Rename ansibleworks to awx.

awx/main/__init__.py

@@ -0,0 +1,2 @@
+# Copyright (c) 2013 AnsibleWorks, Inc.
+# All Rights Reserved.

awx/main/access.py

@@ -0,0 +1,520 @@
+# Copyright (c) 2013 AnsibleWorks, Inc.
+# All Rights Reserved.
+
+import logging
+from django.db.models import Q
+from django.contrib.auth.models import User
+from awx.main.models import *
+
+__all__ = ['get_user_queryset', 'check_user_access']
+
+logger = logging.getLogger('awx.main.access')
+
+access_registry = {
+    # <model_class>: [<access_class>, ...],
+    # ...
+}
+
+def register_access(model_class, access_class):
+    access_classes = access_registry.setdefault(model_class, [])
+    access_classes.append(access_class)
+
+def get_user_queryset(user, model_class):
+    '''
+    Return a queryset for the given model_class containing only the instances
+    that should be visible to the given user.
+    '''
+    querysets = []
+    for access_class in access_registry.get(model_class, []):
+        access_instance = access_class(user)
+        querysets.append(access_instance.get_queryset())
+    if not querysets:
+        return model_class.objects.none()
+    elif len(querysets) == 1:
+        return querysets[0]
+    else:
+        queryset = model_class.objects.all()
+        for qs in querysets:
+            queryset = queryset.filter(pk__in=qs.values_list('pk', flat=True))
+        return queryset
+
+def check_user_access(user, model_class, action, *args, **kwargs):
+    '''
+    Return True if user can perform action against model_class with the
+    provided parameters.
+    '''
+    for access_class in access_registry.get(model_class, []):
+        access_instance = access_class(user)
+        access_method = getattr(access_instance, 'can_%s' % action, None)
+        if not access_method:
+            continue
+        result = access_method(*args, **kwargs)
+        logger.debug('%s.%s %r returned %r', access_instance.__class__.__name__,
+                     access_method.__name__, args, result)
+        if result:
+            return result
+    return False
+
+class BaseAccess(object):
+
+    model = None
+
+    def __init__(self, user):
+        self.user = user
+
+    def get_queryset(self):
+        if self.user.is_superuser:
+            return self.model.objects.all()
+        else:
+            return self.model.objects.none()
+
+    def can_read(self, obj):
+        return self.user.is_superuser
+
+    def can_add(self, data):
+        return self.user.is_superuser
+
+    def can_change(self, obj, data):
+        return self.user.is_superuser
+
+    def can_write(self, obj, data):
+        # Alias for change.
+        return self.can_change(obj, data)
+
+    def can_admin(self, obj, data):
+        # Alias for can_change.  Can be overridden if admin vs. user change
+        # permissions need to be different.
+        return self.can_change(obj, data)
+
+    def can_delete(self, obj):
+        return self.user.is_superuser
+
+    def can_attach(self, obj, sub_obj, relationship, data,
+                   skip_sub_obj_read_check=False):
+        if skip_sub_obj_read_check:
+            return self.can_change(obj, None)
+        else:
+            return bool(self.can_change(obj, None) and
+                        check_user_access(self.user, type(sub_obj), 'read',
+                                          sub_obj))
+
+    def can_unattach(self, obj, sub_obj, relationship):
+        return self.can_change(obj, None)
+
+class UserAccess(BaseAccess):
+
+    model = User
+
+    def get_queryset(self):
+        # I can see user records when I'm a superuser, I'm that user, I'm
+        # their org admin, or I'm on a team with that user.
+        if self.user.is_superuser:
+            return self.model.objects.all()
+        return self.model.objects.filter(is_active=True).filter(
+            Q(pk=self.user.pk) |
+            Q(organizations__in=self.user.admin_of_organizations.all()) |
+            Q(teams__in=self.request.user.teams.all())
+        ).distinct()
+
+    def can_read(self, obj):
+         # A user can be read if they are on the same team or can be changed.
+         matching_teams = self.user.teams.filter(users__in=[self.user]).count()
+         return bool(matching_teams or self.can_change(obj, None))
+
+    def can_add(self, data):
+        # TODO: reuse. make helper functions like "is user an org admin"
+        # apply throughout permissions code
+        return bool(self.user.is_superuser or
+                    self.user.admin_of_organizations.count())
+
+    def can_change(self, obj, data):
+        # A user can be changed if they are themselves, or by org admins or
+        # superusers.
+        if self.user == obj:
+            return 'partial'
+        return bool(self.user.is_superuser or 
+                    obj.organizations.filter(admins__in=[self.user]).count())
+
+    def can_delete(self, obj):
+        return bool(self.user.is_superuser or 
+                    obj.organizations.filter(admins__in=[self.user]).count())
+
+class OrganizationAccess(BaseAccess):
+
+    model = Organization
+
+    def can_read(self, obj):
+        return bool(self.can_change(obj, None) or
+                    self.user in obj.users.all())
+
+    def can_change(self, obj, data):
+        return bool(self.user.is_superuser or
+                    obj.created_by == self.user or
+                    self.user in obj.admins.all())
+
+    def can_delete(self, obj):
+        return self.can_change(obj, None)
+
+class InventoryAccess(BaseAccess):
+
+    model = Inventory
+
+    def _has_permission_types(self, obj, allowed):
+        if self.user.is_superuser:
+            return True
+        by_org_admin = obj.organization.admins.filter(pk = self.user.pk).count()
+        by_team_permission = obj.permissions.filter(
+            team__in = self.user.teams.all(),
+            permission_type__in = allowed
+        ).count()
+        by_user_permission = obj.permissions.filter(
+            user = self.user,
+            permission_type__in = allowed
+        ).count()
+
+        result = (by_org_admin + by_team_permission + by_user_permission)
+        return result > 0
+
+    def _has_any_inventory_permission_types(self, allowed):
+        '''
+        rather than checking for a permission on a specific inventory, return whether we have
+        permissions on any inventory.  This is primarily used to decide if the user can create
+        host or group objects
+        '''
+
+        if self.user.is_superuser:
+            return True
+        by_org_admin = self.user.organizations.filter(
+            admins__in = [ self.user ]
+        ).count()
+        by_team_permission = Permission.objects.filter(
+            team__in = self.user.teams.all(),
+            permission_type__in = allowed
+        ).count()
+        by_user_permission = self.user.permissions.filter(
+            permission_type__in = allowed
+        ).count()
+
+        result = (by_org_admin + by_team_permission + by_user_permission)
+        return result > 0
+
+    def can_read(self, obj):
+        return self._has_permission_types(obj, PERMISSION_TYPES_ALLOWING_INVENTORY_READ)
+
+    def can_add(self, data):
+        if not 'organization' in data:
+            return True
+        if self.user.is_superuser:
+            return True
+        if not self.user.is_superuser:
+            org = Organization.objects.get(pk=data['organization'])
+            if self.user in org.admins.all():
+                return True
+        return False
+
+    def can_change(self, obj, data):
+        return self._has_permission_types(obj, PERMISSION_TYPES_ALLOWING_INVENTORY_WRITE)
+
+    def can_admin(self, obj, data):
+        return self._has_permission_types(obj, PERMISSION_TYPES_ALLOWING_INVENTORY_ADMIN)
+
+    def can_delete(self, obj):
+        return self._has_permission_types(obj, PERMISSION_TYPES_ALLOWING_INVENTORY_ADMIN)
+
+    def can_attach(self, obj, sub_obj, relationship, data,
+                   skip_sub_obj_read_check=False):
+        ''' whether you can add sub_obj to obj using the relationship type in a subobject view '''
+        #if not sub_obj.can_user_read(user, sub_obj):
+        if sub_obj and not skip_sub_obj_read_check:
+            if not check_user_access(self.user, type(sub_obj), 'read', sub_obj):
+                return False
+        return self._has_permission_types(obj, PERMISSION_TYPES_ALLOWING_INVENTORY_WRITE)
+
+    def can_unattach(self, obj, sub_obj, relationship):
+        return self._has_permission_types(obj, PERMISSION_TYPES_ALLOWING_INVENTORY_WRITE)
+
+class HostAccess(BaseAccess):
+
+    model = Host
+
+    def can_read(self, obj):
+        return check_user_access(self.user, Inventory, 'read', obj.inventory)
+
+    def can_add(self, data):
+        if not 'inventory' in data:
+            return False
+        inventory = Inventory.objects.get(pk=data['inventory'])
+        # Checks for admin or change permission on inventory.
+        return check_user_access(self.user, Inventory, 'change', inventory, None)
+
+    def can_change(self, obj, data):
+        # Checks for admin or change permission on inventory, controls whether
+        # the user can edit variable data.
+        return check_user_access(self.user, Inventory, 'change', obj.inventory, None)
+
+class GroupAccess(BaseAccess):
+
+    model = Group
+
+    def can_read(self, obj):
+        return check_user_access(self.user, Inventory, 'read', obj.inventory)
+
+    def can_add(self, data):
+        if not 'inventory' in data:
+            return False
+        inventory = Inventory.objects.get(pk=data['inventory'])
+        # Checks for admin or change permission on inventory.
+        return check_user_access(self.user, Inventory, 'change', inventory, None)
+
+    def can_change(self, obj, data):
+        # Checks for admin or change permission on inventory, controls whether
+        # the user can attach subgroups or edit variable data.
+        return check_user_access(self.user, Inventory, 'change', obj.inventory, None)
+
+class CredentialAccess(BaseAccess):
+
+    model = Credential
+
+    def can_read(self, obj):
+        return self.can_change(obj, None)
+
+    def can_add(self, data):
+        if self.user.is_superuser:
+            return True
+        if 'user' in data:
+            user_obj = User.objects.get(pk=data['user'])
+            return check_user_access(self.user, User, 'change', user_obj, None)
+        if 'team' in data:
+            team_obj = Team.objects.get(pk=data['team'])
+            return check_user_access(self.user, Team, 'change', team_obj, None)
+
+    def can_change(self, obj, data):
+        if self.user.is_superuser:
+            return True
+        if self.user == obj.user:
+            return True
+        if obj.user:
+            if (obj.user.organizations.filter(admins__in = [self.user]).count()):
+                return True
+        if obj.team:
+            if self.user in obj.team.organization.admins.all():
+                return True
+        return False
+
+    def can_delete(self, obj):
+        if obj.user is None and obj.team is None:
+            # unassociated credentials may be marked deleted by anyone
+            return True
+        return self.can_change(obj, None)
+
+class TeamAccess(BaseAccess):
+
+    model = Team
+
+    def can_add(self, data):
+        if self.user.is_superuser:
+            return True
+        if Organization.objects.filter(admins__in = [self.user]).count():
+            # team assignment to organizations is handled elsewhere, this just creates
+            # a blank team
+            return True
+        return False
+
+    def can_read(self, obj):
+        if self.can_change(obj, None):
+            return True
+        if obj.users.filter(pk__in = [ self.user.pk ]).count():
+            return True
+        return False
+
+    def can_change(self, obj, data):
+        # FIXME -- audit when this is called explicitly, if any
+        if self.user.is_superuser:
+            return True
+        if self.user in obj.organization.admins.all():
+            return True
+        return False
+
+    def can_delete(self, obj):
+        return self.can_change(obj, None)
+
+class ProjectAccess(BaseAccess):
+
+    model = Project
+
+    def can_read(self, obj):
+        if self.can_change(obj, None):
+            return True
+        # and also if I happen to be on a team inside the project
+        # FIXME: add this too
+        return False
+
+    def can_change(self, obj, data):
+        if self.user.is_superuser:
+            return True
+        if obj.created_by == self.user:
+            return True
+        organizations = Organization.objects.filter(admins__in = [ self.user ], projects__in = [ obj ])
+        for org in organizations:
+            if org in project.organizations():
+                return True
+        return False
+
+    def can_delete(self, obj):
+        return self.can_change(obj, None)
+
+class PermissionAccess(BaseAccess):
+
+    model = Permission
+
+    def can_read(self, obj):
+        # a permission can be seen by the assigned user or team
+        # or anyone who can administrate that permission
+        if obj.user and obj.user == self.user:
+            return True
+        if obj.team and obj.team.users.filter(pk = self.user.pk).count() > 0:
+            return True
+        return self.can_change(obj, None)
+
+    def can_change(self, obj, data):
+        if self.user.is_superuser:
+            return True
+        # a permission can be administrated by a super
+        # or if a user permission, that an admin of a user's organization
+        # or if a team permission, an admin of that team's organization
+        if obj.user and obj.user.organizations.filter(admins__in = [self.user]).count() > 0:
+            return True
+        if obj.team and obj.team.organization.admins.filter(user=self.user).count() > 0:
+            return True
+        return False
+
+    def can_delete(self, obj):
+        return self.can_change(obj, None)
+
+class JobTemplateAccess(BaseAccess):
+
+    model = JobTemplate
+
+    def get_queryset(self):
+        ''' 
+        I can see job templates when I am a superuser, or I am an admin of the
+        project's orgs, or if I'm in a team on the project.  This does not mean
+        I would be able to launch a job from the template or edit the template.
+        '''
+        qs = self.model.objects.all()
+        if self.user.is_superuser:
+            return qs.all()
+        return qs.filter(active=True).filter(
+            Q(project__organizations__admins__in=[self.user]) |
+            Q(project__teams__users__in=[self.user])
+        ).distinct()
+
+    def can_read(self, obj):
+        # you can only see the job templates that you have permission to launch.
+        data = dict(
+            inventory = obj.inventory.pk,
+            project = obj.project.pk,
+            job_type = obj.job_type
+        )
+        return self.can_add(data)
+
+    def can_add(self, data):
+        ''' 
+        a user can create a job template if they are a superuser, an org admin of any org
+        that the project is a member, or if they have user or team based permissions tying
+        the project to the inventory source for the given action.
+   
+        users who are able to create deploy jobs can also make check (dry run) jobs
+        '''
+
+        if self.user.is_superuser:
+            return True
+        if not data or '_method' in data:  # FIXME: So the browseable API will work?
+            return True
+        project = Project.objects.get(pk=data['project'])
+        inventory = Inventory.objects.get(pk=data['inventory'])
+
+        admin_of_orgs = project.organizations.filter(admins__in = [ self.user ])
+        if admin_of_orgs.count() > 0:
+            return True
+        job_type = data['job_type']
+
+        has_launch_permission = False
+        user_permissions = Permission.objects.filter(inventory=inventory, project=project, user=self.user)
+        for perm in user_permissions:
+            if job_type == PERM_INVENTORY_CHECK:
+                # if you have run permissions, you can also create check jobs
+                has_launch_permission = True
+            elif job_type == PERM_INVENTORY_DEPLOY and perm.permission_type == PERM_INVENTORY_DEPLOY:
+                # you need explicit run permissions to make run jobs
+                has_launch_permission = True
+        team_permissions = Permission.objects.filter(inventory=inventory, project=project, team__users__in = [self.user])
+        for perm in team_permissions:
+            if job_type == PERM_INVENTORY_CHECK:
+                # if you have run permissions, you can also create check jobs
+                has_launch_permission = True
+            elif job_type == PERM_INVENTORY_DEPLOY and perm.permission_type == PERM_INVENTORY_DEPLOY:
+                # you need explicit run permissions to make run jobs
+                has_launch_permission = True
+
+        if not has_launch_permission:
+            return False
+
+        # make sure user owns the credentials they are using
+        if data.has_key('credential'):
+            has_credential = False
+            credential = Credential.objects.get(pk=data['credential'])
+            if credential.team and credential.team.users.filter(id = self.user.pk).count():
+               has_credential = True
+            if credential.user and credential.user == self.user:
+               has_credential = True
+            if not has_credential:
+               return False
+
+        # shouldn't really matter with permissions given, but make sure the user
+        # is also currently on the team in case they were added a per-user permission and then removed
+        # from the project.
+        if project.teams.filter(users__in = [ self.user ]).count():
+            return False
+
+        return True
+
+    def can_change(self, obj, data):
+        '''
+        '''
+        return self.user.is_superuser # FIXME
+
+class JobAccess(BaseAccess):
+
+    model = Job
+
+    def can_change(self, obj, data):
+        return self.user.is_superuser and obj.status == 'new'
+
+    def can_start(self, obj):
+        return False # FIXME
+
+    def can_cancel(self, obj):
+        return False # FIXME
+
+class JobHostSummaryAccess(BaseAccess):
+
+    model = JobHostSummary
+
+class JobEventAccess(BaseAccess):
+
+    model = JobEvent
+
+register_access(User, UserAccess)
+register_access(Organization, OrganizationAccess)
+register_access(Inventory, InventoryAccess)
+register_access(Host, HostAccess)
+register_access(Group, GroupAccess)
+register_access(Credential, CredentialAccess)
+register_access(Team, TeamAccess)
+register_access(Project, ProjectAccess)
+register_access(Permission, PermissionAccess)
+register_access(JobTemplate, JobTemplateAccess)
+register_access(Job, JobAccess)
+register_access(JobHostSummary, JobHostSummaryAccess)
+register_access(JobEvent, JobEventAccess)

awx/main/admin.py

@@ -0,0 +1,370 @@
+# Copyright (c) 2013 AnsibleWorks, Inc.
+# All Rights Reserved.
+
+import json
+import urllib
+
+from django.conf.urls import *
+from django.contrib import admin
+from django.contrib.admin.util import unquote
+from django.contrib import messages
+from django.core.urlresolvers import reverse
+from django.http import HttpResponseRedirect
+from django.utils.timezone import now
+from django.utils.translation import ugettext_lazy as _
+from django.contrib.auth.models import User
+from django.contrib.auth.admin import UserAdmin
+
+from awx.main.compat import format_html
+from awx.main.models import *
+from awx.main.forms import *
+
+
+class UserAdmin(UserAdmin):
+    fieldsets = (
+        (None, {'fields': ('username', 'password')}),
+        (_('Personal info'), {'fields': ('first_name', 'last_name', 'email')}),
+        (_('Permissions'), {'fields': ('is_active', 'is_staff', 'is_superuser')}),
+        (_('Important dates'), {'fields': ('last_login', 'date_joined')}),
+    )
+    readonly_fields = ('last_login', 'date_joined')
+    list_display = ('username', 'email', 'first_name', 'last_name', 'is_staff')
+    list_filter = ('is_staff', 'is_superuser', 'is_active', 'groups')
+    search_fields = ('username', 'first_name', 'last_name', 'email')
+    ordering = ('username',)
+
+try:
+    admin.site.unregister(User)
+except admin.site.NotRegistered:
+    pass
+admin.site.register(User, UserAdmin)
+
+# FIXME: Hide auth.Group admin
+
+class BaseModelAdmin(admin.ModelAdmin):
+
+    def save_model(self, request, obj, form, change):
+        # Automatically set created_by when saved from the admin.
+        # FIXME: Doesn't handle inline model instances yet.
+        if hasattr(obj, 'created_by') and obj.created_by is None:
+            obj.created_by = request.user
+        return super(BaseModelAdmin, self).save_model(request, obj, form, change)
+
+class OrganizationAdmin(BaseModelAdmin):
+
+    list_display = ('name', 'description', 'active')
+    list_filter = ('active', 'tags')
+    fieldsets = (
+        (None, {'fields': (('name', 'active'), 'description',)}),
+        (_('Members'), {'fields': ('users', 'admins',)}),
+        (_('Projects'), {'fields': ('projects',)}),
+        (_('Tags'), {'fields': ('tags',)}),
+        (_('Audit'), {'fields': ('created', 'created_by',)}),
+    )
+    readonly_fields = ('created', 'created_by')
+    filter_horizontal = ('users', 'admins', 'projects')
+
+class InventoryHostInline(admin.StackedInline):
+    
+    model = Host
+    extra = 0
+    fields = ('name', 'description', 'active', 'tags')
+
+class InventoryGroupInline(admin.StackedInline):
+
+    model = Group
+    extra = 0
+    fields = ('name', 'description', 'active', 'parents', 'hosts', 'tags')
+    filter_horizontal = ('parents', 'hosts')
+
+class InventoryAdmin(BaseModelAdmin):
+
+    list_display = ('name', 'organization', 'description', 'active')
+    list_filter = ('organization', 'active')
+    form = InventoryAdminForm
+    fieldsets = (
+        (None, {'fields': (('name', 'active'), 'organization', 'description',
+                           'variables')}),
+        (_('Tags'), {'fields': ('tags',)}),
+        (_('Audit'), {'fields': ('created', 'created_by',)}),
+    )
+    readonly_fields = ('created', 'created_by')
+    inlines = [InventoryHostInline, InventoryGroupInline]
+
+class JobHostSummaryInline(admin.TabularInline):
+
+    model = JobHostSummary
+    extra = 0
+    can_delete = False
+
+    def has_add_permission(self, request):
+        return False
+
+class JobEventInline(admin.StackedInline):
+
+    model = JobEvent
+    extra = 0
+    can_delete = False
+
+    def has_add_permission(self, request):
+        return False
+
+    def get_event_data_display(self, obj):
+        return format_html('<pre class="json-display">{0}</pre>',
+                           json.dumps(obj.event_data, indent=4))
+    get_event_data_display.short_description = _('Event data')
+    get_event_data_display.allow_tags = True
+
+class JobHostSummaryInlineForHost(JobHostSummaryInline):
+
+    fields = ('job', 'changed', 'dark', 'failures', 'ok', 'processed',
+              'skipped', 'failed')
+    readonly_fields = ('job', 'changed', 'dark', 'failures', 'ok', 'processed',
+                       'skipped', 'failed')
+
+class JobEventInlineForHost(JobEventInline):
+
+    fields = ('job', 'created', 'event', 'get_event_data_display')
+    readonly_fields = ('job', 'created', 'event', 'get_event_data_display')
+
+class HostAdmin(BaseModelAdmin):
+
+    list_display = ('name', 'inventory', 'description', 'active')
+    list_filter = ('inventory', 'active')
+    form = HostAdminForm
+    fieldsets = (
+        (None, {'fields': (('name', 'active'), 'inventory', 'description',
+                           'variables',
+        )}),
+        (_('Tags'), {'fields': ('tags',)}),
+        (_('Audit'), {'fields': ('created', 'created_by',)}),
+    )
+    readonly_fields = ('created', 'created_by')
+    # FIXME: Edit reverse of many to many for groups.
+    inlines = [JobHostSummaryInlineForHost, JobEventInlineForHost]
+
+class GroupAdmin(BaseModelAdmin):
+
+    list_display = ('name', 'description', 'active')
+    form = GroupAdminForm
+    fieldsets = (
+        (None, {'fields': (('name', 'active'), 'inventory', 'description',
+                            'parents', 'variables')}),
+        (_('Tags'), {'fields': ('tags',)}),
+        (_('Audit'), {'fields': ('created', 'created_by',)}),
+    )
+    readonly_fields = ('created', 'created_by')
+    filter_horizontal = ('parents', 'hosts')
+
+class CredentialAdmin(BaseModelAdmin):
+
+    fieldsets = (
+        (None, {'fields': (('name', 'active'), ('user', 'team'), 'description')}),
+        (_('Auth Info'), {'fields': (('ssh_username', 'ssh_password'),
+                                     'ssh_key_data', 'ssh_key_unlock',
+                                     ('sudo_username', 'sudo_password'))}),
+        (_('Tags'), {'fields': ('tags',)}),
+        (_('Audit'), {'fields': ('created', 'created_by',)}),
+    )
+    readonly_fields = ('created', 'created_by')
+
+class TeamAdmin(BaseModelAdmin):
+
+    list_display = ('name', 'description', 'active')
+    filter_horizontal = ('projects', 'users')
+
+class ProjectAdmin(BaseModelAdmin):
+
+    list_display = ('name', 'description', 'active')
+    fieldsets = (
+        (None, {'fields': (('name', 'active'), 'description', 'local_path',
+                            'get_playbooks_display')}),
+        (_('Tags'), {'fields': ('tags',)}),
+        (_('Audit'), {'fields': ('created', 'created_by',)}),
+    )
+    readonly_fields = ('created', 'created_by', 'get_playbooks_display')
+    form = ProjectAdminForm
+
+    def get_playbooks_display(self, obj):
+        return '<br/>'.join([format_html('{0}', x) for x in
+                             obj.playbooks])
+    get_playbooks_display.short_description = _('Playbooks')
+    get_playbooks_display.allow_tags = True
+
+class PermissionAdmin(BaseModelAdmin):
+
+    list_display = ('name', 'description', 'active')
+
+class JobTemplateAdmin(BaseModelAdmin):
+
+    list_display = ('name', 'description', 'active', 'get_create_link_display',
+                    'get_jobs_link_display')
+    fieldsets = (
+        (None, {'fields': ('name', 'active', 'description',
+                           'get_create_link_display', 'get_jobs_link_display')}),
+        (_('Job Parameters'), {'fields': ('inventory', 'project', 'playbook',
+                                          'credential', 'job_type')}),
+        (_('More Options'), {'fields': ('forks', 'limit', 'verbosity',
+                             'extra_vars', 'job_tags', 'host_config_key'),
+                             'classes': ('collapse',)}),
+        (_('Tags'), {'fields': ('tags',)}),
+        (_('Audit'), {'fields': ('created', 'created_by',)}),
+    )
+    readonly_fields = ('created', 'created_by', 'get_create_link_display',
+                       'get_jobs_link_display')
+    form = JobTemplateAdminForm
+
+    def get_create_link_display(self, obj):
+        if not obj or not obj.pk:
+            return ''
+        info = Job._meta.app_label, Job._meta.module_name
+        create_url = reverse('admin:%s_%s_add' % info,
+                             current_app=self.admin_site.name)
+        create_opts = {
+            'job_template': obj.pk,
+            'job_type': obj.job_type,
+            'description': obj.description,
+            'name': '%s %s' % (obj.name, now().isoformat()),
+        }
+        if obj.inventory:
+            create_opts['inventory'] = obj.inventory.pk
+        if obj.project:
+            create_opts['project'] = obj.project.pk
+        if obj.playbook:
+            create_opts['playbook'] = obj.playbook
+        if obj.credential:
+            create_opts['credential'] = obj.credential.pk
+        if obj.forks:
+            create_opts['forks'] = obj.forks
+        if obj.limit:
+            create_opts['limit'] = obj.limit
+        if obj.verbosity:
+            create_opts['verbosity'] = obj.verbosity
+        if obj.extra_vars:
+            create_opts['extra_vars'] = obj.extra_vars
+        if obj.job_tags:
+            create_opts['job_tags'] = obj.job_tags
+        create_url += '?%s' % urllib.urlencode(create_opts)
+        return format_html('<a href="{0}">{1}</a>', create_url, 'Create Job')
+    get_create_link_display.short_description = _('Create Job')
+    get_create_link_display.allow_tags = True
+
+    def get_jobs_link_display(self, obj):
+        if not obj or not obj.pk:
+            return ''
+        info = Job._meta.app_label, Job._meta.module_name
+        jobs_url = reverse('admin:%s_%s_changelist' % info,
+                           current_app=self.admin_site.name)
+        jobs_url += '?job_template__id__exact=%d' % obj.pk
+        return format_html('<a href="{0}">{1}</a>', jobs_url, 'View Jobs')
+    get_jobs_link_display.short_description = _('View Jobs')
+    get_jobs_link_display.allow_tags = True
+
+class JobHostSummaryInlineForJob(JobHostSummaryInline):
+
+    fields = ('host', 'changed', 'dark', 'failures', 'ok', 'processed',
+              'skipped', 'failed')
+    readonly_fields = ('host', 'changed', 'dark', 'failures', 'ok',
+                       'processed', 'skipped', 'failed')
+
+class JobEventInlineForJob(JobEventInline):
+
+    fields = ('created', 'event', 'get_event_data_display', 'failed', 'host')
+    readonly_fields = ('created', 'event', 'get_event_data_display', 'failed',
+                       'host')
+
+class JobAdmin(BaseModelAdmin):
+
+    list_display = ('name', 'job_template', 'project', 'playbook', 'status')
+    list_filter = ('status',)
+    fieldsets = (
+        (None, {'fields': ('name', 'job_template', 'description')}),
+        (_('Job Parameters'), {'fields': ('inventory', 'project', 'playbook',
+                                          'credential', 'job_type')}),
+        (_('More Options'), {'fields': ('forks', 'limit', 'verbosity',
+                                        'extra_vars', 'job_tags'),
+                             'classes': ('collapse',)}),
+        (_('Start Job'), {'fields': ('start_job', 'ssh_password',
+                                     'sudo_password', 'ssh_key_unlock')}),
+        (_('Tags'), {'fields': ('tags',)}),
+        (_('Audit'), {'fields': ('created', 'created_by',)}),
+        (_('Job Status'), {'fields': (('status', 'failed', 'cancel_job'),
+                                      'get_result_stdout_display',
+                                      'get_result_traceback_display',
+                                      'celery_task_id')}),
+    )
+    readonly_fields = ('status', 'failed', 'get_job_template_display',
+                       'get_result_stdout_display',
+                       'get_result_traceback_display', 'celery_task_id',
+                       'created', 'created_by')
+    form = JobAdminForm
+    inlines = [JobHostSummaryInlineForJob, JobEventInlineForJob]
+
+    def get_readonly_fields(self, request, obj=None):
+        ro_fields = list(super(JobAdmin, self).get_readonly_fields(request, obj))
+        if obj and obj.pk and obj.status != 'new':
+            ro_fields.extend(['name', 'description', 'job_template',
+                              'inventory', 'project', 'playbook', 'credential',
+                              'job_type', 'forks', 'limit',
+                              'verbosity', 'extra_vars', 'job_tags'])
+        return ro_fields
+
+    def get_fieldsets(self, request, obj=None):
+        fsets = list(super(JobAdmin, self).get_fieldsets(request, obj))
+        if not obj or not obj.pk or obj.status == 'new':
+            fsets = [fs for fs in fsets if
+                     'created' not in fs[1]['fields'] and
+                     'celery_task_id' not in fs[1]['fields']]
+        if not obj or (obj and obj.pk and not obj.can_start):
+            fsets = [fs for fs in fsets if 'start_job' not in fs[1]['fields']]
+        if not obj or (obj and obj.pk and not obj.can_cancel):
+            for fs in fsets:
+                if 'celery_task_id' in fs[1]['fields']:
+                    fs[1]['fields'] = ('status', 'get_result_stdout_display',
+                                       'get_result_traceback_display',
+                                       'celery_task_id')
+        return fsets
+
+    def get_inline_instances(self, request, obj=None):
+        if obj and obj.pk and obj.status != 'new':
+            return super(JobAdmin, self).get_inline_instances(request, obj)
+        else:
+            return []
+
+    def get_job_template_display(self, obj):
+        if obj.job_template:
+            info = JobTemplate._meta.app_label, JobTemplate._meta.module_name
+            job_template_url = reverse('admin:%s_%s_change' % info,
+                                       args=(obj.job_template.pk,),
+                                       current_app=self.admin_site.name)
+            return format_html('<a href="{0}">{1}</a>', job_template_url,
+                               obj.job_template)
+        else:
+            return _('(None)')
+    get_job_template_display.short_description = _('Job template')
+    get_job_template_display.allow_tags = True
+
+    def get_result_stdout_display(self, obj):
+        return format_html('<pre class="result-display">{0}</pre>',
+                           obj.result_stdout or ' ')
+    get_result_stdout_display.short_description = _('Stdout')
+    get_result_stdout_display.allow_tags = True
+
+    def get_result_traceback_display(self, obj):
+        return format_html('<pre class="result-display">{0}</pre>',
+                           obj.result_traceback or ' ')
+    get_result_traceback_display.short_description = _('Traceback')
+    get_result_traceback_display.allow_tags = True
+
+admin.site.register(Organization, OrganizationAdmin)
+admin.site.register(Inventory, InventoryAdmin)
+#admin.site.register(Tag, TagAdmin)
+#admin.site.register(AuditTrail, AuditTrailAdmin)
+admin.site.register(Host, HostAdmin)
+admin.site.register(Group, GroupAdmin)
+#admin.site.register(VariableData, VariableDataAdmin)
+admin.site.register(Team, TeamAdmin)
+admin.site.register(Project, ProjectAdmin)
+admin.site.register(Credential, CredentialAdmin)
+admin.site.register(JobTemplate, JobTemplateAdmin)
+admin.site.register(Job, JobAdmin)

awx/main/authentication.py

@@ -0,0 +1,29 @@
+# Django REST Framework
+from rest_framework import authentication
+from rest_framework import exceptions
+
+# AWX
+from awx.main.models import Job
+
+class JobCallbackAuthentication(authentication.BaseAuthentication):
+    '''
+    Custom authentication used for views accessed by the inventory and callback
+    scripts when running a job.
+    '''
+    
+    def authenticate(self, request):
+        auth = authentication.get_authorization_header(request).split()
+        if len(auth) != 2 or auth[0].lower() != 'token' or '-' not in auth[1]:
+            return None
+        job_id, job_key = auth[1].split('-', 1)
+        try:
+            job = Job.objects.get(pk=job_id, status='running')
+        except Job.DoesNotExist:
+            return None
+        token = job.callback_auth_token
+        if auth[1] != token:
+            raise exceptions.AuthenticationFailed('Invalid job callback token')
+        return (None, token)
+
+    def authenticate_header(self, request):
+        return 'Token'

awx/main/base_views.py

@@ -0,0 +1,245 @@
+# Copyright (c) 2013 AnsibleWorks, Inc.
+# All Rights Reserved.
+
+
+from django.http import HttpResponse, Http404
+from django.views.decorators.csrf import csrf_exempt
+from awx.main.models import *
+from django.contrib.auth.models import User
+from awx.main.serializers import *
+from awx.main.rbac import *
+from awx.main.access import *
+from rest_framework.exceptions import PermissionDenied
+from rest_framework import mixins
+from rest_framework import generics
+from rest_framework import permissions
+from rest_framework.response import Response
+from rest_framework import status
+import exceptions
+import datetime
+import json as python_json
+
+# FIXME: machinery for auto-adding audit trail logs to all CREATE/EDITS
+
+class BaseList(generics.ListCreateAPIView):
+
+    permission_classes = (CustomRbac,)
+
+    # Subclasses should define:
+    #   model = ModelClass
+    #   serializer_class = SerializerClass
+
+    def post(self, request, *args, **kwargs):
+        # FIXME: Should  inherit from generics.ListAPIView if not postable.
+        postable = getattr(self.__class__, 'postable', True)
+        if not postable:
+            return Response(status=status.HTTP_405_METHOD_NOT_ALLOWED)
+        return super(BaseList, self).post(request, *args, **kwargs)
+
+    # NOTE: Moved filtering from get_queryset into custom filter backend.
+
+class BaseSubList(BaseList):
+
+    ''' used for subcollections with an overriden post '''
+
+    # Subclasses should define at least:
+    #   model = ModelClass
+    #   serializer_class = SerializerClass
+    #   parent_model = ModelClass
+    #   relationship = 'rel_name_from_parent_to_model'
+    # And optionally:
+    #   postable = True/False
+    #   inject_primary_key_on_post_as = 'field_on_model_referring_to_parent'
+    #   severable = True/False
+
+    def post(self, request, *args, **kwargs):
+
+        # decide whether to return 201 with data (new object) or 204 (just associated)
+        created = False
+        ser = None
+
+        postable = getattr(self.__class__, 'postable', False)
+        if not postable:
+            return Response(status=status.HTTP_405_METHOD_NOT_ALLOWED)
+
+        # Make a copy of the data provided (since it's readonly) in order to
+        # inject additional data.
+        if hasattr(request.DATA, 'dict'):
+            data = request.DATA.dict()
+        else:
+            data = request.DATA
+        parent_id = kwargs['pk']
+        sub_id = data.get('id', None)
+        main = self.__class__.parent_model.objects.get(pk=parent_id)
+        severable = getattr(self.__class__, 'severable', True)
+
+        subs = None
+
+        if sub_id:
+            subs = self.__class__.model.objects.filter(pk=sub_id)
+        else:
+            if 'disassociate' in data:
+                raise PermissionDenied() # ID is required to disassociate
+            else:
+
+                # this is a little tricky and a little manual
+                # the object ID was not specified, so it probably doesn't exist in the DB yet.
+                # we want to see if we can create it.  The URL may choose to inject it's primary key into the object
+                # because we are posting to a subcollection. Use all the normal access control mechanisms.
+
+                inject_primary_key = getattr(self.__class__, 'inject_primary_key_on_post_as', None)
+
+                if inject_primary_key is not None:
+
+                    # add the key to the post data using the pk from the URL
+                    data[inject_primary_key] = kwargs['pk']
+
+                    # attempt to deserialize the object
+                    ser = self.__class__.serializer_class(data=data)
+                    if not ser.is_valid():
+                        return Response(status=status.HTTP_400_BAD_REQUEST, data=ser.errors)
+
+                    if not check_user_access(request.user, self.model, 'add', ser.init_data):
+                        raise PermissionDenied()
+
+                    # save the object through the serializer, reload and returned the saved object deserialized
+                    obj = ser.save()
+                    ser = self.__class__.serializer_class(obj)
+
+                    # now make sure we could have already attached the two together.  If we could not have, raise an exception
+                    # such that the transaction does not commit.
+
+                    if main == obj:
+                        # no attaching to yourself
+                        raise PermissionDenied()
+
+                    if self.__class__.parent_model != User:
+
+                        # FIXME: refactor into smaller functions
+
+                        if obj.__class__ in [ User]:
+                            if self.__class__.parent_model == Organization:
+                                # user can't inject an organization because it's not part of the user
+                                # model so we have to cheat here.  This may happen for other cases
+                                # where we are creating a user immediately on a subcollection
+                                # when that user does not already exist.  Relations will work post-save.
+                                organization = Organization.objects.get(pk=data[inject_primary_key])
+                                if not request.user.is_superuser:
+                                    if not organization.admins.filter(pk=request.user.pk).count() > 0:
+                                        raise PermissionDenied()
+                            else:
+                                raise exceptions.NotImplementedError()
+                        else:
+                            if not check_user_access(request.user, type(obj), 'read', obj):
+                                raise PermissionDenied()
+                        # If we just created a new object, we may not yet be able to read it because it's not yet associated with its parent model.
+                        if not check_user_access(request.user, self.parent_model, 'attach', main, obj, self.relationship, data, skip_sub_obj_read_check=True):
+                            raise PermissionDenied()
+
+                        # FIXME: manual attachment code neccessary for users here, move this into the main code.
+                        # this is because users don't have FKs into what they are attaching. (also refactor)
+
+                        if self.__class__.parent_model == Organization:
+                             organization = Organization.objects.get(pk=data[inject_primary_key])
+                             import awx.main.views
+                             if self.__class__ == awx.main.views.OrganizationUsersList:
+                                 organization.users.add(obj)
+                             elif self.__class__ == awx.main.views.OrganizationAdminsList:
+                                 organization.admins.add(obj)
+
+                    else:
+                        if not check_user_access(request.user, type(obj), 'read', obj):
+                            raise PermissionDenied()
+                        # FIXME: should generalize this
+                        if not check_user_access(request.user, self.parent_model, 'attach', main, obj, self.relationship, data):
+                            raise PermissionDenied()
+
+                    # why are we returning here?
+                    # return Response(status=status.HTTP_201_CREATED, data=ser.data)
+                    created = True 
+                    subs = [ obj ]
+
+                else:
+
+                    # view didn't specify a way to get the pk from the URL, so not even trying
+                    return Response(status=status.HTTP_400_BAD_REQUEST, data=python_json.dumps(dict(msg='object cannot be created')))
+
+        # we didn't have to create the object, so this is just associating the two objects together now...
+        # (or disassociating them)
+
+        if len(subs) != 1:
+            return Response(status=status.HTTP_400_BAD_REQUEST)
+        sub = subs[0]
+        relationship = getattr(main, self.__class__.relationship)
+
+        if not 'disassociate' in data:
+            if not request.user.is_superuser:
+                if type(main) != User:
+                    #if not self.__class__.parent_model.can_user_attach(request.user, main, sub, self.__class__.relationship, data):
+                    if not check_user_access(request.user, self.parent_model, 'attach', main, sub, self.relationship, data):
+                        raise PermissionDenied()
+                else:
+		            #if not UserHelper.can_user_attach(request.user, main, sub, self.__class__.relationship, data):
+                    if not check_user_access(request.user, self.parent_model, 'attach', main, sub, self.relationship, data):
+                        raise PermissionDenied()
+
+            if sub not in relationship.all():
+                relationship.add(sub)
+        else:
+            if not request.user.is_superuser:
+                if type(main) != User:
+                     #if not self.__class__.parent_model.can_user_unattach(request.user, main, sub, self.__class__.relationship):
+                     if not check_user_access(request.user, self.parent_model, 'unattach', main, sub, self.relationship):
+                         raise PermissionDenied()
+                else:
+                     #if not UserHelper.can_user_unattach(request.user, main, sub, self.__class__.relationship):
+                     if not check_user_access(request.user, self.parent_model, 'unattach', main, sub, self.relationship):
+                         raise PermissionDenied()
+
+
+            if severable:
+                relationship.remove(sub)
+            else:
+                # resource is just a ForeignKey, can't remove it from the set, just set it inactive
+                sub.mark_inactive()
+
+        if created:
+            return Response(status=status.HTTP_201_CREATED, data=ser.data)
+        else:
+            return Response(status=status.HTTP_204_NO_CONTENT)
+
+
+class BaseDetail(generics.RetrieveUpdateDestroyAPIView):
+
+    def pre_save(self, obj):
+        if type(obj) not in [ User ]:
+            obj.created_by = self.request.user
+
+    def destroy(self, request, *args, **kwargs):
+        # somewhat lame that delete has to call it's own permissions check
+        obj = self.model.objects.get(pk=kwargs['pk'])
+        # FIXME: Why isn't the active check being caught earlier by RBAC?
+        if getattr(obj, 'active', True) == False:
+            raise Http404()
+        if getattr(obj, 'is_active', True) == False:
+            raise Http404()
+        #if not request.user.is_superuser and not self.delete_permissions_check(request, obj):
+        if not check_user_access(request.user, self.model, 'delete', obj):
+            raise PermissionDenied()
+        if isinstance(obj, PrimordialModel):
+            obj.mark_inactive()
+        elif type(obj) == User:
+            obj.username  = "_deleted_%s_%s" % (str(datetime.time()), obj.username)
+            obj.is_active = False
+            obj.save()
+        else:
+            raise Exception("InternalError: destroy() not implemented yet for %s" % obj)
+        return HttpResponse(status=204)
+
+    def put(self, request, *args, **kwargs):
+        self.put_filter(request, *args, **kwargs)
+        return super(BaseDetail, self).put(request, *args, **kwargs)
+
+    def put_filter(self, request, *args, **kwargs):
+        ''' scrub any fields the user cannot/should not put, based on user context.  This runs after read-only serialization filtering '''
+        pass

awx/main/compat.py

@@ -0,0 +1,23 @@
+'''
+Compability library for support of both Django 1.4.x and Django 1.5.x.
+'''
+
+try:
+    from django.utils.html import format_html
+except ImportError:
+    from django.utils.html import conditional_escape
+    from django.utils.safestring import mark_safe
+    def format_html(format_string, *args, **kwargs):
+        args_safe = map(conditional_escape, args)
+        kwargs_safe = dict([(k, conditional_escape(v)) for (k, v) in
+                            kwargs.items()])
+        return mark_safe(format_string.format(*args_safe, **kwargs_safe))
+
+try:
+    from django.utils.log import RequireDebugTrue
+except ImportError:
+    import logging
+    from django.conf import settings
+    class RequireDebugTrue(logging.Filter):
+        def filter(self, record):
+            return settings.DEBUG

awx/main/custom_filters.py

@@ -0,0 +1,43 @@
+# Copyright (c) 2013 AnsibleWorks, Inc.
+# All Rights Reserved.
+
+from rest_framework.filters import BaseFilterBackend
+from django.core.exceptions import PermissionDenied
+
+class CustomFilterBackend(object):
+
+    def filter_queryset(self, request, queryset, view):
+
+        terms = {}
+        order_by = None
+
+        # Filtering by is_active/active that was previously in BaseList.
+        qs = queryset
+        for field in queryset.model._meta.fields:
+            if field.name == 'is_active':
+                qs = qs.filter(is_active=True)
+            elif field.name == 'active':
+                qs = qs.filter(active=True)
+
+        for key, value in request.QUERY_PARAMS.items():
+
+            if key in [ 'page', 'page_size', 'format' ]:
+                continue
+
+            if key in ('order', 'order_by'):
+                order_by = value
+                continue
+
+            key2 = key
+            if key2.endswith("__int"):
+                key2 = key.replace("__int","")
+                value = int(value)
+
+            terms[key2] = value
+
+        qs = qs.filter(**terms)
+
+        if order_by:
+            qs = qs.order_by(order_by)
+
+        return qs

awx/main/forms.py

@@ -0,0 +1,159 @@
+# Copyright (c) 2013 AnsibleWorks, Inc.
+# All Rights Reserved.
+
+# Python
+import json
+
+# PyYAML
+import yaml
+
+# Django
+from django import forms
+from django.utils.translation import ugettext_lazy as _
+
+# AWX
+from awx.main.models import *
+
+EMPTY_CHOICE = ('', '---------')
+
+class PlaybookOption(object):
+
+    def __init__(self, project, playbook):
+        self.project, self.playbook = project, playbook
+
+    def __unicode__(self):
+        return self.playbook
+
+class PlaybookSelect(forms.Select):
+    '''Custom select widget for playbooks related to a project.'''
+
+    def render_option(self, selected_choices, option_value, obj):
+        opt = super(PlaybookSelect, self).render_option(selected_choices,
+                                                        option_value,
+                                                        unicode(obj))
+        # Add a class with the project ID so JS can filter the options.
+        if hasattr(obj, 'project'):
+            opt = opt.replace('">', '" class="project-%s">' % obj.project.pk)
+        return opt
+
+class ModelFormWithVariables(forms.ModelForm):
+    '''Custom model form to validate variable data.'''
+
+    def clean_variables(self):
+        value = self.cleaned_data.get('variables', '')
+        try:
+            json.loads(value.strip() or '{}')
+        except ValueError:
+            try:
+                yaml.safe_load(value)
+            except yaml.YAMLError:
+                raise forms.ValidationError('Must be valid JSON or YAML')
+        return value
+
+class InventoryAdminForm(ModelFormWithVariables):
+    '''Custom model form for Inventory.'''
+
+    class Meta:
+        model = Inventory
+
+class HostAdminForm(ModelFormWithVariables):
+    '''Custom model form for Hosts.'''
+
+    class Meta:
+        model = Host
+
+class GroupAdminForm(ModelFormWithVariables):
+    '''Custom model form for Groups.'''
+
+    class Meta:
+        model = Group
+
+class ProjectAdminForm(forms.ModelForm):
+    '''Custom admin form for Projects.'''
+
+    local_path = forms.ChoiceField(choices=[])
+
+    class Meta:
+        model = Project
+
+    def __init__(self, *args, **kwargs):
+        super(ProjectAdminForm, self).__init__(*args, **kwargs)
+        self.fields['local_path'].choices = [(x, x) for x in Project.get_local_path_choices()]
+
+class JobTemplateAdminForm(forms.ModelForm):
+    '''Custom admin form for creating/editing JobTemplates.'''
+
+    playbook = forms.ChoiceField(choices=[EMPTY_CHOICE], widget=PlaybookSelect)
+    
+    class Meta:
+        model = JobTemplate
+
+    def __init__(self, *args, **kwargs):
+        super(JobTemplateAdminForm, self).__init__(*args, **kwargs)
+        playbook_choices = []
+        for project in Project.objects.all():
+            for playbook in project.playbooks:
+                playbook_choices.append((playbook,
+                                         PlaybookOption(project, playbook)))
+        self.fields['playbook'].choices = [EMPTY_CHOICE] + playbook_choices
+
+class JobAdminForm(JobTemplateAdminForm):
+    '''Custom admin form for creating Jobs.'''
+
+    start_job = forms.BooleanField(initial=False, required=False)
+    ssh_password = forms.CharField(label=_('SSH password'), required=False)
+    sudo_password = forms.CharField(required=False)
+    ssh_key_unlock = forms.CharField(label=_('SSH key passphrase'),
+                                     required=False)
+    cancel_job = forms.BooleanField(initial=False, required=False)
+
+    class Meta:
+        model = Job
+
+    def __init__(self, *args, **kwargs):
+        super(JobAdminForm, self).__init__(*args, **kwargs)
+        if self.instance.pk and self.instance.status != 'new':
+            self.fields.pop('playbook', None)
+        if (not self.data or self.data.get('start_job', '')) and \
+                self.instance.credential and self.instance.can_start:
+            for field in self.instance.get_passwords_needed_to_start():
+                if field not in self.fields:
+                    continue
+                self.fields[field].required = True
+
+    def clean_start_job(self):
+        return self.cleaned_data.get('start_job', False)
+
+    def clean_cancel_job(self):
+        return self.cleaned_data.get('cancel_job', False)
+
+    def clean(self):
+        if self.instance.credential and self.instance.can_start:
+            for field in self.instance.get_passwords_needed_to_start():
+                if field in self.fields:
+                    self.fields[field].required = True
+        return super(JobAdminForm, self).clean()
+
+    def save(self, commit=True):
+        instance = super(JobAdminForm, self).save(commit)
+        save_m2m = getattr(self, 'save_m2m', lambda: None)
+        should_start = bool(self.cleaned_data.get('start_job', '') and
+                            instance.can_start)
+        start_opts = {}
+        for field in ('ssh_password', 'sudo_password', 'ssh_key_unlock'):
+            value = self.cleaned_data.get(field, '')
+            if value:
+                start_opts[field] = value
+        should_cancel = bool(self.cleaned_data.get('cancel_job', '') and
+                             instance.can_cancel)
+        def new_save_m2m():
+            save_m2m()
+            if should_start:
+                instance.start(**start_opts)
+            if should_cancel:
+                instance.cancel()
+        if commit:
+            new_save_m2m()
+        else:
+            self.save_m2m = new_save_m2m
+        return instance

