+ You are authenticated as {{ user.username }}. Go to my dashboard or login as a different user. +
+ {% endif %} + + + + +
+
+
+
+ {% block main_content %}
+
+ {% endblock %}
+
+ Index of {{ directory }}
+-
+ {% ifnotequal directory "/" %}
+
- ../ + {% endifnotequal %} + {% for f in file_list %} +
- {{ f }} + {% endfor %} +
- \
+
- Minimum length is 8 characters \ +
- Maximum length is 50 characters \ +
- Requires at least 1 number \ +
- Requires at least 1 special character ("+" and "=" don\'t count) \ +
- Requires uppercase letters \ +
- Requires lowercase letters \ +
Registration Almost Complete
{% endblock %} + +{% block content %} +Please check your email {% if email %}to {{ email }}{% endif %} for a verification code.
+If you don't receive an email, please make sure you've entered the correct address, + and check your spam folder.
+Still didn't get the code? Resend it
+ + + +{% endblock %} + + + diff --git a/cogauth/templates/cogauth/account_confirmed.html b/cogauth/templates/cogauth/account_confirmed.html new file mode 100644 index 0000000..14d3e3f --- /dev/null +++ b/cogauth/templates/cogauth/account_confirmed.html @@ -0,0 +1,18 @@ +{% extends "vince/login.html" %} + +{% load i18n static %} + +{% block content_title %}Registration Complete
{% endblock %} + +{% block content %} + +
+ Your account has been confirmed. You may now login.
+
+
+ Login
+
+{% endblock %}
+
+
+
diff --git a/cogauth/templates/cogauth/account_error.html b/cogauth/templates/cogauth/account_error.html
new file mode 100644
index 0000000..547546b
--- /dev/null
+++ b/cogauth/templates/cogauth/account_error.html
@@ -0,0 +1,17 @@
+{% extends "vince/login.html" %}
+
+{% load i18n static %}
+
+{% block content_title %}VINCE Registration Error
{% endblock %} + +{% block content %} +
+ There was an error confirming your account:
+ {{ error_msg }} +
++ {{ error_msg }} +
If you typed in the wrong code by mistake, please try again.
+Otherwise, please email {{ CONTACT_EMAIL }} for assistance
+ +{% endblock %} + + diff --git a/cogauth/templates/cogauth/base.html b/cogauth/templates/cogauth/base.html new file mode 100644 index 0000000..267b5f0 --- /dev/null +++ b/cogauth/templates/cogauth/base.html @@ -0,0 +1,81 @@ + + + + + + + + + + +
+
+ {% endblock content %}
+ {% endblock body %}
+
+
+
+
+ {% block js %}
+
+
+ {% endblock %}
+
+
diff --git a/cogauth/templates/cogauth/change_password_and_register.html b/cogauth/templates/cogauth/change_password_and_register.html
new file mode 100644
index 0000000..8d3a5c9
--- /dev/null
+++ b/cogauth/templates/cogauth/change_password_and_register.html
@@ -0,0 +1,68 @@
+{% extends "vince/login.html" %}
+
+{% load i18n static %}
+
+{% block content_title %}
+
+
{% endblock %}
+
+{% block breadcrumbs %}{% endblock %}
+
+
+{% block content %}
+VINCE Password Change Required
+
+
+
+
+{% endblock %}
diff --git a/cogauth/templates/cogauth/gentoken.html b/cogauth/templates/cogauth/gentoken.html
new file mode 100644
index 0000000..9e5faee
--- /dev/null
+++ b/cogauth/templates/cogauth/gentoken.html
@@ -0,0 +1,32 @@
+{% extends "vince/modal.html" %}
+
+{% block content %}
+{% load widget_tweaks %}
+You must change your password before logging in. +
+
+
+
+
+{% endblock %}
+
diff --git a/cogauth/templates/cogauth/limitexceeded.html b/cogauth/templates/cogauth/limitexceeded.html
new file mode 100644
index 0000000..52184b4
--- /dev/null
+++ b/cogauth/templates/cogauth/limitexceeded.html
@@ -0,0 +1,17 @@
+{% extends "vince/login.html" %}
+
+{% load i18n static %}
+
+{% block content_title %}VINCE Error
{% endblock %} + +{% block breadcrumbs %}{% endblock %} + +{% block content %} +Uh Oh!
+An error occurred when trying to verify your account: Attempt limit exceeded, please try after some time.
+ + +{% endblock %} + + + diff --git a/cogauth/templates/cogauth/login.html b/cogauth/templates/cogauth/login.html new file mode 100644 index 0000000..e1a4d8b --- /dev/null +++ b/cogauth/templates/cogauth/login.html @@ -0,0 +1,68 @@ +{% extends "vince/login.html" %} +{% load i18n static %} + +{% block extrahead %} + +{% if token_login %} + +{% endif %} +{% endblock %} + +{% block content %} + +{% if form.non_field_errors %} +{% for error in form.non_field_errors %} +
+ {{ error }}
+
+{% endfor %}
+{% endif %}
+
+
+
+
+
+ {% if user.is_authenticated %}
+
+{% if token_login %}
+
+{% endif %}
+{% endblock %}
diff --git a/cogauth/templates/cogauth/loginhelp.html b/cogauth/templates/cogauth/loginhelp.html
new file mode 100644
index 0000000..600b670
--- /dev/null
+++ b/cogauth/templates/cogauth/loginhelp.html
@@ -0,0 +1,16 @@
+{% extends "vince/login.html" %}
+
+{% load i18n static %}
+
+
+{% block content_title %}VINCE Account Help
{% endblock %} + +{% block content %} + +If you lost your multi-factor authentication (MFA) device, you will need to contact us at {{ CONTACT_EMAIL }} to reset your account.
