mirror of
https://github.com/ansible/awx.git
synced 2026-01-29 15:24:42 -03:30
6ebe45b1bd
* Add separate Django app for configuration: awx.conf. * Migrate from existing main.TowerSettings model to conf.Setting. * Add settings wrapper to allow get/set/del via django.conf.settings. * Update existing references to tower_settings to use django.conf.settings. * Add a settings registry to allow for each Django app to register configurable settings. * Support setting validation and conversion using Django REST Framework fields. * Add /api/v1/settings/ to display a list of setting categories. * Add /api/v1/settings/<slug>/ to display all settings in a category as a single object. * Allow PUT/PATCH to update setting singleton, DELETE to reset to defaults. * Add "all" category to display all settings across categories. * Add "changed" category to display only settings configured in the database. * Support per-user settings via "user" category (/api/v1/settings/user/). * Support defaults for user settings via "user-defaults" category (/api/v1/settings/user-defaults/). * Update serializer metadata to support category, category_slug and placeholder on OPTIONS responses. * Update serializer metadata to handle child fields of a list/dict. * Hide raw data form in browsable API for OPTIONS and DELETE. * Combine existing licensing code into single "TaskEnhancer" class. * Move license helper functions from awx.api.license into awx.conf.license. * Update /api/v1/config/ to read/verify/update license using TaskEnhancer and settings wrapper. * Add support for caching settings accessed via settings wrapper. * Invalidate cached settings when Setting model changes or is deleted. * Preload all database settings into cache on first access via settings wrapper. * Add support for read-only settings than can update their value depending on other settings. * Use setting_changed signal whenever a setting changes. * Register configurable authentication, jobs, system and ui settings. * Register configurable LDAP, RADIUS and social auth settings. * Add custom fields and validators for URL, LDAP, RADIUS and social auth settings. * Rewrite existing validator for Credential ssh_private_key to support validating private keys, certs or combinations of both. * Get all unit/functional tests working with above changes. * Add "migrate_to_database_settings" command to determine settings to be migrated into the database and comment them out when set in Python settings files. * Add support for migrating license key from file to database. * Remove database-configuable settings from local_settings.py example files. * Update setup role to no longer install files for database-configurable settings. f 94ff6ee More settings work. f af4c4e0 Even more db settings stuff. f 96ea9c0 More settings, attempt at singleton serializer for settings. f 937c760 More work on singleton/category views in API, add code to comment out settings in Python files, work on command to migrate settings to database. f 425b0d3 Minor fixes for sprint demo. f ea402a4 Add support for read-only settings, cleanup license engine, get license support working with DB settings. f ec289e4 Rename migration, minor fixmes, update setup role. f 603640b Rewrite key/cert validator, finish adding social auth fields, hook up signals for setting_changed, use None to imply a setting is not set. f 67d1b5a Get functional/unit tests passing. f 2919b62 Flake8 fixes. f e62f421 Add redbaron to requirements, get file to database migration working (except for license). f c564508 Add support for migrating license file. f 982f767 Add support for regex in social map fields.
