# Copyright 2012 Nebula, Inc.
#
# Licensed under the Apache License, Version 2.0 (the "License"); you may
# not use this file except in compliance with the License. You may obtain
# a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
# License for the specific language governing permissions and limitations
# under the License.
import logging
from django.conf import settings # noqa
from django.core.urlresolvers import reverse # noqa
from django.utils.translation import ugettext_lazy as _ # noqa
from horizon import tables
from openstack_dashboard import api
from openstack_dashboard.utils import filters
LOG = logging.getLogger(__name__)
class DeleteGroup(tables.DeleteAction):
data_type_singular = _("Security Group")
[docs] data_type_plural = _("Security Groups")
def allowed(self, request, security_group=None):
if not security_group:
[docs] return True
return security_group.name != 'default'
def delete(self, request, obj_id):
api.network.security_group_delete(request, obj_id)
[docs]
class CreateGroup(tables.LinkAction):
name = "create"
[docs] verbose_name = _("Create Security Group")
url = "horizon:project:access_and_security:security_groups:create"
classes = ("ajax-modal", "btn-create")
class EditGroup(tables.LinkAction):
name = "edit"
[docs] verbose_name = _("Edit Security Group")
url = "horizon:project:access_and_security:security_groups:update"
classes = ("ajax-modal", "btn-edit")
def allowed(self, request, security_group=None):
if not security_group:
[docs] return True
return security_group.name != 'default'
class EditRules(tables.LinkAction):
name = "edit_rules"
[docs] verbose_name = _("Edit Rules")
url = "horizon:project:access_and_security:security_groups:detail"
classes = ("btn-edit")
class SecurityGroupsTable(tables.DataTable):
name = tables.Column("name", verbose_name=_("Name"))
[docs] description = tables.Column("description", verbose_name=_("Description"))
def sanitize_id(self, obj_id):
return filters.get_int_or_uuid(obj_id)
[docs]
class Meta:
name = "security_groups"
[docs] verbose_name = _("Add Rule")
url = "horizon:project:access_and_security:security_groups:add_rule"
classes = ("ajax-modal", "btn-create")
def get_link_url(self):
return reverse(self.url, args=[self.table.kwargs['security_group_id']])
[docs]
class DeleteRule(tables.DeleteAction):
data_type_singular = _("Rule")
[docs] data_type_plural = _("Rules")
def delete(self, request, obj_id):
api.network.security_group_rule_delete(request, obj_id)
[docs]
def get_success_url(self, request):
sg_id = self.table.kwargs['security_group_id']
[docs] return reverse("horizon:project:access_and_security:"
"security_groups:detail", args=[sg_id])
def get_remote(rule):
if 'cidr' in rule.ip_range:
[docs] if rule.ip_range['cidr'] is None:
range = '::/0' if rule.ethertype == 'IPv6' else '0.0.0.0/0'
else:
range = rule.ip_range['cidr']
return range + ' (CIDR)'
elif 'name' in rule.group:
return rule.group['name']
else:
return None
def get_port_range(rule):
ip_proto = rule.ip_protocol
[docs] if rule.from_port == rule.to_port:
return check_rule_template(rule.from_port, ip_proto)
else:
return (u"%(from)s - %(to)s" %
{'from': check_rule_template(rule.from_port, ip_proto),
'to': check_rule_template(rule.to_port, ip_proto)})
def filter_direction(direction):
if direction is None or direction.lower() == 'ingress':
[docs] return _('Ingress')
else:
return _('Egress')
def filter_protocol(protocol):
if protocol is None:
[docs] return _('Any')
return unicode.upper(protocol)
def check_rule_template(port, ip_proto):
rules_dict = getattr(settings, 'SECURITY_GROUP_RULES', {})
[docs] if not rules_dict:
return port
templ_rule = filter(lambda rule: str(port) == rule['from_port']
and str(port) == rule['to_port']
and ip_proto == rule['ip_protocol'],
[rule for rule in rules_dict.values()])
if templ_rule:
return u"%(from_port)s (%(name)s)" % templ_rule[0]
return port
class RulesTable(tables.DataTable):
direction = tables.Column("direction",
[docs] verbose_name=_("Direction"),
filters=(filter_direction,))
ethertype = tables.Column("ethertype",
verbose_name=_("Ether Type"))
protocol = tables.Column("ip_protocol",
verbose_name=_("IP Protocol"),
filters=(filter_protocol,))
port_range = tables.Column(get_port_range,
verbose_name=_("Port Range"))
remote = tables.Column(get_remote, verbose_name=_("Remote"))
def sanitize_id(self, obj_id):
return filters.get_int_or_uuid(obj_id)
[docs]
def get_object_display(self, rule):
return unicode(rule)
[docs]
class Meta:
name = "rules"