Browse Source
admin: add group management page to admin UI
admin: add group management page to admin UI
Add groups page with CRUD operations, member management, policy attachment, and enable/disable toggle. Register routes in admin handlers and add Groups entry to sidebar navigation.pull/8560/head
Chris Lu
2 days ago
10 changed files with 1199 additions and 15 deletions
-
206weed/admin/dash/group_management.go
-
24weed/admin/dash/types.go
-
17weed/admin/handlers/admin_handlers.go
-
235weed/admin/handlers/group_handlers.go
-
23weed/admin/static/js/iam-utils.js
-
396weed/admin/view/app/groups.templ
-
256weed/admin/view/app/groups_templ.go
-
5weed/admin/view/layout/layout.templ
-
30weed/admin/view/layout/layout_templ.go
-
22weed/credential/credential_manager.go
@ -0,0 +1,206 @@ |
|||||
|
package dash |
||||
|
|
||||
|
import ( |
||||
|
"context" |
||||
|
"fmt" |
||||
|
|
||||
|
"github.com/seaweedfs/seaweedfs/weed/glog" |
||||
|
"github.com/seaweedfs/seaweedfs/weed/pb/iam_pb" |
||||
|
) |
||||
|
|
||||
|
func (s *AdminServer) GetGroups(ctx context.Context) ([]GroupData, error) { |
||||
|
if s.credentialManager == nil { |
||||
|
return nil, fmt.Errorf("credential manager not available") |
||||
|
} |
||||
|
|
||||
|
groupNames, err := s.credentialManager.ListGroups(ctx) |
||||
|
if err != nil { |
||||
|
return nil, fmt.Errorf("failed to list groups: %w", err) |
||||
|
} |
||||
|
|
||||
|
var groups []GroupData |
||||
|
for _, name := range groupNames { |
||||
|
g, err := s.credentialManager.GetGroup(ctx, name) |
||||
|
if err != nil { |
||||
|
glog.V(1).Infof("Failed to get group %s: %v", name, err) |
||||
|
continue |
||||
|
} |
||||
|
status := "enabled" |
||||
|
if g.Disabled { |
||||
|
status = "disabled" |
||||
|
} |
||||
|
groups = append(groups, GroupData{ |
||||
|
Name: g.Name, |
||||
|
MemberCount: len(g.Members), |
||||
|
PolicyCount: len(g.PolicyNames), |
||||
|
Status: status, |
||||
|
Members: g.Members, |
||||
|
PolicyNames: g.PolicyNames, |
||||
|
}) |
||||
|
} |
||||
|
return groups, nil |
||||
|
} |
||||
|
|
||||
|
func (s *AdminServer) GetGroupDetails(ctx context.Context, name string) (*GroupData, error) { |
||||
|
if s.credentialManager == nil { |
||||
|
return nil, fmt.Errorf("credential manager not available") |
||||
|
} |
||||
|
|
||||
|
g, err := s.credentialManager.GetGroup(ctx, name) |
||||
|
if err != nil { |
||||
|
return nil, fmt.Errorf("failed to get group: %w", err) |
||||
|
} |
||||
|
status := "enabled" |
||||
|
if g.Disabled { |
||||
|
status = "disabled" |
||||
|
} |
||||
|
return &GroupData{ |
||||
|
Name: g.Name, |
||||
|
MemberCount: len(g.Members), |
||||
|
PolicyCount: len(g.PolicyNames), |
||||
|
Status: status, |
||||
|
Members: g.Members, |
||||
|
PolicyNames: g.PolicyNames, |
||||
|
}, nil |
||||
|
} |
||||
|
|
||||
|
func (s *AdminServer) CreateGroup(ctx context.Context, name string) (*GroupData, error) { |
||||
|
if s.credentialManager == nil { |
||||
|
return nil, fmt.Errorf("credential manager not available") |
||||
|
} |
||||
|
|
||||
|
group := &iam_pb.Group{Name: name} |
||||
|
if err := s.credentialManager.CreateGroup(ctx, group); err != nil { |
||||
|
return nil, fmt.Errorf("failed to create group: %w", err) |
||||
|
} |
||||
|
glog.V(1).Infof("Created group %s", name) |
||||
|
return &GroupData{ |
||||
|
Name: name, |
||||
|
Status: "enabled", |
||||
|
}, nil |
||||
|
} |
||||
|
|
||||
|
func (s *AdminServer) DeleteGroup(ctx context.Context, name string) error { |
||||
|
if s.credentialManager == nil { |
||||
|
return fmt.Errorf("credential manager not available") |
||||
|
} |
||||
|
if err := s.credentialManager.DeleteGroup(ctx, name); err != nil { |
||||
|
return fmt.Errorf("failed to delete group: %w", err) |
||||
|
} |
||||
|
glog.V(1).Infof("Deleted group %s", name) |
||||
|
return nil |
||||
|
} |
||||
|
|
||||
|
func (s *AdminServer) AddGroupMember(ctx context.Context, groupName, username string) error { |
||||
|
if s.credentialManager == nil { |
||||
|
return fmt.Errorf("credential manager not available") |
||||
|
} |
||||
|
g, err := s.credentialManager.GetGroup(ctx, groupName) |
||||
|
if err != nil { |
||||
|
return fmt.Errorf("failed to get group: %w", err) |