awx/main/migrations/0001_v12b1_initial.py

@@ -0,0 +1,872 @@
+# -*- coding: utf-8 -*-
+
+# Copyright (c) 2013 AnsibleWorks, Inc.
+# All Rights Reserved.
+
+import datetime
+from south.db import db
+from south.v2 import SchemaMigration
+from django.db import models
+
+
+class Migration(SchemaMigration):
+    '''Complete initial migration for AWX 1.2-b1 release.'''
+
+    def forwards(self, orm):
+        # Adding model 'Tag'
+        db.create_table(u'main_tag', (
+            (u'id', self.gf('django.db.models.fields.AutoField')(primary_key=True)),
+            ('name', self.gf('django.db.models.fields.CharField')(max_length=512)),
+        ))
+        db.send_create_signal('main', ['Tag'])
+
+        # Adding model 'AuditTrail'
+        db.create_table(u'main_audittrail', (
+            (u'id', self.gf('django.db.models.fields.AutoField')(primary_key=True)),
+            ('resource_type', self.gf('django.db.models.fields.CharField')(max_length=64)),
+            ('modified_by', self.gf('django.db.models.fields.related.ForeignKey')(to=orm['auth.User'], null=True, on_delete=models.SET_NULL, blank=True)),
+            ('delta', self.gf('django.db.models.fields.TextField')()),
+            ('detail', self.gf('django.db.models.fields.TextField')()),
+            ('comment', self.gf('django.db.models.fields.TextField')()),
+            ('tag', self.gf('django.db.models.fields.related.ForeignKey')(to=orm['main.Tag'], null=True, on_delete=models.SET_NULL, blank=True)),
+        ))
+        db.send_create_signal('main', ['AuditTrail'])
+
+        # Adding model 'Organization'
+        db.create_table(u'main_organization', (
+            (u'id', self.gf('django.db.models.fields.AutoField')(primary_key=True)),
+            ('description', self.gf('django.db.models.fields.TextField')(default='', blank=True)),
+            ('created_by', self.gf('django.db.models.fields.related.ForeignKey')(related_name="{'class': 'organization', 'app_label': 'main'}(class)s_created", null=True, on_delete=models.SET_NULL, to=orm['auth.User'])),
+            ('created', self.gf('django.db.models.fields.DateTimeField')(auto_now_add=True, blank=True)),
+            ('active', self.gf('django.db.models.fields.BooleanField')(default=True)),
+            ('name', self.gf('django.db.models.fields.CharField')(unique=True, max_length=512)),
+        ))
+        db.send_create_signal('main', ['Organization'])
+
+        # Adding M2M table for field tags on 'Organization'
+        db.create_table(u'main_organization_tags', (
+            ('id', models.AutoField(verbose_name='ID', primary_key=True, auto_created=True)),
+            ('organization', models.ForeignKey(orm['main.organization'], null=False)),
+            ('tag', models.ForeignKey(orm['main.tag'], null=False))
+        ))
+        db.create_unique(u'main_organization_tags', ['organization_id', 'tag_id'])
+
+        # Adding M2M table for field audit_trail on 'Organization'
+        db.create_table(u'main_organization_audit_trail', (
+            ('id', models.AutoField(verbose_name='ID', primary_key=True, auto_created=True)),
+            ('organization', models.ForeignKey(orm['main.organization'], null=False)),
+            ('audittrail', models.ForeignKey(orm['main.audittrail'], null=False))
+        ))
+        db.create_unique(u'main_organization_audit_trail', ['organization_id', 'audittrail_id'])
+
+        # Adding M2M table for field users on 'Organization'
+        db.create_table(u'main_organization_users', (
+            ('id', models.AutoField(verbose_name='ID', primary_key=True, auto_created=True)),
+            ('organization', models.ForeignKey(orm['main.organization'], null=False)),
+            ('user', models.ForeignKey(orm[u'auth.user'], null=False))
+        ))
+        db.create_unique(u'main_organization_users', ['organization_id', 'user_id'])
+
+        # Adding M2M table for field admins on 'Organization'
+        db.create_table(u'main_organization_admins', (
+            ('id', models.AutoField(verbose_name='ID', primary_key=True, auto_created=True)),
+            ('organization', models.ForeignKey(orm['main.organization'], null=False)),
+            ('user', models.ForeignKey(orm[u'auth.user'], null=False))
+        ))
+        db.create_unique(u'main_organization_admins', ['organization_id', 'user_id'])
+
+        # Adding M2M table for field projects on 'Organization'
+        db.create_table(u'main_organization_projects', (
+            ('id', models.AutoField(verbose_name='ID', primary_key=True, auto_created=True)),
+            ('organization', models.ForeignKey(orm['main.organization'], null=False)),
+            ('project', models.ForeignKey(orm[u'main.project'], null=False))
+        ))
+        db.create_unique(u'main_organization_projects', ['organization_id', 'project_id'])
+
+        # Adding model 'Inventory'
+        db.create_table(u'main_inventory', (
+            (u'id', self.gf('django.db.models.fields.AutoField')(primary_key=True)),
+            ('description', self.gf('django.db.models.fields.TextField')(default='', blank=True)),
+            ('created_by', self.gf('django.db.models.fields.related.ForeignKey')(related_name="{'class': 'inventory', 'app_label': 'main'}(class)s_created", null=True, on_delete=models.SET_NULL, to=orm['auth.User'])),
+            ('created', self.gf('django.db.models.fields.DateTimeField')(auto_now_add=True, blank=True)),
+            ('active', self.gf('django.db.models.fields.BooleanField')(default=True)),
+            ('name', self.gf('django.db.models.fields.CharField')(unique=True, max_length=512)),
+            ('organization', self.gf('django.db.models.fields.related.ForeignKey')(related_name='inventories', to=orm['main.Organization'])),
+        ))
+        db.send_create_signal('main', ['Inventory'])
+
+        # Adding unique constraint on 'Inventory', fields ['name', 'organization']
+        db.create_unique(u'main_inventory', ['name', 'organization_id'])
+
+        # Adding M2M table for field tags on 'Inventory'
+        db.create_table(u'main_inventory_tags', (
+            ('id', models.AutoField(verbose_name='ID', primary_key=True, auto_created=True)),
+            ('inventory', models.ForeignKey(orm['main.inventory'], null=False)),
+            ('tag', models.ForeignKey(orm['main.tag'], null=False))
+        ))
+        db.create_unique(u'main_inventory_tags', ['inventory_id', 'tag_id'])
+
+        # Adding M2M table for field audit_trail on 'Inventory'
+        db.create_table(u'main_inventory_audit_trail', (
+            ('id', models.AutoField(verbose_name='ID', primary_key=True, auto_created=True)),
+            ('inventory', models.ForeignKey(orm['main.inventory'], null=False)),
+            ('audittrail', models.ForeignKey(orm['main.audittrail'], null=False))
+        ))
+        db.create_unique(u'main_inventory_audit_trail', ['inventory_id', 'audittrail_id'])
+
+        # Adding model 'Host'
+        db.create_table(u'main_host', (
+            (u'id', self.gf('django.db.models.fields.AutoField')(primary_key=True)),
+            ('description', self.gf('django.db.models.fields.TextField')(default='', blank=True)),
+            ('created_by', self.gf('django.db.models.fields.related.ForeignKey')(related_name="{'class': 'host', 'app_label': 'main'}(class)s_created", null=True, on_delete=models.SET_NULL, to=orm['auth.User'])),
+            ('created', self.gf('django.db.models.fields.DateTimeField')(auto_now_add=True, blank=True)),
+            ('active', self.gf('django.db.models.fields.BooleanField')(default=True)),
+            ('name', self.gf('django.db.models.fields.CharField')(max_length=512)),
+            ('variable_data', self.gf('django.db.models.fields.related.OneToOneField')(related_name='host', unique=True, on_delete=models.SET_NULL, default=None, to=orm['main.VariableData'], blank=True, null=True)),
+            ('inventory', self.gf('django.db.models.fields.related.ForeignKey')(related_name='hosts', to=orm['main.Inventory'])),
+            ('last_job', self.gf('django.db.models.fields.related.ForeignKey')(related_name='hosts_as_last_job+', on_delete=models.SET_NULL, default=None, to=orm['main.Job'], blank=True, null=True)),
+            ('last_job_host_summary', self.gf('django.db.models.fields.related.ForeignKey')(related_name='hosts_as_last_job_summary+', on_delete=models.SET_NULL, default=None, to=orm['main.JobHostSummary'], blank=True, null=True)),
+        ))
+        db.send_create_signal('main', ['Host'])
+
+        # Adding unique constraint on 'Host', fields ['name', 'inventory']
+        db.create_unique(u'main_host', ['name', 'inventory_id'])
+
+        # Adding M2M table for field tags on 'Host'
+        db.create_table(u'main_host_tags', (
+            ('id', models.AutoField(verbose_name='ID', primary_key=True, auto_created=True)),
+            ('host', models.ForeignKey(orm['main.host'], null=False)),
+            ('tag', models.ForeignKey(orm['main.tag'], null=False))
+        ))
+        db.create_unique(u'main_host_tags', ['host_id', 'tag_id'])
+
+        # Adding M2M table for field audit_trail on 'Host'
+        db.create_table(u'main_host_audit_trail', (
+            ('id', models.AutoField(verbose_name='ID', primary_key=True, auto_created=True)),
+            ('host', models.ForeignKey(orm['main.host'], null=False)),
+            ('audittrail', models.ForeignKey(orm['main.audittrail'], null=False))
+        ))
+        db.create_unique(u'main_host_audit_trail', ['host_id', 'audittrail_id'])
+
+        # Adding model 'Group'
+        db.create_table(u'main_group', (
+            (u'id', self.gf('django.db.models.fields.AutoField')(primary_key=True)),
+            ('description', self.gf('django.db.models.fields.TextField')(default='', blank=True)),
+            ('created_by', self.gf('django.db.models.fields.related.ForeignKey')(related_name="{'class': 'group', 'app_label': 'main'}(class)s_created", null=True, on_delete=models.SET_NULL, to=orm['auth.User'])),
+            ('created', self.gf('django.db.models.fields.DateTimeField')(auto_now_add=True, blank=True)),
+            ('active', self.gf('django.db.models.fields.BooleanField')(default=True)),
+            ('name', self.gf('django.db.models.fields.CharField')(max_length=512)),
+            ('inventory', self.gf('django.db.models.fields.related.ForeignKey')(related_name='groups', to=orm['main.Inventory'])),
+            ('variable_data', self.gf('django.db.models.fields.related.OneToOneField')(related_name='group', unique=True, on_delete=models.SET_NULL, default=None, to=orm['main.VariableData'], blank=True, null=True)),
+        ))
+        db.send_create_signal('main', ['Group'])
+
+        # Adding unique constraint on 'Group', fields ['name', 'inventory']
+        db.create_unique(u'main_group', ['name', 'inventory_id'])
+
+        # Adding M2M table for field tags on 'Group'
+        db.create_table(u'main_group_tags', (
+            ('id', models.AutoField(verbose_name='ID', primary_key=True, auto_created=True)),
+            ('group', models.ForeignKey(orm['main.group'], null=False)),
+            ('tag', models.ForeignKey(orm['main.tag'], null=False))
+        ))
+        db.create_unique(u'main_group_tags', ['group_id', 'tag_id'])
+
+        # Adding M2M table for field audit_trail on 'Group'
+        db.create_table(u'main_group_audit_trail', (
+            ('id', models.AutoField(verbose_name='ID', primary_key=True, auto_created=True)),
+            ('group', models.ForeignKey(orm['main.group'], null=False)),
+            ('audittrail', models.ForeignKey(orm['main.audittrail'], null=False))
+        ))
+        db.create_unique(u'main_group_audit_trail', ['group_id', 'audittrail_id'])
+
+        # Adding M2M table for field parents on 'Group'
+        db.create_table(u'main_group_parents', (
+            ('id', models.AutoField(verbose_name='ID', primary_key=True, auto_created=True)),
+            ('from_group', models.ForeignKey(orm['main.group'], null=False)),
+            ('to_group', models.ForeignKey(orm['main.group'], null=False))
+        ))
+        db.create_unique(u'main_group_parents', ['from_group_id', 'to_group_id'])
+
+        # Adding M2M table for field hosts on 'Group'
+        db.create_table(u'main_group_hosts', (
+            ('id', models.AutoField(verbose_name='ID', primary_key=True, auto_created=True)),
+            ('group', models.ForeignKey(orm['main.group'], null=False)),
+            ('host', models.ForeignKey(orm['main.host'], null=False))
+        ))
+        db.create_unique(u'main_group_hosts', ['group_id', 'host_id'])
+
+        # Adding model 'VariableData'
+        db.create_table(u'main_variabledata', (
+            (u'id', self.gf('django.db.models.fields.AutoField')(primary_key=True)),
+            ('description', self.gf('django.db.models.fields.TextField')(default='', blank=True)),
+            ('created_by', self.gf('django.db.models.fields.related.ForeignKey')(related_name="{'class': 'variabledata', 'app_label': 'main'}(class)s_created", null=True, on_delete=models.SET_NULL, to=orm['auth.User'])),
+            ('created', self.gf('django.db.models.fields.DateTimeField')(auto_now_add=True, blank=True)),
+            ('active', self.gf('django.db.models.fields.BooleanField')(default=True)),
+            ('name', self.gf('django.db.models.fields.CharField')(max_length=512)),
+            ('data', self.gf('django.db.models.fields.TextField')(default='')),
+        ))
+        db.send_create_signal('main', ['VariableData'])
+
+        # Adding M2M table for field tags on 'VariableData'
+        db.create_table(u'main_variabledata_tags', (
+            ('id', models.AutoField(verbose_name='ID', primary_key=True, auto_created=True)),
+            ('variabledata', models.ForeignKey(orm['main.variabledata'], null=False)),
+            ('tag', models.ForeignKey(orm['main.tag'], null=False))
+        ))
+        db.create_unique(u'main_variabledata_tags', ['variabledata_id', 'tag_id'])
+
+        # Adding M2M table for field audit_trail on 'VariableData'
+        db.create_table(u'main_variabledata_audit_trail', (
+            ('id', models.AutoField(verbose_name='ID', primary_key=True, auto_created=True)),
+            ('variabledata', models.ForeignKey(orm['main.variabledata'], null=False)),
+            ('audittrail', models.ForeignKey(orm['main.audittrail'], null=False))
+        ))
+        db.create_unique(u'main_variabledata_audit_trail', ['variabledata_id', 'audittrail_id'])
+
+        # Adding model 'Credential'
+        db.create_table(u'main_credential', (
+            (u'id', self.gf('django.db.models.fields.AutoField')(primary_key=True)),
+            ('description', self.gf('django.db.models.fields.TextField')(default='', blank=True)),
+            ('created_by', self.gf('django.db.models.fields.related.ForeignKey')(related_name="{'class': 'credential', 'app_label': 'main'}(class)s_created", null=True, on_delete=models.SET_NULL, to=orm['auth.User'])),
+            ('created', self.gf('django.db.models.fields.DateTimeField')(auto_now_add=True, blank=True)),
+            ('active', self.gf('django.db.models.fields.BooleanField')(default=True)),
+            ('name', self.gf('django.db.models.fields.CharField')(max_length=512)),
+            ('user', self.gf('django.db.models.fields.related.ForeignKey')(related_name='credentials', on_delete=models.SET_NULL, default=None, to=orm['auth.User'], blank=True, null=True)),
+            ('team', self.gf('django.db.models.fields.related.ForeignKey')(related_name='credentials', on_delete=models.SET_NULL, default=None, to=orm['main.Team'], blank=True, null=True)),
+            ('ssh_username', self.gf('django.db.models.fields.CharField')(default='', max_length=1024, blank=True)),
+            ('ssh_password', self.gf('django.db.models.fields.CharField')(default='', max_length=1024, blank=True)),
+            ('ssh_key_data', self.gf('django.db.models.fields.TextField')(default='', blank=True)),
+            ('ssh_key_unlock', self.gf('django.db.models.fields.CharField')(default='', max_length=1024, blank=True)),
+            ('sudo_username', self.gf('django.db.models.fields.CharField')(default='', max_length=1024, blank=True)),
+            ('sudo_password', self.gf('django.db.models.fields.CharField')(default='', max_length=1024, blank=True)),
+        ))
+        db.send_create_signal('main', ['Credential'])
+
+        # Adding M2M table for field tags on 'Credential'
+        db.create_table(u'main_credential_tags', (
+            ('id', models.AutoField(verbose_name='ID', primary_key=True, auto_created=True)),
+            ('credential', models.ForeignKey(orm['main.credential'], null=False)),
+            ('tag', models.ForeignKey(orm['main.tag'], null=False))
+        ))
+        db.create_unique(u'main_credential_tags', ['credential_id', 'tag_id'])
+
+        # Adding M2M table for field audit_trail on 'Credential'
+        db.create_table(u'main_credential_audit_trail', (
+            ('id', models.AutoField(verbose_name='ID', primary_key=True, auto_created=True)),
+            ('credential', models.ForeignKey(orm['main.credential'], null=False)),
+            ('audittrail', models.ForeignKey(orm['main.audittrail'], null=False))
+        ))
+        db.create_unique(u'main_credential_audit_trail', ['credential_id', 'audittrail_id'])
+
+        # Adding model 'Team'
+        db.create_table(u'main_team', (
+            (u'id', self.gf('django.db.models.fields.AutoField')(primary_key=True)),
+            ('description', self.gf('django.db.models.fields.TextField')(default='', blank=True)),
+            ('created_by', self.gf('django.db.models.fields.related.ForeignKey')(related_name="{'class': 'team', 'app_label': 'main'}(class)s_created", null=True, on_delete=models.SET_NULL, to=orm['auth.User'])),
+            ('created', self.gf('django.db.models.fields.DateTimeField')(auto_now_add=True, blank=True)),
+            ('active', self.gf('django.db.models.fields.BooleanField')(default=True)),
+            ('name', self.gf('django.db.models.fields.CharField')(unique=True, max_length=512)),
+            ('organization', self.gf('django.db.models.fields.related.ForeignKey')(related_name='teams', null=True, on_delete=models.SET_NULL, to=orm['main.Organization'])),
+        ))
+        db.send_create_signal('main', ['Team'])
+
+        # Adding M2M table for field tags on 'Team'
+        db.create_table(u'main_team_tags', (
+            ('id', models.AutoField(verbose_name='ID', primary_key=True, auto_created=True)),
+            ('team', models.ForeignKey(orm['main.team'], null=False)),
+            ('tag', models.ForeignKey(orm['main.tag'], null=False))
+        ))
+        db.create_unique(u'main_team_tags', ['team_id', 'tag_id'])
+
+        # Adding M2M table for field audit_trail on 'Team'
+        db.create_table(u'main_team_audit_trail', (
+            ('id', models.AutoField(verbose_name='ID', primary_key=True, auto_created=True)),
+            ('team', models.ForeignKey(orm['main.team'], null=False)),
+            ('audittrail', models.ForeignKey(orm['main.audittrail'], null=False))
+        ))
+        db.create_unique(u'main_team_audit_trail', ['team_id', 'audittrail_id'])
+
+        # Adding M2M table for field projects on 'Team'
+        db.create_table(u'main_team_projects', (
+            ('id', models.AutoField(verbose_name='ID', primary_key=True, auto_created=True)),
+            ('team', models.ForeignKey(orm['main.team'], null=False)),
+            ('project', models.ForeignKey(orm[u'main.project'], null=False))
+        ))
+        db.create_unique(u'main_team_projects', ['team_id', 'project_id'])
+
+        # Adding M2M table for field users on 'Team'
+        db.create_table(u'main_team_users', (
+            ('id', models.AutoField(verbose_name='ID', primary_key=True, auto_created=True)),
+            ('team', models.ForeignKey(orm['main.team'], null=False)),
+            ('user', models.ForeignKey(orm[u'auth.user'], null=False))
+        ))
+        db.create_unique(u'main_team_users', ['team_id', 'user_id'])
+
+        # Adding model 'Project'
+        db.create_table(u'main_project', (
+            (u'id', self.gf('django.db.models.fields.AutoField')(primary_key=True)),
+            ('description', self.gf('django.db.models.fields.TextField')(default='', blank=True)),
+            ('created_by', self.gf('django.db.models.fields.related.ForeignKey')(related_name="{'class': 'project', 'app_label': u'main'}(class)s_created", null=True, on_delete=models.SET_NULL, to=orm['auth.User'])),
+            ('created', self.gf('django.db.models.fields.DateTimeField')(auto_now_add=True, blank=True)),
+            ('active', self.gf('django.db.models.fields.BooleanField')(default=True)),
+            ('name', self.gf('django.db.models.fields.CharField')(unique=True, max_length=512)),
+            ('local_path', self.gf('django.db.models.fields.CharField')(max_length=1024)),
+        ))
+        db.send_create_signal(u'main', ['Project'])
+
+        # Adding M2M table for field tags on 'Project'
+        db.create_table(u'main_project_tags', (
+            ('id', models.AutoField(verbose_name='ID', primary_key=True, auto_created=True)),
+            ('project', models.ForeignKey(orm[u'main.project'], null=False)),
+            ('tag', models.ForeignKey(orm['main.tag'], null=False))
+        ))
+        db.create_unique(u'main_project_tags', ['project_id', 'tag_id'])
+
+        # Adding M2M table for field audit_trail on 'Project'
+        db.create_table(u'main_project_audit_trail', (
+            ('id', models.AutoField(verbose_name='ID', primary_key=True, auto_created=True)),
+            ('project', models.ForeignKey(orm[u'main.project'], null=False)),
+            ('audittrail', models.ForeignKey(orm['main.audittrail'], null=False))
+        ))
+        db.create_unique(u'main_project_audit_trail', ['project_id', 'audittrail_id'])
+
+        # Adding model 'Permission'
+        db.create_table(u'main_permission', (
+            (u'id', self.gf('django.db.models.fields.AutoField')(primary_key=True)),
+            ('description', self.gf('django.db.models.fields.TextField')(default='', blank=True)),
+            ('created_by', self.gf('django.db.models.fields.related.ForeignKey')(related_name="{'class': 'permission', 'app_label': 'main'}(class)s_created", null=True, on_delete=models.SET_NULL, to=orm['auth.User'])),
+            ('created', self.gf('django.db.models.fields.DateTimeField')(auto_now_add=True, blank=True)),
+            ('active', self.gf('django.db.models.fields.BooleanField')(default=True)),
+            ('name', self.gf('django.db.models.fields.CharField')(max_length=512)),
+            ('user', self.gf('django.db.models.fields.related.ForeignKey')(blank=True, related_name='permissions', null=True, on_delete=models.SET_NULL, to=orm['auth.User'])),
+            ('team', self.gf('django.db.models.fields.related.ForeignKey')(blank=True, related_name='permissions', null=True, on_delete=models.SET_NULL, to=orm['main.Team'])),
+            ('project', self.gf('django.db.models.fields.related.ForeignKey')(blank=True, related_name='permissions', null=True, on_delete=models.SET_NULL, to=orm['main.Project'])),
+            ('inventory', self.gf('django.db.models.fields.related.ForeignKey')(related_name='permissions', null=True, on_delete=models.SET_NULL, to=orm['main.Inventory'])),
+            ('permission_type', self.gf('django.db.models.fields.CharField')(max_length=64)),
+        ))
+        db.send_create_signal('main', ['Permission'])
+
+        # Adding M2M table for field tags on 'Permission'
+        db.create_table(u'main_permission_tags', (
+            ('id', models.AutoField(verbose_name='ID', primary_key=True, auto_created=True)),
+            ('permission', models.ForeignKey(orm['main.permission'], null=False)),
+            ('tag', models.ForeignKey(orm['main.tag'], null=False))
+        ))
+        db.create_unique(u'main_permission_tags', ['permission_id', 'tag_id'])
+
+        # Adding M2M table for field audit_trail on 'Permission'
+        db.create_table(u'main_permission_audit_trail', (
+            ('id', models.AutoField(verbose_name='ID', primary_key=True, auto_created=True)),
+            ('permission', models.ForeignKey(orm['main.permission'], null=False)),
+            ('audittrail', models.ForeignKey(orm['main.audittrail'], null=False))
+        ))
+        db.create_unique(u'main_permission_audit_trail', ['permission_id', 'audittrail_id'])
+
+        # Adding model 'JobTemplate'
+        db.create_table(u'main_jobtemplate', (
+            (u'id', self.gf('django.db.models.fields.AutoField')(primary_key=True)),
+            ('description', self.gf('django.db.models.fields.TextField')(default='', blank=True)),
+            ('created_by', self.gf('django.db.models.fields.related.ForeignKey')(related_name="{'class': 'jobtemplate', 'app_label': 'main'}(class)s_created", null=True, on_delete=models.SET_NULL, to=orm['auth.User'])),
+            ('created', self.gf('django.db.models.fields.DateTimeField')(auto_now_add=True, blank=True)),
+            ('active', self.gf('django.db.models.fields.BooleanField')(default=True)),
+            ('name', self.gf('django.db.models.fields.CharField')(unique=True, max_length=512)),
+            ('job_type', self.gf('django.db.models.fields.CharField')(max_length=64)),
+            ('inventory', self.gf('django.db.models.fields.related.ForeignKey')(related_name='job_templates', null=True, on_delete=models.SET_NULL, to=orm['main.Inventory'])),
+            ('project', self.gf('django.db.models.fields.related.ForeignKey')(related_name='job_templates', null=True, on_delete=models.SET_NULL, to=orm['main.Project'])),
+            ('playbook', self.gf('django.db.models.fields.CharField')(default='', max_length=1024)),
+            ('credential', self.gf('django.db.models.fields.related.ForeignKey')(related_name='job_templates', on_delete=models.SET_NULL, default=None, to=orm['main.Credential'], blank=True, null=True)),
+            ('forks', self.gf('django.db.models.fields.PositiveIntegerField')(default=0, blank=True)),
+            ('limit', self.gf('django.db.models.fields.CharField')(default='', max_length=1024, blank=True)),
+            ('verbosity', self.gf('django.db.models.fields.PositiveIntegerField')(default=0, blank=True)),
+            ('extra_vars', self.gf('django.db.models.fields.TextField')(default='', blank=True)),
+        ))
+        db.send_create_signal('main', ['JobTemplate'])
+
+        # Adding M2M table for field tags on 'JobTemplate'
+        db.create_table(u'main_jobtemplate_tags', (
+            ('id', models.AutoField(verbose_name='ID', primary_key=True, auto_created=True)),
+            ('jobtemplate', models.ForeignKey(orm['main.jobtemplate'], null=False)),
+            ('tag', models.ForeignKey(orm['main.tag'], null=False))
+        ))
+        db.create_unique(u'main_jobtemplate_tags', ['jobtemplate_id', 'tag_id'])
+
+        # Adding M2M table for field audit_trail on 'JobTemplate'
+        db.create_table(u'main_jobtemplate_audit_trail', (
+            ('id', models.AutoField(verbose_name='ID', primary_key=True, auto_created=True)),
+            ('jobtemplate', models.ForeignKey(orm['main.jobtemplate'], null=False)),
+            ('audittrail', models.ForeignKey(orm['main.audittrail'], null=False))
+        ))
+        db.create_unique(u'main_jobtemplate_audit_trail', ['jobtemplate_id', 'audittrail_id'])
+
+        # Adding model 'Job'
+        db.create_table(u'main_job', (
+            (u'id', self.gf('django.db.models.fields.AutoField')(primary_key=True)),
+            ('description', self.gf('django.db.models.fields.TextField')(default='', blank=True)),
+            ('created_by', self.gf('django.db.models.fields.related.ForeignKey')(related_name="{'class': 'job', 'app_label': 'main'}(class)s_created", null=True, on_delete=models.SET_NULL, to=orm['auth.User'])),
+            ('created', self.gf('django.db.models.fields.DateTimeField')(auto_now_add=True, blank=True)),
+            ('active', self.gf('django.db.models.fields.BooleanField')(default=True)),
+            ('name', self.gf('django.db.models.fields.CharField')(unique=True, max_length=512)),
+            ('job_template', self.gf('django.db.models.fields.related.ForeignKey')(related_name='jobs', on_delete=models.SET_NULL, default=None, to=orm['main.JobTemplate'], blank=True, null=True)),
+            ('job_type', self.gf('django.db.models.fields.CharField')(max_length=64)),
+            ('inventory', self.gf('django.db.models.fields.related.ForeignKey')(related_name='jobs', null=True, on_delete=models.SET_NULL, to=orm['main.Inventory'])),
+            ('credential', self.gf('django.db.models.fields.related.ForeignKey')(related_name='jobs', null=True, on_delete=models.SET_NULL, to=orm['main.Credential'])),
+            ('project', self.gf('django.db.models.fields.related.ForeignKey')(related_name='jobs', null=True, on_delete=models.SET_NULL, to=orm['main.Project'])),
+            ('playbook', self.gf('django.db.models.fields.CharField')(max_length=1024)),
+            ('forks', self.gf('django.db.models.fields.PositiveIntegerField')(default=0, blank=True)),
+            ('limit', self.gf('django.db.models.fields.CharField')(default='', max_length=1024, blank=True)),
+            ('verbosity', self.gf('django.db.models.fields.PositiveIntegerField')(default=0, blank=True)),
+            ('extra_vars', self.gf('django.db.models.fields.TextField')(default='', blank=True)),
+            ('cancel_flag', self.gf('django.db.models.fields.BooleanField')(default=False)),
+            ('status', self.gf('django.db.models.fields.CharField')(default='new', max_length=20)),
+            ('failed', self.gf('django.db.models.fields.BooleanField')(default=False)),
+            ('result_stdout', self.gf('django.db.models.fields.TextField')(default='', blank=True)),
+            ('result_traceback', self.gf('django.db.models.fields.TextField')(default='', blank=True)),
+            ('celery_task_id', self.gf('django.db.models.fields.CharField')(default='', max_length=100, blank=True)),
+        ))
+        db.send_create_signal('main', ['Job'])
+
+        # Adding M2M table for field tags on 'Job'
+        db.create_table(u'main_job_tags', (
+            ('id', models.AutoField(verbose_name='ID', primary_key=True, auto_created=True)),
+            ('job', models.ForeignKey(orm['main.job'], null=False)),
+            ('tag', models.ForeignKey(orm['main.tag'], null=False))
+        ))
+        db.create_unique(u'main_job_tags', ['job_id', 'tag_id'])
+
+        # Adding M2M table for field audit_trail on 'Job'
+        db.create_table(u'main_job_audit_trail', (
+            ('id', models.AutoField(verbose_name='ID', primary_key=True, auto_created=True)),
+            ('job', models.ForeignKey(orm['main.job'], null=False)),
+            ('audittrail', models.ForeignKey(orm['main.audittrail'], null=False))
+        ))
+        db.create_unique(u'main_job_audit_trail', ['job_id', 'audittrail_id'])
+
+        # Adding model 'JobHostSummary'
+        db.create_table(u'main_jobhostsummary', (
+            (u'id', self.gf('django.db.models.fields.AutoField')(primary_key=True)),
+            ('job', self.gf('django.db.models.fields.related.ForeignKey')(related_name='job_host_summaries', to=orm['main.Job'])),
+            ('host', self.gf('django.db.models.fields.related.ForeignKey')(related_name='job_host_summaries', to=orm['main.Host'])),
+            ('changed', self.gf('django.db.models.fields.PositiveIntegerField')(default=0)),
+            ('dark', self.gf('django.db.models.fields.PositiveIntegerField')(default=0)),
+            ('failures', self.gf('django.db.models.fields.PositiveIntegerField')(default=0)),
+            ('ok', self.gf('django.db.models.fields.PositiveIntegerField')(default=0)),
+            ('processed', self.gf('django.db.models.fields.PositiveIntegerField')(default=0)),
+            ('skipped', self.gf('django.db.models.fields.PositiveIntegerField')(default=0)),
+        ))
+        db.send_create_signal(u'main', ['JobHostSummary'])
+
+        # Adding unique constraint on 'JobHostSummary', fields ['job', 'host']
+        db.create_unique(u'main_jobhostsummary', ['job_id', 'host_id'])
+
+        # Adding model 'JobEvent'
+        db.create_table(u'main_jobevent', (
+            (u'id', self.gf('django.db.models.fields.AutoField')(primary_key=True)),
+            ('job', self.gf('django.db.models.fields.related.ForeignKey')(related_name='job_events', to=orm['main.Job'])),
+            ('created', self.gf('django.db.models.fields.DateTimeField')(auto_now_add=True, blank=True)),
+            ('event', self.gf('django.db.models.fields.CharField')(max_length=100)),
+            ('event_data', self.gf('jsonfield.fields.JSONField')(default={}, blank=True)),
+            ('failed', self.gf('django.db.models.fields.BooleanField')(default=False)),
+            ('host', self.gf('django.db.models.fields.related.ForeignKey')(related_name='job_events', on_delete=models.SET_NULL, default=None, to=orm['main.Host'], blank=True, null=True)),
+        ))
+        db.send_create_signal('main', ['JobEvent'])
+
+    def backwards(self, orm):
+        # Removing unique constraint on 'JobHostSummary', fields ['job', 'host']
+        db.delete_unique(u'main_jobhostsummary', ['job_id', 'host_id'])
+
+        # Removing unique constraint on 'Group', fields ['name', 'inventory']
+        db.delete_unique(u'main_group', ['name', 'inventory_id'])
+
+        # Removing unique constraint on 'Host', fields ['name', 'inventory']
+        db.delete_unique(u'main_host', ['name', 'inventory_id'])
+
+        # Removing unique constraint on 'Inventory', fields ['name', 'organization']
+        db.delete_unique(u'main_inventory', ['name', 'organization_id'])
+
+        # Deleting model 'Tag'
+        db.delete_table(u'main_tag')
+
+        # Deleting model 'AuditTrail'
+        db.delete_table(u'main_audittrail')
+
+        # Deleting model 'Organization'
+        db.delete_table(u'main_organization')
+
+        # Removing M2M table for field tags on 'Organization'
+        db.delete_table('main_organization_tags')
+
+        # Removing M2M table for field audit_trail on 'Organization'
+        db.delete_table('main_organization_audit_trail')
+
+        # Removing M2M table for field users on 'Organization'
+        db.delete_table('main_organization_users')
+
+        # Removing M2M table for field admins on 'Organization'
+        db.delete_table('main_organization_admins')
+
+        # Removing M2M table for field projects on 'Organization'
+        db.delete_table('main_organization_projects')
+
+        # Deleting model 'Inventory'
+        db.delete_table(u'main_inventory')
+
+        # Removing M2M table for field tags on 'Inventory'
+        db.delete_table('main_inventory_tags')
+
+        # Removing M2M table for field audit_trail on 'Inventory'
+        db.delete_table('main_inventory_audit_trail')
+
+        # Deleting model 'Host'
+        db.delete_table(u'main_host')
+
+        # Removing M2M table for field tags on 'Host'
+        db.delete_table('main_host_tags')
+
+        # Removing M2M table for field audit_trail on 'Host'
+        db.delete_table('main_host_audit_trail')
+
+        # Deleting model 'Group'
+        db.delete_table(u'main_group')
+
+        # Removing M2M table for field tags on 'Group'
+        db.delete_table('main_group_tags')
+
+        # Removing M2M table for field audit_trail on 'Group'
+        db.delete_table('main_group_audit_trail')
+
+        # Removing M2M table for field parents on 'Group'
+        db.delete_table('main_group_parents')
+
+        # Removing M2M table for field hosts on 'Group'
+        db.delete_table('main_group_hosts')
+
+        # Deleting model 'VariableData'
+        db.delete_table(u'main_variabledata')
+
+        # Removing M2M table for field tags on 'VariableData'
+        db.delete_table('main_variabledata_tags')
+
+        # Removing M2M table for field audit_trail on 'VariableData'
+        db.delete_table('main_variabledata_audit_trail')
+
+        # Deleting model 'Credential'
+        db.delete_table(u'main_credential')
+
+        # Removing M2M table for field tags on 'Credential'
+        db.delete_table('main_credential_tags')
+
+        # Removing M2M table for field audit_trail on 'Credential'
+        db.delete_table('main_credential_audit_trail')
+
+        # Deleting model 'Team'
+        db.delete_table(u'main_team')
+
+        # Removing M2M table for field tags on 'Team'
+        db.delete_table('main_team_tags')
+
+        # Removing M2M table for field audit_trail on 'Team'
+        db.delete_table('main_team_audit_trail')
+
+        # Removing M2M table for field projects on 'Team'
+        db.delete_table('main_team_projects')
+
+        # Removing M2M table for field users on 'Team'
+        db.delete_table('main_team_users')
+
+        # Deleting model 'Project'
+        db.delete_table(u'main_project')
+
+        # Removing M2M table for field tags on 'Project'
+        db.delete_table('main_project_tags')
+
+        # Removing M2M table for field audit_trail on 'Project'
+        db.delete_table('main_project_audit_trail')
+
+        # Deleting model 'Permission'
+        db.delete_table(u'main_permission')
+
+        # Removing M2M table for field tags on 'Permission'
+        db.delete_table('main_permission_tags')
+
+        # Removing M2M table for field audit_trail on 'Permission'
+        db.delete_table('main_permission_audit_trail')
+
+        # Deleting model 'JobTemplate'
+        db.delete_table(u'main_jobtemplate')
+
+        # Removing M2M table for field tags on 'JobTemplate'
+        db.delete_table('main_jobtemplate_tags')
+
+        # Removing M2M table for field audit_trail on 'JobTemplate'
+        db.delete_table('main_jobtemplate_audit_trail')
+
+        # Deleting model 'Job'
+        db.delete_table(u'main_job')
+
+        # Removing M2M table for field tags on 'Job'
+        db.delete_table('main_job_tags')
+
+        # Removing M2M table for field audit_trail on 'Job'
+        db.delete_table('main_job_audit_trail')
+
+        # Deleting model 'JobHostSummary'
+        db.delete_table(u'main_jobhostsummary')
+
+        # Deleting model 'JobEvent'
+        db.delete_table(u'main_jobevent')
+
+    models = {
+        u'auth.group': {
+            'Meta': {'object_name': 'Group'},
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'name': ('django.db.models.fields.CharField', [], {'unique': 'True', 'max_length': '80'}),
+            'permissions': ('django.db.models.fields.related.ManyToManyField', [], {'to': u"orm['auth.Permission']", 'symmetrical': 'False', 'blank': 'True'})
+        },
+        u'auth.permission': {
+            'Meta': {'ordering': "(u'content_type__app_label', u'content_type__model', u'codename')", 'unique_together': "((u'content_type', u'codename'),)", 'object_name': 'Permission'},
+            'codename': ('django.db.models.fields.CharField', [], {'max_length': '100'}),
+            'content_type': ('django.db.models.fields.related.ForeignKey', [], {'to': u"orm['contenttypes.ContentType']"}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'name': ('django.db.models.fields.CharField', [], {'max_length': '50'})
+        },
+        u'auth.user': {
+            'Meta': {'object_name': 'User'},
+            'date_joined': ('django.db.models.fields.DateTimeField', [], {'default': 'datetime.datetime.now'}),
+            'email': ('django.db.models.fields.EmailField', [], {'max_length': '75', 'blank': 'True'}),
+            'first_name': ('django.db.models.fields.CharField', [], {'max_length': '30', 'blank': 'True'}),
+            'groups': ('django.db.models.fields.related.ManyToManyField', [], {'to': u"orm['auth.Group']", 'symmetrical': 'False', 'blank': 'True'}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'is_active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'is_staff': ('django.db.models.fields.BooleanField', [], {'default': 'False'}),
+            'is_superuser': ('django.db.models.fields.BooleanField', [], {'default': 'False'}),
+            'last_login': ('django.db.models.fields.DateTimeField', [], {'default': 'datetime.datetime.now'}),
+            'last_name': ('django.db.models.fields.CharField', [], {'max_length': '30', 'blank': 'True'}),
+            'password': ('django.db.models.fields.CharField', [], {'max_length': '128'}),
+            'user_permissions': ('django.db.models.fields.related.ManyToManyField', [], {'to': u"orm['auth.Permission']", 'symmetrical': 'False', 'blank': 'True'}),
+            'username': ('django.db.models.fields.CharField', [], {'unique': 'True', 'max_length': '30'})
+        },
+        u'contenttypes.contenttype': {
+            'Meta': {'ordering': "('name',)", 'unique_together': "(('app_label', 'model'),)", 'object_name': 'ContentType', 'db_table': "'django_content_type'"},
+            'app_label': ('django.db.models.fields.CharField', [], {'max_length': '100'}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'model': ('django.db.models.fields.CharField', [], {'max_length': '100'}),
+            'name': ('django.db.models.fields.CharField', [], {'max_length': '100'})
+        },
+        'main.audittrail': {
+            'Meta': {'object_name': 'AuditTrail'},
+            'comment': ('django.db.models.fields.TextField', [], {}),
+            'delta': ('django.db.models.fields.TextField', [], {}),
+            'detail': ('django.db.models.fields.TextField', [], {}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'modified_by': ('django.db.models.fields.related.ForeignKey', [], {'to': u"orm['auth.User']", 'null': 'True', 'on_delete': 'models.SET_NULL', 'blank': 'True'}),
+            'resource_type': ('django.db.models.fields.CharField', [], {'max_length': '64'}),
+            'tag': ('django.db.models.fields.related.ForeignKey', [], {'to': "orm['main.Tag']", 'null': 'True', 'on_delete': 'models.SET_NULL', 'blank': 'True'})
+        },
+        'main.credential': {
+            'Meta': {'object_name': 'Credential'},
+            'active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'audit_trail': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'credential_by_audit_trail'", 'blank': 'True', 'to': "orm['main.AuditTrail']"}),
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'created_by': ('django.db.models.fields.related.ForeignKey', [], {'related_name': '"{\'class\': \'credential\', \'app_label\': \'main\'}(class)s_created"', 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"}),
+            'description': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'name': ('django.db.models.fields.CharField', [], {'max_length': '512'}),
+            'ssh_key_data': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            'ssh_key_unlock': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'blank': 'True'}),
+            'ssh_password': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'blank': 'True'}),
+            'ssh_username': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'blank': 'True'}),
+            'sudo_password': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'blank': 'True'}),
+            'sudo_username': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'blank': 'True'}),
+            'tags': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'credential_by_tag'", 'blank': 'True', 'to': "orm['main.Tag']"}),
+            'team': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'credentials'", 'on_delete': 'models.SET_NULL', 'default': 'None', 'to': "orm['main.Team']", 'blank': 'True', 'null': 'True'}),
+            'user': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'credentials'", 'on_delete': 'models.SET_NULL', 'default': 'None', 'to': u"orm['auth.User']", 'blank': 'True', 'null': 'True'})
+        },
+        'main.group': {
+            'Meta': {'unique_together': "(('name', 'inventory'),)", 'object_name': 'Group'},
+            'active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'audit_trail': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'group_by_audit_trail'", 'blank': 'True', 'to': "orm['main.AuditTrail']"}),
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'created_by': ('django.db.models.fields.related.ForeignKey', [], {'related_name': '"{\'class\': \'group\', \'app_label\': \'main\'}(class)s_created"', 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"}),
+            'description': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            'hosts': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'groups'", 'blank': 'True', 'to': "orm['main.Host']"}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'inventory': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'groups'", 'to': "orm['main.Inventory']"}),
+            'name': ('django.db.models.fields.CharField', [], {'max_length': '512'}),
+            'parents': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'children'", 'blank': 'True', 'to': "orm['main.Group']"}),
+            'tags': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'group_by_tag'", 'blank': 'True', 'to': "orm['main.Tag']"}),
+            'variable_data': ('django.db.models.fields.related.OneToOneField', [], {'related_name': "'group'", 'unique': 'True', 'on_delete': 'models.SET_NULL', 'default': 'None', 'to': "orm['main.VariableData']", 'blank': 'True', 'null': 'True'})
+        },
+        'main.host': {
+            'Meta': {'unique_together': "(('name', 'inventory'),)", 'object_name': 'Host'},
+            'active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'audit_trail': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'host_by_audit_trail'", 'blank': 'True', 'to': "orm['main.AuditTrail']"}),
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'created_by': ('django.db.models.fields.related.ForeignKey', [], {'related_name': '"{\'class\': \'host\', \'app_label\': \'main\'}(class)s_created"', 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"}),
+            'description': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'inventory': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'hosts'", 'to': "orm['main.Inventory']"}),
+            'last_job': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'hosts_as_last_job+'", 'on_delete': 'models.SET_NULL', 'default': 'None', 'to': "orm['main.Job']", 'blank': 'True', 'null': 'True'}),
+            'last_job_host_summary': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'hosts_as_last_job_summary+'", 'on_delete': 'models.SET_NULL', 'default': 'None', 'to': u"orm['main.JobHostSummary']", 'blank': 'True', 'null': 'True'}),
+            'name': ('django.db.models.fields.CharField', [], {'max_length': '512'}),
+            'tags': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'host_by_tag'", 'blank': 'True', 'to': "orm['main.Tag']"}),
+            'variable_data': ('django.db.models.fields.related.OneToOneField', [], {'related_name': "'host'", 'unique': 'True', 'on_delete': 'models.SET_NULL', 'default': 'None', 'to': "orm['main.VariableData']", 'blank': 'True', 'null': 'True'})
+        },
+        'main.inventory': {
+            'Meta': {'unique_together': "(('name', 'organization'),)", 'object_name': 'Inventory'},
+            'active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'audit_trail': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'inventory_by_audit_trail'", 'blank': 'True', 'to': "orm['main.AuditTrail']"}),
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'created_by': ('django.db.models.fields.related.ForeignKey', [], {'related_name': '"{\'class\': \'inventory\', \'app_label\': \'main\'}(class)s_created"', 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"}),
+            'description': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'name': ('django.db.models.fields.CharField', [], {'unique': 'True', 'max_length': '512'}),
+            'organization': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'inventories'", 'to': "orm['main.Organization']"}),
+            'tags': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'inventory_by_tag'", 'blank': 'True', 'to': "orm['main.Tag']"})
+        },
+        'main.job': {
+            'Meta': {'object_name': 'Job'},
+            'active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'audit_trail': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'job_by_audit_trail'", 'blank': 'True', 'to': "orm['main.AuditTrail']"}),
+            'cancel_flag': ('django.db.models.fields.BooleanField', [], {'default': 'False'}),
+            'celery_task_id': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '100', 'blank': 'True'}),
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'created_by': ('django.db.models.fields.related.ForeignKey', [], {'related_name': '"{\'class\': \'job\', \'app_label\': \'main\'}(class)s_created"', 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"}),
+            'credential': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'jobs'", 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': "orm['main.Credential']"}),
+            'description': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            'extra_vars': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            'failed': ('django.db.models.fields.BooleanField', [], {'default': 'False'}),
+            'forks': ('django.db.models.fields.PositiveIntegerField', [], {'default': '0', 'blank': 'True'}),
+            'hosts': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'jobs'", 'blank': 'True', 'through': u"orm['main.JobHostSummary']", 'to': "orm['main.Host']"}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'inventory': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'jobs'", 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': "orm['main.Inventory']"}),
+            'job_template': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'jobs'", 'on_delete': 'models.SET_NULL', 'default': 'None', 'to': "orm['main.JobTemplate']", 'blank': 'True', 'null': 'True'}),
+            'job_type': ('django.db.models.fields.CharField', [], {'max_length': '64'}),
+            'limit': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'blank': 'True'}),
+            'name': ('django.db.models.fields.CharField', [], {'unique': 'True', 'max_length': '512'}),
+            'playbook': ('django.db.models.fields.CharField', [], {'max_length': '1024'}),
+            'project': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'jobs'", 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['main.Project']"}),
+            'result_stdout': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            'result_traceback': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            'status': ('django.db.models.fields.CharField', [], {'default': "'new'", 'max_length': '20'}),
+            'tags': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'job_by_tag'", 'blank': 'True', 'to': "orm['main.Tag']"}),
+            'verbosity': ('django.db.models.fields.PositiveIntegerField', [], {'default': '0', 'blank': 'True'})
+        },
+        'main.jobevent': {
+            'Meta': {'ordering': "('pk',)", 'object_name': 'JobEvent'},
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'event': ('django.db.models.fields.CharField', [], {'max_length': '100'}),
+            'event_data': ('jsonfield.fields.JSONField', [], {'default': '{}', 'blank': 'True'}),
+            'failed': ('django.db.models.fields.BooleanField', [], {'default': 'False'}),
+            'host': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'job_events'", 'on_delete': 'models.SET_NULL', 'default': 'None', 'to': "orm['main.Host']", 'blank': 'True', 'null': 'True'}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'job': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'job_events'", 'to': "orm['main.Job']"})
+        },
+        u'main.jobhostsummary': {
+            'Meta': {'ordering': "('-pk',)", 'unique_together': "[('job', 'host')]", 'object_name': 'JobHostSummary'},
+            'changed': ('django.db.models.fields.PositiveIntegerField', [], {'default': '0'}),
+            'dark': ('django.db.models.fields.PositiveIntegerField', [], {'default': '0'}),
+            'failures': ('django.db.models.fields.PositiveIntegerField', [], {'default': '0'}),
+            'host': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'job_host_summaries'", 'to': "orm['main.Host']"}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'job': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'job_host_summaries'", 'to': "orm['main.Job']"}),
+            'ok': ('django.db.models.fields.PositiveIntegerField', [], {'default': '0'}),
+            'processed': ('django.db.models.fields.PositiveIntegerField', [], {'default': '0'}),
+            'skipped': ('django.db.models.fields.PositiveIntegerField', [], {'default': '0'})
+        },
+        'main.jobtemplate': {
+            'Meta': {'object_name': 'JobTemplate'},
+            'active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'audit_trail': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'jobtemplate_by_audit_trail'", 'blank': 'True', 'to': "orm['main.AuditTrail']"}),
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'created_by': ('django.db.models.fields.related.ForeignKey', [], {'related_name': '"{\'class\': \'jobtemplate\', \'app_label\': \'main\'}(class)s_created"', 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"}),
+            'credential': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'job_templates'", 'on_delete': 'models.SET_NULL', 'default': 'None', 'to': "orm['main.Credential']", 'blank': 'True', 'null': 'True'}),
+            'description': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            'extra_vars': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            'forks': ('django.db.models.fields.PositiveIntegerField', [], {'default': '0', 'blank': 'True'}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'inventory': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'job_templates'", 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': "orm['main.Inventory']"}),
+            'job_type': ('django.db.models.fields.CharField', [], {'max_length': '64'}),
+            'limit': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'blank': 'True'}),
+            'name': ('django.db.models.fields.CharField', [], {'unique': 'True', 'max_length': '512'}),
+            'playbook': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024'}),
+            'project': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'job_templates'", 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['main.Project']"}),
+            'tags': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'jobtemplate_by_tag'", 'blank': 'True', 'to': "orm['main.Tag']"}),
+            'verbosity': ('django.db.models.fields.PositiveIntegerField', [], {'default': '0', 'blank': 'True'})
+        },
+        'main.organization': {
+            'Meta': {'object_name': 'Organization'},
+            'active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'admins': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'admin_of_organizations'", 'blank': 'True', 'to': u"orm['auth.User']"}),
+            'audit_trail': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'organization_by_audit_trail'", 'blank': 'True', 'to': "orm['main.AuditTrail']"}),
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'created_by': ('django.db.models.fields.related.ForeignKey', [], {'related_name': '"{\'class\': \'organization\', \'app_label\': \'main\'}(class)s_created"', 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"}),
+            'description': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'name': ('django.db.models.fields.CharField', [], {'unique': 'True', 'max_length': '512'}),
+            'projects': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'organizations'", 'blank': 'True', 'to': u"orm['main.Project']"}),
+            'tags': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'organization_by_tag'", 'blank': 'True', 'to': "orm['main.Tag']"}),
+            'users': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'organizations'", 'blank': 'True', 'to': u"orm['auth.User']"})
+        },
+        'main.permission': {
+            'Meta': {'object_name': 'Permission'},
+            'active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'audit_trail': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'permission_by_audit_trail'", 'blank': 'True', 'to': "orm['main.AuditTrail']"}),
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'created_by': ('django.db.models.fields.related.ForeignKey', [], {'related_name': '"{\'class\': \'permission\', \'app_label\': \'main\'}(class)s_created"', 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"}),
+            'description': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'inventory': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'permissions'", 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': "orm['main.Inventory']"}),
+            'name': ('django.db.models.fields.CharField', [], {'max_length': '512'}),
+            'permission_type': ('django.db.models.fields.CharField', [], {'max_length': '64'}),
+            'project': ('django.db.models.fields.related.ForeignKey', [], {'blank': 'True', 'related_name': "'permissions'", 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['main.Project']"}),
+            'tags': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'permission_by_tag'", 'blank': 'True', 'to': "orm['main.Tag']"}),
+            'team': ('django.db.models.fields.related.ForeignKey', [], {'blank': 'True', 'related_name': "'permissions'", 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': "orm['main.Team']"}),
+            'user': ('django.db.models.fields.related.ForeignKey', [], {'blank': 'True', 'related_name': "'permissions'", 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"})
+        },
+        u'main.project': {
+            'Meta': {'object_name': 'Project'},
+            'active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'audit_trail': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'project_by_audit_trail'", 'blank': 'True', 'to': "orm['main.AuditTrail']"}),
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'created_by': ('django.db.models.fields.related.ForeignKey', [], {'related_name': '"{\'class\': \'project\', \'app_label\': u\'main\'}(class)s_created"', 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"}),
+            'description': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'local_path': ('django.db.models.fields.CharField', [], {'max_length': '1024'}),
+            'name': ('django.db.models.fields.CharField', [], {'unique': 'True', 'max_length': '512'}),
+            'tags': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'project_by_tag'", 'blank': 'True', 'to': "orm['main.Tag']"})
+        },
+        'main.tag': {
+            'Meta': {'object_name': 'Tag'},
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'name': ('django.db.models.fields.CharField', [], {'max_length': '512'})
+        },
+        'main.team': {
+            'Meta': {'object_name': 'Team'},
+            'active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'audit_trail': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'team_by_audit_trail'", 'blank': 'True', 'to': "orm['main.AuditTrail']"}),
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'created_by': ('django.db.models.fields.related.ForeignKey', [], {'related_name': '"{\'class\': \'team\', \'app_label\': \'main\'}(class)s_created"', 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"}),
+            'description': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'name': ('django.db.models.fields.CharField', [], {'unique': 'True', 'max_length': '512'}),
+            'organization': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'teams'", 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': "orm['main.Organization']"}),
+            'projects': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'teams'", 'blank': 'True', 'to': u"orm['main.Project']"}),
+            'tags': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'team_by_tag'", 'blank': 'True', 'to': "orm['main.Tag']"}),
+            'users': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'teams'", 'blank': 'True', 'to': u"orm['auth.User']"})
+        },
+        'main.variabledata': {
+            'Meta': {'object_name': 'VariableData'},
+            'active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'audit_trail': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'variabledata_by_audit_trail'", 'blank': 'True', 'to': "orm['main.AuditTrail']"}),
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'created_by': ('django.db.models.fields.related.ForeignKey', [], {'related_name': '"{\'class\': \'variabledata\', \'app_label\': \'main\'}(class)s_created"', 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"}),
+            'data': ('django.db.models.fields.TextField', [], {'default': "''"}),
+            'description': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'name': ('django.db.models.fields.CharField', [], {'max_length': '512'}),
+            'tags': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'variabledata_by_tag'", 'blank': 'True', 'to': "orm['main.Tag']"})
+        }
+    }
+
+    complete_apps = ['main']

