mirror of https://github.com/jumpserver/jumpserver
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
136 lines
4.5 KiB
136 lines
4.5 KiB
# -*- coding: utf-8 -*-
|
|
#
|
|
import re
|
|
|
|
from django.db import models
|
|
from django.utils.translation import ugettext_lazy as _
|
|
|
|
from common.utils import lazyproperty, get_logger
|
|
from orgs.mixins.models import JMSOrgBaseModel
|
|
|
|
from .base import UserAssetAccountBaseACL, UserAssetAccountACLQuerySet, ACLManager
|
|
|
|
logger = get_logger(__file__)
|
|
|
|
|
|
class TypeChoices(models.TextChoices):
|
|
command = 'command', _('Command')
|
|
regex = 'regex', _('Regex')
|
|
|
|
|
|
class CommandGroup(JMSOrgBaseModel):
|
|
name = models.CharField(max_length=128, verbose_name=_("Name"))
|
|
type = models.CharField(
|
|
max_length=16, default=TypeChoices.command, choices=TypeChoices.choices,
|
|
verbose_name=_("Type")
|
|
)
|
|
content = models.TextField(verbose_name=_("Content"), help_text=_("One line one command"))
|
|
ignore_case = models.BooleanField(default=True, verbose_name=_('Ignore case'))
|
|
comment = models.TextField(blank=True, verbose_name=_("Comment"))
|
|
|
|
TypeChoices = TypeChoices
|
|
|
|
class Meta:
|
|
unique_together = [('org_id', 'name')]
|
|
verbose_name = _("Command group")
|
|
|
|
@lazyproperty
|
|
def pattern(self):
|
|
if self.type == 'command':
|
|
s = self.construct_command_regex(self.content)
|
|
else:
|
|
s = r'{0}'.format(self.content)
|
|
return s
|
|
|
|
@classmethod
|
|
def construct_command_regex(cls, content):
|
|
regex = []
|
|
content = content.replace('\r\n', '\n')
|
|
for _cmd in content.split('\n'):
|
|
cmd = re.sub(r'\s+', ' ', _cmd)
|
|
cmd = re.escape(cmd)
|
|
cmd = cmd.replace('\\ ', '\s+')
|
|
|
|
# 有空格就不能 铆钉单词了
|
|
if ' ' in _cmd:
|
|
regex.append(cmd)
|
|
continue
|
|
if not cmd:
|
|
continue
|
|
|
|
# 如果是单个字符
|
|
if cmd[-1].isalpha():
|
|
regex.append(r'\b{0}\b'.format(cmd))
|
|
else:
|
|
regex.append(r'\b{0}'.format(cmd))
|
|
s = r'{}'.format('|'.join(regex))
|
|
return s
|
|
|
|
def match(self, data):
|
|
succeed, error, pattern = self.compile_regex(self.pattern, self.ignore_case)
|
|
if not succeed:
|
|
return False, ''
|
|
|
|
found = pattern.search(data)
|
|
if not found:
|
|
return False, ''
|
|
else:
|
|
return True, found.group()
|
|
|
|
@staticmethod
|
|
def compile_regex(regex, ignore_case):
|
|
args = []
|
|
if ignore_case:
|
|
args.append(re.IGNORECASE)
|
|
try:
|
|
pattern = re.compile(regex, *args)
|
|
except Exception as e:
|
|
error = _('The generated regular expression is incorrect: {}').format(str(e))
|
|
logger.error(error)
|
|
return False, error, None
|
|
return True, '', pattern
|
|
|
|
def __str__(self):
|
|
return '{} % {}'.format(self.type, self.content)
|
|
|
|
|
|
class CommandFilterACLQuerySet(UserAssetAccountACLQuerySet):
|
|
def get_command_groups(self):
|
|
ids = self.values_list('id', flat=True)
|
|
queryset = CommandFilterACL.command_groups.through.objects.filter(commandfilteracl_id__in=ids)
|
|
cmd_group_ids = queryset.values_list('commandgroup_id', flat=True)
|
|
command_groups = CommandGroup.objects.filter(id__in=cmd_group_ids)
|
|
return command_groups
|
|
|
|
|
|
class CommandFilterACL(UserAssetAccountBaseACL):
|
|
command_groups = models.ManyToManyField(CommandGroup, verbose_name=_('Commands'))
|
|
|
|
objects = ACLManager.from_queryset(CommandFilterACLQuerySet)()
|
|
|
|
class Meta:
|
|
unique_together = ('name', 'org_id')
|
|
ordering = ('priority', '-date_updated', 'name')
|
|
verbose_name = _('Command acl')
|
|
|
|
def create_command_confirm_ticket(self, run_command, session, cmd_filter_rule, org_id):
|
|
from tickets.const import TicketType
|
|
from tickets.models import ApplyCommandTicket
|
|
data = {
|
|
'title': _('Command confirm') + ' ({})'.format(session.user),
|
|
'type': TicketType.command_confirm,
|
|
'applicant': session.user_obj,
|
|
'apply_run_user_id': session.user_id,
|
|
'apply_run_asset': str(session.asset),
|
|
'apply_run_account': str(session.account),
|
|
'apply_run_command': run_command[:4090],
|
|
'apply_from_session_id': str(session.id),
|
|
'apply_from_cmd_filter_rule_id': str(cmd_filter_rule.id),
|
|
'apply_from_cmd_filter_id': str(cmd_filter_rule.filter.id),
|
|
'org_id': org_id,
|
|
}
|
|
ticket = ApplyCommandTicket.objects.create(**data)
|
|
assignees = self.reviewers.all()
|
|
ticket.open_by_system(assignees)
|
|
return ticket
|