||||
|
} |
||||
|
for _, m := range g.Members { |
||||
|
if m == username { |
||||
|
return nil // already a member
|
||||
|
} |
||||
|
} |
||||
|
g.Members = append(g.Members, username) |
||||
|
if err := s.credentialManager.UpdateGroup(ctx, g); err != nil { |
||||
|
return fmt.Errorf("failed to update group: %w", err) |
||||
|
} |
||||
|
glog.V(1).Infof("Added user %s to group %s", username, groupName) |
||||
|
return nil |
||||
|
} |
||||
|
|
||||
|
func (s *AdminServer) RemoveGroupMember(ctx context.Context, groupName, username string) error { |
||||
|
if s.credentialManager == nil { |
||||
|
return fmt.Errorf("credential manager not available") |
||||
|
} |
||||
|
g, err := s.credentialManager.GetGroup(ctx, groupName) |
||||
|
if err != nil { |
||||
|
return fmt.Errorf("failed to get group: %w", err) |
||||
|
} |
||||
|
found := false |
||||
|
var newMembers []string |
||||
|
for _, m := range g.Members { |
||||
|
if m == username { |
||||
|
found = true |
||||
|
} else { |
||||
|
newMembers = append(newMembers, m) |
||||
|
} |
||||
|
} |
||||
|
if !found { |
||||
|
return fmt.Errorf("user %s is not a member of group %s", username, groupName) |
||||
|
} |
||||
|
g.Members = newMembers |
||||
|
if err := s.credentialManager.UpdateGroup(ctx, g); err != nil { |
||||
|
return fmt.Errorf("failed to update group: %w", err) |
||||
|
} |
||||
|
glog.V(1).Infof("Removed user %s from group %s", username, groupName) |
||||
|
return nil |
||||
|
} |
||||
|
|
||||
|
func (s *AdminServer) AttachGroupPolicy(ctx context.Context, groupName, policyName string) error { |
||||
|
if s.credentialManager == nil { |
||||
|
return fmt.Errorf("credential manager not available") |
||||
|
} |
||||
|
g, err := s.credentialManager.GetGroup(ctx, groupName) |
||||
|
if err != nil { |
||||
|
return fmt.Errorf("failed to get group: %w", err) |
||||
|
} |
||||
|
for _, p := range g.PolicyNames { |
||||
|
if p == policyName { |
||||
|
return nil // already attached
|
||||
|
} |
||||
|
} |
||||
|
g.PolicyNames = append(g.PolicyNames, policyName) |
||||
|
if err := s.credentialManager.UpdateGroup(ctx, g); err != nil { |
||||
|
return fmt.Errorf("failed to update group: %w", err) |
||||
|
} |
||||
|
glog.V(1).Infof("Attached policy %s to group %s", policyName, groupName) |
||||
|
return nil |
||||
|
} |
||||
|
|
||||
|
func (s *AdminServer) DetachGroupPolicy(ctx context.Context, groupName, policyName string) error { |
||||
|
if s.credentialManager == nil { |
||||
|
return fmt.Errorf("credential manager not available") |
||||
|
} |
||||
|
g, err := s.credentialManager.GetGroup(ctx, groupName) |
||||
|
if err != nil { |
||||
|
return fmt.Errorf("failed to get group: %w", err) |
||||
|
} |
||||
|
found := false |
||||
|
var newPolicies []string |
||||
|
for _, p := range g.PolicyNames { |
||||
|
if p == policyName { |
||||
|
found = true |
||||
|
} else { |
||||
|
newPolicies = append(newPolicies, p) |
||||
|
} |
||||
|
} |
||||
|
if !found { |
||||
|
return fmt.Errorf("policy %s is not attached to group %s", policyName, groupName) |
||||
|
} |
||||
|
g.PolicyNames = newPolicies |
||||
|
if err := s.credentialManager.UpdateGroup(ctx, g); err != nil { |
||||
|
return fmt.Errorf("failed to update group: %w", err) |
||||
|
} |
||||
|
glog.V(1).Infof("Detached policy %s from group %s", policyName, groupName) |
||||
|
return nil |
||||
|
} |
||||
|
|
||||
|
func (s *AdminServer) SetGroupStatus(ctx context.Context, groupName string, enabled bool) error { |
||||
|
if s.credentialManager == nil { |
||||
|
return fmt.Errorf("credential manager not available") |
||||
|
} |
||||
|
g, err := s.credentialManager.GetGroup(ctx, groupName) |
||||
|
if err != nil { |
||||
|
return fmt.Errorf("failed to get group: %w", err) |
||||
|
} |
||||
|
g.Disabled = !enabled |
||||
|
if err := s.credentialManager.UpdateGroup(ctx, g); err != nil { |
||||
|
return fmt.Errorf("failed to update group: %w", err) |
||||
|
} |
||||
|
glog.V(1).Infof("Set group %s status to enabled=%v", groupName, enabled) |
||||
|
return nil |
||||
|
} |
||||
@ -0,0 +1,235 @@ |
|||||
|
package handlers |
||||
|
|
||||
|
import ( |
||||
|
"bytes" |
||||
|
"net/http" |
||||
|
"time" |
||||
|
|
||||
|