+ + + +{% endblock %} + + diff --git a/cogauth/templates/cogauth/logout.html b/cogauth/templates/cogauth/logout.html new file mode 100644 index 0000000..84db136 --- /dev/null +++ b/cogauth/templates/cogauth/logout.html @@ -0,0 +1,27 @@ +{% extends "vince/login.html" %} +{% load i18n static %} + +{% block extrahead %} + +{% if token_login %} + +{% endif %} +{% endblock %} + +{% block content_title %}Logged out
+
++ {% trans "See you again soon." %} +
++ +
+{% endblock %} + + diff --git a/cogauth/templates/cogauth/mfa.html b/cogauth/templates/cogauth/mfa.html new file mode 100644 index 0000000..1c806dc --- /dev/null +++ b/cogauth/templates/cogauth/mfa.html @@ -0,0 +1,30 @@ +{% extends "vince/login.html" %} +{% load widget_tweaks %} +{% block title %}VINCE{% endblock %} + +{% block content_title %}
Multi-factor Authentication Required
+
+
+
+{% endblock %}
+
diff --git a/cogauth/templates/cogauth/mfarequired.html b/cogauth/templates/cogauth/mfarequired.html
new file mode 100644
index 0000000..93dd078
--- /dev/null
+++ b/cogauth/templates/cogauth/mfarequired.html
@@ -0,0 +1,54 @@
+{% extends "vince/login.html" %}
+
+{% load i18n static %}
+
+
+{% block content_title %}
+
+
{% endblock %}
+
+{% block breadcrumbs %}{% endblock %}
+
+{% block content %}
+VINCE Multi-factor authentication
+
+
+{% if device %}
+Your account is secured using multi-factor authentication (MFA). + To finish signing in, turn on or view your MFA device and type the authentication code below. +
+
+
+{% endif %}
+{% if action %}
+
+Friendly device name: {{ device }}
++ +{% endblock %} + + + diff --git a/cogauth/templates/cogauth/password_change_done.html b/cogauth/templates/cogauth/password_change_done.html new file mode 100644 index 0000000..4fd6cee --- /dev/null +++ b/cogauth/templates/cogauth/password_change_done.html @@ -0,0 +1,28 @@ +{% extends VINCECOMM_BASE_TEMPLATE %} + +{% load i18n static %} + +{% block title %}Password Change Complete{% endblock %} + +{% block content %} +
+
+
+
+
+
+ Password Change Complete
+
+
+
+
+
+{% endblock %}
+
+
+
diff --git a/cogauth/templates/cogauth/password_change_form.html b/cogauth/templates/cogauth/password_change_form.html
new file mode 100644
index 0000000..6ffe831
--- /dev/null
+++ b/cogauth/templates/cogauth/password_change_form.html
@@ -0,0 +1,82 @@
+{% extends VINCECOMM_BASE_TEMPLATE %}
+{% load i18n static %}
+{% block title %}Change Password{% endblock %}
+{% block content %}
+
+
+
+
+
+
+
+ {% trans 'Your password was changed.' %}
+
+
+
+
+
+
+
+{% endblock %}
diff --git a/cogauth/templates/cogauth/password_reset_complete.html b/cogauth/templates/cogauth/password_reset_complete.html
new file mode 100644
index 0000000..e75bace
--- /dev/null
+++ b/cogauth/templates/cogauth/password_reset_complete.html
@@ -0,0 +1,41 @@
+{% extends "martie/base_site.html" %}
+{% load i18n static %}
+
+{% block extrastyle %}{{ block.super }}
+
+
+
+{{ form.media }}
+{% endblock %}
+
+{% block bodyclass %}{{ block.super }}login{% endblock %}
+
+{% block usertools %}{% endblock %}
+
+{% block nav-global %}{% endblock %}
+
+{% block content_title %}{% endblock %}
+
+{% block breadcrumbs %}{% endblock %}
+
+
+{% block content %}
+
+
+
+
+ Change your Password
+
+
+ + Your password has been set. You may go ahead and sign in now. +
+{% endblock %} + + +{% block footer %} + +
+
+
+
+{% endblock %}
diff --git a/cogauth/templates/cogauth/password_reset_confirm.html b/cogauth/templates/cogauth/password_reset_confirm.html
new file mode 100644
index 0000000..f5d1a08
--- /dev/null
+++ b/cogauth/templates/cogauth/password_reset_confirm.html
@@ -0,0 +1,54 @@
+{% extends "martie/base_site.html" %}
+
+{% load i18n static %}
+
+{% block extrastyle %}{{ block.super }}
+
+
+{{ form.media }}
+{% endblock %}
+
+{% block bodyclass %}{{ block.super }}login{% endblock %}
+
+{% block content_title %}
+
+
+ 
+
+
+ ©2018 Carnegie Mellon University
+ Change Martie Password
{% endblock %} + +{% block breadcrumbs %}{% endblock %} + +{% block content %} + {% if validlink %} + + {% else %} ++ The password reset link was invalid, possibly because it has already been used. + Please request a new password reset. +
+ {% endif %} +{% endblock %} + + +{% block footer %} + +
+
+
+
+{% endblock %}
diff --git a/cogauth/templates/cogauth/password_reset_done.html b/cogauth/templates/cogauth/password_reset_done.html
new file mode 100644
index 0000000..ae7ff9b
--- /dev/null
+++ b/cogauth/templates/cogauth/password_reset_done.html
@@ -0,0 +1,44 @@
+{% extends "martie/base_site.html" %}
+
+{% load i18n static %}
+
+{% block extrastyle %}{{ block.super }}
+
+
+{{ form.media }}
+{% endblock %}
+
+{% block bodyclass %}{{ block.super }}login{% endblock %}
+
+{% block content_title %}
+
+
+
+
+
+ ©2018 Carnegie Mellon University
+ Martie Password Reset Done
{% endblock %} + +{% block breadcrumbs %}{% endblock %} + +{% block content %} ++ We've emailed you instructions for setting your password, if an account exists with the email you entered. + You should receive them shortly. +
++ If you don't receive an email, please make sure you've entered the address you registered with, + and check your spam folder. +
+ + +{% endblock %} + + +{% block footer %} + +
+
+
+
+{% endblock %}
+
diff --git a/cogauth/templates/cogauth/password_reset_email.html b/cogauth/templates/cogauth/password_reset_email.html
new file mode 100644
index 0000000..8a1ce45
--- /dev/null
+++ b/cogauth/templates/cogauth/password_reset_email.html
@@ -0,0 +1,14 @@
+{% autoescape off %}
+To initiate the password reset process for your {{ user.get_username }} MARTIE Account,
+click the link below:
+
+{{ protocol }}://{{ domain }}{% url 'password_reset_confirm' uidb64=uid token=token %}
+
+If clicking the link above doesn't work, please copy and paste the URL in a new browser
+window instead.