awx/main/migrations/0002_v12b2_changes.py

@@ -0,0 +1,664 @@
+# -*- coding: utf-8 -*-
+import datetime
+from south.db import db
+from south.v2 import SchemaMigration
+from django.db import models
+
+
+class Migration(SchemaMigration):
+    '''
+    Schema migration for AWX 1.2-b2 release.
+    - Adds variables field on Host and Group models.
+    - Adds job_tags and host_config_key fields on JobTemplate.
+    - Adds job_tags, job_args, job_cwd, job_env fields on Job.
+    - Adds failed field on JobHostSummary.
+    - Adds play, task, parent and hosts fields on JobEvent.
+
+    NOTE: This migration has been manually edited!
+    '''
+
+    def forwards(self, orm):
+
+        # Adding field 'Host.variables'
+        db.add_column(u'main_host', 'variables',
+                      self.gf('django.db.models.fields.TextField')(default='', blank=True, null=True),
+                      keep_default=False)
+
+        # Adding field 'Group.variables'
+        db.add_column(u'main_group', 'variables',
+                      self.gf('django.db.models.fields.TextField')(default='', blank=True, null=True),
+                      keep_default=False)
+
+        # Adding field 'JobTemplate.job_tags'
+        db.add_column(u'main_jobtemplate', 'job_tags',
+                      self.gf('django.db.models.fields.CharField')(default='', max_length=1024, null=True, blank=True),
+                      keep_default=False)
+
+        # Adding field 'JobTemplate.host_config_key'
+        db.add_column(u'main_jobtemplate', 'host_config_key',
+                      self.gf('django.db.models.fields.CharField')(default='', max_length=1024, blank=True, null=True),
+                      keep_default=False)
+
+        # Adding field 'Job.job_tags'
+        db.add_column(u'main_job', 'job_tags',
+                      self.gf('django.db.models.fields.CharField')(default='', max_length=1024, null=True, blank=True),
+                      keep_default=False)
+
+        # Adding field 'Job.job_args'
+        db.add_column(u'main_job', 'job_args',
+                      self.gf('django.db.models.fields.CharField')(default='', max_length=1024, null=True, blank=True),
+                      keep_default=False)
+
+        # Adding field 'Job.job_cwd'
+        db.add_column(u'main_job', 'job_cwd',
+                      self.gf('django.db.models.fields.CharField')(default='', max_length=1024, null=True, blank=True),
+                      keep_default=False)
+
+        # Adding field 'Job.job_env'
+        db.add_column(u'main_job', 'job_env',
+                      self.gf('jsonfield.fields.JSONField')(default={}, null=True, blank=True),
+                      keep_default=False)
+
+        # Adding field 'JobHostSummary.failed'
+        db.add_column(u'main_jobhostsummary', 'failed',
+                      self.gf('django.db.models.fields.BooleanField')(default=False),
+                      keep_default=False)
+
+        # Adding field 'JobEvent.play'
+        db.add_column(u'main_jobevent', 'play',
+                      self.gf('django.db.models.fields.CharField')(default='', max_length=1024, blank=True, null=True),
+                      keep_default=False)
+
+        # Adding field 'JobEvent.task'
+        db.add_column(u'main_jobevent', 'task',
+                      self.gf('django.db.models.fields.CharField')(default='', max_length=1024, blank=True, null=True),
+                      keep_default=False)
+
+        # Adding field 'JobEvent.parent'
+        db.add_column(u'main_jobevent', 'parent',
+                      self.gf('django.db.models.fields.related.ForeignKey')(related_name='children', on_delete=models.SET_NULL, default=None, to=orm['main.JobEvent'], blank=True, null=True),
+                      keep_default=False)
+
+        # Adding M2M table for field hosts on 'JobEvent'
+        m2m_table_name = db.shorten_name(u'main_jobevent_hosts')
+        db.create_table(m2m_table_name, (
+            ('id', models.AutoField(verbose_name='ID', primary_key=True, auto_created=True)),
+            ('jobevent', models.ForeignKey(orm['main.jobevent'], null=False)),
+            ('host', models.ForeignKey(orm['main.host'], null=False))
+        ))
+        db.create_unique(m2m_table_name, ['jobevent_id', 'host_id'])
+
+        # Removing M2M table for field tags on 'Job'
+        db.delete_table(db.shorten_name(u'main_job_tags'))
+
+        # Removing M2M table for field audit_trail on 'Job'
+        db.delete_table(db.shorten_name(u'main_job_audit_trail'))
+
+        # Removing M2M table for field tags on 'Inventory'
+        db.delete_table(db.shorten_name(u'main_inventory_tags'))
+
+        # Removing M2M table for field audit_trail on 'Inventory'
+        db.delete_table(db.shorten_name(u'main_inventory_audit_trail'))
+
+        # Removing M2M table for field tags on 'Host'
+        db.delete_table(db.shorten_name(u'main_host_tags'))
+
+        # Removing M2M table for field audit_trail on 'Host'
+        db.delete_table(db.shorten_name(u'main_host_audit_trail'))
+
+        # Removing M2M table for field tags on 'Group'
+        db.delete_table(db.shorten_name(u'main_group_tags'))
+
+        # Removing M2M table for field audit_trail on 'Group'
+        db.delete_table(db.shorten_name(u'main_group_audit_trail'))
+
+        # Removing M2M table for field audit_trail on 'Credential'
+        db.delete_table(db.shorten_name(u'main_credential_audit_trail'))
+
+        # Removing M2M table for field tags on 'Credential'
+        db.delete_table(db.shorten_name(u'main_credential_tags'))
+
+        # Removing M2M table for field tags on 'JobTemplate'
+        db.delete_table(db.shorten_name(u'main_jobtemplate_tags'))
+
+        # Removing M2M table for field audit_trail on 'JobTemplate'
+        db.delete_table(db.shorten_name(u'main_jobtemplate_audit_trail'))
+
+        # Removing M2M table for field tags on 'Team'
+        db.delete_table(db.shorten_name(u'main_team_tags'))
+
+        # Removing M2M table for field audit_trail on 'Team'
+        db.delete_table(db.shorten_name(u'main_team_audit_trail'))
+
+        # Removing M2M table for field tags on 'Project'
+        db.delete_table(db.shorten_name(u'main_project_tags'))
+
+        # Removing M2M table for field audit_trail on 'Project'
+        db.delete_table(db.shorten_name(u'main_project_audit_trail'))
+
+        # Removing M2M table for field tags on 'Permission'
+        db.delete_table(db.shorten_name(u'main_permission_tags'))
+
+        # Removing M2M table for field audit_trail on 'Permission'
+        db.delete_table(db.shorten_name(u'main_permission_audit_trail'))
+
+        # Removing M2M table for field tags on 'VariableData'
+        db.delete_table(db.shorten_name(u'main_variabledata_tags'))
+
+        # Removing M2M table for field audit_trail on 'VariableData'
+        db.delete_table(db.shorten_name(u'main_variabledata_audit_trail'))
+
+        # Removing M2M table for field tags on 'Organization'
+        db.delete_table(db.shorten_name(u'main_organization_tags'))
+
+        # Removing M2M table for field audit_trail on 'Organization'
+        db.delete_table(db.shorten_name(u'main_organization_audit_trail'))
+
+        # Deleting model 'Tag'
+        db.delete_table(u'main_tag')
+
+        # Deleting model 'AuditTrail'
+        db.delete_table(u'main_audittrail')
+
+    def backwards(self, orm):
+
+        # Deleting field 'Host.variables'
+        db.delete_column(u'main_host', 'variables')
+
+        # Deleting field 'Group.variables'
+        db.delete_column(u'main_group', 'variables')
+
+        # Deleting field 'JobTemplate.job_tags'
+        db.delete_column(u'main_jobtemplate', 'job_tags')
+
+        # Deleting field 'JobTemplate.host_config_key'
+        db.delete_column(u'main_jobtemplate', 'host_config_key')
+
+        # Deleting field 'Job.job_tags'
+        db.delete_column(u'main_job', 'job_tags')
+
+        # Deleting field 'Job.job_args'
+        db.delete_column(u'main_job', 'job_args')
+
+        # Deleting field 'Job.job_cwd'
+        db.delete_column(u'main_job', 'job_cwd')
+
+        # Deleting field 'Job.job_env'
+        db.delete_column(u'main_job', 'job_env')
+
+        # Deleting field 'JobHostSummary.failed'
+        db.delete_column(u'main_jobhostsummary', 'failed')
+
+        # Deleting field 'JobEvent.play'
+        db.delete_column(u'main_jobevent', 'play')
+
+        # Deleting field 'JobEvent.task'
+        db.delete_column(u'main_jobevent', 'task')
+
+        # Deleting field 'JobEvent.parent'
+        db.delete_column(u'main_jobevent', 'parent_id')
+
+        # Removing M2M table for field hosts on 'JobEvent'
+        db.delete_table(db.shorten_name(u'main_jobevent_hosts'))
+
+        # Adding model 'AuditTrail'
+        db.create_table(u'main_audittrail', (
+            ('comment', self.gf('django.db.models.fields.TextField')()),
+            ('modified_by', self.gf('django.db.models.fields.related.ForeignKey')(to=orm['auth.User'], null=True, on_delete=models.SET_NULL, blank=True)),
+            ('delta', self.gf('django.db.models.fields.TextField')()),
+            ('tag', self.gf('django.db.models.fields.related.ForeignKey')(to=orm['main.Tag'], null=True, on_delete=models.SET_NULL, blank=True)),
+            ('detail', self.gf('django.db.models.fields.TextField')()),
+            ('resource_type', self.gf('django.db.models.fields.CharField')(max_length=64)),
+            (u'id', self.gf('django.db.models.fields.AutoField')(primary_key=True)),
+        ))
+        db.send_create_signal('main', ['AuditTrail'])
+
+        # Adding model 'Tag'
+        db.create_table(u'main_tag', (
+            (u'id', self.gf('django.db.models.fields.AutoField')(primary_key=True)),
+            ('name', self.gf('django.db.models.fields.CharField')(max_length=512)),
+        ))
+        db.send_create_signal('main', ['Tag'])
+
+        # Adding M2M table for field tags on 'Job'
+        m2m_table_name = db.shorten_name(u'main_job_tags')
+        db.create_table(m2m_table_name, (
+            ('id', models.AutoField(verbose_name='ID', primary_key=True, auto_created=True)),
+            ('job', models.ForeignKey(orm['main.job'], null=False)),
+            ('tag', models.ForeignKey(orm['main.tag'], null=False))
+        ))
+        db.create_unique(m2m_table_name, ['job_id', 'tag_id'])
+
+        # Adding M2M table for field audit_trail on 'Job'
+        m2m_table_name = db.shorten_name(u'main_job_audit_trail')
+        db.create_table(m2m_table_name, (
+            ('id', models.AutoField(verbose_name='ID', primary_key=True, auto_created=True)),
+            ('job', models.ForeignKey(orm['main.job'], null=False)),
+            ('audittrail', models.ForeignKey(orm['main.audittrail'], null=False))
+        ))
+        db.create_unique(m2m_table_name, ['job_id', 'audittrail_id'])
+
+        # Adding M2M table for field tags on 'Inventory'
+        m2m_table_name = db.shorten_name(u'main_inventory_tags')
+        db.create_table(m2m_table_name, (
+            ('id', models.AutoField(verbose_name='ID', primary_key=True, auto_created=True)),
+            ('inventory', models.ForeignKey(orm['main.inventory'], null=False)),
+            ('tag', models.ForeignKey(orm['main.tag'], null=False))
+        ))
+        db.create_unique(m2m_table_name, ['inventory_id', 'tag_id'])
+
+        # Adding M2M table for field audit_trail on 'Inventory'
+        m2m_table_name = db.shorten_name(u'main_inventory_audit_trail')
+        db.create_table(m2m_table_name, (
+            ('id', models.AutoField(verbose_name='ID', primary_key=True, auto_created=True)),
+            ('inventory', models.ForeignKey(orm['main.inventory'], null=False)),
+            ('audittrail', models.ForeignKey(orm['main.audittrail'], null=False))
+        ))
+        db.create_unique(m2m_table_name, ['inventory_id', 'audittrail_id'])
+
+        # Adding M2M table for field tags on 'Host'
+        m2m_table_name = db.shorten_name(u'main_host_tags')
+        db.create_table(m2m_table_name, (
+            ('id', models.AutoField(verbose_name='ID', primary_key=True, auto_created=True)),
+            ('host', models.ForeignKey(orm['main.host'], null=False)),
+            ('tag', models.ForeignKey(orm['main.tag'], null=False))
+        ))
+        db.create_unique(m2m_table_name, ['host_id', 'tag_id'])
+
+        # Adding M2M table for field audit_trail on 'Host'
+        m2m_table_name = db.shorten_name(u'main_host_audit_trail')
+        db.create_table(m2m_table_name, (
+            ('id', models.AutoField(verbose_name='ID', primary_key=True, auto_created=True)),
+            ('host', models.ForeignKey(orm['main.host'], null=False)),
+            ('audittrail', models.ForeignKey(orm['main.audittrail'], null=False))
+        ))
+        db.create_unique(m2m_table_name, ['host_id', 'audittrail_id'])
+
+        # Adding M2M table for field tags on 'Group'
+        m2m_table_name = db.shorten_name(u'main_group_tags')
+        db.create_table(m2m_table_name, (
+            ('id', models.AutoField(verbose_name='ID', primary_key=True, auto_created=True)),
+            ('group', models.ForeignKey(orm['main.group'], null=False)),
+            ('tag', models.ForeignKey(orm['main.tag'], null=False))
+        ))
+        db.create_unique(m2m_table_name, ['group_id', 'tag_id'])
+
+        # Adding M2M table for field audit_trail on 'Group'
+        m2m_table_name = db.shorten_name(u'main_group_audit_trail')
+        db.create_table(m2m_table_name, (
+            ('id', models.AutoField(verbose_name='ID', primary_key=True, auto_created=True)),
+            ('group', models.ForeignKey(orm['main.group'], null=False)),
+            ('audittrail', models.ForeignKey(orm['main.audittrail'], null=False))
+        ))
+        db.create_unique(m2m_table_name, ['group_id', 'audittrail_id'])
+
+        # Adding M2M table for field audit_trail on 'Credential'
+        m2m_table_name = db.shorten_name(u'main_credential_audit_trail')
+        db.create_table(m2m_table_name, (
+            ('id', models.AutoField(verbose_name='ID', primary_key=True, auto_created=True)),
+            ('credential', models.ForeignKey(orm['main.credential'], null=False)),
+            ('audittrail', models.ForeignKey(orm['main.audittrail'], null=False))
+        ))
+        db.create_unique(m2m_table_name, ['credential_id', 'audittrail_id'])
+
+        # Adding M2M table for field tags on 'Credential'
+        m2m_table_name = db.shorten_name(u'main_credential_tags')
+        db.create_table(m2m_table_name, (
+            ('id', models.AutoField(verbose_name='ID', primary_key=True, auto_created=True)),
+            ('credential', models.ForeignKey(orm['main.credential'], null=False)),
+            ('tag', models.ForeignKey(orm['main.tag'], null=False))
+        ))
+        db.create_unique(m2m_table_name, ['credential_id', 'tag_id'])
+
+        # Adding M2M table for field tags on 'JobTemplate'
+        m2m_table_name = db.shorten_name(u'main_jobtemplate_tags')
+        db.create_table(m2m_table_name, (
+            ('id', models.AutoField(verbose_name='ID', primary_key=True, auto_created=True)),
+            ('jobtemplate', models.ForeignKey(orm['main.jobtemplate'], null=False)),
+            ('tag', models.ForeignKey(orm['main.tag'], null=False))
+        ))
+        db.create_unique(m2m_table_name, ['jobtemplate_id', 'tag_id'])
+
+        # Adding M2M table for field audit_trail on 'JobTemplate'
+        m2m_table_name = db.shorten_name(u'main_jobtemplate_audit_trail')
+        db.create_table(m2m_table_name, (
+            ('id', models.AutoField(verbose_name='ID', primary_key=True, auto_created=True)),
+            ('jobtemplate', models.ForeignKey(orm['main.jobtemplate'], null=False)),
+            ('audittrail', models.ForeignKey(orm['main.audittrail'], null=False))
+        ))
+        db.create_unique(m2m_table_name, ['jobtemplate_id', 'audittrail_id'])
+
+        # Adding M2M table for field tags on 'Team'
+        m2m_table_name = db.shorten_name(u'main_team_tags')
+        db.create_table(m2m_table_name, (
+            ('id', models.AutoField(verbose_name='ID', primary_key=True, auto_created=True)),
+            ('team', models.ForeignKey(orm['main.team'], null=False)),
+            ('tag', models.ForeignKey(orm['main.tag'], null=False))
+        ))
+        db.create_unique(m2m_table_name, ['team_id', 'tag_id'])
+
+        # Adding M2M table for field audit_trail on 'Team'
+        m2m_table_name = db.shorten_name(u'main_team_audit_trail')
+        db.create_table(m2m_table_name, (
+            ('id', models.AutoField(verbose_name='ID', primary_key=True, auto_created=True)),
+            ('team', models.ForeignKey(orm['main.team'], null=False)),
+            ('audittrail', models.ForeignKey(orm['main.audittrail'], null=False))
+        ))
+        db.create_unique(m2m_table_name, ['team_id', 'audittrail_id'])
+
+        # Adding M2M table for field tags on 'Project'
+        m2m_table_name = db.shorten_name(u'main_project_tags')
+        db.create_table(m2m_table_name, (
+            ('id', models.AutoField(verbose_name='ID', primary_key=True, auto_created=True)),
+            ('project', models.ForeignKey(orm[u'main.project'], null=False)),
+            ('tag', models.ForeignKey(orm['main.tag'], null=False))
+        ))
+        db.create_unique(m2m_table_name, ['project_id', 'tag_id'])
+
+        # Adding M2M table for field audit_trail on 'Project'
+        m2m_table_name = db.shorten_name(u'main_project_audit_trail')
+        db.create_table(m2m_table_name, (
+            ('id', models.AutoField(verbose_name='ID', primary_key=True, auto_created=True)),
+            ('project', models.ForeignKey(orm[u'main.project'], null=False)),
+            ('audittrail', models.ForeignKey(orm['main.audittrail'], null=False))
+        ))
+        db.create_unique(m2m_table_name, ['project_id', 'audittrail_id'])
+
+        # Adding M2M table for field tags on 'Permission'
+        m2m_table_name = db.shorten_name(u'main_permission_tags')
+        db.create_table(m2m_table_name, (
+            ('id', models.AutoField(verbose_name='ID', primary_key=True, auto_created=True)),
+            ('permission', models.ForeignKey(orm['main.permission'], null=False)),
+            ('tag', models.ForeignKey(orm['main.tag'], null=False))
+        ))
+        db.create_unique(m2m_table_name, ['permission_id', 'tag_id'])
+
+        # Adding M2M table for field audit_trail on 'Permission'
+        m2m_table_name = db.shorten_name(u'main_permission_audit_trail')
+        db.create_table(m2m_table_name, (
+            ('id', models.AutoField(verbose_name='ID', primary_key=True, auto_created=True)),
+            ('permission', models.ForeignKey(orm['main.permission'], null=False)),
+            ('audittrail', models.ForeignKey(orm['main.audittrail'], null=False))
+        ))
+        db.create_unique(m2m_table_name, ['permission_id', 'audittrail_id'])
+
+        # Adding M2M table for field tags on 'VariableData'
+        m2m_table_name = db.shorten_name(u'main_variabledata_tags')
+        db.create_table(m2m_table_name, (
+            ('id', models.AutoField(verbose_name='ID', primary_key=True, auto_created=True)),
+            ('variabledata', models.ForeignKey(orm['main.variabledata'], null=False)),
+            ('tag', models.ForeignKey(orm['main.tag'], null=False))
+        ))
+        db.create_unique(m2m_table_name, ['variabledata_id', 'tag_id'])
+
+        # Adding M2M table for field audit_trail on 'VariableData'
+        m2m_table_name = db.shorten_name(u'main_variabledata_audit_trail')
+        db.create_table(m2m_table_name, (
+            ('id', models.AutoField(verbose_name='ID', primary_key=True, auto_created=True)),
+            ('variabledata', models.ForeignKey(orm['main.variabledata'], null=False)),
+            ('audittrail', models.ForeignKey(orm['main.audittrail'], null=False))
+        ))
+        db.create_unique(m2m_table_name, ['variabledata_id', 'audittrail_id'])
+
+        # Adding M2M table for field tags on 'Organization'
+        m2m_table_name = db.shorten_name(u'main_organization_tags')
+        db.create_table(m2m_table_name, (
+            ('id', models.AutoField(verbose_name='ID', primary_key=True, auto_created=True)),
+            ('organization', models.ForeignKey(orm['main.organization'], null=False)),
+            ('tag', models.ForeignKey(orm['main.tag'], null=False))
+        ))
+        db.create_unique(m2m_table_name, ['organization_id', 'tag_id'])
+
+        # Adding M2M table for field audit_trail on 'Organization'
+        m2m_table_name = db.shorten_name(u'main_organization_audit_trail')
+        db.create_table(m2m_table_name, (
+            ('id', models.AutoField(verbose_name='ID', primary_key=True, auto_created=True)),
+            ('organization', models.ForeignKey(orm['main.organization'], null=False)),
+            ('audittrail', models.ForeignKey(orm['main.audittrail'], null=False))
+        ))
+        db.create_unique(m2m_table_name, ['organization_id', 'audittrail_id'])
+
+
+    models = {
+        u'auth.group': {
+            'Meta': {'object_name': 'Group'},
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'name': ('django.db.models.fields.CharField', [], {'unique': 'True', 'max_length': '80'}),
+            'permissions': ('django.db.models.fields.related.ManyToManyField', [], {'to': u"orm['auth.Permission']", 'symmetrical': 'False', 'blank': 'True'})
+        },
+        u'auth.permission': {
+            'Meta': {'ordering': "(u'content_type__app_label', u'content_type__model', u'codename')", 'unique_together': "((u'content_type', u'codename'),)", 'object_name': 'Permission'},
+            'codename': ('django.db.models.fields.CharField', [], {'max_length': '100'}),
+            'content_type': ('django.db.models.fields.related.ForeignKey', [], {'to': u"orm['contenttypes.ContentType']"}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'name': ('django.db.models.fields.CharField', [], {'max_length': '50'})
+        },
+        u'auth.user': {
+            'Meta': {'object_name': 'User'},
+            'date_joined': ('django.db.models.fields.DateTimeField', [], {'default': 'datetime.datetime.now'}),
+            'email': ('django.db.models.fields.EmailField', [], {'max_length': '75', 'blank': 'True'}),
+            'first_name': ('django.db.models.fields.CharField', [], {'max_length': '30', 'blank': 'True'}),
+            'groups': ('django.db.models.fields.related.ManyToManyField', [], {'to': u"orm['auth.Group']", 'symmetrical': 'False', 'blank': 'True'}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'is_active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'is_staff': ('django.db.models.fields.BooleanField', [], {'default': 'False'}),
+            'is_superuser': ('django.db.models.fields.BooleanField', [], {'default': 'False'}),
+            'last_login': ('django.db.models.fields.DateTimeField', [], {'default': 'datetime.datetime.now'}),
+            'last_name': ('django.db.models.fields.CharField', [], {'max_length': '30', 'blank': 'True'}),
+            'password': ('django.db.models.fields.CharField', [], {'max_length': '128'}),
+            'user_permissions': ('django.db.models.fields.related.ManyToManyField', [], {'to': u"orm['auth.Permission']", 'symmetrical': 'False', 'blank': 'True'}),
+            'username': ('django.db.models.fields.CharField', [], {'unique': 'True', 'max_length': '30'})
+        },
+        u'contenttypes.contenttype': {
+            'Meta': {'ordering': "('name',)", 'unique_together': "(('app_label', 'model'),)", 'object_name': 'ContentType', 'db_table': "'django_content_type'"},
+            'app_label': ('django.db.models.fields.CharField', [], {'max_length': '100'}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'model': ('django.db.models.fields.CharField', [], {'max_length': '100'}),
+            'name': ('django.db.models.fields.CharField', [], {'max_length': '100'})
+        },
+        'main.credential': {
+            'Meta': {'object_name': 'Credential'},
+            'active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'created_by': ('django.db.models.fields.related.ForeignKey', [], {'related_name': '"{\'class\': \'credential\', \'app_label\': \'main\'}(class)s_created"', 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"}),
+            'description': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'name': ('django.db.models.fields.CharField', [], {'max_length': '512'}),
+            'ssh_key_data': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            'ssh_key_unlock': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'blank': 'True'}),
+            'ssh_password': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'blank': 'True'}),
+            'ssh_username': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'blank': 'True'}),
+            'sudo_password': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'blank': 'True'}),
+            'sudo_username': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'blank': 'True'}),
+            'team': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'credentials'", 'on_delete': 'models.SET_NULL', 'default': 'None', 'to': "orm['main.Team']", 'blank': 'True', 'null': 'True'}),
+            'user': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'credentials'", 'on_delete': 'models.SET_NULL', 'default': 'None', 'to': u"orm['auth.User']", 'blank': 'True', 'null': 'True'})
+        },
+        'main.group': {
+            'Meta': {'unique_together': "(('name', 'inventory'),)", 'object_name': 'Group'},
+            'active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'created_by': ('django.db.models.fields.related.ForeignKey', [], {'related_name': '"{\'class\': \'group\', \'app_label\': \'main\'}(class)s_created"', 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"}),
+            'description': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            'hosts': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'groups'", 'blank': 'True', 'to': "orm['main.Host']"}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'inventory': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'groups'", 'to': "orm['main.Inventory']"}),
+            'name': ('django.db.models.fields.CharField', [], {'max_length': '512'}),
+            'parents': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'children'", 'blank': 'True', 'to': "orm['main.Group']"}),
+            'variables': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True', 'null': 'True'}),
+            'variable_data': ('django.db.models.fields.related.OneToOneField', [], {'related_name': "'group'", 'unique': 'True', 'on_delete': 'models.SET_NULL', 'default': 'None', 'to': "orm['main.VariableData']", 'blank': 'True', 'null': 'True'})
+        },
+        'main.host': {
+            'Meta': {'unique_together': "(('name', 'inventory'),)", 'object_name': 'Host'},
+            'active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'created_by': ('django.db.models.fields.related.ForeignKey', [], {'related_name': '"{\'class\': \'host\', \'app_label\': \'main\'}(class)s_created"', 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"}),
+            'description': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'inventory': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'hosts'", 'to': "orm['main.Inventory']"}),
+            'last_job': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'hosts_as_last_job+'", 'on_delete': 'models.SET_NULL', 'default': 'None', 'to': "orm['main.Job']", 'blank': 'True', 'null': 'True'}),
+            'last_job_host_summary': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'hosts_as_last_job_summary+'", 'on_delete': 'models.SET_NULL', 'default': 'None', 'to': u"orm['main.JobHostSummary']", 'blank': 'True', 'null': 'True'}),
+            'name': ('django.db.models.fields.CharField', [], {'max_length': '512'}),
+            'variables': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True', 'null': 'True'}),
+            'variable_data': ('django.db.models.fields.related.OneToOneField', [], {'related_name': "'host'", 'unique': 'True', 'on_delete': 'models.SET_NULL', 'default': 'None', 'to': "orm['main.VariableData']", 'blank': 'True', 'null': 'True'})
+        },
+        'main.inventory': {
+            'Meta': {'unique_together': "(('name', 'organization'),)", 'object_name': 'Inventory'},
+            'active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'created_by': ('django.db.models.fields.related.ForeignKey', [], {'related_name': '"{\'class\': \'inventory\', \'app_label\': \'main\'}(class)s_created"', 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"}),
+            'description': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'name': ('django.db.models.fields.CharField', [], {'unique': 'True', 'max_length': '512'}),
+            'organization': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'inventories'", 'to': "orm['main.Organization']"})
+        },
+        'main.job': {
+            'Meta': {'object_name': 'Job'},
+            'active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'cancel_flag': ('django.db.models.fields.BooleanField', [], {'default': 'False'}),
+            'celery_task_id': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '100', 'blank': 'True'}),
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'created_by': ('django.db.models.fields.related.ForeignKey', [], {'related_name': '"{\'class\': \'job\', \'app_label\': \'main\'}(class)s_created"', 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"}),
+            'credential': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'jobs'", 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': "orm['main.Credential']"}),
+            'description': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            'extra_vars': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            'failed': ('django.db.models.fields.BooleanField', [], {'default': 'False'}),
+            'forks': ('django.db.models.fields.PositiveIntegerField', [], {'default': '0', 'blank': 'True'}),
+            'hosts': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'jobs'", 'blank': 'True', 'through': u"orm['main.JobHostSummary']", 'to': "orm['main.Host']"}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'inventory': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'jobs'", 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': "orm['main.Inventory']"}),
+            'job_args': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'null': 'True', 'blank': 'True'}),
+            'job_cwd': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'null': 'True', 'blank': 'True'}),
+            'job_env': ('jsonfield.fields.JSONField', [], {'default': '{}', 'null': 'True', 'blank': 'True'}),
+            'job_tags': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'null': 'True', 'blank': 'True'}),
+            'job_template': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'jobs'", 'on_delete': 'models.SET_NULL', 'default': 'None', 'to': "orm['main.JobTemplate']", 'blank': 'True', 'null': 'True'}),
+            'job_type': ('django.db.models.fields.CharField', [], {'max_length': '64'}),
+            'limit': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'blank': 'True'}),
+            'name': ('django.db.models.fields.CharField', [], {'unique': 'True', 'max_length': '512'}),
+            'playbook': ('django.db.models.fields.CharField', [], {'max_length': '1024'}),
+            'project': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'jobs'", 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['main.Project']"}),
+            'result_stdout': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            'result_traceback': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            'status': ('django.db.models.fields.CharField', [], {'default': "'new'", 'max_length': '20'}),
+            'verbosity': ('django.db.models.fields.PositiveIntegerField', [], {'default': '0', 'blank': 'True'})
+        },
+        'main.jobevent': {
+            'Meta': {'ordering': "('pk',)", 'object_name': 'JobEvent'},
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'event': ('django.db.models.fields.CharField', [], {'max_length': '100'}),
+            'event_data': ('jsonfield.fields.JSONField', [], {'default': '{}', 'blank': 'True'}),
+            'failed': ('django.db.models.fields.BooleanField', [], {'default': 'False'}),
+            'host': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'job_events'", 'on_delete': 'models.SET_NULL', 'default': 'None', 'to': "orm['main.Host']", 'blank': 'True', 'null': 'True'}),
+            'hosts': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'job_events'", 'blank': 'True', 'to': "orm['main.Host']"}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'job': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'job_events'", 'to': "orm['main.Job']"}),
+            'parent': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'children'", 'on_delete': 'models.SET_NULL', 'default': 'None', 'to': "orm['main.JobEvent']", 'blank': 'True', 'null': 'True'}),
+            'play': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'blank': 'True', 'null': 'True'}),
+            'task': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'blank': 'True', 'null': 'True'})
+        },
+        u'main.jobhostsummary': {
+            'Meta': {'ordering': "('-pk',)", 'unique_together': "[('job', 'host')]", 'object_name': 'JobHostSummary'},
+            'changed': ('django.db.models.fields.PositiveIntegerField', [], {'default': '0'}),
+            'dark': ('django.db.models.fields.PositiveIntegerField', [], {'default': '0'}),
+            'failed': ('django.db.models.fields.BooleanField', [], {'default': 'False'}),
+            'failures': ('django.db.models.fields.PositiveIntegerField', [], {'default': '0'}),
+            'host': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'job_host_summaries'", 'to': "orm['main.Host']"}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'job': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'job_host_summaries'", 'to': "orm['main.Job']"}),
+            'ok': ('django.db.models.fields.PositiveIntegerField', [], {'default': '0'}),
+            'processed': ('django.db.models.fields.PositiveIntegerField', [], {'default': '0'}),
+            'skipped': ('django.db.models.fields.PositiveIntegerField', [], {'default': '0'})
+        },
+        'main.jobtemplate': {
+            'Meta': {'object_name': 'JobTemplate'},
+            'active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'created_by': ('django.db.models.fields.related.ForeignKey', [], {'related_name': '"{\'class\': \'jobtemplate\', \'app_label\': \'main\'}(class)s_created"', 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"}),
+            'credential': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'job_templates'", 'on_delete': 'models.SET_NULL', 'default': 'None', 'to': "orm['main.Credential']", 'blank': 'True', 'null': 'True'}),
+            'description': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            'extra_vars': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            'forks': ('django.db.models.fields.PositiveIntegerField', [], {'default': '0', 'blank': 'True'}),
+            'host_config_key': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'blank': 'True', 'null': 'True'}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'inventory': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'job_templates'", 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': "orm['main.Inventory']"}),
+            'job_tags': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'null': 'True', 'blank': 'True'}),
+            'job_type': ('django.db.models.fields.CharField', [], {'max_length': '64'}),
+            'limit': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'blank': 'True'}),
+            'name': ('django.db.models.fields.CharField', [], {'unique': 'True', 'max_length': '512'}),
+            'playbook': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024'}),
+            'project': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'job_templates'", 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['main.Project']"}),
+            'verbosity': ('django.db.models.fields.PositiveIntegerField', [], {'default': '0', 'blank': 'True'})
+        },
+        'main.organization': {
+            'Meta': {'object_name': 'Organization'},
+            'active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'admins': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'admin_of_organizations'", 'blank': 'True', 'to': u"orm['auth.User']"}),
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'created_by': ('django.db.models.fields.related.ForeignKey', [], {'related_name': '"{\'class\': \'organization\', \'app_label\': \'main\'}(class)s_created"', 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"}),
+            'description': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'name': ('django.db.models.fields.CharField', [], {'unique': 'True', 'max_length': '512'}),
+            'projects': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'organizations'", 'blank': 'True', 'to': u"orm['main.Project']"}),
+            'users': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'organizations'", 'blank': 'True', 'to': u"orm['auth.User']"})
+        },
+        'main.permission': {
+            'Meta': {'object_name': 'Permission'},
+            'active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'created_by': ('django.db.models.fields.related.ForeignKey', [], {'related_name': '"{\'class\': \'permission\', \'app_label\': \'main\'}(class)s_created"', 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"}),
+            'description': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'inventory': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'permissions'", 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': "orm['main.Inventory']"}),
+            'name': ('django.db.models.fields.CharField', [], {'max_length': '512'}),
+            'permission_type': ('django.db.models.fields.CharField', [], {'max_length': '64'}),
+            'project': ('django.db.models.fields.related.ForeignKey', [], {'blank': 'True', 'related_name': "'permissions'", 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['main.Project']"}),
+            'team': ('django.db.models.fields.related.ForeignKey', [], {'blank': 'True', 'related_name': "'permissions'", 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': "orm['main.Team']"}),
+            'user': ('django.db.models.fields.related.ForeignKey', [], {'blank': 'True', 'related_name': "'permissions'", 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"})
+        },
+        u'main.project': {
+            'Meta': {'object_name': 'Project'},
+            'active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'created_by': ('django.db.models.fields.related.ForeignKey', [], {'related_name': '"{\'class\': \'project\', \'app_label\': u\'main\'}(class)s_created"', 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"}),
+            'description': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'local_path': ('django.db.models.fields.CharField', [], {'max_length': '1024'}),
+            'name': ('django.db.models.fields.CharField', [], {'unique': 'True', 'max_length': '512'})
+        },
+        'main.team': {
+            'Meta': {'object_name': 'Team'},
+            'active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'created_by': ('django.db.models.fields.related.ForeignKey', [], {'related_name': '"{\'class\': \'team\', \'app_label\': \'main\'}(class)s_created"', 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"}),
+            'description': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'name': ('django.db.models.fields.CharField', [], {'unique': 'True', 'max_length': '512'}),
+            'organization': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'teams'", 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': "orm['main.Organization']"}),
+            'projects': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'teams'", 'blank': 'True', 'to': u"orm['main.Project']"}),
+            'users': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'teams'", 'blank': 'True', 'to': u"orm['auth.User']"})
+        },
+        'main.variabledata': {
+            'Meta': {'object_name': 'VariableData'},
+            'active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'created_by': ('django.db.models.fields.related.ForeignKey', [], {'related_name': '"{\'class\': \'variabledata\', \'app_label\': \'main\'}(class)s_created"', 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"}),
+            'data': ('django.db.models.fields.TextField', [], {'default': "''"}),
+            'description': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'name': ('django.db.models.fields.CharField', [], {'max_length': '512'})
+        },
+        u'taggit.tag': {
+            'Meta': {'object_name': 'Tag'},
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'name': ('django.db.models.fields.CharField', [], {'unique': 'True', 'max_length': '100'}),
+            'slug': ('django.db.models.fields.SlugField', [], {'unique': 'True', 'max_length': '100'})
+        },
+        u'taggit.taggeditem': {
+            'Meta': {'object_name': 'TaggedItem'},
+            'content_type': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "u'taggit_taggeditem_tagged_items'", 'to': u"orm['contenttypes.ContentType']"}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'object_id': ('django.db.models.fields.IntegerField', [], {'db_index': 'True'}),
+            'tag': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "u'taggit_taggeditem_items'", 'to': u"orm['taggit.Tag']"})
+        }
+    }
+
+    complete_apps = ['main']

awx/main/migrations/0003_v12b2_changes.py

@@ -0,0 +1,387 @@
+# -*- coding: utf-8 -*-
+import datetime
+from south.db import db
+from south.v2 import DataMigration
+from django.db import models
+
+
+class Migration(DataMigration):
+    '''
+    Data migration for AWX 1.2-b2 release.
+    - Update variables from VariableData.data for Host and Group models.
+    - Update new char/text field values to be empty string if they are null.
+    - Update failed flag for existing JobHostSummary models.
+    - Update parent field for existing JobEvent models.
+    - Update hosts for existing JobEvent models.
+    '''
+
+    def forwards(self, orm):
+
+        for host in orm.Host.objects.all():
+            if host.variable_data:
+                host.variables = host.variable_data.data
+            else:
+                host.variables = ''
+            host.save()
+
+        for group in orm.Group.objects.all():
+            if group.variable_data:
+                group.variables = group.variable_data.data
+            else:
+                group.variables = ''
+            group.save()
+
+        for job_template in orm.JobTemplate.objects.all():
+            changed = False
+            if job_template.host_config_key is None:
+                job_template.host_config_key = ''
+                changed = True
+            if job_template.job_tags is None:
+                job_template.job_tags = ''
+                changed = True
+            if changed:
+                job_template.save()
+        
+        for job in orm.Job.objects.all():
+            changed = False
+            if job.job_tags is None:
+                job.job_tags = ''
+                changed = True
+            if job.job_args is None:
+                job.job_args = ''
+                changed = True
+            if job.job_cwd is None:
+                job.job_cwd = ''
+                changed = True
+            if job.job_env is None:
+                job.job_env = ''
+                changed = True
+            if changed:
+                job.save()
+
+        for job_host_summary in orm.JobHostSummary.objects.all():
+            if job_host_summary.failures or job_host_summary.dark:
+                job_host_summary.failed = True
+                job_host_summary.save()
+
+        for job_event in orm.JobEvent.objects.order_by('pk'):
+            job_event.play = job_event.event_data.get('play', '')
+            job_event.task = job_event.event_data.get('task', '')
+            job_event.parent = None
+            parent_events = set()
+            if job_event.event in ('playbook_on_play_start',
+                                   'playbook_on_stats',
+                                   'playbook_on_vars_prompt'):
+                parent_events.add('playbook_on_start')
+            elif job_event.event in ('playbook_on_notify', 'playbook_on_setup',
+                                     'playbook_on_task_start',
+                                     'playbook_on_no_hosts_matched',
+                                     'playbook_on_no_hosts_remaining',
+                                     'playbook_on_import_for_host',
+                                     'playbook_on_not_import_for_host'):
+                parent_events.add('playbook_on_play_start')
+            elif job_event.event.startswith('runner_on_'):
+                parent_events.add('playbook_on_setup')
+                parent_events.add('playbook_on_task_start')
+            if parent_events:
+                try:
+                    qs = job_event.job.job_events.all()
+                    qs = qs.filter(pk__lt=job_event.pk,
+                                   event__in=parent_events)
+                    job_event.parent = qs.order_by('-pk')[0]
+                except IndexError:
+                    pass
+            job_event.save()
+
+        def update_job_event_hosts(orm, job_event, extra_hosts=None):
+            extra_hosts = extra_hosts or []
+            hostnames = set()
+            if job_event.event_data.get('host', ''):
+                hostnames.add(job_event.event_data['host'])
+            if job_event.event == 'playbook_on_stats':
+                try:
+                    for v in job_event.event_data.values():
+                        hostnames.update(v.keys())
+                except AttributeError:
+                    pass
+            if job_event.host:
+                job_event.hosts.add(job_event.host)
+            for hostname in hostnames:
+                try:
+                    host = job_event.job.inventory.hosts.get(name=hostname)
+                except orm.Host.DoesNotExist:
+                    continue
+                job_event.hosts.add(host)
+            for host in extra_hosts:
+                job_event.hosts.add(host)
+            if job_event.parent:
+                update_job_event_hosts(orm, job_event.parent,
+                                       job_event.hosts.all())
+
+        for job_event in orm.JobEvent.objects.all():
+            update_job_event_hosts(orm, job_event)
+
+    def backwards(self, orm):
+
+        for host in orm.Host.objects.all():
+            if host.variable_data:
+                variable_data = host.variable_data
+                variable_data.data = host.variables
+                variable_data.save()
+            else:
+                host.variable_data = orm.VariableData.objects.create(data=host.variables)
+                host.save()
+
+        for group in orm.Group.objects.all():
+            if group.variable_data:
+                variable_data = group.variable_data
+                variable_data.data = group.variables
+                variable_data.save()
+            else:
+                group.variable_data = orm.VariableData.objects.create(data=group.variables)
+                group.save()
+
+    models = {
+        u'auth.group': {
+            'Meta': {'object_name': 'Group'},
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'name': ('django.db.models.fields.CharField', [], {'unique': 'True', 'max_length': '80'}),
+            'permissions': ('django.db.models.fields.related.ManyToManyField', [], {'to': u"orm['auth.Permission']", 'symmetrical': 'False', 'blank': 'True'})
+        },
+        u'auth.permission': {
+            'Meta': {'ordering': "(u'content_type__app_label', u'content_type__model', u'codename')", 'unique_together': "((u'content_type', u'codename'),)", 'object_name': 'Permission'},
+            'codename': ('django.db.models.fields.CharField', [], {'max_length': '100'}),
+            'content_type': ('django.db.models.fields.related.ForeignKey', [], {'to': u"orm['contenttypes.ContentType']"}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'name': ('django.db.models.fields.CharField', [], {'max_length': '50'})
+        },
+        u'auth.user': {
+            'Meta': {'object_name': 'User'},
+            'date_joined': ('django.db.models.fields.DateTimeField', [], {'default': 'datetime.datetime.now'}),
+            'email': ('django.db.models.fields.EmailField', [], {'max_length': '75', 'blank': 'True'}),
+            'first_name': ('django.db.models.fields.CharField', [], {'max_length': '30', 'blank': 'True'}),
+            'groups': ('django.db.models.fields.related.ManyToManyField', [], {'to': u"orm['auth.Group']", 'symmetrical': 'False', 'blank': 'True'}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'is_active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'is_staff': ('django.db.models.fields.BooleanField', [], {'default': 'False'}),
+            'is_superuser': ('django.db.models.fields.BooleanField', [], {'default': 'False'}),
+            'last_login': ('django.db.models.fields.DateTimeField', [], {'default': 'datetime.datetime.now'}),
+            'last_name': ('django.db.models.fields.CharField', [], {'max_length': '30', 'blank': 'True'}),
+            'password': ('django.db.models.fields.CharField', [], {'max_length': '128'}),
+            'user_permissions': ('django.db.models.fields.related.ManyToManyField', [], {'to': u"orm['auth.Permission']", 'symmetrical': 'False', 'blank': 'True'}),
+            'username': ('django.db.models.fields.CharField', [], {'unique': 'True', 'max_length': '30'})
+        },
+        u'contenttypes.contenttype': {
+            'Meta': {'ordering': "('name',)", 'unique_together': "(('app_label', 'model'),)", 'object_name': 'ContentType', 'db_table': "'django_content_type'"},
+            'app_label': ('django.db.models.fields.CharField', [], {'max_length': '100'}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'model': ('django.db.models.fields.CharField', [], {'max_length': '100'}),
+            'name': ('django.db.models.fields.CharField', [], {'max_length': '100'})
+        },
+        'main.credential': {
+            'Meta': {'object_name': 'Credential'},
+            'active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'created_by': ('django.db.models.fields.related.ForeignKey', [], {'related_name': '"{\'class\': \'credential\', \'app_label\': \'main\'}(class)s_created"', 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"}),
+            'description': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'name': ('django.db.models.fields.CharField', [], {'max_length': '512'}),
+            'ssh_key_data': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            'ssh_key_unlock': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'blank': 'True'}),
+            'ssh_password': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'blank': 'True'}),
+            'ssh_username': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'blank': 'True'}),
+            'sudo_password': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'blank': 'True'}),
+            'sudo_username': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'blank': 'True'}),
+            'team': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'credentials'", 'on_delete': 'models.SET_NULL', 'default': 'None', 'to': "orm['main.Team']", 'blank': 'True', 'null': 'True'}),
+            'user': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'credentials'", 'on_delete': 'models.SET_NULL', 'default': 'None', 'to': u"orm['auth.User']", 'blank': 'True', 'null': 'True'})
+        },
+        'main.group': {
+            'Meta': {'unique_together': "(('name', 'inventory'),)", 'object_name': 'Group'},
+            'active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'created_by': ('django.db.models.fields.related.ForeignKey', [], {'related_name': '"{\'class\': \'group\', \'app_label\': \'main\'}(class)s_created"', 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"}),
+            'description': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            'hosts': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'groups'", 'blank': 'True', 'to': "orm['main.Host']"}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'inventory': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'groups'", 'to': "orm['main.Inventory']"}),
+            'name': ('django.db.models.fields.CharField', [], {'max_length': '512'}),
+            'parents': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'children'", 'blank': 'True', 'to': "orm['main.Group']"}),
+            'variable_data': ('django.db.models.fields.related.OneToOneField', [], {'related_name': "'group'", 'unique': 'True', 'on_delete': 'models.SET_NULL', 'default': 'None', 'to': "orm['main.VariableData']", 'blank': 'True', 'null': 'True'}),
+            'variables': ('django.db.models.fields.TextField', [], {'default': "''", 'null': 'True', 'blank': 'True'})
+        },
+        'main.host': {
+            'Meta': {'unique_together': "(('name', 'inventory'),)", 'object_name': 'Host'},
+            'active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'created_by': ('django.db.models.fields.related.ForeignKey', [], {'related_name': '"{\'class\': \'host\', \'app_label\': \'main\'}(class)s_created"', 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"}),
+            'description': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'inventory': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'hosts'", 'to': "orm['main.Inventory']"}),
+            'last_job': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'hosts_as_last_job+'", 'on_delete': 'models.SET_NULL', 'default': 'None', 'to': "orm['main.Job']", 'blank': 'True', 'null': 'True'}),
+            'last_job_host_summary': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'hosts_as_last_job_summary+'", 'on_delete': 'models.SET_NULL', 'default': 'None', 'to': u"orm['main.JobHostSummary']", 'blank': 'True', 'null': 'True'}),
+            'name': ('django.db.models.fields.CharField', [], {'max_length': '512'}),
+            'variable_data': ('django.db.models.fields.related.OneToOneField', [], {'related_name': "'host'", 'unique': 'True', 'on_delete': 'models.SET_NULL', 'default': 'None', 'to': "orm['main.VariableData']", 'blank': 'True', 'null': 'True'}),
+            'variables': ('django.db.models.fields.TextField', [], {'default': "''", 'null': 'True', 'blank': 'True'})
+        },
+        'main.inventory': {
+            'Meta': {'unique_together': "(('name', 'organization'),)", 'object_name': 'Inventory'},
+            'active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'created_by': ('django.db.models.fields.related.ForeignKey', [], {'related_name': '"{\'class\': \'inventory\', \'app_label\': \'main\'}(class)s_created"', 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"}),
+            'description': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'name': ('django.db.models.fields.CharField', [], {'unique': 'True', 'max_length': '512'}),
+            'organization': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'inventories'", 'to': "orm['main.Organization']"})
+        },
+        'main.job': {
+            'Meta': {'object_name': 'Job'},
+            'active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'cancel_flag': ('django.db.models.fields.BooleanField', [], {'default': 'False'}),
+            'celery_task_id': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '100', 'blank': 'True'}),
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'created_by': ('django.db.models.fields.related.ForeignKey', [], {'related_name': '"{\'class\': \'job\', \'app_label\': \'main\'}(class)s_created"', 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"}),
+            'credential': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'jobs'", 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': "orm['main.Credential']"}),
+            'description': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            'extra_vars': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            'failed': ('django.db.models.fields.BooleanField', [], {'default': 'False'}),
+            'forks': ('django.db.models.fields.PositiveIntegerField', [], {'default': '0', 'blank': 'True'}),
+            'hosts': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'jobs'", 'blank': 'True', 'through': u"orm['main.JobHostSummary']", 'to': "orm['main.Host']"}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'inventory': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'jobs'", 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': "orm['main.Inventory']"}),
+            'job_args': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'null': 'True', 'blank': 'True'}),
+            'job_cwd': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'null': 'True', 'blank': 'True'}),
+            'job_env': ('jsonfield.fields.JSONField', [], {'default': '{}', 'null': 'True', 'blank': 'True'}),
+            'job_tags': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'null': 'True', 'blank': 'True'}),
+            'job_template': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'jobs'", 'on_delete': 'models.SET_NULL', 'default': 'None', 'to': "orm['main.JobTemplate']", 'blank': 'True', 'null': 'True'}),
+            'job_type': ('django.db.models.fields.CharField', [], {'max_length': '64'}),
+            'limit': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'blank': 'True'}),
+            'name': ('django.db.models.fields.CharField', [], {'unique': 'True', 'max_length': '512'}),
+            'playbook': ('django.db.models.fields.CharField', [], {'max_length': '1024'}),
+            'project': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'jobs'", 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['main.Project']"}),
+            'result_stdout': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            'result_traceback': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            'status': ('django.db.models.fields.CharField', [], {'default': "'new'", 'max_length': '20'}),
+            'verbosity': ('django.db.models.fields.PositiveIntegerField', [], {'default': '0', 'blank': 'True'})
+        },
+        'main.jobevent': {
+            'Meta': {'ordering': "('pk',)", 'object_name': 'JobEvent'},
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'event': ('django.db.models.fields.CharField', [], {'max_length': '100'}),
+            'event_data': ('jsonfield.fields.JSONField', [], {'default': '{}', 'blank': 'True'}),
+            'failed': ('django.db.models.fields.BooleanField', [], {'default': 'False'}),
+            'host': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'job_events'", 'on_delete': 'models.SET_NULL', 'default': 'None', 'to': "orm['main.Host']", 'blank': 'True', 'null': 'True'}),
+            'hosts': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'job_events'", 'blank': 'True', 'to': "orm['main.Host']"}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'job': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'job_events'", 'to': "orm['main.Job']"}),
+            'parent': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'children'", 'on_delete': 'models.SET_NULL', 'default': 'None', 'to': "orm['main.JobEvent']", 'blank': 'True', 'null': 'True'}),
+            'play': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'null': 'True', 'blank': 'True'}),
+            'task': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'null': 'True', 'blank': 'True'})
+        },
+        u'main.jobhostsummary': {
+            'Meta': {'ordering': "('-pk',)", 'unique_together': "[('job', 'host')]", 'object_name': 'JobHostSummary'},
+            'changed': ('django.db.models.fields.PositiveIntegerField', [], {'default': '0'}),
+            'dark': ('django.db.models.fields.PositiveIntegerField', [], {'default': '0'}),
+            'failed': ('django.db.models.fields.BooleanField', [], {'default': 'False'}),
+            'failures': ('django.db.models.fields.PositiveIntegerField', [], {'default': '0'}),
+            'host': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'job_host_summaries'", 'to': "orm['main.Host']"}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'job': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'job_host_summaries'", 'to': "orm['main.Job']"}),
+            'ok': ('django.db.models.fields.PositiveIntegerField', [], {'default': '0'}),
+            'processed': ('django.db.models.fields.PositiveIntegerField', [], {'default': '0'}),
+            'skipped': ('django.db.models.fields.PositiveIntegerField', [], {'default': '0'})
+        },
+        'main.jobtemplate': {
+            'Meta': {'object_name': 'JobTemplate'},
+            'active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'created_by': ('django.db.models.fields.related.ForeignKey', [], {'related_name': '"{\'class\': \'jobtemplate\', \'app_label\': \'main\'}(class)s_created"', 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"}),
+            'credential': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'job_templates'", 'on_delete': 'models.SET_NULL', 'default': 'None', 'to': "orm['main.Credential']", 'blank': 'True', 'null': 'True'}),
+            'description': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            'extra_vars': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            'forks': ('django.db.models.fields.PositiveIntegerField', [], {'default': '0', 'blank': 'True'}),
+            'host_config_key': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'null': 'True', 'blank': 'True'}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'inventory': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'job_templates'", 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': "orm['main.Inventory']"}),
+            'job_tags': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'null': 'True', 'blank': 'True'}),
+            'job_type': ('django.db.models.fields.CharField', [], {'max_length': '64'}),
+            'limit': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'blank': 'True'}),
+            'name': ('django.db.models.fields.CharField', [], {'unique': 'True', 'max_length': '512'}),
+            'playbook': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024'}),
+            'project': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'job_templates'", 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['main.Project']"}),
+            'verbosity': ('django.db.models.fields.PositiveIntegerField', [], {'default': '0', 'blank': 'True'})
+        },
+        'main.organization': {
+            'Meta': {'object_name': 'Organization'},
+            'active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'admins': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'admin_of_organizations'", 'blank': 'True', 'to': u"orm['auth.User']"}),
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'created_by': ('django.db.models.fields.related.ForeignKey', [], {'related_name': '"{\'class\': \'organization\', \'app_label\': \'main\'}(class)s_created"', 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"}),
+            'description': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'name': ('django.db.models.fields.CharField', [], {'unique': 'True', 'max_length': '512'}),
+            'projects': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'organizations'", 'blank': 'True', 'to': u"orm['main.Project']"}),
+            'users': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'organizations'", 'blank': 'True', 'to': u"orm['auth.User']"})
+        },
+        'main.permission': {
+            'Meta': {'object_name': 'Permission'},
+            'active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'created_by': ('django.db.models.fields.related.ForeignKey', [], {'related_name': '"{\'class\': \'permission\', \'app_label\': \'main\'}(class)s_created"', 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"}),
+            'description': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'inventory': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'permissions'", 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': "orm['main.Inventory']"}),
+            'name': ('django.db.models.fields.CharField', [], {'max_length': '512'}),
+            'permission_type': ('django.db.models.fields.CharField', [], {'max_length': '64'}),
+            'project': ('django.db.models.fields.related.ForeignKey', [], {'blank': 'True', 'related_name': "'permissions'", 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['main.Project']"}),
+            'team': ('django.db.models.fields.related.ForeignKey', [], {'blank': 'True', 'related_name': "'permissions'", 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': "orm['main.Team']"}),
+            'user': ('django.db.models.fields.related.ForeignKey', [], {'blank': 'True', 'related_name': "'permissions'", 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"})
+        },
+        u'main.project': {
+            'Meta': {'object_name': 'Project'},
+            'active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'created_by': ('django.db.models.fields.related.ForeignKey', [], {'related_name': '"{\'class\': \'project\', \'app_label\': u\'main\'}(class)s_created"', 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"}),
+            'description': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'local_path': ('django.db.models.fields.CharField', [], {'max_length': '1024'}),
+            'name': ('django.db.models.fields.CharField', [], {'unique': 'True', 'max_length': '512'})
+        },
+        'main.team': {
+            'Meta': {'object_name': 'Team'},
+            'active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'created_by': ('django.db.models.fields.related.ForeignKey', [], {'related_name': '"{\'class\': \'team\', \'app_label\': \'main\'}(class)s_created"', 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"}),
+            'description': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'name': ('django.db.models.fields.CharField', [], {'unique': 'True', 'max_length': '512'}),
+            'organization': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'teams'", 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': "orm['main.Organization']"}),
+            'projects': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'teams'", 'blank': 'True', 'to': u"orm['main.Project']"}),
+            'users': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'teams'", 'blank': 'True', 'to': u"orm['auth.User']"})
+        },
+        'main.variabledata': {
+            'Meta': {'object_name': 'VariableData'},
+            'active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'created_by': ('django.db.models.fields.related.ForeignKey', [], {'related_name': '"{\'class\': \'variabledata\', \'app_label\': \'main\'}(class)s_created"', 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"}),
+            'data': ('django.db.models.fields.TextField', [], {'default': "''"}),
+            'description': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'name': ('django.db.models.fields.CharField', [], {'max_length': '512'})
+        },
+        u'taggit.tag': {
+            'Meta': {'object_name': 'Tag'},
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'name': ('django.db.models.fields.CharField', [], {'unique': 'True', 'max_length': '100'}),
+            'slug': ('django.db.models.fields.SlugField', [], {'unique': 'True', 'max_length': '100'})
+        },
+        u'taggit.taggeditem': {
+            'Meta': {'object_name': 'TaggedItem'},
+            'content_type': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "u'taggit_taggeditem_tagged_items'", 'to': u"orm['contenttypes.ContentType']"}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'object_id': ('django.db.models.fields.IntegerField', [], {'db_index': 'True'}),
+            'tag': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "u'taggit_taggeditem_items'", 'to': u"orm['taggit.Tag']"})
+        }
+    }
+
+    complete_apps = ['main']
+    symmetrical = True

