context_instance=RequestContext(request))
|
||
|
||
#
|
||
# @require_role(role='admin')
|
||
# def group_detail(request):
|
||
# group_id = request.GET.get('id', None)
|
||
# if not group_id:
|
||
# return HttpResponseRedirect('/')
|
||
# group = UserGroup.objects.get(id=group_id)
|
||
# users = group.user_set.all()
|
||
# return render_to_response('juser/group_detail.html', locals(), context_instance=RequestContext(request))
|
||
|
||
|
||
@require_role(role='super')
|
||
def group_edit(request):
|
||
error = ''
|
||
msg = ''
|
||
header_title, path1, path2 = '编辑用户组', '用户管理', '编辑用户组'
|
||
|
||
if request.method == 'GET':
|
||
group_id = request.GET.get('id', '')
|
||
user_group = get_object(UserGroup, id=group_id)
|
||
if user_group:
|
||
users_all = User.objects.all()
|
||
users_selected = user_group.user_set.all()
|
||
users_remain = [user for user in users_all if user not in users_selected]
|
||
|
||
else:
|
||
group_id = request.POST.get('group_id', '')
|
||
group_name = request.POST.get('group_name', '')
|
||
comment = request.POST.get('comment', '')
|
||
users_selected = request.POST.getlist('users_selected')
|
||
|
||
users = []
|
||
try:
|
||
if '' in [group_id, group_name]:
|
||
raise ServerError('组名不能为空')
|
||
|
||
user_group = get_object(UserGroup, id=group_id)
|
||
other_group = get_object(UserGroup, name=group_name)
|
||
|
||
if other_group and other_group.id != int(group_id):
|
||
raise ServerError(u'%s 用户组已存在' % group_name)
|
||
|
||
for user_id in users_selected:
|
||
users.extend(User.objects.filter(id=user_id))
|
||
|
||
if user_group:
|
||
user_group.update(name=group_name, comment=comment)
|
||
user_group.user_set.clear()
|
||
user_group.user_set = users
|
||
|
||
except ServerError, e:
|
||
error = e
|
||
if not error:
|
||
return HttpResponseRedirect('/juser/group_list/')
|
||
else:
|
||
users_all = User.objects.all()
|
||
users_selected = user_group.user_set.all()
|
||
users_remain = [user for user in users_all if user not in users_selected]
|
||
|
||
return render_to_response('juser/group_edit.html', locals(), context_instance=RequestContext(request))
|
||
|
||
|
||
# @require_role(role='admin')
|
||
# def group_edit_adm(request):
|
||
# error = ''
|
||
# msg = ''
|
||
# header_title, path1, path2 = '修改小组信息', '用户管理', '编辑小组'
|
||
# user, dept = get_session_user_dept(request)
|
||
# if request.method == 'GET':
|
||
# group_id = request.GET.get('id', '')
|
||
# if not validate(request, user_group=[group_id]):
|
||
# return HttpResponseRedirect('/juser/group_list/')
|
||
# group = UserGroup.objects.filter(id=group_id)
|
||
# if group:
|
||
# group = group[0]
|
||
# users_all = dept.user_set.all()
|
||
# users_selected = group.user_set.all()
|
||
# users = [user for user in users_all if user not in users_selected]
|
||
#
|
||
# return render_to_response('juser/group_edit.html', locals(), context_instance=RequestContext(request))
|
||
# else:
|
||
# group_id = request.POST.get('group_id', '')
|
||
# group_name = request.POST.get('group_name', '')
|
||
# comment = request.POST.get('comment', '')
|
||
# users_selected = request.POST.getlist('users_selected')
|