+
+Sincerely,
+The Data Integration Team
+We <3 MARTIE
+
+{% endautoescape %}
diff --git a/cogauth/templates/cogauth/password_reset_subject.html b/cogauth/templates/cogauth/password_reset_subject.html
new file mode 100644
index 0000000..0fad30c
--- /dev/null
+++ b/cogauth/templates/cogauth/password_reset_subject.html
@@ -0,0 +1 @@
+MARTIE password reset
diff --git a/cogauth/templates/cogauth/profile.html b/cogauth/templates/cogauth/profile.html
new file mode 100644
index 0000000..202b01c
--- /dev/null
+++ b/cogauth/templates/cogauth/profile.html
@@ -0,0 +1,102 @@
+{% extends VINCECOMM_BASE_TEMPLATE %}
+{% load i18n static %}
+{% block js %}
+{{ block.super }}
+
+{% endblock %}
+{% block title %}VINCE Profile{% endblock %}
+
+{% block content %}
+
+
+
+
+
+
+ ©2018 Carnegie Mellon University
+
+
+
+
+
+
+
+
+ User Profile
+
+
+
+
+
+ {% for message in messages %}
+
+
+ {% endfor %}
+
+
+ \d+)/', views.GenerateServiceTokenView.as_view(), name='genservicetoken'),
+ path('account/help/', TemplateView.as_view(template_name='cogauth/loginhelp.html'), name='loginhelp'),
+ path('confirmed/', TemplateView.as_view(template_name='cogauth/account_confirmed.html'), name='account_confirmed'),
+ path('resetpassword/confirmed/', TemplateView.as_view(template_name='cogauth/pw_confirmed.html'), name='pw_reset_confirmed'),
+ path('changePassword/', views.ChangePasswordView.as_view(template_name='cogauth/password_change_form.html'),name='password_change'),
+ path('changePassword/done/', TemplateView.as_view(template_name='cogauth/password_change_done.html'), name='password_change_done'),
+ path('init/resetpassword/', views.InitialPasswordResetView.as_view(), name='init_password_reset'),
+ path('resetpassword/', views.ResetPasswordView.as_view(), name='passwordreset'),
+ path('changePasswordRegister/', views.ChangePasswordandRegisterView.as_view(),name='password_register'),
+ path('account_activation_sent/', views.ConfirmRegister.as_view(), name='account_activation_sent'),
+ path('resend/', views.ResendConfirmationCode.as_view(), name='resend'),
+]
+
+try:
+ if settings.MULTIURL_CONFIG:
+ urlpatterns.extend([
+ path('logout/', auth_views.LogoutView.as_view(template_name='cogauth/logout.html'), name='logout'),
+ ])
+ else:
+ urlpatterns.extend([
+ path('logout/', auth_views.LogoutView.as_view(extra_context={'token_login':1}, template_name='cogauth/logout.html'), name='logout'),
+ ])
+
+except:
+ urlpatterns.extend([
+ path('logout/', auth_views.LogoutView.as_view(extra_context={'token_login':1}, template_name='cogauth/logout.html'), name='logout'),
+ ])
diff --git a/cogauth/utils.py b/cogauth/utils.py
new file mode 100644
index 0000000..d05643e
--- /dev/null
+++ b/cogauth/utils.py
@@ -0,0 +1,660 @@
+#########################################################################
+# VINCE
+#
+# Copyright 2022 Carnegie Mellon University.
+#
+# NO WARRANTY. THIS CARNEGIE MELLON UNIVERSITY AND SOFTWARE ENGINEERING
+# INSTITUTE MATERIAL IS FURNISHED ON AN "AS-IS" BASIS. CARNEGIE MELLON
+# UNIVERSITY MAKES NO WARRANTIES OF ANY KIND, EITHER EXPRESSED OR IMPLIED,
+# AS TO ANY MATTER INCLUDING, BUT NOT LIMITED TO, WARRANTY OF FITNESS FOR
+# PURPOSE OR MERCHANTABILITY, EXCLUSIVITY, OR RESULTS OBTAINED FROM USE OF THE
+# MATERIAL. CARNEGIE MELLON UNIVERSITY DOES NOT MAKE ANY WARRANTY OF ANY KIND
+# WITH RESPECT TO FREEDOM FROM PATENT, TRADEMARK, OR COPYRIGHT INFRINGEMENT.
