53c393b49b
- Permissions 100% depuis user_permissions (plus de hardcode) - Middleware injecte perms dans chaque requête - Créneaux auto: 09h-12h30 / 14h-16h45, pas 15min, hprod lun-mar, prod mer-jeu - Assignations par défaut: par domaine, app_type, zone, serveur (table default_assignments) - Auto-liaison app_group: même intervenant recette+prod - Audit Splunk: /var/log/patchcenter_audit.json (JSON one-line par event) - Login/logout/campagnes/prereqs loggés en base + fichier - Page erreur maintenance (500/404) avec contact SecOps - Accents français dans toute lUI - Operator affiché comme Intervenant - Session 1h, redirect / vers dashboard si connecté - Demo mode prereqs (DEMO_MODE=True) Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
265 lines
19 KiB
HTML
265 lines
19 KiB
HTML
{% extends 'base.html' %}
|
|
{% block title %}{{ c.label or c.week_code }}{% endblock %}
|
|
{% block content %}
|
|
|
|
<!-- Header -->
|
|
<div class="flex justify-between items-center mb-4">
|
|
<div>
|
|
<a href="/campaigns" class="text-xs text-gray-500 hover:text-gray-300">← Campagnes</a>
|
|
<h2 class="text-xl font-bold text-cyber-accent">{{ c.label or c.week_code }}</h2>
|
|
<div class="flex items-center gap-3 mt-1">
|
|
<span class="badge {% if c.status == 'draft' %}badge-gray{% elif c.status == 'pending_validation' %}badge-yellow{% elif c.status == 'planned' %}badge-blue{% elif c.status == 'in_progress' %}badge-yellow{% elif c.status == 'completed' %}badge-green{% else %}badge-red{% endif %}">{{ c.status }}</span>
|
|
<span class="text-sm text-gray-500">{{ c.week_code }} {{ c.year }}</span>
|
|
{% if c.date_start %}<span class="text-sm text-gray-500">{{ c.date_start.strftime('%d/%m/%Y') }}{% if c.date_end %} → {{ c.date_end.strftime('%d/%m/%Y') }}{% endif %}</span>{% endif %}
|
|
<span class="text-xs text-gray-600">par {{ c.created_by_name or '-' }}</span>
|
|
</div>
|
|
</div>
|
|
<div class="flex gap-2">
|
|
{% if can_edit_campaigns %}
|
|
{% if c.status == 'draft' %}
|
|
{% if can_plan %}
|
|
<form method="POST" action="/campaigns/{{ c.id }}/status"><input type="hidden" name="new_status" value="pending_validation">
|
|
<button class="btn-primary px-4 py-2 text-sm">Soumettre au COMEP</button></form>
|
|
{% else %}
|
|
<button class="btn-sm bg-gray-700 text-gray-500 px-4 py-2 cursor-not-allowed">COMEP (prereqs requis)</button>
|
|
{% endif %}
|
|
{% elif c.status == 'pending_validation' %}
|
|
<form method="POST" action="/campaigns/{{ c.id }}/status"><input type="hidden" name="new_status" value="planned">
|
|
<button class="btn-primary px-4 py-2 text-sm">Planifier (post-COMEP)</button></form>
|
|
<form method="POST" action="/campaigns/{{ c.id }}/status"><input type="hidden" name="new_status" value="draft">
|
|
<button class="btn-sm bg-cyber-border text-gray-300 px-4 py-2">Retour draft</button></form>
|
|
{% elif c.status == 'planned' %}
|
|
<form method="POST" action="/campaigns/{{ c.id }}/status"><input type="hidden" name="new_status" value="in_progress">
|
|
<button class="btn-primary px-4 py-2 text-sm">Demarrer</button></form>
|
|
{% elif c.status == 'in_progress' %}
|
|
<form method="POST" action="/campaigns/{{ c.id }}/status"><input type="hidden" name="new_status" value="completed">
|
|
<button class="btn-sm bg-cyber-green text-black px-4 py-2">Terminer</button></form>
|
|
{% endif %}
|
|
{% if c.status in ('draft', 'pending_validation', 'planned') %}
|
|
<form method="POST" action="/campaigns/{{ c.id }}/status"><input type="hidden" name="new_status" value="cancelled">
|
|
<button class="btn-sm bg-red-900/30 text-cyber-red px-4 py-2" onclick="return confirm('Annuler cette campagne ?')">Annuler</button></form>
