radarsys_met Commit - r445:046e9870ce02

Add users and groups

eynilupu -

r445:046e9870ce02

parent child

Context file:

r445:046e9870ce02

volumes/sirm/apps/accounts/management/commands/create_groups.py created 644 +71 0

@@ -0,0 +1,71
	1	from django.core.management import BaseCommand
	2	from django.contrib.auth.models import User, Group , Permission
	3	import logging
	4
	5	GROUPS = {
	6	"Developer": {
	7	#General permissions
	8	#"log entry" : ["add","delete","change","view"],
	9	#"group" : ["add","delete","change","view"],
	10	#"permission" : ["add","delete","change","view"],
	11	#"user" : ["add","delete","change","view"],
	12	#"content type" : ["add","delete","change","view"],
	13	#"session" : ["add","delete","change","view"],
	14
	15	#Specific permissions
	16	"profile" : ["add","delete","change","view"],
	17	"experiment" : ["add","delete","change","view"],
	18	"configuration" : ["add","delete","change","view"],
	19	"device" : ["add","delete","change","view"],
	20	"device type" : ["add","delete","change","view"],
	21	"generator configuration" : ["add","delete","change","view"],
	22	"pedestal configuration" : ["add","delete","change","view"],
	23	"usrprx configuration" : ["add","delete","change","view"],
	24	"tx code" : ["add","delete","change","view"],
	25	"usrptx configuration" : ["add","delete","change","view"],
	26	},
	27
	28	"Operator": {
	29	#Specific permissions
	30	"profile" : ["view"],
	31	"experiment" : ["view"],
	32	"configuration" : ["view"],
	33	"device" : ["view"],
	34	"device type" : ["view"],
	35	"generator configuration" : ["view"],
	36	"pedestal configuration" : ["view"],
	37	"usrprx configuration" : ["view"],
	38	"tx code" : ["view"],
	39	"usrptx configuration" : ["view"],
	40	},
	41	}
	42
	43	class Command(BaseCommand):
	44
	45	help = "Creates read only default permission groups for users"
	46
	47	def handle(self, args, *options):
	48	for group_name in GROUPS:
	49	try:
	50	Group.objects.get(name=group_name)
	51	self.stdout.write(f'Local group "{group_name}" currently exists')
	52	continue
	53	except:
	54	new_group = Group.objects.create(name=group_name)
	55	# Loop models in group
	56	for app_model in GROUPS[group_name]:
	57
	58	# Loop permissions in group/model
	59	for permission_name in GROUPS[group_name][app_model]:
	60
	61	# Generate permission name as Django would generate it
	62	name = "Can {} {}".format(permission_name, app_model)
	63	self.stdout.write(f'Creating "{name}"')
	64
	65	try:
	66	model_add_perm = Permission.objects.get(name=name)
	67	except Permission.DoesNotExist:
	68	logging.warning("Permission not found with name '{}'.".format(name))
	69	continue
	70
	71	new_group.permissions.add(model_add_perm) No newline at end of file