||
#
|
||
# users = []
|
||
# try:
|
||
# if not validate(request, user=users_selected):
|
||
# raise ServerError(u'右侧非部门用户')
|
||
#
|
||
# if not validate(request, user_group=[group_id]):
|
||
# raise ServerError(u'没有权限修改本组')
|
||
#
|
||
# for user_id in users_selected:
|
||
# users.extend(User.objects.filter(id=user_id))
|
||
#
|
||
# user_group = UserGroup.objects.filter(id=group_id)
|
||
# if user_group:
|
||
# user_group.update(name=group_name, comment=comment, dept=dept)
|
||
# user_group = user_group[0]
|
||
# user_group.user_set.clear()
|
||
# user_group.user_set = users
|
||
#
|
||
# except ServerError, e:
|
||
# error = e
|
||
#
|
||
# return HttpResponseRedirect('/juser/group_list/')
|
||
|
||
|
||
@require_role(role='super')
|
||
def user_add(request):
|
||
error = ''
|
||
msg = ''
|
||
header_title, path1, path2 = '添加用户', '用户管理', '添加用户'
|
||
user_role = {'SU': u'超级管理员', 'GA': u'组管理员', 'CU': u'普通用户'}
|
||
group_all = UserGroup.objects.all()
|
||
|
||
if request.method == 'POST':
|
||
username = request.POST.get('username', '')
|
||
password = PyCrypt.random_pass(16)
|
||
name = request.POST.get('name', '')
|
||
email = request.POST.get('email', '')
|
||
dept_id = request.POST.get('dept_id')
|
||
groups = request.POST.getlist('groups', [])
|
||
admin_groups = request.POST.getlist('admin_groups', [])
|
||
role = request.POST.get('role', 'CU')
|
||
ssh_key_pwd = PyCrypt.random_pass(16)
|
||
is_active = True if request.POST.get('is_active', '1') == '1' else False
|
||
ldap_pwd = PyCrypt.random_pass(32, especial=True)
|
||
|
||
try:
|
||
if '' in [username, password, ssh_key_pwd, name, groups, role, is_active]:
|
||
error = u'带*内容不能为空'
|
||
raise ServerError
|
||
user_test = get_object(User, username=username)
|
||
if user_test:
|
||
error = u'用户 %s 已存在' % username
|
||
raise ServerError
|
||
|
||
except ServerError:
|
||
pass
|
||
else:
|
||
try:
|
||
user = db_add_user(username=username,
|
||
password=CRYPTOR.md5_crypt(password),
|
||
name=name, email=email, role=role,
|
||
groups=groups, admin_groups=admin_groups,
|
||
ssh_key_pwd=CRYPTOR.md5_crypt(ssh_key_pwd),
|
||
ldap_pwd=CRYPTOR.encrypt(ldap_pwd),
|
||
is_active=is_active,
|
||
date_joined=datetime.datetime.now())
|
||
|
||
server_add_user(username, password, ssh_key_pwd)
|
||
if LDAP_ENABLE:
|
||
ldap_add_user(username, ldap_pwd)
|
||
|
||
except Exception, e:
|
||
error = u'添加用户 %s 失败 %s ' % (username, e)
|
||
try:
|
||
db_del_user(username)
|
||
server_del_user(username)
|
||
if LDAP_ENABLE:
|
||
ldap_del_user(username)
|
||
except Exception:
|
||
pass
|
||
else:
|
||
if MAIL_ENABLE:
|
||
user_add_mail(user, kwargs=locals())
|
||
msg = u'添加用户 %s 成功！ 用户密码已发送到 %s 邮箱！' % (username, email)
|
||
return render_to_response('juser/user_add.html', locals(), context_instance=RequestContext(request))
|
||
|
||
|
||
@require_role(role='admin')
|
||
def user_add_adm(request):
|
||
error = ''
|
||
msg = ''
|
||
header_title, path1, path2 = '添加用户', '用户管理', '添加用户'
|
||
user, dept = get_session_user_dept(request)
|
||
group_all = dept.usergroup_set.all()
|
||
|
||
if request.method == 'POST':
|
||
username = request.POST.get('username', '')