awx/main/migrations/0004_v12b2_changes.py

@@ -0,0 +1,343 @@
+# -*- coding: utf-8 -*-
+import datetime
+from south.db import db
+from south.v2 import SchemaMigration
+from django.db import models
+
+
+class Migration(SchemaMigration):
+    '''
+    Schema migration for AWX 1.2-b2 release.
+    - Remove variable_data field on Host and Group models.
+    - Remove VariableData model.
+    - Remove null=True on new char fields previously added.
+
+    NOTE: This migration has been manually edited!
+    '''
+
+    def forwards(self, orm):
+
+        # Changing field 'Job.job_cwd'
+        db.alter_column(u'main_job', 'job_cwd', self.gf('django.db.models.fields.CharField')(max_length=1024))
+
+        # Changing field 'Job.job_tags'
+        db.alter_column(u'main_job', 'job_tags', self.gf('django.db.models.fields.CharField')(max_length=1024))
+
+        # Changing field 'Job.job_env'
+        db.alter_column(u'main_job', 'job_env', self.gf('jsonfield.fields.JSONField')())
+
+        # Changing field 'Job.job_args'
+        db.alter_column(u'main_job', 'job_args', self.gf('django.db.models.fields.CharField')(max_length=1024))
+
+        # Deleting field 'Host.variable_data'
+        db.delete_column(u'main_host', 'variable_data_id')
+
+        # Changing field 'Host.variables'
+        db.alter_column(u'main_host', 'variables', self.gf('django.db.models.fields.TextField')())
+
+        # Deleting field 'Group.variable_data'
+        db.delete_column(u'main_group', 'variable_data_id')
+
+        # Changing field 'Group.variables'
+        db.alter_column(u'main_group', 'variables', self.gf('django.db.models.fields.TextField')())
+
+        # Changing field 'JobTemplate.job_tags'
+        db.alter_column(u'main_jobtemplate', 'job_tags', self.gf('django.db.models.fields.CharField')(max_length=1024))
+
+        # Changing field 'JobTemplate.host_config_key'
+        db.alter_column(u'main_jobtemplate', 'host_config_key', self.gf('django.db.models.fields.CharField')(max_length=1024))
+
+        # Changing field 'JobEvent.play'
+        db.alter_column(u'main_jobevent', 'play', self.gf('django.db.models.fields.CharField')(max_length=1024))
+
+        # Changing field 'JobEvent.task'
+        db.alter_column(u'main_jobevent', 'task', self.gf('django.db.models.fields.CharField')(max_length=1024))
+
+        # Deleting model 'VariableData'
+        db.delete_table(u'main_variabledata')
+
+    def backwards(self, orm):
+
+        # Adding model 'VariableData'
+        db.create_table(u'main_variabledata', (
+            ('description', self.gf('django.db.models.fields.TextField')(default='', blank=True)),
+            ('created', self.gf('django.db.models.fields.DateTimeField')(auto_now_add=True, blank=True)),
+            ('active', self.gf('django.db.models.fields.BooleanField')(default=True)),
+            ('data', self.gf('django.db.models.fields.TextField')(default='')),
+            (u'id', self.gf('django.db.models.fields.AutoField')(primary_key=True)),
+            ('created_by', self.gf('django.db.models.fields.related.ForeignKey')(related_name="{'class': 'variabledata', 'app_label': 'main'}(class)s_created", null=True, on_delete=models.SET_NULL, to=orm['auth.User'])),
+            ('name', self.gf('django.db.models.fields.CharField')(max_length=512)),
+        ))
+        db.send_create_signal('main', ['VariableData'])
+
+        # Changing field 'Job.job_cwd'
+        db.alter_column(u'main_job', 'job_cwd', self.gf('django.db.models.fields.CharField')(max_length=1024, null=True))
+
+        # Changing field 'Job.job_tags'
+        db.alter_column(u'main_job', 'job_tags', self.gf('django.db.models.fields.CharField')(max_length=1024, null=True))
+
+        # Changing field 'Job.job_env'
+        db.alter_column(u'main_job', 'job_env', self.gf('jsonfield.fields.JSONField')(null=True))
+
+        # Changing field 'Job.job_args'
+        db.alter_column(u'main_job', 'job_args', self.gf('django.db.models.fields.CharField')(max_length=1024, null=True))
+
+        # Adding field 'Host.variable_data'
+        db.add_column(u'main_host', 'variable_data',
+                      self.gf('django.db.models.fields.related.OneToOneField')(related_name='host', null=True, on_delete=models.SET_NULL, default=None, to=orm['main.VariableData'], blank=True, unique=True),
+                      keep_default=False)
+
+        # Changing field 'Host.variables'
+        db.alter_column(u'main_host', 'variables', self.gf('django.db.models.fields.TextField')(null=True))
+
+        # Adding field 'Group.variable_data'
+        db.add_column(u'main_group', 'variable_data',
+                      self.gf('django.db.models.fields.related.OneToOneField')(related_name='group', null=True, on_delete=models.SET_NULL, default=None, to=orm['main.VariableData'], blank=True, unique=True),
+                      keep_default=False)
+
+        # Changing field 'Group.variables'
+        db.alter_column(u'main_group', 'variables', self.gf('django.db.models.fields.TextField')(null=True))
+
+        # Changing field 'JobTemplate.job_tags'
+        db.alter_column(u'main_jobtemplate', 'job_tags', self.gf('django.db.models.fields.CharField')(max_length=1024, null=True))
+
+        # Changing field 'JobTemplate.host_config_key'
+        db.alter_column(u'main_jobtemplate', 'host_config_key', self.gf('django.db.models.fields.CharField')(max_length=1024, null=True))
+
+        # Changing field 'JobEvent.play'
+        db.alter_column(u'main_jobevent', 'play', self.gf('django.db.models.fields.CharField')(max_length=1024, null=True))
+
+        # Changing field 'JobEvent.task'
+        db.alter_column(u'main_jobevent', 'task', self.gf('django.db.models.fields.CharField')(max_length=1024, null=True))
+
+    models = {
+        u'auth.group': {
+            'Meta': {'object_name': 'Group'},
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'name': ('django.db.models.fields.CharField', [], {'unique': 'True', 'max_length': '80'}),
+            'permissions': ('django.db.models.fields.related.ManyToManyField', [], {'to': u"orm['auth.Permission']", 'symmetrical': 'False', 'blank': 'True'})
+        },
+        u'auth.permission': {
+            'Meta': {'ordering': "(u'content_type__app_label', u'content_type__model', u'codename')", 'unique_together': "((u'content_type', u'codename'),)", 'object_name': 'Permission'},
+            'codename': ('django.db.models.fields.CharField', [], {'max_length': '100'}),
+            'content_type': ('django.db.models.fields.related.ForeignKey', [], {'to': u"orm['contenttypes.ContentType']"}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'name': ('django.db.models.fields.CharField', [], {'max_length': '50'})
+        },
+        u'auth.user': {
+            'Meta': {'object_name': 'User'},
+            'date_joined': ('django.db.models.fields.DateTimeField', [], {'default': 'datetime.datetime.now'}),
+            'email': ('django.db.models.fields.EmailField', [], {'max_length': '75', 'blank': 'True'}),
+            'first_name': ('django.db.models.fields.CharField', [], {'max_length': '30', 'blank': 'True'}),
+            'groups': ('django.db.models.fields.related.ManyToManyField', [], {'to': u"orm['auth.Group']", 'symmetrical': 'False', 'blank': 'True'}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'is_active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'is_staff': ('django.db.models.fields.BooleanField', [], {'default': 'False'}),
+            'is_superuser': ('django.db.models.fields.BooleanField', [], {'default': 'False'}),
+            'last_login': ('django.db.models.fields.DateTimeField', [], {'default': 'datetime.datetime.now'}),
+            'last_name': ('django.db.models.fields.CharField', [], {'max_length': '30', 'blank': 'True'}),
+            'password': ('django.db.models.fields.CharField', [], {'max_length': '128'}),
+            'user_permissions': ('django.db.models.fields.related.ManyToManyField', [], {'to': u"orm['auth.Permission']", 'symmetrical': 'False', 'blank': 'True'}),
+            'username': ('django.db.models.fields.CharField', [], {'unique': 'True', 'max_length': '30'})
+        },
+        u'contenttypes.contenttype': {
+            'Meta': {'ordering': "('name',)", 'unique_together': "(('app_label', 'model'),)", 'object_name': 'ContentType', 'db_table': "'django_content_type'"},
+            'app_label': ('django.db.models.fields.CharField', [], {'max_length': '100'}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'model': ('django.db.models.fields.CharField', [], {'max_length': '100'}),
+            'name': ('django.db.models.fields.CharField', [], {'max_length': '100'})
+        },
+        'main.credential': {
+            'Meta': {'object_name': 'Credential'},
+            'active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'created_by': ('django.db.models.fields.related.ForeignKey', [], {'related_name': '"{\'class\': \'credential\', \'app_label\': \'main\'}(class)s_created"', 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"}),
+            'description': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'name': ('django.db.models.fields.CharField', [], {'max_length': '512'}),
+            'ssh_key_data': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            'ssh_key_unlock': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'blank': 'True'}),
+            'ssh_password': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'blank': 'True'}),
+            'ssh_username': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'blank': 'True'}),
+            'sudo_password': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'blank': 'True'}),
+            'sudo_username': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'blank': 'True'}),
+            'team': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'credentials'", 'on_delete': 'models.SET_NULL', 'default': 'None', 'to': "orm['main.Team']", 'blank': 'True', 'null': 'True'}),
+            'user': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'credentials'", 'on_delete': 'models.SET_NULL', 'default': 'None', 'to': u"orm['auth.User']", 'blank': 'True', 'null': 'True'})
+        },
+        'main.group': {
+            'Meta': {'unique_together': "(('name', 'inventory'),)", 'object_name': 'Group'},
+            'active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'created_by': ('django.db.models.fields.related.ForeignKey', [], {'related_name': '"{\'class\': \'group\', \'app_label\': \'main\'}(class)s_created"', 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"}),
+            'description': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            'hosts': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'groups'", 'blank': 'True', 'to': "orm['main.Host']"}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'inventory': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'groups'", 'to': "orm['main.Inventory']"}),
+            'name': ('django.db.models.fields.CharField', [], {'max_length': '512'}),
+            'parents': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'children'", 'blank': 'True', 'to': "orm['main.Group']"}),
+            'variables': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'})
+        },
+        'main.host': {
+            'Meta': {'unique_together': "(('name', 'inventory'),)", 'object_name': 'Host'},
+            'active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'created_by': ('django.db.models.fields.related.ForeignKey', [], {'related_name': '"{\'class\': \'host\', \'app_label\': \'main\'}(class)s_created"', 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"}),
+            'description': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'inventory': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'hosts'", 'to': "orm['main.Inventory']"}),
+            'last_job': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'hosts_as_last_job+'", 'on_delete': 'models.SET_NULL', 'default': 'None', 'to': "orm['main.Job']", 'blank': 'True', 'null': 'True'}),
+            'last_job_host_summary': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'hosts_as_last_job_summary+'", 'on_delete': 'models.SET_NULL', 'default': 'None', 'to': u"orm['main.JobHostSummary']", 'blank': 'True', 'null': 'True'}),
+            'name': ('django.db.models.fields.CharField', [], {'max_length': '512'}),
+            'variables': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'})
+        },
+        'main.inventory': {
+            'Meta': {'unique_together': "(('name', 'organization'),)", 'object_name': 'Inventory'},
+            'active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'created_by': ('django.db.models.fields.related.ForeignKey', [], {'related_name': '"{\'class\': \'inventory\', \'app_label\': \'main\'}(class)s_created"', 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"}),
+            'description': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'name': ('django.db.models.fields.CharField', [], {'unique': 'True', 'max_length': '512'}),
+            'organization': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'inventories'", 'to': "orm['main.Organization']"})
+        },
+        'main.job': {
+            'Meta': {'object_name': 'Job'},
+            'active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'cancel_flag': ('django.db.models.fields.BooleanField', [], {'default': 'False'}),
+            'celery_task_id': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '100', 'blank': 'True'}),
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'created_by': ('django.db.models.fields.related.ForeignKey', [], {'related_name': '"{\'class\': \'job\', \'app_label\': \'main\'}(class)s_created"', 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"}),
+            'credential': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'jobs'", 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': "orm['main.Credential']"}),
+            'description': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            'extra_vars': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            'failed': ('django.db.models.fields.BooleanField', [], {'default': 'False'}),
+            'forks': ('django.db.models.fields.PositiveIntegerField', [], {'default': '0', 'blank': 'True'}),
+            'hosts': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'jobs'", 'blank': 'True', 'through': u"orm['main.JobHostSummary']", 'to': "orm['main.Host']"}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'inventory': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'jobs'", 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': "orm['main.Inventory']"}),
+            'job_args': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'blank': 'True'}),
+            'job_cwd': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'blank': 'True'}),
+            'job_env': ('jsonfield.fields.JSONField', [], {'default': '{}', 'blank': 'True'}),
+            'job_tags': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'blank': 'True'}),
+            'job_template': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'jobs'", 'on_delete': 'models.SET_NULL', 'default': 'None', 'to': "orm['main.JobTemplate']", 'blank': 'True', 'null': 'True'}),
+            'job_type': ('django.db.models.fields.CharField', [], {'max_length': '64'}),
+            'limit': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'blank': 'True'}),
+            'name': ('django.db.models.fields.CharField', [], {'unique': 'True', 'max_length': '512'}),
+            'playbook': ('django.db.models.fields.CharField', [], {'max_length': '1024'}),
+            'project': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'jobs'", 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['main.Project']"}),
+            'result_stdout': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            'result_traceback': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            'status': ('django.db.models.fields.CharField', [], {'default': "'new'", 'max_length': '20'}),
+            'verbosity': ('django.db.models.fields.PositiveIntegerField', [], {'default': '0', 'blank': 'True'})
+        },
+        'main.jobevent': {
+            'Meta': {'ordering': "('pk',)", 'object_name': 'JobEvent'},
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'event': ('django.db.models.fields.CharField', [], {'max_length': '100'}),
+            'event_data': ('jsonfield.fields.JSONField', [], {'default': '{}', 'blank': 'True'}),
+            'failed': ('django.db.models.fields.BooleanField', [], {'default': 'False'}),
+            'host': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'job_events_as_primary_host'", 'on_delete': 'models.SET_NULL', 'default': 'None', 'to': "orm['main.Host']", 'blank': 'True', 'null': 'True'}),
+            'hosts': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'job_events'", 'blank': 'True', 'to': "orm['main.Host']"}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'job': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'job_events'", 'to': "orm['main.Job']"}),
+            'parent': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'children'", 'on_delete': 'models.SET_NULL', 'default': 'None', 'to': "orm['main.JobEvent']", 'blank': 'True', 'null': 'True'}),
+            'play': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'blank': 'True'}),
+            'task': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'blank': 'True'})
+        },
+        u'main.jobhostsummary': {
+            'Meta': {'ordering': "('-pk',)", 'unique_together': "[('job', 'host')]", 'object_name': 'JobHostSummary'},
+            'changed': ('django.db.models.fields.PositiveIntegerField', [], {'default': '0'}),
+            'dark': ('django.db.models.fields.PositiveIntegerField', [], {'default': '0'}),
+            'failed': ('django.db.models.fields.BooleanField', [], {'default': 'False'}),
+            'failures': ('django.db.models.fields.PositiveIntegerField', [], {'default': '0'}),
+            'host': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'job_host_summaries'", 'to': "orm['main.Host']"}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'job': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'job_host_summaries'", 'to': "orm['main.Job']"}),
+            'ok': ('django.db.models.fields.PositiveIntegerField', [], {'default': '0'}),
+            'processed': ('django.db.models.fields.PositiveIntegerField', [], {'default': '0'}),
+            'skipped': ('django.db.models.fields.PositiveIntegerField', [], {'default': '0'})
+        },
+        'main.jobtemplate': {
+            'Meta': {'object_name': 'JobTemplate'},
+            'active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'created_by': ('django.db.models.fields.related.ForeignKey', [], {'related_name': '"{\'class\': \'jobtemplate\', \'app_label\': \'main\'}(class)s_created"', 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"}),
+            'credential': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'job_templates'", 'on_delete': 'models.SET_NULL', 'default': 'None', 'to': "orm['main.Credential']", 'blank': 'True', 'null': 'True'}),
+            'description': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            'extra_vars': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            'forks': ('django.db.models.fields.PositiveIntegerField', [], {'default': '0', 'blank': 'True'}),
+            'host_config_key': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'blank': 'True'}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'inventory': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'job_templates'", 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': "orm['main.Inventory']"}),
+            'job_tags': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'blank': 'True'}),
+            'job_type': ('django.db.models.fields.CharField', [], {'max_length': '64'}),
+            'limit': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'blank': 'True'}),
+            'name': ('django.db.models.fields.CharField', [], {'unique': 'True', 'max_length': '512'}),
+            'playbook': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024'}),
+            'project': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'job_templates'", 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['main.Project']"}),
+            'verbosity': ('django.db.models.fields.PositiveIntegerField', [], {'default': '0', 'blank': 'True'})
+        },
+        'main.organization': {
+            'Meta': {'object_name': 'Organization'},
+            'active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'admins': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'admin_of_organizations'", 'blank': 'True', 'to': u"orm['auth.User']"}),
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'created_by': ('django.db.models.fields.related.ForeignKey', [], {'related_name': '"{\'class\': \'organization\', \'app_label\': \'main\'}(class)s_created"', 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"}),
+            'description': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'name': ('django.db.models.fields.CharField', [], {'unique': 'True', 'max_length': '512'}),
+            'projects': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'organizations'", 'blank': 'True', 'to': u"orm['main.Project']"}),
+            'users': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'organizations'", 'blank': 'True', 'to': u"orm['auth.User']"})
+        },
+        'main.permission': {
+            'Meta': {'object_name': 'Permission'},
+            'active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'created_by': ('django.db.models.fields.related.ForeignKey', [], {'related_name': '"{\'class\': \'permission\', \'app_label\': \'main\'}(class)s_created"', 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"}),
+            'description': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'inventory': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'permissions'", 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': "orm['main.Inventory']"}),
+            'name': ('django.db.models.fields.CharField', [], {'max_length': '512'}),
+            'permission_type': ('django.db.models.fields.CharField', [], {'max_length': '64'}),
+            'project': ('django.db.models.fields.related.ForeignKey', [], {'blank': 'True', 'related_name': "'permissions'", 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['main.Project']"}),
+            'team': ('django.db.models.fields.related.ForeignKey', [], {'blank': 'True', 'related_name': "'permissions'", 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': "orm['main.Team']"}),
+            'user': ('django.db.models.fields.related.ForeignKey', [], {'blank': 'True', 'related_name': "'permissions'", 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"})
+        },
+        u'main.project': {
+            'Meta': {'object_name': 'Project'},
+            'active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'created_by': ('django.db.models.fields.related.ForeignKey', [], {'related_name': '"{\'class\': \'project\', \'app_label\': u\'main\'}(class)s_created"', 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"}),
+            'description': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'local_path': ('django.db.models.fields.CharField', [], {'max_length': '1024'}),
+            'name': ('django.db.models.fields.CharField', [], {'unique': 'True', 'max_length': '512'})
+        },
+        'main.team': {
+            'Meta': {'object_name': 'Team'},
+            'active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'created_by': ('django.db.models.fields.related.ForeignKey', [], {'related_name': '"{\'class\': \'team\', \'app_label\': \'main\'}(class)s_created"', 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"}),
+            'description': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'name': ('django.db.models.fields.CharField', [], {'unique': 'True', 'max_length': '512'}),
+            'organization': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'teams'", 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': "orm['main.Organization']"}),
+            'projects': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'teams'", 'blank': 'True', 'to': u"orm['main.Project']"}),
+            'users': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'teams'", 'blank': 'True', 'to': u"orm['auth.User']"})
+        },
+        u'taggit.tag': {
+            'Meta': {'object_name': 'Tag'},
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'name': ('django.db.models.fields.CharField', [], {'unique': 'True', 'max_length': '100'}),
+            'slug': ('django.db.models.fields.SlugField', [], {'unique': 'True', 'max_length': '100'})
+        },
+        u'taggit.taggeditem': {
+            'Meta': {'object_name': 'TaggedItem'},
+            'content_type': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "u'taggit_taggeditem_tagged_items'", 'to': u"orm['contenttypes.ContentType']"}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'object_id': ('django.db.models.fields.IntegerField', [], {'db_index': 'True'}),
+            'tag': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "u'taggit_taggeditem_items'", 'to': u"orm['taggit.Tag']"})
+        }
+    }
+
+    complete_apps = ['main']

awx/main/migrations/0005_v12b2_changes.py

@@ -0,0 +1,273 @@
+# -*- coding: utf-8 -*-
+import datetime
+from south.db import db
+from south.v2 import SchemaMigration
+from django.db import models
+
+
+class Migration(SchemaMigration):
+    '''
+    Schema migration for AWX 1.2-b2 release.
+    - Add has_active_failures field on Inventory, Group and Host models.
+    '''
+
+    def forwards(self, orm):
+        # Adding field 'Inventory.has_active_failures'
+        db.add_column(u'main_inventory', 'has_active_failures',
+                      self.gf('django.db.models.fields.BooleanField')(default=False),
+                      keep_default=False)
+
+        # Adding field 'Host.has_active_failures'
+        db.add_column(u'main_host', 'has_active_failures',
+                      self.gf('django.db.models.fields.BooleanField')(default=False),
+                      keep_default=False)
+
+        # Adding field 'Group.has_active_failures'
+        db.add_column(u'main_group', 'has_active_failures',
+                      self.gf('django.db.models.fields.BooleanField')(default=False),
+                      keep_default=False)
+
+    def backwards(self, orm):
+        # Deleting field 'Inventory.has_active_failures'
+        db.delete_column(u'main_inventory', 'has_active_failures')
+
+        # Deleting field 'Host.has_active_failures'
+        db.delete_column(u'main_host', 'has_active_failures')
+
+        # Deleting field 'Group.has_active_failures'
+        db.delete_column(u'main_group', 'has_active_failures')
+
+    models = {
+        u'auth.group': {
+            'Meta': {'object_name': 'Group'},
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'name': ('django.db.models.fields.CharField', [], {'unique': 'True', 'max_length': '80'}),
+            'permissions': ('django.db.models.fields.related.ManyToManyField', [], {'to': u"orm['auth.Permission']", 'symmetrical': 'False', 'blank': 'True'})
+        },
+        u'auth.permission': {
+            'Meta': {'ordering': "(u'content_type__app_label', u'content_type__model', u'codename')", 'unique_together': "((u'content_type', u'codename'),)", 'object_name': 'Permission'},
+            'codename': ('django.db.models.fields.CharField', [], {'max_length': '100'}),
+            'content_type': ('django.db.models.fields.related.ForeignKey', [], {'to': u"orm['contenttypes.ContentType']"}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'name': ('django.db.models.fields.CharField', [], {'max_length': '50'})
+        },
+        u'auth.user': {
+            'Meta': {'object_name': 'User'},
+            'date_joined': ('django.db.models.fields.DateTimeField', [], {'default': 'datetime.datetime.now'}),
+            'email': ('django.db.models.fields.EmailField', [], {'max_length': '75', 'blank': 'True'}),
+            'first_name': ('django.db.models.fields.CharField', [], {'max_length': '30', 'blank': 'True'}),
+            'groups': ('django.db.models.fields.related.ManyToManyField', [], {'to': u"orm['auth.Group']", 'symmetrical': 'False', 'blank': 'True'}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'is_active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'is_staff': ('django.db.models.fields.BooleanField', [], {'default': 'False'}),
+            'is_superuser': ('django.db.models.fields.BooleanField', [], {'default': 'False'}),
+            'last_login': ('django.db.models.fields.DateTimeField', [], {'default': 'datetime.datetime.now'}),
+            'last_name': ('django.db.models.fields.CharField', [], {'max_length': '30', 'blank': 'True'}),
+            'password': ('django.db.models.fields.CharField', [], {'max_length': '128'}),
+            'user_permissions': ('django.db.models.fields.related.ManyToManyField', [], {'to': u"orm['auth.Permission']", 'symmetrical': 'False', 'blank': 'True'}),
+            'username': ('django.db.models.fields.CharField', [], {'unique': 'True', 'max_length': '30'})
+        },
+        u'contenttypes.contenttype': {
+            'Meta': {'ordering': "('name',)", 'unique_together': "(('app_label', 'model'),)", 'object_name': 'ContentType', 'db_table': "'django_content_type'"},
+            'app_label': ('django.db.models.fields.CharField', [], {'max_length': '100'}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'model': ('django.db.models.fields.CharField', [], {'max_length': '100'}),
+            'name': ('django.db.models.fields.CharField', [], {'max_length': '100'})
+        },
+        'main.credential': {
+            'Meta': {'object_name': 'Credential'},
+            'active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'created_by': ('django.db.models.fields.related.ForeignKey', [], {'related_name': '"{\'class\': \'credential\', \'app_label\': \'main\'}(class)s_created"', 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"}),
+            'description': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'name': ('django.db.models.fields.CharField', [], {'max_length': '512'}),
+            'ssh_key_data': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            'ssh_key_unlock': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'blank': 'True'}),
+            'ssh_password': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'blank': 'True'}),
+            'ssh_username': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'blank': 'True'}),
+            'sudo_password': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'blank': 'True'}),
+            'sudo_username': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'blank': 'True'}),
+            'team': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'credentials'", 'on_delete': 'models.SET_NULL', 'default': 'None', 'to': "orm['main.Team']", 'blank': 'True', 'null': 'True'}),
+            'user': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'credentials'", 'on_delete': 'models.SET_NULL', 'default': 'None', 'to': u"orm['auth.User']", 'blank': 'True', 'null': 'True'})
+        },
+        'main.group': {
+            'Meta': {'unique_together': "(('name', 'inventory'),)", 'object_name': 'Group'},
+            'active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'created_by': ('django.db.models.fields.related.ForeignKey', [], {'related_name': '"{\'class\': \'group\', \'app_label\': \'main\'}(class)s_created"', 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"}),
+            'description': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            'has_active_failures': ('django.db.models.fields.BooleanField', [], {'default': 'False'}),
+            'hosts': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'groups'", 'blank': 'True', 'to': "orm['main.Host']"}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'inventory': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'groups'", 'to': "orm['main.Inventory']"}),
+            'name': ('django.db.models.fields.CharField', [], {'max_length': '512'}),
+            'parents': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'children'", 'blank': 'True', 'to': "orm['main.Group']"}),
+            'variables': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'})
+        },
+        'main.host': {
+            'Meta': {'unique_together': "(('name', 'inventory'),)", 'object_name': 'Host'},
+            'active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'created_by': ('django.db.models.fields.related.ForeignKey', [], {'related_name': '"{\'class\': \'host\', \'app_label\': \'main\'}(class)s_created"', 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"}),
+            'description': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            'has_active_failures': ('django.db.models.fields.BooleanField', [], {'default': 'False'}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'inventory': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'hosts'", 'to': "orm['main.Inventory']"}),
+            'last_job': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'hosts_as_last_job+'", 'on_delete': 'models.SET_NULL', 'default': 'None', 'to': "orm['main.Job']", 'blank': 'True', 'null': 'True'}),
+            'last_job_host_summary': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'hosts_as_last_job_summary+'", 'on_delete': 'models.SET_NULL', 'default': 'None', 'to': u"orm['main.JobHostSummary']", 'blank': 'True', 'null': 'True'}),
+            'name': ('django.db.models.fields.CharField', [], {'max_length': '512'}),
+            'variables': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'})
+        },
+        'main.inventory': {
+            'Meta': {'unique_together': "(('name', 'organization'),)", 'object_name': 'Inventory'},
+            'active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'created_by': ('django.db.models.fields.related.ForeignKey', [], {'related_name': '"{\'class\': \'inventory\', \'app_label\': \'main\'}(class)s_created"', 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"}),
+            'description': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            'has_active_failures': ('django.db.models.fields.BooleanField', [], {'default': 'False'}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'name': ('django.db.models.fields.CharField', [], {'unique': 'True', 'max_length': '512'}),
+            'organization': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'inventories'", 'to': "orm['main.Organization']"})
+        },
+        'main.job': {
+            'Meta': {'object_name': 'Job'},
+            'active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'cancel_flag': ('django.db.models.fields.BooleanField', [], {'default': 'False'}),
+            'celery_task_id': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '100', 'blank': 'True'}),
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'created_by': ('django.db.models.fields.related.ForeignKey', [], {'related_name': '"{\'class\': \'job\', \'app_label\': \'main\'}(class)s_created"', 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"}),
+            'credential': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'jobs'", 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': "orm['main.Credential']"}),
+            'description': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            'extra_vars': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            'failed': ('django.db.models.fields.BooleanField', [], {'default': 'False'}),
+            'forks': ('django.db.models.fields.PositiveIntegerField', [], {'default': '0', 'blank': 'True'}),
+            'hosts': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'jobs'", 'blank': 'True', 'through': u"orm['main.JobHostSummary']", 'to': "orm['main.Host']"}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'inventory': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'jobs'", 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': "orm['main.Inventory']"}),
+            'job_args': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'blank': 'True'}),
+            'job_cwd': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'blank': 'True'}),
+            'job_env': ('jsonfield.fields.JSONField', [], {'default': '{}', 'blank': 'True'}),
+            'job_tags': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'blank': 'True'}),
+            'job_template': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'jobs'", 'on_delete': 'models.SET_NULL', 'default': 'None', 'to': "orm['main.JobTemplate']", 'blank': 'True', 'null': 'True'}),
+            'job_type': ('django.db.models.fields.CharField', [], {'max_length': '64'}),
+            'limit': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'blank': 'True'}),
+            'name': ('django.db.models.fields.CharField', [], {'unique': 'True', 'max_length': '512'}),
+            'playbook': ('django.db.models.fields.CharField', [], {'max_length': '1024'}),
+            'project': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'jobs'", 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['main.Project']"}),
+            'result_stdout': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            'result_traceback': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            'status': ('django.db.models.fields.CharField', [], {'default': "'new'", 'max_length': '20'}),
+            'verbosity': ('django.db.models.fields.PositiveIntegerField', [], {'default': '0', 'blank': 'True'})
+        },
+        'main.jobevent': {
+            'Meta': {'ordering': "('pk',)", 'object_name': 'JobEvent'},
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'event': ('django.db.models.fields.CharField', [], {'max_length': '100'}),
+            'event_data': ('jsonfield.fields.JSONField', [], {'default': '{}', 'blank': 'True'}),
+            'failed': ('django.db.models.fields.BooleanField', [], {'default': 'False'}),
+            'host': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'job_events_as_primary_host'", 'on_delete': 'models.SET_NULL', 'default': 'None', 'to': "orm['main.Host']", 'blank': 'True', 'null': 'True'}),
+            'hosts': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'job_events'", 'blank': 'True', 'to': "orm['main.Host']"}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'job': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'job_events'", 'to': "orm['main.Job']"}),
+            'parent': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'children'", 'on_delete': 'models.SET_NULL', 'default': 'None', 'to': "orm['main.JobEvent']", 'blank': 'True', 'null': 'True'}),
+            'play': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'blank': 'True'}),
+            'task': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'blank': 'True'})
+        },
+        u'main.jobhostsummary': {
+            'Meta': {'ordering': "('-pk',)", 'unique_together': "[('job', 'host')]", 'object_name': 'JobHostSummary'},
+            'changed': ('django.db.models.fields.PositiveIntegerField', [], {'default': '0'}),
+            'dark': ('django.db.models.fields.PositiveIntegerField', [], {'default': '0'}),
+            'failed': ('django.db.models.fields.BooleanField', [], {'default': 'False'}),
+            'failures': ('django.db.models.fields.PositiveIntegerField', [], {'default': '0'}),
+            'host': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'job_host_summaries'", 'to': "orm['main.Host']"}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'job': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'job_host_summaries'", 'to': "orm['main.Job']"}),
+            'ok': ('django.db.models.fields.PositiveIntegerField', [], {'default': '0'}),
+            'processed': ('django.db.models.fields.PositiveIntegerField', [], {'default': '0'}),
+            'skipped': ('django.db.models.fields.PositiveIntegerField', [], {'default': '0'})
+        },
+        'main.jobtemplate': {
+            'Meta': {'object_name': 'JobTemplate'},
+            'active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'created_by': ('django.db.models.fields.related.ForeignKey', [], {'related_name': '"{\'class\': \'jobtemplate\', \'app_label\': \'main\'}(class)s_created"', 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"}),
+            'credential': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'job_templates'", 'on_delete': 'models.SET_NULL', 'default': 'None', 'to': "orm['main.Credential']", 'blank': 'True', 'null': 'True'}),
+            'description': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            'extra_vars': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            'forks': ('django.db.models.fields.PositiveIntegerField', [], {'default': '0', 'blank': 'True'}),
+            'host_config_key': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'blank': 'True'}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'inventory': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'job_templates'", 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': "orm['main.Inventory']"}),
+            'job_tags': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'blank': 'True'}),
+            'job_type': ('django.db.models.fields.CharField', [], {'max_length': '64'}),
+            'limit': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'blank': 'True'}),
+            'name': ('django.db.models.fields.CharField', [], {'unique': 'True', 'max_length': '512'}),
+            'playbook': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024'}),
+            'project': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'job_templates'", 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['main.Project']"}),
+            'verbosity': ('django.db.models.fields.PositiveIntegerField', [], {'default': '0', 'blank': 'True'})
+        },
+        'main.organization': {
+            'Meta': {'object_name': 'Organization'},
+            'active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'admins': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'admin_of_organizations'", 'blank': 'True', 'to': u"orm['auth.User']"}),
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'created_by': ('django.db.models.fields.related.ForeignKey', [], {'related_name': '"{\'class\': \'organization\', \'app_label\': \'main\'}(class)s_created"', 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"}),
+            'description': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'name': ('django.db.models.fields.CharField', [], {'unique': 'True', 'max_length': '512'}),
+            'projects': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'organizations'", 'blank': 'True', 'to': u"orm['main.Project']"}),
+            'users': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'organizations'", 'blank': 'True', 'to': u"orm['auth.User']"})
+        },
+        'main.permission': {
+            'Meta': {'object_name': 'Permission'},
+            'active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'created_by': ('django.db.models.fields.related.ForeignKey', [], {'related_name': '"{\'class\': \'permission\', \'app_label\': \'main\'}(class)s_created"', 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"}),
+            'description': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'inventory': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'permissions'", 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': "orm['main.Inventory']"}),
+            'name': ('django.db.models.fields.CharField', [], {'max_length': '512'}),
+            'permission_type': ('django.db.models.fields.CharField', [], {'max_length': '64'}),
+            'project': ('django.db.models.fields.related.ForeignKey', [], {'blank': 'True', 'related_name': "'permissions'", 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['main.Project']"}),
+            'team': ('django.db.models.fields.related.ForeignKey', [], {'blank': 'True', 'related_name': "'permissions'", 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': "orm['main.Team']"}),
+            'user': ('django.db.models.fields.related.ForeignKey', [], {'blank': 'True', 'related_name': "'permissions'", 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"})
+        },
+        u'main.project': {
+            'Meta': {'object_name': 'Project'},
+            'active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'created_by': ('django.db.models.fields.related.ForeignKey', [], {'related_name': '"{\'class\': \'project\', \'app_label\': u\'main\'}(class)s_created"', 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"}),
+            'description': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'local_path': ('django.db.models.fields.CharField', [], {'max_length': '1024'}),
+            'name': ('django.db.models.fields.CharField', [], {'unique': 'True', 'max_length': '512'})
+        },
+        'main.team': {
+            'Meta': {'object_name': 'Team'},
+            'active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'created_by': ('django.db.models.fields.related.ForeignKey', [], {'related_name': '"{\'class\': \'team\', \'app_label\': \'main\'}(class)s_created"', 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"}),
+            'description': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'name': ('django.db.models.fields.CharField', [], {'unique': 'True', 'max_length': '512'}),
+            'organization': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'teams'", 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': "orm['main.Organization']"}),
+            'projects': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'teams'", 'blank': 'True', 'to': u"orm['main.Project']"}),
+            'users': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'teams'", 'blank': 'True', 'to': u"orm['auth.User']"})
+        },
+        u'taggit.tag': {
+            'Meta': {'object_name': 'Tag'},
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'name': ('django.db.models.fields.CharField', [], {'unique': 'True', 'max_length': '100'}),
+            'slug': ('django.db.models.fields.SlugField', [], {'unique': 'True', 'max_length': '100'})
+        },
+        u'taggit.taggeditem': {
+            'Meta': {'object_name': 'TaggedItem'},
+            'content_type': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "u'taggit_taggeditem_tagged_items'", 'to': u"orm['contenttypes.ContentType']"}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'object_id': ('django.db.models.fields.IntegerField', [], {'db_index': 'True'}),
+            'tag': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "u'taggit_taggeditem_items'", 'to': u"orm['taggit.Tag']"})
+        }
+    }
+
+    complete_apps = ['main']

awx/main/migrations/0006_v12b2_changes.py

@@ -0,0 +1,258 @@
+# -*- coding: utf-8 -*-
+import datetime
+from south.db import db
+from south.v2 import SchemaMigration
+from django.db import models
+
+
+class Migration(SchemaMigration):
+    '''
+    Schema migration for AWX 1.2-b2 release.
+    - Add variables field on Inventory model.
+    '''
+
+    def forwards(self, orm):
+        # Adding field 'Inventory.variables'
+        db.add_column(u'main_inventory', 'variables',
+                      self.gf('django.db.models.fields.TextField')(default='', null=True, blank=True),
+                      keep_default=False)
+
+    def backwards(self, orm):
+        # Deleting field 'Inventory.variables'
+        db.delete_column(u'main_inventory', 'variables')
+
+    models = {
+        u'auth.group': {
+            'Meta': {'object_name': 'Group'},
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'name': ('django.db.models.fields.CharField', [], {'unique': 'True', 'max_length': '80'}),
+            'permissions': ('django.db.models.fields.related.ManyToManyField', [], {'to': u"orm['auth.Permission']", 'symmetrical': 'False', 'blank': 'True'})
+        },
+        u'auth.permission': {
+            'Meta': {'ordering': "(u'content_type__app_label', u'content_type__model', u'codename')", 'unique_together': "((u'content_type', u'codename'),)", 'object_name': 'Permission'},
+            'codename': ('django.db.models.fields.CharField', [], {'max_length': '100'}),
+            'content_type': ('django.db.models.fields.related.ForeignKey', [], {'to': u"orm['contenttypes.ContentType']"}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'name': ('django.db.models.fields.CharField', [], {'max_length': '50'})
+        },
+        u'auth.user': {
+            'Meta': {'object_name': 'User'},
+            'date_joined': ('django.db.models.fields.DateTimeField', [], {'default': 'datetime.datetime.now'}),
+            'email': ('django.db.models.fields.EmailField', [], {'max_length': '75', 'blank': 'True'}),
+            'first_name': ('django.db.models.fields.CharField', [], {'max_length': '30', 'blank': 'True'}),
+            'groups': ('django.db.models.fields.related.ManyToManyField', [], {'to': u"orm['auth.Group']", 'symmetrical': 'False', 'blank': 'True'}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'is_active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'is_staff': ('django.db.models.fields.BooleanField', [], {'default': 'False'}),
+            'is_superuser': ('django.db.models.fields.BooleanField', [], {'default': 'False'}),
+            'last_login': ('django.db.models.fields.DateTimeField', [], {'default': 'datetime.datetime.now'}),
+            'last_name': ('django.db.models.fields.CharField', [], {'max_length': '30', 'blank': 'True'}),
+            'password': ('django.db.models.fields.CharField', [], {'max_length': '128'}),
+            'user_permissions': ('django.db.models.fields.related.ManyToManyField', [], {'to': u"orm['auth.Permission']", 'symmetrical': 'False', 'blank': 'True'}),
+            'username': ('django.db.models.fields.CharField', [], {'unique': 'True', 'max_length': '30'})
+        },
+        u'contenttypes.contenttype': {
+            'Meta': {'ordering': "('name',)", 'unique_together': "(('app_label', 'model'),)", 'object_name': 'ContentType', 'db_table': "'django_content_type'"},
+            'app_label': ('django.db.models.fields.CharField', [], {'max_length': '100'}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'model': ('django.db.models.fields.CharField', [], {'max_length': '100'}),
+            'name': ('django.db.models.fields.CharField', [], {'max_length': '100'})
+        },
+        'main.credential': {
+            'Meta': {'object_name': 'Credential'},
+            'active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'created_by': ('django.db.models.fields.related.ForeignKey', [], {'related_name': '"{\'class\': \'credential\', \'app_label\': \'main\'}(class)s_created"', 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"}),
+            'description': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'name': ('django.db.models.fields.CharField', [], {'max_length': '512'}),
+            'ssh_key_data': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            'ssh_key_unlock': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'blank': 'True'}),
+            'ssh_password': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'blank': 'True'}),
+            'ssh_username': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'blank': 'True'}),
+            'sudo_password': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'blank': 'True'}),
+            'sudo_username': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'blank': 'True'}),
+            'team': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'credentials'", 'on_delete': 'models.SET_NULL', 'default': 'None', 'to': "orm['main.Team']", 'blank': 'True', 'null': 'True'}),
+            'user': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'credentials'", 'on_delete': 'models.SET_NULL', 'default': 'None', 'to': u"orm['auth.User']", 'blank': 'True', 'null': 'True'})
+        },
+        'main.group': {
+            'Meta': {'unique_together': "(('name', 'inventory'),)", 'object_name': 'Group'},
+            'active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'created_by': ('django.db.models.fields.related.ForeignKey', [], {'related_name': '"{\'class\': \'group\', \'app_label\': \'main\'}(class)s_created"', 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"}),
+            'description': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            'has_active_failures': ('django.db.models.fields.BooleanField', [], {'default': 'False'}),
+            'hosts': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'groups'", 'blank': 'True', 'to': "orm['main.Host']"}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'inventory': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'groups'", 'to': "orm['main.Inventory']"}),
+            'name': ('django.db.models.fields.CharField', [], {'max_length': '512'}),
+            'parents': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'children'", 'blank': 'True', 'to': "orm['main.Group']"}),
+            'variables': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'})
+        },
+        'main.host': {
+            'Meta': {'unique_together': "(('name', 'inventory'),)", 'object_name': 'Host'},
+            'active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'created_by': ('django.db.models.fields.related.ForeignKey', [], {'related_name': '"{\'class\': \'host\', \'app_label\': \'main\'}(class)s_created"', 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"}),
+            'description': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            'has_active_failures': ('django.db.models.fields.BooleanField', [], {'default': 'False'}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'inventory': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'hosts'", 'to': "orm['main.Inventory']"}),
+            'last_job': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'hosts_as_last_job+'", 'on_delete': 'models.SET_NULL', 'default': 'None', 'to': "orm['main.Job']", 'blank': 'True', 'null': 'True'}),
+            'last_job_host_summary': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'hosts_as_last_job_summary+'", 'on_delete': 'models.SET_NULL', 'default': 'None', 'to': u"orm['main.JobHostSummary']", 'blank': 'True', 'null': 'True'}),
+            'name': ('django.db.models.fields.CharField', [], {'max_length': '512'}),
+            'variables': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'})
+        },
+        'main.inventory': {
+            'Meta': {'unique_together': "(('name', 'organization'),)", 'object_name': 'Inventory'},
+            'active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'created_by': ('django.db.models.fields.related.ForeignKey', [], {'related_name': '"{\'class\': \'inventory\', \'app_label\': \'main\'}(class)s_created"', 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"}),
+            'description': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            'has_active_failures': ('django.db.models.fields.BooleanField', [], {'default': 'False'}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'name': ('django.db.models.fields.CharField', [], {'unique': 'True', 'max_length': '512'}),
+            'organization': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'inventories'", 'to': "orm['main.Organization']"}),
+            'variables': ('django.db.models.fields.TextField', [], {'default': "''", 'null': 'True', 'blank': 'True'})
+        },
+        'main.job': {
+            'Meta': {'object_name': 'Job'},
+            'active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'cancel_flag': ('django.db.models.fields.BooleanField', [], {'default': 'False'}),
+            'celery_task_id': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '100', 'blank': 'True'}),
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'created_by': ('django.db.models.fields.related.ForeignKey', [], {'related_name': '"{\'class\': \'job\', \'app_label\': \'main\'}(class)s_created"', 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"}),
+            'credential': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'jobs'", 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': "orm['main.Credential']"}),
+            'description': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            'extra_vars': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            'failed': ('django.db.models.fields.BooleanField', [], {'default': 'False'}),
+            'forks': ('django.db.models.fields.PositiveIntegerField', [], {'default': '0', 'blank': 'True'}),
+            'hosts': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'jobs'", 'blank': 'True', 'through': u"orm['main.JobHostSummary']", 'to': "orm['main.Host']"}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'inventory': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'jobs'", 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': "orm['main.Inventory']"}),
+            'job_args': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'blank': 'True'}),
+            'job_cwd': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'blank': 'True'}),
+            'job_env': ('jsonfield.fields.JSONField', [], {'default': '{}', 'blank': 'True'}),
+            'job_tags': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'blank': 'True'}),
+            'job_template': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'jobs'", 'on_delete': 'models.SET_NULL', 'default': 'None', 'to': "orm['main.JobTemplate']", 'blank': 'True', 'null': 'True'}),
+            'job_type': ('django.db.models.fields.CharField', [], {'max_length': '64'}),
+            'limit': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'blank': 'True'}),
+            'name': ('django.db.models.fields.CharField', [], {'unique': 'True', 'max_length': '512'}),
+            'playbook': ('django.db.models.fields.CharField', [], {'max_length': '1024'}),
+            'project': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'jobs'", 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['main.Project']"}),
+            'result_stdout': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            'result_traceback': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            'status': ('django.db.models.fields.CharField', [], {'default': "'new'", 'max_length': '20'}),
+            'verbosity': ('django.db.models.fields.PositiveIntegerField', [], {'default': '0', 'blank': 'True'})
+        },
+        'main.jobevent': {
+            'Meta': {'ordering': "('pk',)", 'object_name': 'JobEvent'},
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'event': ('django.db.models.fields.CharField', [], {'max_length': '100'}),
+            'event_data': ('jsonfield.fields.JSONField', [], {'default': '{}', 'blank': 'True'}),
+            'failed': ('django.db.models.fields.BooleanField', [], {'default': 'False'}),
+            'host': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'job_events_as_primary_host'", 'on_delete': 'models.SET_NULL', 'default': 'None', 'to': "orm['main.Host']", 'blank': 'True', 'null': 'True'}),
+            'hosts': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'job_events'", 'blank': 'True', 'to': "orm['main.Host']"}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'job': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'job_events'", 'to': "orm['main.Job']"}),
+            'parent': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'children'", 'on_delete': 'models.SET_NULL', 'default': 'None', 'to': "orm['main.JobEvent']", 'blank': 'True', 'null': 'True'}),
+            'play': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'blank': 'True'}),
+            'task': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'blank': 'True'})
+        },
+        u'main.jobhostsummary': {
+            'Meta': {'ordering': "('-pk',)", 'unique_together': "[('job', 'host')]", 'object_name': 'JobHostSummary'},
+            'changed': ('django.db.models.fields.PositiveIntegerField', [], {'default': '0'}),
+            'dark': ('django.db.models.fields.PositiveIntegerField', [], {'default': '0'}),
+            'failed': ('django.db.models.fields.BooleanField', [], {'default': 'False'}),
+            'failures': ('django.db.models.fields.PositiveIntegerField', [], {'default': '0'}),
+            'host': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'job_host_summaries'", 'to': "orm['main.Host']"}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'job': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'job_host_summaries'", 'to': "orm['main.Job']"}),
+            'ok': ('django.db.models.fields.PositiveIntegerField', [], {'default': '0'}),
+            'processed': ('django.db.models.fields.PositiveIntegerField', [], {'default': '0'}),
+            'skipped': ('django.db.models.fields.PositiveIntegerField', [], {'default': '0'})
+        },
+        'main.jobtemplate': {
+            'Meta': {'object_name': 'JobTemplate'},
+            'active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'created_by': ('django.db.models.fields.related.ForeignKey', [], {'related_name': '"{\'class\': \'jobtemplate\', \'app_label\': \'main\'}(class)s_created"', 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"}),
+            'credential': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'job_templates'", 'on_delete': 'models.SET_NULL', 'default': 'None', 'to': "orm['main.Credential']", 'blank': 'True', 'null': 'True'}),
+            'description': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            'extra_vars': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            'forks': ('django.db.models.fields.PositiveIntegerField', [], {'default': '0', 'blank': 'True'}),
+            'host_config_key': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'blank': 'True'}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'inventory': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'job_templates'", 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': "orm['main.Inventory']"}),
+            'job_tags': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'blank': 'True'}),
+            'job_type': ('django.db.models.fields.CharField', [], {'max_length': '64'}),
+            'limit': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024', 'blank': 'True'}),
+            'name': ('django.db.models.fields.CharField', [], {'unique': 'True', 'max_length': '512'}),
+            'playbook': ('django.db.models.fields.CharField', [], {'default': "''", 'max_length': '1024'}),
+            'project': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'job_templates'", 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['main.Project']"}),
+            'verbosity': ('django.db.models.fields.PositiveIntegerField', [], {'default': '0', 'blank': 'True'})
+        },
+        'main.organization': {
+            'Meta': {'object_name': 'Organization'},
+            'active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'admins': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'admin_of_organizations'", 'blank': 'True', 'to': u"orm['auth.User']"}),
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'created_by': ('django.db.models.fields.related.ForeignKey', [], {'related_name': '"{\'class\': \'organization\', \'app_label\': \'main\'}(class)s_created"', 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"}),
+            'description': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'name': ('django.db.models.fields.CharField', [], {'unique': 'True', 'max_length': '512'}),
+            'projects': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'organizations'", 'blank': 'True', 'to': u"orm['main.Project']"}),
+            'users': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'organizations'", 'blank': 'True', 'to': u"orm['auth.User']"})
+        },
+        'main.permission': {
+            'Meta': {'object_name': 'Permission'},
+            'active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'created_by': ('django.db.models.fields.related.ForeignKey', [], {'related_name': '"{\'class\': \'permission\', \'app_label\': \'main\'}(class)s_created"', 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"}),
+            'description': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'inventory': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'permissions'", 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': "orm['main.Inventory']"}),
+            'name': ('django.db.models.fields.CharField', [], {'max_length': '512'}),
+            'permission_type': ('django.db.models.fields.CharField', [], {'max_length': '64'}),
+            'project': ('django.db.models.fields.related.ForeignKey', [], {'blank': 'True', 'related_name': "'permissions'", 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['main.Project']"}),
+            'team': ('django.db.models.fields.related.ForeignKey', [], {'blank': 'True', 'related_name': "'permissions'", 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': "orm['main.Team']"}),
+            'user': ('django.db.models.fields.related.ForeignKey', [], {'blank': 'True', 'related_name': "'permissions'", 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"})
+        },
+        u'main.project': {
+            'Meta': {'object_name': 'Project'},
+            'active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'created_by': ('django.db.models.fields.related.ForeignKey', [], {'related_name': '"{\'class\': \'project\', \'app_label\': u\'main\'}(class)s_created"', 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"}),
+            'description': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'local_path': ('django.db.models.fields.CharField', [], {'max_length': '1024'}),
+            'name': ('django.db.models.fields.CharField', [], {'unique': 'True', 'max_length': '512'})
+        },
+        'main.team': {
+            'Meta': {'object_name': 'Team'},
+            'active': ('django.db.models.fields.BooleanField', [], {'default': 'True'}),
+            'created': ('django.db.models.fields.DateTimeField', [], {'auto_now_add': 'True', 'blank': 'True'}),
+            'created_by': ('django.db.models.fields.related.ForeignKey', [], {'related_name': '"{\'class\': \'team\', \'app_label\': \'main\'}(class)s_created"', 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': u"orm['auth.User']"}),
+            'description': ('django.db.models.fields.TextField', [], {'default': "''", 'blank': 'True'}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'name': ('django.db.models.fields.CharField', [], {'unique': 'True', 'max_length': '512'}),
+            'organization': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "'teams'", 'null': 'True', 'on_delete': 'models.SET_NULL', 'to': "orm['main.Organization']"}),
+            'projects': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'teams'", 'blank': 'True', 'to': u"orm['main.Project']"}),
+            'users': ('django.db.models.fields.related.ManyToManyField', [], {'symmetrical': 'False', 'related_name': "'teams'", 'blank': 'True', 'to': u"orm['auth.User']"})
+        },
+        u'taggit.tag': {
+            'Meta': {'object_name': 'Tag'},
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'name': ('django.db.models.fields.CharField', [], {'unique': 'True', 'max_length': '100'}),
+            'slug': ('django.db.models.fields.SlugField', [], {'unique': 'True', 'max_length': '100'})
+        },
+        u'taggit.taggeditem': {
+            'Meta': {'object_name': 'TaggedItem'},
+            'content_type': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "u'taggit_taggeditem_tagged_items'", 'to': u"orm['contenttypes.ContentType']"}),
+            u'id': ('django.db.models.fields.AutoField', [], {'primary_key': 'True'}),
+            'object_id': ('django.db.models.fields.IntegerField', [], {'db_index': 'True'}),
+            'tag': ('django.db.models.fields.related.ForeignKey', [], {'related_name': "u'taggit_taggeditem_items'", 'to': u"orm['taggit.Tag']"})
+        }
+    }
+
+    complete_apps = ['main']

awx/main/migrations/__init__.py

@@ -0,0 +1,2 @@
+# Copyright (c) 2013 AnsibleWorks, Inc.
+# All Rights Reserved.