+#
+# Released under a MIT (SEI)-style license, please see license.txt or contact
+# permission@sei.cmu.edu for full terms.
+#
+# [DISTRIBUTION STATEMENT A] This material has been approved for public
+# release and unlimited distribution. Please see Copyright notice for non-US
+# Government use and distribution.
+#
+# Carnegie Mellon®, CERT® and CERT Coordination Center® are registered in the
+# U.S. Patent and Trademark Office by Carnegie Mellon University.
+#
+# This Software includes and/or makes use of Third-Party Software each subject
+# to its own license.
+#
+# DM21-1126
+########################################################################
+
+from django.conf import settings
+from lib.warrant import Cognito
+import boto3
+from lib.warrant.aws_srp import AWSSRP
+from boto3.exceptions import Boto3Error
+from botocore.exceptions import ClientError, ParamValidationError
+from django.core.exceptions import SuspiciousOperation
+from jose import jwk, jwt
+from jose.exceptions import JWTClaimsError, JWTError, ExpiredSignatureError
+from jose.utils import base64url_decode
+from vinny.models import VinceCommEmail, GroupContact, VinceCommInvitedUsers, VinceCommGroupAdmin, CaseMember
+from vince.models import GroupSettings
+from vinny.mailer import send_templated_mail
+from django.contrib.auth.models import User, Group
+import urllib
+import json
+import time
+import logging
+import traceback
+
+logger = logging.getLogger(__name__)
+logger.setLevel(logging.DEBUG)
+
+#verify token code based on
+# https://github.com/awslabs/aws-support-tools/blob/master/Cognito/decode-verify-jwt/decode-verify-jwt.py
+
+#now setup in settings.py
+#keys_url = 'https://cognito-idp.{}.amazonaws.com/{}/.well-known/jwks.json'.format(settings.COGNITO_REGION, settings.COGNITO_USER_POOL_ID)
+#response = urllib.request.urlopen(keys_url)
+#keys = json.loads(response.read())['keys']
+
+def get_cognito_pool_url(aws_region, aws_user_pool):
+
+ return (
+ "https://cognito-idp.{}.amazonaws.com/{}".
+ format(aws_region, aws_user_pool)
+ )
+
+
+def get_cognito(request):
+
+ c = Cognito(settings.COGNITO_USER_POOL_ID,settings.COGNITO_APP_ID,
+ user_pool_region=settings.COGNITO_REGION,
+ access_token=request.session.get('ACCESS_TOKEN'),
+ id_token=request.session.get('ID_TOKEN'),
+ refresh_token=request.session.get('REFRESH_TOKEN'))
+ changed = c.check_token()
+ if changed:
+ #verify token
+ claims = token_verify(c.access_token, expire_fail=True)
+ if claims:
+ request.session['ACCESS_TOKEN'] = c.access_token
+ request.session['REFRESH_TOKEN'] = c.refresh_token
+ request.session['ID_TOKEN'] = c.id_token
+ #request.session.save()
+ else:
+ #invalid token, remove access
+ del(request.session['ACCESS_TOKEN'])
+ del(request.session['REFERSH_TOKEN'])
+ del(request.session['ID_TOKEN'])
+ c = None
+ raise SuspiciousOperation()
+ return c
+
+def token_verify(token, expire_fail=False):
+ # get the kid from the headers prior to verification
+ try:
+ headers = jwt.get_unverified_headers(token)
+ except:
+ logger.debug("Error getting tokens")
+ return False
+ kid = headers['kid']
+ # search for the kid in the downloaded public keys
+ key_index = -1
+ for i in range(len(settings.COGNITO_KEYS)):
+ if kid == settings.COGNITO_KEYS[i]['kid']:
+ key_index = i
+ break
+ if key_index == -1:
+ logger.debug('Public key not found in jwks.json')
+ return False
+
+ kargs = {"issuer": get_cognito_pool_url(settings.COGNITO_REGION, settings.COGNITO_USER_POOL_ID),
+ 'audience': settings.COGNITO_APP_ID}
+
+ try:
+ claims = jwt.decode(token, settings.COGNITO_KEYS[key_index], **kargs)
+ except JWTClaimsError as e:
+ logger.debug('JWT Claims failed decode')
+ logger.debug(e)
+ return False
+ except ExpiredSignatureError as e:
+ logger.debug('Decode Token expired, refresh next step')
+ logger.debug(e)
+ if expire_fail:
+ return False
+ pass
+ except JWTError as e:
+ logger.debug('JWT Signature is invalid')
+ logger.debug(e)
+ return False
+ # THE BELOW MAY NOT BE NECESSARY since adding jwt.decode
+
+ # construct the public key
+ public_key = jwk.construct(settings.COGNITO_KEYS[key_index])
+ # get the last two sections of the token,
+ # message and signature (encoded in base64)
+ message, encoded_signature = str(token).rsplit('.', 1)
+ # decode the signature
+ decoded_signature = base64url_decode(encoded_signature.encode('utf-8'))
+ # verify the signature
+ if not public_key.verify(message.encode("utf8"), decoded_signature):
+ logger.debug('Signature verification failed')
+ return False
+ #logger.debug('Signature successfully verified')
+ # since we passed the verification, we can now safely
+ # use the unverified claims
+ claims = jwt.get_unverified_claims(token)
+ # and the Audience (use claims['client_id'] if verifying an access token)
+ if claims.get('client_id'):
+ if claims['client_id'] != settings.COGNITO_APP_ID:
+ logger.debug('Token was not issued for this audience')