"github.com/gorilla/mux" |
||||
|
"github.com/seaweedfs/seaweedfs/weed/admin/dash" |
||||
|
"github.com/seaweedfs/seaweedfs/weed/admin/view/app" |
||||
|
"github.com/seaweedfs/seaweedfs/weed/admin/view/layout" |
||||
|
"github.com/seaweedfs/seaweedfs/weed/glog" |
||||
|
) |
||||
|
|
||||
|
type GroupHandlers struct { |
||||
|
adminServer *dash.AdminServer |
||||
|
} |
||||
|
|
||||
|
func NewGroupHandlers(adminServer *dash.AdminServer) *GroupHandlers { |
||||
|
return &GroupHandlers{adminServer: adminServer} |
||||
|
} |
||||
|
|
||||
|
func (h *GroupHandlers) ShowGroups(w http.ResponseWriter, r *http.Request) { |
||||
|
data := h.getGroupsPageData(r) |
||||
|
|
||||
|
var buf bytes.Buffer |
||||
|
component := app.Groups(data) |
||||
|
viewCtx := layout.NewViewContext(r, dash.UsernameFromContext(r.Context()), dash.CSRFTokenFromContext(r.Context())) |
||||
|
layoutComponent := layout.Layout(viewCtx, component) |
||||
|
if err := layoutComponent.Render(r.Context(), &buf); err != nil { |
||||
|
glog.Errorf("Failed to render groups template: %v", err) |
||||
|
w.WriteHeader(http.StatusInternalServerError) |
||||
|
return |
||||
|
} |
||||
|
w.Header().Set("Content-Type", "text/html") |
||||
|
_, _ = w.Write(buf.Bytes()) |
||||
|
} |
||||
|
|
||||
|
func (h *GroupHandlers) GetGroups(w http.ResponseWriter, r *http.Request) { |
||||
|
groups, err := h.adminServer.GetGroups(r.Context()) |
||||
|
if err != nil { |
||||
|
glog.Errorf("Failed to get groups: %v", err) |
||||
|
writeJSONError(w, http.StatusInternalServerError, "Failed to get groups") |
||||
|
return |
||||
|
} |
||||
|
writeJSON(w, http.StatusOK, map[string]interface{}{"groups": groups}) |
||||
|
} |
||||
|
|
||||
|
func (h *GroupHandlers) CreateGroup(w http.ResponseWriter, r *http.Request) { |
||||
|
var req dash.CreateGroupRequest |
||||
|
if err := decodeJSONBody(newJSONMaxReader(w, r), &req); err != nil { |
||||
|
writeJSONError(w, http.StatusBadRequest, "Invalid request: "+err.Error()) |
||||
|
return |
||||
|
} |
||||
|
if req.Name == "" { |
||||
|
writeJSONError(w, http.StatusBadRequest, "Group name is required") |
||||
|
return |
||||
|
} |
||||
|
group, err := h.adminServer.CreateGroup(r.Context(), req.Name) |
||||
|
if err != nil { |
||||
|
glog.Errorf("Failed to create group: %v", err) |
||||
|
writeJSONError(w, http.StatusInternalServerError, "Failed to create group: "+err.Error()) |
||||
|
return |
||||
|
} |
||||
|
writeJSON(w, http.StatusOK, group) |
||||
|
} |
||||
|
|
||||
|
func (h *GroupHandlers) GetGroupDetails(w http.ResponseWriter, r *http.Request) { |
||||
|
name := mux.Vars(r)["name"] |
||||
|
group, err := h.adminServer.GetGroupDetails(r.Context(), name) |
||||
|
if err != nil { |
||||
|
glog.Errorf("Failed to get group details: %v", err) |
||||
|
writeJSONError(w, http.StatusNotFound, "Group not found") |
||||
|
return |
||||
|
} |
||||
|
writeJSON(w, http.StatusOK, group) |
||||
|
} |
||||
|
|
||||
|
func (h *GroupHandlers) DeleteGroup(w http.ResponseWriter, r *http.Request) { |
||||
|
name := mux.Vars(r)["name"] |
||||
|
if err := h.adminServer.DeleteGroup(r.Context(), name); err != nil { |
||||
|
glog.Errorf("Failed to delete group: %v", err) |
||||
|
writeJSONError(w, http.StatusInternalServerError, "Failed to delete group: "+err.Error()) |
||||
|
return |
||||
|
} |
||||
|
writeJSON(w, http.StatusOK, map[string]string{"message": "Group deleted successfully"}) |
||||
|
} |
||||
|
|
||||
|
func (h *GroupHandlers) GetGroupMembers(w http.ResponseWriter, r *http.Request) { |
||||
|
name := mux.Vars(r)["name"] |
||||
|
group, err := h.adminServer.GetGroupDetails(r.Context(), name) |
||||
|
if err != nil { |
||||
|
writeJSONError(w, http.StatusNotFound, "Group not found") |
||||
|
return |
||||
|
} |
||||
|
writeJSON(w, http.StatusOK, map[string]interface{}{"members": group.Members}) |
||||
|
} |
||||
|
|
||||
|
func (h *GroupHandlers) AddGroupMember(w http.ResponseWriter, r *http.Request) { |
||||
|
name := mux.Vars(r)["name"] |
||||
|
var req struct { |
||||
|
Username string `json:"username"` |
||||
|
} |
||||
|
if err := decodeJSONBody(newJSONMaxReader(w, r), &req); err != nil { |
||||
|
writeJSONError(w, http.StatusBadRequest, "Invalid request: "+err.Error()) |