|
||
password = PyCrypt.gen_rand_pwd(16)
|
||
name = request.POST.get('name', '')
|
||
email = request.POST.get('email', '')
|
||
groups = request.POST.getlist('groups', [])
|
||
ssh_key_pwd = PyCrypt.gen_rand_pwd(16)
|
||
is_active = True if request.POST.get('is_active', '1') == '1' else False
|
||
ldap_pwd = PyCrypt.gen_rand_pwd(16)
|
||
|
||
try:
|
||
if '' in [username, password, ssh_key_pwd, name, groups, is_active]:
|
||
error = u'带*内容不能为空'
|
||
raise ServerError
|
||
user = User.objects.filter(username=username)
|
||
if user:
|
||
error = u'用户 %s 已存在' % username
|
||
raise ServerError
|
||
|
||
except ServerError:
|
||
pass
|
||
else:
|
||
try:
|
||
user = db_add_user(username=username,
|
||
password=CRYPTOR.md5_crypt(password),
|
||
name=name, email=email, dept=dept,
|
||
groups=groups, role='CU',
|
||
ssh_key_pwd=CRYPTOR.md5_crypt(ssh_key_pwd),
|
||
ldap_pwd=CRYPTOR.encrypt(ldap_pwd),
|
||
is_active=is_active,
|
||
date_joined=datetime.datetime.now())
|
||
|
||
server_add_user(username, password, ssh_key_pwd)
|
||
if LDAP_ENABLE:
|
||
ldap_add_user(username, ldap_pwd)
|
||
|
||
except Exception, e:
|
||
error = u'添加用户 %s 失败 %s ' % (username, e)
|
||
try:
|
||
db_del_user(username)
|
||
server_del_user(username)
|
||
if LDAP_ENABLE:
|
||
ldap_del_user(username)
|
||
except Exception:
|
||
pass
|
||
else:
|
||
mail_title = u'恭喜你的跳板机用户添加成功 Jumpserver'
|
||
mail_msg = """
|
||
Hi, %s
|
||
您的用户名： %s
|
||
您的部门: %s
|
||
您的角色： %s
|
||
您的web登录密码： %s
|
||
您的ssh密钥文件密码： %s
|
||
密钥下载地址： http://%s:%s/juser/down_key/?id=%s
|
||
说明： 请登陆后再下载密钥！
|
||
""" % (name, username, dept.name, '普通用户',
|
||
password, ssh_key_pwd, SEND_IP, SEND_PORT, user.id)
|
||
send_mail(mail_title, mail_msg, MAIL_FROM, [email], fail_silently=False)
|
||
msg = u'添加用户 %s 成功！ 用户密码已发送到 %s 邮箱！' % (username, email)
|
||
|
||
return render_to_response('juser/user_add.html', locals(), context_instance=RequestContext(request))
|
||
|
||
|
||
@require_role(role='super')
|
||
def user_list(request):
|
||
user_role = {'SU': u'超级管理员', 'GA': u'组管理员', 'CU': u'普通用户'}
|
||
header_title, path1, path2 = '查看用户', '用户管理', '用户列表'
|
||
keyword = request.GET.get('keyword', '')
|
||
gid = request.GET.get('gid', '')
|
||
did = request.GET.get('did', '')
|
||
contact_list = User.objects.all().order_by('name')
|
||
|
||
if gid:
|
||
user_group = UserGroup.objects.filter(id=gid)
|
||
if user_group:
|
||
user_group = user_group[0]
|
||
contact_list = user_group.user_set.all()
|
||
|
||
if did:
|
||
dept = DEPT.objects.filter(id=did)
|
||
if dept:
|
||
dept = dept[0]
|
||
contact_list = dept.user_set.all().order_by('name')
|
||
|
||
if keyword:
|
||
contact_list = contact_list.filter(Q(username__icontains=keyword) | Q(name__icontains=keyword)).order_by('name')
|
||
|
||
contact_list, p, contacts, page_range, current_page, show_first, show_end = pages(contact_list, request)
|
||
|
||
return render_to_response('juser/user_list.html', locals(), context_instance=RequestContext(request))
|
||
|
||
|
||
@require_role(role='admin')
|
||
def user_list_adm(request):
|
||
user_role = {'SU': u'超级管理员', 'GA': u'组管理员', 'CU': u'普通用户'}