+ return False
+ elif claims.get('aud'):
+ # this is called aud in the ID_TOKEN, but client_id in the ACCESS TOKEN
+ if claims['aud'] != settings.COGNITO_APP_ID:
+ logger.debug('Token was not issued for this audience')
+ return False
+ # now we can use the claims
+ # additionally we can verify the token expiration
+ if time.time() > claims['exp']:
+ logger.debug(f'Token is expired, refresh next step {claims["exp"]}')
+ if expire_fail:
+ return False
+ return True
+ return claims
+
+def get_group(token):
+ claims = token_verify(token, expire_fail=True)
+ if claims:
+ return claims.get('cognito:groups')
+ return []
+
+def cognito_add_user_to_group(user, group):
+ logger.debug("Sending request")
+ sns = boto3.client('sns', region_name=settings.AWS_REGION)
+ response = sns.publish(
+ TargetArn=settings.VINCE_ERROR_SNS_ARN,
+ Subject='Please add user to cognito group',
+ MessageStructure='string',
+ MessageAttributes={
+ 'Group': {
+ 'DataType': 'String',
+ 'StringValue': group,
+ },
+ 'User': {
+ 'DataType': 'String',
+ 'StringValue': user.username
+ }
+ },
+ Message="Please add user %s to the admin group" % user.username
+ )
+
+
+def cognito_admin_user(request):
+ groups = get_group(request.session.get('ACCESS_TOKEN'))
+ if groups:
+ if settings.COGNITO_ADMIN_GROUP in groups:
+ return True
+ return False
+
+
+def add_permissions(user):
+ #check email in contact db, make sure email is active and contact is active
+ user_allowed_groups = []
+ email_contact = VinceCommEmail.objects.filter(email__iexact=user.email, email_list=False, status=True, contact__active=True)
+ for contact in email_contact:
+ logger.info(f"Found user { user.username } in contacts")
+ user_allowed_groups.append(str(contact.contact.uuid))
+ group = Group.objects.filter(name=contact.contact.uuid).first()
+ if group:
+ group.user_set.add(user)
+ logger.info(f"Adding user { user.username } to group { group.name }")
+ user.vinceprofile.pending = False
+ user.vinceprofile.save()
+ else:
+ logger.info(f"Creating group { contact.contact.uuid } for { contact.contact.vendor_name }")
+ group = Group(name=contact.contact.uuid)
+ group.save()
+ logger.info(f"Adding user { user.username } to group { group.name }")
+ group.user_set.add(user)
+ #Connecting Group to Contact
+ gc = GroupContact(group=group,
+ contact=contact.contact)
+ gc.save()
+ user.vinceprofile.pending = False
+ user.vinceprofile.save()
+ groupadmin = VinceCommGroupAdmin.objects.filter(email=contact).first()
+ if groupadmin:
+ # this user is a group admin so add admin privileges
+ ga = Group.objects.filter(name='vince_group_admin').first()
+ if ga:
+ ga.user_set.add(user)
+
+ if len(email_contact) == 0:
+ logger.info(f"No contact information on user { user.username }")
+
+ # was this user [also] invited?
+ vciu = VinceCommInvitedUsers.objects.filter(email__iexact = user.email)
+ for u in vciu:
+ group = Group.objects.filter(name=u.case.vuid).first()
+ if group:
+ group.user_set.add(user)
+ logger.info(f"Adding user { user.username } to group { group.name }")
+ user.vinceprofile.pending = False
+ user.vinceprofile.save()
+ else:
+ logger.info(f"Creating group { u.case.vuid }")
+ group = Group(name=u.case.vuid)
+ group.save()
+ logger.info(f"Adding user { user.username } to group { group.name }")
+ group.user_set.add(user)
+ user.vinceprofile.pending = False
+ user.vinceprofile.save()
+ member, created = CaseMember.objects.update_or_create(case=u.case,
+ participant=user,
+ defaults = {'coordinator': u.coordinator,
+ 'user': u.user,
+ 'vince_id': u.vince_id,
+ 'group': group
+ })
+ if created:
+ logger.info(f"Adding user {user.username} to case {u.case.vuid}")
+ else:
+ logger.info(f"User already a member")
+
+ if len(vciu) == 0:
+ logger.info(f"User { user.username } was not invited to participate in case")
+
+ #inventory vendor groups and remove any that this user shouldn't be apart of.
+ user_groups = user.groups.exclude(groupcontact__isnull=True)
+ for g in user_groups:
+ if g.name not in user_allowed_groups:
+ #this user must have been removed at some point, email was marked inactive,
+ #or this contact became inactive
+ logger.debug(g.name)
+ logger.info(f"Removing {user.username} from group {g.name}: {g.groupcontact.contact}")
+ g.user_set.remove(user)
+
+
+
+def cognito_check_track_permissions(request):
+ old_user = False
+ groups = get_group(request.session.get('ACCESS_TOKEN'))
+ if groups:
+ vt_groups = settings.COGNITO_VINCETRACK_GROUPS.split(",")
+ if list(set(vt_groups) & set(groups)):
+ # if vtgroups and this user's group intersect:
+ vincegroup = Group.objects.using('default').filter(name='vince').first()
+ if vincegroup:
+ if request.user.groups.filter(name='vince').exists():
+ old_user = True
+ else:
+ vincegroup.user_set.add(request.user)
+
+ for g in groups:
+ #Does COGNITO group exist in VINCE? If so, add the user to that track group.