||||
|
return |
||||
|
} |
||||
|
if req.Username == "" { |
||||
|
writeJSONError(w, http.StatusBadRequest, "Username is required") |
||||
|
return |
||||
|
} |
||||
|
if err := h.adminServer.AddGroupMember(r.Context(), name, req.Username); err != nil { |
||||
|
writeJSONError(w, http.StatusInternalServerError, "Failed to add member: "+err.Error()) |
||||
|
return |
||||
|
} |
||||
|
writeJSON(w, http.StatusOK, map[string]string{"message": "Member added successfully"}) |
||||
|
} |
||||
|
|
||||
|
func (h *GroupHandlers) RemoveGroupMember(w http.ResponseWriter, r *http.Request) { |
||||
|
name := mux.Vars(r)["name"] |
||||
|
username := mux.Vars(r)["username"] |
||||
|
if err := h.adminServer.RemoveGroupMember(r.Context(), name, username); err != nil { |
||||
|
writeJSONError(w, http.StatusInternalServerError, "Failed to remove member: "+err.Error()) |
||||
|
return |
||||
|
} |
||||
|
writeJSON(w, http.StatusOK, map[string]string{"message": "Member removed successfully"}) |
||||
|
} |
||||
|
|
||||
|
func (h *GroupHandlers) GetGroupPolicies(w http.ResponseWriter, r *http.Request) { |
||||
|
name := mux.Vars(r)["name"] |
||||
|
group, err := h.adminServer.GetGroupDetails(r.Context(), name) |
||||
|
if err != nil { |
||||
|
writeJSONError(w, http.StatusNotFound, "Group not found") |
||||
|
return |
||||
|
} |
||||
|
writeJSON(w, http.StatusOK, map[string]interface{}{"policies": group.PolicyNames}) |
||||
|
} |
||||
|
|
||||
|
func (h *GroupHandlers) AttachGroupPolicy(w http.ResponseWriter, r *http.Request) { |
||||
|
name := mux.Vars(r)["name"] |
||||
|
var req struct { |
||||
|
PolicyName string `json:"policy_name"` |
||||
|
} |
||||
|
if err := decodeJSONBody(newJSONMaxReader(w, r), &req); err != nil { |
||||
|
writeJSONError(w, http.StatusBadRequest, "Invalid request: "+err.Error()) |
||||
|
return |
||||
|
} |
||||
|
if req.PolicyName == "" { |
||||
|
writeJSONError(w, http.StatusBadRequest, "Policy name is required") |
||||
|
return |
||||
|
} |
||||
|
if err := h.adminServer.AttachGroupPolicy(r.Context(), name, req.PolicyName); err != nil { |
||||
|
writeJSONError(w, http.StatusInternalServerError, "Failed to attach policy: "+err.Error()) |
||||
|
return |
||||
|
} |
||||
|
writeJSON(w, http.StatusOK, map[string]string{"message": "Policy attached successfully"}) |
||||
|
} |
||||
|
|
||||
|
func (h *GroupHandlers) DetachGroupPolicy(w http.ResponseWriter, r *http.Request) { |
||||
|
name := mux.Vars(r)["name"] |
||||
|
policyName := mux.Vars(r)["policyName"] |
||||
|
if err := h.adminServer.DetachGroupPolicy(r.Context(), name, policyName); err != nil { |
||||
|
writeJSONError(w, http.StatusInternalServerError, "Failed to detach policy: "+err.Error()) |
||||
|
return |
||||
|
} |
||||
|
writeJSON(w, http.StatusOK, map[string]string{"message": "Policy detached successfully"}) |
||||
|
} |
||||
|
|
||||
|
func (h *GroupHandlers) SetGroupStatus(w http.ResponseWriter, r *http.Request) { |
||||
|
name := mux.Vars(r)["name"] |
||||
|
var req struct { |
||||
|
Enabled bool `json:"enabled"` |
||||
|
} |
||||
|
if err := decodeJSONBody(newJSONMaxReader(w, r), &req); err != nil { |
||||
|
writeJSONError(w, http.StatusBadRequest, "Invalid request: "+err.Error()) |
||||
|
return |
||||
|
} |
||||
|
if err := h.adminServer.SetGroupStatus(r.Context(), name, req.Enabled); err != nil { |
||||
|
writeJSONError(w, http.StatusInternalServerError, "Failed to update group status: "+err.Error()) |
||||
|
return |
||||
|
} |
||||
|
writeJSON(w, http.StatusOK, map[string]string{"message": "Group status updated"}) |
||||
|
} |
||||
|
|
||||
|
func (h *GroupHandlers) getGroupsPageData(r *http.Request) dash.GroupsPageData { |
||||
|
username := dash.UsernameFromContext(r.Context()) |
||||
|
if username == "" { |
||||
|
username = "admin" |
||||
|
} |
||||
|
|
||||
|
groups, err := h.adminServer.GetGroups(r.Context()) |
||||
|
if err != nil { |
||||
|
glog.Errorf("Failed to get groups: %v", err) |
||||
|
return dash.GroupsPageData{ |
||||
|
Username: username, |
||||
|
Groups: []dash.GroupData{}, |
||||
|
LastUpdated: time.Now(), |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
activeCount := 0 |
||||
|
