shouquanxiugai

jperm/models.py

@@ -5,22 +5,37 @@ from juser.models import User, UserGroup
 from jasset.models import Asset, AssetGroup
 
 
-class UserPerm(models.Model):
-    user = models.ForeignKey(User)
-    asset = models.ForeignKey(Asset, null=True)
-    asset_group = models.ForeignKey(AssetGroup, null=True)
-
-    def __unicode__(self):
-        return self.user.name
-
-
-class GroupPerm(models.Model):
-    user_group = models.ForeignKey(UserGroup)
-    asset = models.ForeignKey(Asset, null=True)
-    asset_group = models.ForeignKey(AssetGroup, null=True)
+# class PermUserAsset(models.Model):
+#     user = models.ForeignKey(User)
+#     asset = models.ForeignKey(Asset)
+#
+#     def __unicode__(self):
+#         return self.user.username
+#
+#
+# class PermUserAssetGroup(models.Model):
+#     user = models.ForeignKey(User)
+#     asset_group = models.ForeignKey(AssetGroup)
+#
+#     def __unicode__(self):
+#         return self.user.username
+#
+#
+# class PermUserGroupAsset(models.Model):
+#     user_group = models.ForeignKey(UserGroup)
+#     asset = models.ForeignKey(Asset)
+#
+#     def __unicode__(self):
+#         return self.user_group.name
+#
+#
+# class PermUserGroupAssetGroup(models.Model):
+#     user_group = models.ForeignKey(UserGroup)
+#     asset_group = models.ForeignKey(AssetGroup)
+#
+#     def __unicode__(self):
+#         return self.user_group.name
 
-    def __unicode__(self):
-        return self.user.name
 
 
 # class CmdGroup(models.Model):

jperm/perm_api.py

+# coding: utf-8
+
+from jasset.models import *
+from jumpserver.api import *
+import uuid
+import re
+from ansible.playbook import PlayBook
+from ansible import callbacks, utils
+
+
+def get_object_list(model, id_list):
+    object_list = []
+    for object_id in id_list:
+        if object_id:
+            object_list.extend(model.objects.filter(id=int(object_id)))
+
+    return object_list
+
+
+def perm_user_handle(user, asset_new, asset_del, group_new, group_del):
+    username = user.name
+    asset_group_new = get_object_list(AssetGroup, group_new)
+    asset_group_del = get_object_list(AssetGroup, group_del)
+    for asset_group in asset_group_new:
+        asset_new.extend([asset.ip for asset in asset_group.asset_set.all()])
+
+    for asset_group in asset_group_del:
+        asset_del.extend(asset.ip for asset in asset_group.asset_set.all())
+
+
+def get_rand_file_path(base_dir=os.path.join(BASE_DIR, 'tmp')):
+    filename = uuid.uuid1().hex
+    return os.path.join(base_dir, filename)
+
+
+def get_inventory(host_group):
+    path = get_rand_file_path()
+    f = open(path, 'w')
+    for group, host_list in host_group.items():
+        f.write('[%s]\n' % group)
+        for ip in host_list:
+            asset = get_object(Asset, ip=ip)
+            if asset.use_default_auth:
+                f.write('%s ansbile_ssh_port=%s\n' % (ip, asset.port))
+            else:
+                f.write('%s ansible_ssh_port=%s ansible_ssh_user=%s ansbile_ssh_pass=%s\n'
+                         % (ip, asset.port, asset.username, CRYPTOR.decrypt(asset.password)))
+    f.close()
+    return path
+
+
+def get_playbook(tempate, var):
+    str_playbook = open(tempate).read()
+    for k, v in var.items():
+        str_playbook = re.sub(r'%s' % k, v, str_playbook)
+    path = get_rand_file_path()
+    f = open(path, 'w')
+    f.write(str_playbook)
+    return path
+
+
+def perm_user_api(user, asset_new, asset_del, asset_group_new, asset_group_del):
+    asset_new_ip = []
+    asset_del_ip = []
+
+    if '' in asset_group_new:
+        asset_group_new.remove('')
+
+    if '' in asset_group_del:
+        asset_group_del.remove('')
+
+    asset_new_ip.extend([asset.ip for asset in get_object_list(Asset, asset_new)])
+
+    for asset_group_id in asset_group_new:
+        asset_new_ip.extend([asset.ip for asset in get_object(AssetGroup, id=asset_group_id).asset_set.all()])
+
+    asset_del_ip.extend([asset.ip for asset in get_object_list(Asset, asset_del)])
+
+    for asset_group_id in asset_group_del:
+        asset_del_ip.extend([asset.ip for asset in get_object(AssetGroup, id=asset_group_id).asset_set.all()])
+
+    print asset_new_ip
+    print asset_del_ip
+
+    stats = callbacks.AggregateStats()
+    playbook_cb = callbacks.PlaybookCallbacks(verbose=utils.VERBOSITY)
+    runner_cb = callbacks.PlaybookRunnerCallbacks(stats, verbose=utils.VERBOSITY)
+
+    if asset_new_ip or asset_del_ip:
+        host_group = {'new': asset_new_ip, 'del': asset_del_ip}
+        host_list = get_inventory(host_group)
+        playbook = get_playbook(os.path.join(BASE_DIR, 'playbook', 'user_perm.yaml'),
+                                {'the_new_group': 'new', 'the_del_group': 'del',
+                                 'the_user': user.username, 'the_pub_key': '/tmp/id_rsa.pub'})
+        print host_list, playbook
+        results = PlayBook(host_list=host_list,
+                           playbook=playbook,
+                           forks=5,
+                           remote_user='web',
+                           remote_pass='redhat',
+                           callbacks=playbook_cb,
+                           runner_callbacks=runner_cb,
+                           stats=stats,
+                           become=True,
+                           become_user='root').run()
+
+        for hostname, result in results.items():
+            if result.get('failures', 2):
+                print "%s >>> Failed" % hostname
+            else:
+                print "%s >>> Success" % hostname