awx/main/pagination.py

@@ -0,0 +1,37 @@
+# Copyright (c) 2013 AnsibleWorks, Inc.
+# All Rights Reserved.
+
+# Django REST Framework
+from rest_framework import serializers, pagination
+from rest_framework.templatetags.rest_framework import replace_query_param
+
+class NextPageField(pagination.NextPageField):
+    '''Pagination field to output URL path.'''
+
+    def to_native(self, value):
+        if not value.has_next():
+            return None
+        page = value.next_page_number()
+        request = self.context.get('request')
+        url = request and request.get_full_path() or ''
+        return replace_query_param(url, self.page_field, page)
+
+class PreviousPageField(pagination.NextPageField):
+    '''Pagination field to output URL path.'''
+
+    def to_native(self, value):
+        if not value.has_previous():
+            return None
+        page = value.previous_page_number()
+        request = self.context.get('request')
+        url = request and request.get_full_path() or ''
+        return replace_query_param(url, self.page_field, page)
+
+class PaginationSerializer(pagination.BasePaginationSerializer):
+    '''
+    Custom pagination serializer to output only URL path (without host/port).
+    '''
+
+    count = serializers.Field(source='paginator.count')
+    next = NextPageField(source='*')
+    previous = PreviousPageField(source='*')

awx/main/rbac.py

@@ -0,0 +1,139 @@
+# Copyright (c) 2013 AnsibleWorks, Inc.
+# All Rights Reserved.
+
+import logging
+from django.http import Http404
+from rest_framework.exceptions import PermissionDenied
+from rest_framework import permissions
+from awx.main.access import *
+from awx.main.models import *
+
+logger = logging.getLogger('awx.main.rbac')
+
+# FIXME: this will probably need to be subclassed by object type
+
+class CustomRbac(permissions.BasePermission):
+
+    def _check_options_permissions(self, request, view, obj=None):
+        return self._check_get_permissions(request, view, obj)
+
+    def _check_head_permissions(self, request, view, obj=None):
+        return self._check_get_permissions(request, view, obj)
+
+    def _check_get_permissions(self, request, view, obj=None):
+        if hasattr(view, 'parent_model'):
+            parent_obj = view.parent_model.objects.get(pk=view.kwargs['pk'])
+            if not check_user_access(request.user, view.parent_model, 'read',
+                                     parent_obj):
+                return False
+        if not obj:
+            return True
+        return check_user_access(request.user, view.model, 'read', obj)
+
+    def _check_post_permissions(self, request, view, obj=None):
+        if hasattr(view, 'parent_model'):
+            parent_obj = view.parent_model.objects.get(pk=view.kwargs['pk'])
+            #if not check_user_access(request.user, view.parent_model, 'change',
+            #                         parent_obj, None):
+            #    return False
+            # FIXME: attach/unattach
+            return True
+        else:
+            if obj:
+                return True
+            return check_user_access(request.user, view.model, 'add', request.DATA)
+
+    def _check_put_permissions(self, request, view, obj=None):
+        if not obj:
+            return True # FIXME: For some reason this needs to return True
+                        # because it is first called with obj=None?
+        if getattr(view, 'is_variable_data', False):
+            return check_user_access(request.user, view.model, 'change', obj,
+                                     {'variables': request.DATA})
+        else:
+            return check_user_access(request.user, view.model, 'change', obj,
+                                     request.DATA)
+
+    def _check_delete_permissions(self, request, view, obj=None):
+        if not obj:
+            return True # FIXME: For some reason this needs to return True
+                        # because it is first called with obj=None?
+        return check_user_access(request.user, view.model, 'delete', obj)
+
+    def _check_permissions(self, request, view, obj=None):
+        #if not obj and hasattr(view, 'get_object'):
+        #    obj = view.get_object()
+        # Check that obj (if given) is active, otherwise raise a 404.
+        active = getattr(obj, 'active', getattr(obj, 'is_active', True))
+        if callable(active):
+            active = active()
+        if not active:
+            raise Http404()
+        # Don't allow anonymous users. 401, not 403, hence no raised exception.
+        if not request.user or request.user.is_anonymous():
+            return False
+        # Don't allow inactive users (and respond with a 403).
+        if not request.user.is_active:
+            raise PermissionDenied('your account is inactive')
+        # Always allow superusers (as long as they are active).
+        if request.user.is_superuser:
+            return True
+        # Check permissions for the given view and object, based on the request
+        # method used.
+        check_method = getattr(self, '_check_%s_permissions' % \
+                               request.method.lower(), None)
+        result = check_method and check_method(request, view, obj)
+        if not result:
+            raise PermissionDenied()
+        return result
+            
+        # If no obj is given, check list permissions.
+        if obj is None:
+            if getattr(view, 'list_permissions_check', None):
+                if not view.list_permissions_check(request):
+                    raise PermissionDenied()
+            elif not getattr(view, 'item_permissions_check', None):
+                raise Exception('internal error, list_permissions_check or '
+                                'item_permissions_check must be defined')
+            return True
+        # Otherwise, check the item permissions for the given obj.
+        else:
+            if not view.item_permissions_check(request, obj):
+                raise PermissionDenied()
+            return True
+
+    def has_permission(self, request, view, obj=None):
+        logger.debug('has_permission(user=%s method=%s data=%r, %s, %r)',
+                     request.user, request.method, request.DATA,
+                     view.__class__.__name__, obj)
+        try:
+            response = self._check_permissions(request, view, obj)
+        except Exception, e:
+            logger.debug('has_permission raised %r', e, exc_info=True)
+            raise
+        else:
+            logger.debug('has_permission returned %r', response)
+            return response
+
+    def has_object_permission(self, request, view, obj):
+        return self.has_permission(request, view, obj)
+
+class JobCallbackPermission(CustomRbac):
+
+    def has_permission(self, request, view, obj=None):
+        # If another authentication method was used other than the one for job
+        # callbacks, return True to fall through to the next permission class.
+        if request.user or not request.auth:
+            return super(JobCallbackPermission, self).has_permission(request, view, obj)
+        # FIXME: Verify that inventory or job event requested are for the same
+        # job ID present in the auth token, etc.
+        #try:
+        #    job = Job.objects.get(active=True, status='running', pk=int(request.auth.split('-')[0]))
+        #except Job.DoesNotExist:
+        #    return False
+        if view.model == Inventory and request.method.lower() in ('head', 'get'):
+            return True
+        elif view.model == JobEvent and request.method.lower() == 'post':
+            return True
+        else:
+            return False

awx/main/renderers.py

@@ -0,0 +1,18 @@
+# Copyright (c) 2013 AnsibleWorks, Inc.
+# All Rights Reserved.
+
+# Django REST Framework
+from rest_framework import renderers
+
+class BrowsableAPIRenderer(renderers.BrowsableAPIRenderer):
+    '''
+    Customizations to the default browsable API renderer.
+    '''
+
+    def get_form(self, view, method, request):
+        '''Never show auto-generated form (only raw form).'''
+        obj = getattr(view, 'object', None)
+        if not self.show_form_for_method(view, method, request, obj):
+             return
+        if method in ('DELETE', 'OPTIONS'):
+             return True  # Don't actually need to return a form

awx/main/serializers.py

@@ -0,0 +1,436 @@
+# Copyright (c) 2013 AnsibleWorks, Inc.
+# All Rights Reserved.
+
+# Python
+import json
+
+# PyYAML
+import yaml
+
+# Django
+from django.contrib.auth.models import User
+from django.core.urlresolvers import reverse
+from django.core.exceptions import ObjectDoesNotExist
+
+# Django REST Framework
+from rest_framework import serializers
+
+# AWX
+from awx.main.models import *
+
+BASE_FIELDS = ('id', 'url', 'related', 'summary_fields', 'created', 'name',
+               'description')
+
+# objects that if found we should add summary info for them
+SUMMARIZABLE_FKS = ( 
+   'organization', 'host', 'group', 'inventory', 'project', 'team', 'job',
+   'job_template', 'credential', 'permission',
+)
+# fields that should be summarized regardless of object type
+SUMMARIZABLE_FIELDS = (
+   'name', 'username', 'first_name', 'last_name', 'description',
+)
+
+class BaseSerializer(serializers.ModelSerializer):
+
+    # add the URL and related resources
+    url            = serializers.SerializerMethodField('get_absolute_url')
+    related        = serializers.SerializerMethodField('get_related')
+    summary_fields = serializers.SerializerMethodField('get_summary_fields')
+
+    # make certain fields read only
+    created       = serializers.SerializerMethodField('get_created')
+    active        = serializers.SerializerMethodField('get_active')
+
+    def get_absolute_url(self, obj):
+        if isinstance(obj, User):
+            return reverse('main:user_detail', args=(obj.pk,))
+        else:
+            return obj.get_absolute_url()
+
+    def get_related(self, obj):
+        res = dict()
+        if getattr(obj, 'created_by', None):
+            res['created_by'] = reverse('main:user_detail', args=(obj.created_by.pk,))
+        return res
+
+    def get_summary_fields(self, obj):
+        # return the names (at least) for various fields, so we don't have to write this
+        # method for each object.
+        summary_fields = {}
+        for fk in SUMMARIZABLE_FKS:
+            try:
+                fkval = getattr(obj, fk, None)
+                if fkval is not None:
+                    summary_fields[fk] = {}
+                    for field in SUMMARIZABLE_FIELDS:
+                        fval = getattr(fkval, field, None)
+                        if fval is not None:
+                            summary_fields[fk][field] = fval
+            # Can be raised by the reverse accessor for a OneToOneField.
+            except ObjectDoesNotExist:
+                pass
+        return summary_fields 
+
+    def get_created(self, obj):
+        if isinstance(obj, User):
+            return obj.date_joined
+        else:
+            return obj.created
+
+    def get_active(self, obj):
+        if isinstance(obj, User):
+            return obj.is_active
+        else:
+            return obj.active
+
+class OrganizationSerializer(BaseSerializer):
+
+    class Meta:
+        model = Organization
+        fields = BASE_FIELDS
+
+    def get_related(self, obj):
+        res = super(OrganizationSerializer, self).get_related(obj)
+        res.update(dict(
+            #audit_trail = reverse('main:organization_audit_trail_list',    args=(obj.pk,)),
+            projects    = reverse('main:organization_projects_list',       args=(obj.pk,)),
+            inventories = reverse('main:organization_inventories_list',    args=(obj.pk,)),
+            users       = reverse('main:organization_users_list',          args=(obj.pk,)),
+            admins      = reverse('main:organization_admins_list',         args=(obj.pk,)),
+            #tags        = reverse('main:organization_tags_list',           args=(obj.pk,)),
+            teams       = reverse('main:organization_teams_list',          args=(obj.pk,)),
+        ))
+        return res
+
+class ProjectSerializer(BaseSerializer):
+
+    playbooks = serializers.Field(source='playbooks')
+
+    class Meta:
+        model = Project
+        fields = BASE_FIELDS + ('local_path',)
+
+    def get_related(self, obj):
+        res = super(ProjectSerializer, self).get_related(obj)
+        res.update(dict(
+            organizations = reverse('main:project_organizations_list', args=(obj.pk,)),
+            playbooks = reverse('main:project_detail_playbooks', args=(obj.pk,)),
+        ))
+        return res
+
+class ProjectPlaybooksSerializer(ProjectSerializer):
+
+    class Meta:
+        model = Project
+        fields = ('playbooks',)
+
+    def to_native(self, obj):
+        ret = super(ProjectPlaybooksSerializer, self).to_native(obj)
+        return ret.get('playbooks', [])
+
+class BaseSerializerWithVariables(BaseSerializer):
+
+    def validate_variables(self, attrs, source):
+        try:
+            json.loads(attrs[source].strip() or '{}')
+        except ValueError:
+            try:
+                yaml.safe_load(attrs[source])
+            except yaml.YAMLError:
+                raise serializers.ValidationError('Must be valid JSON or YAML')
+        return attrs
+
+class InventorySerializer(BaseSerializerWithVariables):
+
+    class Meta:
+        model = Inventory
+        fields = BASE_FIELDS + ('organization', 'variables',
+                                'has_active_failures')
+
+    def get_related(self, obj):
+        res = super(InventorySerializer, self).get_related(obj)
+        res.update(dict(
+            hosts         = reverse('main:inventory_hosts_list',        args=(obj.pk,)),
+            groups        = reverse('main:inventory_groups_list',       args=(obj.pk,)),
+            root_groups   = reverse('main:inventory_root_groups_list',  args=(obj.pk,)),
+            variable_data = reverse('main:inventory_variable_detail',   args=(obj.pk,)),
+            organization  = reverse('main:organization_detail',        args=(obj.organization.pk,)),
+        ))
+        return res
+
+class HostSerializer(BaseSerializerWithVariables):
+
+    class Meta:
+        model = Host
+        fields = BASE_FIELDS + ('inventory', 'variables', 'has_active_failures')
+
+    def get_related(self, obj):
+        res = super(HostSerializer, self).get_related(obj)
+        res.update(dict(
+            variable_data = reverse('main:host_variable_detail', args=(obj.pk,)),
+            inventory     = reverse('main:inventory_detail',     args=(obj.inventory.pk,)),
+            groups        = reverse('main:host_groups_list',     args=(obj.pk,)),
+            all_groups    = reverse('main:host_all_groups_list', args=(obj.pk,)),
+            job_events    = reverse('main:host_job_events_list',  args=(obj.pk,)),
+            job_host_summaries = reverse('main:host_job_host_summaries_list', args=(obj.pk,)),
+        ))
+        if obj.last_job:
+            res['last_job'] = reverse('main:job_detail', args=(obj.last_job.pk,))
+        if obj.last_job_host_summary:
+            res['last_job_host_summary'] = reverse('main:job_host_summary_detail', args=(obj.last_job_host_summary.pk,))
+        return res
+
+class GroupSerializer(BaseSerializerWithVariables):
+
+    class Meta:
+        model = Group
+        fields = BASE_FIELDS + ('inventory', 'variables', 'has_active_failures')
+
+    def get_related(self, obj):
+        res = super(GroupSerializer, self).get_related(obj)
+        res.update(dict(
+            variable_data = reverse('main:group_variable_detail', args=(obj.pk,)),
+            hosts         = reverse('main:group_hosts_list',      args=(obj.pk,)),
+            children      = reverse('main:group_children_list',   args=(obj.pk,)),
+            all_hosts     = reverse('main:group_all_hosts_list',  args=(obj.pk,)),
+            inventory     = reverse('main:inventory_detail',       args=(obj.inventory.pk,)),
+            job_events    = reverse('main:group_job_events_list',   args=(obj.pk,)),
+            job_host_summaries = reverse('main:group_job_host_summaries_list', args=(obj.pk,)),
+        ))
+        return res
+
+class BaseVariableDataSerializer(BaseSerializer):
+
+    def to_native(self, obj):
+        ret = super(BaseVariableDataSerializer, self).to_native(obj)
+        try:
+            return json.loads(ret.get('variables', '') or '{}')
+        except ValueError:
+            return yaml.safe_load(ret.get('variables', ''))
+
+    def from_native(self, data, files):
+        data = {'variables': json.dumps(data)}
+        return super(BaseVariableDataSerializer, self).from_native(data, files)
+
+class InventoryVariableDataSerializer(BaseVariableDataSerializer):
+
+    class Meta:
+        model = Inventory
+        fields = ('variables',)
+
+class HostVariableDataSerializer(BaseVariableDataSerializer):
+
+    class Meta:
+        model = Host
+        fields = ('variables',)
+
+class GroupVariableDataSerializer(BaseVariableDataSerializer):
+
+    class Meta:
+        model = Group
+        fields = ('variables',)
+
+class TeamSerializer(BaseSerializer):
+
+    class Meta:
+        model = Team
+        fields = BASE_FIELDS + ('organization',)
+
+    def get_related(self, obj):
+        res = super(TeamSerializer, self).get_related(obj)
+        res.update(dict(
+            projects     = reverse('main:team_projects_list',    args=(obj.pk,)),
+            users        = reverse('main:team_users_list',       args=(obj.pk,)),
+            credentials  = reverse('main:team_credentials_list', args=(obj.pk,)),
+            organization = reverse('main:organization_detail',   args=(obj.organization.pk,)),
+            permissions  = reverse('main:team_permissions_list', args=(obj.pk,)),
+        ))
+        return res
+
+class PermissionSerializer(BaseSerializer):
+
+    class Meta:
+        model = Permission
+        fields = BASE_FIELDS + ('user', 'team', 'project', 'inventory',
+                                'permission_type',)
+         
+    def get_related(self, obj):
+        res = super(PermissionSerializer, self).get_related(obj)
+        if obj.user:
+            res['user']        = reverse('main:user_detail', args=(obj.user.pk,))
+        if obj.team:
+            res['team']        = reverse('main:team_detail', args=(obj.team.pk,))
+        if obj.project:
+            res['project']     = reverse('main:project_detail', args=(obj.project.pk,)) 
+        if obj.inventory:
+            res['inventory']   = reverse('main:inventory_detail', args=(obj.inventory.pk,))
+        return res
+
+class CredentialSerializer(BaseSerializer):
+
+    # FIXME: may want to make some of these filtered based on user accessing
+
+    class Meta:
+        model = Credential
+        fields = BASE_FIELDS + ('ssh_username', 'ssh_password', 'ssh_key_data',
+                                'ssh_key_unlock', 'sudo_username',
+                                'sudo_password', 'user', 'team',)
+
+    def get_related(self, obj):
+        res = super(CredentialSerializer, self).get_related(obj)
+        if obj.user:
+            res['user'] = reverse('main:user_detail', args=(obj.user.pk,))
+        if obj.team:
+            res['team'] = reverse('main:team_detail', args=(obj.team.pk,))
+        return res
+
+    def validate(self, attrs):
+        ''' some fields cannot be changed once written '''
+        if self.object is not None:
+            # this is an update
+            if self.object.user != attrs['user']:
+                raise serializers.ValidationError("user cannot be changed")
+            if self.object.team != attrs['team']:
+                raise serializers.ValidationError("team cannot be changed")
+        return attrs
+
+class UserSerializer(BaseSerializer):
+
+    class Meta:
+        model = User
+        fields = ('id', 'url', 'related', 'created', 'username', 'first_name',
+                  'last_name', 'email', 'is_active', 'is_superuser',)
+
+    def get_related(self, obj):
+        res = super(UserSerializer, self).get_related(obj)
+        res.update(dict(
+            teams                  = reverse('main:user_teams_list',               args=(obj.pk,)),
+            organizations          = reverse('main:user_organizations_list',       args=(obj.pk,)),
+            admin_of_organizations = reverse('main:user_admin_of_organizations_list', args=(obj.pk,)),
+            projects               = reverse('main:user_projects_list',            args=(obj.pk,)),
+            credentials            = reverse('main:user_credentials_list',         args=(obj.pk,)),
+            permissions            = reverse('main:user_permissions_list',         args=(obj.pk,)),
+        ))
+        return res
+
+class JobTemplateSerializer(BaseSerializer):
+
+    class Meta:
+        model = JobTemplate
+        fields = BASE_FIELDS + ('job_type', 'inventory', 'project', 'playbook',
+                                'credential', 'forks', 'limit', 'verbosity',
+                                'extra_vars', 'job_tags', 'host_config_key')
+
+    def get_related(self, obj):
+        res = super(JobTemplateSerializer, self).get_related(obj)
+        res.update(dict(
+            inventory   = reverse('main:inventory_detail',   args=(obj.inventory.pk,)),
+            project     = reverse('main:project_detail',    args=(obj.project.pk,)),
+            jobs        = reverse('main:job_template_jobs_list', args=(obj.pk,)),
+        ))
+        if obj.credential:
+            res['credential'] = reverse('main:credential_detail', args=(obj.credential.pk,))
+        return res
+
+    def validate_playbook(self, attrs, source):
+        project = attrs.get('project', None)
+        playbook = attrs.get('playbook', '')
+        if project and playbook and playbook not in project.playbooks:
+            raise serializers.ValidationError('Playbook not found for project')
+        return attrs
+
+class JobSerializer(BaseSerializer):
+
+    passwords_needed_to_start = serializers.Field(source='get_passwords_needed_to_start')
+
+    class Meta:
+        model = Job
+        fields = BASE_FIELDS + ('job_template', 'job_type', 'inventory',
+                                'project', 'playbook', 'credential',
+                                'forks', 'limit', 'verbosity', 'extra_vars',
+                                'job_tags', 'status', 'failed', 'result_stdout',
+                                'result_traceback',
+                                'passwords_needed_to_start')
+
+    def get_related(self, obj):
+        res = super(JobSerializer, self).get_related(obj)
+        res.update(dict(
+            inventory   = reverse('main:inventory_detail',   args=(obj.inventory.pk,)),
+            project     = reverse('main:project_detail',    args=(obj.project.pk,)),
+            credential  = reverse('main:credential_detail', args=(obj.credential.pk,)),
+            job_events  = reverse('main:job_job_events_list', args=(obj.pk,)),
+            job_host_summaries = reverse('main:job_job_host_summaries_list', args=(obj.pk,)),
+        ))
+        if obj.job_template:
+            res['job_template'] = reverse('main:job_template_detail', args=(obj.job_template.pk,))
+        if obj.can_start or True:
+            res['start'] = reverse('main:job_start', args=(obj.pk,))
+        if obj.can_cancel or True:
+            res['cancel'] = reverse('main:job_cancel', args=(obj.pk,))
+        return res
+
+    def from_native(self, data, files):
+        # When creating a new job and a job template is specified, populate any
+        # fields not provided in data from the job template.
+        if not self.object and isinstance(data, dict) and 'job_template' in data:
+            try:
+                job_template = JobTemplate.objects.get(pk=data['job_template'])
+            except JobTemplate.DoesNotExist:
+                self._errors = {'job_template': 'Invalid job template'}
+                return
+            # Don't auto-populate name or description.
+            data.setdefault('job_type', job_template.job_type)
+            data.setdefault('inventory', job_template.inventory.pk)
+            data.setdefault('project', job_template.project.pk)
+            data.setdefault('playbook', job_template.playbook)
+            if job_template.credential:
+                data.setdefault('credential', job_template.credential.pk)
+            data.setdefault('forks', job_template.forks)
+            data.setdefault('limit', job_template.limit)
+            data.setdefault('verbosity', job_template.verbosity)
+            data.setdefault('extra_vars', job_template.extra_vars)
+            data.setdefault('job_tags', job_template.job_tags)
+        return super(JobSerializer, self).from_native(data, files)
+
+class JobHostSummarySerializer(BaseSerializer):
+
+    class Meta:
+        model = JobHostSummary
+        fields = ('id', 'url', 'job', 'host', 'summary_fields', 'related',
+                  'changed', 'dark', 'failures', 'ok', 'processed', 'skipped',
+                  'failed')
+
+    def get_related(self, obj):
+        res = super(JobHostSummarySerializer, self).get_related(obj)
+        res.update(dict(
+            job=reverse('main:job_detail', args=(obj.job.pk,)),
+            host=reverse('main:host_detail', args=(obj.host.pk,))
+        ))
+        return res
+
+class JobEventSerializer(BaseSerializer):
+
+    event_display = serializers.Field(source='get_event_display2')
+
+    class Meta:
+        model = JobEvent
+        fields = ('id', 'url', 'created', 'job', 'event', 'event_display',
+                  'event_data', 'failed', 'host', 'related', 'summary_fields',
+                  'parent')
+
+    def get_related(self, obj):
+        res = super(JobEventSerializer, self).get_related(obj)
+        res.update(dict(
+            job = reverse('main:job_detail', args=(obj.job.pk,)),
+            #children = reverse('main:job_event_children_list', args=(obj.pk,)),
+        ))
+        if obj.parent:
+            res['parent'] = reverse('main:job_event_detail', args=(obj.parent.pk,))
+        if obj.children.count():
+            res['children'] = reverse('main:job_event_children_list', args=(obj.pk,))
+        if obj.host:
+            res['host'] = reverse('main:host_detail', args=(obj.host.pk,))
+        if obj.hosts.count():
+            res['hosts'] = reverse('main:job_event_hosts_list', args=(obj.pk,))
+        return res

awx/main/tasks.py

@@ -0,0 +1,219 @@
+# Copyright (c) 2013 AnsibleWorks, Inc.
+# All Rights Reserved.
+
+import cStringIO
+import logging
+import os
+import select
+import subprocess
+import tempfile
+import time
+import traceback
+from celery import Task
+from django.conf import settings
+import pexpect
+from awx.main.models import *
+
+__all__ = ['RunJob']
+
+logger = logging.getLogger('awx.main.tasks')
+
+class RunJob(Task):
+    '''
+    Celery task to run a job using ansible-playbook.
+    '''
+
+    name = 'run_job'
+
+    def update_job(self, job_pk, **job_updates):
+        '''
+        Reload Job from database and update the given fields.
+        '''
+        job = Job.objects.get(pk=job_pk)
+        if job_updates:
+            update_fields = []
+            for field, value in job_updates.items():
+                setattr(job, field, value)
+                update_fields.append(field)
+                if field == 'status':
+                    update_fields.append('failed')
+            job.save(update_fields=update_fields)
+        return job
+
+    def get_path_to(self, *args):
+        '''
+        Return absolute path relative to this file.
+        '''
+        return os.path.abspath(os.path.join(os.path.dirname(__file__), *args))
+
+    def build_ssh_key_path(self, job, **kwargs):
+        '''
+        Create a temporary file containing the SSH private key.
+        '''
+        creds = job.credential
+        if creds and creds.ssh_key_data:
+            # FIXME: File permissions?
+            handle, path = tempfile.mkstemp()
+            f = os.fdopen(handle, 'w')
+            f.write(creds.ssh_key_data)
+            f.close()
+            return path
+        else:
+            return ''
+
+    def build_passwords(self, job, **kwargs):
+        '''
+        Build a dictionary of passwords for SSH private key, SSH user and sudo.
+        '''
+        passwords = {}
+        creds = job.credential
+        if creds:
+            for field in ('ssh_key_unlock', 'ssh_password', 'sudo_password'):
+                value = kwargs.get(field, getattr(creds, field))
+                if value not in ('', 'ASK'):
+                    passwords[field] = value
+        return passwords
+
+    def build_env(self, job, **kwargs):
+        '''
+        Build environment dictionary for ansible-playbook.
+        '''
+        plugin_dir = self.get_path_to('..', 'plugins', 'callback')
+        env = dict(os.environ.items())
+        # question: when running over CLI, generate a random ID or grab next, etc?
+        # answer: TBD
+        env['JOB_ID'] = str(job.pk)
+        env['INVENTORY_ID'] = str(job.inventory.pk)
+        env['ANSIBLE_CALLBACK_PLUGINS'] = plugin_dir
+        if hasattr(settings, 'ANSIBLE_TRANSPORT'):
+            env['ANSIBLE_TRANSPORT'] = getattr(settings, 'ANSIBLE_TRANSPORT')
+        env['REST_API_URL'] = settings.INTERNAL_API_URL
+        env['REST_API_TOKEN'] = job.callback_auth_token or ''
+        env['ANSIBLE_NOCOLOR'] = '1' # Prevent output of escape sequences.
+        return env
+
+    def build_args(self, job, **kwargs):
+        '''
+        Build command line argument list for running ansible-playbook,
+        optionally using ssh-agent for public/private key authentication.
+        '''
+        creds = job.credential
+        ssh_username, sudo_username = '', ''
+        if creds:
+            ssh_username = kwargs.get('ssh_username', creds.ssh_username)
+            sudo_username = kwargs.get('sudo_username', creds.sudo_username)
+        # Always specify the normal SSH user as root by default.  Since this
+        # task is normally running in the background under a service account,
+        # it doesn't make sense to rely on ansible-playbook's default of using
+        # the current user.
+        ssh_username = ssh_username or 'root'
+        if False:
+            inventory_script = self.get_path_to('management', 'commands',
+                                                'acom_inventory.py')
+        else:
+            inventory_script = self.get_path_to('..', 'scripts', 'inventory.py')
+        args = ['ansible-playbook', '-i', inventory_script]
+        if job.job_type == 'check':
+            args.append('--check')
+        args.extend(['-u', ssh_username])
+        if 'ssh_password' in kwargs.get('passwords', {}):
+            args.append('--ask-pass')
+        # However, we should only specify sudo user if explicitly given by the
+        # credentials, otherwise, the playbook will be forced to run using
+        # sudo, which may not always be the desired behavior.
+        if sudo_username:
+            args.extend(['-U', sudo_username])
+        if 'sudo_password' in kwargs.get('passwords', {}):
+            args.append('--ask-sudo-pass')
+        if job.forks:  # FIXME: Max limit?
+            args.append('--forks=%d' % job.forks)
+        if job.limit:
+            args.extend(['-l', job.limit])
+        if job.verbosity:
+            args.append('-%s' % ('v' * min(3, job.verbosity)))
+        if job.extra_vars:
+            args.extend(['-e', job.extra_vars])
+        if job.job_tags:
+            args.extend(['-t', job.job_tags])
+        args.append(job.playbook) # relative path to project.local_path
+        ssh_key_path = kwargs.get('ssh_key_path', '')
+        if ssh_key_path:
+            cmd = ' '.join([subprocess.list2cmdline(['ssh-add', ssh_key_path]),
+                            '&&', subprocess.list2cmdline(args)])
+            args = ['ssh-agent', 'sh', '-c', cmd]
+        return args
+
+    def run_pexpect(self, job_pk, args, cwd, env, passwords):
+        '''
+        Run the job using pexpect to capture output and provide passwords when
+        requested.
+        '''
+        status, stdout = 'error', ''
+        logfile = cStringIO.StringIO()
+        logfile_pos = logfile.tell()
+        child = pexpect.spawn(args[0], args[1:], cwd=cwd, env=env)
+        child.logfile_read = logfile
+        job_canceled = False
+        while child.isalive():
+            expect_list = [
+                r'Enter passphrase for .*:',
+                r'Bad passphrase, try again for .*:',
+                r'sudo password.*:',
+                r'SSH password:',
+                pexpect.TIMEOUT,
+                pexpect.EOF,
+            ]
+            result_id = child.expect(expect_list, timeout=2)
+            if result_id == 0:
+                child.sendline(passwords.get('ssh_key_unlock', ''))
+            elif result_id == 1:
+                child.sendline('')
+            elif result_id == 2:
+                child.sendline(passwords.get('sudo_password', ''))
+            elif result_id == 3:
+                child.sendline(passwords.get('ssh_password', ''))
+            job_updates = {}
+            if logfile_pos != logfile.tell():
+                job_updates['result_stdout'] = logfile.getvalue()
+            job = self.update_job(job_pk, **job_updates)
+            if job.cancel_flag:
+                child.close(True)
+                job_canceled = True
+        if job_canceled:
+            status = 'canceled'
+        elif child.exitstatus == 0:
+            status = 'successful'
+        else:
+            status = 'failed'
+        stdout = logfile.getvalue()
+        return status, stdout
+
+    def run(self, job_pk, **kwargs):
+        '''
+        Run the job using ansible-playbook and capture its output.
+        '''
+        job = self.update_job(job_pk, status='running')
+        status, stdout, tb = 'error', '', ''
+        try:
+            kwargs['ssh_key_path'] = self.build_ssh_key_path(job, **kwargs)
+            kwargs['passwords'] = self.build_passwords(job, **kwargs)
+            args = self.build_args(job, **kwargs)
+            cwd = job.project.get_project_path()
+            if not cwd:
+                raise RuntimeError('project local_path %s cannot be found' %
+                                   job.project.local_path)
+            env = self.build_env(job, **kwargs)
+            job = self.update_job(job_pk, job_args=args, job_cwd=cwd,
+                                  job_env=env)
+            status, stdout = self.run_pexpect(job_pk, args, cwd, env,
+                                              kwargs['passwords'])
+        except Exception:
+            tb = traceback.format_exc()
+        finally:
+            if kwargs.get('ssh_key_path', ''):
+                try:
+                    os.remove(kwargs['ssh_key_path'])
+                except IOError:
+                    pass
+        self.update_job(job_pk, status=status, result_stdout=stdout,
+                        result_traceback=tb)

awx/main/tests/__init__.py

@@ -0,0 +1,11 @@
+# Copyright (c) 2013 AnsibleWorks, Inc.
+# All Rights Reserved.
+
+from awx.main.tests.organizations import OrganizationsTest
+from awx.main.tests.users import UsersTest
+from awx.main.tests.inventory import InventoryTest
+from awx.main.tests.projects import ProjectsTest
+from awx.main.tests.scripts import *
+from awx.main.tests.tasks import RunJobTest
+from awx.main.tests.jobs import *
+

awx/main/tests/base.py

@@ -0,0 +1,247 @@
+# Copyright (c) 2013 AnsibleWorks, Inc.
+# All Rights Reserved.
+
+import contextlib
+import datetime
+import json
+import os
+import shutil
+import tempfile
+
+import yaml
+from django.conf import settings
+from django.contrib.auth.models import User
+import django.test
+from django.test.client import Client
+from awx.main.models import *
+
+class BaseTestMixin(object):
+    '''
+    Mixin with shared code for use by all test cases.
+    '''
+
+    def setUp(self):
+        super(BaseTestMixin, self).setUp()
+        self.object_ctr = 0
+        self._temp_project_dirs = []
+        self._current_auth = None
+        self._user_passwords = {}
+
+    def tearDown(self):
+        super(BaseTestMixin, self).tearDown()
+        for project_dir in self._temp_project_dirs:
+            if os.path.exists(project_dir):
+                shutil.rmtree(project_dir, True)
+
+    @contextlib.contextmanager
+    def current_user(self, user_or_username, password=None):
+        try:
+            if isinstance(user_or_username, User):
+                username = user_or_username.username
+            else:
+                username = user_or_username
+            password = password or self._user_passwords.get(username)
+            previous_auth = self._current_auth
+            if username is None:
+                self._current_auth = None
+            else:
+                self._current_auth = (username, password)
+            yield
+        finally:
+            self._current_auth = previous_auth
+
+    def make_user(self, username, password=None, super_user=False):
+        user = None
+        password = password or username
+        if super_user:
+            user = User.objects.create_superuser(username, "%s@example.com", password)
+        else:
+            user = User.objects.create_user(username, "%s@example.com", password)
+        self.assertTrue(user.auth_token)
+        self._user_passwords[user.username] = password
+        return user
+
+    def make_organizations(self, created_by, count=1):
+        results = []
+        for x in range(0, count):
+            self.object_ctr = self.object_ctr + 1
+            results.append(Organization.objects.create(
+                name="org%s-%s" % (x, self.object_ctr), description="org%s" % x, created_by=created_by
+            ))
+        return results
+
+    def make_project(self, name, description='', created_by=None,
+                     playbook_content=''):
+        if not os.path.exists(settings.PROJECTS_ROOT):
+            os.makedirs(settings.PROJECTS_ROOT)
+        # Create temp project directory.
+        project_dir = tempfile.mkdtemp(dir=settings.PROJECTS_ROOT)
+        self._temp_project_dirs.append(project_dir)
+        # Create temp playbook in project (if playbook content is given).
+        if playbook_content:
+            handle, playbook_path = tempfile.mkstemp(suffix='.yml',
+                                                     dir=project_dir)
+            test_playbook_file = os.fdopen(handle, 'w')
+            test_playbook_file.write(playbook_content)
+            test_playbook_file.close()
+        return Project.objects.create(
+            name=name, description=description,
+            local_path=os.path.basename(project_dir), created_by=created_by,
+            #scm_type='git',  default_playbook='foo.yml',
+        )
+
+    def make_projects(self, created_by, count=1, playbook_content=''):
+        results = []
+        for x in range(0, count):
+            self.object_ctr = self.object_ctr + 1
+            results.append(self.make_project(
+                name="proj%s-%s" % (x, self.object_ctr),
+                description="proj%s" % x,
+                created_by=created_by,
+                playbook_content=playbook_content,
+            ))
+        return results
+
+    def check_pagination_and_size(self, data, desired_count, previous=None, next=None):
+        self.assertTrue('results' in data)
+        self.assertEqual(data['count'], desired_count)
+        self.assertEqual(data['previous'], previous)
+        self.assertEqual(data['next'], next)
+
+    def check_list_ids(self, data, queryset, check_order=False):
+        data_ids = [x['id'] for x in data['results']]
+        qs_ids = queryset.values_list('pk', flat=True)
+        if check_order:
+            self.assertEqual(data_ids, qs_ids)
+        else:
+            self.assertEqual(set(data_ids), set(qs_ids))
+
+    def setup_users(self, just_super_user=False):
+        # Create a user.
+        self.super_username  = 'admin'
+        self.super_password  = 'admin'
+        self.normal_username = 'normal'
+        self.normal_password = 'normal'
+        self.other_username  = 'other'
+        self.other_password  = 'other'
+
+        self.super_django_user  = self.make_user(self.super_username,  self.super_password, super_user=True)
+
+        if not just_super_user:
+
+            self.normal_django_user = self.make_user(self.normal_username, self.normal_password, super_user=False)
+            self.other_django_user  = self.make_user(self.other_username,  self.other_password, super_user=False)
+
+    def get_super_credentials(self):
+        return (self.super_username, self.super_password)
+
+    def get_normal_credentials(self):
+        return (self.normal_username, self.normal_password)
+
+    def get_other_credentials(self):
+        return (self.other_username, self.other_password)
+
+    def get_invalid_credentials(self):
+        return ('random', 'combination')
+        
+    def _generic_rest(self, url, data=None, expect=204, auth=None, method=None,
+                      data_type=None, accept=None):
+        assert method is not None
+        method_name = method.lower()
+        if method_name not in ('options', 'head', 'get', 'delete'):
+            assert data is not None
+        client_kwargs = {}
+        if accept:
+            client_kwargs['HTTP_ACCEPT'] = accept
+        client = Client(**client_kwargs)
+        auth = auth or self._current_auth
+        if auth:
+            if isinstance(auth, (list, tuple)):
+                client.login(username=auth[0], password=auth[1])
+            elif isinstance(auth, basestring):
+                client_kwargs['HTTP_AUTHORIZATION'] = 'Token %s' % auth
+                client = Client(**client_kwargs)
+        method = getattr(client, method_name)
+        response = None
+        if data is not None:
+            data_type = data_type or 'json'
+            if data_type == 'json':
+                response = method(url, json.dumps(data), 'application/json')
+            elif data_type == 'yaml':
+                response = method(url, yaml.safe_dump(data), 'application/yaml')
+            else:
+                self.fail('Unsupported data_type %s' % data_type)
+        else:
+            response = method(url)
+
+        self.assertFalse(response.status_code == 500 and expect != 500,
+                         'Failed (500): %s' % response.content)
+        if expect is not None:
+            assert response.status_code == expect, "expected status %s, got %s for url=%s as auth=%s: %s" % (expect, response.status_code, url, auth, response.content)
+        if method_name == 'head':
+            self.assertFalse(response.content)
+        if response.status_code not in [ 202, 204, 405 ] and method_name != 'head' and response.content:
+            # no JSON responses in these at least for now, 409 should probably return some (FIXME)
+            if response['Content-Type'].startswith('application/json'):
+                return json.loads(response.content)
+            elif response['Content-Type'].startswith('application/yaml'):
+                return yaml.safe_load(response.content)
+            else:
+                self.fail('Unsupport response content type %s' % response['Content-Type'])
+        else:
+            return None
+
+    def options(self, url, expect=200, auth=None, accept=None):
+        return self._generic_rest(url, data=None, expect=expect, auth=auth,
+                                  method='options', accept=accept)
+
+    def head(self, url, expect=200, auth=None, accept=None):
+        return self._generic_rest(url, data=None, expect=expect, auth=auth,
+                                  method='head', accept=accept)
+ 
+    def get(self, url, expect=200, auth=None, accept=None):
+        return self._generic_rest(url, data=None, expect=expect, auth=auth,
+                                  method='get', accept=accept)
+
+    def post(self, url, data, expect=204, auth=None, data_type=None,
+             accept=None):
+        return self._generic_rest(url, data=data, expect=expect, auth=auth,
+                                  method='post', data_type=data_type,
+                                  accept=accept)
+
+    def put(self, url, data, expect=200, auth=None, data_type=None,
+            accept=None):
+        return self._generic_rest(url, data=data, expect=expect, auth=auth,
+                                  method='put', data_type=data_type,
+                                  accept=accept)
+
+    def patch(self, url, data, expect=200, auth=None, data_type=None,
+              accept=None):
+        return self._generic_rest(url, data=data, expect=expect, auth=auth,
+                                  method='patch', data_type=data_type,
+                                  accept=accept)
+
+    def delete(self, url, expect=201, auth=None, data_type=None, accept=None):
+        return self._generic_rest(url, data=None, expect=expect, auth=auth,
+                                  method='delete', accept=accept)
+
+    def get_urls(self, collection_url, auth=None):
+        # TODO: this test helper function doesn't support pagination
+        data = self.get(collection_url, expect=200, auth=auth)
+        return [item['url'] for item in data['results']]
+
+class BaseTest(BaseTestMixin, django.test.TestCase):
+    '''
+    Base class for unit tests.
+    '''
+
+class BaseTransactionTest(BaseTestMixin, django.test.TransactionTestCase):
+    '''
+    Base class for tests requiring transactions (or where the test database
+    needs to be accessed by subprocesses).
+    '''
+
+class BaseLiveServerTest(BaseTestMixin, django.test.LiveServerTestCase):
+    '''
+    Base class for tests requiring a live test server.
+    '''