|
||
header_title, path1, path2 = '查看用户', '用户管理', '用户列表'
|
||
keyword = request.GET.get('keyword', '')
|
||
user, dept = get_session_user_dept(request)
|
||
gid = request.GET.get('gid', '')
|
||
contact_list = dept.user_set.all().order_by('name')
|
||
|
||
if gid:
|
||
if not validate(request, user_group=[gid]):
|
||
return HttpResponseRedirect('/juser/user_list/')
|
||
user_group = UserGroup.objects.filter(id=gid)
|
||
if user_group:
|
||
user_group = user_group[0]
|
||
contact_list = user_group.user_set.all()
|
||
|
||
if keyword:
|
||
contact_list = contact_list.filter(Q(username__icontains=keyword) | Q(name__icontains=keyword)).order_by('name')
|
||
|
||
contact_list, p, contacts, page_range, current_page, show_first, show_end = pages(contact_list, request)
|
||
|
||
return render_to_response('juser/user_list.html', locals(), context_instance=RequestContext(request))
|
||
|
||
|
||
@require_role(role='user')
|
||
def user_detail(request):
|
||
header_title, path1, path2 = '查看用户', '用户管理', '用户详情'
|
||
if request.session.get('role_id') == 0:
|
||
user_id = request.session.get('user_id')
|
||
else:
|
||
user_id = request.GET.get('id', '')
|
||
if request.session.get('role_id') == 1:
|
||
user, dept = get_session_user_dept(request)
|
||
if not validate(request, user=[user_id]):
|
||
return HttpResponseRedirect('/')
|
||
if not user_id:
|
||
return HttpResponseRedirect('/juser/user_list/')
|
||
|
||
user = User.objects.filter(id=user_id)
|
||
if user:
|
||
user = user[0]
|
||
asset_group_permed = user.get_asset_group()
|
||
logs_last = Log.objects.filter(user=user.name).order_by('-start_time')[0:10]
|
||
logs_all = Log.objects.filter(user=user.name).order_by('-start_time')
|
||
logs_num = len(logs_all)
|
||
|
||
return render_to_response('juser/user_detail.html', locals(), context_instance=RequestContext(request))
|
||
|
||
|
||
@require_role(role='admin')
|
||
def user_del(request):
|
||
user_id = request.GET.get('id', '')
|
||
if not user_id:
|
||
return HttpResponseRedirect('/juser/user_list/')
|
||
|
||
if request.session.get('role_id', '') == '1':
|
||
if not validate(request, user=[user_id]):
|
||
return HttpResponseRedirect('/juser/user_list/')
|
||
|
||
user = User.objects.filter(id=user_id)
|
||
if user and user[0].username != 'admin':
|
||
user = user[0]
|
||
user.delete()
|
||
server_del_user(user.username)
|
||
if LDAP_ENABLE:
|
||
ldap_del_user(user.username)
|
||
return HttpResponseRedirect('/juser/user_list/')
|
||
|
||
|
||
@require_role(role='admin')
|
||
def user_del_ajax(request):
|
||
user_ids = request.POST.get('ids')
|
||
user_ids = user_ids.split(',')
|
||
if request.session.get('role_id', '') == 1:
|
||
if not validate(request, user=user_ids):
|
||
return "error"
|
||
for user_id in user_ids:
|
||
user = User.objects.filter(id=user_id)
|
||
if user and user[0].username != 'admin':
|
||
user = user[0]
|
||
user.delete()
|
||
server_del_user(user.username)
|
||
if LDAP_ENABLE:
|
||
ldap_del_user(user.username)
|
||
|
||
return HttpResponse('删除成功')
|
||
|
||
|
||
@require_role(role='super')
|
||
def user_edit(request):
|
||
header_title, path1, path2 = '编辑用户', '用户管理', '用户编辑'