jperm/urls.py

@@ -3,7 +3,8 @@ from jperm.views import *
 
 urlpatterns = patterns('jperm.views',
     # Examples:
-    (r'^user/$', user_perm),
+    (r'^user/$', perm_user_list),
+    (r'^perm_user_edit/$', perm_user_edit),
     # (r'^dept_perm_edit/$', 'dept_perm_edit'),
     # (r'^perm_list/$', view_splitter, {'su': perm_list, 'adm': perm_list_adm}),
     # (r'^dept_perm_list/$', 'dept_perm_list'),

jperm/views.py

@@ -8,12 +8,58 @@
 # from django.template import RequestContext
 # from jperm.models import Perm, SudoPerm, CmdGroup, Apply
 from django.db.models import Q
+from jperm.models import *
 from jumpserver.api import *
+from jperm.perm_api import *
 
 
-def user_perm(request):
+@require_role('admin')
+def perm_user_list(request):
     header_title, path1, path2 = '用户授权', '授权管理', '用户授权'
-    return my_render('jperm/user_perm.html', locals(), request)
+    keyword = request.GET.get('search', '')
+    users_list = User.objects.all()
+
+    if keyword:
+        users_list = users_list.filter(Q(name=keyword) | Q(username=keyword))
+    users_list, p, users, page_range, current_page, show_first, show_end = pages(users_list, request)
+
+    return my_render('jperm/perm_user_list.html', locals(), request)
+
+
+@require_role('admin')
+def perm_user_edit(request):
+    header_title, path1, path2 = '用户授权', '授权管理', '授权更改'
+    user_id = request.GET.get('id', '')
+    user = get_object(User, id=user_id)
+    asset_all = Asset.objects.all()
+    asset_group_all = AssetGroup.objects.all()
+
+    asset_id_list = user.assets.split(',')
+    asset_group_id_list = user.asset_groups.split(',')
+    if request.method == 'GET' and user:
+        asset_permed = get_object_list(Asset, asset_id_list)
+        asset_group_permed = get_object_list(AssetGroup, asset_group_id_list)
+        assets = [asset for asset in asset_all if asset not in asset_permed]
+        asset_groups = [asset_group for asset_group in asset_group_all if asset_group not in asset_group_permed]
+        return my_render('jperm/perm_user_edit.html', locals(), request)
+
+    elif request.method == 'POST' and user:
+        asset_select = request.POST.getlist('asset_select', [])
+        asset_group_select = request.POST.getlist('asset_groups_select', [])
+        asset_new = list(set(asset_select) - set(asset_id_list))
+        asset_del = list(set(asset_id_list) - set(asset_select))
+        asset_group_new = list(set(asset_group_select) - set(asset_group_id_list))
+        asset_group_del = list(set(asset_group_id_list) - set(asset_group_select))
+        user.assets = ','.join(asset_select)
+        user.asset_groups = ','.join(asset_group_select)
+        user.save()
+
+        perm_user_api(user, asset_new, asset_del, asset_group_new, asset_group_del)
+
+        return HttpResponseRedirect('/jperm/user/')
+
+    else:
+        return HttpResponse('输入错误')
 
 
 # def asset_cmd_groups_get(asset_groups_select='', cmd_groups_select=''):
@@ -51,7 +97,7 @@ def user_perm(request):
 #         perm.user_group = user_groups
 #         perm.asset_group = asset_groups
 #         msg = '添加成功'
-#     return render_to_response('jperm/user_perm.html', locals(), context_instance=RequestContext(request))
+#     return render_to_response('jperm/perm_user_edit.html', locals(), context_instance=RequestContext(request))
 #
 #
 # def dept_add_asset(dept_id, asset_list):
@@ -115,7 +161,7 @@ def user_perm(request):
 #             contact_list = contact_list_confirm
 #
 #     contact_list, p, contacts, page_range, current_page, show_first, show_end = pages(contact_list, request)
-#     return render_to_response('jperm/perm_list.html', locals(), context_instance=RequestContext(request))
+#     return render_to_response('jperm/perm_user_list.html', locals(), context_instance=RequestContext(request))
 #
 #
 # @require_admin
@@ -147,7 +193,7 @@ def user_perm(request):
 #             contact_list = contact_list_confirm
 #
 #     contact_list, p, contacts, page_range, current_page, show_first, show_end = pages(contact_list, request)
-#     return render_to_response('jperm/perm_list.html', locals(), context_instance=RequestContext(request))
+#     return render_to_response('jperm/perm_user_list.html', locals(), context_instance=RequestContext(request))
 #
 #
 # @require_super_user

