mirror of https://github.com/jumpserver/jumpserver
149 lines
5.0 KiB
Python
149 lines
5.0 KiB
Python
# -*- coding: utf-8 -*-
|
|
#
|
|
from rest_framework.mixins import ListModelMixin, CreateModelMixin
|
|
from django.db.models import F, Value
|
|
from django.db.models.functions import Concat
|
|
from rest_framework.permissions import IsAuthenticated
|
|
from rest_framework import generics
|
|
|
|
from common.drf.api import JMSReadOnlyModelViewSet
|
|
from common.drf.filters import DatetimeRangeFilter
|
|
from common.api import CommonGenericViewSet
|
|
from orgs.mixins.api import OrgGenericViewSet, OrgBulkModelViewSet, OrgRelationMixin
|
|
from orgs.utils import current_org
|
|
# from ops.models import CommandExecution
|
|
from . import filters
|
|
from .models import FTPLog, UserLoginLog, OperateLog, PasswordChangeLog
|
|
from .serializers import FTPLogSerializer, UserLoginLogSerializer
|
|
from .serializers import OperateLogSerializer, PasswordChangeLogSerializer
|
|
|
|
|
|
class FTPLogViewSet(CreateModelMixin, ListModelMixin, OrgGenericViewSet):
|
|
model = FTPLog
|
|
serializer_class = FTPLogSerializer
|
|
extra_filter_backends = [DatetimeRangeFilter]
|
|
date_range_filter_fields = [
|
|
('date_start', ('date_from', 'date_to'))
|
|
]
|
|
filterset_fields = ['user', 'asset', 'system_user', 'filename']
|
|
search_fields = filterset_fields
|
|
ordering = ['-date_start']
|
|
|
|
|
|
class UserLoginCommonMixin:
|
|
queryset = UserLoginLog.objects.all()
|
|
serializer_class = UserLoginLogSerializer
|
|
extra_filter_backends = [DatetimeRangeFilter]
|
|
date_range_filter_fields = [
|
|
('datetime', ('date_from', 'date_to'))
|
|
]
|
|
filterset_fields = ['username', 'ip', 'city', 'type', 'status', 'mfa']
|
|
search_fields = ['username', 'ip', 'city']
|
|
|
|
|
|
class UserLoginLogViewSet(UserLoginCommonMixin, ListModelMixin, CommonGenericViewSet):
|
|
|
|
@staticmethod
|
|
def get_org_members():
|
|
users = current_org.get_members().values_list('username', flat=True)
|
|
return users
|
|
|
|
def get_queryset(self):
|
|
queryset = super().get_queryset()
|
|
if current_org.is_root():
|
|
return queryset
|
|
users = self.get_org_members()
|
|
queryset = queryset.filter(username__in=users)
|
|
return queryset
|
|
|
|
|
|
class MyLoginLogAPIView(UserLoginCommonMixin, generics.ListAPIView):
|
|
permission_classes = [IsAuthenticated]
|
|
|
|
def get_queryset(self):
|
|
qs = super().get_queryset()
|
|
qs = qs.filter(username=self.request.user.username)
|
|
return qs
|
|
|
|
|
|
class OperateLogViewSet(ListModelMixin, OrgGenericViewSet):
|
|
model = OperateLog
|
|
serializer_class = OperateLogSerializer
|
|
extra_filter_backends = [DatetimeRangeFilter]
|
|
date_range_filter_fields = [
|
|
('datetime', ('date_from', 'date_to'))
|
|
]
|
|
filterset_fields = ['user', 'action', 'resource_type', 'resource', 'remote_addr']
|
|
search_fields = ['resource']
|
|
ordering = ['-datetime']
|
|
|
|
|
|
class PasswordChangeLogViewSet(ListModelMixin, CommonGenericViewSet):
|
|
queryset = PasswordChangeLog.objects.all()
|
|
serializer_class = PasswordChangeLogSerializer
|
|
extra_filter_backends = [DatetimeRangeFilter]
|
|
date_range_filter_fields = [
|
|
('datetime', ('date_from', 'date_to'))
|
|
]
|
|
filterset_fields = ['user', 'change_by', 'remote_addr']
|
|
search_fields = filterset_fields
|
|
ordering = ['-datetime']
|
|
|
|
def get_queryset(self):
|
|
users = current_org.get_members()
|
|
queryset = super().get_queryset().filter(
|
|
user__in=[user.__str__() for user in users]
|
|
)
|
|
return queryset
|
|
|
|
# Todo: 看看怎么搞
|
|
# class CommandExecutionViewSet(ListModelMixin, OrgGenericViewSet):
|
|
# model = CommandExecution
|
|
# serializer_class = CommandExecutionSerializer
|
|
# extra_filter_backends = [DatetimeRangeFilter]
|
|
# date_range_filter_fields = [
|
|
# ('date_start', ('date_from', 'date_to'))
|
|
# ]
|
|
# filterset_fields = [
|
|
# 'user__name', 'user__username', 'command',
|
|
# 'account', 'is_finished'
|
|
# ]
|
|
# search_fields = [
|
|
# 'command', 'user__name', 'user__username',
|
|
# 'account__username',
|
|
# ]
|
|
# ordering = ['-date_created']
|
|
#
|
|
# def get_queryset(self):
|
|
# queryset = super().get_queryset()
|
|
# if getattr(self, 'swagger_fake_view', False):
|
|
# return queryset.model.objects.none()
|
|
# if current_org.is_root():
|
|
# return queryset
|
|
# # queryset = queryset.filter(run_as__org_id=current_org.org_id())
|
|
# return queryset
|
|
#
|
|
#
|
|
# class CommandExecutionHostRelationViewSet(OrgRelationMixin, OrgBulkModelViewSet):
|
|
# serializer_class = CommandExecutionHostsRelationSerializer
|
|
# m2m_field = CommandExecution.hosts.field
|
|
# filterset_fields = [
|
|
# 'id', 'asset', 'commandexecution'
|
|
# ]
|
|
# search_fields = ('asset__name', )
|
|
# http_method_names = ['options', 'get']
|
|
# rbac_perms = {
|
|
# 'GET': 'ops.view_commandexecution',
|
|
# 'list': 'ops.view_commandexecution',
|
|
# }
|
|
#
|
|
# def get_queryset(self):
|
|
# queryset = super().get_queryset()
|
|
# queryset = queryset.annotate(
|
|
# asset_display=Concat(
|
|
# F('asset__name'), Value('('),
|
|
# F('asset__address'), Value(')')
|
|
# )
|
|
# )
|
|
# return queryset
|