planetstack/core/models/site.py

   1 import os
   2 from django.db import models
   3 from core.models import PlCoreBase,PlCoreBaseManager,PlCoreBaseDeletionManager
   4 from core.models import Tag
   5 from django.contrib.contenttypes import generic
   6 from geoposition.fields import GeopositionField
   7 from core.acl import AccessControlList
   8 from planetstack.config import Config
   9
  10 config = Config()
  11
  12 class DeploymentLinkDeletionManager(PlCoreBaseDeletionManager):
  13     def get_queryset(self):
  14         parent=super(DeploymentLinkDeletionManager, self)
  15         if hasattr(parent, "get_queryset"):
  16             return parent.get_queryset().filter(Q(deployment__backend_type=config.observer_backend_type)|Q(backend_type=None))
  17         else:
  18             return parent.get_queryset().filter(Q(deployment__backend_type=config.observer_backend_type)|Q(backend_type=None))
  19
  20     # deprecated in django 1.7 in favor of get_queryset().
  21     def get_query_set(self):
  22         return self.get_queryset()
  23
  24
  25 class DeploymentDeletionManager(PlCoreBaseDeletionManager):
  26     def get_queryset(self):
  27         parent=super(DeploymentDeletionManager, self)
  28         if hasattr(parent, "get_queryset"):
  29             return parent.get_queryset().filter(Q(backend_type=config.observer_backend_type)|Q(backend_type=None))
  30         else:
  31             return parent.get_queryset().filter(Q(backend_type=config.observer_backend_type)|Q(backend_type=None))
  32
  33     # deprecated in django 1.7 in favor of get_queryset().
  34     def get_query_set(self):
  35         return self.get_queryset()
  36
  37 class DeploymentLinkManager(PlCoreBaseManager):
  38     def get_queryset(self):
  39         parent=super(DeploymentLinkManager, self)
  40         if hasattr(parent, "get_queryset"):
  41             return parent.get_queryset().filter(Q(deployment__backend_type=config.observer_backend_type)|Q(backend_type=None))
  42         else:
  43             return parent.get_queryset().filter(Q(deployment__backend_type=config.observer_backend_type)|Q(backend_type=None))
  44
  45     # deprecated in django 1.7 in favor of get_queryset().
  46     def get_query_set(self):
  47         return self.get_queryset()
  48
  49
  50 class DeploymentManager(PlCoreBaseManager):
  51     def get_queryset(self):
  52         parent=super(DeploymentManager, self)
  53         if hasattr(parent, "get_queryset"):
  54             return parent.get_queryset().filter(Q(backend_type=config.observer_backend_type)|Q(backend_type=None))
  55         else:
  56             return parent.get_queryset().filter(Q(backend_type=config.observer_backend_type)|Q(backend_type=None))
  57
  58     # deprecated in django 1.7 in favor of get_queryset().
  59     def get_query_set(self):
  60         return self.get_queryset()
  61
  62 class Site(PlCoreBase):
  63     """
  64         A logical grouping of Nodes that are co-located at the same geographic location, which also typically corresponds to the Nodes' location in the physical network.
  65     """
  66     name = models.CharField(max_length=200, help_text="Name for this Site")
  67     site_url = models.URLField(null=True, blank=True, max_length=512, help_text="Site's Home URL Page")
  68     enabled = models.BooleanField(default=True, help_text="Status for this Site")
  69     location = GeopositionField()
  70     longitude = models.FloatField(null=True, blank=True)
  71     latitude = models.FloatField(null=True, blank=True)
  72     login_base = models.CharField(max_length=50, unique=True, help_text="Prefix for Slices associated with this Site")
  73     is_public = models.BooleanField(default=True, help_text="Indicates the visibility of this site to other members")
  74     abbreviated_name = models.CharField(max_length=80)
  75
  76     #deployments = models.ManyToManyField('Deployment', blank=True, related_name='sites')
  77     deployments = models.ManyToManyField('Deployment', through='SiteDeployments', blank=True, help_text="Select which sites are allowed to host nodes in this deployment", related_name='sites')
  78     tags = generic.GenericRelation(Tag)
  79
  80     def __unicode__(self):  return u'%s' % (self.name)
  81
  82     def can_update(self, user):
  83         if user.is_readonly:
  84             return False
  85         if user.is_admin:
  86             return True
  87         site_privs = SitePrivilege.objects.filter(user=user, site=self)
  88         for site_priv in site_privs:
  89             if site_priv.role.role == 'pi':
  90                 return True
  91         return False
  92
  93     @staticmethod
  94     def select_by_user(user):
  95         if user.is_admin:
  96             qs = Site.objects.all()
  97         else:
  98             site_ids = [sp.site.id for sp in SitePrivilege.objects.filter(user=user)]
  99             site_ids.append(user.site.id)
 100             qs = Site.objects.filter(id__in=site_ids)
 101         return qs
 102
 103
 104 class SiteRole(PlCoreBase):
 105
 106     ROLE_CHOICES = (('admin','Admin'),('pi','PI'),('tech','Tech'),('billing','Billing'))
 107     role = models.CharField(choices=ROLE_CHOICES, unique=True, max_length=30)
 108
 109     def __unicode__(self):  return u'%s' % (self.role)
 110
 111 class SitePrivilege(PlCoreBase):
 112
 113     user = models.ForeignKey('User', related_name='site_privileges')
 114     site = models.ForeignKey('Site', related_name='site_privileges')