for _, g := range groups { |
||||
|
if g.Status == "enabled" { |
||||
|
activeCount++ |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
// Get available users for dropdown
|
||||
|
var availableUsers []string |
||||
|
users, err := h.adminServer.GetObjectStoreUsers(r.Context()) |
||||
|
if err == nil { |
||||
|
for _, user := range users { |
||||
|
availableUsers = append(availableUsers, user.Username) |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
// Get available policies for dropdown
|
||||
|
var availablePolicies []string |
||||
|
policies, err := h.adminServer.GetPolicies() |
||||
|
if err == nil { |
||||
|
for _, p := range policies { |
||||
|
availablePolicies = append(availablePolicies, p.Name) |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
return dash.GroupsPageData{ |
||||
|
Username: username, |
||||
|
Groups: groups, |
||||
|
TotalGroups: len(groups), |
||||
|
ActiveGroups: activeCount, |
||||
|
AvailableUsers: availableUsers, |
||||
|
AvailablePolicies: availablePolicies, |
||||
|
LastUpdated: time.Now(), |
||||
|
} |
||||
|
} |
||||
@ -0,0 +1,396 @@ |
|||||
|
package app |
||||
|
|
||||
|
import ( |
||||
|
"fmt" |
||||
|
"github.com/seaweedfs/seaweedfs/weed/admin/dash" |
||||
|
) |
||||
|
|
||||
|
templ Groups(data dash.GroupsPageData) { |
||||
|
<div class="container-fluid"> |
||||
|
<!-- Page Header --> |
||||
|
<div class="d-sm-flex align-items-center justify-content-between mb-4"> |
||||
|
<div> |
||||
|
<h1 class="h3 mb-0 text-gray-800"> |
||||
|
<i class="fas fa-users-cog me-2"></i>Groups |
||||
|
</h1> |
||||
|
<p class="mb-0 text-muted">Manage IAM groups for organizing users and policies</p> |
||||
|
</div> |
||||
|
<div class="d-flex gap-2"> |
||||
|
<button type="button" class="btn btn-primary" |
||||
|
data-bs-toggle="modal" |
||||
|
data-bs-target="#createGroupModal"> |
||||
|
<i class="fas fa-plus me-1"></i>Create Group |
||||
|
</button> |
||||
|
</div> |
||||
|
</div> |
||||
|
|
||||
|
<!-- Summary Cards --> |
||||
|
<div class="row mb-4"> |
||||
|
<div class="col-xl-3 col-md-6 mb-4"> |
||||
|
<div class="card border-left-primary shadow h-100 py-2"> |
||||
|
<div class="card-body"> |
||||
|
<div class="row no-gutters align-items-center"> |
||||
|
<div class="col mr-2"> |
||||
|
<div class="text-xs font-weight-bold text-primary text-uppercase mb-1"> |
||||
|
Total Groups |
||||
|
</div> |
||||
|
<div class="h5 mb-0 font-weight-bold text-gray-800"> |
||||
|
{fmt.Sprintf("%d", data.TotalGroups)} |
||||
|
</div> |
||||
|
</div> |
||||
|
<div class="col-auto"> |
||||
|
<i class="fas fa-users-cog fa-2x text-gray-300"></i> |
||||
|
</div> |
||||
|
</div> |
||||
|
</div> |
||||
|
</div> |
||||
|
</div> |
||||
|
<div class="col-xl-3 col-md-6 mb-4"> |
||||
|
<div class="card border-left-success shadow h-100 py-2"> |
||||
|
<div class="card-body"> |
||||
|
<div class="row no-gutters align-items-center"> |
||||
|
<div class="col mr-2"> |
||||
|
<div class="text-xs font-weight-bold text-success text-uppercase mb-1"> |
||||
|
Active Groups |
||||
|
</div> |
||||
|
<div class="h5 mb-0 font-weight-bold text-gray-800"> |
||||
|
{fmt.Sprintf("%d", data.ActiveGroups)} |
||||
|
</div> |
||||
|
</div> |
||||
|
<div class="col-auto"> |
||||
|
<i class="fas fa-check-circle fa-2x text-gray-300"></i> |
||||
|
</div> |
||||
|
</div> |
||||
|
</div> |
||||
|
</div> |
||||
|
</div> |
||||
|
</div> |
||||
|
|
||||
|
<!-- Groups Table --> |
||||
|
<div class="card shadow mb-4"> |
||||
|
<div class="card-header py-3"> |
||||
|
<h6 class="m-0 font-weight-bold text-primary">Groups</h6> |
||||
|
</div> |
||||
|
<div class="card-body"> |
||||
|
if len(data.Groups) == 0 { |
||||
|
<div class="text-center py-5 text-muted"> |
||||
|
<i class="fas fa-users-cog fa-3x mb-3"></i> |
||||
|
<p>No groups found. Create a group to get started.</p> |
||||
|
</div> |
||||
|
} else { |
||||
|
<div class="table-responsive"> |
||||
|
<table class="table table-bordered table-hover" id="groupsTable" width="100%" cellspacing="0"> |
||||
|
<thead> |
||||
|
<tr> |
||||
|
<th>Name</th> |
||||
|
<th>Members</th> |
||||
|
<th>Policies</th> |
||||
|
<th>Status</th> |
||||
|
<th>Actions</th> |
||||
|
</tr> |
||||
|
</thead> |
||||
|