|
|
{% endif %}
|
|
{% if c.status in ('draft', 'cancelled') %}
|
|
<form method="POST" action="/campaigns/{{ c.id }}/delete">
|
|
<button class="btn-sm bg-red-900/50 text-cyber-red px-4 py-2" onclick="return confirm('SUPPRIMER définitivement cette campagne ? Cette action est irréversible.')">Supprimer</button></form>
|
|
{% endif %}
|
|
{% endif %}
|
|
</div>
|
|
</div>
|
|
|
|
{% if msg %}
|
|
<div class="mb-3 p-2 rounded text-sm {% if msg in ('prereq_needed','already_taken','limit_reached') %}bg-red-900/30 text-cyber-red{% else %}bg-green-900/30 text-cyber-green{% endif %}">
|
|
{% if msg == 'excluded' %}Serveur exclu.{% elif msg == 'restored' %}Serveur restauré.{% elif msg == 'prereq_saved' %}Prérequis sauvegardés.{% elif msg == 'prereq_checked' %}Prérequis vérifié.{% elif msg == 'prereq_needed' %}Prérequis requis avant soumission COMEP.{% elif msg == 'taken' %}Serveur pris.{% elif msg == 'released' %}Serveur libéré.{% elif msg == 'assigned' %}Intervenant assigné.{% elif msg == 'scheduled' %}Planning ajusté.{% elif msg == 'limit_set' %}Limite intervenant définie.{% elif msg == 'already_taken' %}Ce serveur est déjà pris.{% elif msg == 'limit_reached' %}Limite de serveurs atteinte pour cette campagne.{% elif msg == 'forced_cant_release' %}Assignation forcée — seul le coordinateur peut modifier.{% elif msg.startswith('checked_') %}Vérification: {{ msg.split('_')[1] }} vérifiés, {{ msg.split('_')[2] }} auto-exclus.{% endif %}
|
|
</div>
|
|
{% endif %}
|
|
|
|
<!-- KPIs -->
|
|
<div class="grid grid-cols-8 gap-2 mb-4">
|
|
<div class="card p-2 text-center"><div class="text-xl font-bold text-cyber-accent">{{ stats.total }}</div><div class="text-[10px] text-gray-500">Total</div></div>
|
|
<div class="card p-2 text-center"><div class="text-xl font-bold text-cyber-green">{{ stats.patched }}</div><div class="text-[10px] text-gray-500">Patches</div></div>
|
|
<div class="card p-2 text-center"><div class="text-xl font-bold text-cyber-red">{{ stats.failed }}</div><div class="text-[10px] text-gray-500">Échoués</div></div>
|
|
<div class="card p-2 text-center"><div class="text-xl font-bold text-cyber-yellow">{{ stats.pending }}</div><div class="text-[10px] text-gray-500">En attente</div></div>
|
|
<div class="card p-2 text-center"><div class="text-xl font-bold text-gray-500">{{ stats.excluded }}</div><div class="text-[10px] text-gray-500">Exclus</div></div>
|
|
<div class="card p-2 text-center"><div class="text-xl font-bold text-cyber-accent">{{ stats.assignéd }}</div><div class="text-[10px] text-gray-500">Assignés</div></div>
|
|
<div class="card p-2 text-center"><div class="text-xl font-bold text-gray-400">{{ stats.unassigned }}</div><div class="text-[10px] text-gray-500">Libres</div></div>
|
|
<div class="card p-2 text-center">
|
|
{% set patchable = stats.total - stats.excluded - stats.cancelled %}
|
|
<div class="text-xl font-bold text-cyber-accent">{% if patchable > 0 %}{{ (stats.patched / patchable * 100)|int }}%{% else %}-{% endif %}</div>
|
|
<div class="text-[10px] text-gray-500">Progression</div>
|
|
</div>
|
|
</div>
|
|
|
|
<!-- Repartition intervenants -->
|
|
{% if op_counts %}
|
|
<div class="flex gap-2 mb-4 flex-wrap">
|
|
{% for oc in op_counts %}
|
|
<div class="card px-3 py-1 flex items-center gap-2">
|
|
<span class="text-sm {% if oc.display_name == user.sub %}text-cyber-accent font-bold{% else %}text-gray-300{% endif %}">{{ oc.display_name }}</span>
|
|
<span class="badge badge-blue">{{ oc.count }}</span>
|
|
</div>
|
|
{% endfor %}
|
|
{% if stats.unassigned > 0 %}
|
|
<div class="card px-3 py-1 flex items-center gap-2">
