mirror of https://github.com/jumpserver/jumpserver
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
129 lines
4.3 KiB
129 lines
4.3 KiB
# -*- coding: utf-8 -*-
|
|
#
|
|
from rest_framework import generics
|
|
from django.db.models import F
|
|
from django.shortcuts import get_object_or_404
|
|
|
|
from orgs.mixins.api import OrgRelationMixin
|
|
from orgs.mixins.api import OrgBulkModelViewSet
|
|
from orgs.utils import current_org
|
|
from perms import serializers
|
|
from perms import models
|
|
from perms.utils.user_permission import UserGrantedAssetsQueryUtils
|
|
from assets.serializers import AccountSerializer
|
|
|
|
__all__ = [
|
|
'AssetPermissionUserRelationViewSet', 'AssetPermissionUserGroupRelationViewSet',
|
|
'AssetPermissionAssetRelationViewSet', 'AssetPermissionNodeRelationViewSet',
|
|
'AssetPermissionAllAssetListApi', 'AssetPermissionAllUserListApi',
|
|
'AssetPermissionAccountListApi',
|
|
]
|
|
|
|
|
|
class RelationMixin(OrgRelationMixin, OrgBulkModelViewSet):
|
|
perm_model = models.AssetPermission
|
|
|
|
def get_queryset(self):
|
|
queryset = super().get_queryset()
|
|
org_id = current_org.org_id()
|
|
if org_id is not None:
|
|
queryset = queryset.filter(assetpermission__org_id=org_id)
|
|
queryset = queryset.annotate(assetpermission_display=F('assetpermission__name'))
|
|
return queryset
|
|
|
|
|
|
class AssetPermissionUserRelationViewSet(RelationMixin):
|
|
serializer_class = serializers.AssetPermissionUserRelationSerializer
|
|
m2m_field = models.AssetPermission.users.field
|
|
filterset_fields = [
|
|
'id', "user", "assetpermission",
|
|
]
|
|
search_fields = ("user__name", "user__username", "assetpermission__name")
|
|
|
|
def get_queryset(self):
|
|
queryset = super().get_queryset()
|
|
queryset = queryset.annotate(user_display=F('user__name'))
|
|
return queryset
|
|
|
|
|
|
class AssetPermissionAllUserListApi(generics.ListAPIView):
|
|
serializer_class = serializers.AssetPermissionAllUserSerializer
|
|
filterset_fields = ("username", "name")
|
|
search_fields = filterset_fields
|
|
|
|
def get_queryset(self):
|
|
pk = self.kwargs.get("pk")
|
|
perm = get_object_or_404(models.AssetPermission, pk=pk)
|
|
users = perm.get_all_users().only(
|
|
*self.serializer_class.Meta.only_fields
|
|
)
|
|
return users
|
|
|
|
|
|
class AssetPermissionUserGroupRelationViewSet(RelationMixin):
|
|
serializer_class = serializers.AssetPermissionUserGroupRelationSerializer
|
|
m2m_field = models.AssetPermission.user_groups.field
|
|
filterset_fields = [
|
|
'id', "usergroup", "assetpermission"
|
|
]
|
|
search_fields = ["usergroup__name", "assetpermission__name"]
|
|
|
|
def get_queryset(self):
|
|
queryset = super().get_queryset()
|
|
queryset = queryset.annotate(usergroup_display=F('usergroup__name'))
|
|
return queryset
|
|
|
|
|
|
class AssetPermissionAssetRelationViewSet(RelationMixin):
|
|
serializer_class = serializers.AssetPermissionAssetRelationSerializer
|
|
m2m_field = models.AssetPermission.assets.field
|
|
filterset_fields = [
|
|
'id', 'asset', 'assetpermission',
|
|
]
|
|
search_fields = ["id", "asset__name", "asset__address", "assetpermission__name"]
|
|
|
|
def get_queryset(self):
|
|
queryset = super().get_queryset()
|
|
queryset = queryset.annotate(asset_display=F('asset__name'))
|
|
return queryset
|
|
|
|
|
|
class AssetPermissionAllAssetListApi(generics.ListAPIView):
|
|
serializer_class = serializers.AssetPermissionAllAssetSerializer
|
|
filterset_fields = ("name", "address")
|
|
search_fields = filterset_fields
|
|
|
|
def get_queryset(self):
|
|
pk = self.kwargs.get("pk")
|
|
query_utils = UserGrantedAssetsQueryUtils(None, asset_perm_ids=[pk])
|
|
assets = query_utils.get_all_granted_assets()
|
|
return assets
|
|
|
|
|
|
class AssetPermissionNodeRelationViewSet(RelationMixin):
|
|
serializer_class = serializers.AssetPermissionNodeRelationSerializer
|
|
m2m_field = models.AssetPermission.nodes.field
|
|
filterset_fields = [
|
|
'id', 'node', 'assetpermission',
|
|
]
|
|
search_fields = ["node__value", "assetpermission__name"]
|
|
|
|
def get_queryset(self):
|
|
queryset = super().get_queryset()
|
|
queryset = queryset.annotate(node_key=F('node__key'))
|
|
return queryset
|
|
|
|
|
|
class AssetPermissionAccountListApi(generics.ListAPIView):
|
|
serializer_class = AccountSerializer
|
|
filterset_fields = ("name", "username", "privileged", "version")
|
|
search_fields = filterset_fields
|
|
|
|
def get_queryset(self):
|
|
pk = self.kwargs.get("pk")
|
|
perm = get_object_or_404(models.AssetPermission, pk=pk)
|
|
accounts = perm.get_all_accounts()
|
|
return accounts
|
|
|
|
|