<tbody> |
||||
|
for _, group := range data.Groups { |
||||
|
<tr> |
||||
|
<td> |
||||
|
<strong>{group.Name}</strong> |
||||
|
</td> |
||||
|
<td> |
||||
|
<span class="badge bg-info">{fmt.Sprintf("%d", group.MemberCount)}</span> |
||||
|
</td> |
||||
|
<td> |
||||
|
<span class="badge bg-secondary">{fmt.Sprintf("%d", group.PolicyCount)}</span> |
||||
|
</td> |
||||
|
<td> |
||||
|
if group.Status == "enabled" { |
||||
|
<span class="badge bg-success">Enabled</span> |
||||
|
} else { |
||||
|
<span class="badge bg-danger">Disabled</span> |
||||
|
} |
||||
|
</td> |
||||
|
<td> |
||||
|
<button class="btn btn-sm btn-outline-primary me-1" |
||||
|
onclick={ templ.ComponentScript{Call: fmt.Sprintf("viewGroup('%s')", group.Name)} }> |
||||
|
<i class="fas fa-eye"></i> |
||||
|
</button> |
||||
|
<button class="btn btn-sm btn-outline-danger" |
||||
|
onclick={ templ.ComponentScript{Call: fmt.Sprintf("deleteGroup('%s')", group.Name)} }> |
||||
|
<i class="fas fa-trash"></i> |
||||
|
</button> |
||||
|
</td> |
||||
|
</tr> |
||||
|
} |
||||
|
</tbody> |
||||
|
</table> |
||||
|
</div> |
||||
|
} |
||||
|
</div> |
||||
|
</div> |
||||
|
|
||||
|
<!-- Create Group Modal --> |
||||
|
<div class="modal fade" id="createGroupModal" tabindex="-1"> |
||||
|
<div class="modal-dialog"> |
||||
|
<div class="modal-content"> |
||||
|
<div class="modal-header"> |
||||
|
<h5 class="modal-title">Create Group</h5> |
||||
|
<button type="button" class="btn-close" data-bs-dismiss="modal"></button> |
||||
|
</div> |
||||
|
<div class="modal-body"> |
||||
|
<form id="createGroupForm"> |
||||
|
<div class="mb-3"> |
||||
|
<label for="groupName" class="form-label">Group Name</label> |
||||
|
<input type="text" class="form-control" id="groupName" name="name" required |
||||
|
placeholder="Enter group name"/> |
||||
|
</div> |
||||
|
</form> |
||||
|
</div> |
||||
|
<div class="modal-footer"> |
||||
|
<button type="button" class="btn btn-secondary" data-bs-dismiss="modal">Cancel</button> |
||||
|
<button type="button" class="btn btn-primary" onclick="createGroup()">Create</button> |
||||
|
</div> |
||||
|
</div> |
||||
|
</div> |
||||
|
</div> |
||||
|
|
||||
|
<!-- View Group Modal --> |
||||
|
<div class="modal fade" id="viewGroupModal" tabindex="-1"> |
||||
|
<div class="modal-dialog modal-lg"> |
||||
|
<div class="modal-content"> |
||||
|
<div class="modal-header"> |
||||
|
<h5 class="modal-title" id="viewGroupTitle">Group Details</h5> |
||||
|
<button type="button" class="btn-close" data-bs-dismiss="modal"></button> |
||||
|
</div> |
||||
|
<div class="modal-body"> |
||||
|
<ul class="nav nav-tabs" id="groupTabs" role="tablist"> |
||||
|
<li class="nav-item"> |
||||
|
<a class="nav-link active" id="members-tab" data-bs-toggle="tab" href="#membersPane" role="tab">Members</a> |
||||
|
</li> |
||||
|
<li class="nav-item"> |
||||
|
<a class="nav-link" id="policies-tab" data-bs-toggle="tab" href="#policiesPane" role="tab">Policies</a> |
||||
|
</li> |
||||
|
<li class="nav-item"> |
||||
|
<a class="nav-link" id="settings-tab" data-bs-toggle="tab" href="#settingsPane" role="tab">Settings</a> |
||||
|
</li> |
||||
|
</ul> |
||||
|
<div class="tab-content mt-3" id="groupTabContent"> |
||||
|
<!-- Members Tab --> |
||||
|
<div class="tab-pane fade show active" id="membersPane" role="tabpanel"> |
||||
|
<div class="mb-3"> |
||||
|
<div class="input-group"> |
||||
|
<select class="form-select" id="addMemberSelect"> |
||||
|
<option value="">Select user to add...</option> |
||||
|
for _, user := range data.AvailableUsers { |
||||
|
<option value={user}>{user}</option> |
||||
|
} |
||||
|
</select> |
||||
|
<button class="btn btn-outline-primary" type="button" onclick="addMemberToGroup()"> |
||||
|
<i class="fas fa-plus"></i> Add |
||||
|
</button> |
||||
|
</div> |
||||
|
</div> |
||||
|
<div id="membersList"></div> |
||||
|
</div> |
||||
|
<!-- Policies Tab --> |
||||
|
<div class="tab-pane fade" id="policiesPane" role="tabpanel"> |
||||
|
<div class="mb-3"> |
||||
|
<div class="input-group"> |
||||
|
<select class="form-select" id="attachPolicySelect"> |
||||
|
<option value="">Select policy to attach...</option> |
||||
|
for _, policy := range data.AvailablePolicies { |