|
|
<span class="text-sm text-gray-500">Non assignés</span>
|
|
<span class="badge badge-gray">{{ stats.unassigned }}</span>
|
|
</div>
|
|
{% endif %}
|
|
</div>
|
|
{% endif %}
|
|
|
|
<!-- Prérequis (draft) -->
|
|
{% if c.status == 'draft' and prereq and can_edit_campaigns %}
|
|
<div class="card p-4 mb-4">
|
|
<div class="flex justify-between items-center mb-2">
|
|
<h3 class="text-sm font-bold text-cyber-accent">Prérequisuis ({{ prereq.prereq_ok }}/{{ prereq.total_pending }} valides)</h3>
|
|
<form method="POST" action="/campaigns/{{ c.id }}/check-prereqs">
|
|
<button class="btn-primary px-3 py-1 text-sm">Vérifier prereqs</button>
|
|
</form>
|
|
</div>
|
|
<div class="grid grid-cols-5 gap-3 text-sm">
|
|
<div class="flex justify-between"><span class="text-gray-500">A vérifiér</span><span class="text-cyber-yellow">{{ prereq.prereq_todo }}</span></div>
|
|
<div class="flex justify-between"><span class="text-gray-500">SSH</span><span class="text-cyber-green">{{ prereq.ssh_ok }}</span></div>
|
|
<div class="flex justify-between"><span class="text-gray-500">Satellite</span><span class="text-cyber-green">{{ prereq.sat_ok }}</span></div>
|
|
<div class="flex justify-between"><span class="text-gray-500">Rollback</span><span class="text-cyber-green">{{ prereq.rollback_ok }}</span></div>
|
|
<div class="flex justify-between"><span class="text-gray-500">Disque</span><span class="text-cyber-green">{{ prereq.disk_ok }}</span></div>
|
|
</div>
|
|
{% if prereq.total_pending > 0 %}
|
|
<div class="w-full h-2 bg-gray-800 rounded-full overflow-hidden mt-2">
|
|
<div class="h-full bg-cyber-green" style="width: {{ (prereq.prereq_ok / prereq.total_pending * 100)|int }}%"></div>
|
|
</div>
|
|
{% endif %}
|
|
</div>
|
|
{% endif %}
|
|
|
|
<!-- Table serveurs -->
|
|
<div x-data="{ action: null, target: null }" class="card overflow-x-auto">
|
|
<table class="w-full table-cyber text-xs">
|
|
<thead><tr>
|
|
<th class="text-left p-2">Hostname</th>
|
|
<th class="p-2">Domaine</th>
|
|
<th class="p-2">Env</th>
|
|
<th class="p-2">Tier</th>
|
|
<th class="p-2">Jour prevu</th>
|
|
<th class="p-2">Heure</th>
|
|
<th class="p-2">Intervenant</th>
|
|
{% if c.status == 'draft' %}
|
|
<th class="p-2">SSH</th>
|
|
<th class="p-2">Sat</th>
|
|
<th class="p-2">Disque</th>
|
|
{% endif %}
|
|
<th class="p-2">Statut</th>
|
|
<th class="p-2">Actions</th>
|
|
</tr></thead>
|
|
<tbody>
|
|
{% for s in sessions %}
|
|
<tr id="row-{{ s.id }}" class="{% if s.status == 'excluded' %}opacity-40{% elif s.status == 'patched' %}opacity-60{% elif s.status == 'failed' %}bg-red-900/10{% endif %}">
|
|
<td class="p-2 font-mono text-cyber-accent">{{ s.hostname }}</td>
|
|
<td class="p-2 text-center">{{ s.domaine or '-' }}</td>
|
|
<td class="p-2 text-center"><span class="badge {% if s.environnement == 'Production' %}badge-green{% else %}badge-yellow{% endif %}">{{ (s.environnement or '-')[:6] }}</span></td>
|
|
<td class="p-2 text-center"><span class="badge {% if s.tier == 'tier0' %}badge-red{% elif s.tier == 'tier1' %}badge-yellow{% else %}badge-blue{% endif %}">{{ s.tier }}</span></td>
|
|
<td class="p-2 text-center">{% if s.date_prevue %}{% set jours = {0:'Lun',1:'Mar',2:'Mer',3:'Jeu',4:'Ven',5:'Sam',6:'Dim'} %}{{ jours[s.date_prevue.weekday()] }} {{ s.date_prevue.strftime('%d/%m') }}{% else %}-{% endif %}</td>
|
|
<td class="p-2 text-center text-gray-400">{{ s.heure_prevue or s.pref_patch_heure or '-' }}</td>
|
|
<td class="p-2 text-center">
|
|
{% if s.intervenant_name %}
|
|
<span class="text-cyber-accent">{{ s.intervenant_name }}</span>
|
|