awx/main/tests/inventory.py

@@ -0,0 +1,600 @@
+# Copyright (c) 2013 AnsibleWorks, Inc.
+# All Rights Reserved.
+
+import datetime
+import json
+
+from django.contrib.auth.models import User as DjangoUser
+from django.core.urlresolvers import reverse
+from awx.main.models import *
+from awx.main.tests.base import BaseTest
+
+class InventoryTest(BaseTest):
+
+    def setUp(self):
+
+        super(InventoryTest, self).setUp()
+        self.setup_users()
+        self.organizations = self.make_organizations(self.super_django_user, 3)
+        self.organizations[0].admins.add(self.normal_django_user)
+        self.organizations[0].users.add(self.other_django_user)
+        self.organizations[0].users.add(self.normal_django_user)
+
+        self.inventory_a = Inventory.objects.create(name='inventory-a', description='foo', organization=self.organizations[0])
+        self.inventory_b = Inventory.objects.create(name='inventory-b', description='bar', organization=self.organizations[1])
+ 
+        # the normal user is an org admin of org 0
+
+        # create a permission here on the 'other' user so they have edit access on the org
+        # we may add another permission type later.
+        self.perm_read = Permission.objects.create(
+             inventory       = self.inventory_b,
+             user            = self.other_django_user,
+             permission_type = 'read'
+        )
+
+        # and make one more user that won't be a part of any org, just for negative-access testing
+
+        self.nobody_django_user = User.objects.create(username='nobody')
+        self.nobody_django_user.set_password('nobody')
+        self.nobody_django_user.save()
+
+    def get_nobody_credentials(self):
+        # here is a user without any permissions...
+        return ('nobody', 'nobody')
+
+    def test_main_line(self):
+       
+        # some basic URLs... 
+        inventories   = reverse('main:inventory_list')
+        inventories_1 = reverse('main:inventory_detail', args=(self.inventory_a.pk,))
+        inventories_2 = reverse('main:inventory_detail', args=(self.inventory_b.pk,))
+        hosts         = reverse('main:host_list')
+        groups        = reverse('main:group_list')
+
+        # a super user can list inventories
+        data = self.get(inventories, expect=200, auth=self.get_super_credentials())
+        self.assertEquals(data['count'], 2)
+
+        # an org admin can list inventories but is filtered to what he adminsters
+        data = self.get(inventories, expect=200, auth=self.get_normal_credentials())
+        self.assertEquals(data['count'], 1)
+
+        # a user who is on a team who has a read permissions on an inventory can see filtered inventories
+        data = self.get(inventories, expect=200, auth=self.get_other_credentials())
+        self.assertEquals(data['count'], 1)      
+
+        # a regular user not part of anything cannot see any inventories
+        data = self.get(inventories, expect=200, auth=self.get_nobody_credentials())
+        self.assertEquals(data['count'], 0)
+
+        # a super user can get inventory records
+        data = self.get(inventories_1, expect=200, auth=self.get_super_credentials())
+        self.assertEquals(data['name'], 'inventory-a')
+
+        # an org admin can get inventory records
+        data = self.get(inventories_1, expect=200, auth=self.get_normal_credentials())
+        self.assertEquals(data['name'], 'inventory-a')
+
+        # a user who is on a team who has read permissions on an inventory can see inventory records
+        data = self.get(inventories_1, expect=403, auth=self.get_other_credentials())
+        data = self.get(inventories_2, expect=200, auth=self.get_other_credentials())
+        self.assertEquals(data['name'], 'inventory-b')
+
+        # a regular user cannot read any inventory records
+        data = self.get(inventories_1, expect=403, auth=self.get_nobody_credentials())
+        data = self.get(inventories_2, expect=403, auth=self.get_nobody_credentials())
+
+        # a super user can create inventory
+        new_inv_1 = dict(name='inventory-c', description='baz', organization=self.organizations[0].pk)
+        new_id = max(Inventory.objects.values_list('pk', flat=True)) + 1
+        data = self.post(inventories, data=new_inv_1, expect=201, auth=self.get_super_credentials())
+        self.assertEquals(data['id'], new_id)
+
+        # an org admin of any org can create inventory, if it is one of his organizations
+        # the organization parameter is required!
+        new_inv_incomplete = dict(name='inventory-d', description='baz')
+        data = self.post(inventories, data=new_inv_incomplete, expect=400,  auth=self.get_normal_credentials())
+        new_inv_not_my_org = dict(name='inventory-d', description='baz', organization=self.organizations[2].pk)
+
+        data = self.post(inventories, data=new_inv_not_my_org, expect=403,  auth=self.get_normal_credentials())
+        new_inv_my_org = dict(name='inventory-d', description='baz', organization=self.organizations[0].pk)
+        data = self.post(inventories, data=new_inv_my_org, expect=201, auth=self.get_normal_credentials())
+
+        # a regular user cannot create inventory
+        new_inv_denied = dict(name='inventory-e', description='glorp', organization=self.organizations[0].pk)
+        data = self.post(inventories, data=new_inv_denied, expect=403, auth=self.get_other_credentials())
+
+        # a super user can add hosts (but inventory ID is required)
+        inv = Inventory.objects.create(
+            name = 'test inventory',
+            organization = self.organizations[0]
+        )
+        invalid      = dict(name='asdf0.example.com')
+        new_host_a   = dict(name='asdf0.example.com', inventory=inv.pk)
+        new_host_b   = dict(name='asdf1.example.com', inventory=inv.pk)
+        new_host_c   = dict(name='asdf2.example.com', inventory=inv.pk)
+        new_host_d   = dict(name='asdf3.example.com', inventory=inv.pk)
+        new_host_e   = dict(name='asdf4.example.com', inventory=inv.pk)
+        host_data0 = self.post(hosts, data=invalid, expect=400, auth=self.get_super_credentials())
+        host_data0 = self.post(hosts, data=new_host_a, expect=201, auth=self.get_super_credentials())
+ 
+        # an org admin can add hosts
+        host_data1 = self.post(hosts, data=new_host_e, expect=201, auth=self.get_normal_credentials())
+
+        # a normal user cannot add hosts
+        host_data2 = self.post(hosts, data=new_host_b, expect=403, auth=self.get_nobody_credentials())
+
+        # a normal user with inventory edit permissions (on any inventory) can create hosts
+        edit_perm = Permission.objects.create(
+             user            = self.other_django_user,
+             inventory       = Inventory.objects.get(pk=inv.pk),
+             permission_type = PERM_INVENTORY_WRITE
+        )
+        host_data3 = self.post(hosts, data=new_host_c, expect=201, auth=self.get_other_credentials())
+
+        # hostnames must be unique inside an organization
+        host_data4 = self.post(hosts, data=new_host_c, expect=400, auth=self.get_other_credentials())
+
+        # Verify we can update host via PUT.
+        host_url3 = host_data3['url']
+        host_data3['variables'] = ''
+        host_data3 = self.put(host_url3, data=host_data3, expect=200, auth=self.get_other_credentials())
+        self.assertEqual(Host.objects.get(id=host_data3['id']).variables, '')
+        self.assertEqual(Host.objects.get(id=host_data3['id']).variables_dict, {})
+        
+        # Should reject invalid data.
+        host_data3['variables'] = 'foo: [bar'
+        self.put(host_url3, data=host_data3, expect=400, auth=self.get_other_credentials())
+
+        # Should accept valid JSON or YAML.
+        host_data3['variables'] = 'bad: monkey'
+        self.put(host_url3, data=host_data3, expect=200, auth=self.get_other_credentials())
+        self.assertEqual(Host.objects.get(id=host_data3['id']).variables, host_data3['variables'])
+        self.assertEqual(Host.objects.get(id=host_data3['id']).variables_dict, {'bad': 'monkey'})
+        
+        host_data3['variables'] = '{"angry": "penguin"}'
+        self.put(host_url3, data=host_data3, expect=200, auth=self.get_other_credentials())
+        self.assertEqual(Host.objects.get(id=host_data3['id']).variables, host_data3['variables'])
+        self.assertEqual(Host.objects.get(id=host_data3['id']).variables_dict, {'angry': 'penguin'})
+
+        ###########################################
+        # GROUPS
+
+        invalid       = dict(name='web1')
+        new_group_a   = dict(name='web2', inventory=inv.pk)
+        new_group_b   = dict(name='web3', inventory=inv.pk)
+        new_group_c   = dict(name='web4', inventory=inv.pk)
+        new_group_d   = dict(name='web5', inventory=inv.pk)
+        new_group_e   = dict(name='web6', inventory=inv.pk)
+        groups = reverse('main:group_list')
+
+        data0 = self.post(groups, data=invalid, expect=400, auth=self.get_super_credentials())
+        data0 = self.post(groups, data=new_group_a, expect=201, auth=self.get_super_credentials())
+
+        # an org admin can add groups
+        group_data1 = self.post(groups, data=new_group_e, expect=201, auth=self.get_normal_credentials())
+
+        # a normal user cannot add groups
+        group_data2 = self.post(groups, data=new_group_b, expect=403, auth=self.get_nobody_credentials())
+
+        # a normal user with inventory edit permissions (on any inventory) can create groups
+        # already done!
+        #edit_perm = Permission.objects.create(
+        #     user            = self.other_django_user,
+        #     inventory       = Inventory.objects.get(pk=inv.pk),
+        #     permission_type = PERM_INVENTORY_WRITE
+        #)       
+        group_data3 = self.post(groups, data=new_group_c, expect=201, auth=self.get_other_credentials())
+ 
+        # hostnames must be unique inside an organization
+        group_data4 = self.post(groups, data=new_group_c, expect=400, auth=self.get_other_credentials())
+
+        #################################################
+        # HOSTS->inventories POST via subcollection
+       
+        url = reverse('main:inventory_hosts_list', args=(self.inventory_a.pk,))
+        new_host_a = dict(name='web100.example.com')
+        new_host_b = dict(name='web101.example.com')
+        new_host_c = dict(name='web102.example.com')
+        new_host_d = dict(name='web103.example.com')
+        new_host_e = dict(name='web104.example.com')
+
+        # a super user can associate hosts with inventories
+        added_by_collection_a = self.post(url, data=new_host_a, expect=201, auth=self.get_super_credentials())
+
+        # an org admin can associate hosts with inventories
+        added_by_collection_b = self.post(url, data=new_host_b, expect=201, auth=self.get_normal_credentials())
+
+        # a normal user cannot associate hosts with inventories
+        added_by_collection_c = self.post(url, data=new_host_c, expect=403, auth=self.get_nobody_credentials())
+
+        # a normal user with edit permission on the inventory can associate hosts with inventories
+        url5 = reverse('main:inventory_hosts_list', args=(inv.pk,))
+        added_by_collection_d = self.post(url5, data=new_host_d, expect=201, auth=self.get_other_credentials())
+        got = self.get(url5, expect=200, auth=self.get_other_credentials())
+        self.assertEquals(got['count'], 4)
+
+        # now remove the host from inventory (still keeps the record) 
+        added_by_collection_d['disassociate'] = 1
+        self.post(url5, data=added_by_collection_d, expect=204, auth=self.get_other_credentials())
+        got = self.get(url5, expect=200, auth=self.get_other_credentials())
+        self.assertEquals(got['count'], 3)
+
+
+        ##################################################
+        # GROUPS->inventories POST via subcollection
+        
+        root_groups = reverse('main:inventory_root_groups_list', args=(self.inventory_a.pk,))
+
+        url = reverse('main:inventory_groups_list', args=(self.inventory_a.pk,))
+        new_group_a = dict(name='web100')
+        new_group_b = dict(name='web101')
+        new_group_c = dict(name='web102')
+        new_group_d = dict(name='web103')
+        new_group_e = dict(name='web104')
+
+        # a super user can associate groups with inventories
+        added_by_collection = self.post(url, data=new_group_a, expect=201, auth=self.get_super_credentials())
+
+        # an org admin can associate groups with inventories
+        added_by_collection = self.post(url, data=new_group_b, expect=201, auth=self.get_normal_credentials())
+
+        # a normal user cannot associate groups with inventories
+        added_by_collection = self.post(url, data=new_group_c, expect=403, auth=self.get_nobody_credentials())
+
+        # a normal user with edit permissions on the inventory can associate groups with inventories
+        url5 = reverse('main:inventory_groups_list', args=(inv.pk,))
+        added_by_collection = self.post(url5, data=new_group_d, expect=201, auth=self.get_other_credentials())
+        # make sure duplicates give 400s
+        self.post(url5, data=new_group_d, expect=400, auth=self.get_other_credentials())
+        got = self.get(url5, expect=200, auth=self.get_other_credentials())
+        self.assertEquals(got['count'], 4)
+        
+        # side check: see if root groups URL is operational.  These are groups without parents.
+        root_groups = self.get(root_groups, expect=200, auth=self.get_super_credentials())
+        self.assertEquals(root_groups['count'], 2)
+
+        remove_me = added_by_collection
+        remove_me['disassociate'] = 1
+        self.post(url5, data=remove_me, expect=204, auth=self.get_other_credentials())
+        got = self.get(url5, expect=200, auth=self.get_other_credentials())
+        self.assertEquals(got['count'], 3)
+
+        ###################################################
+        # VARIABLES
+
+        vars_a = dict(asdf=1234, dog='fido',  cat='fluffy', unstructured=dict(a=[1,2,3],b=dict(x=2,y=3)))
+        vars_b = dict(asdf=4321, dog='barky', cat='snarf',  unstructured=dict(a=[1,2,3],b=dict(x=2,y=3)))
+        vars_c = dict(asdf=5555, dog='mouse', cat='mogwai', unstructured=dict(a=[3,0,3],b=dict(z=2600)))
+
+        # attempting to get a variable object creates it, even though it does not already exist
+        vdata_url = reverse('main:host_variable_detail', args=(added_by_collection_a['id'],))
+        
+        got = self.get(vdata_url, expect=200, auth=self.get_super_credentials())
+        self.assertEquals(got, {})
+
+        # super user can create variable objects
+        # an org admin can create variable objects (defers to inventory permissions)
+        got = self.put(vdata_url, data=vars_a, expect=200, auth=self.get_super_credentials())
+        self.assertEquals(got, vars_a) 
+
+        # verify that we can update things and get them back    
+        got = self.put(vdata_url, data=vars_c, expect=200, auth=self.get_super_credentials())
+        self.assertEquals(got, vars_c)    
+        got = self.get(vdata_url, expect=200, auth=self.get_super_credentials())
+        self.assertEquals(got, vars_c)    
+
+        # a normal user cannot edit variable objects
+        self.put(vdata_url, data=vars_a, expect=403, auth=self.get_nobody_credentials())
+
+        # a normal user with inventory write permissions can edit variable objects... FIXME
+        #vdata_url = "/api/v1/hosts/1/variable_data/" 
+        #got = self.put(vdata_url, data=vars_b, expect=200, auth=self.get_normal_credentials())
+        #self.assertEquals(got, vars_b)        
+
+        ###################################################
+        # VARIABLES -> GROUPS
+        
+        vars_a = dict(asdf=7777, dog='droopy',   cat='battlecat', unstructured=dict(a=[1,1,1],b=dict(x=1,y=2)))
+        vars_b = dict(asdf=8888, dog='snoopy',   cat='cheshire',  unstructured=dict(a=[2,2,2],b=dict(x=3,y=4)))
+        vars_c = dict(asdf=9999, dog='pluto',    cat='five',      unstructured=dict(a=[3,3,3],b=dict(z=5)))
+        groups = Group.objects.all()
+
+        vdata1_url = reverse('main:group_variable_detail', args=(groups[0].pk,))
+        vdata2_url = reverse('main:group_variable_detail', args=(groups[1].pk,))
+
+        # a super user can associate variable objects with groups
+        got = self.get(vdata1_url, expect=200, auth=self.get_super_credentials())
+        self.assertEquals(got, {})
+        put = self.put(vdata1_url, data=vars_a, expect=200, auth=self.get_super_credentials())
+        self.assertEquals(put, vars_a)
+
+        # an org admin can associate variable objects with groups
+        put = self.put(vdata1_url, data=vars_b, expect=200, auth=self.get_normal_credentials())
+ 
+        # a normal user cannot associate variable objects with groups
+        put = self.put(vdata1_url, data=vars_b, expect=403, auth=self.get_nobody_credentials())
+
+        # a normal user with inventory edit permissions can associate variable objects with groups
+        put = self.put(vdata1_url, data=vars_c, expect=200, auth=self.get_normal_credentials())
+        self.assertEquals(put, vars_c)
+
+        ###################################################
+        # VARIABLES -> INVENTORY
+        
+        vars_a = dict(asdf=9873, dog='lassie',  cat='heathcliff', unstructured=dict(a=[1,1,1],b=dict(x=1,y=2)))
+        vars_b = dict(asdf=2736, dog='benji',   cat='garfield',   unstructured=dict(a=[2,2,2],b=dict(x=3,y=4)))
+        vars_c = dict(asdf=7692, dog='buck',    cat='sylvester',  unstructured=dict(a=[3,3,3],b=dict(z=5)))
+         
+        vdata_url = reverse('main:inventory_variable_detail', args=(self.inventory_a.pk,))
+
+        # a super user can associate variable objects with inventory
+        got = self.get(vdata_url, expect=200, auth=self.get_super_credentials())
+        self.assertEquals(got, {})
+        put = self.put(vdata_url, data=vars_a, expect=200, auth=self.get_super_credentials())
+        self.assertEquals(put, vars_a)
+
+        # an org admin can associate variable objects with inventory
+        put = self.put(vdata_url, data=vars_b, expect=200, auth=self.get_normal_credentials())
+ 
+        # a normal user cannot associate variable objects with inventory
+        put = self.put(vdata_url, data=vars_b, expect=403, auth=self.get_nobody_credentials())
+
+        # a normal user with inventory edit permissions can associate variable objects with inventory
+        put = self.put(vdata_url, data=vars_c, expect=200, auth=self.get_normal_credentials())
+        self.assertEquals(put, vars_c)
+        
+        # repeat but request variables in yaml
+        got = self.get(vdata_url, expect=200,
+                       auth=self.get_normal_credentials(),
+                       accept='application/yaml')
+        self.assertEquals(got, vars_c)
+
+        # repeat but updates variables in yaml
+        put = self.put(vdata_url, data=vars_c, expect=200,
+                       auth=self.get_normal_credentials(), data_type='yaml',
+                       accept='application/yaml')
+        self.assertEquals(put, vars_c)
+
+        ####################################################
+        # ADDING HOSTS TO GROUPS
+
+        groups = Group.objects.order_by('pk')
+        hosts = Host.objects.order_by('pk')
+        host1 = hosts[0]
+        host2 = hosts[1]
+        host3 = hosts[2]
+        groups[0].hosts.add(host1)
+        groups[0].hosts.add(host3) 
+        groups[0].save()
+
+        # access        
+        url1 = reverse('main:group_hosts_list', args=(groups[0].pk,))
+        data = self.get(url1, expect=200, auth=self.get_normal_credentials())
+        self.assertEquals(data['count'], 2)
+        self.assertTrue(host1.pk in [x['id'] for x in data['results']])
+        self.assertTrue(host3.pk in [x['id'] for x in data['results']])
+
+        # addition
+        url = reverse('main:host_detail', args=(host2.pk,))
+        got = self.get(url, expect=200, auth=self.get_normal_credentials())
+        self.assertEquals(got['id'], host2.pk)
+        posted = self.post(url1, data=got, expect=204, auth=self.get_normal_credentials())
+        data = self.get(url1, expect=200, auth=self.get_normal_credentials())
+        self.assertEquals(data['count'], 3)
+        self.assertTrue(host2.pk in [x['id'] for x in data['results']])
+
+        # now add one new completely new host, to test creation+association in one go
+        new_host = dict(inventory=got['inventory'], name='completelynewhost.example.com', description='...')
+        posted = self.post(url1, data=new_host, expect=201, auth=self.get_normal_credentials())
+        
+        data = self.get(url1, expect=200, auth=self.get_normal_credentials())
+        self.assertEquals(data['count'], 4)
+
+        # removal
+        got['disassociate'] = 1
+        posted = self.post(url1, data=got, expect=204, auth=self.get_normal_credentials())
+        data = self.get(url1, expect=200, auth=self.get_normal_credentials())
+        self.assertEquals(data['count'], 3)
+        self.assertFalse(host2.pk in [x['id'] for x in data['results']])
+
+        ####################################################
+        # SUBGROUPS
+
+        groups = Group.objects.all()
+
+        # just some more groups for kicks
+        inv  = Inventory.objects.get(pk=self.inventory_a.pk)
+        Group.objects.create(name='group-X1', inventory=inv)
+        Group.objects.create(name='group-X2', inventory=inv)
+        Group.objects.create(name='group-X3', inventory=inv)
+        Group.objects.create(name='group-X4', inventory=inv)
+        Group.objects.create(name='group-X5', inventory=inv)
+
+        Permission.objects.create(
+            inventory       = inv,
+            user            = self.other_django_user,
+            permission_type = PERM_INVENTORY_WRITE
+        )
+
+        # data used for testing listing all hosts that are transitive members of a group
+        g2 = Group.objects.get(name='web4')
+        nh = Host.objects.create(name='newhost.example.com', inventory=inv,
+                                 created_by=self.super_django_user)
+        g2.hosts.add(nh)
+        g2.save()
+
+        # a super user can set subgroups
+        subgroups_url     = reverse('main:group_children_list',
+                                     args=(Group.objects.get(name='web2').pk,))
+        child_url         = reverse('main:group_detail',
+                                    args=(Group.objects.get(name='web4').pk,))
+        subgroups_url2    = reverse('main:group_children_list',
+                                    args=(Group.objects.get(name='web6').pk,))
+        subgroups_url3    = reverse('main:group_children_list',
+                                    args=(Group.objects.get(name='web100').pk,))
+        subgroups_url4    = reverse('main:group_children_list',
+                                    args=(Group.objects.get(name='web101').pk,))
+        got = self.get(child_url, expect=200, auth=self.get_super_credentials())
+        self.post(subgroups_url, data=got, expect=204, auth=self.get_super_credentials())
+        kids = Group.objects.get(name='web2').children.all()
+        self.assertEqual(len(kids), 1)
+        checked = self.get(subgroups_url, expect=200, auth=self.get_super_credentials())
+        self.assertEquals(checked['count'], 1)
+
+        # an org admin can set subgroups
+        posted = self.post(subgroups_url2, data=got, expect=204, auth=self.get_normal_credentials())
+
+        # see if we can post a completely new subgroup
+        new_data = dict(inventory=inv.pk, name='completely new', description='blarg?')
+        kids = self.get(subgroups_url2, expect=200, auth=self.get_normal_credentials())
+        self.assertEqual(kids['count'], 1)
+        posted2 = self.post(subgroups_url2, data=new_data, expect=201, auth=self.get_normal_credentials()) 
+        with_one_more_kid = self.get(subgroups_url2, expect=200, auth=self.get_normal_credentials())
+        self.assertEqual(with_one_more_kid['count'], 2)
+
+        # double post causes conflict error (actually, should it? -- just got a 204, already associated)
+        # self.post(subgroups_url2, data=got, expect=409, auth=self.get_normal_credentials())
+        checked = self.get(subgroups_url2, expect=200, auth=self.get_normal_credentials()) 
+
+        # a normal user cannot set subgroups
+        self.post(subgroups_url3, data=got, expect=403, auth=self.get_nobody_credentials())
+
+        # a normal user with inventory edit permissions can associate subgroups
+        self.post(subgroups_url3, data=got, expect=204, auth=self.get_other_credentials())
+        checked = self.get(subgroups_url3, expect=200, auth=self.get_normal_credentials()) 
+        self.assertEqual(checked['count'], 1)
+        
+        # slight detour
+        # can see all hosts under a group, even if it has subgroups
+        # this URL is NOT postable
+        all_hosts = reverse('main:group_all_hosts_list',
+                            args=(Group.objects.get(name='web2').pk,))
+        self.assertEqual(Group.objects.get(name='web2').hosts.count(), 3)
+        data = self.get(all_hosts, expect=200, auth=self.get_normal_credentials())
+        self.post(all_hosts, data=dict(id=123456, msg='spam'), expect=405, auth=self.get_normal_credentials())
+        self.assertEquals(data['count'], 4)
+
+        # now post it back to remove it, by adding the disassociate bit
+        result = checked['results'][0]
+        result['disassociate'] = 1
+        self.post(subgroups_url3, data=result, expect=204, auth=self.get_other_credentials())
+        checked = self.get(subgroups_url3, expect=200, auth=self.get_normal_credentials()) 
+        self.assertEqual(checked['count'], 0)
+        # try to double disassociate to see what happens (should no-op)
+        self.post(subgroups_url3, data=result, expect=204, auth=self.get_other_credentials())
+
+        #########################################################
+        # FIXME: TAGS
+
+        # the following objects can be tagged and the tags can be read
+        #    inventory
+        #    host records
+        #    group records
+        #    variable records
+        # this may just be in a seperate test file called 'tags'
+
+        #########################################################
+        # FIXME: RELATED FIELDS
+
+        #  on an inventory resource, I can see related resources for hosts and groups and permissions
+        #  and these work 
+        #  on a host resource, I can see related resources variables and inventories
+        #  and these work
+        #  on a group resource, I can see related resources for variables, inventories, and children
+        #  and these work
+                
+    def test_group_parents_and_children(self):
+        # Test for various levels of group parent/child relations, with hosts,
+        # to verify that helper properties return the correct querysets.
+
+        # Group A is parent of B, B is parent of C, C is parent of D. Group E
+        # is part of the inventory, but outside of the ABCD tree.
+        g_a = self.inventory_a.groups.create(name='A')
+        g_b = self.inventory_a.groups.create(name='B')
+        g_b.parents.add(g_a)
+        g_c = self.inventory_a.groups.create(name='C')
+        g_c.parents.add(g_b)
+        g_d = self.inventory_a.groups.create(name='D')
+        g_d.parents.add(g_c)
+        g_e = self.inventory_a.groups.create(name='E')
+        # Each group "X" contains one host "x".
+        h_a = self.inventory_a.hosts.create(name='a')
+        h_a.groups.add(g_a)
+        h_b = self.inventory_a.hosts.create(name='b')
+        h_b.groups.add(g_b)
+        h_c = self.inventory_a.hosts.create(name='c')
+        h_c.groups.add(g_c)
+        h_d = self.inventory_a.hosts.create(name='d')
+        h_d.groups.add(g_d)
+        h_e = self.inventory_a.hosts.create(name='e')
+        h_e.groups.add(g_e)
+        # Test all_children property on groups.
+        self.assertEqual(set(g_a.all_children.values_list('pk', flat=True)),
+                         set([g_b.pk, g_c.pk, g_d.pk]))
+        self.assertEqual(set(g_b.all_children.values_list('pk', flat=True)),
+                         set([g_c.pk, g_d.pk]))
+        self.assertEqual(set(g_c.all_children.values_list('pk', flat=True)),
+                         set([g_d.pk]))
+        self.assertEqual(set(g_d.all_children.values_list('pk', flat=True)),
+                         set([]))
+        self.assertEqual(set(g_e.all_children.values_list('pk', flat=True)),
+                         set([]))
+        # Test all_parents property on groups.
+        self.assertEqual(set(g_a.all_parents.values_list('pk', flat=True)),
+                         set([]))
+        self.assertEqual(set(g_b.all_parents.values_list('pk', flat=True)),
+                         set([g_a.pk]))
+        self.assertEqual(set(g_c.all_parents.values_list('pk', flat=True)),
+                         set([g_a.pk, g_b.pk]))
+        self.assertEqual(set(g_d.all_parents.values_list('pk', flat=True)),
+                         set([g_a.pk, g_b.pk, g_c.pk]))
+        self.assertEqual(set(g_e.all_parents.values_list('pk', flat=True)),
+                         set([]))
+        # Test all_hosts property on groups.
+        self.assertEqual(set(g_a.all_hosts.values_list('pk', flat=True)),
+                         set([h_a.pk, h_b.pk, h_c.pk, h_d.pk]))
+        self.assertEqual(set(g_b.all_hosts.values_list('pk', flat=True)),
+                         set([h_b.pk, h_c.pk, h_d.pk]))
+        self.assertEqual(set(g_c.all_hosts.values_list('pk', flat=True)),
+                         set([h_c.pk, h_d.pk]))
+        self.assertEqual(set(g_d.all_hosts.values_list('pk', flat=True)),
+                         set([h_d.pk]))
+        self.assertEqual(set(g_e.all_hosts.values_list('pk', flat=True)),
+                         set([h_e.pk]))
+        # Test all_groups property on hosts.
+        self.assertEqual(set(h_a.all_groups.values_list('pk', flat=True)),
+                         set([g_a.pk]))
+        self.assertEqual(set(h_b.all_groups.values_list('pk', flat=True)),
+                         set([g_a.pk, g_b.pk]))
+        self.assertEqual(set(h_c.all_groups.values_list('pk', flat=True)),
+                         set([g_a.pk, g_b.pk, g_c.pk]))
+        self.assertEqual(set(h_d.all_groups.values_list('pk', flat=True)),
+                         set([g_a.pk, g_b.pk, g_c.pk, g_d.pk]))
+        self.assertEqual(set(h_e.all_groups.values_list('pk', flat=True)),
+                         set([g_e.pk]))
+        # Now create a circular relationship from D back to A.
+        g_a.parents.add(g_d)
+        # All groups "ABCD" should be parents of each other, and children of
+        # each other, and contain all hosts "abcd".
+        for g in [g_a, g_b, g_c, g_d]:
+            self.assertEqual(set(g.all_children.values_list('pk', flat=True)),
+                             set([g_a.pk, g_b.pk, g_c.pk, g_d.pk]))
+            self.assertEqual(set(g.all_parents.values_list('pk', flat=True)),
+                             set([g_a.pk, g_b.pk, g_c.pk, g_d.pk]))
+            self.assertEqual(set(g.all_hosts.values_list('pk', flat=True)),
+                             set([h_a.pk, h_b.pk, h_c.pk, h_d.pk]))
+        # All hosts "abcd" should be members of all groups "ABCD".
+        for h in [h_a, h_b, h_c, h_d]:
+            self.assertEqual(set(h.all_groups.values_list('pk', flat=True)),
+                             set([g_a.pk, g_b.pk, g_c.pk, g_d.pk]))
+        # Group E and host e should not be affected.
+        self.assertEqual(set(g_e.all_children.values_list('pk', flat=True)),
+                         set([]))
+        self.assertEqual(set(g_e.all_parents.values_list('pk', flat=True)),
+                         set([]))
+        self.assertEqual(set(g_e.all_hosts.values_list('pk', flat=True)),
+                         set([h_e.pk]))
+        self.assertEqual(set(h_e.all_groups.values_list('pk', flat=True)),
+                         set([g_e.pk]))

awx/main/tests/jobs.py

@@ -0,0 +1,967 @@
+# Copyright (c) 2013 AnsibleWorks, Inc.
+# All Rights Reserved.
+
+import datetime
+import json
+from django.contrib.auth.models import User as DjangoUser
+from django.core.urlresolvers import reverse
+from django.db import transaction
+import django.test
+from django.test.client import Client
+from django.test.utils import override_settings
+from awx.main.models import *
+from awx.main.tests.base import BaseTestMixin
+
+__all__ = ['JobTemplateTest', 'JobTest', 'JobStartCancelTest']
+
+TEST_PLAYBOOK = '''- hosts: all
+  gather_facts: false
+  tasks:
+  - name: woohoo
+    command: test 1 = 1
+'''
+
+class BaseJobTestMixin(BaseTestMixin):
+    ''''''
+
+    def _create_inventory(self, name, organization, created_by,
+                          groups_hosts_dict):
+        '''Helper method for creating inventory with groups and hosts.'''
+        inventory = organization.inventories.create(
+            name=name,
+            created_by=created_by,
+        )
+        for group_name, host_names in groups_hosts_dict.items():
+            group = inventory.groups.create(
+                name=group_name,
+                created_by=created_by,
+            )
+            for host_name in host_names:
+                host = inventory.hosts.create(
+                    name=host_name,
+                    created_by=created_by,
+                )
+                group.hosts.add(host)
+        return inventory
+
+    def populate(self):
+        # Here's a little story about the Ansible Bread Company, or ABC.  They
+        # make machines that make bread - bakers, slicers, and packagers - and
+        # these machines are each controlled by a Linux boxes, which is in turn
+        # managed by Ansible Commander.
+
+        # Sue is the super user.  You don't mess with Sue or you're toast. Ha.
+        self.user_sue = self.make_user('sue', super_user=True)
+
+        # There are three organizations in ABC using Ansible, since it's the
+        # best thing for dev ops automation since, well, sliced bread.
+
+        # Engineering - They design and build the machines.
+        self.org_eng = Organization.objects.create(
+            name='engineering',
+            created_by=self.user_sue,
+        )
+        # Support - They fix it when it's not working.
+        self.org_sup = Organization.objects.create(
+            name='support',
+            created_by=self.user_sue,
+        )
+        # Operations - They implement the production lines using the machines.
+        self.org_ops = Organization.objects.create(
+            name='operations',
+            created_by=self.user_sue,
+        )
+
+        # Alex is Sue's IT assistant who can also administer all of the
+        # organizations.
+        self.user_alex = self.make_user('alex')
+        self.org_eng.admins.add(self.user_alex)
+        self.org_sup.admins.add(self.user_alex)
+        self.org_ops.admins.add(self.user_alex)
+
+        # Bob is the head of engineering.  He's an admin for engineering, but
+        # also a user within the operations organization (so he can see the
+        # results if things go wrong in production).
+        self.user_bob = self.make_user('bob')
+        self.org_eng.admins.add(self.user_bob)
+        self.org_ops.users.add(self.user_bob)
+
+        # Chuck is the lead engineer.  He has full reign over engineering, but
+        # no other organizations.
+        self.user_chuck = self.make_user('chuck')
+        self.org_eng.admins.add(self.user_chuck)
+
+        # Doug is the other engineer working under Chuck.  He can write
+        # playbooks and check them, but Chuck doesn't quite think he's ready to
+        # run them yet.  Poor Doug.
+        self.user_doug = self.make_user('doug')
+        self.org_eng.users.add(self.user_doug)
+
+        # Eve is the head of support.  She can also see what goes on in
+        # operations to help them troubleshoot problems.
+        self.user_eve = self.make_user('eve')
+        self.org_sup.admins.add(self.user_eve)
+        self.org_ops.users.add(self.user_eve)
+
+        # Frank is the other support guy.
+        self.user_frank = self.make_user('frank')
+        self.org_sup.users.add(self.user_frank)
+
+        # Greg is the head of operations.
+        self.user_greg = self.make_user('greg')
+        self.org_ops.admins.add(self.user_greg)
+
+        # Holly is an operations engineer.
+        self.user_holly = self.make_user('holly')
+        self.org_ops.users.add(self.user_holly)
+
+        # Iris is another operations engineer.
+        self.user_iris = self.make_user('iris')
+        self.org_ops.users.add(self.user_iris)
+        
+        # Jim is the intern. He can login, but can't do anything quite yet
+        # except make everyone else fresh coffee.
+        self.user_jim = self.make_user('jim')
+
+        # There are three main projects, one each for the development, test and
+        # production branches of the playbook repository.  All three orgs can
+        # use the production branch, support can use the production and testing
+        # branches, and operations can only use the production branch.
+        self.proj_dev = self.make_project('dev', 'development branch',
+                                          self.user_sue, TEST_PLAYBOOK)
+        self.org_eng.projects.add(self.proj_dev)
+        self.proj_test = self.make_project('test', 'testing branch',
+                                           self.user_sue, TEST_PLAYBOOK)
+        self.org_eng.projects.add(self.proj_test)
+        self.org_sup.projects.add(self.proj_test)
+        self.proj_prod = self.make_project('prod', 'production branch',
+                                           self.user_sue, TEST_PLAYBOOK)
+        self.org_eng.projects.add(self.proj_prod)
+        self.org_sup.projects.add(self.proj_prod)
+        self.org_ops.projects.add(self.proj_prod)
+
+        # Operations also has 2 additional projects specific to the east/west
+        # production environments.
+        self.proj_prod_east = self.make_project('prod-east',
+                                                'east production branch',
+                                                self.user_sue, TEST_PLAYBOOK)
+        self.org_ops.projects.add(self.proj_prod_east)
+        self.proj_prod_west = self.make_project('prod-west',
+                                                'west production branch',
+                                                self.user_sue, TEST_PLAYBOOK)
+        self.org_ops.projects.add(self.proj_prod_west)
+
+        # The engineering organization has a set of servers to use for
+        # development and testing (2 bakers, 1 slicer, 1 packager).
+        self.inv_eng = self._create_inventory(
+            name='engineering environment',
+            organization=self.org_eng,
+            created_by=self.user_sue,
+            groups_hosts_dict={
+                'bakers': ['eng-baker1', 'eng-baker2'],
+                'slicers': ['eng-slicer1'],
+                'packagers': ['eng-packager1'],
+            },
+        )
+
+        # The support organization has a set of servers to use for
+        # testing and reproducing problems from operations (1 baker, 1 slicer,
+        # 1 packager).
+        self.inv_sup = self._create_inventory(
+            name='support environment',
+            organization=self.org_sup,
+            created_by=self.user_sue,
+            groups_hosts_dict={
+                'bakers': ['sup-baker1'],
+                'slicers': ['sup-slicer1'],
+                'packagers': ['sup-packager1'],
+            },
+        )
+
+        # The operations organization manages multiple sets of servers for the
+        # east and west production facilities.
+        self.inv_ops_east = self._create_inventory(
+            name='east production environment',
+            organization=self.org_ops,
+            created_by=self.user_sue,
+            groups_hosts_dict={
+                'bakers': ['east-baker%d' % n for n in range(1, 4)],
+                'slicers': ['east-slicer%d' % n for n in range(1, 3)],
+                'packagers': ['east-packager%d' % n for n in range(1, 3)],
+            },
+        )
+        self.inv_ops_west = self._create_inventory(
+            name='west production environment',
+            organization=self.org_ops,
+            created_by=self.user_sue,
+            groups_hosts_dict={
+                'bakers': ['west-baker%d' % n for n in range(1, 6)],
+                'slicers': ['west-slicer%d' % n for n in range(1, 4)],
+                'packagers': ['west-packager%d' % n for n in range(1, 3)],
+            },
+        )
+
+        # Operations is divided into teams to work on the east/west servers.
+        # Greg and Holly work on east, Greg and iris work on west.
+        self.team_ops_east = self.org_ops.teams.create(
+             name='easterners',
+             created_by=self.user_sue,
+        )
+        self.team_ops_east.projects.add(self.proj_prod)
+        self.team_ops_east.projects.add(self.proj_prod_east)
+        self.team_ops_east.users.add(self.user_greg)
+        self.team_ops_east.users.add(self.user_holly)
+        self.team_ops_west = self.org_ops.teams.create(
+             name='westerners',
+             created_by=self.user_sue,
+        )
+        self.team_ops_west.projects.add(self.proj_prod)
+        self.team_ops_west.projects.add(self.proj_prod_west)
+        self.team_ops_west.users.add(self.user_greg)
+        self.team_ops_west.users.add(self.user_iris)
+
+        # Each user has his/her own set of credentials.
+        from awx.main.tests.tasks import (TEST_SSH_KEY_DATA,
+                                          TEST_SSH_KEY_DATA_LOCKED,
+                                          TEST_SSH_KEY_DATA_UNLOCK)
+        self.cred_bob = self.user_bob.credentials.create(
+            ssh_username='bob',
+            ssh_password='ASK',
+            created_by=self.user_sue,
+        )
+        self.cred_chuck = self.user_chuck.credentials.create(
+            ssh_username='chuck',
+            ssh_key_data=TEST_SSH_KEY_DATA,
+            created_by=self.user_sue,
+        )
+        self.cred_doug = self.user_doug.credentials.create(
+            ssh_username='doug',
+            ssh_password='doug doesn\'t mind his password being saved. this '
+                         'is why we dont\'t let doug actually run jobs.',
+            created_by=self.user_sue,
+        )
+        self.cred_eve = self.user_eve.credentials.create(
+            ssh_username='eve',
+            ssh_password='ASK',
+            sudo_username='root',
+            sudo_password='ASK',
+            created_by=self.user_sue,
+        )
+        self.cred_frank = self.user_frank.credentials.create(
+            ssh_username='frank',
+            ssh_password='fr@nk the t@nk',
+            created_by=self.user_sue,
+        )
+        self.cred_greg = self.user_greg.credentials.create(
+            ssh_username='greg',
+            ssh_key_data=TEST_SSH_KEY_DATA_LOCKED,
+            ssh_key_unlock='ASK',
+            created_by=self.user_sue,
+        )
+        self.cred_holly = self.user_holly.credentials.create(
+            ssh_username='holly',
+            ssh_password='holly rocks',
+            created_by=self.user_sue,
+        )
+        self.cred_iris = self.user_iris.credentials.create(
+            ssh_username='iris',
+            ssh_password='ASK',
+            created_by=self.user_sue,
+        )
+
+        # Each operations team also has shared credentials they can use.
+        self.cred_ops_east = self.team_ops_east.credentials.create(
+            ssh_username='east',
+            ssh_key_data=TEST_SSH_KEY_DATA_LOCKED,
+            ssh_key_unlock=TEST_SSH_KEY_DATA_UNLOCK,
+            created_by = self.user_sue,
+        )
+        self.cred_ops_west = self.team_ops_west.credentials.create(
+            ssh_username='west',
+            ssh_password='Heading270',
+            created_by = self.user_sue,
+        )
+
+        # FIXME: Define explicit permissions for tests.
+        # other django user is on the project team and can deploy
+        #self.permission1 = Permission.objects.create(
+        #    inventory       = self.inventory,
+        #    project         = self.project,
+        #    team            = self.team, 
+        #    permission_type = PERM_INVENTORY_DEPLOY,
+        #    created_by      = self.normal_django_user
+        #)
+        # individual permission granted to other2 user, can run check mode
+        #self.permission2 = Permission.objects.create(
+        #    inventory       = self.inventory,
+        #    project         = self.project,
+        #    user            = self.other2_django_user,
+        #    permission_type = PERM_INVENTORY_CHECK,
+        #    created_by      = self.normal_django_user
+        #)
+ 
+        # Engineering has job templates to check/run the dev project onto
+        # their own inventory.
+        self.jt_eng_check = JobTemplate.objects.create(
+            name='eng-dev-check',
+            job_type='check',
+            inventory= self.inv_eng,
+            project=self.proj_dev,
+            playbook=self.proj_dev.playbooks[0],
+            created_by=self.user_sue,
+        )
+        self.job_eng_check = self.jt_eng_check.create_job(
+            created_by=self.user_sue,
+            credential=self.cred_doug,
+        )
+        self.jt_eng_run = JobTemplate.objects.create(
+            name='eng-dev-run',
+            job_type='run',
+            inventory= self.inv_eng,
+            project=self.proj_dev,
+            playbook=self.proj_dev.playbooks[0],
+            created_by=self.user_sue,
+        )
+        self.job_eng_run = self.jt_eng_run.create_job(
+            created_by=self.user_sue,
+            credential=self.cred_chuck,
+        )
+
+        # Support has job templates to check/run the test project onto
+        # their own inventory.
+        self.jt_sup_check = JobTemplate.objects.create(
+            name='sup-test-check',
+            job_type='check',
+            inventory= self.inv_sup,
+            project=self.proj_test,
+            playbook=self.proj_test.playbooks[0],
+            created_by=self.user_sue,
+        )
+        self.job_sup_check = self.jt_sup_check.create_job(
+            created_by=self.user_sue,
+            credential=self.cred_frank,
+        )
+        self.jt_sup_run = JobTemplate.objects.create(
+            name='sup-test-run',
+            job_type='run',
+            inventory= self.inv_sup,
+            project=self.proj_test,
+            playbook=self.proj_test.playbooks[0],
+            created_by=self.user_sue,
+        )
+        self.job_sup_run = self.jt_sup_run.create_job(
+            created_by=self.user_sue,
+            credential=self.cred_eve,
+        )
+
+        # Operations has job templates to check/run the prod project onto
+        # both east and west inventories, by default using the team credential.
+        self.jt_ops_east_check = JobTemplate.objects.create(
+            name='ops-east-prod-check',
+            job_type='check',
+            inventory= self.inv_ops_east,
+            project=self.proj_prod,
+            playbook=self.proj_prod.playbooks[0],
+            credential=self.cred_ops_east,
+            created_by=self.user_sue,
+        )
+        self.job_ops_east_check = self.jt_ops_east_check.create_job(
+            created_by=self.user_sue,
+        )
+        self.jt_ops_east_run = JobTemplate.objects.create(
+            name='ops-east-prod-run',
+            job_type='run',
+            inventory= self.inv_ops_east,
+            project=self.proj_prod,
+            playbook=self.proj_prod.playbooks[0],
+            credential=self.cred_ops_east,
+            created_by=self.user_sue,
+        )
+        self.job_ops_east_run = self.jt_ops_east_run.create_job(
+            created_by=self.user_sue,
+        )
+        self.jt_ops_west_check = JobTemplate.objects.create(
+            name='ops-west-prod-check',
+            job_type='check',
+            inventory= self.inv_ops_west,
+            project=self.proj_prod,
+            playbook=self.proj_prod.playbooks[0],
+            credential=self.cred_ops_west,
+            created_by=self.user_sue,
+        )
+        self.job_ops_west_check = self.jt_ops_west_check.create_job(
+            created_by=self.user_sue,
+        )
+        self.jt_ops_west_run = JobTemplate.objects.create(
+            name='ops-west-prod-run',
+            job_type='run',
+            inventory= self.inv_ops_west,
+            project=self.proj_prod,
+            playbook=self.proj_prod.playbooks[0],
+            credential=self.cred_ops_west,
+            created_by=self.user_sue,
+        )
+        self.job_ops_west_run = self.jt_ops_west_run.create_job(
+            created_by=self.user_sue,
+        )
+
+    def setUp(self):
+        super(BaseJobTestMixin, self).setUp()
+        self.populate()
+
+    def _test_invalid_creds(self, url, data=None, methods=None):
+        data = data or {}
+        methods = methods or ('options', 'head', 'get')
+        for auth in [(None,), ('invalid', 'password')]:
+            with self.current_user(*auth):
+                for method in methods:
+                    f = getattr(self, method)
+                    if method in ('post', 'put', 'patch'):
+                        f(url, data, expect=401)
+                    else:
+                        f(url, expect=401)
+
+class JobTemplateTest(BaseJobTestMixin, django.test.TestCase):
+
+    def test_get_job_template_list(self):
+        url = reverse('main:job_template_list')
+
+        # Test with no auth and with invalid login.
+        self._test_invalid_creds(url)
+
+        # sue's credentials (superuser) == 200, full list
+        with self.current_user(self.user_sue):
+            self.options(url)
+            self.head(url)
+            response = self.get(url)
+        qs = JobTemplate.objects.all()
+        self.check_pagination_and_size(response, qs.count())
+        self.check_list_ids(response, qs)
+
+        # FIXME: Check individual job template result fields.
+
+        # alex's credentials (admin of all orgs) == 200, full list
+        with self.current_user(self.user_alex):
+            self.options(url)
+            self.head(url)
+            response = self.get(url)
+        qs = JobTemplate.objects.all()
+        self.check_pagination_and_size(response, qs.count())
+        self.check_list_ids(response, qs)
+
+        # bob's credentials (admin of eng, user of ops) == 200, all from
+        # engineering and operations.
+        with self.current_user(self.user_bob):
+            self.options(url)
+            self.head(url)
+            response = self.get(url)
+        qs = JobTemplate.objects.filter(
+            inventory__organization__in=[self.org_eng, self.org_ops],
+        )
+        #self.check_pagination_and_size(response, qs.count())
+        #self.check_list_ids(response, qs)
+
+        # FIXME: Check with other credentials.
+
+    def test_post_job_template_list(self):
+        url = reverse('main:job_template_list')
+        data = dict(
+            name         = 'new job template',
+            job_type     = PERM_INVENTORY_DEPLOY,
+            inventory    = self.inv_eng.pk,
+            project      = self.proj_dev.pk,
+            playbook     = self.proj_dev.playbooks[0],
+        )
+
+        # Test with no auth and with invalid login.
+        self._test_invalid_creds(url, data, methods=('post',))
+
+        # sue can always add job templates.
+        with self.current_user(self.user_sue):
+            response = self.post(url, data, expect=201)
+            detail_url = reverse('main:job_template_detail',
+                                 args=(response['id'],))
+            self.assertEquals(response['url'], detail_url)
+
+        # Check that all fields provided were set.
+        jt = JobTemplate.objects.get(pk=response['id'])
+        self.assertEqual(jt.name, data['name'])
+        self.assertEqual(jt.job_type, data['job_type'])
+        self.assertEqual(jt.inventory.pk, data['inventory'])
+        self.assertEqual(jt.credential, None)
+        self.assertEqual(jt.project.pk, data['project'])
+        self.assertEqual(jt.playbook, data['playbook'])
+
+        # Test that all required fields are really required.
+        data['name'] = 'another new job template'
+        for field in ('name', 'job_type', 'inventory', 'project', 'playbook'):
+            with self.current_user(self.user_sue):
+                d = dict(data.items())
+                d.pop(field)
+                response = self.post(url, d, expect=400)
+                self.assertTrue(field in response,
+                                'no error for field "%s" in response' % field)
+
+        # Test invalid value for job_type.
+        with self.current_user(self.user_sue):
+            d = dict(data.items())
+            d['job_type'] = 'world domination'
+            response = self.post(url, d, expect=400)
+            self.assertTrue('job_type' in response)
+    
+        # Test playbook not in list of project playbooks.
+        with self.current_user(self.user_sue):
+            d = dict(data.items())
+            d['playbook'] = 'no_playbook_here.yml'
+            response = self.post(url, d, expect=400)
+            self.assertTrue('playbook' in response)
+
+        # FIXME: Check other credentials and optional fields.
+
+    def test_get_job_template_detail(self):
+        jt = self.jt_eng_run
+        url = reverse('main:job_template_detail', args=(jt.pk,))
+
+        # Test with no auth and with invalid login.
+        self._test_invalid_creds(url)
+
+        # sue can read the job template detail.
+        with self.current_user(self.user_sue):
+            self.options(url)
+            self.head(url)
+            response = self.get(url)
+            self.assertEqual(response['url'], url)
+
+        # FIXME: Check other credentials and optional fields.
+
+        # TODO: add more tests that show
+        # the method used to START a JobTemplate follow the exact same permissions as those to create it ...
+        # and that jobs come back nicely serialized with related resources and so on ...
+        # that we can drill all the way down and can get at host failure lists, etc ...
+
+    def test_put_job_template_detail(self):
+        jt = self.jt_eng_run
+        url = reverse('main:job_template_detail', args=(jt.pk,))
+
+        # Test with no auth and with invalid login.
+        self._test_invalid_creds(url, methods=('put',))# 'patch'))
+
+        # sue can update the job template detail.
+        with self.current_user(self.user_sue):
+            data = self.get(url)
+            data['name'] = '%s-updated' % data['name']
+            response = self.put(url, data)
+            #patch_data = dict(name='%s-changed' % data['name'])
+            #response = self.patch(url, patch_data)
+
+        # FIXME: Check other credentials and optional fields.
+
+    def test_get_job_template_job_list(self):
+        jt = self.jt_eng_run
+        url = reverse('main:job_template_jobs_list', args=(jt.pk,))
+
+        # Test with no auth and with invalid login.
+        self._test_invalid_creds(url)
+
+        # sue can read the job template job list.
+        with self.current_user(self.user_sue):
+            self.options(url)
+            self.head(url)
+            response = self.get(url)
+        qs = jt.jobs.all()
+        self.check_pagination_and_size(response, qs.count())
+        self.check_list_ids(response, qs)
+
+        # FIXME: Check other credentials and optional fields.
+
+    def test_post_job_template_job_list(self):
+        jt = self.jt_eng_run
+        url = reverse('main:job_template_jobs_list', args=(jt.pk,))
+        data = dict(
+            name='new job from template',
+            credential=self.cred_bob.pk,
+        )
+
+        # Test with no auth and with invalid login.
+        self._test_invalid_creds(url, data, methods=('post',))
+
+        # sue can create a new job from the template.
+        with self.current_user(self.user_sue):
+            response = self.post(url, data, expect=201)
+
+        # FIXME: Check other credentials and optional fields.
+
+class JobTest(BaseJobTestMixin, django.test.TestCase):
+
+    def test_get_job_list(self):
+        url = reverse('main:job_list')
+
+        # Test with no auth and with invalid login.
+        self._test_invalid_creds(url)
+
+        # sue's credentials (superuser) == 200, full list
+        with self.current_user(self.user_sue):
+            self.options(url)
+            self.head(url)
+            response = self.get(url)
+        qs = Job.objects.all()
+        self.check_pagination_and_size(response, qs.count())
+        self.check_list_ids(response, qs)
+
+        # FIXME: Check individual job result fields.
+        # FIXME: Check with other credentials.
+
+    def test_post_job_list(self):
+        url = reverse('main:job_list')
+        data = dict(
+            name='new job without template',
+            job_type=PERM_INVENTORY_DEPLOY,
+            inventory=self.inv_ops_east.pk,
+            project=self.proj_prod.pk,
+            playbook=self.proj_prod.playbooks[0],
+            credential=self.cred_ops_east.pk,
+        )
+
+        # Test with no auth and with invalid login.
+        self._test_invalid_creds(url, data, methods=('post',))
+
+        # sue can create a new job without a template.
+        with self.current_user(self.user_sue):
+            response = self.post(url, data, expect=201)
+
+        # sue can also create a job here from a template.
+        jt = self.jt_ops_east_run
+        data = dict(
+            name='new job from template',
+            job_template=jt.pk,
+        )
+        with self.current_user(self.user_sue):
+            response = self.post(url, data, expect=201)
+
+        # FIXME: Check with other credentials and optional fields.
+
+    def test_get_job_detail(self):
+        job = self.job_ops_east_run
+        url = reverse('main:job_detail', args=(job.pk,))
+
+        # Test with no auth and with invalid login.
+        self._test_invalid_creds(url)
+
+        # sue can read the job detail.
+        with self.current_user(self.user_sue):
+            self.options(url)
+            self.head(url)
+            response = self.get(url)
+            self.assertEqual(response['url'], url)
+
+        # FIXME: Check with other credentials and optional fields.
+
+    def test_put_job_detail(self):
+        job = self.job_ops_west_run
+        url = reverse('main:job_detail', args=(job.pk,))
+
+        # Test with no auth and with invalid login.
+        self._test_invalid_creds(url, methods=('put',))# 'patch'))
+
+        # sue can update the job detail only if the job is new.
+        self.assertEqual(job.status, 'new')
+        with self.current_user(self.user_sue):
+            data = self.get(url)
+            data['name'] = '%s-updated' % data['name']
+            response = self.put(url, data)
+            #patch_data = dict(name='%s-changed' % data['name'])
+            #response = self.patch(url, patch_data)
+
+        # sue cannot update the job detail if it is in any other state.
+        for status in ('pending', 'running', 'successful', 'failed', 'error',
+                       'canceled'):
+            job.status = status
+            job.save()
+            with self.current_user(self.user_sue):
+                data = self.get(url)
+                data['name'] = '%s-updated' % data['name']
+                self.put(url, data, expect=405)
+                #patch_data = dict(name='%s-changed' % data['name'])
+                #self.patch(url, patch_data, expect=405)
+
+        # FIXME: Check with other credentials and readonly fields.
+
+    def _test_mainline(self):
+        url = reverse('main:job_list')
+
+        # job templates
+        data = self.get('/api/v1/job_templates/', expect=401)
+        data = self.get('/api/v1/job_templates/', expect=200, auth=self.get_normal_credentials())
+        self.assertTrue(data['count'], 2)
+        
+        rec = dict(
+            name         = 'job-foo', 
+            credential   = self.credential.pk, 
+            inventory    = self.inventory.pk, 
+            project      = self.project.pk,
+            job_type     = PERM_INVENTORY_DEPLOY
+        )
+
+        # org admin can add job type
+        posted = self.post('/api/v1/job_templates/', rec, expect=201, auth=self.get_normal_credentials())
+        self.assertEquals(posted['url'], '/api/v1/job_templates/3/')
+
+        # other_django_user is on a team that can deploy, so can create both deploy and check type jobs
+        rec['name'] = 'job-foo2' 
+        posted = self.post('/api/v1/job_templates/', rec, expect=201, auth=self.get_other_credentials())
+        rec['name'] = 'job-foo3'
+        rec['job_type'] = PERM_INVENTORY_CHECK
+        posted = self.post('/api/v1/job_templates/', rec, expect=201, auth=self.get_other_credentials())
+
+        # other2_django_user has individual permissions to run check mode, but not deploy
+        # nobody user can't even run check mode
+        rec['name'] = 'job-foo4'
+        self.post('/api/v1/job_templates/', rec, expect=403, auth=self.get_nobody_credentials())
+        rec['credential'] = self.credential2.pk
+        posted = self.post('/api/v1/job_templates/', rec, expect=201, auth=self.get_other2_credentials())
+        rec['name'] = 'job-foo5'
+        rec['job_type'] = PERM_INVENTORY_DEPLOY
+        self.post('/api/v1/job_templates/', rec, expect=403, auth=self.get_nobody_credentials())
+        self.post('/api/v1/job_templates/', rec, expect=201, auth=self.get_other2_credentials())
+        url = posted['url']
+
+        # verify we can also get the job template record
+        got = self.get(url, expect=200, auth=self.get_other2_credentials())
+        self.failUnlessEqual(got['url'], '/api/v1/job_templates/6/')
+
+        # TODO: add more tests that show
+        # the method used to START a JobTemplate follow the exact same permissions as those to create it ...
+        # and that jobs come back nicely serialized with related resources and so on ...
+        # that we can drill all the way down and can get at host failure lists, etc ...
+
+# Need to disable transaction middleware for testing so that the callback
+# management command will be able to read the database changes made to start
+# the job.  It won't be an issue normally, because the task will be running
+# asynchronously; the start API call will update the database, queue the task,
+# then return immediately (committing the transaction) before celery has even
+# woken up to run the new task.
+MIDDLEWARE_CLASSES = filter(lambda x: not x.endswith('TransactionMiddleware'),
+                            settings.MIDDLEWARE_CLASSES)
+
+@override_settings(CELERY_ALWAYS_EAGER=True,
+                   CELERY_EAGER_PROPAGATES_EXCEPTIONS=True,
+                   ANSIBLE_TRANSPORT='local',
+                   MIDDLEWARE_CLASSES=MIDDLEWARE_CLASSES)
+class JobStartCancelTest(BaseJobTestMixin, django.test.LiveServerTestCase):
+    '''Job API tests that need to use the celery task backend.'''
+
+    def setUp(self):
+        super(JobStartCancelTest, self).setUp()
+        settings.INTERNAL_API_URL = self.live_server_url
+
+    def tearDown(self):
+        super(JobStartCancelTest, self).tearDown()
+
+    def test_job_start(self):
+        job = self.job_ops_east_run
+        url = reverse('main:job_start', args=(job.pk,))
+
+        # Test with no auth and with invalid login.
+        self._test_invalid_creds(url)
+        self._test_invalid_creds(url, methods=('post',))
+
+        # Sue can start a job (when passwords are already saved) as long as the
+        # status is new.  Reverse list so "new" will be last.
+        for status in reversed([x[0] for x in Job.STATUS_CHOICES]):
+            job.status = status
+            job.save()
+            with self.current_user(self.user_sue):
+                response = self.get(url)
+                if status == 'new':
+                    self.assertTrue(response['can_start'])
+                    self.assertFalse(response['passwords_needed_to_start'])
+                    response = self.post(url, {}, expect=202)
+                    job = Job.objects.get(pk=job.pk)
+                    self.assertEqual(job.status, 'successful',
+                                     job.result_stdout)
+                else:
+                    self.assertFalse(response['can_start'])
+                    response = self.post(url, {}, expect=405)
+
+        # Test with a job that prompts for SSH and sudo passwords.
+        job = self.job_sup_run
+        url = reverse('main:job_start', args=(job.pk,))
+        with self.current_user(self.user_sue):
+            response = self.get(url)
+            self.assertTrue(response['can_start'])
+            self.assertEqual(set(response['passwords_needed_to_start']),
+                             set(['ssh_password', 'sudo_password']))
+            data = dict()
+            response = self.post(url, data, expect=400)
+            data['ssh_password'] = 'sshpass'
+            response = self.post(url, data, expect=400)
+            data2 = dict(sudo_password='sudopass')
+            response = self.post(url, data2, expect=400)
+            data.update(data2)
+            response = self.post(url, data, expect=202)
+            job = Job.objects.get(pk=job.pk)
+            # FIXME: Test run gets the following error in this case:
+            #   fatal: [hostname] => sudo output closed while waiting for password prompt:
+            #self.assertEqual(job.status, 'successful')
+
+        # Test with a job that prompts for SSH unlock key, given the wrong key.
+        job = self.jt_ops_west_run.create_job(
+            credential=self.cred_greg,
+            created_by=self.user_sue,
+        )
+        url = reverse('main:job_start', args=(job.pk,))
+        with self.current_user(self.user_sue):
+            response = self.get(url)
+            self.assertTrue(response['can_start'])
+            self.assertEqual(set(response['passwords_needed_to_start']),
+                             set(['ssh_key_unlock']))
+            data = dict()
+            response = self.post(url, data, expect=400)
+            # The job should start but fail.
+            data['ssh_key_unlock'] = 'sshunlock'
+            response = self.post(url, data, expect=202)
+            job = Job.objects.get(pk=job.pk)
+            self.assertEqual(job.status, 'failed')
+
+        # Test with a job that prompts for SSH unlock key, given the right key.
+        from awx.main.tests.tasks import TEST_SSH_KEY_DATA_UNLOCK
+        job = self.jt_ops_west_run.create_job(
+            credential=self.cred_greg,
+            created_by=self.user_sue,
+        )
+        url = reverse('main:job_start', args=(job.pk,))
+        with self.current_user(self.user_sue):
+            response = self.get(url)
+            self.assertTrue(response['can_start'])
+            self.assertEqual(set(response['passwords_needed_to_start']),
+                             set(['ssh_key_unlock']))
+            data = dict()
+            response = self.post(url, data, expect=400)
+            data['ssh_key_unlock'] = TEST_SSH_KEY_DATA_UNLOCK
+            response = self.post(url, data, expect=202)
+            job = Job.objects.get(pk=job.pk)
+            self.assertEqual(job.status, 'successful')
+
+        # FIXME: Test with other users, test when passwords are required.
+
+    def test_job_cancel(self):
+        job = self.job_ops_east_run
+        url = reverse('main:job_cancel', args=(job.pk,))
+
+        # Test with no auth and with invalid login.
+        self._test_invalid_creds(url)
+        self._test_invalid_creds(url, methods=('post',))
+
+        # sue can cancel the job, but only when it is pending or running.
+        for status in [x[0] for x in Job.STATUS_CHOICES]:
+            job.status = status
+            job.save()
+            with self.current_user(self.user_sue):
+                response = self.get(url)
+                if status in ('pending', 'running'):
+                    self.assertTrue(response['can_cancel'])
+                    response = self.post(url, {}, expect=202)
+                else:
+                    self.assertFalse(response['can_cancel'])
+                    response = self.post(url, {}, expect=405)
+
+        # FIXME: Test with other users.
+
+    def test_get_job_results(self):
+        # Start/run a job and then access its results via the API.
+        job = self.job_ops_east_run
+        job.start()
+
+        # Check that the job detail has been updated.
+        url = reverse('main:job_detail', args=(job.pk,))
+        with self.current_user(self.user_sue):
+            response = self.get(url)
+            self.assertEqual(response['status'], 'successful')
+            self.assertTrue(response['result_stdout'])
+
+        # Test job events for completed job.
+        url = reverse('main:job_job_events_list', args=(job.pk,))
+        with self.current_user(self.user_sue):
+            response = self.get(url)
+            qs = job.job_events.all()
+            self.assertTrue(qs.count())
+            self.check_pagination_and_size(response, qs.count())
+            self.check_list_ids(response, qs)
+
+        # Test individual job event detail records.
+        host_ids = set()
+        for job_event in job.job_events.all():
+            if job_event.host:
+                host_ids.add(job_event.host.pk)
+            url = reverse('main:job_event_detail', args=(job_event.pk,))
+            with self.current_user(self.user_sue):
+                response = self.get(url)
+
+        # Also test job event list for each host.
+        for host in Host.objects.filter(pk__in=host_ids):
+            url = reverse('main:host_job_events_list', args=(host.pk,))
+            with self.current_user(self.user_sue):
+                response = self.get(url)
+                qs = host.job_events.all()
+                self.assertTrue(qs.count())
+                self.check_pagination_and_size(response, qs.count())
+                self.check_list_ids(response, qs)
+
+        # Test job event list for groups.
+        for group in self.inv_ops_east.groups.all():
+            url = reverse('main:group_job_events_list', args=(group.pk,))
+            with self.current_user(self.user_sue):
+                response = self.get(url)
+                qs = group.job_events.all()
+                self.assertTrue(qs.count())
+                self.check_pagination_and_size(response, qs.count())
+                self.check_list_ids(response, qs)
+
+        # Test global job event list.
+        url = reverse('main:job_event_list')
+        with self.current_user(self.user_sue):
+            response = self.get(url)
+            qs = JobEvent.objects.all()
+            self.assertTrue(qs.count())
+            self.check_pagination_and_size(response, qs.count())
+            self.check_list_ids(response, qs)
+
+        # Test job host summaries for completed job.
+        url = reverse('main:job_job_host_summaries_list', args=(job.pk,))
+        with self.current_user(self.user_sue):
+            response = self.get(url)
+            qs = job.job_host_summaries.all()
+            self.assertTrue(qs.count())
+            self.check_pagination_and_size(response, qs.count())
+            self.check_list_ids(response, qs)
+            # Every host referenced by a job_event should be present as a job
+            # host summary record.
+            self.assertEqual(host_ids,
+                             set(qs.values_list('host__pk', flat=True)))
+
+        # Test individual job host summary records.
+        for job_host_summary in job.job_host_summaries.all():
+            url = reverse('main:job_host_summary_detail',
+                          args=(job_host_summary.pk,))
+            with self.current_user(self.user_sue):
+                response = self.get(url)
+
+        # Test job host summaries for each host.
+        for host in Host.objects.filter(pk__in=host_ids):
+            url = reverse('main:host_job_host_summaries_list', args=(host.pk,))
+            with self.current_user(self.user_sue):
+                response = self.get(url)
+                qs = host.job_host_summaries.all()
+                self.assertTrue(qs.count())
+                self.check_pagination_and_size(response, qs.count())
+                self.check_list_ids(response, qs)
+
+        # Test job host summaries for groups.
+        for group in self.inv_ops_east.groups.all():
+            url = reverse('main:group_job_host_summaries_list', args=(group.pk,))
+            with self.current_user(self.user_sue):
+                response = self.get(url)
+                qs = group.job_host_summaries.all()
+                self.assertTrue(qs.count())
+                self.check_pagination_and_size(response, qs.count())
+                self.check_list_ids(response, qs)

