审计增加口令修改记录

src/api/bkuser_core/audit/constants.py

@@ -44,6 +44,10 @@ class OperationType(AutoLowerEnum):
     EXPORT = auto()
     RESTORATION = auto()
 
+    FORGET_PASSWORD = auto()
+    RESET_PASSWORD = auto()
+    MODIFY_PASSWORD = auto()
+
     _choices_labels = (
         (CREATE, "创建"),
         (UPDATE, "更新"),
@@ -53,6 +57,9 @@ class OperationType(AutoLowerEnum):
         (EXPORT, "导出"),
         (IMPORT, "导入"),
         (RESTORATION, "恢复"),
+        (FORGET_PASSWORD, "忘记密码"),
+        (RESET_PASSWORD, "重置密码"),
+        (MODIFY_PASSWORD, "修改密码"),
     )
 
 

src/api/bkuser_core/audit/utils.py

@@ -134,6 +134,9 @@ def _catch_exc(self, request, *args, **kwargs):
                 if operate_type == OperationType.UPDATE.value:
                     _params["operator_obj"] = self.get_object()
 
+                if getattr(self, "operate_type", None):
+                    _params["operate_type"] = self.operate_type
+
                 create_general_log(**_params)
                 return _result
 

src/api/bkuser_core/profiles/v2/views.py

@@ -75,6 +75,7 @@ class ProfileViewSet(AdvancedModelViewSet, AdvancedListAPIView):
     serializer_class = local_serializers.ProfileSerializer
     lookup_field = "username"
     filter_backends = [ProfileSearchFilter, filters.OrderingFilter]
+    operate_type = None
 
     relation_fields = ["departments", "leader", "login_set"]
 
@@ -320,6 +321,7 @@ def _update(self, request, partial):
         update_summary = {"request": request}
         # 密码修改加密
         if validated_data.get("password"):
+            self.operate_type = OperationType.RESET_PASSWORD.value
             pending_password = validated_data.get("password")
             config_loader = ConfigProvider(category_id=instance.category_id)
             try:
@@ -389,6 +391,7 @@ def destroy(self, request, *args, **kwargs):
         """
         return super().destroy(request, *args, **kwargs)
 
+    @audit_general_log(operate_type=OperationType.MODIFY_PASSWORD.value)
     @swagger_auto_schema(
         query_serializer=AdvancedRetrieveSerialzier(),
         request_body=local_serializers.ProfileModifyPasswordSerializer,
@@ -440,6 +443,7 @@ def modify_password(self, request, *args, **kwargs):
         )
         return Response(data=local_serializers.ProfileMinimalSerializer(instance).data)
 
+    @audit_general_log(OperationType.FORGET_PASSWORD.value)
     @swagger_auto_schema(
         query_serializer=AdvancedRetrieveSerialzier(),
         request_body=EmptySerializer,

src/api/bkuser_core/user_settings/constants.py

@@ -23,7 +23,7 @@ class SettingsEnableNamespaces(AutoLowerEnum):
         (GENERAL, "通用"),
         (PASSWORD, "密码"),
         (CONNECTION, "连接"),
-        (FIELDS, "连接"),
+        (FIELDS, "字段"),
     )