||||
|
<option value={policy}>{policy}</option> |
||||
|
} |
||||
|
</select> |
||||
|
<button class="btn btn-outline-primary" type="button" onclick="attachPolicyToGroup()"> |
||||
|
<i class="fas fa-plus"></i> Attach |
||||
|
</button> |
||||
|
</div> |
||||
|
</div> |
||||
|
<div id="policiesList"></div> |
||||
|
</div> |
||||
|
<!-- Settings Tab --> |
||||
|
<div class="tab-pane fade" id="settingsPane" role="tabpanel"> |
||||
|
<div class="form-check form-switch mb-3"> |
||||
|
<input class="form-check-input" type="checkbox" id="groupEnabledSwitch" checked |
||||
|
onchange="toggleGroupStatus()"/> |
||||
|
<label class="form-check-label" for="groupEnabledSwitch">Group Enabled</label> |
||||
|
</div> |
||||
|
</div> |
||||
|
</div> |
||||
|
</div> |
||||
|
<div class="modal-footer"> |
||||
|
<button type="button" class="btn btn-secondary" data-bs-dismiss="modal">Close</button> |
||||
|
</div> |
||||
|
</div> |
||||
|
</div> |
||||
|
</div> |
||||
|
</div> |
||||
|
|
||||
|
<script src="/static/js/iam-utils.js"></script> |
||||
|
<script> |
||||
|
// Groups page JavaScript |
||||
|
let currentGroupName = ''; |
||||
|
|
||||
|
async function createGroup() { |
||||
|
const name = document.getElementById('groupName').value.trim(); |
||||
|
if (!name) { |
||||
|
showAlert('Group name is required', 'error'); |
||||
|
return; |
||||
|
} |
||||
|
try { |
||||
|
const response = await fetch('/api/groups', { |
||||
|
method: 'POST', |
||||
|
headers: { 'Content-Type': 'application/json' }, |
||||
|
body: JSON.stringify({ name: name }) |
||||
|
}); |
||||
|
if (response.ok) { |
||||
|
showAlert('Group created successfully', 'success'); |
||||
|
setTimeout(() => window.location.reload(), 1000); |
||||
|
} else { |
||||
|
const error = await response.json().catch(() => ({})); |
||||
|
showAlert('Failed to create group: ' + (error.error || 'Unknown error'), 'error'); |
||||
|
} |
||||
|
} catch (error) { |
||||
|
showAlert('Failed to create group: ' + error.message, 'error'); |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
async function viewGroup(name) { |
||||
|
currentGroupName = name; |
||||
|
document.getElementById('viewGroupTitle').textContent = 'Group: ' + name; |
||||
|
await refreshGroupDetails(); |
||||
|
new bootstrap.Modal(document.getElementById('viewGroupModal')).show(); |
||||
|
} |
||||
|
|
||||
|
async function refreshGroupDetails() { |
||||
|
try { |
||||
|
const response = await fetch('/api/groups/' + encodeURIComponent(currentGroupName)); |
||||
|
if (!response.ok) throw new Error('Failed to fetch group'); |
||||
|
const group = await response.json(); |
||||
|
|
||||
|
// Render members |
||||
|
let membersHtml = '<table class="table table-sm"><tbody>'; |
||||
|
if (group.members && group.members.length > 0) { |
||||
|
for (const member of group.members) { |
||||
|
membersHtml += '<tr><td>' + member + '</td><td><button class="btn btn-sm btn-outline-danger" onclick="removeMember(\'' + member + '\')"><i class="fas fa-times"></i></button></td></tr>'; |
||||
|
} |
||||
|
} else { |
||||
|
membersHtml += '<tr><td class="text-muted">No members</td></tr>'; |
||||
|
} |
||||
|
membersHtml += '</tbody></table>'; |
||||
|
document.getElementById('membersList').innerHTML = membersHtml; |
||||
|
|
||||
|
// Render policies |
||||
|
let policiesHtml = '<table class="table table-sm"><tbody>'; |
||||
|
if (group.policy_names && group.policy_names.length > 0) { |
||||
|
for (const policy of group.policy_names) { |
||||
|
policiesHtml += '<tr><td>' + policy + '</td><td><button class="btn btn-sm btn-outline-danger" onclick="detachPolicy(\'' + policy + '\')"><i class="fas fa-times"></i></button></td></tr>'; |
||||
|
} |
||||
|
} else { |
||||
|
policiesHtml += '<tr><td class="text-muted">No policies attached</td></tr>'; |
||||
|
} |
||||
|
policiesHtml += '</tbody></table>'; |
||||
|
document.getElementById('policiesList').innerHTML = policiesHtml; |
||||
|
|
||||
|
// Update status toggle |
||||
|
document.getElementById('groupEnabledSwitch').checked = (group.status === 'enabled'); |
||||
|
} catch (error) { |
||||
|
console.error('Error fetching group details:', error); |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