awx/main/tests/organizations.py

@@ -0,0 +1,380 @@
+# Copyright (c) 2013 AnsibleWorks, Inc.
+# All Rights Reserved.
+
+import datetime
+import json
+
+from django.contrib.auth.models import User as DjangoUser
+from django.core.urlresolvers import reverse
+import django.test
+from django.test.client import Client
+from awx.main.models import *
+from awx.main.tests.base import BaseTest
+
+class OrganizationsTest(BaseTest):
+
+    def collection(self):
+        return reverse('main:organization_list')
+
+    def setUp(self):
+        super(OrganizationsTest, self).setUp()
+        self.setup_users()
+ 
+        self.organizations = self.make_organizations(self.super_django_user, 10)
+        self.projects      = self.make_projects(self.normal_django_user, 10)
+
+        # add projects to organizations in a more or less arbitrary way
+        for project in self.projects[0:2]:
+            self.organizations[0].projects.add(project)
+        for project in self.projects[3:8]:
+            self.organizations[1].projects.add(project)
+        for project in self.projects[9:10]: 
+            self.organizations[2].projects.add(project)
+        self.organizations[0].projects.add(self.projects[-1])
+        self.organizations[9].projects.add(self.projects[-2])
+
+        # get the URL for various organization records
+        self.a_detail_url  = "%s%s" % (self.collection(), self.organizations[0].pk)
+        self.b_detail_url  = "%s%s" % (self.collection(), self.organizations[1].pk)
+        self.c_detail_url  = "%s%s" % (self.collection(), self.organizations[2].pk)
+
+        # configuration:
+        #   admin_user is an admin and regular user in all organizations
+        #   other_user is all organizations
+        #   normal_user is a user in organization 0, and an admin of organization 1
+
+        for x in self.organizations:
+            # NOTE: superuser does not have to be explicitly added to admin group
+            # x.admins.add(self.super_django_user)
+            x.users.add(self.super_django_user)
+ 
+        self.organizations[0].users.add(self.normal_django_user)
+        self.organizations[1].admins.add(self.normal_django_user)
+
+    def test_get_list(self):
+        url = reverse('main:organization_list')
+
+        # no credentials == 401
+        self.options(url, expect=401)
+        self.head(url, expect=401)
+        self.get(url, expect=401)
+
+        # wrong credentials == 401
+        with self.current_user(self.get_invalid_credentials()):
+            self.options(url, expect=401)
+            self.head(url, expect=401)
+            self.get(url, expect=401)
+
+        # superuser credentials == 200, full list
+        with self.current_user(self.super_django_user):
+            self.options(url, expect=200)
+            self.head(url, expect=200)
+            response = self.get(url, expect=200)
+            self.check_pagination_and_size(response, 10, previous=None, next=None)
+            self.assertEqual(len(response['results']),
+                             Organization.objects.count())
+            for field in ['id', 'url', 'name', 'description', 'created']:
+                self.assertTrue(field in response['results'][0],
+                                'field %s not in result' % field)
+
+        # check that the related URL functionality works
+        related = response['results'][0]['related']
+        for x in ['projects', 'users', 'admins']:
+            self.assertTrue(x in related and related[x].endswith("/%s/" % x), "looking for %s in related" % x)
+
+        # normal credentials == 200, get only organizations of which user is a member
+        with self.current_user(self.normal_django_user):
+            self.options(url, expect=200)
+            self.head(url, expect=200)
+            response = self.get(url, expect=200)
+            self.check_pagination_and_size(response, 2, previous=None, next=None)
+
+        # no admin rights? get empty list
+        with self.current_user(self.other_django_user):
+            response = self.get(url, expect=200)
+            self.check_pagination_and_size(response, 0, previous=None, next=None)
+
+    def test_get_item(self):
+
+        # first get all the URLs
+        data = self.get(self.collection(), expect=200, auth=self.get_super_credentials())
+        urls = [item['url'] for item in data['results']]
+
+        # make sure super user can fetch records
+        data = self.get(urls[0], expect=200, auth=self.get_super_credentials())
+        [self.assertTrue(key in data) for key in ['name', 'description', 'url' ]]
+
+        # make sure invalid user cannot
+        data = self.get(urls[0], expect=401, auth=self.get_invalid_credentials())
+
+        # normal user should be able to get org 0 and org 1 but not org 9 (as he's not a user or admin of it)
+        data = self.get(urls[0], expect=200, auth=self.get_normal_credentials())
+        data = self.get(urls[1], expect=200, auth=self.get_normal_credentials())
+        data = self.get(urls[9], expect=403, auth=self.get_normal_credentials())
+
+        # other user isn't a user or admin of anything, and similarly can't get in
+        data = self.get(urls[0], expect=403, auth=self.get_other_credentials())
+
+    def test_get_item_subobjects_projects(self):
+
+        # first get all the orgs
+        orgs = self.get(self.collection(), expect=200, auth=self.get_super_credentials())
+        
+        # find projects attached to the first org
+        projects0_url = orgs['results'][0]['related']['projects']
+        projects1_url = orgs['results'][1]['related']['projects']
+        projects9_url = orgs['results'][9]['related']['projects']
+       
+        self.get(projects0_url, expect=401, auth=None)
+        self.get(projects0_url, expect=401, auth=self.get_invalid_credentials())
+   
+        # normal user is just a member of the first org, but can't see any projects under the org
+        projects0a = self.get(projects0_url, expect=403, auth=self.get_normal_credentials())
+
+        # however in the second org, he's an admin and should see all of them
+        projects1a = self.get(projects1_url, expect=200, auth=self.get_normal_credentials())
+        self.assertEquals(projects1a['count'], 5)
+
+        # but the non-admin cannot access the list of projects in the org.  He should use /projects/ instead!
+        projects1b = self.get(projects1_url, expect=403, auth=self.get_other_credentials())
+ 
+        # superuser should be able to read anything
+        projects9a = self.get(projects9_url, expect=200, auth=self.get_super_credentials())
+        self.assertEquals(projects9a['count'], 1)
+
+
+    def test_get_item_subobjects_users(self):
+
+        # see if we can list the users added to the organization
+        orgs = self.get(self.collection(), expect=200, auth=self.get_super_credentials())
+        org1_users_url = orgs['results'][1]['related']['users']
+        org1_users = self.get(org1_users_url, expect=200, auth=self.get_normal_credentials())
+        self.assertEquals(org1_users['count'], 1)
+        org1_users = self.get(org1_users_url, expect=200, auth=self.get_super_credentials())
+        self.assertEquals(org1_users['count'], 1)
+
+    def test_get_item_subobjects_admins(self):
+
+        # see if we can list the users added to the organization
+        orgs = self.get(self.collection(), expect=200, auth=self.get_super_credentials())
+        org1_users_url = orgs['results'][1]['related']['admins']
+        org1_users = self.get(org1_users_url, expect=200, auth=self.get_normal_credentials())
+        self.assertEquals(org1_users['count'], 1)
+        org1_users = self.get(org1_users_url, expect=200, auth=self.get_super_credentials())
+        self.assertEquals(org1_users['count'], 1)
+
+    def _test_get_item_subobjects_tags(self):
+        # FIXME: Update to support taggit!
+
+        # put some tags on the org
+        org1 = Organization.objects.get(pk=2)
+        tag1 = Tag.objects.create(name='atag')
+        tag2 = Tag.objects.create(name='btag')
+        org1.tags.add(tag1)
+        org1.tags.add(tag2)
+
+        # see if we can list the users added to the organization
+        orgs = self.get(self.collection(), expect=200, auth=self.get_super_credentials())
+        org1_tags_url = orgs['results'][1]['related']['tags']
+        org1_tags = self.get(org1_tags_url, expect=200, auth=self.get_normal_credentials())
+        self.assertEquals(org1_tags['count'], 2)
+        org1_tags = self.get(org1_tags_url, expect=200, auth=self.get_super_credentials())
+        self.assertEquals(org1_tags['count'], 2)
+        org1_tags = self.get(org1_tags_url, expect=403, auth=self.get_other_credentials())
+
+    def _test_get_item_subobjects_audit_trail(self):
+        # FIXME: Update to support whatever audit trail framework is used.
+        url = '/api/v1/organizations/2/audit_trail/'
+        self.get(url, expect=200, auth=self.get_normal_credentials())
+        # FIXME: verify that some audit trail records are auto-created on save AND post
+
+    def test_post_item(self):
+
+        new_org = dict(name='magic test org', description='8675309')
+        
+        # need to be a valid user
+        self.post(self.collection(), new_org, expect=401, auth=None)
+        self.post(self.collection(), new_org, expect=401, auth=self.get_invalid_credentials())
+        
+        # only super users can create organizations
+        self.post(self.collection(), new_org, expect=403, auth=self.get_normal_credentials())
+        self.post(self.collection(), new_org, expect=403, auth=self.get_other_credentials())
+        data1 = self.post(self.collection(), new_org, expect=201, auth=self.get_super_credentials())
+
+        # duplicate post results in 400
+        data2 = self.post(self.collection(), new_org, expect=400, auth=self.get_super_credentials())
+
+        # look at what we got back from the post, make sure we added an org
+        last_org = Organization.objects.order_by('-pk')[0]
+        self.assertTrue(data1['url'].endswith("/%d/" % last_org.pk))
+
+    def test_post_item_subobjects_projects(self):
+        
+        # first get all the orgs
+        orgs = self.get(self.collection(), expect=200, auth=self.get_super_credentials())
+        
+        # find projects attached to the first org
+        projects0_url = orgs['results'][0]['related']['projects']
+        projects1_url = orgs['results'][1]['related']['projects']
+        projects2_url = orgs['results'][2]['related']['projects']
+        
+        # get all the projects on the first org
+        projects0 = self.get(projects0_url, expect=200, auth=self.get_super_credentials())
+        a_project = projects0['results'][-1]
+
+        # attempt to add the project to the 7th org and see what happens
+        self.post(projects1_url, a_project, expect=204, auth=self.get_super_credentials())
+        projects1 = self.get(projects0_url, expect=200, auth=self.get_super_credentials())
+        self.assertEquals(projects1['count'], 3)
+
+        # make sure adding a project that does not exist, or a missing pk field, results in a 400
+        self.post(projects1_url, dict(id=99999), expect=400, auth=self.get_super_credentials())
+        self.post(projects1_url, dict(asdf=1234), expect=400, auth=self.get_super_credentials())
+
+        # test that by posting a pk + disassociate: True we can remove a relationship
+        projects1 = self.get(projects1_url, expect=200, auth=self.get_super_credentials())
+        self.assertEquals(projects1['count'], 6)
+        a_project['disassociate'] = True
+        self.post(projects1_url, a_project, expect=204, auth=self.get_super_credentials())
+        projects1 = self.get(projects1_url, expect=200, auth=self.get_super_credentials())
+        self.assertEquals(projects1['count'], 5)
+       
+        a_project = projects1['results'][-1]
+        a_project['disassociate'] = 1
+        projects1 = self.get(projects1_url, expect=200, auth=self.get_super_credentials())
+        self.post(projects1_url, a_project, expect=204, auth=self.get_normal_credentials())
+        projects1 = self.get(projects1_url, expect=200, auth=self.get_super_credentials())
+        self.assertEquals(projects1['count'], 4)
+
+        new_project_a = self.make_projects(self.normal_django_user, 1)[0]
+        new_project_b = self.make_projects(self.other_django_user, 1)[0]
+
+        # admin of org can add projects that he can read
+        self.post(projects1_url, dict(id=new_project_a.pk), expect=204, auth=self.get_normal_credentials())
+        # but not those he cannot
+        self.post(projects1_url, dict(id=new_project_b.pk), expect=403, auth=self.get_normal_credentials())
+
+        # and can't post a project he can read to an org he cannot
+        # self.post(projects2_url, dict(id=new_project_a.pk), expect=403, auth=self.get_normal_credentials())
+
+        # and can't do post a project he can read to an organization he cannot
+        self.post(projects2_url, dict(id=new_project_a.pk), expect=403, auth=self.get_normal_credentials())
+          
+
+    def test_post_item_subobjects_users(self):
+
+        url = reverse('main:organization_users_list', args=(self.organizations[1].pk,))
+        users = self.get(url, expect=200, auth=self.get_normal_credentials())
+        self.assertEqual(users['count'], 1)
+        self.post(url, dict(id=self.normal_django_user.pk), expect=204, auth=self.get_normal_credentials())
+        users = self.get(url, expect=200, auth=self.get_normal_credentials())
+        self.assertEqual(users['count'], 2)
+        self.post(url, dict(id=self.normal_django_user.pk, disassociate=True), expect=204, auth=self.get_normal_credentials())
+        users = self.get(url, expect=200, auth=self.get_normal_credentials())
+        self.assertEqual(users['count'], 1)
+
+        # post a completely new user to verify we can add users to the subcollection directly
+        new_user = dict(username='NewUser9000')
+        which_org = self.normal_django_user.admin_of_organizations.all()[0]
+        url = reverse('main:organization_users_list', args=(which_org.pk,))
+        posted = self.post(url, new_user, expect=201, auth=self.get_normal_credentials())
+
+        all_users = self.get(url, expect=200, auth=self.get_normal_credentials())
+        self.assertEqual(all_users['count'], 2)
+
+    def test_post_item_subobjects_admins(self):
+
+        url = reverse('main:organization_admins_list', args=(self.organizations[1].pk,))
+        admins = self.get(url, expect=200, auth=self.get_normal_credentials())
+        self.assertEqual(admins['count'], 1)
+        self.post(url, dict(id=self.super_django_user.pk), expect=204, auth=self.get_normal_credentials())
+        admins = self.get(url, expect=200, auth=self.get_normal_credentials())
+        self.assertEqual(admins['count'], 2)
+        self.post(url, dict(id=self.super_django_user.pk, disassociate=1), expect=204, auth=self.get_normal_credentials())
+        admins = self.get(url, expect=200, auth=self.get_normal_credentials())
+        self.assertEqual(admins['count'], 1)
+
+    def _test_post_item_subobjects_tags(self):
+        # FIXME: Update to support taggit!
+
+        tag = Tag.objects.create(name='blippy')
+        url = '/api/v1/organizations/2/tags/'
+        tags = self.get(url, expect=200, auth=self.get_normal_credentials())
+        self.assertEqual(tags['count'], 0)
+        self.post(url, dict(id=tag.pk), expect=204, auth=self.get_normal_credentials())
+        tags = self.get(url, expect=200, auth=self.get_normal_credentials())
+        self.assertEqual(tags['count'], 1)
+        self.assertEqual(tags['results'][0]['id'], tag.pk)
+        self.post(url, dict(id=tag.pk, disassociate=1), expect=204, auth=self.get_normal_credentials())
+        tags = self.get(url, expect=200, auth=self.get_normal_credentials())
+        self.assertEqual(tags['count'], 0)
+
+    def _test_post_item_subobjects_audit_trail(self):
+        # FIXME: Update to support whatever audit trail framework is used.
+        # audit trails are system things, and no user can post to them.
+        url = '/api/v1/organizations/2/audit_trail/'
+        self.post(url, dict(id=1), expect=405, auth=self.get_super_credentials())
+
+    def test_put_item(self):
+
+        # first get some urls and data to put back to them
+        urls = self.get_urls(self.collection(), auth=self.get_super_credentials())
+        data0 = self.get(urls[0], expect=200, auth=self.get_super_credentials())
+        data1 = self.get(urls[1], expect=200, auth=self.get_super_credentials())
+
+        # test that an unauthenticated user cannot do a put
+        new_data1 = data1.copy()
+        new_data1['description'] = 'updated description'
+        self.put(urls[0], new_data1, expect=401, auth=None)
+        self.put(urls[0], new_data1, expect=401, auth=self.get_invalid_credentials())
+
+        # user normal is an admin of org 0 and a member of org 1 so should be able to put only org 1        
+        self.put(urls[0], new_data1, expect=403, auth=self.get_normal_credentials())
+        put_result = self.put(urls[1], new_data1, expect=200, auth=self.get_normal_credentials())
+
+        # get back org 1 and see if it changed
+        get_result = self.get(urls[1], expect=200, auth=self.get_normal_credentials())
+        self.assertEquals(get_result['description'], 'updated description')
+
+        # super user can also put even though they aren't added to the org users or admins list
+        self.put(urls[1], new_data1, expect=200, auth=self.get_super_credentials())
+
+        # make sure posting to this URL is not supported
+        self.post(urls[1], new_data1, expect=405, auth=self.get_super_credentials())
+
+    def test_put_item_subobjects_projects(self):
+
+        # any attempt to put a subobject should be a 405, edit the actual resource or POST with 'disassociate' to delete
+        # this is against a collection URL anyway, so we really need not repeat this test for other object types
+        # as a PUT against a collection doesn't make much sense.  
+ 
+        orgs = self.get(self.collection(), expect=200, auth=self.get_super_credentials())
+        projects0_url = orgs['results'][0]['related']['projects']
+        sub_projects = self.get(projects0_url, expect=200, auth=self.get_super_credentials())
+        self.assertEquals(sub_projects['count'], 3)
+        first_sub_project = sub_projects['results'][0]
+        self.put(projects0_url, first_sub_project, expect=405, auth=self.get_super_credentials())
+
+    def test_delete_item(self):
+
+        # first get some urls
+        urls = self.get_urls(self.collection(), auth=self.get_super_credentials())
+        urldata1 = self.get(urls[1], auth=self.get_super_credentials())
+        
+        # check authentication -- admins of the org and superusers can delete objects only
+        self.delete(urls[0], expect=401, auth=None)
+        self.delete(urls[0], expect=401, auth=self.get_invalid_credentials())
+        self.delete(urls[8], expect=403, auth=self.get_normal_credentials())
+        self.delete(urls[1], expect=204, auth=self.get_normal_credentials())
+        self.delete(urls[0], expect=204, auth=self.get_super_credentials())
+      
+        # check that when we have deleted an object it comes back 404 via GET
+        # but that it's still in the database as inactive
+        self.get(urls[1], expect=404, auth=self.get_normal_credentials())
+        org1 = Organization.objects.get(pk=urldata1['id'])
+        self.assertEquals(org1.active, False)
+
+        # also check that DELETE on the collection doesn't work
+        self.delete(self.collection(), expect=405, auth=self.get_super_credentials())
+
+# TODO: tests for tag disassociation

awx/main/tests/projects.py

@@ -0,0 +1,542 @@
+# Copyright (c) 2013 AnsibleWorks, Inc.
+# All Rights Reserved.
+
+import datetime
+import json
+
+from django.conf import settings
+from django.contrib.auth.models import User as DjangoUser
+import django.test
+from django.test.client import Client
+from django.core.urlresolvers import reverse
+
+from awx.main.models import *
+from awx.main.tests.base import BaseTest
+
+TEST_PLAYBOOK = '''- hosts: mygroup
+  gather_facts: false
+  tasks:
+  - name: woohoo
+    command: test 1 = 1
+'''
+
+class ProjectsTest(BaseTest):
+
+    # tests for users, projects, and teams
+
+    def collection(self):
+        return reverse('main:project_list')
+
+    def setUp(self):
+        super(ProjectsTest, self).setUp()
+        self.setup_users()
+
+        self.organizations = self.make_organizations(self.super_django_user, 10)
+        self.projects      = self.make_projects(self.normal_django_user, 10, TEST_PLAYBOOK)
+
+        # add projects to organizations in a more or less arbitrary way
+        for project in self.projects[0:2]:
+            self.organizations[0].projects.add(project)
+        for project in self.projects[3:8]:
+            self.organizations[1].projects.add(project)
+        for project in self.projects[9:10]:
+            self.organizations[2].projects.add(project)
+        self.organizations[0].projects.add(self.projects[-1])
+        self.organizations[9].projects.add(self.projects[-2])
+
+        # get the URL for various organization records
+        self.a_detail_url  = "%s%s" % (self.collection(), self.organizations[0].pk)
+        self.b_detail_url  = "%s%s" % (self.collection(), self.organizations[1].pk)
+        self.c_detail_url  = "%s%s" % (self.collection(), self.organizations[2].pk)
+
+        # configuration:
+        #   admin_user is an admin and regular user in all organizations
+        #   other_user is all organizations
+        #   normal_user is a user in organization 0, and an admin of organization 1
+
+        for x in self.organizations:
+            # NOTE: superuser does not have to be explicitly added to admin group
+            # x.admins.add(self.super_django_user)
+            x.users.add(self.super_django_user)
+
+        self.organizations[0].users.add(self.normal_django_user)
+        self.organizations[1].admins.add(self.normal_django_user)
+
+        self.team1 = Team.objects.create(
+            name = 'team1', organization = self.organizations[0]
+        )
+
+        self.team2 = Team.objects.create(
+            name = 'team2', organization = self.organizations[0]
+        )
+
+        # create some teams in the first org
+        self.team1.projects.add(self.projects[0])
+        self.team2.projects.add(self.projects[1])
+        self.team2.projects.add(self.projects[2])
+        self.team2.projects.add(self.projects[3])
+        self.team2.projects.add(self.projects[4])
+        self.team2.projects.add(self.projects[5])
+        self.team1.save()
+        self.team2.save()
+        self.team1.users.add(self.normal_django_user)
+        self.team2.users.add(self.other_django_user)
+
+        self.nobody_django_user = User.objects.create(username='nobody')
+        self.nobody_django_user.set_password('nobody')
+        self.nobody_django_user.save()
+
+    def get_nobody_credentials(self):
+        # here is a user without any permissions...
+        return ('nobody', 'nobody')
+
+    def test_playbooks(self):
+        def write_test_file(project, name, content):
+            full_path = os.path.join(project.get_project_path(), name)
+            if not os.path.exists(os.path.dirname(full_path)):
+                os.makedirs(os.path.dirname(full_path))
+            f = file(full_path, 'wb')
+            f.write(content)
+            f.close()
+        # Invalid local_path
+        project = self.projects[0]
+        project.local_path = 'path_does_not_exist'
+        project.save()
+        self.assertFalse(project.get_project_path())
+        self.assertEqual(len(project.playbooks), 0)
+        # Simple playbook
+        project = self.projects[1]
+        self.assertEqual(len(project.playbooks), 1)
+        write_test_file(project, 'foo.yml', TEST_PLAYBOOK)
+        self.assertEqual(len(project.playbooks), 2)
+        # Other files
+        project = self.projects[2]
+        self.assertEqual(len(project.playbooks), 1)
+        write_test_file(project, 'foo.txt', 'not a playbook')
+        self.assertEqual(len(project.playbooks), 1)
+        # Empty playbook
+        project = self.projects[3]
+        self.assertEqual(len(project.playbooks), 1)
+        write_test_file(project, 'blah.yml', '')
+        self.assertEqual(len(project.playbooks), 1)
+        # Invalid YAML
+        project = self.projects[4]
+        self.assertEqual(len(project.playbooks), 1)
+        write_test_file(project, 'blah.yml', TEST_PLAYBOOK + '----')
+        self.assertEqual(len(project.playbooks), 1)
+        # No hosts or includes
+        project = self.projects[5]
+        self.assertEqual(len(project.playbooks), 1)
+        playbook_content = TEST_PLAYBOOK.replace('hosts', 'hoists')
+        write_test_file(project, 'blah.yml', playbook_content)
+        self.assertEqual(len(project.playbooks), 1)
+        # Playbook in roles folder
+        project = self.projects[6]
+        self.assertEqual(len(project.playbooks), 1)
+        write_test_file(project, 'roles/blah.yml', TEST_PLAYBOOK)
+        self.assertEqual(len(project.playbooks), 1)
+        # Playbook in tasks folder
+        project = self.projects[7]
+        self.assertEqual(len(project.playbooks), 1)
+        write_test_file(project, 'tasks/blah.yml', TEST_PLAYBOOK)
+        self.assertEqual(len(project.playbooks), 1)
+
+    def test_api_config(self):
+        # superuser can read all config data.
+        url = reverse('main:api_v1_config_view')
+        response = self.get(url, expect=200, auth=self.get_super_credentials())
+        self.assertTrue('project_base_dir' in response)
+        self.assertEqual(response['project_base_dir'], settings.PROJECTS_ROOT)
+        self.assertTrue('project_local_paths' in response)
+        self.assertEqual(set(response['project_local_paths']),
+                         set(Project.get_local_path_choices()))
+
+        # org admin can read config and will get project fields.
+        response = self.get(url, expect=200, auth=self.get_normal_credentials())
+        self.assertTrue('project_base_dir' in response)
+        self.assertTrue('project_local_paths' in response)
+
+        # regular user can read configuration, but won't have project fields.
+        response = self.get(url, expect=200, auth=self.get_nobody_credentials())
+        self.assertFalse('project_base_dir' in response)
+        self.assertFalse('project_local_paths' in response)
+
+        # anonymous/invalid user can't access config.
+        self.get(url, expect=401)
+        self.get(url, expect=401, auth=self.get_invalid_credentials())
+
+    def test_mainline(self):
+
+        # =====================================================================
+        # PROJECTS - LISTING
+
+        # can get projects list
+        projects = reverse('main:project_list')
+        # invalid auth
+        self.get(projects, expect=401)
+        self.get(projects, expect=401, auth=self.get_invalid_credentials())
+        # super user
+        results = self.get(projects, expect=200, auth=self.get_super_credentials())
+        self.assertEquals(results['count'], 10)
+        # org admin
+        results = self.get(projects, expect=200, auth=self.get_normal_credentials())
+        self.assertEquals(results['count'], 6)
+        # user on a team
+        results = self.get(projects, expect=200, auth=self.get_other_credentials())
+        self.assertEquals(results['count'], 5)
+        # user not on any teams
+        results = self.get(projects, expect=200, auth=self.get_nobody_credentials())
+        self.assertEquals(results['count'], 0)
+
+        # =====================================================================
+        # PROJECTS - ACCESS
+        project = reverse('main:project_detail', args=(self.projects[3].pk,))
+        self.get(project, expect=200, auth=self.get_super_credentials())
+        self.get(project, expect=200, auth=self.get_normal_credentials())
+        self.get(project, expect=403, auth=self.get_other_credentials())
+        self.get(project, expect=403, auth=self.get_nobody_credentials())
+
+        # can delete projects
+        self.delete(project, expect=204, auth=self.get_normal_credentials())
+        self.get(project, expect=404, auth=self.get_normal_credentials())
+
+        # can list playbooks for projects
+        proj_playbooks = reverse('main:project_detail_playbooks', args=(self.projects[2].pk,))
+        got = self.get(proj_playbooks, expect=200, auth=self.get_super_credentials())
+        self.assertEqual(got, self.projects[2].playbooks)
+
+        # can list member organizations for projects
+        proj_orgs = reverse('main:project_organizations_list', args=(self.projects[0].pk,))
+        # only usable as superuser
+        got = self.get(proj_orgs, expect=403, auth=self.get_normal_credentials())
+        got = self.get(proj_orgs, expect=200, auth=self.get_super_credentials())
+        self.assertEquals(got['count'], 1)
+        self.assertEquals(got['results'][0]['url'], reverse('main:organization_detail', args=(self.organizations[0].pk,)))
+        # you can't add organizations to projects here, verify that this is true (405)
+        self.post(proj_orgs, data={}, expect=405, auth=self.get_super_credentials())
+
+        # =====================================================================
+        # TEAMS
+
+        all_teams = reverse('main:team_list')
+        team1 = reverse('main:team_detail', args=(self.team1.pk,))
+
+        # can list teams
+        got = self.get(all_teams, expect=200, auth=self.get_super_credentials())
+        self.assertEquals(got['count'], 2)
+        # FIXME: for other accounts, also check filtering
+
+        # can get teams
+        got = self.get(team1, expect=200, auth=self.get_super_credentials())
+        self.assertEquals(got['url'], reverse('main:team_detail', args=(self.team1.pk,)))
+        got = self.get(team1, expect=200, auth=self.get_normal_credentials())
+        got = self.get(team1, expect=403, auth=self.get_other_credentials())
+        self.team1.users.add(User.objects.get(username='other'))
+        self.team1.save()
+        got = self.get(team1, expect=200, auth=self.get_other_credentials())
+        got = self.get(team1, expect=403, auth=self.get_nobody_credentials())
+
+        new_team  = dict(name='newTeam',  description='blarg', organization=self.organizations[0].pk)
+        new_team2 = dict(name='newTeam2', description='blarg', organization=self.organizations[0].pk)
+        new_team3 = dict(name='newTeam3', description='bad wolf', organization=self.organizations[0].pk)
+
+        # can add teams
+        posted1 = self.post(all_teams, data=new_team, expect=201, auth=self.get_super_credentials())
+        posted2 = self.post(all_teams, data=new_team, expect=400, auth=self.get_super_credentials())
+        posted3 = self.post(all_teams, data=new_team2, expect=201, auth=self.get_normal_credentials())
+        posted4 = self.post(all_teams, data=new_team2, expect=400, auth=self.get_normal_credentials())
+        posted5 = self.post(all_teams, data=new_team3, expect=403, auth=self.get_other_credentials())
+        url1 = posted1['url']
+        url3 = posted3['url']
+        url5 = posted1['url']
+
+        new_team = Team.objects.create(name='newTeam4', organization=self.organizations[1])
+        url = reverse('main:team_detail', args=(new_team.pk,))
+
+        # can delete teams
+        self.delete(url, expect=401)
+        self.delete(url, expect=403, auth=self.get_nobody_credentials())
+        self.delete(url, expect=403, auth=self.get_other_credentials())
+        self.delete(url, expect=204, auth=self.get_normal_credentials())
+        self.delete(url3, expect=204, auth=self.get_super_credentials())
+
+        # =====================================================================
+        # ORGANIZATION TEAMS
+
+        # can list organization teams (filtered by user) -- this is an org admin function
+        org_teams = reverse('main:organization_teams_list', args=(self.organizations[1].pk,))
+        data1 = self.get(org_teams, expect=401)
+        data2 = self.get(org_teams, expect=403, auth=self.get_nobody_credentials())
+        data3 = self.get(org_teams, expect=403, auth=self.get_other_credentials())
+        data4 = self.get(org_teams, expect=200, auth=self.get_normal_credentials())
+        data5 = self.get(org_teams, expect=200, auth=self.get_super_credentials())
+
+        # can add teams to organizations
+        new_team1 = dict(name='super new team A')
+        # also tests that sub posts overwrite the related field:
+        new_team2 = dict(name='super new team B', organization=34567)
+        new_team3 = dict(name='super new team C')
+
+        data1 = self.post(org_teams, new_team1, expect=401)
+        data1 = self.post(org_teams, new_team1, expect=403, auth=self.get_nobody_credentials())
+        data1 = self.post(org_teams, new_team1, expect=403, auth=self.get_other_credentials())
+        data2 = self.post(org_teams, new_team2, expect=201, auth=self.get_normal_credentials())
+        data3 = self.post(org_teams, new_team3, expect=201, auth=self.get_super_credentials())
+
+        # can remove teams from organizations
+        data2['disassociate'] = 1
+        url = data2['url']
+        deleted = self.post(org_teams, data2, expect=204, auth=self.get_normal_credentials())
+        got = self.get(url, expect=404, auth=self.get_normal_credentials())
+
+
+        # =====================================================================
+        # TEAM PROJECTS
+ 
+        team = Team.objects.filter(organization__pk=self.organizations[1].pk)[0]
+        team_projects = reverse('main:team_projects_list', args=(team.pk,))
+      
+        p1 = self.projects[0]
+        team.projects.add(p1)
+        team.save()
+ 
+        got = self.get(team_projects, expect=200, auth=self.get_super_credentials())
+
+        # FIXME: project postablility tests somewhat incomplete.
+        # add tests to show we can create new projects on the subresource and so on.
+
+        self.assertEquals(got['count'], 1)
+
+        # =====================================================================
+        # TEAMS USER MEMBERSHIP
+
+        team = Team.objects.filter(organization__pk=self.organizations[1].pk)[0]
+        team_users = reverse('main:team_users_list', args=(team.pk,))
+        for x in team.users.all():
+            team.users.remove(x)
+        team.save()
+
+        # can list uses on teams
+        self.get(team_users, expect=401)
+        self.get(team_users, expect=401, auth=self.get_invalid_credentials())
+        self.get(team_users, expect=403, auth=self.get_nobody_credentials())
+        self.get(team_users, expect=403, auth=self.get_other_credentials())
+        self.get(team_users, expect=200, auth=self.get_normal_credentials())
+        self.get(team_users, expect=200, auth=self.get_super_credentials())
+
+        # can add users to teams
+        all_users = self.get(reverse('main:user_list'), expect=200, auth=self.get_super_credentials())
+        for x in all_users['results']:
+            self.post(team_users, data=x, expect=403, auth=self.get_nobody_credentials())
+            self.post(team_users, data=x, expect=204, auth=self.get_normal_credentials())
+
+        self.assertEqual(Team.objects.get(pk=team.pk).users.count(), 4)
+
+        # can remove users from teams
+        for x in all_users['results']:
+            y = dict(id=x['id'], disassociate=1)
+            self.post(team_users, data=y, expect=403, auth=self.get_nobody_credentials())
+            self.post(team_users, data=y, expect=204, auth=self.get_normal_credentials())
+
+        self.assertEquals(Team.objects.get(pk=team.pk).users.count(), 0)
+
+        # =====================================================================
+        # USER TEAMS
+
+        # from a user, can see what teams they are on (related resource)
+        other = User.objects.get(username = 'other')
+        url = reverse('main:user_teams_list', args=(other.pk,))
+        self.get(url, expect=401)
+        self.get(url, expect=401, auth=self.get_invalid_credentials())
+        self.get(url, expect=403, auth=self.get_nobody_credentials())
+        other.organizations.add(Organization.objects.get(pk=self.organizations[1].pk))
+        other.save()
+        my_teams1 = self.get(url, expect=200, auth=self.get_normal_credentials())
+        my_teams2 = self.get(url, expect=200, auth=self.get_other_credentials())
+        self.assertEqual(my_teams1['count'], 2)
+        self.assertEqual(my_teams1, my_teams2)
+
+        # =====================================================================
+        # USER PROJECTS
+
+        url = reverse('main:user_projects_list', args=(other.pk,))
+
+        # from a user, can see what projects they can see based on team association
+        # though this resource doesn't do anything else
+        got = self.get(url, expect=200, auth=self.get_other_credentials())
+        self.assertEquals(got['count'], 5)
+        got = self.get(url, expect=403, auth=self.get_nobody_credentials())
+        got = self.get(url, expect=401, auth=self.get_invalid_credentials())
+        got = self.get(url, expect=401)
+        got = self.get(url, expect=200, auth=self.get_super_credentials())
+
+        # =====================================================================
+        # CREDENTIALS
+
+        other_creds = reverse('main:user_credentials_list', args=(other.pk,))
+        team_creds = reverse('main:team_credentials_list', args=(team.pk,))
+
+        new_credentials = dict(
+            name = 'credential',
+            project = Project.objects.order_by('pk')[0].pk,
+            default_username = 'foo',
+            ssh_key_data = 'bar',
+            ssh_key_unlock = 'baz',
+            ssh_password = 'narf',
+            sudo_password = 'troz'
+        )
+
+        # can add credentials to a user (if user or org admin or super user)
+        self.post(other_creds, data=new_credentials, expect=401)
+        self.post(other_creds, data=new_credentials, expect=401, auth=self.get_invalid_credentials())
+        self.post(other_creds, data=new_credentials, expect=201, auth=self.get_super_credentials())
+        self.post(other_creds, data=new_credentials, expect=201, auth=self.get_normal_credentials())
+        result = self.post(other_creds, data=new_credentials, expect=201, auth=self.get_other_credentials())
+        self.post(other_creds, data=new_credentials, expect=403, auth=self.get_nobody_credentials())
+        cred_user = result['id']
+
+
+        # can add credentials to a team
+        self.post(team_creds, data=new_credentials, expect=401)
+        self.post(team_creds, data=new_credentials, expect=401, auth=self.get_invalid_credentials())
+        self.post(team_creds, data=new_credentials, expect=201, auth=self.get_super_credentials())
+        result = self.post(team_creds, data=new_credentials, expect=201, auth=self.get_normal_credentials())
+        self.post(team_creds, data=new_credentials, expect=403, auth=self.get_other_credentials())
+        self.post(team_creds, data=new_credentials, expect=403, auth=self.get_nobody_credentials())
+        cred_team = result['id']
+
+        # can list credentials on a user
+        self.get(other_creds, expect=401)
+        self.get(other_creds, expect=401, auth=self.get_invalid_credentials())
+        self.get(other_creds, expect=200, auth=self.get_super_credentials())
+        self.get(other_creds, expect=200, auth=self.get_normal_credentials())
+        self.get(other_creds, expect=200, auth=self.get_other_credentials())
+        self.get(other_creds, expect=403, auth=self.get_nobody_credentials())
+
+        # can list credentials on a team
+        self.get(team_creds, expect=401)
+        self.get(team_creds, expect=401, auth=self.get_invalid_credentials())
+        self.get(team_creds, expect=200, auth=self.get_super_credentials())
+        self.get(team_creds, expect=200, auth=self.get_normal_credentials())
+        self.get(team_creds, expect=403, auth=self.get_other_credentials())
+        self.get(team_creds, expect=403, auth=self.get_nobody_credentials())
+
+        # Check /api/v1/credentials (GET)
+        url = reverse('main:credential_list')
+        with self.current_user(self.super_django_user):
+            self.options(url)
+            self.head(url)
+            response = self.get(url)
+        qs = Credential.objects.all()
+        self.check_pagination_and_size(response, qs.count())
+        self.check_list_ids(response, qs)
+
+        # POST should fail for all users.
+        with self.current_user(self.super_django_user):
+            data = dict(name='xyz', user=self.super_django_user.pk)
+            self.post(url, data, expect=405)
+    
+        # FIXME: Check list as other users.
+
+        # can edit a credential
+        cred_user = Credential.objects.get(pk=cred_user)
+        cred_team = Credential.objects.get(pk=cred_team)
+        d_cred_user = dict(id=cred_user.pk, name='x', sudo_password='blippy', user=cred_user.user.pk)
+        d_cred_user2 = dict(id=cred_user.pk, name='x', sudo_password='blippy', user=self.super_django_user.pk)
+        d_cred_team = dict(id=cred_team.pk, name='x', sudo_password='blippy', team=cred_team.team.pk)
+        edit_creds1 = reverse('main:credential_detail', args=(cred_user.pk,))
+        edit_creds2 = reverse('main:credential_detail', args=(cred_team.pk,))
+
+        self.put(edit_creds1, data=d_cred_user, expect=401)
+        self.put(edit_creds1, data=d_cred_user, expect=401, auth=self.get_invalid_credentials())
+        self.put(edit_creds1, data=d_cred_user, expect=200, auth=self.get_super_credentials())
+        self.put(edit_creds1, data=d_cred_user, expect=200, auth=self.get_normal_credentials())
+        # editing a credential to edit the user record is not legal, this is a test of the .validate
+        # method on the serializer to allow 'write once' fields
+        self.put(edit_creds1, data=d_cred_user2, expect=400, auth=self.get_normal_credentials())
+        cred_put_u = self.put(edit_creds1, data=d_cred_user, expect=200, auth=self.get_other_credentials())
+
+        self.put(edit_creds2, data=d_cred_team, expect=401)
+        self.put(edit_creds2, data=d_cred_team, expect=401, auth=self.get_invalid_credentials())
+        self.put(edit_creds2, data=d_cred_team, expect=200, auth=self.get_super_credentials())
+        cred_put_t = self.put(edit_creds2, data=d_cred_team, expect=200, auth=self.get_normal_credentials())
+        self.put(edit_creds2, data=d_cred_team, expect=403, auth=self.get_other_credentials())
+
+        cred_put_t['disassociate'] = 1
+        team_url = reverse('main:team_credentials_list', args=(cred_put_t['team'],))
+        self.post(team_url, data=cred_put_t, expect=204, auth=self.get_normal_credentials())
+
+        # can remove credentials from a user (via disassociate)
+        cred_put_u['disassociate'] = 1
+        url = cred_put_u['url']
+        user_url = reverse('main:user_credentials_list', args=(cred_put_u['user'],))
+        self.post(user_url, data=cred_put_u, expect=204, auth=self.get_normal_credentials())
+
+        # can delete a credential directly -- probably won't be used too often
+        data = self.delete(url, expect=204, auth=self.get_other_credentials())
+        data = self.delete(url, expect=404, auth=self.get_other_credentials())
+
+        # =====================================================================
+        # PERMISSIONS
+
+        user         = self.other_django_user
+        team         = Team.objects.order_by('pk')[0]
+        organization = Organization.objects.order_by('pk')[0]
+        inventory    = Inventory.objects.create(
+            name         = 'test inventory', 
+            organization = organization,
+            created_by   = self.super_django_user
+        )
+        project = Project.objects.order_by('pk')[0]
+
+        # can add permissions to a user
+
+        user_permission = dict(
+            name='user can deploy a certain project to a certain inventory', 
+            # user=user.pk, # no need to specify, this will be automatically filled in
+            inventory=inventory.pk, 
+            project=project.pk, 
+            permission_type=PERM_INVENTORY_DEPLOY
+        )
+        team_permission = dict(
+            name='team can deploy a certain project to a certain inventory',
+            # team=team.pk, # no need to specify, this will be automatically filled in
+            inventory=inventory.pk,
+            project=project.pk,
+            permission_type=PERM_INVENTORY_DEPLOY
+        )
+
+        url = reverse('main:user_permissions_list', args=(user.pk,))
+        posted = self.post(url, user_permission, expect=201, auth=self.get_super_credentials())
+        url2 = posted['url']
+        got = self.get(url2, expect=200, auth=self.get_other_credentials())
+        
+        # can add permissions on a team
+        url = reverse('main:team_permissions_list', args=(team.pk,))
+        posted = self.post(url, team_permission, expect=201, auth=self.get_super_credentials())
+        url2 = posted['url']
+        # check we can get that permission back
+        got = self.get(url2, expect=200, auth=self.get_other_credentials())
+
+        # can list permissions on a user
+        url = reverse('main:user_permissions_list', args=(user.pk,))
+        got = self.get(url, expect=200, auth=self.get_super_credentials())
+        got = self.get(url, expect=200, auth=self.get_other_credentials())
+        got = self.get(url, expect=403, auth=self.get_nobody_credentials())
+
+        # can list permissions on a team
+        url = reverse('main:team_permissions_list', args=(team.pk,))
+        got = self.get(url, expect=200, auth=self.get_super_credentials())
+        got = self.get(url, expect=200, auth=self.get_other_credentials())
+        got = self.get(url, expect=403, auth=self.get_nobody_credentials())
+
+        # can edit a permission -- reducing the permission level
+        team_permission['permission_type'] = PERM_INVENTORY_CHECK
+        self.put(url2, team_permission, expect=200, auth=self.get_super_credentials())
+        self.put(url2, team_permission, expect=403, auth=self.get_other_credentials())
+
+        # can remove permissions
+        # do need to disassociate, just delete it
+        self.delete(url2, expect=403, auth=self.get_other_credentials())
+        self.delete(url2, expect=204, auth=self.get_super_credentials())
+        self.delete(url2, expect=404, auth=self.get_other_credentials())