jumpserver/api.py

@@ -476,6 +476,10 @@ def get_object(model, **kwargs):
     use this function for query
     使用改封装函数查询数据库
     """
+    for value in kwargs.values():
+        if not value:
+            return None
+
     the_object = model.objects.filter(**kwargs)
     if len(the_object) == 1:
         the_object = the_object[0]

jumpserver/models.py

+# coding: utf-8
+
+from django.db import models
+
+
+class Setting(models.Model):
+    default_user = models.CharField(max_length=100, null=True, blank=True)
+    default_password = models.CharField(max_length=100, null=True, blank=True)
+    default_pri_key_path = models.CharField(max_length=100, null=True, blank=True)
+
+    class Meta:
+        db_table = u'setting'
\ No newline at end of file

jumpserver/urls.py

@@ -12,6 +12,7 @@ urlpatterns = patterns('',
     (r'^logout/$', 'jumpserver.views.logout'),
     (r'^file/upload/$', 'jumpserver.views.upload'),
     (r'^file/download/$', 'jumpserver.views.download'),
+    (r'^setting', 'jumpserver.views.setting'),
     (r'^error/$', 'jumpserver.views.httperror'),
     (r'^juser/', include('juser.urls')),
     (r'^jasset/', include('jasset.urls')),

jumpserver/views.py

@@ -229,6 +229,9 @@ def logout(request):
     request.session.delete()
     return HttpResponseRedirect('/login/')
 
+
+def setting(request):
+    return my_render('setting.html', locals(), request)
 #
 # def filter_ajax_api(request):
 #     attr = request.GET.get('attr', 'user')

juser/models.py

@@ -32,6 +32,8 @@ class User(models.Model):
     role = models.CharField(max_length=2, choices=USER_ROLE_CHOICES, default='CU')
     uuid = models.CharField(max_length=100)
     group = models.ManyToManyField(UserGroup)
+    assets = models.TextField(max_length=1000, verbose_name="Assets", default='')
+    asset_groups = models.CharField(max_length=1000, verbose_name="Asset Groups", default='')
     ssh_key_pwd = models.CharField(max_length=200)
     is_active = models.BooleanField(default=True)
     last_login = models.DateTimeField(null=True)

playbook/user_perm.yaml

+- hosts: the_new_group
+  vars:
+    user: the_user
+  tasks:
+    - name: add user
+      user: name={{ user }} state=present
+    - name: .ssh direcotory
+      file: name=/home/{{ user }}/.ssh mode=700 owner={{ user }} group={{ user }} state=directory
+    - name: set authorizied_file
+      copy: src=the_pub_key dest=/home/{{ user }}/.ssh/authorizied_keys owner={{ user }} group={{ user }} mode=600
+
+- hosts: the_del_group
+  vars:
+    user: the_user
+  tasks:
+    - name: del user
+      user: name={{ user }} state=absent remove=yes

static/js/base.js

@@ -89,7 +89,7 @@ function move(from, to, from_o, to_o) {
 //}
 //
 
-function selectAll(){
+function selectAllOption(){
          var checklist = document.getElementsByName ("selected");
             if(document.getElementById("select_all").checked)
             {
@@ -106,6 +106,12 @@ function selectAll(){
 
         }
 
+function checkAll(formID){
+    $('#'+formID+'option').each(function(){
+        $(this).attr('checked', true)
+    })
+}
+
 //
 //function move_all(from, to){
 //    $("#"+from).children().each(function(){

templates/jperm/perm_edit.html

@@ -82,7 +82,7 @@
                             <div class="form-group">
                                 <div class="col-sm-4 col-sm-offset-2">
                                     <button class="btn btn-white" type="reset">取消</button>
-                                    <button id="submit_button" class="btn btn-primary" type="submit">确认保存</button>
+                                    <button id="submit_button" class="btn btn-primary" type="submit" onclick="checkAll('userForm')">确认保存</button>
                                 </div>
                             </div>
                         </div>

templates/jperm/user_perm.html → templates/jperm/perm_user_edit.html

@@ -8,7 +8,7 @@
         <div class="col-lg-10">
             <div class="ibox float-e-margins">
                 <div class="ibox-title">
-                    <h5> 主机授权添加 </h5>
+                    <h5> {{ user.name }}授权修改</h5>
                     <div class="ibox-tools">
                         <a class="collapse-link">
                             <i class="fa fa-chevron-up"></i>
@@ -23,7 +23,7 @@
                 </div>
 