volumes/sirm/apps/accounts/management/commands/create_users.py created 644 +60 0

@@ -0,0 +1,60
	1	import os
	2	from django.core.management.base import BaseCommand
	3	from django.contrib.auth.models import User, Group
	4
	5	class Command(BaseCommand):
	6	"""
	7	Create a superuser and user if none exist
	8	Example:
	9	manage.py create_users
	10	"""
	11
	12	help = "Create a superuser and user if none exist"
	13
	14	def handle(self, args, *options):
	15
	16	users = {
	17	'Superuser': {
	18	'username': os.environ.get('SIRM_SUPER_USER', 'superuser'),
	19	'password': os.environ.get('SIRM_SUPER_PASSWORD', 'SuperuseROJ'),
	20	'email' : os.environ.get('SIRM_SUPER_EMAIL', 'superuser@igp.gob.pe')},
	21	'Developer': {
	22	'username': os.environ.get('SIRM_DEV_USER', 'developer'),
	23	'password': os.environ.get('SIRM_DEV_PASSWORD', 'DevelopeROJ'),
	24	'email' : os.environ.get('SIRM_DEV_EMAIL', 'developer@igp.gob.pe')},
	25	'Operator': {
	26	'username': os.environ.get('SIRM_USER', 'operator'),
	27	'password': os.environ.get('SIRM_PASSWORD', 'OperatoROJ'),
	28	'email' : os.environ.get('SIRM_EMAIL', 'operator@igp.gob.pe')}
	29	}
	30
	31	for key, value in users.items():
	32	if key == 'Superuser':
	33	if User.objects.filter(is_superuser=True):
	34	self.stdout.write(f'Local {key} currently exists')
	35	else:
	36	user, created = User.objects.get_or_create(username=value["username"], first_name=value["username"], email=value["email"], is_superuser = True, is_staff = True)
	37	if created:
	38	user.set_password(value["password"])
	39	user.save()
	40	self.stdout.write(f'Local {key} "{value["username"]}" was created')
	41	else:
	42	self.stdout.write(f'Unable to create this local superuser: "superuser already exists"')
	43	else:
	44	if User.objects.filter(groups__name=key):
	45	if User.objects.filter(groups__name=key, is_superuser=True):
	46	self.stdout.write(f"{key} group must not have a superuser, remove superusers and create a new user")
	47	else:
	48	self.stdout.write(f"Local {key} currently exists")
	49	else:
	50	user, created = User.objects.get_or_create(username=value["username"], first_name=value["username"], email=value["email"])
	51	if created:
	52	user.set_password(value["password"])
	53	user.save()
	54	self.stdout.write(f'Local {key} "{value["username"]}" was created')
	55
	56	group = Group.objects.get(name=key)
	57	group.user_set.add(user)
	58	self.stdout.write(f'Local {key} "{value["username"]}" was added to {key} group')
	59	else:
	60	self.stdout.write(f'Unable to create and join to {key} group this local user: "user already exists"') No newline at end of file

.env +10 0

@@ -34,6 +34,16 EXPOSE_CERTS=/path/to/certs
34	EXPOSE_DHPARAM=/path/to/dhparam	34	EXPOSE_DHPARAM=/path/to/dhparam
35		35
36	#Superuser settings	36	#Superuser settings
		37	SIRM_SUPER_USER=*****
		38	SIRM_SUPER_PASSWORD=*******
		39	SIRM_SUPER_EMAIL=*****@igp.gob.pe
		40
		41	#Developer user settings
		42	SIRM_DEV_USER=*****
		43	SIRM_DEV_PASSWORD=*******
		44	SIRM_DEV_EMAIL=*****@igp.gob.pe
		45
		46	#Operator user settings
37	SIRM_USER=*****	47	SIRM_USER=*****
38	SIRM_PASSWORD=*******	48	SIRM_PASSWORD=*******
39	SIRM_EMAIL=*****@igp.gob.pe No newline at end of file	49	SIRM_EMAIL=*****@igp.gob.pe

docker-compose.yml +8 -2

                   - EXPOSE_NAS=${EXPOSE_NAS}
                   - PROC_SITE=${PROC_SITE}
                   - SCHAIN_SITE=${SCHAIN_SITE}
+                  - SIRM_SUPER_USER=${SIRM_SUPER_USER}
+                  - SIRM_SUPER_PASSWORD=${SIRM_SUPER_PASSWORD}
+                  - SIRM_SUPER_EMAIL=${SIRM_SUPER_EMAIL}
+                  - SIRM_DEV_USER=${SIRM_DEV_USER}
+                  - SIRM_DEV_PASSWORD=${SIRM_DEV_PASSWORD}
+                  - SIRM_DEV_EMAIL=${SIRM_DEV_EMAIL}
                   - SIRM_USER=${SIRM_USER}
                   - SIRM_PASSWORD=${SIRM_PASSWORD}
                   - SIRM_EMAIL=${SIRM_EMAIL}
               sirm-job:
                 container_name: 'sirm-job'
-                image: mcuadros/ofelia:latest
+                image: mcuadros/ofelia:v0.3.6
                 depends_on:
                   - sirm-web
                 networks:
-                  - frontend_sirm
+                  #- frontend_sirm
                   - backend_sirm
                 command: daemon --docker
                 volumes:

setup/start_realtime.sh +5 -2

                 touch .gitkeep
             fi
-            echo "Create Superuser"
+            echo "Create Groups"
-            python manage.py createsuperuser_if_none_exists
+            python manage.py create_groups
+            echo "Create User"
+            python manage.py create_users
             echo "Run server"
             python manage.py runserver 0.0.0.0:8080