{% if s.forced_assignment %}<span class="text-cyber-yellow text-[9px] ml-0.5" title="Intervenant référent">🔒</span>{% endif %}
|
|
{% else %}<span class="text-gray-600">—</span>{% endif %}
|
|
</td>
|
|
{% if c.status == 'draft' %}
|
|
<td class="p-2 text-center">{% if s.prereq_ssh == 'ok' %}<span class="text-cyber-green">OK</span>{% elif s.prereq_ssh == 'ko' %}<span class="text-cyber-red">KO</span>{% else %}-{% endif %}</td>
|
|
<td class="p-2 text-center">{% if s.prereq_satellite == 'ok' %}<span class="text-cyber-green">OK</span>{% elif s.prereq_satellite == 'ko' %}<span class="text-cyber-red">KO</span>{% else %}-{% endif %}</td>
|
|
<td class="p-2 text-center">{% if s.prereq_disk_ok is true %}<span class="text-cyber-green">OK</span>{% elif s.prereq_disk_ok is false %}<span class="text-cyber-red">KO</span>{% else %}-{% endif %}</td>
|
|
{% endif %}
|
|
<td class="p-2 text-center">
|
|
<span class="badge {% if s.status == 'patched' %}badge-green{% elif s.status == 'failed' %}badge-red{% elif s.status == 'excluded' %}badge-gray{% elif s.status == 'in_progress' %}badge-yellow{% else %}badge-gray{% endif %}">{{ s.status }}</span>
|
|
{% if s.exclusion_reason %}
|
|
<div class="text-[9px] text-gray-500" title="{{ s.exclusion_detail or '' }}">
|
|
{% if s.exclusion_reason == 'eol' %}EOL{% elif s.exclusion_reason == 'creneau_inadequat' %}Prérequis KO{% elif s.exclusion_reason == 'non_patchable' %}Non patchable{% else %}{{ s.exclusion_reason }}{% endif %}
|
|
{% if s.excluded_by %}<span class="text-gray-600">({{ s.excluded_by }})</span>{% endif %}
|
|
</div>
|
|
{% endif %}
|
|
</td>
|
|
<td class="p-2 text-center">
|
|
{% if s.status == 'excluded' and can_edit_campaigns %}
|
|
<form method="POST" action="/campaigns/session/{{ s.id }}/restore" style="display:inline"><button class="btn-sm bg-green-900/30 text-cyber-green">Restaurer</button></form>
|
|
|
|
{% elif s.status == 'pending' %}
|
|
{% if c.status == 'planned' %}
|
|
{# Intervenant: prendre/liberer #}
|
|
{% if not s.intervenant_id %}
|
|
<form method="POST" action="/campaigns/session/{{ s.id }}/take" style="display:inline"><button class="btn-sm bg-cyber-accent text-black">Prendre</button></form>
|
|
{% elif s.intervenant_id == user.uid and not s.forced_assignment %}
|
|
<form method="POST" action="/campaigns/session/{{ s.id }}/release" style="display:inline"><button class="btn-sm bg-cyber-border text-gray-400">Liberer</button></form>
|
|
{% endif %}
|
|
{# Coordinateur: assigner + planifier #}
|
|
{% if can_edit_campaigns %}
|
|
<button @click="action = 'assign'; target = {{ s.id }}" class="btn-sm bg-cyber-border text-cyber-accent">Assigner</button>
|
|
<button @click="action = 'schedule'; target = {{ s.id }}" class="btn-sm bg-cyber-border text-gray-400">Planifier</button>
|
|
{% endif %}
|
|
|
|
{% elif c.status == 'draft' and can_edit_campaigns %}
|
|
<div class="flex gap-1 justify-center">
|
|
<form method="POST" action="/campaigns/session/{{ s.id }}/check-prereq" style="display:inline"><button class="btn-sm bg-cyber-border text-cyber-accent">Check</button></form>
|
|
<button @click="action = 'exclude'; target = {{ s.id }}" class="btn-sm bg-cyber-border text-gray-400">Exclure</button>
|
|
</div>
|
|
{% endif %}
|
|
{% endif %}
|
|
</td>
|
|
</tr>
|
|
|
|
{# Formulaires inline #}
|
|
{% if s.status == 'pending' %}
|
|
<tr x-show="target === {{ s.id }} && action === 'exclude'" class="bg-cyber-bg">
|
|
<td colspan="12" class="p-2">
|
|
<form method="POST" action="/campaigns/session/{{ s.id }}/exclude" class="flex gap-2 items-center flex-wrap">
|
|
<select name="reason" required class="text-xs py-1 px-2">{% for code, label in exclusion_reasons %}<option value="{{ code }}">{{ label }}</option>{% endfor %}</select>