                 <div class="ibox-content">
-                    <form id="sudoPerm" method="post" class="form-horizontal" action="">
+                    <form id="userPerm" method="post" class="form-horizontal" action="../perm_user_edit/?id={{ user.id }}">
                         {% if error %}
                             <div class="alert alert-warning text-center">{{ error }}</div>
                         {% endif %}
@@ -33,41 +33,48 @@
                         <div class="row">
                             <div class="form-group">
                                 <label for="" class="col-sm-2 control-label">用户<span class="red-fonts">*</span></label>
+                                <div class="col-sm-4">
+                                    <input id="user_group_id" name="user_group_id"type="text"  value="{{ user.id }}" style="display: none">
+                                    <input id="user_group_name" name="user_group_name"  type="text" class="form-control" value="{{ user.name }}" readonly>
+                                </div>
+                            </div>
+
+                            <div class="hr-line-dashed"></div>
+
+                            <div class="form-group">
+                                <label for="" class="col-sm-2 control-label">资产<span class="red-fonts">*</span></label>
                                 <div class="col-sm-4">
                                     <div>
-                                        <select id="user_groups" name="user_groups" class="form-control" size="12" multiple>
-                                            {% for user_group in user_groups %}
-                                            <option value="{{ user_group.id }}">{{ user_group.name }}</option>
+                                        <select id="assets" name="assets" class="form-control m-b" size="12" multiple>
+                                            {% for asset in assets %}
+                                            <option value="{{ asset.id }}">{{ asset.ip }}</option>
                                             {% endfor %}
                                         </select>
                                     </div>
                                 </div>
 
                                 <div class="col-sm-1">
-                                    <div class="btn-group" style="margin-top: 12px;">
-                                        <button type="button" class="btn btn-white" onclick="move('user_groups', 'user_groups_select')"><i class="fa fa-chevron-right"></i></button>
-                                        <button type="button" class="btn btn-white" onclick="move('user_groups_select', 'user_groups')"><i class="fa fa-chevron-left"></i> </button>
+                                    <div class="btn-group" style="margin-top: 42px;">
+                                        <button type="button" class="btn btn-white" onclick="move('assets', 'asset_select')"><i class="fa fa-chevron-right"></i></button>
+                                        <button type="button" class="btn btn-white" onclick="move('asset_select', 'assets')"><i class="fa fa-chevron-left"></i> </button>
                                     </div>
                                 </div>
 
                                 <div class="col-sm-3">
                                     <div>
-                                        <select id="user_groups_select" name="user_groups_select" class="form-control m-b" size="12"  multiple>
+                                        <select id="asset_select" name="asset_select" class="form-control m-b" size="12"  multiple>
+                                            {% for asset in asset_permed %}
+                                            <option value="{{ asset.id }}">{{ asset.ip }}</option>
+                                            {% endfor %}
                                         </select>
                                     </div>
                                 </div>
                             </div>
 
                             <div class="hr-line-dashed"></div>
-                            <div class="form-group">
-                                <label for="group_name" class="col-sm-2 control-label">类型<span class="red-fonts">*</span></label>
-                                <div class="col-sm-8">
-                                    <input id="comment" name="comment" placeholder="备注说明" type="text" class="form-control">
-                                </div>
-                            </div>
 
                             <div class="form-group">
-                                <label for="" class="col-sm-2 control-label">主机组<span class="red-fonts">*</span></label>
+                                <label for="" class="col-sm-2 control-label">资产组<span class="red-fonts">*</span></label>
                                 <div class="col-sm-4">
                                     <div>
                                         <select id="asset_groups" name="asset_groups" class="form-control m-b" size="12" multiple>
@@ -79,7 +86,7 @@
                                 </div>
 
                                 <div class="col-sm-1">
-                                    <div class="btn-group" style="margin-top: 12px;">
+                                    <div class="btn-group" style="margin-top: 42px;">
                                         <button type="button" class="btn btn-white" onclick="move('asset_groups', 'asset_groups_select')"><i class="fa fa-chevron-right"></i></button>
                                         <button type="button" class="btn btn-white" onclick="move('asset_groups_select', 'asset_groups')"><i class="fa fa-chevron-left"></i> </button>
                                     </div>
@@ -88,26 +95,20 @@
                                 <div class="col-sm-3">
                                     <div>
                                         <select id="asset_groups_select" name="asset_groups_select" class="form-control m-b" size="12"  multiple>
+                                            {% for asset_group in asset_group_permed %}
+                                            <option value="{{ asset_group.id }}">{{ asset_group.name }}</option>
+                                            {% endfor %}
                                         </select>
                                     </div>
                                 </div>
                             </div>
-
-                            <div class="hr-line-dashed"></div>
-                            <div class="form-group">
-                                <label for="group_name" class="col-sm-2 control-label">备注</label>
-                                <div class="col-sm-8">
-                                    <input id="comment" name="comment" placeholder="备注说明" type="text" class="form-control">
-                                </div>
-                            </div>
-                            <div class="hr-line-dashed"></div>
                         </div>
 
                         <div class="row">
                             <div class="form-group">
                                 <div class="col-sm-4 col-sm-offset-2">
                                     <button class="btn btn-white" type="reset">取消</button>
-                                    <button id="submit_button" class="btn btn-primary" type="submit">确认保存</button>
+                                    <button id="submit_button" class="btn btn-primary" type="submit" onclick="selectAllOption('userForm')">确认保存</button>
                                 </div>
                             </div>
                         </div>
@@ -130,18 +131,6 @@ $('#sudoPerm').validator({
             tip: "输入授权名",
             ok: "",
             msg: {required: "必须填写!"}
-        },
-        "user_groups_select": {
-            rule: "required",
-            tip: "选择用户组",
-            ok: "",
-            msg: {checked: "至少选择一个用户组"}
-        },
-        "asset_groups_select": {
-            rule: "required",
-            tip: "选择主机组",
-            ok: "",
-            msg: {checked: "至少选择一个主机组"}
         }
 