async function addMemberToGroup() { |
||||
|
const username = document.getElementById('addMemberSelect').value; |
||||
|
if (!username) return; |
||||
|
try { |
||||
|
const response = await fetch('/api/groups/' + encodeURIComponent(currentGroupName) + '/members', { |
||||
|
method: 'POST', |
||||
|
headers: { 'Content-Type': 'application/json' }, |
||||
|
body: JSON.stringify({ username: username }) |
||||
|
}); |
||||
|
if (response.ok) { |
||||
|
await refreshGroupDetails(); |
||||
|
showAlert('Member added', 'success'); |
||||
|
} else { |
||||
|
const error = await response.json().catch(() => ({})); |
||||
|
showAlert('Failed to add member: ' + (error.error || 'Unknown error'), 'error'); |
||||
|
} |
||||
|
} catch (error) { |
||||
|
showAlert('Failed to add member: ' + error.message, 'error'); |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
async function removeMember(username) { |
||||
|
try { |
||||
|
const response = await fetch('/api/groups/' + encodeURIComponent(currentGroupName) + '/members/' + encodeURIComponent(username), { |
||||
|
method: 'DELETE' |
||||
|
}); |
||||
|
if (response.ok) { |
||||
|
await refreshGroupDetails(); |
||||
|
showAlert('Member removed', 'success'); |
||||
|
} else { |
||||
|
const error = await response.json().catch(() => ({})); |
||||
|
showAlert('Failed to remove member: ' + (error.error || 'Unknown error'), 'error'); |
||||
|
} |
||||
|
} catch (error) { |
||||
|
showAlert('Failed to remove member: ' + error.message, 'error'); |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
async function attachPolicyToGroup() { |
||||
|
const policyName = document.getElementById('attachPolicySelect').value; |
||||
|
if (!policyName) return; |
||||
|
try { |
||||
|
const response = await fetch('/api/groups/' + encodeURIComponent(currentGroupName) + '/policies', { |
||||
|
method: 'POST', |
||||
|
headers: { 'Content-Type': 'application/json' }, |
||||
|
body: JSON.stringify({ policy_name: policyName }) |
||||
|
}); |
||||
|
if (response.ok) { |
||||
|
await refreshGroupDetails(); |
||||
|
showAlert('Policy attached', 'success'); |
||||
|
} else { |
||||
|
const error = await response.json().catch(() => ({})); |
||||
|
showAlert('Failed to attach policy: ' + (error.error || 'Unknown error'), 'error'); |
||||
|
} |
||||
|
} catch (error) { |
||||
|
showAlert('Failed to attach policy: ' + error.message, 'error'); |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
async function detachPolicy(policyName) { |
||||
|
try { |
||||
|
const response = await fetch('/api/groups/' + encodeURIComponent(currentGroupName) + '/policies/' + encodeURIComponent(policyName), { |
||||
|
method: 'DELETE' |
||||
|
}); |
||||
|
if (response.ok) { |
||||
|
await refreshGroupDetails(); |
||||
|
showAlert('Policy detached', 'success'); |
||||
|
} else { |
||||
|
const error = await response.json().catch(() => ({})); |
||||
|
showAlert('Failed to detach policy: ' + (error.error || 'Unknown error'), 'error'); |
||||
|
} |
||||
|
} catch (error) { |
||||
|
showAlert('Failed to detach policy: ' + error.message, 'error'); |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
async function toggleGroupStatus() { |
||||
|
const enabled = document.getElementById('groupEnabledSwitch').checked; |
||||
|
try { |
||||
|
const response = await fetch('/api/groups/' + encodeURIComponent(currentGroupName) + '/status', { |
||||
|
method: 'PUT', |
||||
|
headers: { 'Content-Type': 'application/json' }, |
||||
|
body: JSON.stringify({ enabled: enabled }) |
||||
|
}); |
||||
|
if (response.ok) { |
||||
|
showAlert('Group status updated', 'success'); |
||||
|
} else { |
||||
|
const error = await response.json().catch(() => ({})); |
||||
|
showAlert('Failed to update status: ' + (error.error || 'Unknown error'), 'error'); |
||||
|
} |
||||
|
} catch (error) { |
||||
|
showAlert('Failed to update status: ' + error.message, 'error'); |
||||
|
} |
||||
|
} |
||||
|
</script> |
||||
|
} |
||||
256
weed/admin/view/app/groups_templ.go
File diff suppressed because it is too large
View File
File diff suppressed because it is too large
View File
Write
Preview
Loading…
Cancel
Save
Reference in new issue