|
|
<input type="text" name="detail" placeholder="Justification" class="text-xs py-1 px-2 flex-1">
|
|
<button type="submit" class="btn-sm bg-red-900/30 text-cyber-red">Confirmer</button>
|
|
<button type="button" @click="target = null" class="btn-sm bg-cyber-border text-gray-400">X</button>
|
|
</form>
|
|
</td>
|
|
</tr>
|
|
<tr x-show="target === {{ s.id }} && action === 'assign'" class="bg-cyber-bg">
|
|
<td colspan="12" class="p-2">
|
|
<form method="POST" action="/campaigns/session/{{ s.id }}/assign" class="flex gap-2 items-center">
|
|
<select name="intervenant_id" class="text-xs py-1 px-2">
|
|
<option value="">— Désassigner —</option>
|
|
{% for u in intervenants %}<option value="{{ u.id }}" {% if s.intervenant_id == u.id %}selected{% endif %}>{{ u.display_name }}</option>{% endfor %}
|
|
</select>
|
|
<label class="flex items-center gap-1 text-xs text-gray-400"><input type="checkbox" name="forced" {% if s.forced_assignment %}checked{% endif %}> Forcer</label>
|
|
<button type="submit" class="btn-sm bg-cyber-accent text-black">OK</button>
|
|
<button type="button" @click="target = null" class="btn-sm bg-cyber-border text-gray-400">X</button>
|
|
</form>
|
|
</td>
|
|
</tr>
|
|
<tr x-show="target === {{ s.id }} && action === 'schedule'" class="bg-cyber-bg">
|
|
<td colspan="12" class="p-2">
|
|
<form method="POST" action="/campaigns/session/{{ s.id }}/schedule" class="flex gap-2 items-center">
|
|
<input type="date" name="date_prevue" value="{{ s.date_prevue.strftime('%Y-%m-%d') if s.date_prevue else '' }}" class="text-xs py-1 px-2">
|
|
<input type="text" name="heure_prevue" value="{{ s.heure_prevue or '' }}" placeholder="ex: 9h00, 14h00" class="text-xs py-1 px-2 w-24">
|
|
<button type="submit" class="btn-sm bg-cyber-accent text-black">OK</button>
|
|
<button type="button" @click="target = null" class="btn-sm bg-cyber-border text-gray-400">X</button>
|
|
</form>
|
|
</td>
|
|
</tr>
|
|
{% endif %}
|
|
{% endfor %}
|
|
</tbody>
|
|
</table>
|
|
</div>
|
|
|
|
<!-- Limites intervenants (coordinateur, planned) -->
|
|
{% if can_edit_campaigns and c.status in ('planned', 'pending_validation') %}
|
|
<div class="card p-4 mt-4">
|
|
<h3 class="text-sm font-bold text-cyber-accent mb-3">Limites intervenants pour cette campagne</h3>
|
|
{% if op_limits %}
|
|
<div class="grid grid-cols-3 gap-2 text-xs mb-3">
|
|
{% for ol in op_limits %}
|
|
<div class="flex justify-between items-center bg-cyber-bg p-2 rounded">
|
|
<span>{{ ol.display_name }}</span>
|
|
<span class="badge badge-yellow">max {{ ol.max_servers }}{% if ol.note %} — {{ ol.note }}{% endif %}</span>
|
|
</div>
|
|
{% endfor %}
|
|
</div>
|
|
{% endif %}
|
|
<form method="POST" action="/campaigns/{{ c.id }}/intervenant-limit" class="flex gap-2 items-end">
|
|
<div>
|
|
<label class="text-xs text-gray-500">Intervenant</label>
|
|
<select name="intervenant_id" class="text-xs py-1 px-2">
|
|
{% for u in intervenants %}<option value="{{ u.id }}">{{ u.display_name }}</option>{% endfor %}
|
|
</select>
|
|
</div>
|
|
<div>
|
|
<label class="text-xs text-gray-500">Max serveurs</label>
|
|
<input type="number" name="max_servers" min="0" value="5" class="text-xs py-1 px-2 w-16">
|
|
</div>
|
|
<div class="flex-1">
|
|
<label class="text-xs text-gray-500">Raison</label>
|
|
<input type="text" name="note" placeholder="ex: autre mission en parallele" class="text-xs py-1 px-2 w-full">
|
|
</div>
|
|
<button type="submit" class="btn-primary px-3 py-1 text-sm">Définir</button>
|
|
</form>
|
|
</div>
|
|
{% endif %}
|
|
{% endblock %}
|