     },
@@ -156,6 +145,7 @@ $(document).ready(function(){
         $('#user_groups_select option').each(function(){
             $(this).prop('selected', true)
         })
+
         $('#asset_groups_select option').each(function(){
             $(this).prop('selected', true)
         })

templates/jperm/perm_list.html → templates/jperm/perm_user_list.html

@@ -16,12 +16,6 @@
                         <a class="dropdown-toggle" data-toggle="dropdown" href="#">
                             <i class="fa fa-wrench"></i>
                         </a>
-                        <ul class="dropdown-menu dropdown-user">
-                            <li><a href="#">未启用 1</a>
-                            </li>
-                            <li><a href="#">未启用 2</a>
-                            </li>
-                        </ul>
                         <a class="close-link">
                             <i class="fa fa-times"></i>
                         </a>
@@ -30,13 +24,13 @@
 
                 <div class="ibox-content">
                     <div class="">
-                    <a target="_blank" href="/juser/group_add/" class="btn btn-sm btn-primary "> 添加小组 </a>
+                    <a target="_blank" href="/juser/user_add/" class="btn btn-sm btn-primary "> 添加用户 </a>
                     <form id="search_form" method="get" action="" class="pull-right mail-search">
                         <div class="input-group">
                             <input type="text" class="form-control input-sm" id="search_input" name="search" placeholder="Search">
                             <div class="input-group-btn">
                                 <button id='search_btn' type="submit" class="btn btn-sm btn-primary">
-                                    Search
+                                    - 搜索 -
                                 </button>
                             </div>
                         </div>
@@ -46,27 +40,23 @@
                     <table class="table table-striped table-bordered table-hover " id="editable" >
                         <thead>
                             <tr>
-                                <th class="text-center">组名</th>
-                                <th class="text-center">所属部门</th>
-                                <th class="text-center">成员数目</th>
-                                <th class="text-center">授权主机组数目</th>
-                                <th class="text-center">授权主机数目</th>
-                                <th class="text-center">备注</th>
+                                <th class="text-center">用户</th>
+                                <th class="text-center">所属用户组</th>
+                                <th class="text-center">授权资产</th>
+                                <th class="text-center">授权资产组</th>
                                 <th class="text-center">操作</th>
                             </tr>
                         </thead>
                         <tbody>
-                        {% for group in contacts.object_list %}
+                        {% for user in users.object_list %}
                             <tr class="gradeX">
-                                <td class="text-center"> {{ group.name }} </td>
-                                <td class="text-center"> {{ group.dept.name }} </td>
-                                <td class="text-center"> <a href="/juser/user_list/?gid={{ group.id }}">{{ group.id | member_count }} </a> </td>
-                                <td class="text-center"> <a href="/jasset/group_list/?gid={{ group.id }}"> {{ group.id | ugrp_perm_agrp_count }} </a> </td>
-                                <td class="text-center"> <a href="/jasset/host_list/?gid={{ group.id }}">{{ group.id | ugrp_perm_asset_count }} </a> </td>
-                                <td class="text-center"> {{ group.comment }} </td>
+                                <td class="text-center"> {{ user.name }} </td>
+                                <td class="text-center"> <a href="/juser/user_list/?gid={{ user.id }}">{{ user.id  }} </a> </td>
+                                <td class="text-center"> <a href="/jasset/host_list/?gid={{ user.id }}">{{ user.id }} </a> </td>
+                                <td class="text-center"> {{ user.comment }} </td>
                                 <td class="text-center">
-                                    <a href="../perm_detail/?id={{ group.id }}" class="btn btn-xs btn-primary">详情</a>
-                                    <a href="../perm_edit/?id={{ group.id }}" class="btn btn-xs btn-danger">授权编辑</a>
+                                    <a href="../perm_user_detail/?id={{ user.id }}" class="btn btn-xs btn-primary">详情</a>
+                                    <a href="../perm_user_edit/?id={{ user.id }}" class="btn btn-xs btn-danger">编辑</a>
                                 </td>
                             </tr>
                         {% endfor %}
@@ -75,7 +65,7 @@
                     <div class="row">
                         <div class="col-sm-6">
                             <div class="dataTables_info" id="editable_info" role="status" aria-live="polite">
-                                Showing {{ contacts.start_index }} to {{ contacts.end_index }} of {{ p.count }} entries
+                                Showing {{ users.start_index }} to {{ users.end_index }} of {{ p.count }} entries
                             </div>
                         </div>
                         {% include 'paginator.html' %}
@@ -86,23 +76,4 @@
     </div>
 </div>
 
