import os from django.db import models from django.db.models import Q from core.models import PlCoreBase,PlCoreBaseManager,PlCoreBaseDeletionManager from core.models import Tag from django.contrib.contenttypes import generic from geoposition.fields import GeopositionField from core.acl import AccessControlList from planetstack.config import Config config = Config() class ControllerLinkDeletionManager(PlCoreBaseDeletionManager): def get_queryset(self): parent=super(ControllerLinkDeletionManager, self) try: backend_type = config.observer_backend_type except AttributeError: backend_type = None parent_queryset = parent.get_queryset() if hasattr(parent, "get_queryset") else parent.get_query_set() if (backend_type): return parent_queryset.filter(Q(controller__backend_type=backend_type)) else: return parent_queryset # deprecated in django 1.7 in favor of get_queryset(). def get_query_set(self): return self.get_queryset() class ControllerDeletionManager(PlCoreBaseDeletionManager): def get_queryset(self): parent=super(ControllerDeletionManager, self) try: backend_type = config.observer_backend_type except AttributeError: backend_type = None parent_queryset = parent.get_queryset() if hasattr(parent, "get_queryset") else parent.get_query_set() if backend_type: return parent_queryset.filter(Q(backend_type=backend_type)) else: return parent_queryset # deprecated in django 1.7 in favor of get_queryset(). def get_query_set(self): return self.get_queryset() class ControllerLinkManager(PlCoreBaseManager): def get_queryset(self): parent=super(ControllerLinkManager, self) try: backend_type = config.observer_backend_type except AttributeError: backend_type = None parent_queryset = parent.get_queryset() if hasattr(parent, "get_queryset") else parent.get_query_set() if backend_type: return parent_queryset.filter(Q(controller__backend_type=backend_type)) else: return parent_queryset # deprecated in django 1.7 in favor of get_queryset(). def get_query_set(self): return self.get_queryset() class ControllerManager(PlCoreBaseManager): def get_queryset(self): parent=super(ControllerManager, self) try: backend_type = config.observer_backend_type except AttributeError: backend_type = None parent_queryset = parent.get_queryset() if hasattr(parent, "get_queryset") else parent.get_query_set() if backend_type: return parent_queryset.filter(Q(backend_type=backend_type)) else: return parent_queryset # deprecated in django 1.7 in favor of get_queryset(). def get_query_set(self): return self.get_queryset() class Site(PlCoreBase): """ A logical grouping of Nodes that are co-located at the same geographic location, which also typically corresponds to the Nodes' location in the physical network. """ name = models.CharField(max_length=200, help_text="Name for this Site") site_url = models.URLField(null=True, blank=True, max_length=512, help_text="Site's Home URL Page") enabled = models.BooleanField(default=True, help_text="Status for this Site") location = GeopositionField() longitude = models.FloatField(null=True, blank=True) latitude = models.FloatField(null=True, blank=True) login_base = models.CharField(max_length=50, unique=True, help_text="Prefix for Slices associated with this Site") is_public = models.BooleanField(default=True, help_text="Indicates the visibility of this site to other members") abbreviated_name = models.CharField(max_length=80) #deployments = models.ManyToManyField('Deployment', blank=True, related_name='sites') deployments = models.ManyToManyField('Deployment', through='SiteDeployment', blank=True, help_text="Select which sites are allowed to host nodes in this deployment", related_name='sites') tags = generic.GenericRelation(Tag) def __unicode__(self): return u'%s' % (self.name) def can_update(self, user): if user.is_readonly: return False if user.is_admin: return True site_privs = SitePrivilege.objects.filter(user=user, site=self) for site_priv in site_privs: if site_priv.role.role == 'pi': return True return False @staticmethod def select_by_user(user): if user.is_admin: qs = Site.objects.all() else: site_ids = [sp.site.id for sp in SitePrivilege.objects.filter(user=user)] site_ids.append(user.site.id) qs = Site.objects.filter(id__in=site_ids) return qs class SiteRole(PlCoreBase): ROLE_CHOICES = (('admin','Admin'),('pi','PI'),('tech','Tech'),('billing','Billing')) role = models.CharField(choices=ROLE_CHOICES, unique=True, max_length=30) def __unicode__(self): return u'%s' % (self.role) class SitePrivilege(PlCoreBase): user = models.ForeignKey('User', related_name='siteprivileges') site = models.ForeignKey('Site', related_name='siteprivileges') role = models.ForeignKey('SiteRole',related_name='siteprivileges') def __unicode__(self): return u'%s %s %s' % (self.site, self.user, self.role) def save(self, *args, **kwds): super(SitePrivilege, self).save(*args, **kwds) def delete(self, *args, **kwds): super(SitePrivilege, self).delete(*args, **kwds) def can_update(self, user): return self.site.can_update(user) @staticmethod def select_by_user(user): if user.is_admin: qs = SitePrivilege.objects.all() else: sp_ids = [sp.id for sp in SitePrivilege.objects.filter(user=user)] qs = SitePrivilege.objects.filter(id__in=sp_ids) return qs class Deployment(PlCoreBase): #objects = Controllermanager() #deleted_objects = DeploymentDeletionManager() name = models.CharField(max_length=200, unique=True, help_text="Name of the Deployment") #admin_user = models.CharField(max_length=200, null=True, blank=True, help_text="Username of an admin user at this deployment") #admin_password = models.CharField(max_length=200, null=True, blank=True, help_text="Password of theadmin user at this deployment") #admin_tenant = models.CharField(max_length=200, null=True, blank=True, help_text="Name of the tenant the admin user belongs to") #auth_url = models.CharField(max_length=200, null=True, blank=True, help_text="Auth url for the deployment") #backend_type = models.CharField(max_length=200, null=True, blank=True, help_text="Type of deployment, e.g. EC2, OpenStack, or OpenStack version") #availability_zone = models.CharField(max_length=200, null=True, blank=True, help_text="OpenStack availability zone") # smbaker: the default of 'allow all' is intended for evolutions of existing # deployments. When new deployments are created via the GUI, they are # given a default of 'allow site ' accessControl = models.TextField(max_length=200, blank=False, null=False, default="allow all", help_text="Access control list that specifies which sites/users may use nodes in this deployment") def get_acl(self): return AccessControlList(self.accessControl) def test_acl(self, slice=None, user=None): potential_users=[] if user: potential_users.append(user) if slice: potential_users.append(slice.creator) for priv in slice.sliceprivileges.all(): if priv.user not in potential_users: potential_users.append(priv.user) acl = self.get_acl() for user in potential_users: if acl.test(user) == "allow": return True return False @staticmethod def select_by_acl(user): ids = [] for deployment in Deployment.objects.all(): acl = deployment.get_acl() if acl.test(user) == "allow": ids.append(deployment.id) return Deployment.objects.filter(id__in=ids) def __unicode__(self): return u'%s' % (self.name) class DeploymentRole(PlCoreBase): #objects = DeploymentLinkManager() #deleted_objects = DeploymentLinkDeletionManager() ROLE_CHOICES = (('admin','Admin'),) role = models.CharField(choices=ROLE_CHOICES, unique=True, max_length=30) def __unicode__(self): return u'%s' % (self.role) class DeploymentPrivilege(PlCoreBase): #objects = DeploymentLinkManager() #deleted_objects = DeploymentLinkDeletionManager() user = models.ForeignKey('User', related_name='deploymentprivileges') deployment = models.ForeignKey('Deployment', related_name='deploymentprivileges') role = models.ForeignKey('DeploymentRole',related_name='deploymentprivileges') def __unicode__(self): return u'%s %s %s' % (self.deployment, self.user, self.role) def can_update(self, user): if user.is_readonly: return False if user.is_admin: return True dprivs = DeploymentPrivilege.objects.filter(user=user) for dpriv in dprivs: if dpriv.role.role == 'admin': return True return False @staticmethod def select_by_user(user): if user.is_admin: qs = DeploymentPrivilege.objects.all() else: dpriv_ids = [dp.id for dp in DeploymentPrivilege.objects.filter(user=user)] qs = DeploymentPrivilege.objects.filter(id__in=dpriv_ids) return qs class ControllerRole(PlCoreBase): #objects = ControllerLinkManager() #deleted_objects = ControllerLinkDeletionManager() ROLE_CHOICES = (('admin','Admin'),) role = models.CharField(choices=ROLE_CHOICES, unique=True, max_length=30) def __unicode__(self): return u'%s' % (self.role) class Controller(PlCoreBase): objects = ControllerManager() deleted_objects = ControllerDeletionManager() name = models.CharField(max_length=200, unique=True, help_text="Name of the Controller") version = models.CharField(max_length=200, help_text="Controller version") backend_type = models.CharField(max_length=200, null=True, blank=True, help_text="Type of compute controller, e.g. EC2, OpenStack, or OpenStack version") auth_url = models.CharField(max_length=200, null=True, blank=True, help_text="Auth url for the compute controller") admin_user = models.CharField(max_length=200, null=True, blank=True, help_text="Username of an admin user at this controller") admin_password = models.CharField(max_length=200, null=True, blank=True, help_text="Password of theadmin user at this controller") admin_tenant = models.CharField(max_length=200, null=True, blank=True, help_text="Name of the tenant the admin user belongs to") def __unicode__(self): return u'%s %s %s' % (self.name, self.backend_type, self.version) def can_update(self, user): if user.is_readonly: return False if user.is_admin: return True return False class SiteDeployment(PlCoreBase): objects = ControllerLinkManager() deleted_objects = ControllerLinkDeletionManager() site = models.ForeignKey(Site,related_name='sitedeployments') deployment = models.ForeignKey(Deployment,related_name='sitedeployments') controller = models.ForeignKey(Controller, null=True, blank=True, related_name='sitedeployments') availability_zone = models.CharField(max_length=200, null=True, blank=True, help_text="OpenStack availability zone") def __unicode__(self): return u'%s %s' % (self.deployment, self.site) class ControllerSite(PlCoreBase): site = models.ForeignKey(Site,related_name='controllersite') controller = models.ForeignKey(Controller, null=True, blank=True, related_name='controllersite') tenant_id = models.CharField(null=True, blank=True, max_length=200, db_index=True, help_text="Keystone tenant id")