|
||
if request.method == 'GET':
|
||
user_id = request.GET.get('id', '')
|
||
if not user_id:
|
||
return HttpResponseRedirect('/')
|
||
|
||
user_role = {'SU': u'超级管理员', 'DA': u'部门管理员', 'CU': u'普通用户'}
|
||
user = User.objects.filter(id=user_id)
|
||
dept_all = DEPT.objects.all()
|
||
group_all = UserGroup.objects.all()
|
||
if user:
|
||
user = user[0]
|
||
groups_str = ' '.join([str(group.id) for group in user.group.all()])
|
||
|
||
else:
|
||
user_id = request.POST.get('user_id', '')
|
||
password = request.POST.get('password', '')
|
||
name = request.POST.get('name', '')
|
||
email = request.POST.get('email', '')
|
||
dept_id = request.POST.get('dept_id')
|
||
groups = request.POST.getlist('groups', [])
|
||
role_post = request.POST.get('role', 'CU')
|
||
ssh_key_pwd = request.POST.get('ssh_key_pwd', '')
|
||
is_active = True if request.POST.get('is_active', '1') == '1' else False
|
||
|
||
user_role = {'SU': u'超级管理员', 'DA': u'部门管理员', 'CU': u'普通用户'}
|
||
dept = DEPT.objects.filter(id=dept_id)
|
||
if dept:
|
||
dept = dept[0]
|
||
else:
|
||
dept = DEPT.objects.get(id='2')
|
||
|
||
if user_id:
|
||
user = User.objects.filter(id=user_id)
|
||
if user:
|
||
user = user[0]
|
||
else:
|
||
return HttpResponseRedirect('/juser/user_list/')
|
||
|
||
if password != user.password:
|
||
password = CRYPTOR.md5_crypt(password)
|
||
|
||
if ssh_key_pwd != user.ssh_key_pwd:
|
||
gen_ssh_key(user.username, ssh_key_pwd)
|
||
ssh_key_pwd = CRYPTOR.encrypt(ssh_key_pwd)
|
||
|
||
db_update_user(user_id=user_id,
|
||
password=password,
|
||
name=name,
|
||
email=email,
|
||
groups=groups,
|
||
dept=dept,
|
||
role=role_post,
|
||
is_active=is_active,
|
||
ssh_key_pwd=ssh_key_pwd)
|
||
|
||
return HttpResponseRedirect('/juser/user_list/')
|
||
|
||
return render_to_response('juser/user_edit.html', locals(), context_instance=RequestContext(request))
|
||
|
||
|
||
@require_role(role='admin')
|
||
def user_edit_adm(request):
|
||
header_title, path1, path2 = '编辑用户', '用户管理', '用户编辑'
|
||
user, dept = get_session_user_dept(request)
|
||
if request.method == 'GET':
|
||
user_id = request.GET.get('id', '')
|
||
if not user_id:
|
||
return HttpResponseRedirect('/juser/user_list/')
|
||
|
||
if not validate(request, user=[user_id]):
|
||
return HttpResponseRedirect('/juser/user_list/')
|
||
|
||
user = User.objects.filter(id=user_id)
|
||
dept_all = DEPT.objects.all()
|
||
group_all = dept.usergroup_set.all()
|
||
if user:
|
||
user = user[0]
|
||
groups_str = ' '.join([str(group.id) for group in user.group.all()])
|
||
|
||
else:
|
||
user_id = request.POST.get('user_id', '')
|
||
password = request.POST.get('password', '')
|
||
name = request.POST.get('name', '')
|
||
email = request.POST.get('email', '')
|
||
groups = request.POST.getlist('groups', [])
|
||
ssh_key_pwd = request.POST.get('ssh_key_pwd', '')
|
||
is_active = True if request.POST.get('is_active', '1') == '1' else False
|
||
|
||
if not validate(request, user=[user_id], user_group=groups):
|
||
return HttpResponseRedirect('/juser/user_edit/')
|
||
if user_id:
|
||
user = User.objects.filter(id=user_id)
|
||