-<script>
-    $(document).ready(function(){
-        $(".iframe").colorbox({iframe:true, width:"70%", height:"70%"});
-        var check_array = []
-        $('#del_btn').click(function(){
-            $(".gradeX input:checked").each(function() {check_array.push($(this).attr("value")) })
-            $(".gradeX input:checked").closest("tr").remove()
-            $.post("/juser/group_del_ajax/",
-                    {group_ids: check_array.join(",")},
-                    function(data){
-                        alert(data)
-                    }
-            )
-        })
-    });
-
-
-</script>
-
 {% endblock %}
\ No newline at end of file

templates/nav.html

@@ -44,6 +44,9 @@
             <li id="jlog">
                <a href="/jlog/log_list/online/"><i class="fa fa-files-o"></i> <span class="nav-label">日志审计</span><span class="label label-info pull-right"></span></a>
             </li>
+            <li id="setting">
+                   <a href="/setting/"><i class="fa fa-files-o"></i> <span class="nav-label">设置</span><span class="label label-info pull-right"></span></a>
+            </li>
             <li class="special_link">
                 <a href="http://www.jumpserver.org" target="_blank"><i class="fa fa-database"></i> <span class="nav-label">访问官网</span></a>
             </li>

templates/setting.html

+{% extends 'base.html' %}
+{% load mytags %}
+
+
+{% block content %}
+    {% include 'nav_cat_bar.html' %}
+    <div class="wrapper wrapper-content animated fadeInRight">
+        <div class="row">
+            <div class="col-lg-10">
+                <div class="ibox float-e-margins">
+                    <div class="ibox-title">
+                        <h5> 项目设置 </h5>
+                        <div class="ibox-tools">
+                            <a class="collapse-link">
+                                <i class="fa fa-chevron-up"></i>
+                            </a>
+                            <a class="dropdown-toggle" data-toggle="dropdown" href="#">
+                                <i class="fa fa-wrench"></i>
+                            </a>
+                            <a class="close-link">
+                                <i class="fa fa-times"></i>
+                            </a>
+                        </div>
+                    </div>
+
+                    <div class="ibox-content">
+                        <div class="panel blank-panel">
+                            <div class="panel-heading">
+                                <div class="panel-options">
+                                    <ul class="nav nav-tabs">
+                                        <li id="tab1" class="active"><a data-toggle="tab" href="#tab-default" aria-expanded="true">默认设置</a></li>
+                                        <li id="tab2" class=""><a data-toggle="tab" href="#tab-email" aria-expanded="true">邮箱设置</a></li>
+                                    </ul>
+                                </div>
+                            </div>
+
+                            <div class="panel-body">
+                                <div class="tab-content">
+                                    <div id="tab-default" class="tab-pane active">
+                                        <form method="post" id="userForm" class="form-horizontal" action="">
+                                            {% if error %}
+                                                <div class="alert alert-warning text-center">{{ error }}</div>
+                                            {% endif %}
+                                            {% if msg %}
+                                                <div class="alert alert-success text-center">{{ msg }}</div>
+                                            {% endif %}
+                                            <div class="form-group">
+                                                <label for="username" class="col-sm-2 control-label">默认用户名<span class="red-fonts">*</span></label>
+                                                <div class="col-sm-8">
+                                                    <input id="username" name="username" placeholder="Username" type="text" class="form-control">
+                                                </div>
+                                            </div>
+                                            <div class="hr-line-dashed"></div>
+                                            <div class="form-group">
+                                                <label for="groups" class="col-sm-2 control-label">默认密码</label>
+                                                <div class="col-sm-8">
+                                                    <input id="password" name="password" placeholder="Password" type="password" class="form-control">
+                                                </div>
+                                            </div>
+                                            <div class="hr-line-dashed"></div>
+                                            <div class="form-group">
+                                                <label for="email" class="col-sm-2 control-label">默认密钥<span class="red-fonts"></span></label>
+                                                <div class="col-sm-8">
+                                                    <textarea class="form-control" placeholder="" rows="5"></textarea>
+                                                </div>
+                                            </div>
+                                            <div class="hr-line-dashed"></div>
+                                            <div class="form-group">
+                                                <div class="col-sm-4 col-sm-offset-2">
+                                                    <button class="btn btn-white" type="reset">取消</button>
+                                                    <button id="submit_button" class="btn btn-primary" type="submit">确认保存</button>
+                                                </div>
+                                            </div>
+                                        </form>
+                                    </div>
+
+                                    <div id="tab-email" class="tab-pane">
+                                        <table class="table table-striped table-bordered table-hover " id="editable" >
+                                            <thead>
+                                                <tr>
+                                                    <th class="text-center">组名</th>
+
+                                                </tr>
+                                            </thead>
+                                        </table>
+                                    </div>
+
+                                </div>
+                            </div>
+                        </div>
+                    </div>
+                </div>
+            </div>
+        </div>
+    </div>
+
+<script>
+    $(document).ready(function(){
+
+    });
+        $("#refresh").click(function(){
+            $.get('/jperm/sudo_refresh/',
+                    {'test':''},
+                    function(data){
+                        alert(data)
+                    }
+            )
+        })
+    });
+</script>
+
+{% endblock %}
\ No newline at end of file

tmp/147164c46a9611e5a797000c29f7d66e

+[new]
+192.168.244.129 ansible_ssh_port=22 ansible_ssh_user=root ansbile_ssh_pass=redhat
+[del]