 115     role = models.ForeignKey('SiteRole')
 116
 117     def __unicode__(self):  return u'%s %s %s' % (self.site, self.user, self.role)
 118
 119     def save(self, *args, **kwds):
 120         super(SitePrivilege, self).save(*args, **kwds)
 121
 122     def delete(self, *args, **kwds):
 123         super(SitePrivilege, self).delete(*args, **kwds)
 124
 125     def can_update(self, user):
 126         return self.site.can_update(user)
 127
 128     @staticmethod
 129     def select_by_user(user):
 130         if user.is_admin:
 131             qs = SitePrivilege.objects.all()
 132         else:
 133             sp_ids = [sp.id for sp in SitePrivilege.objects.filter(user=user)]
 134             qs = SitePrivilege.objects.filter(id__in=sp_ids)
 135         return qs
 136
 137 class Deployment(PlCoreBase):
 138     objects = DeploymentManager()
 139     deleted_objects = DeploymentDeletionManager()
 140     name = models.CharField(max_length=200, unique=True, help_text="Name of the Deployment")
 141     admin_user = models.CharField(max_length=200, null=True, blank=True, help_text="Username of an admin user at this deployment")
 142     admin_password = models.CharField(max_length=200, null=True, blank=True, help_text="Password of theadmin user at this deployment")\r
 143     admin_tenant = models.CharField(max_length=200, null=True, blank=True, help_text="Name of the tenant the admin user belongs to")\r
 144     auth_url = models.CharField(max_length=200, null=True, blank=True, help_text="Auth url for the deployment")
 145     backend_type = models.CharField(max_length=200, null=True, blank=True, help_text="Type of deployment, e.g. EC2, OpenStack, or OpenStack version")
 146
 147     # smbaker: the default of 'allow all' is intended for evolutions of existing
 148     #    deployments. When new deployments are created via the GUI, they are
 149     #    given a default of 'allow site <site_of_creator>'
 150     accessControl = models.TextField(max_length=200, blank=False, null=False, default="allow all",
 151                                      help_text="Access control list that specifies which sites/users may use nodes in this deployment")
 152
 153     def get_acl(self):
 154         return AccessControlList(self.accessControl)
 155
 156     def test_acl(self, slice=None, user=None):
 157         potential_users=[]
 158
 159         if user:
 160             potential_users.append(user)
 161
 162         if slice:
 163             potential_users.append(slice.creator)
 164             for priv in slice.slice_privileges.all():
 165                 if priv.user not in potential_users:
 166                     potential_users.append(priv.user)
 167
 168         acl = self.get_acl()
 169         for user in potential_users:
 170             if acl.test(user) == "allow":
 171                 return True
 172
 173         return False
 174
 175     @staticmethod
 176     def select_by_acl(user):
 177         ids = []
 178         for deployment in Deployment.objects.all():
 179             acl = deployment.get_acl()
 180             if acl.test(user) == "allow":
 181                 ids.append(deployment.id)
 182
 183         return Deployment.objects.filter(id__in=ids)
 184
 185     def __unicode__(self):  return u'%s' % (self.name)
 186
 187     @staticmethod
 188     def select_by_user(user):
 189         return Deployment.objects.all()
 190
 191 class DeploymentRole(PlCoreBase):
 192     objects = DeploymentLinkManager()
 193     deleted_objects = DeploymentLinkDeletionManager()
 194
 195     ROLE_CHOICES = (('admin','Admin'),)
 196     role = models.CharField(choices=ROLE_CHOICES, unique=True, max_length=30)
 197
 198     def __unicode__(self):  return u'%s' % (self.role)
 199
 200 class DeploymentPrivilege(PlCoreBase):
 201     objects = DeploymentLinkManager()
 202     deleted_objects = DeploymentLinkDeletionManager()
 203
 204     user = models.ForeignKey('User', related_name='deployment_privileges')
 205     deployment = models.ForeignKey('Deployment', related_name='deployment_privileges')
 206     role = models.ForeignKey('DeploymentRole')
 207
 208     def __unicode__(self):  return u'%s %s %s' % (self.deployment, self.user, self.role)
 209
 210     def can_update(self, user):
 211         if user.is_readonly:
 212             return False
 213         if user.is_admin:
 214             return True
 215         dprivs = DeploymentPrivilege.objects.filter(user=user)
 216         for dpriv in dprivs:
 217             if dpriv.role.role == 'admin':
 218                 return True
 219         return False
 220
 221     @staticmethod
 222     def select_by_user(user):
 223         if user.is_admin:
 224             qs = DeploymentPrivilege.objects.all()
 225         else:
 226             dpriv_ids = [dp.id for dp in DeploymentPrivilege.objects.filter(user=user)]
 227             qs = DeploymentPrivilege.objects.filter(id__in=dpriv_ids)
 228         return qs
 229
 230 class SiteDeployments(PlCoreBase):
 231     objects = DeploymentLinkManager()
 232     deleted_objects = DeploymentLinkDeletionManager()
 233
 234     site = models.ForeignKey(Site)
 235     deployment = models.ForeignKey(Deployment)
 236     tenant_id = models.CharField(null=True, blank=True, max_length=200, help_text="Keystone tenant id")
 237
 238     @staticmethod
 239     def select_by_user(user):
 240         return SiteDeployments.objects.all()
 241
 242     #class Meta:
 243     #    db_table = 'core_site_deployments'
 244     #    #auto_created = Site
 245