if user:
|
||
user = user[0]
|
||
else:
|
||
return HttpResponseRedirect('/juser/user_list/')
|
||
|
||
if password != user.password:
|
||
password = CRYPTOR.md5_crypt(password)
|
||
|
||
if ssh_key_pwd != user.ssh_key_pwd:
|
||
ssh_key_pwd = CRYPTOR.encrypt(ssh_key_pwd)
|
||
|
||
db_update_user(user_id=user_id,
|
||
password=password,
|
||
name=name,
|
||
email=email,
|
||
groups=groups,
|
||
is_active=is_active,
|
||
ssh_key_pwd=ssh_key_pwd)
|
||
|
||
return HttpResponseRedirect('/juser/user_list/')
|
||
|
||
return render_to_response('juser/user_edit.html', locals(), context_instance=RequestContext(request))
|
||
|
||
|
||
def profile(request):
|
||
user_id = request.session.get('user_id')
|
||
if not user_id:
|
||
return HttpResponseRedirect('/')
|
||
user = User.objects.get(id=user_id)
|
||
return render_to_response('juser/profile.html', locals(), context_instance=RequestContext(request))
|
||
|
||
|
||
def chg_info(request):
|
||
header_title, path1, path2 = '修改信息', '用户管理', '修改个人信息'
|
||
user_id = request.session.get('user_id')
|
||
user_set = User.objects.filter(id=user_id)
|
||
error = ''
|
||
if user_set:
|
||
user = user_set[0]
|
||
else:
|
||
return HttpResponseRedirect('/')
|
||
|
||
if request.method == 'POST':
|
||
name = request.POST.get('name', '')
|
||
password = request.POST.get('password', '')
|
||
ssh_key_pwd = request.POST.get('ssh_key_pwd', '')
|
||
email = request.POST.get('email', '')
|
||
|
||
if '' in [name, password, ssh_key_pwd, email]:
|
||
error = '不能为空'
|
||
|
||
if len(password) < 6 or len(ssh_key_pwd) < 6:
|
||
error = '密码须大于6位'
|
||
|
||
if not error:
|
||
if password != user.password:
|
||
password = CRYPTOR.md5_crypt(password)
|
||
|
||
if ssh_key_pwd != user.ssh_key_pwd:
|
||
gen_ssh_key(user.username, ssh_key_pwd)
|
||
ssh_key_pwd = CRYPTOR.md5_crypt(ssh_key_pwd)
|
||
|
||
user_set.update(name=name, password=password, ssh_key_pwd=ssh_key_pwd, email=email)
|
||
msg = '修改成功'
|
||
|
||
return render_to_response('juser/chg_info.html', locals(), context_instance=RequestContext(request))
|
||
|
||
|
||
@require_role(role='user')
|
||
def down_key(request):
|
||
user_id = ''
|
||
if is_role_request(request, 'super'):
|
||
user_id = request.GET.get('id')
|
||
|
||
if is_role_request(request, 'admin'):
|
||
user_id = request.GET.get('id')
|
||
if not validate(request, user=[user_id]):
|
||
user_id = request.session.get('user_id')
|
||
|
||
if is_role_request(request, 'user'):
|
||
user_id = request.session.get('user_id')
|
||
|
||
if user_id:
|
||
user = User.objects.filter(id=user_id)
|
||
if user:
|
||
user = user[0]
|
||
username = user.username
|
||
private_key_dir = os.path.join(BASE_DIR, 'keys/jumpserver/')
|
||
private_key_file = os.path.join(private_key_dir, username+".pem")
|
||
if os.path.isfile(private_key_file):
|
||
f = open(private_key_file)
|
||
data = f.read()
|
||
f.close()
|
||
response = HttpResponse(data, content_type='application/octet-stream')
|
||
response['Content-Disposition'] = 'attachment; filename=%s' % os.path.basename(private_key_file)
|
||
return response
|
||
|
||
return HttpResponse('No Key File. Contact Admin.') |