tmp/14721dba6a9611e5a797000c29f7d66e

+- hosts: new
+  vars:
+    user: admin
+  tasks:
+    - name: add user
+      user: name={{ user }} state=present
+    - name: .ssh direcotory
+      file: name=/home/{{ user }}/.ssh mode=700 owner={{ user }} group={{ user }} state=directory
+    - name: set authorizied_file
+      copy: src=/tmp/id_rsa.pub dest=/home/{{ user }}/.ssh/authorizied_keys owner={{ user }} group={{ user }} mode=600
+
+- hosts: del
+  vars:
+    user: admin
+  tasks:
+    - name: del user
+      user: name={{ user }} state=absent remove=yes

tmp/1d0e27de6a9611e5ae2e000c29f7d66e

+[new]
+[del]
+192.168.244.129 ansible_ssh_port=22 ansible_ssh_user=root ansbile_ssh_pass=redhat

tmp/1d0e993a6a9611e5ae2e000c29f7d66e

+- hosts: new
+  vars:
+    user: admin
+  tasks:
+    - name: add user
+      user: name={{ user }} state=present
+    - name: .ssh direcotory
+      file: name=/home/{{ user }}/.ssh mode=700 owner={{ user }} group={{ user }} state=directory
+    - name: set authorizied_file
+      copy: src=/tmp/id_rsa.pub dest=/home/{{ user }}/.ssh/authorizied_keys owner={{ user }} group={{ user }} mode=600
+
+- hosts: del
+  vars:
+    user: admin
+  tasks:
+    - name: del user
+      user: name={{ user }} state=absent remove=yes

tmp/2e6324f46a9511e58276000c29f7d66e

+[new]
+192.168.244.129 ansible_ssh_port=22 ansible_ssh_user=root ansbile_ssh_pass=redhat
+[del]

tmp/2e63c0b26a9511e58276000c29f7d66e

+- hosts: new
+  vars:
+    user: admin
+  tasks:
+    - name: add user
+      user: name={{ user }} state=present
+    - name: .ssh direcotory
+      file: name=/home/{{ user }}/.ssh mode=700 owner={{ user }} group={{ user }} state=directory
+    - name: set authorizied_file
+      copy: src=/tmp/id_rsa.pub dest=/home/{{ user }}/.ssh/authorizied_keys owner={{ user }} group={{ user }} mode=600
+
+- hosts: del
+  vars:
+    user: admin
+  tasks:
+    - name: del user
+      user: name={{ user }} state=absent

tmp/39c5fac46a9511e585f9000c29f7d66e

+[new]
+[del]
+192.168.244.129 ansible_ssh_port=22 ansible_ssh_user=root ansbile_ssh_pass=redhat

tmp/39c69db26a9511e585f9000c29f7d66e

+- hosts: new
+  vars:
+    user: admin
+  tasks:
+    - name: add user
+      user: name={{ user }} state=present
+    - name: .ssh direcotory
+      file: name=/home/{{ user }}/.ssh mode=700 owner={{ user }} group={{ user }} state=directory
+    - name: set authorizied_file
+      copy: src=/tmp/id_rsa.pub dest=/home/{{ user }}/.ssh/authorizied_keys owner={{ user }} group={{ user }} mode=600
+
+- hosts: del
+  vars:
+    user: admin
+  tasks:
+    - name: del user
+      user: name={{ user }} state=absent

tmp/3ce93d2c6a9211e5a651000c29f7d66e

+[new]
+[del]
+127.0.0.1 ansbile_ssh_port=22
+192.168.244.129 ansible_ssh_port=22 ansible_ssh_user=root ansbile_ssh_pass=redhat

tmp/3ceb07b06a9211e5a651000c29f7d66e

+- hosts: new
+  vars:
+    user: testfd
+  tasks:
+    - name: add user
+      user: name={{ user }} state=present
+    - name: .ssh direcotory
+      file: name=/home/{{ user }}/.ssh mode=700 owner={{ user }} group={{ user }} state=directory
+    - name: set authorizied_file
+      copy: src=/tmp/id_rsa.pub dest=/home/{{ user }}/.ssh/authorizied_keys owner={{ user }} group={{ user }} mode=600
\ No newline at end of file

tmp/48fd55966a9511e59d6b000c29f7d66e

+[new]
+127.0.0.1 ansbile_ssh_port=22
+192.168.244.129 ansible_ssh_port=22 ansible_ssh_user=root ansbile_ssh_pass=redhat
+[del]

tmp/48fdf7626a9511e59d6b000c29f7d66e

+- hosts: new
+  vars:
+    user: testfd
+  tasks:
+    - name: add user
+      user: name={{ user }} state=present
+    - name: .ssh direcotory
+      file: name=/home/{{ user }}/.ssh mode=700 owner={{ user }} group={{ user }} state=directory
+    - name: set authorizied_file
+      copy: src=/tmp/id_rsa.pub dest=/home/{{ user }}/.ssh/authorizied_keys owner={{ user }} group={{ user }} mode=600
+
+- hosts: del
+  vars:
+    user: testfd
+  tasks:
+    - name: del user
+      user: name={{ user }} state=absent

tmp/764e1d166a9311e5886c000c29f7d66e

+[new]
+127.0.0.1 ansbile_ssh_port=22
+[del]
+127.0.0.1 ansbile_ssh_port=22
+192.168.244.129 ansible_ssh_port=22 ansible_ssh_user=root ansbile_ssh_pass=redhat