+ gs = GroupSettings.objects.filter(organization=g).first()
+ if gs:
+ vgroup = gs.group
+ if request.user.groups.filter(name=vgroup.name).exists():
+ logger.info(f"User already in group {vgroup.name}")
+ else:
+ vgroup.user_set.add(request.user)
+ #set contact permissions
+ if (old_user==False):
+ # this is a new user - so give initial perms
+ request.user.usersettings.contacts_read = vgroup.groupsettings.contacts_read
+ request.user.usersettings.contacts_write = vgroup.groupsettings.contacts_write
+ request.user.usersettings.save()
+ else:
+ logger.info(f"LOCAL GROUP tied to Cognito group {g} doesn't exist")
+
+
+ if settings.COGNITO_ADMIN_GROUP in groups:
+ # if this user is in the admin group - make them staff
+ request.user.is_staff=True
+ request.user.save()
+ return True
+ else:
+ #remove vt perms if exists
+ if request.user.groups.filter(name='vince').exists():
+ g = request.user.groups.filter(name='vince').first()
+ g.user_set.remove(request.user)
+
+ return False
+
+
+def cognito_check_permissions(request):
+ groups = get_group(request.session.get('ACCESS_TOKEN'))
+ if groups:
+ if settings.COGNITO_ADMIN_GROUP in groups:
+ request.user.is_staff=True
+ request.user.save()
+ try:
+ request.user.vinceprofile.pending = False
+ request.user.vinceprofile.save()
+ except:
+ logger.debug("No vinceprofile, this is probably a VINCE (not Vinny) system")
+ pass
+
+ if settings.COGNITO_SUPERUSER_GROUP in groups:
+ request.user.is_superuser=True
+ request.user.save()
+ else:
+ if request.user.is_superuser:
+ logger.warning("Downgrading permissions on %s" % request.user.username)
+ request.user.is_superuser=False
+ request.user.save()
+
+ logger.debug(settings.COGNITO_VINCETRACK_GROUPS)
+ # if user has access to vincetrack
+ logger.debug("CHECKING GROUPS")
+ vt_groups = settings.COGNITO_VINCETRACK_GROUPS.split(",")
+ if list(set(vt_groups) & set(groups)):
+ vincetrackgroup = Group.objects.filter(name='vincetrack').first()
+ if vincetrackgroup:
+ vincetrackgroup.user_set.add(request.user)
+ if settings.MULTIURL_CONFIG == False:
+ # get user in vincetrack
+ # this only works if the app has access to the VINCETrack database
+ vincetrack_user = User.objects.using('default').filter(username=request.user.username).first()
+ if not(vincetrack_user):
+ logger.debug("creating vincetrack user %s" % request.user.username)
+ vincetrack_user = User.objects.db_manager('default').create_user(username=request.user.username,
+ email=request.user.username,
+ first_name=request.user.first_name,
+ last_name=request.user.last_name,
+ is_active=True,
+ is_staff=True)
+
+ vincetrack_user.usersettings.preferred_username = request.user.vinceprofile.preferred_username
+ vincetrack_user.usersettings.save()
+ gov_groups = settings.COGNITO_LIMITED_ACCESS_GROUPS.split(',')
+ if list(set(gov_groups) & set(groups)):
+ logger.debug("Checking for limited access group")
+ vincelimited = Group.objects.filter(name="vince_limited").first()
+ if vincelimited:
+ vincelimited.user_set.add(request.user)
+
+ #now check local contacts
+ if settings.VINCE_NAMESPACE == "vinny":
+ add_permissions(request.user)
+
+ local_groups = request.user.groups.values_list('name',flat=True)
+ if settings.COGNITO_ADMIN_GROUP in local_groups:
+ if (groups == None) or not(settings.COGNITO_ADMIN_GROUP in groups):
+ cognito_add_user_to_group(request.user, settings.COGNITO_ADMIN_GROUP)
+
+
+
+def cognito_verify_email(request):
+ client= boto3.client('cognito-idp', region_name=settings.COGNITO_REGION)
+ code = client.get_user_attribute_verification_code(AccessToken=request.session['ACCESS_TOKEN'],
+ AttributeName='email')
+ print(code)
+
+
+def cognito_verify_sms(request):
+ client= boto3.client('cognito-idp', region_name=settings.COGNITO_REGION)
+ code = client.get_user_attribute_verification_code(AccessToken=request.session['ACCESS_TOKEN'],
+ AttributeName='phone_number')
+
+def cognito_to_dict(attr_list,mapping):
+ user_attrs = dict()
+ for i in attr_list:
+ name = mapping.get(i.get('Name'))
+ if name:
+ value = i.get('Value')
+ user_attrs[name] = value
+ return user_attrs
+
+
+def password_challenge_dance(username, password, new_password):
+ client = boto3.client('cognito-idp', region_name=settings.COGNITO_REGION)
+ aws = AWSSRP(username=username,
+ password=password,
+ pool_id=settings.COGNITO_USER_POOL_ID,
