U
    ܌f!                     @   s:   d dl m Z mZ d dlT d dlmZ G dd dejZdS )    )datetime	timedelta)*)	cmf_auditc                       s   e Zd ZdZejjdg Zdd Z fddZe	dddZ
edd Zedd Ze fddZe fddZe fddZe fddZe	eddddddd Z  ZS ) CmfAuditTaudit_eventc                 O   s   t ddd d S )Nu>   Невозможно удалить запись Аудита!Tabort)	cmf_alertselfargskwargs r   ./cmf/models/cmf_audit.pydelete   s    zCmfAudit.deletec                    s$   | j rt j||S tddd d S )NuJ   Невозможно редактировать запись Аудита!Tr   )Zis_newsupersaver
   r   	__class__r   r   r      s    zCmfAudit.saveokN Fr   c                 C   s  t jr
d S |r(t|tr|}qH|jj}n t jr:t jjj}ntj	 jj}|rft|tr\|}qj|jj}n|}|sr|}|
dr|}|dkrd}d }tjrtjd }|sg }|
dkr|dkrd}
d|  } |
dkr|dkrd	}
d
|  } |
dkr t|jdkst|jdkr d}
d|  } |rT|
dkrTt jrTt jt j	krTd|  } d}
| ||||||||||
d}|	rtjf |}t  |  W 5 Q R X d S t j| d S )Nz	CmfAudit:r   u   Таблица Аудитаr   )	CmfPerson   Zuser_)ZCmfPersonGroupZCmfRoleZ
CmfOrgUnitZCmfProjectRoleZCmfProjectPermSchemeRuleZCmfProjectPermSchemeZCmfAccessListZCmfAccessRuleZCmfSecurityLevelRuleZCmfSecurityLevelSchemeZCmfSecurityLevel   Zperm_)defaultZstaticZno_aclr      Zcfg_Zadmin_)operatecmf_model_nameresult_status
cmf_authorparent	client_ip
audit_datahtml_diff_dataparent_nameparent_codesecurity_level)gZimport_mode
isinstancestridvaluecurrent_usermodelsr   Zsystem_person
startswithZrequestZaccess_routecmfutilZget_model_by_nameZacl_typeZacl_default_user_policyZacl_admin_modeZcurrent_personr   disable_aclr   deferred_audit_listappend)r   r   r   r    r!   r#   r$   r%   r&   Zcurrent_transactionr'   Zcheck_is_adminZcmf_author_idZ	parent_idr"   r   auditr   r   r   r      sr    








&

zCmfAudit.audit_eventc              	   C   sp   t  ^ tjD ]P}|dd }|r<t|tr<t j|dd}|sH|d }||d< tj	f |
  qW 5 Q R X d S )Nr!   T)Zinclude_deletedr    )r0   r1   r(   r2   getr)   r*   Zget_obj_by_idr.   r   r   )clsr   r!   r   r   r   apply_deferred_auditq   s    

zCmfAudit.apply_deferred_auditc                 C   s   t jjddstddd d S )NZIBAdmins)Z
group_codeu   Просматривать Аудит безопасности разрешено только Администраторам ИБ из группы IBAdminsTr   )r(   r-   Zin_person_groupr
   )r6   r   r   r   _check_perm_admin_ib~   s    zCmfAudit._check_perm_admin_ibc                    sJ   d|krg |d< |d  d t j||}|rF|d jdkrF|   |S NZfieldsr'   r   )r3   r   listr'   r8   r6   r   r   resr   r   r   r:      s    zCmfAudit.listc                    sJ   d|krg |d< |d  d t j||}|rF|d jdkrF|   |S r9   )r3   r   slistr'   r8   r;   r   r   r   r=      s    zCmfAudit.slistc                    sF   d|krg |d< |d  d t j||}|rB|jdkrB|   |S r9   )r3   r   r5   r'   r8   r;   r   r   r   r5      s    zCmfAudit.getc                    sF   d|krg |d< |d  d t j||}|rB|jdkrB|   |S r9   )r3   r   sgetr'   r8   r;   r   r   r   r>      s    zCmfAudit.sgetu4   Удаление устаревшего аудитаz@daily)Z	only_oncedescriptionZ
system_jobZschedulec                  C   sf   t jjj} | sd S t t| d }dd|g}tjj	|ddgd}|sHqb|D ]}|
  qLt  q.d S )N)ZdaysZcmf_created_at<r   d   )filterslice)r(   Zglobal_settingsZaudit_storage_durationr,   r   Znowr   r.   r   r:   r   Z
cmf_commit)Zdays_durationZend_dtrB   Zoutdated_auditZeventr   r   r   cron_delete_outdated_audit   s    


z#CmfAudit.cron_delete_outdated_audit)
r   NNNr   NNFr   T)__name__
__module____qualname__Z	api_allowr   r   Zapi_methodsr   r   staticmethodr   classmethodr7   r8   r:   r=   r5   r>   Zcmf_deferred_jobrD   __classcell__r   r   r   r   r      s>                [





r   N)r   r   Zcmf.includeZ
cmf.fieldsr   r   r   r   r   r   <module>   s   