tmp/765012a66a9311e5886c000c29f7d66e

+- hosts: new
+  vars:
+    user: testfd
+  tasks:
+    - name: add user
+      user: name={{ user }} state=present
+    - name: .ssh direcotory
+      file: name=/home/{{ user }}/.ssh mode=700 owner={{ user }} group={{ user }} state=directory
+    - name: set authorizied_file
+      copy: src=/tmp/id_rsa.pub dest=/home/{{ user }}/.ssh/authorizied_keys owner={{ user }} group={{ user }} mode=600
+
+- hosts: del
+  vars:
+    user: testfd
+  tasks:
+    - name: del user
+      user: name={{ user }} state=absent

tmp/aa4bd3526a9211e5a53f000c29f7d66e

+[new]
+127.0.0.1 ansbile_ssh_port=22
+192.168.244.129 ansible_ssh_port=22 ansible_ssh_user=root ansbile_ssh_pass=redhat
+[del]

tmp/aa4cbc546a9211e5a53f000c29f7d66e

+- hosts: new
+  vars:
+    user: testfd
+  tasks:
+    - name: add user
+      user: name={{ user }} state=present
+    - name: .ssh direcotory
+      file: name=/home/{{ user }}/.ssh mode=700 owner={{ user }} group={{ user }} state=directory
+    - name: set authorizied_file
+      copy: src=/tmp/id_rsa.pub dest=/home/{{ user }}/.ssh/authorizied_keys owner={{ user }} group={{ user }} mode=600
\ No newline at end of file

tmp/bbd799fa6a9511e59e68000c29f7d66e

+[new]
+192.168.244.129 ansible_ssh_port=22 ansible_ssh_user=root ansbile_ssh_pass=redhat
+[del]

tmp/bbd931026a9511e59e68000c29f7d66e

+- hosts: new
+  vars:
+    user: admin
+  tasks:
+    - name: add user
+      user: name={{ user }} state=present
+    - name: .ssh direcotory
+      file: name=/home/{{ user }}/.ssh mode=700 owner={{ user }} group={{ user }} state=directory
+    - name: set authorizied_file
+      copy: src=/tmp/id_rsa.pub dest=/home/{{ user }}/.ssh/authorizied_keys owner={{ user }} group={{ user }} mode=600
+
+- hosts: del
+  vars:
+    user: admin
+  tasks:
+    - name: del user
+      user: name={{ user }} state=absent remove=yes

tmp/c2774ea46a9511e5be00000c29f7d66e

+[new]
+[del]
+192.168.244.129 ansible_ssh_port=22 ansible_ssh_user=root ansbile_ssh_pass=redhat

tmp/c2780ae26a9511e5be00000c29f7d66e

+- hosts: new
+  vars:
+    user: admin
+  tasks:
+    - name: add user
+      user: name={{ user }} state=present
+    - name: .ssh direcotory
+      file: name=/home/{{ user }}/.ssh mode=700 owner={{ user }} group={{ user }} state=directory
+    - name: set authorizied_file
+      copy: src=/tmp/id_rsa.pub dest=/home/{{ user }}/.ssh/authorizied_keys owner={{ user }} group={{ user }} mode=600
+
+- hosts: del
+  vars:
+    user: admin
+  tasks:
+    - name: del user
+      user: name={{ user }} state=absent remove=yes

tmp/c6a8384a6a8a11e5b929000c29f7d66e

+- hosts: hello world
+  vars:
+    user: testuserssss
+  tasks:
+    - name: add user
+      user: name={{ user }} state=present
+    - name: .ssh direcotory
+      file: name=/home/{{ user }}/.ssh mode=700 owner={{ user }} group={{ user }} state=directory
+    - name: set authorizied_file
+      copy: src=/tmp/id_rsa.pub dest=/home/{{ user }}/.ssh/authorizied_keys owner={{ user }} group={{ user }} mode=600 
+

tmp/d3e0469c6a8511e5ae99000c29f7d66e

+[world]
+125.39.8.222 ansbile_ssh_port=2234
+202.106.0.20 ansbile_ssh_port=22
+[hello]
+125.39.8.222 ansbile_ssh_port=2234
+202.106.0.20 ansbile_ssh_port=22

tmp/f8b99a686a9411e5b0fb000c29f7d66e

+[new]
+192.168.244.129 ansible_ssh_port=22 ansible_ssh_user=root ansbile_ssh_pass=redhat
+[del]

tmp/f8bb07546a9411e5b0fb000c29f7d66e

+- hosts: new
+  vars:
+    user: admin
+  tasks:
+    - name: add user
+      user: name={{ user }} state=present
+    - name: .ssh direcotory
+      file: name=/home/{{ user }}/.ssh mode=700 owner={{ user }} group={{ user }} state=directory
+    - name: set authorizied_file
+      copy: src=/tmp/id_rsa.pub dest=/home/{{ user }}/.ssh/authorizied_keys owner={{ user }} group={{ user }} mode=600
+
+- hosts: del
+  vars:
+    user: admin
+  tasks:
+    - name: del user
+      user: name={{ user }} state=absent