ctu-geoforall-lab-projects/dp-kulovana-2019

Master thesis Tereza Kulovana 2019

Master Thesis

Title

Návrh webového administrátorského rozhraní pro~platformu GIS.lab

GIS.lab Web Administration Console

Description

Tato diplomová práce si klade za cíl vytvořit webové administrátorské rozhraní pro~platformu GIS.lab. Rozhraní umožňuje správu uživatelů a definování jejich rolí a oprávnění. Je tvořeno ze dvou částí - uživatelské konzole a administrátorské konzole. Při tvorbě byl využit framework Django. Data jsou synchronizována mezi lokální databází Djanga a LDAP serverem. Na konec bude webové rozhraní integrováno do GIS.labu jako nová služba přes Docker kontejner.

The aim of this diploma thesis is to create a web administration interface for GIS.lab platform. The interface enables user management and defining user roles and permissions. It consists of two parts - user console and admin console. Project uses Django framework. Data are synchronized between local Django database and LDAP server. Eventually, web console is going to be integrated to GIS.lab as a new service using Docker container.

Student

Bc. Tereza Kulovaná

Supervisor

Ing. Martin Landa, Ph.D.

Reader

Ing. Lukáš Brodský, Ph.D.

Defence

June 2019

Original reference

gislab-npo/gislab#297

Text

PDF

dp-kulovana-2019's Issues

admin: change password (of other users)

See related #26

Question: how to deal with other admins (limit permission?)

display user roles in user console

Currently roles are empty

user app: personal details

1. log in
2. display personal details table (see https://github.com/ctu-geoforall-lab-projects/dp-kulovana-2019/wiki)

propagate django password into LDAP

Note: opposite direction works (LDAP->django)

http:/hostname:8080/users/ fails

Using the URLconf defined in web_console_project.urls, Django tried these URL patterns, in this order:

    [name='home']
    admin/
    users/ signup/ [name='signup']
    users/ user_change/(?P<pk>\d+)/$ [name='user_change']
    users/ user_change/password/ [name='password_change']
    users/ login/ [name='login']
    users/ logout/ [name='logout']
    users/ password_change/ [name='password_change']
    users/ password_change/done/ [name='password_change_done']
    users/ password_reset/ [name='password_reset']
    users/ password_reset/done/ [name='password_reset_done']
    users/ reset/<uidb64>/<token>/ [name='password_reset_confirm']
    users/ reset/done/ [name='password_reset_complete']

The current path, users/, didn't match any of these.

admin: delete user

use ldap admin user for connection

PW: /opt/gislab/secret/gislab_ldap_admin_password

See https://github.com/gislab-npo/gislab/blob/python-lib/system/roles/basic-configuration/files/static/gislab-python/gislab/admin/user.py#L45

hide staff/active status in admin console

integrate webapp into GIS.lab as a new service

For inspiration see Gisquick integration based on Docker: https://github.com/gislab-npo/gislab/tree/master/system/roles/service-gisquick/

References:

• Docker, https://docs.docker.com/get-started/
• Ansible, https://www.root.cz/serialy/konfiguracni-a-orchestracni-nastroj-ansible/

specify title + assignment

Working title: GIS.lab Web Administration Console

admin: add ability to define group description

SyncDjangoLDAP: close connection

Add class destructor to close connection.

propagate changes from webapp to ldap

• personal details
• password
• role (-> ldap groups)

user modification (ldap): delete from superuser group

Django app still reports that user is part of superuser group even after next login.

admin: do not allow chaging username

user: change user attributes

• first name
• last name
• description
• e-mail

admin: add/remove group

admin: delete more users/groups

Actions -> Delete selected users

admin: list of users

list of users (table)

• username, first name, last name, email, desc, groups, superuser (a/n)

admin: removing superuser is not propagated into ldap

user: request group edits (add/remove)

admin: propagate adding/removing groups into ldap

Currently not implemented.

extend ldap -> webapp groups synchronization

1. determine user groups
2. create new group if not exists (using django API)
3. add user to given groups (using django API)

user console: roles

Roles: list only groups (with membership)

login screen

https://django-auth-ldap.readthedocs.io/en/latest/

gislab.admin.user

registration form: add services

Services:

• DB storage
• Map Server
• Publication platform (Gisquick)
• Desktop client

improve api documentation

remove non-existing user from admin console

Steps to reproduce:

1. create a new user
2. remove user by gislab-deluser
3. login admin console, removed user is still accessible

debug logging level ignored

See

https://docs.djangoproject.com/en/2.1/topics/logging/#examples

https://stackoverflow.com/questions/19720785/django-how-to-set-log-level-to-info-or-debug

changed ldap password is not propagated to django

admin: hide delete actions

Hide Actions -> delete users/groups. Currently does not work. See #23

registration form for new user

Inspiration: https://projects.gisquick.org/accounts/register/

1. user fills a form
2. click on button "Create user account"
3. new account will be created

Option:

1. use existing GIS.lab administration commands

sudo gislab-adduser -g Django -l Test -m [email protected] -p verysec django_test1

-> subprocess.Popen()

2. use experimental Python GIS.lab admin library

https://github.com/gislab-npo/gislab/blob/python-lib/system/bin/gislab-adduser.py
https://github.com/gislab-npo/gislab/tree/python-lib/system/roles/basic-server-configuration/files/static/gislab-python/gislab

create deploy draft bash script

PROJ_PATH=/cesta/k/adresari

rm -rf $PROJ_PATH

• command to create webapp
• cp custom_settings.py $PROJ_PATH/...
• ...

how to deal with user already deleted from ldap who is still log in

User details modification should end up with error....

admin: fix required fields

Required fields:

• first name
• last name
• e-mail

hide user permission in admin console

user: beautify html user template (design)