+ client_id=settings.COGNITO_APP_ID, client=client)
+ try:
+ tokens = aws.set_new_password_challenge(new_password)
+ except (Boto3Error, ClientError) as e:
+ error_code = e.response['Error']['Code']
+ logger.debug(error_code)
+ logger.debug(e.response['Error']['Message'])
+ if error_code in [ 'NotAuthorizedException', 'UserNotFoundException']:
+ return None
+
+ return None
+ return tokens
+
+def mfa_challenge(request, code):
+
+ client = boto3.client('cognito-idp', region_name=settings.COGNITO_REGION)
+ aws = AWSSRP(username=request.session['username'], password="abc",
+ pool_id=settings.COGNITO_USER_POOL_ID,
+ client_id=settings.COGNITO_APP_ID, client=client)
+ if request.session['MFAREQUIRED'] == "SOFTWARE_TOKEN_MFA":
+ tokens = aws.set_mfa_challenge(code, request.session['MFASession'])
+ elif request.session['MFAREQUIRED'] == "SMS_MFA":
+ tokens = aws.set_sms_challenge(code, request.session['MFASession'])
+ else:
+ return None
+
+ claims = token_verify(tokens['AuthenticationResult']['IdToken'], expire_fail=True)
+ if claims:
+ claims = token_verify(tokens['AuthenticationResult']['AccessToken'], expire_fail=True)
+ if claims:
+ return tokens
+
+ return None
+
+
+def rm_mfa(request):
+ client = boto3.client('cognito-idp', region_name=settings.COGNITO_REGION)
+ if request.session['MFAREQUIRED'] == "SOFTWARE_TOKEN_MFA":
+ client.set_user_mfa_preference(
+ SoftwareTokenMfaSettings={
+ 'Enabled':False,
+ 'PreferredMfa':False},
+ AccessToken = request.session.get('ACCESS_TOKEN')
+ )
+ elif request.session['MFAREQUIRED'] == "SMS_MFA":
+ client.set_user_mfa_preference(
+ SMSMfaSettings={
+ 'Enabled':False,
+ 'PreferredMfa':False
+ },
+ AccessToken = request.session.get('ACCESS_TOKEN')
+ )
+
+def send_courtesy_email(template_name, user):
+ s = user.vinceprofile.settings.get('email_preference', 1)
+ if int(s) == 1:
+ html = True
+ else:
+ html = False
+
+ tmpl_context = {'team_signature': settings.DEFAULT_EMAIL_SIGNATURE}
+
+ send_templated_mail(
+ template_name,
+ tmpl_context,
+ recipients=user.email,
+ )
+
+def get_user_details(username):
+ client = boto3.client('cognito-idp', region_name=settings.COGNITO_REGION)
+
+ res = client.admin_get_user(
+ Username=username,
+ UserPoolId=settings.COGNITO_USER_POOL_ID
+ )
+ return(res)
+
+
+def create_service_account(request):
+ c = Cognito(settings.COGNITO_USER_POOL_ID, settings.COGNITO_APP_ID, user_pool_region=settings.COGNITO_REGION)
+ c.add_base_attributes(email=request.POST['email'], preferred_username=request.POST['preferred_username'])
+ try:
+ c.register(request.POST['email'], request.POST['password1'])
+ except (Boto3Error, ClientError) as e:
+ error_code = e.response['Error']['Code']
+ logger.debug(error_code)
+ logger.debug(traceback.format_exc())
+ if e.response['Error']['Code'] == 'InvalidPasswordException':
+ return None, "Invalid Password"
+ elif e.response['Error']['Code'] == 'UsernameExistsException':
+ return None, "Email already exists."
+ return None, error_code
+
+ return True, None
+
+def create_new_user(request, old_user=None):
+ client = boto3.client('cognito-idp', region_name=settings.COGNITO_REGION)
+ messageaction = "SUPPRESS"
+ if request.POST.get('send_email'):
+ #user checked the box to send an email
+ messageaction = None
+ if old_user:
+ messageaction = "RESEND"
+
+ try:
+ if messageaction:
+ #this would work when the user is in FORCE_PASSWORD_CHANGE STATE
+ res = client.admin_create_user(
+ UserPoolId=settings.COGNITO_USER_POOL_ID,
+ Username=request.POST['email'],
+ UserAttributes=[
+ {
+ 'Name': 'preferred_username',
+ 'Value': request.POST['preferred_username']
+ },
+ {
+ 'Name': 'email',
+ 'Value': request.POST['email'],
+ },
+ {
+ 'Name': 'email_verified',
+ 'Value': 'True'
+ },
+ ],
+ TemporaryPassword=request.POST['password1'],
+ DesiredDeliveryMediums=['EMAIL'],
+ MessageAction=messageaction,
+ )
+ else:
+ res = client.admin_create_user(
+ UserPoolId=settings.COGNITO_USER_POOL_ID,
+ Username=request.POST['email'],
+ UserAttributes=[
+ {
+ 'Name': 'preferred_username',
+ 'Value': request.POST['preferred_username']
+ },
+ {
+ 'Name': 'email',
+ 'Value': request.POST['email'],
+ },
+ {
+ 'Name': 'email_verified',
+ 'Value': 'True'
+ },
+ ],
+ TemporaryPassword=request.POST['password1'],
+ DesiredDeliveryMediums=['EMAIL'],
+ )
+
+
+ except ParamValidationError:
+ return None, "Temporary Password is Unacceptable."