volumes/sirm/apps/generator/views.py +15 0

             from .models import GeneratorConfiguration
             from .forms import GeneratorConfigurationForm, GeneratorImportForm
+            def is_developer(user):
+                groups = [str(g.name) for g in user.groups.all()]
+                #return 'Developer' in groups or user.is_staff
+                return 'Developer' in groups or user.is_superuser
+            def is_operator(user):
+                groups = [str(g.name) for g in user.groups.all()]
+                #return 'Operator' in groups or user.is_staff
+                return 'Operator' in groups or user.is_superuser
             def conf(request, conf_id):
                 conf = get_object_or_404(GeneratorConfiguration, pk=conf_id)
+                if not is_developer(request.user):
+                    messages.error(request, 'You must be an developer to edit this configuration')
+                    return redirect(conf.get_absolute_url())
                 if request.method=='GET':
                     form = GeneratorConfigurationForm(instance=conf)

volumes/sirm/apps/main/models.py +1 -1

                         self.reception_rx.stop_device()
                         time.sleep(0.1)
                         self.pedestal.reset_device()
-                        time.sleep(14)
+                        time.sleep(0.1)
                         self.pedestal.stop_device()
                         time.sleep(0.1)
                         proc_url = 'http://'+os.environ['PROC_SITE']+'/stop'

volumes/sirm/apps/main/views.py +38 -10

             def is_developer(user):
                 groups = [str(g.name) for g in user.groups.all()]
-                return 'Developer' in groups or user.is_staff
+                #return 'Developer' in groups or user.is_staff
+                return 'Developer' in groups or user.is_superuser
             def is_operator(user):
                 groups = [str(g.name) for g in user.groups.all()]
-                return 'Operator' in groups or user.is_staff
+                #return 'Operator' in groups or user.is_staff
+                return 'Operator' in groups or user.is_superuser
             def has_been_modified(model):
             @login_required
             def device_new(request):
+                if not is_developer(request.user):
+                    messages.error(request, 'You must be an developer to create a new experiment')
+                    return redirect('url_devices')
                 if request.method == 'GET':
                     form = DeviceForm()
                 device = get_object_or_404(Device, pk=id_dev)
+                if not is_developer(request.user):
+                    messages.error(request, 'You must be an developer to edit this object')
+                    return redirect(device.get_absolute_url())
                 if request.method == 'GET':
                     form = DeviceForm(instance=device)
             def experiment_new(request, id_camp=None):
                 if not is_developer(request.user):
-                    messages.error(
+                    messages.error(request, 'You must be an developer to create a new experiment')
-                        request, 'Developer required, to create new Experiments')
+                    return redirect('url_experiments')
-                    return redirect('index')
                 kwargs = {}
                 if request.method == 'GET':
             @login_required
             def experiment_edit(request, id_exp):
                 experiment = get_object_or_404(Experiment, pk=id_exp)
+                if not is_developer(request.user):
+                    messages.error(request, 'You must be an developer to edit this experiment')
+                    return redirect(experiment.get_absolute_url())
                 id_p = experiment.pedestal_id
                 id_rx = experiment.reception_rx_id
                 id_tx = experiment.transmission_tx_id
                         experiment.delete()
                         return redirect('url_experiments')
-                    messages.error(request, 'Not enough permission to delete this object')
+                    messages.error(request, 'Not enough permission to delete this experiment')
                     return redirect(experiment.get_absolute_url())
                 kwargs = {
             def experiment_start(request, id_exp):
                 exp = get_object_or_404(Experiment, pk=id_exp)
+                if not is_developer(request.user) and not is_operator(request.user):
+                    messages.error(request, 'You must be an developer or operator to start this experiment')
+                    return redirect(exp.get_absolute_url())
                 if exp.status == 2:
                     messages.warning(request, 'Experiment {} already runnnig'.format(exp.name))
                 else:
                 all_status = Experiment.objects.filter(status=2)
                 exp = get_object_or_404(Experiment, pk=id_exp)
+                if not is_developer(request.user) and not is_operator(request.user):
+                    messages.error(request, 'You must be an developer or operator to stop this experiment')
+                    return redirect(exp.get_absolute_url())
                 if exp.status == 2 or exp.status == 4 or exp.status == 5:
                     for one_exp in all_status:
                         if one_exp != exp:
                 if not is_developer(request.user):
                     messages.error(
                         request, 'Developer required, to create new configurations')
-                    return redirect('index')
+                    return redirect('url_dev_confs')
                 initial = {}
                 kwargs = {}
                 conf = get_object_or_404(Configuration, pk=id_conf)
+                if not is_developer(request.user) and not is_operator(request.user):
+                    messages.error(request, 'You must be an developer or operator to start this configuration')
+                    return redirect(conf.get_absolute_url())
                 if conf.start_device():
                     messages.success(request, conf.message)
                 else:
                 conf = get_object_or_404(Configuration, pk=id_conf)
+                if not is_developer(request.user) and not is_operator(request.user):
+                    messages.error(request, 'You must be an developer or operator to stop this configuration')
+                    return redirect(conf.get_absolute_url())
                 if conf.stop_device():
                     messages.success(request, conf.message)
                 else:

volumes/sirm/apps/pedestal/views.py +18 0

             from .models import PedestalConfiguration
             from .forms import PedestalConfigurationForm, PedestalImportForm
+            def is_developer(user):
+                groups = [str(g.name) for g in user.groups.all()]
+                #return 'Developer' in groups or user.is_staff
+                return 'Developer' in groups or user.is_superuser
+            def is_operator(user):
+                groups = [str(g.name) for g in user.groups.all()]
+                #return 'Operator' in groups or user.is_staff
+                return 'Operator' in groups or user.is_superuser
             def conf(request, conf_id):
                 conf = get_object_or_404(PedestalConfiguration, pk=conf_id)
+                if not is_developer(request.user):
+                    messages.error(request, 'You must be an developer to edit this configuration')
+                    return redirect(conf.get_absolute_url())
                 if request.method=='GET':
                 conf = get_object_or_404(PedestalConfiguration, pk=conf_id)
+                if not is_developer(request.user) and not is_operator(request.user):
+                    messages.error(request, 'You must be an developer or operator to reset this pedestal')
+                    return redirect(conf.get_absolute_url())
                 if conf.reset_device():
                     messages.success(request, conf.message)
                 else:

volumes/sirm/apps/usrp_rx/views.py +14 -2

             from .models import USRPRXConfiguration
             from .forms import USRPRXConfigurationForm, USRPRXImportForm
+            def is_developer(user):
+                groups = [str(g.name) for g in user.groups.all()]
+                #return 'Developer' in groups or user.is_staff
+                return 'Developer' in groups or user.is_superuser
+            def is_operator(user):
+                groups = [str(g.name) for g in user.groups.all()]
+                #return 'Operator' in groups or user.is_staff
+                return 'Operator' in groups or user.is_superuser
             def conf(request, conf_id):
                 conf = get_object_or_404(USRPRXConfiguration, pk=conf_id)
-                if request.method=='GET':
+                if not is_developer(request.user):
+                    messages.error(request, 'You must be an developer to edit this configuration')
+                    return redirect(conf.get_absolute_url())
+                if request.method=='GET':
                     form = USRPRXConfigurationForm(instance=conf)
                 elif request.method=='POST':
                     line_data = {}
                     conf_data = {}
                     clock_data = {}

volumes/sirm/apps/usrp_tx/views.py +15 0

             from .forms import USRPTXConfigurationForm, USRPTXImportForm
             from .validations import validation_usrp_tx_code
+            def is_developer(user):
+                groups = [str(g.name) for g in user.groups.all()]
+                #return 'Developer' in groups or user.is_staff
+                return 'Developer' in groups or user.is_superuser
+            def is_operator(user):
+                groups = [str(g.name) for g in user.groups.all()]
+                #return 'Operator' in groups or user.is_staff
+                return 'Operator' in groups or user.is_superuser
             def conf(request, conf_id):
                 conf = get_object_or_404(USRPTXConfiguration, pk=conf_id)
+                if not is_developer(request.user):
+                    messages.error(request, 'You must be an developer to edit this configuration')
+                    return redirect(conf.get_absolute_url())
                 if request.method=='GET':
                     form = USRPTXConfigurationForm(instance=conf)

volumes/sirm/apps/accounts/management/commands/createsuperuser_if_none_exists.py removed 0 -26

	Site-wide shortcuts
/	Use quick search box
g h	Goto home page
g g	Goto my private gists page
g G	Goto my public gists page
g 0-9	Goto bookmarked items from 0-9
n r	New repository page
n g	New gist page

	Repositories
g s	Goto summary page
g c	Goto changelog page
g f	Goto files page
g F	Goto files page with file search activated
g p	Goto pull requests page
g o	Goto repository settings
g O	Goto repository access permissions settings
t s	Toggle sidebar on some pages