openwisp-controller/openwisp_controller/config/migrations/__init__.py at 8c9efc8beb34a7aabcdc5e747d62a8b0e759c993 · openwisp/openwisp-controller · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
import subprocess

from django.contrib.auth.models import Permission
from swapper import load_model

from ...migrations import create_default_permissions, get_swapped_model


def update_vpn_dhparam_length(apps, schema_editor):
    vpn_model = get_swapped_model(apps, "config", "Vpn")
    for vpn in vpn_model.objects.all().iterator():
        if len(vpn.dh) < 424:
            print(
                (
                    "\n  Generating a new 2048 bit DH key for "
                    f"{vpn.name}, this may take a while..."
                ),
                end="",
            )
            vpn.dh = subprocess.check_output(
                "openssl dhparam 2048 2> /dev/null", shell=True
            ).decode("utf-8")
            vpn.save()


def assign_permissions_to_groups(apps, schema_editor):
    create_default_permissions(apps, schema_editor)
    operators_and_admins_can_change = ["device", "config", "template"]
    operators_read_only_admins_manage = ["vpn"]
    manage_operations = ["add", "change", "view", "delete"]
    Group = get_swapped_model(apps, "openwisp_users", "Group")

    try:
        admin = Group.objects.get(name="Administrator")
        operator = Group.objects.get(name="Operator")
    # consider failures custom cases
    # that do not have to be dealt with
    except Group.DoesNotExist:
        return

    for model_name in operators_and_admins_can_change:
        for operation in manage_operations:
            permission = Permission.objects.get(
                codename="{}_{}".format(operation, model_name)
            )
            admin.permissions.add(permission.pk)
            operator.permissions.add(permission.pk)

    for model_name in operators_read_only_admins_manage:
        try:
            permission = Permission.objects.get(codename="view_{}".format(model_name))
            operator.permissions.add(permission.pk)
        except Permission.DoesNotExist:
            pass
        for operation in manage_operations:
            admin.permissions.add(
                Permission.objects.get(
                    codename="{}_{}".format(operation, model_name)
                ).pk
            )


def assign_devicegroup_permissions_to_groups(apps, schema_editor):
    create_default_permissions(apps, schema_editor)
    operator_and_admin_operations = ["add", "change", "delete", "view"]
    Group = get_swapped_model(apps, "openwisp_users", "Group")

    try:
        admin = Group.objects.get(name="Administrator")
        operator = Group.objects.get(name="Operator")
    # consider failures custom cases
    # that do not have to be dealt with
    except Group.DoesNotExist:
        return

    for operation in operator_and_admin_operations:
        permission = Permission.objects.get(
            codename="{}_{}".format(operation, "devicegroup")
        )
        admin.permissions.add(permission.pk)
        operator.permissions.add(permission.pk)


def assign_organization_config_settings_permissions_to_groups(apps, schema_editor):
    create_default_permissions(apps, schema_editor)
    operator_operations = ["view"]
    admin_operations = operator_operations + ["change"]
    Group = get_swapped_model(apps, "openwisp_users", "Group")
    try:
        admin = Group.objects.get(name="Administrator")
        operator = Group.objects.get(name="Operator")
    # consider failures custom cases
    # that do not have to be dealt with
    except Group.DoesNotExist:
        return
    for operation in admin_operations:
        permission = Permission.objects.get(
            codename="{}_{}".format(operation, "organizationconfigsettings")
        )
        if operation in operator_operations:
            operator.permissions.add(permission.pk)
        admin.permissions.add(permission.pk)


def populate_organization_allowed_device(apps, schema_editor):
    organization_model = load_model("openwisp_users", "Organization")
    org_limit_model = load_model("config", "OrganizationLimits")
    orgs = organization_model.objects.all().select_related("config_limits")
    for org in orgs:
        if not hasattr(org, "config_limits"):
            org_limit_model.post_save_handler(instance=org, created=True)