awx/main/tests/scripts.py

@@ -0,0 +1,271 @@
+# Copyright (c) 2013 AnsibleWorks, Inc.
+# All Rights Reserved.
+
+# Python
+import json
+import os
+import StringIO
+import subprocess
+import sys
+import tempfile
+
+# Django
+from django.conf import settings
+from django.utils.timezone import now
+
+# AWX
+from awx.main.models import *
+from awx.main.tests.base import BaseLiveServerTest
+
+__all__ = ['InventoryScriptTest']
+
+class BaseScriptTest(BaseLiveServerTest):
+    '''
+    Base class for tests that run external scripts to access the API.
+    '''
+
+    def setUp(self):
+        super(BaseScriptTest, self).setUp()
+        self._sys_path = [x for x in sys.path]
+        self._environ = dict(os.environ.items())
+        self._temp_files = []
+
+    def tearDown(self):
+        super(BaseScriptTest, self).tearDown()
+        sys.path = self._sys_path
+        for k,v in self._environ.items():
+            if os.environ.get(k, None) != v:
+                os.environ[k] = v
+        for k,v in os.environ.items():
+            if k not in self._environ.keys():
+                del os.environ[k]
+        for tf in self._temp_files:
+            if os.path.exists(tf):
+                os.remove(tf)
+
+    def run_script(self, name, *args, **options):
+        '''
+        Run an external script and capture its stdout/stderr and return code.
+        '''
+        #stdin_fileobj = options.pop('stdin_fileobj', None)
+        pargs = [name]
+        for k,v in options.items():
+            pargs.append('%s%s' % ('-' if len(k) == 1 else '--', k))
+            if not v is True:
+                pargs.append(str(v))
+        for arg in args:
+            pargs.append(str(arg))
+        proc = subprocess.Popen(pargs, stdout=subprocess.PIPE,
+                                stderr=subprocess.PIPE)
+        stdout, stderr = proc.communicate()
+        return proc.returncode, stdout, stderr
+
+class InventoryScriptTest(BaseScriptTest):
+    '''
+    Test helper to run management command as standalone script.
+    '''
+
+    def setUp(self):
+        super(InventoryScriptTest, self).setUp()
+        self.setup_users()
+        self.organizations = self.make_organizations(self.super_django_user, 2)
+        self.projects = self.make_projects(self.normal_django_user, 2)
+        self.organizations[0].projects.add(self.projects[1])
+        self.organizations[1].projects.add(self.projects[0])
+        self.inventories = []
+        self.hosts = []
+        self.groups = []
+        for n, organization in enumerate(self.organizations):
+            inventory = Inventory.objects.create(name='inventory-%d' % n,
+                                                 description='description for inventory %d' % n,
+                                                 organization=organization,
+                                                 variables=json.dumps({'n': n}) if n else '')
+            self.inventories.append(inventory)
+            hosts = []
+            for x in xrange(10):
+                if n > 0:
+                    variables = json.dumps({'ho': 'hum-%d' % x})
+                else:
+                    variables = ''
+                host = inventory.hosts.create(name='host-%02d-%02d.example.com' % (n, x),
+                                              inventory=inventory,
+                                              variables=variables)
+                if x in (3, 7):
+                    host.mark_inactive()
+                hosts.append(host)
+            self.hosts.extend(hosts)
+            groups = []
+            for x in xrange(5):
+                if n > 0:
+                    variables = json.dumps({'gee': 'whiz-%d' % x})
+                else:
+                    variables = ''
+                group = inventory.groups.create(name='group-%d' % x,
+                                                inventory=inventory,
+                                                variables=variables)
+                if x == 2:
+                    group.mark_inactive()
+                groups.append(group)
+                group.hosts.add(hosts[x])
+                group.hosts.add(hosts[x + 5])
+                if n > 0 and x == 4:
+                    group.parents.add(groups[3])
+            self.groups.extend(groups)
+
+    def run_inventory_script(self, *args, **options):
+        os.environ.setdefault('REST_API_URL', self.live_server_url)
+        os.environ.setdefault('REST_API_TOKEN',
+                              self.super_django_user.auth_token.key)
+        name = os.path.join(os.path.dirname(__file__), '..', '..', 'scripts',
+                            'inventory.py')
+        return self.run_script(name, *args, **options)
+
+    def test_without_inventory_id(self):
+        rc, stdout, stderr = self.run_inventory_script(list=True)
+        self.assertNotEqual(rc, 0, stderr)
+        self.assertEqual(json.loads(stdout), {})
+        rc, stdout, stderr = self.run_inventory_script(host=self.hosts[0].name)
+        self.assertNotEqual(rc, 0, stderr)
+        self.assertEqual(json.loads(stdout), {})
+
+    def test_list_with_inventory_id_as_argument(self):
+        inventory = self.inventories[0]
+        self.assertTrue(inventory.active)
+        rc, stdout, stderr = self.run_inventory_script(list=True,
+                                                       inventory=inventory.pk)
+        self.assertEqual(rc, 0, stderr)
+        data = json.loads(stdout)
+        groups = inventory.groups.filter(active=True)
+        groupnames = groups.values_list('name', flat=True)
+        self.assertEqual(set(data.keys()), set(groupnames))
+        # Groups for this inventory should only have hosts, and no group
+        # variable data or parent/child relationships.
+        for k,v in data.items():
+            self.assertTrue(isinstance(v, (list, tuple)))
+            group = inventory.groups.get(active=True, name=k)
+            hosts = group.hosts.filter(active=True)
+            hostnames = hosts.values_list('name', flat=True)
+            self.assertEqual(set(v), set(hostnames))
+        for group in inventory.groups.filter(active=False):
+            self.assertFalse(group.name in data.keys(),
+                             'deleted group %s should not be in data' % group)
+        # Command line argument for inventory ID should take precedence over
+        # environment variable.
+        inventory_pks = set(map(lambda x: x.pk, self.inventories))
+        invalid_id = [x for x in xrange(9999) if x not in inventory_pks][0]
+        os.environ['INVENTORY_ID'] = str(invalid_id)
+        rc, stdout, stderr = self.run_inventory_script(list=True,
+                                                       inventory=inventory.pk)
+        self.assertEqual(rc, 0, stderr)
+        data = json.loads(stdout)
+
+    def test_list_with_inventory_id_in_environment(self):
+        inventory = self.inventories[1]
+        self.assertTrue(inventory.active)
+        os.environ['INVENTORY_ID'] = str(inventory.pk)
+        rc, stdout, stderr = self.run_inventory_script(list=True)
+        self.assertEqual(rc, 0, stderr)
+        data = json.loads(stdout)
+        groups = inventory.groups.filter(active=True)
+        groupnames = list(groups.values_list('name', flat=True)) + ['all']
+        self.assertEqual(set(data.keys()), set(groupnames))
+        # Groups for this inventory should have hosts, variable data, and one
+        # parent/child relationship.
+        for k,v in data.items():
+            self.assertTrue(isinstance(v, dict))
+            if k == 'all':
+                self.assertEqual(v.get('vars', {}), inventory.variables_dict)
+                continue
+            group = inventory.groups.get(active=True, name=k)
+            hosts = group.hosts.filter(active=True)
+            hostnames = hosts.values_list('name', flat=True)
+            self.assertEqual(set(v.get('hosts', [])), set(hostnames))
+            if group.variables:
+                self.assertEqual(v.get('vars', {}), group.variables_dict)
+            if k == 'group-3':
+                children = group.children.filter(active=True)
+                childnames = children.values_list('name', flat=True)
+                self.assertEqual(set(v.get('children', [])), set(childnames))
+            else:
+                self.assertFalse('children' in v)
+
+    def test_valid_host(self):
+        # Host without variable data.
+        inventory = self.inventories[0]
+        self.assertTrue(inventory.active)
+        host = inventory.hosts.filter(active=True)[2]
+        os.environ['INVENTORY_ID'] = str(inventory.pk)
+        rc, stdout, stderr = self.run_inventory_script(host=host.name)
+        self.assertEqual(rc, 0, stderr)
+        data = json.loads(stdout)
+        self.assertEqual(data, {})
+        # Host with variable data.
+        inventory = self.inventories[1]
+        self.assertTrue(inventory.active)
+        host = inventory.hosts.filter(active=True)[4]
+        os.environ['INVENTORY_ID'] = str(inventory.pk)
+        rc, stdout, stderr = self.run_inventory_script(host=host.name)
+        self.assertEqual(rc, 0, stderr)
+        data = json.loads(stdout)
+        self.assertEqual(data, host.variables_dict)
+
+    def test_invalid_host(self):
+        # Valid host, but not part of the specified inventory.
+        inventory = self.inventories[0]
+        self.assertTrue(inventory.active)
+        host = Host.objects.exclude(inventory=inventory)[0]
+        self.assertTrue(host.active)
+        os.environ['INVENTORY_ID'] = str(inventory.pk)
+        rc, stdout, stderr = self.run_inventory_script(host=host.name)
+        self.assertNotEqual(rc, 0, stderr)
+        self.assertEqual(json.loads(stdout), {})
+        # Invalid hostname not in database.
+        rc, stdout, stderr = self.run_inventory_script(host='blah.example.com')
+        self.assertNotEqual(rc, 0, stderr)
+        self.assertEqual(json.loads(stdout), {})
+
+    def test_with_invalid_inventory_id(self):
+        inventory_pks = set(map(lambda x: x.pk, self.inventories))
+        invalid_id = [x for x in xrange(1, 9999) if x not in inventory_pks][0]
+        os.environ['INVENTORY_ID'] = str(invalid_id)
+        rc, stdout, stderr = self.run_inventory_script(list=True)
+        self.assertNotEqual(rc, 0, stderr)
+        self.assertEqual(json.loads(stdout), {})
+        os.environ['INVENTORY_ID'] = 'not_an_int'
+        rc, stdout, stderr = self.run_inventory_script(list=True)
+        self.assertNotEqual(rc, 0, stderr)
+        self.assertEqual(json.loads(stdout), {})
+        os.environ['INVENTORY_ID'] = str(invalid_id)
+        rc, stdout, stderr = self.run_inventory_script(host=self.hosts[1].name)
+        self.assertNotEqual(rc, 0, stderr)
+        self.assertEqual(json.loads(stdout), {})
+        os.environ['INVENTORY_ID'] = 'not_an_int'
+        rc, stdout, stderr = self.run_inventory_script(host=self.hosts[2].name)
+        self.assertNotEqual(rc, 0, stderr)
+        self.assertEqual(json.loads(stdout), {})
+
+    def test_with_deleted_inventory(self):
+        inventory = self.inventories[0]
+        inventory.mark_inactive()
+        self.assertFalse(inventory.active)
+        os.environ['INVENTORY_ID'] = str(inventory.pk)
+        rc, stdout, stderr = self.run_inventory_script(list=True)
+        self.assertNotEqual(rc, 0, stderr)
+        self.assertEqual(json.loads(stdout), {})
+
+    def test_without_list_or_host_argument(self):
+        inventory = self.inventories[0]
+        self.assertTrue(inventory.active)
+        os.environ['INVENTORY_ID'] = str(inventory.pk)
+        rc, stdout, stderr = self.run_inventory_script()
+        self.assertNotEqual(rc, 0, stderr)
+        self.assertEqual(json.loads(stdout), {})
+
+    def _test_with_both_list_and_host_arguments(self):
+        inventory = self.inventories[0]
+        self.assertTrue(inventory.active)
+        os.environ['INVENTORY_ID'] = str(inventory.pk)
+        rc, stdout, stderr = self.run_inventory_script(list=True, host='blah')
+        self.assertNotEqual(rc, 0, stderr)
+        self.assertEqual(json.loads(stdout), {})
+        

awx/main/tests/tasks.py

@@ -0,0 +1,543 @@
+# Copyright (c) 2013 AnsibleWorks, Inc.
+# All Rights Reserved.
+
+import os
+import shutil
+import tempfile
+from django.conf import settings
+from django.test.utils import override_settings
+from awx.main.models import *
+from awx.main.tests.base import BaseLiveServerTest
+from awx.main.tasks import RunJob
+
+TEST_PLAYBOOK = '''- hosts: test-group
+  gather_facts: False
+  tasks:
+  - name: should pass
+    command: test 1 = 1
+  - name: should also pass
+    command: test 2 = 2
+'''
+
+TEST_PLAYBOOK2 = '''- hosts: test-group
+  gather_facts: False
+  tasks:
+  - name: should fail
+    command: test 1 = 0
+'''
+
+TEST_SSH_KEY_DATA = '''-----BEGIN RSA PRIVATE KEY-----
+MIIEpQIBAAKCAQEAyQ8F5bbgjHvk4SZJsKI9OmJKMFxZqRhvx4LaqjLTKbBwRBsY
+1/C00NPiZn70dKbeyV7RNVZxuzM6yd3D3lwTdbDu/eJ0x72t3ch+TdLt/aenyy10
+IvZyhSlxCLDkDaVVPFYJOQzVS8TkdOi6ZHc+R0c0A+4ZE8OQ8C0zIKtUTHqRk4/v
+gYK5guhNS0DdgWkBj6K+r/9D4bqdPTJPt4S7H75vb1tBgseiqftEkLYOhTK2gsCi
+5uJgpG4zPQY4Kk/97dbW7pwcvPkr1rKkAwEJ27Bfo+DBv3oEx3SinpXQtOrH1aEO
+RHSXldBaymdBtVLUhjxDlnnQ7Ps+fNX04R7N4QIDAQABAoIBAQClEDxbNyRqsVxa
+q8BbzxZNVFxsD6Vceb9rIDa8/DT4SO4iO8zNm8QWnZ2FYDz5d/X3hGxlSa7dbVWa
+XQJtD1K6kKPks4IEaejP58Ypxj20vWu4Fnz+Jy4lvLwb0n2n5lBv1IKF389NATw9
+7sL3sB3lDsPZZiQYYbogNDuBWqc+kP0zD84bONsM/B2HMRm9BRv2UsZf+zKU4pTA
+UqHffyjmw7LqHmbtVjwVcUsC+xcE4kCuWLvabFnTWOSnWECyIw2+trxKdwCXbfzG
+s5rn4Dj+aEKimzFaRpTSVx6w4yw9xw/EjsSaZ88jKSpTP8ocCut6zv+P/JwlukEX
+4A4FxqyxAoGBAOp3G9EIAAWijcIgO5OdiZNEqVyqd3yyPzT6d/q7bf4dpVCZiLNA
+bRmge83aMc4g2Dpkn/++It3bDmnXXGg+BZSX5KT9JLklXchaw9phv9J0diZEUvYS
+mSQafbUGIqYnYzns3TU0cbgITs1iVIEstHYjGr3J88nDG+HFCHboxa93AoGBANuG
+cDFgyvm79+haK2fHhUCZgaFFYBpkpuz+zjDjzIytOzymWa2gD9jIa7mvdvoH2ge3
+AVG0vy+n9cJaqJMuLkhdI01wVlqY9wvDHFyZCXyIvKVPMljKeTvCNGCupsG4R171
+gSKT5ryOx58MGbE7knAZC+QWpwxFpdpbfej6g7NnAoGBAMz6ipAJbXN/tG0FnvAj
+pxXfzizcPw/+CTI40tGaMMQbiN5ZC+CiL39bBUFnQ2mQ31jVheegg3zvuL8hb4EW
+z+wjitoPEZ7nowC5EUaHdJr6BBzaWKkWg1nD6yhqj7ow7xfCE3YjPlQEt1fpYjV4
+LuClOgi4WPCIKYUMq6TBRaprAoGAVrEjs0xPPApQH5EkXQp9BALbH23/Qs0G4sbJ
+dKMxT0jGAPCMr7VrLKgRarXxXVImdy99NOAVNGO2+PbGZcEyA9/MJjO71nFb9mgp
+1iOVjHmPThUVg90JvWC3QIsYTZ5RiR2Yzqfr0gDsslGb/9LPxLcPbBbKB12l3rKM
+6amswvcCgYEAvgcSlTfAkI3ac8rB70HuDmSdqKblIiQjtPtT/ixXaFkZOmHRr4AE
+KepMRDnaO/ldPDPEWCGqPzEM0t/0jS8/hCu3zLHHpZ+0LnHq+EXkOI0/GB4P+z5l
+Vz3kouC0BTav0rCEnDop/cWMTiAp/XhKXfrTTTOra/F8l2xD8n/mnzY=
+-----END RSA PRIVATE KEY-----'''
+
+TEST_SSH_KEY_DATA_LOCKED = '''-----BEGIN RSA PRIVATE KEY-----
+Proc-Type: 4,ENCRYPTED
+DEK-Info: AES-128-CBC,6B4E92AF4C29DE26FD8535D81825BDE6
+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-----END RSA PRIVATE KEY-----
+'''
+
+TEST_SSH_KEY_DATA_UNLOCK = 'unlockme'
+
+@override_settings(CELERY_ALWAYS_EAGER=True,
+                   CELERY_EAGER_PROPAGATES_EXCEPTIONS=True)
+class BaseCeleryTest(BaseLiveServerTest):
+    '''
+    Base class for celery task tests.
+    '''
+
+@override_settings(ANSIBLE_TRANSPORT='local')
+class RunJobTest(BaseCeleryTest):
+    '''
+    Test cases for RunJob celery task.
+    '''
+
+    def setUp(self):
+        super(RunJobTest, self).setUp()
+        self.test_project_path = None
+        self.setup_users()
+        self.organization = self.make_organizations(self.super_django_user, 1)[0]
+        self.inventory = Inventory.objects.create(name='test-inventory',
+                                                  description='description for test-inventory',
+                                                  organization=self.organization)
+        self.host = self.inventory.hosts.create(name='host.example.com',
+                                                inventory=self.inventory)
+        self.group = self.inventory.groups.create(name='test-group',
+                                                  inventory=self.inventory)
+        self.group.hosts.add(self.host)
+        self.project = None
+        self.credential = None
+        # Monkeypatch RunJob to capture list of command line arguments.
+        self.original_build_args = RunJob.build_args
+        self.run_job_args = None
+        self.build_args_callback = lambda: None
+        def new_build_args(_self, job, **kw):
+            args = self.original_build_args(_self, job, **kw)
+            self.run_job_args = args
+            self.build_args_callback()
+            return args
+        RunJob.build_args = new_build_args
+        settings.INTERNAL_API_URL = self.live_server_url
+
+    def tearDown(self):
+        super(RunJobTest, self).tearDown()
+        if self.test_project_path:
+            shutil.rmtree(self.test_project_path, True)
+        RunJob.build_args = self.original_build_args
+
+    def create_test_credential(self, **kwargs):
+        opts = {
+            'name': 'test-creds',
+            'user': self.super_django_user,
+            'ssh_username': '',
+            'ssh_key_data': '',
+            'ssh_key_unlock': '',
+            'ssh_password': '',
+            'sudo_username': '',
+            'sudo_password': '',
+        }
+        opts.update(kwargs)
+        self.credential = Credential.objects.create(**opts)
+        return self.credential
+
+    def create_test_project(self, playbook_content):
+        self.project = self.make_projects(self.normal_django_user, 1, playbook_content)[0]
+        self.organization.projects.add(self.project)
+
+    def create_test_job_template(self, **kwargs):
+        opts = {
+            'name': 'test-job-template',
+            'inventory': self.inventory,
+            'project': self.project,
+            'credential': self.credential,
+        }
+        try:
+            opts['playbook'] = self.project.playbooks[0]
+        except (AttributeError, IndexError):
+            pass
+        opts.update(kwargs)
+        self.job_template = JobTemplate.objects.create(**opts)
+        return self.job_template
+
+    def create_test_job(self, **kwargs):
+        job_template = kwargs.pop('job_template', None)
+        if job_template:
+            self.job = job_template.create_job(**kwargs)
+        else:
+            opts = {
+                'name': 'test-job',
+                'inventory': self.inventory,
+                'project': self.project,
+                'credential': self.credential,
+            }
+            try:
+                opts['playbook'] = self.project.playbooks[0]
+            except (AttributeError, IndexError):
+                pass
+            opts.update(kwargs)
+            self.job = Job.objects.create(**opts)
+        return self.job
+
+    def check_job_result(self, job, expected='successful', expect_stdout=True,
+                         expect_traceback=False):
+        msg = 'job status is %s, expected %s' % (job.status, expected)
+        msg = '%s\nargs:\n%s' % (msg, job.job_args)
+        msg = '%s\nenv:\n%s' % (msg, job.job_env)
+        if job.result_traceback:
+            msg = '%s\ngot traceback:\n%s' % (msg, job.result_traceback)
+        if job.result_stdout:
+            msg = '%s\ngot stdout:\n%s' % (msg, job.result_stdout)
+        if isinstance(expected, (list, tuple)):
+            self.assertTrue(job.status in expected)
+        else:
+            self.assertEqual(job.status, expected, msg)
+        if expect_stdout:
+            self.assertTrue(job.result_stdout)
+        else:
+            self.assertFalse(job.result_stdout,
+                             'expected no stdout, got:\n%s' %
+                             job.result_stdout)
+        if expect_traceback:
+            self.assertTrue(job.result_traceback)
+        else:
+            self.assertFalse(job.result_traceback,
+                             'expected no traceback, got:\n%s' %
+                             job.result_traceback)
+
+    def test_run_job(self):
+        self.create_test_project(TEST_PLAYBOOK)
+        job_template = self.create_test_job_template()
+        job = self.create_test_job(job_template=job_template)
+        self.assertEqual(job.status, 'new')
+        self.assertFalse(job.get_passwords_needed_to_start())
+        self.assertTrue(job.start())
+        self.assertEqual(job.status, 'pending')
+        job = Job.objects.get(pk=job.pk)
+        self.check_job_result(job, 'successful')
+        job_events = job.job_events.all()
+        for job_event in job_events:
+            unicode(job_event)  # For test coverage.
+            job_event.save()
+        self.assertEqual(job_events.filter(event='playbook_on_start').count(), 1)
+        self.assertEqual(job_events.filter(event='playbook_on_play_start').count(), 1)
+        self.assertEqual(job_events.filter(event='playbook_on_task_start').count(), 2)
+        self.assertEqual(job_events.filter(event='runner_on_ok').count(), 2)
+        for evt in job_events.filter(event='runner_on_ok'):
+            self.assertEqual(evt.host, self.host)
+        self.assertEqual(job_events.filter(event='playbook_on_stats').count(), 1)
+        for job_host_summary in job.job_host_summaries.all():
+            unicode(job_host_summary)  # For test coverage.
+            self.assertFalse(job_host_summary.failed)
+            self.assertEqual(job_host_summary.host.last_job_host_summary, job_host_summary)
+        self.host = Host.objects.get(pk=self.host.pk)
+        self.assertEqual(self.host.last_job, job)
+        self.assertFalse(self.host.has_active_failures)
+        for group in self.host.all_groups:
+            self.assertFalse(group.has_active_failures)
+        self.assertFalse(self.host.inventory.has_active_failures)
+        self.assertEqual(job.successful_hosts.count(), 1)
+        self.assertEqual(job.failed_hosts.count(), 0)
+        self.assertEqual(job.changed_hosts.count(), 1)
+        self.assertEqual(job.unreachable_hosts.count(), 0)
+        self.assertEqual(job.skipped_hosts.count(), 0)
+        self.assertEqual(job.processed_hosts.count(), 1)
+
+    def test_check_job(self):
+        self.create_test_project(TEST_PLAYBOOK)
+        job_template = self.create_test_job_template()
+        job = self.create_test_job(job_template=job_template, job_type='check')
+        self.assertEqual(job.status, 'new')
+        self.assertFalse(job.get_passwords_needed_to_start())
+        self.assertTrue(job.start())
+        self.assertEqual(job.status, 'pending')
+        job = Job.objects.get(pk=job.pk)
+        self.check_job_result(job, 'successful')
+        job_events = job.job_events.all()
+        self.assertEqual(job_events.filter(event='playbook_on_start').count(), 1)
+        self.assertEqual(job_events.filter(event='playbook_on_play_start').count(), 1)
+        self.assertEqual(job_events.filter(event='playbook_on_task_start').count(), 2)
+        self.assertEqual(job_events.filter(event='runner_on_skipped').count(), 2)
+        for evt in job_events.filter(event='runner_on_skipped'):
+            self.assertEqual(evt.host, self.host)
+        self.assertEqual(job_events.filter(event='playbook_on_stats').count(), 1)
+        for job_host_summary in job.job_host_summaries.all():
+            self.assertFalse(job_host_summary.failed)
+            self.assertEqual(job_host_summary.host.last_job_host_summary, job_host_summary)
+        self.host = Host.objects.get(pk=self.host.pk)
+        self.assertEqual(self.host.last_job, job)
+        self.assertFalse(self.host.has_active_failures)
+        for group in self.host.all_groups:
+            self.assertFalse(group.has_active_failures)
+        self.assertFalse(self.host.inventory.has_active_failures)
+        self.assertEqual(job.successful_hosts.count(), 0)
+        self.assertEqual(job.failed_hosts.count(), 0)
+        self.assertEqual(job.changed_hosts.count(), 0)
+        self.assertEqual(job.unreachable_hosts.count(), 0)
+        self.assertEqual(job.skipped_hosts.count(), 1)
+        self.assertEqual(job.processed_hosts.count(), 1)
+
+    def test_run_job_that_fails(self):
+        self.create_test_project(TEST_PLAYBOOK2)
+        job_template = self.create_test_job_template()
+        job = self.create_test_job(job_template=job_template)
+        self.assertEqual(job.status, 'new')
+        self.assertFalse(job.get_passwords_needed_to_start())
+        self.assertTrue(job.start())
+        self.assertEqual(job.status, 'pending')
+        job = Job.objects.get(pk=job.pk)
+        self.check_job_result(job, 'failed')
+        job_events = job.job_events.all()
+        self.assertEqual(job_events.filter(event='playbook_on_start').count(), 1)
+        self.assertEqual(job_events.filter(event='playbook_on_play_start').count(), 1)
+        self.assertEqual(job_events.filter(event='playbook_on_task_start').count(), 1)
+        self.assertEqual(job_events.filter(event='runner_on_failed').count(), 1)
+        self.assertEqual(job_events.get(event='runner_on_failed').host, self.host)
+        self.assertEqual(job_events.filter(event='playbook_on_stats').count(), 1)
+        for job_host_summary in job.job_host_summaries.all():
+            self.assertTrue(job_host_summary.failed)
+            self.assertEqual(job_host_summary.host.last_job_host_summary, job_host_summary)
+        self.host = Host.objects.get(pk=self.host.pk)
+        self.assertEqual(self.host.last_job, job)
+        self.assertTrue(self.host.has_active_failures)
+        for group in self.host.all_groups:
+            self.assertTrue(group.has_active_failures)
+        self.assertTrue(self.host.inventory.has_active_failures)
+        self.assertEqual(job.successful_hosts.count(), 0)
+        self.assertEqual(job.failed_hosts.count(), 1)
+        self.assertEqual(job.changed_hosts.count(), 0)
+        self.assertEqual(job.unreachable_hosts.count(), 0)
+        self.assertEqual(job.skipped_hosts.count(), 0)
+        self.assertEqual(job.processed_hosts.count(), 1)
+
+    def test_check_job_where_task_would_fail(self):
+        self.create_test_project(TEST_PLAYBOOK2)
+        job_template = self.create_test_job_template()
+        job = self.create_test_job(job_template=job_template, job_type='check')
+        self.assertEqual(job.status, 'new')
+        self.assertFalse(job.get_passwords_needed_to_start())
+        self.assertTrue(job.start())
+        self.assertEqual(job.status, 'pending')
+        job = Job.objects.get(pk=job.pk)
+        # Since we don't actually run the task, the --check should indicate
+        # everything is successful.
+        self.check_job_result(job, 'successful')
+        job_events = job.job_events.all()
+        self.assertEqual(job_events.filter(event='playbook_on_start').count(), 1)
+        self.assertEqual(job_events.filter(event='playbook_on_play_start').count(), 1)
+        self.assertEqual(job_events.filter(event='playbook_on_task_start').count(), 1)
+        self.assertEqual(job_events.filter(event='runner_on_skipped').count(), 1)
+        self.assertEqual(job_events.get(event='runner_on_skipped').host, self.host)
+        self.assertEqual(job_events.filter(event='playbook_on_stats').count(), 1)
+        for job_host_summary in job.job_host_summaries.all():
+            self.assertFalse(job_host_summary.failed)
+            self.assertEqual(job_host_summary.host.last_job_host_summary, job_host_summary)
+        self.host = Host.objects.get(pk=self.host.pk)
+        self.assertEqual(self.host.last_job, job)
+        self.assertFalse(self.host.has_active_failures)
+        for group in self.host.all_groups:
+            self.assertFalse(group.has_active_failures)
+        self.assertFalse(self.host.inventory.has_active_failures)
+        self.assertEqual(job.successful_hosts.count(), 0)
+        self.assertEqual(job.failed_hosts.count(), 0)
+        self.assertEqual(job.changed_hosts.count(), 0)
+        self.assertEqual(job.unreachable_hosts.count(), 0)
+        self.assertEqual(job.skipped_hosts.count(), 1)
+        self.assertEqual(job.processed_hosts.count(), 1)
+
+    def _cancel_job_callback(self):
+        job = Job.objects.get(pk=self.job.pk)
+        self.assertTrue(job.cancel())
+        self.assertTrue(job.cancel())  # No change from calling again.
+
+    def test_cancel_job(self):
+        self.create_test_project(TEST_PLAYBOOK)
+        job_template = self.create_test_job_template()
+        # Pass save=False just for the sake of test coverage.
+        job = self.create_test_job(job_template=job_template, save=False)
+        job.save()
+        self.assertEqual(job.status, 'new')
+        self.assertEqual(job.cancel_flag, False)
+        # Calling cancel before start has no effect.
+        self.assertFalse(job.cancel())
+        self.assertEqual(job.cancel_flag, False)
+        self.assertFalse(job.get_passwords_needed_to_start())
+        self.build_args_callback = self._cancel_job_callback
+        self.assertTrue(job.start())
+        self.assertEqual(job.status, 'pending')
+        job = Job.objects.get(pk=job.pk)
+        self.check_job_result(job, 'canceled')
+        self.assertEqual(job.cancel_flag, True)
+        # Calling cancel afterwards just returns the cancel flag.
+        self.assertTrue(job.cancel())
+        # Read attribute for test coverage.
+        job.celery_task
+        job.celery_task_id = ''
+        job.save()
+        self.assertEqual(job.celery_task, None)
+        # Unable to start job again.
+        self.assertFalse(job.start())
+
+    def test_extra_job_options(self):
+        self.create_test_project(TEST_PLAYBOOK)
+        job_template = self.create_test_job_template(forks=3, verbosity=2,
+                                                     extra_vars='foo=1')
+        job = self.create_test_job(job_template=job_template)
+        self.assertEqual(job.status, 'new')
+        self.assertFalse(job.get_passwords_needed_to_start())
+        self.assertTrue(job.start())
+        self.assertEqual(job.status, 'pending')
+        job = Job.objects.get(pk=job.pk)
+        # Job may fail if current user doesn't have password-less sudo
+        # privileges, but we're mainly checking the command line arguments.
+        self.check_job_result(job, ('successful', 'failed'))
+        self.assertTrue('--forks=3' in self.run_job_args)
+        self.assertTrue('-vv' in self.run_job_args)
+        self.assertTrue('-e' in self.run_job_args)
+
+    def test_limit_option(self):
+        self.create_test_project(TEST_PLAYBOOK)
+        job_template = self.create_test_job_template(limit='bad.example.com')
+        job = self.create_test_job(job_template=job_template)
+        self.assertEqual(job.status, 'new')
+        self.assertFalse(job.get_passwords_needed_to_start())
+        self.assertTrue(job.start())
+        self.assertEqual(job.status, 'pending')
+        job = Job.objects.get(pk=job.pk)
+        self.check_job_result(job, 'failed')
+        self.assertTrue('-l' in self.run_job_args)
+
+    def test_ssh_username_and_password(self):
+        self.create_test_credential(ssh_username='sshuser',
+                                    ssh_password='sshpass')
+        self.create_test_project(TEST_PLAYBOOK)
+        job_template = self.create_test_job_template()
+        job = self.create_test_job(job_template=job_template)
+        self.assertEqual(job.status, 'new')
+        self.assertFalse(job.get_passwords_needed_to_start())
+        self.assertTrue(job.start())
+        self.assertEqual(job.status, 'pending')
+        job = Job.objects.get(pk=job.pk)
+        self.check_job_result(job, 'successful')
+        self.assertTrue('-u' in self.run_job_args)
+        self.assertTrue('--ask-pass' in self.run_job_args)
+
+    def test_ssh_ask_password(self):
+        self.create_test_credential(ssh_password='ASK')
+        self.create_test_project(TEST_PLAYBOOK)
+        job_template = self.create_test_job_template()
+        job = self.create_test_job(job_template=job_template)
+        self.assertEqual(job.status, 'new')
+        self.assertTrue(job.get_passwords_needed_to_start())
+        self.assertTrue('ssh_password' in job.get_passwords_needed_to_start())
+        self.assertFalse(job.start())
+        self.assertEqual(job.status, 'new')
+        self.assertTrue(job.start(ssh_password='sshpass'))
+        self.assertEqual(job.status, 'pending')
+        job = Job.objects.get(pk=job.pk)
+        self.check_job_result(job, 'successful')
+        self.assertTrue('--ask-pass' in self.run_job_args)
+
+    def test_sudo_username_and_password(self):
+        self.create_test_credential(sudo_username='sudouser',
+                                    sudo_password='sudopass')
+        self.create_test_project(TEST_PLAYBOOK)
+        job_template = self.create_test_job_template()
+        job = self.create_test_job(job_template=job_template)
+        self.assertEqual(job.status, 'new')
+        self.assertFalse(job.get_passwords_needed_to_start())
+        self.assertTrue(job.start())
+        self.assertEqual(job.status, 'pending')
+        job = Job.objects.get(pk=job.pk)
+        # Job may fail if current user doesn't have password-less sudo
+        # privileges, but we're mainly checking the command line arguments.
+        self.check_job_result(job, ('successful', 'failed'))
+        self.assertTrue('-U' in self.run_job_args)
+        self.assertTrue('--ask-sudo-pass' in self.run_job_args)
+
+    def test_sudo_ask_password(self):
+        self.create_test_credential(sudo_password='ASK')
+        self.create_test_project(TEST_PLAYBOOK)
+        job_template = self.create_test_job_template()
+        job = self.create_test_job(job_template=job_template)
+        self.assertEqual(job.status, 'new')
+        self.assertTrue(job.get_passwords_needed_to_start())
+        self.assertTrue('sudo_password' in job.get_passwords_needed_to_start())
+        self.assertFalse(job.start())
+        self.assertEqual(job.status, 'new')
+        self.assertTrue(job.start(sudo_password='sudopass'))
+        self.assertEqual(job.status, 'pending')
+        job = Job.objects.get(pk=job.pk)
+        # Job may fail if current user doesn't have password-less sudo
+        # privileges, but we're mainly checking the command line arguments.
+        self.assertTrue(job.status in ('successful', 'failed'))
+        self.assertTrue('--ask-sudo-pass' in self.run_job_args)
+
+    def test_unlocked_ssh_key(self):
+        self.create_test_credential(ssh_key_data=TEST_SSH_KEY_DATA)
+        self.create_test_project(TEST_PLAYBOOK)
+        job_template = self.create_test_job_template()
+        job = self.create_test_job(job_template=job_template)
+        self.assertEqual(job.status, 'new')
+        self.assertFalse(job.get_passwords_needed_to_start())
+        self.assertTrue(job.start())
+        self.assertEqual(job.status, 'pending')
+        job = Job.objects.get(pk=job.pk)
+        self.check_job_result(job, 'successful')
+        self.assertTrue('ssh-agent' in self.run_job_args)
+
+    def test_locked_ssh_key_with_password(self):
+        self.create_test_credential(ssh_key_data=TEST_SSH_KEY_DATA_LOCKED,
+                                    ssh_key_unlock=TEST_SSH_KEY_DATA_UNLOCK)
+        self.create_test_project(TEST_PLAYBOOK)
+        job_template = self.create_test_job_template()
+        job = self.create_test_job(job_template=job_template)
+        self.assertEqual(job.status, 'new')
+        self.assertFalse(job.get_passwords_needed_to_start())
+        self.assertTrue(job.start())
+        self.assertEqual(job.status, 'pending')
+        job = Job.objects.get(pk=job.pk)
+        self.check_job_result(job, 'successful')
+        self.assertTrue('ssh-agent' in self.run_job_args)
+        self.assertTrue('Bad passphrase' not in job.result_stdout)
+
+    def test_locked_ssh_key_with_bad_password(self):
+        self.create_test_credential(ssh_key_data=TEST_SSH_KEY_DATA_LOCKED,
+                                    ssh_key_unlock='not the passphrase')
+        self.create_test_project(TEST_PLAYBOOK)
+        job_template = self.create_test_job_template()
+        job = self.create_test_job(job_template=job_template)
+        self.assertEqual(job.status, 'new')
+        self.assertFalse(job.get_passwords_needed_to_start())
+        self.assertTrue(job.start())
+        self.assertEqual(job.status, 'pending')
+        job = Job.objects.get(pk=job.pk)
+        self.check_job_result(job, 'failed')
+        self.assertTrue('ssh-agent' in self.run_job_args)
+        self.assertTrue('Bad passphrase' in job.result_stdout)
+
+    def test_locked_ssh_key_ask_password(self):
+        self.create_test_credential(ssh_key_data=TEST_SSH_KEY_DATA_LOCKED,
+                                    ssh_key_unlock='ASK')
+        self.create_test_project(TEST_PLAYBOOK)
+        job_template = self.create_test_job_template()
+        job = self.create_test_job(job_template=job_template)
+        self.assertEqual(job.status, 'new')
+        self.assertTrue(job.get_passwords_needed_to_start())
+        self.assertTrue('ssh_key_unlock' in job.get_passwords_needed_to_start())
+        self.assertFalse(job.start())
+        self.assertEqual(job.status, 'new')
+        self.assertTrue(job.start(ssh_key_unlock=TEST_SSH_KEY_DATA_UNLOCK))
+        self.assertEqual(job.status, 'pending')
+        job = Job.objects.get(pk=job.pk)
+        self.check_job_result(job, 'successful')
+        self.assertTrue('ssh-agent' in self.run_job_args)
+        self.assertTrue('Bad passphrase' not in job.result_stdout)

awx/main/tests/users.py

@@ -0,0 +1,233 @@
+# Copyright (c) 2013 AnsibleWorks, Inc.
+# All Rights Reserved.
+
+import json
+
+from django.contrib.auth.models import User as DjangoUser
+import django.test
+from django.test.client import Client
+from django.core.urlresolvers import reverse
+
+from awx.main.models import *
+from awx.main.tests.base import BaseTest
+
+class UsersTest(BaseTest):
+
+    def collection(self):
+        return reverse('main:user_list')
+
+    def setUp(self):
+        super(UsersTest, self).setUp()
+        self.setup_users()
+        self.organizations = self.make_organizations(self.super_django_user, 1)
+        self.organizations[0].admins.add(self.normal_django_user)
+        self.organizations[0].users.add(self.other_django_user)
+        self.organizations[0].users.add(self.normal_django_user)
+ 
+    def test_only_super_user_or_org_admin_can_add_users(self):
+        url = reverse('main:user_list')
+        new_user = dict(username='blippy')
+        new_user2 = dict(username='blippy2')
+        self.post(url, expect=401, data=new_user, auth=None)
+        self.post(url, expect=401, data=new_user, auth=self.get_invalid_credentials())
+        self.post(url, expect=403, data=new_user, auth=self.get_other_credentials())
+        self.post(url, expect=201, data=new_user, auth=self.get_super_credentials())
+        self.post(url, expect=400, data=new_user, auth=self.get_super_credentials())
+        self.post(url, expect=201, data=new_user2, auth=self.get_normal_credentials())
+        self.post(url, expect=400, data=new_user2, auth=self.get_normal_credentials())
+
+    def test_auth_token_login(self):
+        auth_token_url = reverse('main:auth_token_view')
+
+        # Always returns a 405 for any GET request, regardless of credentials.
+        self.get(auth_token_url, expect=405, auth=None)
+        self.get(auth_token_url, expect=405, auth=self.get_invalid_credentials())
+        self.get(auth_token_url, expect=405, auth=self.get_normal_credentials())
+        
+        # Posting without username/password fields or invalid username/password
+        # returns a 400 error.
+        data = {}
+        self.post(auth_token_url, data, expect=400)
+        data = dict(zip(('username', 'password'), self.get_invalid_credentials()))
+        self.post(auth_token_url, data, expect=400)
+
+        # A valid username/password should give us an auth token.
+        data = dict(zip(('username', 'password'), self.get_normal_credentials()))
+        result = self.post(auth_token_url, data, expect=200, auth=None)
+        self.assertTrue('token' in result)
+        self.assertEqual(result['token'], self.normal_django_user.auth_token.key)
+        auth_token = result['token']
+
+        # Verify we can access our own user information with the auth token.
+        data = self.get(reverse('main:user_me_list'), expect=200, auth=auth_token)
+        self.assertEquals(data['results'][0]['username'], 'normal')
+        self.assertEquals(data['count'], 1)
+
+    def test_ordinary_user_can_modify_some_fields_about_himself_but_not_all_and_passwords_work(self):
+
+        detail_url = reverse('main:user_detail', args=(self.other_django_user.pk,))
+        data = self.get(detail_url, expect=200, auth=self.get_other_credentials())
+
+        # can't change first_name, last_name, etc
+        data['last_name'] = "NewLastName"
+        self.put(detail_url, data, expect=403, auth=self.get_other_credentials())
+
+        # can't change username
+        data['username'] = 'newUsername'
+        self.put(detail_url, data, expect=403, auth=self.get_other_credentials())
+
+        # if superuser, CAN change lastname and username and such
+        self.put(detail_url, data, expect=200, auth=self.get_super_credentials())
+        
+        # and user can still login
+        creds = self.get_other_credentials()
+        creds = ('newUsername', creds[1])
+        data = self.get(detail_url, expect=200, auth=creds)
+
+        # user can change their password (submit as text) and can still login
+        # and password is not stored as plaintext
+
+        data['password'] = 'newPassWord1234Changed'
+        changed = self.put(detail_url, data, expect=200, auth=creds)
+        creds = (creds[0], data['password'])
+        self.get(detail_url, expect=200, auth=creds)
+       
+        # make another nobody user, and make sure they can't send any edits
+        obj = User.objects.create(username='new_user')
+        obj.set_password('new_user')
+        obj.save()
+        hacked = dict(password='asdf')
+        changed = self.put(detail_url, hacked, expect=403, auth=('new_user', 'new_user'))
+        hacked = dict(username='asdf')
+        changed = self.put(detail_url, hacked, expect=403, auth=('new_user', 'new_user'))
+
+        # password is not stored in plaintext
+        self.assertTrue(User.objects.get(pk=self.normal_django_user.pk).password != data['password'])
+
+    def test_user_created_with_password_can_login(self):
+
+        # this is something an org admin can do...
+        url = reverse('main:user_list')
+        data  = dict(username='username',  password='password')
+        data2 = dict(username='username2', password='password2')
+        data = self.post(url, expect=201, data=data, auth=self.get_normal_credentials())
+
+        # verify that the login works...
+        self.get(url, expect=200, auth=('username', 'password'))
+
+        # but a regular user cannot        
+        data = self.post(url, expect=403, data=data2, auth=self.get_other_credentials())
+        
+        # a super user can also create new users   
+        data = self.post(url, expect=201, data=data2, auth=self.get_super_credentials())
+
+        # verify that the login works
+        self.get(url, expect=200, auth=('username2', 'password2'))
+
+        # verify that if you post a user with a pk, you do not alter that user's password info
+        mod = dict(id=self.super_django_user.pk, username='change', password='change')
+        data = self.post(url, expect=201, data=mod, auth=self.get_super_credentials())
+        orig = User.objects.get(pk=self.super_django_user.pk)
+        self.assertTrue(orig.username != 'change')
+ 
+    def test_password_not_shown_in_get_operations_for_list_or_detail(self):
+        url = reverse('main:user_detail', args=(self.super_django_user.pk,))
+        data = self.get(url, expect=200, auth=self.get_super_credentials())
+        self.assertTrue('password' not in data)
+
+        url = reverse('main:user_list')
+        data = self.get(url, expect=200, auth=self.get_super_credentials())
+        self.assertTrue('password' not in data['results'][0])
+
+    def test_user_list_filtered(self):
+        url = reverse('main:user_list')
+        data3 = self.get(url, expect=200, auth=self.get_super_credentials())
+        self.assertEquals(data3['count'], 3)
+        data2 = self.get(url, expect=200, auth=self.get_normal_credentials())
+        self.assertEquals(data2['count'], 2)
+        data1 = self.get(url, expect=200, auth=self.get_other_credentials())
+        self.assertEquals(data1['count'], 1)
+
+    def test_super_user_can_delete_a_user_but_only_marked_inactive(self):
+        user_pk = self.normal_django_user.pk
+        url = reverse('main:user_detail', args=(user_pk,))
+        data = self.delete(url, expect=204, auth=self.get_super_credentials())
+        data = self.get(url, expect=404, auth=self.get_super_credentials())
+        obj = User.objects.get(pk=user_pk)
+        self.assertEquals(obj.is_active, False)
+ 
+    def test_non_org_admin_user_cannot_delete_any_user_including_himself(self):
+        url1 = reverse('main:user_detail', args=(self.super_django_user.pk,))
+        url2 = reverse('main:user_detail', args=(self.normal_django_user.pk,))
+        url3 = reverse('main:user_detail', args=(self.other_django_user.pk,))
+        data = self.delete(url1, expect=403, auth=self.get_other_credentials())
+        data = self.delete(url2, expect=403, auth=self.get_other_credentials())
+        data = self.delete(url3, expect=403, auth=self.get_other_credentials())
+
+    def test_there_exists_an_obvious_url_where_a_user_may_find_his_user_record(self):
+        url = reverse('main:user_me_list')
+        data = self.get(url, expect=401, auth=None)
+        data = self.get(url, expect=401, auth=self.get_invalid_credentials())
+        data = self.get(url, expect=200, auth=self.get_normal_credentials())
+        self.assertEquals(data['results'][0]['username'], 'normal')
+        self.assertEquals(data['count'], 1)
+        data = self.get(url, expect=200, auth=self.get_other_credentials())
+        self.assertEquals(data['results'][0]['username'], 'other')
+        self.assertEquals(data['count'], 1)
+        data = self.get(url, expect=200, auth=self.get_super_credentials())
+        self.assertEquals(data['results'][0]['username'], 'admin')
+        self.assertEquals(data['count'], 1)
+
+    def test_user_related_resources(self):
+
+        # organizations the user is a member of, should be 1
+        url = reverse('main:user_organizations_list',
+                      args=(self.normal_django_user.pk,))
+        data = self.get(url, expect=200, auth=self.get_normal_credentials())
+        self.assertEquals(data['count'], 1) 
+        # also accessible via superuser
+        data = self.get(url, expect=200, auth=self.get_super_credentials())
+        self.assertEquals(data['count'], 1) 
+        # but not by other user
+        data = self.get(url, expect=403, auth=self.get_other_credentials())
+
+        # organizations the user is an admin of, should be 1
+        url = reverse('main:user_admin_of_organizations_list',
+                      args=(self.normal_django_user.pk,))
+        data = self.get(url, expect=200, auth=self.get_normal_credentials())
+        self.assertEquals(data['count'], 1)
+        # also accessible via superuser
+        data = self.get(url, expect=200, auth=self.get_super_credentials())
+        self.assertEquals(data['count'], 1)
+        # but not by other user
+        data = self.get(url, expect=403, auth=self.get_other_credentials())
+ 
+        # teams the user is on, should be 0
+        url = reverse('main:user_teams_list', args=(self.normal_django_user.pk,))
+        data = self.get(url, expect=200, auth=self.get_normal_credentials())
+        self.assertEquals(data['count'], 0)
+        # also accessible via superuser
+        data = self.get(url, expect=200, auth=self.get_super_credentials())
+        self.assertEquals(data['count'], 0)
+        # but not by other user
+        data = self.get(url, expect=403, auth=self.get_other_credentials())
+
+        # verify org admin can still read other user data too
+        url = reverse('main:user_organizations_list',
+                      args=(self.other_django_user.pk,))
+        data = self.get(url, expect=200, auth=self.get_normal_credentials())
+        self.assertEquals(data['count'], 1)
+        url = reverse('main:user_admin_of_organizations_list',
+                      args=(self.other_django_user.pk,))
+        data = self.get(url, expect=200, auth=self.get_normal_credentials())
+        self.assertEquals(data['count'], 0)
+        url = reverse('main:user_teams_list',
+                      args=(self.other_django_user.pk,))
+        data = self.get(url, expect=200, auth=self.get_normal_credentials())
+        self.assertEquals(data['count'], 0)
+
+        # FIXME: add test that shows posting a user w/o id to /organizations/2/users/ can create a new one & associate
+        # FIXME: add test that shows posting a user w/o id to /organizations/2/admins/ can create a new one & associate
+        # FIXME: add test that shows posting a projects w/o id to /organizations/2/projects/ can create a new one & associate
+
+

awx/main/urls.py

@@ -0,0 +1,183 @@
+# Copyright (c) 2013 AnsibleWorks, Inc.
+# All Rights Reserved.
+
+from django.conf.urls import include, patterns, url as original_url
+
+def url(regex, view, kwargs=None, name=None, prefix=''):
+    # Set default name from view name (if a string).
+    if isinstance(view, basestring) and name is None:
+        name = view
+    return original_url(regex, view, kwargs, name, prefix)
+
+organization_urls = patterns('awx.main.views',
+    url(r'^$',                                          'organization_list'),
+    url(r'^(?P<pk>[0-9]+)/$',                           'organization_detail'),
+    url(r'^(?P<pk>[0-9]+)/users/$',                     'organization_users_list'),
+    url(r'^(?P<pk>[0-9]+)/admins/$',                    'organization_admins_list'),
+    url(r'^(?P<pk>[0-9]+)/inventories/$',               'organization_inventories_list'),
+    url(r'^(?P<pk>[0-9]+)/projects/$',                  'organization_projects_list'),
+    url(r'^(?P<pk>[0-9]+)/teams/$',                     'organization_teams_list'),
+)
+
+user_urls = patterns('awx.main.views',
+    url(r'^$',                                          'user_list'),
+    url(r'^(?P<pk>[0-9]+)/$',                           'user_detail'),
+    url(r'^(?P<pk>[0-9]+)/teams/$',                     'user_teams_list'),
+    url(r'^(?P<pk>[0-9]+)/organizations/$',             'user_organizations_list'),
+    url(r'^(?P<pk>[0-9]+)/admin_of_organizations/$',    'user_admin_of_organizations_list'),
+    url(r'^(?P<pk>[0-9]+)/projects/$',                  'user_projects_list'),
+    url(r'^(?P<pk>[0-9]+)/credentials/$',               'user_credentials_list'),
+    url(r'^(?P<pk>[0-9]+)/permissions/$',               'user_permissions_list'),
+)
+
+project_urls = patterns('awx.main.views',
+    url(r'^$',                                          'project_list'),
+    url(r'^(?P<pk>[0-9]+)/$',                           'project_detail'),
+    url(r'^(?P<pk>[0-9]+)/playbooks/$',                 'project_detail_playbooks'),
+    url(r'^(?P<pk>[0-9]+)/organizations/$',             'project_organizations_list'),
+)
+
+team_urls = patterns('awx.main.views',
+    url(r'^$',                                          'team_list'),
+    url(r'^(?P<pk>[0-9]+)/$',                           'team_detail'),
+    url(r'^(?P<pk>[0-9]+)/projects/$',                  'team_projects_list'),
+    url(r'^(?P<pk>[0-9]+)/users/$',                     'team_users_list'),
+    url(r'^(?P<pk>[0-9]+)/credentials/$',               'team_credentials_list'),
+    url(r'^(?P<pk>[0-9]+)/permissions/$',               'team_permissions_list'),
+)
+
+inventory_urls = patterns('awx.main.views',
+    url(r'^$',                                          'inventory_list'),
+    url(r'^(?P<pk>[0-9]+)/$',                           'inventory_detail'),
+    url(r'^(?P<pk>[0-9]+)/hosts/$',                     'inventory_hosts_list'),
+    url(r'^(?P<pk>[0-9]+)/groups/$',                    'inventory_groups_list'),
+    url(r'^(?P<pk>[0-9]+)/root_groups/$',               'inventory_root_groups_list'),
+    url(r'^(?P<pk>[0-9]+)/variable_data/$',             'inventory_variable_detail'),
+    url(r'^(?P<pk>[0-9]+)/script/$',                    'inventory_script_view'),
+)
+
+host_urls = patterns('awx.main.views',
+    url(r'^$',                                          'host_list'),
+    url(r'^(?P<pk>[0-9]+)/$',                           'host_detail'),
+    url(r'^(?P<pk>[0-9]+)/variable_data/$',             'host_variable_detail'),
+    url(r'^(?P<pk>[0-9]+)/groups/$',                    'host_groups_list'),
+    url(r'^(?P<pk>[0-9]+)/all_groups/$',                'host_all_groups_list'),
+    url(r'^(?P<pk>[0-9]+)/job_events/',                 'host_job_events_list'),
+    url(r'^(?P<pk>[0-9]+)/job_host_summaries/$',        'host_job_host_summaries_list'),
+)
+
+group_urls = patterns('awx.main.views',
+    url(r'^$',                                          'group_list'),
+    url(r'^(?P<pk>[0-9]+)/$',                           'group_detail'),
+    url(r'^(?P<pk>[0-9]+)/children/$',                  'group_children_list'),
+    url(r'^(?P<pk>[0-9]+)/hosts/$',                     'group_hosts_list'),
+    url(r'^(?P<pk>[0-9]+)/all_hosts/$',                 'group_all_hosts_list'),
+    url(r'^(?P<pk>[0-9]+)/variable_data/$',             'group_variable_detail'),
+    url(r'^(?P<pk>[0-9]+)/job_events/$',                'group_job_events_list'),
+    url(r'^(?P<pk>[0-9]+)/job_host_summaries/$',        'group_job_host_summaries_list'),
+)
+
+credential_urls = patterns('awx.main.views',
+    url(r'^$',                                          'credential_list'),
+    url(r'^(?P<pk>[0-9]+)/$',                           'credential_detail'),
+    # See also credentials resources on users/teams.
+)
+
+permission_urls = patterns('awx.main.views',
+    url(r'^(?P<pk>[0-9]+)/$',                           'permission_detail'),
+)
+
+job_template_urls = patterns('awx.main.views',
+    url(r'^$',                                          'job_template_list'),
+    url(r'^(?P<pk>[0-9]+)/$',                           'job_template_detail'),
+    url(r'^(?P<pk>[0-9]+)/jobs/$',                      'job_template_jobs_list'),
+)
+
+job_urls = patterns('awx.main.views',
+    url(r'^$',                                          'job_list'),
+    url(r'^(?P<pk>[0-9]+)/$',                           'job_detail'),
+    url(r'^(?P<pk>[0-9]+)/start/$',                     'job_start'),
+    url(r'^(?P<pk>[0-9]+)/cancel/$',                    'job_cancel'),
+    url(r'^(?P<pk>[0-9]+)/job_host_summaries/$',        'job_job_host_summaries_list'),
+    url(r'^(?P<pk>[0-9]+)/job_events/$',                'job_job_events_list'),
+)
+
+job_host_summary_urls = patterns('awx.main.views',
+    url(r'^(?P<pk>[0-9]+)/$',                           'job_host_summary_detail'),
+)
+
+job_event_urls = patterns('awx.main.views',
+    url(r'^$',                                          'job_event_list'),
+    url(r'^(?P<pk>[0-9]+)/$',                           'job_event_detail'),
+    url(r'^(?P<pk>[0-9]+)/children/$',                  'job_event_children_list'),
+    url(r'^(?P<pk>[0-9]+)/hosts/$',                     'job_event_hosts_list'),
+)
+
+v1_urls = patterns('awx.main.views',
+    url(r'^$',              'api_v1_root_view'),
+    url(r'^config/$',       'api_v1_config_view'),
+    url(r'^authtoken/$',    'auth_token_view'),
+    url(r'^me/$',           'user_me_list'),
+    url(r'^organizations/', include(organization_urls)),
+    url(r'^users/',         include(user_urls)),
+    url(r'^projects/',      include(project_urls)),
+    url(r'^teams/',         include(team_urls)),
+    url(r'^inventories/',   include(inventory_urls)),
+    url(r'^hosts/',         include(host_urls)),
+    url(r'^groups/',        include(group_urls)),
+    url(r'^credentials/',   include(credential_urls)),
+    url(r'^permissions/',   include(permission_urls)),
+    url(r'^job_templates/', include(job_template_urls)),
+    url(r'^jobs/',          include(job_urls)),
+    url(r'^job_host_summaries/', include(job_host_summary_urls)),
+    url(r'^job_events/',    include(job_event_urls)),
+)
+
+urlpatterns = patterns('awx.main.views',
+    url(r'^$', 'api_root_view'),
+    url(r'^v1/', include(v1_urls)),
+)
+
+# Monkeypatch get_view_name and get_view_description in Django REST Framework
+# 2.3.x to allow a custom view name or description to be defined on the view
+# class, instead of always using __name__ and __doc__.  Used to be possible in
+# 2.2.x by defining get_name() and get_description() methods on a view.
+
+try:
+    import rest_framework.utils.formatting
+    from django.utils.safestring import mark_safe
+
+    original_get_view_name = rest_framework.utils.formatting.get_view_name
+    def get_view_name(cls, suffix=None):
+        name = ''
+        # Support for get_name method on views compatible with 2.2.x. 
+        if hasattr(cls, 'get_name') and callable(cls.get_name):
+            name = cls().get_name()
+        elif hasattr(cls, 'view_name'):
+            if callable(cls.view_name):
+                name = cls.view_name()
+            else:
+                name = cls.view_name
+        if name:
+            return ('%s %s' % (name, suffix)) if suffix else name
+        return original_get_view_name(cls, suffix=None)
+    rest_framework.utils.formatting.get_view_name = get_view_name
+
+    original_get_view_description = rest_framework.utils.formatting.get_view_description
+    def get_view_description(cls, html=False):
+        # Support for get_description method on views compatible with 2.2.x. 
+        if hasattr(cls, 'get_description') and callable(cls.get_description):
+            desc = cls().get_description(html=html)
+        elif hasattr(cls, 'view_description'):
+            if callable(cls.view_description):
+                view_desc = cls.view_description()
+            else:
+                view_desc = cls.view_description
+            cls = type(cls.__name__, (object,), {'__doc__': view_desc})
+        desc = original_get_view_description(cls, html=html)
+        if html:
+            desc = '<div class="description">%s</div>' % desc
+        return mark_safe(desc)
+    rest_framework.utils.formatting.get_view_description = get_view_description
+except ImportError:
+    pass