105 lines
3.9 KiB
Python
105 lines
3.9 KiB
Python
# Copyright (c) 2015 Ansible, Inc.
|
|
# All Rights Reserved.
|
|
|
|
# Django
|
|
from django.conf import settings # noqa
|
|
|
|
# AWX
|
|
from awx.main.models.base import * # noqa
|
|
from awx.main.models.unified_jobs import * # noqa
|
|
from awx.main.models.organization import * # noqa
|
|
from awx.main.models.credential import * # noqa
|
|
from awx.main.models.projects import * # noqa
|
|
from awx.main.models.inventory import * # noqa
|
|
from awx.main.models.jobs import * # noqa
|
|
from awx.main.models.ad_hoc_commands import * # noqa
|
|
from awx.main.models.schedules import * # noqa
|
|
from awx.main.models.activity_stream import * # noqa
|
|
from awx.main.models.ha import * # noqa
|
|
from awx.main.models.rbac import * # noqa
|
|
from awx.main.models.mixins import * # noqa
|
|
from awx.main.models.notifications import * # noqa
|
|
from awx.main.models.fact import * # noqa
|
|
from awx.main.models.label import * # noqa
|
|
from awx.main.models.workflow import * # noqa
|
|
|
|
# Monkeypatch Django serializer to ignore django-taggit fields (which break
|
|
# the dumpdata command; see https://github.com/alex/django-taggit/issues/155).
|
|
from django.core.serializers.python import Serializer as _PythonSerializer
|
|
_original_handle_m2m_field = _PythonSerializer.handle_m2m_field
|
|
def _new_handle_m2m_field(self, obj, field):
|
|
try:
|
|
field.rel.through._meta
|
|
except AttributeError:
|
|
return
|
|
return _original_handle_m2m_field(self, obj, field)
|
|
_PythonSerializer.handle_m2m_field = _new_handle_m2m_field
|
|
|
|
# Add custom methods to User model for permissions checks.
|
|
from django.contrib.auth.models import User # noqa
|
|
from awx.main.access import * # noqa
|
|
|
|
|
|
User.add_to_class('get_queryset', get_user_queryset)
|
|
User.add_to_class('can_access', check_user_access)
|
|
User.add_to_class('accessible_objects', user_accessible_objects)
|
|
User.add_to_class('admin_role', user_admin_role)
|
|
|
|
@property
|
|
def user_get_organizations(user):
|
|
return Organization.objects.filter(member_role__members=user)
|
|
|
|
@property
|
|
def user_get_admin_of_organizations(user):
|
|
return Organization.objects.filter(admin_role__members=user)
|
|
|
|
@property
|
|
def user_get_auditor_of_organizations(user):
|
|
return Organization.objects.filter(auditor_role__members=user)
|
|
|
|
User.add_to_class('organizations', user_get_organizations)
|
|
User.add_to_class('admin_of_organizations', user_get_admin_of_organizations)
|
|
User.add_to_class('auditor_of_organizations', user_get_auditor_of_organizations)
|
|
|
|
@property
|
|
def user_is_system_auditor(user):
|
|
return Role.singleton('system_auditor').members.filter(id=user.id).exists()
|
|
|
|
@user_is_system_auditor.setter
|
|
def user_is_system_auditor(user, tf):
|
|
if user.id:
|
|
if tf:
|
|
Role.singleton('system_auditor').members.add(user)
|
|
else:
|
|
Role.singleton('system_auditor').members.remove(user)
|
|
|
|
User.add_to_class('is_system_auditor', user_is_system_auditor)
|
|
|
|
# Import signal handlers only after models have been defined.
|
|
import awx.main.signals # noqa
|
|
|
|
from awx.main.registrar import activity_stream_registrar # noqa
|
|
activity_stream_registrar.connect(Organization)
|
|
activity_stream_registrar.connect(Inventory)
|
|
activity_stream_registrar.connect(Host)
|
|
activity_stream_registrar.connect(Group)
|
|
activity_stream_registrar.connect(InventorySource)
|
|
#activity_stream_registrar.connect(InventoryUpdate)
|
|
activity_stream_registrar.connect(Credential)
|
|
activity_stream_registrar.connect(Team)
|
|
activity_stream_registrar.connect(Project)
|
|
#activity_stream_registrar.connect(ProjectUpdate)
|
|
activity_stream_registrar.connect(Permission)
|
|
activity_stream_registrar.connect(JobTemplate)
|
|
activity_stream_registrar.connect(Job)
|
|
activity_stream_registrar.connect(AdHocCommand)
|
|
# activity_stream_registrar.connect(JobHostSummary)
|
|
# activity_stream_registrar.connect(JobEvent)
|
|
# activity_stream_registrar.connect(Profile)
|
|
activity_stream_registrar.connect(Schedule)
|
|
activity_stream_registrar.connect(CustomInventoryScript)
|
|
activity_stream_registrar.connect(NotificationTemplate)
|
|
activity_stream_registrar.connect(Notification)
|
|
activity_stream_registrar.connect(Label)
|
|
activity_stream_registrar.connect(User)
|