• 八千流's avatar
    超级管理员可创建超级审计员并可设置审计员为组织审计员 (#3141) · a2376d3a
    八千流 authored
    * [Update] 超级管理员可创建超级审计员并可设置审计员为组织审计员
    
    * [Update] 修改小问题
    
    * [Update] 修改普通用户角色可以是组织审计员
    
    * [Update] 更改组织审计员切换组织问题
    
    * [Update] 修改小问题
    
    * [Update] 普通用户是组织审计员的页面左侧栏显示
    
    * [Update] 修改删除权限问题和组织显示问题
    
    * [Update] 优化逻辑
    
    * [Update] 优化类名
    
    * [Update] 修改小问题
    
    * [Update] 优化逻辑
    
    * [Update] 优化切换到某一个组织逻辑
    
    * [Update] 修改用户详情页的 删除/更新 按钮是否可点击
    
    * [Update] 优化代码
    
    * [Update] 组织管理列表增加审计员显示
    
    * [Update] 优化代码细节
    
    * [Update] 优化权限类逻辑
    
    * [Update] 优化导航菜单控制
    
    * [Update] 优化页面控制逻辑
    
    * [Update] 修改变量名错误问题
    
    * [Update] 修改页面上的小问题
    
    * [Update] 审计员或组织审计员能够更新个人部分信息
    
    * [Update] 用户名为admin的用户不能被删除
    
    * [Update] 不同用户在不同组织下扮演不同角色的权限不同,为了避免切换组织时出现403,重定向到index
    
    * [Update] 一个用户在同一个组织既是管理员又是审计员,隐藏个人信息模块,仅当是审计员,在当前组织显示个人信息模块
    
    * [Update] 修改方法命名
    
    * [Update] 优化代码细节
    
    * [Update] 修改命令执行列表方法
    
    * [Update] 优化用户之间操作的权限逻辑;添加 UserModel 的 property 属性;修改 Organization 的 related name 名称;
    
    * [Update] 修改OrgProcessor Anonymous问题
    
    * [Update] 修改用户序列类校验组织和转换raw密码的逻辑
    a2376d3a
remote_app_permission.py 5.21 KB
#  coding: utf-8
#

from django.utils.translation import ugettext as _
from django.urls import reverse_lazy
from django.views.generic import (
    TemplateView, CreateView, UpdateView, DetailView, ListView
)
from django.views.generic.edit import SingleObjectMixin
from django.conf import settings

from common.permissions import PermissionsMixin, IsOrgAdmin
from orgs.utils import current_org

from ..hands import RemoteApp, UserGroup, SystemUser
from ..models import RemoteAppPermission
from ..forms import RemoteAppPermissionCreateUpdateForm


__all__ = [
    'RemoteAppPermissionListView', 'RemoteAppPermissionCreateView',
    'RemoteAppPermissionUpdateView', 'RemoteAppPermissionDetailView',
    'RemoteAppPermissionUserView', 'RemoteAppPermissionRemoteAppView'
]


class RemoteAppPermissionListView(PermissionsMixin, TemplateView):
    template_name = 'perms/remote_app_permission_list.html'
    permission_classes = [IsOrgAdmin]

    def get_context_data(self, **kwargs):
        context = {
            'app': _('Perms'),
            'action': _('RemoteApp permission list'),
        }
        kwargs.update(context)
        return super().get_context_data(**kwargs)


class RemoteAppPermissionCreateView(PermissionsMixin, CreateView):
    template_name = 'perms/remote_app_permission_create_update.html'
    model = RemoteAppPermission
    form_class = RemoteAppPermissionCreateUpdateForm
    success_url = reverse_lazy('perms:remote-app-permission-list')
    permission_classes = [IsOrgAdmin]

    def get_context_data(self, **kwargs):
        context = {
            'app': _('Perms'),
            'action': _('Create RemoteApp permission'),
            'type': 'create'
        }
        kwargs.update(context)
        return super().get_context_data(**kwargs)


class RemoteAppPermissionUpdateView(PermissionsMixin, UpdateView):
    template_name = 'perms/remote_app_permission_create_update.html'
    model = RemoteAppPermission
    form_class = RemoteAppPermissionCreateUpdateForm
    success_url = reverse_lazy('perms:remote-app-permission-list')
    permission_classes = [IsOrgAdmin]

    def get_context_data(self, **kwargs):
        context = {
            'app': _('Perms'),
            'action': _('Update RemoteApp permission'),
            'type': 'update'
        }
        kwargs.update(context)
        return super().get_context_data(**kwargs)


class RemoteAppPermissionDetailView(PermissionsMixin, DetailView):
    template_name = 'perms/remote_app_permission_detail.html'
    model = RemoteAppPermission
    permission_classes = [IsOrgAdmin]

    def get_context_data(self, **kwargs):
        context = {
            'app': _('Perms'),
            'action': _('RemoteApp permission detail'),
            'system_users_remain': SystemUser.objects.exclude(
                granted_by_remote_app_permissions=self.object
            ),
        }
        kwargs.update(context)
        return super().get_context_data(**kwargs)


class RemoteAppPermissionUserView(PermissionsMixin,
                                  SingleObjectMixin,
                                  ListView):
    template_name = 'perms/remote_app_permission_user.html'
    context_object_name = 'remote_app_permission'
    paginate_by = settings.DISPLAY_PER_PAGE
    object = None
    permission_classes = [IsOrgAdmin]

    def get(self, request, *args, **kwargs):
        self.object = self.get_object(
            queryset=RemoteAppPermission.objects.all())
        return super().get(request, *args, **kwargs)

    def get_queryset(self):
        queryset = list(self.object.get_all_users())
        return queryset

    def get_context_data(self, **kwargs):
        user_remain = current_org.get_org_members(exclude=('Auditor',)).exclude(
            remoteapppermission=self.object)
        user_groups_remain = UserGroup.objects.exclude(
            remoteapppermission=self.object)
        context = {
            'app': _('Perms'),
            'action': _('RemoteApp permission user list'),
            'users_remain': user_remain,
            'user_groups_remain': user_groups_remain,
        }
        kwargs.update(context)
        return super().get_context_data(**kwargs)


class RemoteAppPermissionRemoteAppView(PermissionsMixin,
                                       SingleObjectMixin,
                                       ListView):
    template_name = 'perms/remote_app_permission_remote_app.html'
    context_object_name = 'remote_app_permission'
    paginate_by = settings.DISPLAY_PER_PAGE
    object = None
    permission_classes = [IsOrgAdmin]

    def get(self, request, *args, **kwargs):
        self.object = self.get_object(
            queryset=RemoteAppPermission.objects.all()
        )
        return super().get(request, *args, **kwargs)

    def get_queryset(self):
        queryset = list(self.object.get_all_remote_apps())
        return queryset

    def get_context_data(self, **kwargs):
        remote_app_granted = self.get_queryset()
        remote_app_remain = RemoteApp.objects.exclude(
            id__in=[a.id for a in remote_app_granted])
        context = {
            'app': _('Perms'),
            'action': _('RemoteApp permission RemoteApp list'),
            'remote_app_remain': remote_app_remain
        }
        kwargs.update(context)
        return super().get_context_data(**kwargs)