+ except (Boto3Error, ClientError) as e:
+ error_code = e.response['Error']['Code']
+ logger.debug(error_code)
+ logger.debug(traceback.format_exc())
+ return None, error_code
+
+ return res, None
+
+
+def admin_change_user_details(request, old_email):
+ client = boto3.client('cognito-idp', region_name=settings.COGNITO_REGION)
+ try:
+ res = client.admin_update_user_attributes(
+ UserPoolId=settings.COGNITO_USER_POOL_ID,
+ Username=old_email,
+ UserAttributes=[
+ {
+ 'Name': 'preferred_username',
+ 'Value': request.POST['preferred_username']
+ },
+ {
+ 'Name': 'email',
+ 'Value': request.POST['email'],
+ },
+ {
+ 'Name': 'email_verified',
+ 'Value': 'True'
+ },
+
+ ],
+ )
+
+ except (Boto3Error, ClientError) as e:
+ error_code = e.response['Error']['Code']
+ logger.debug(error_code)
+ logger.debug(traceback.format_exc())
+ return None, error_code
+
+ # change username/email for User
+ #search user:
+ user = User.objects.using('vincecomm').filter(username=old_email).first()
+ if user:
+ user.username=request.POST['email']
+ user.email = request.POST['email']
+ user.save()
+ user.vinceprofile.preferred_username = request.POST['preferred_username']
+ user.vinceprofile.save()
+ #vincetrack user
+ try:
+ user = User.objects.filter(username=old_email).first()
+ if user:
+ user.username=request.POST['email']
+ user.email = request.POST['email']
+ user.save()
+ user.usersettings.preferred_username = request.POST['preferred_username']
+ user.usersettings.save()
+ except:
+ logger.debug("Not able to change vincetrack user")
+ logger.debug(traceback.format_exc())
+
+
+ return res, None
+
+
+def disable_sms_mfa(username):
+ client = boto3.client('cognito-idp', region_name=settings.COGNITO_REGION)
+ res = client.admin_set_user_mfa_preference(
+ SMSMfaSettings={
+ 'Enabled': False,
+ 'PreferredMfa': False
+ },
+ Username=username,
+ UserPoolId=settings.COGNITO_USER_POOL_ID
+ )
+ return
+
+
+def disable_totp_mfa(username):
+
+ client = boto3.client('cognito-idp', region_name=settings.COGNITO_REGION)
+
+ res = client.admin_set_user_mfa_preference(
+ SoftwareTokenMfaSettings={
+ 'Enabled': False,
+ 'PreferredMfa': False
+ },
+ Username=username,
+ UserPoolId=settings.COGNITO_USER_POOL_ID
+ )
+ return
diff --git a/cogauth/validator.py b/cogauth/validator.py
new file mode 100644
index 0000000..fc4341e
--- /dev/null
+++ b/cogauth/validator.py
@@ -0,0 +1,98 @@
+#########################################################################
+# VINCE
+#
+# Copyright 2022 Carnegie Mellon University.
+#
+# NO WARRANTY. THIS CARNEGIE MELLON UNIVERSITY AND SOFTWARE ENGINEERING
+# INSTITUTE MATERIAL IS FURNISHED ON AN "AS-IS" BASIS. CARNEGIE MELLON
+# UNIVERSITY MAKES NO WARRANTIES OF ANY KIND, EITHER EXPRESSED OR IMPLIED,
+# AS TO ANY MATTER INCLUDING, BUT NOT LIMITED TO, WARRANTY OF FITNESS FOR
+# PURPOSE OR MERCHANTABILITY, EXCLUSIVITY, OR RESULTS OBTAINED FROM USE OF THE
+# MATERIAL. CARNEGIE MELLON UNIVERSITY DOES NOT MAKE ANY WARRANTY OF ANY KIND
+# WITH RESPECT TO FREEDOM FROM PATENT, TRADEMARK, OR COPYRIGHT INFRINGEMENT.
+#
+# Released under a MIT (SEI)-style license, please see license.txt or contact
+# permission@sei.cmu.edu for full terms.
+#
+# [DISTRIBUTION STATEMENT A] This material has been approved for public
+# release and unlimited distribution. Please see Copyright notice for non-US
+# Government use and distribution.
+#
+# Carnegie Mellon®, CERT® and CERT Coordination Center® are registered in the
+# U.S. Patent and Trademark Office by Carnegie Mellon University.
+#
+# This Software includes and/or makes use of Third-Party Software each subject
+# to its own license.
+#
+# DM21-1126
+########################################################################
+import json
+
+import jwt
+import requests
+from django.conf import settings
+from django.core.cache import cache
+from django.utils.functional import cached_property
+from jwt.algorithms import RSAAlgorithm
+
+class TokenError(Exception):
+ pass
+
+
+class TokenValidator:
+ def __init__(self, aws_region, aws_user_pool, audience):
+ self.aws_region = aws_region
+ self.aws_user_pool = aws_user_pool
+ self.audience = audience
+
+ @cached_property
+ def pool_url(self):
+ return "https://cognito-idp.%s.amazonaws.com/%s" % (
+ self.aws_region,
+ self.aws_user_pool,
+ )
+
+ @cached_property
+ def _json_web_keys(self):
+ response = requests.get(self.pool_url + "/.well-known/jwks.json")
+ response.raise_for_status()
+ json_data = response.json()
+ return {item["kid"]: json.dumps(item) for item in json_data["keys"]}
+
+ def _get_public_key(self, token):
+ try:
+ headers = jwt.get_unverified_header(token)
+ except jwt.DecodeError as exc:
+ raise TokenError(str(exc))
+
+ if getattr(settings, "COGNITO_PUBLIC_KEYS_CACHING_ENABLED", False):
+ cache_key = "django_cognito_jwt:%s" % headers["kid"]
+ jwk_data = cache.get(cache_key)
+
+ if not jwk_data:
+ jwk_data = self._json_web_keys.get(headers["kid"])
+ timeout = getattr(settings, "COGNITO_PUBLIC_KEYS_CACHING_TIMEOUT", 300)
+ cache.set(cache_key, jwk_data, timeout=timeout)
+ else:
+ jwk_data = self._json_web_keys.get(headers["kid"])
+
+ if jwk_data:
+ return RSAAlgorithm.from_jwk(jwk_data)
+
+
+ def validate(self, token):
+ public_key = self._get_public_key(token)
+ if not public_key:
+ raise TokenError("No key found for this token")
+
+ try:
+ jwt_data = jwt.decode(
+ token,
+ public_key,
+ audience=self.audience,
+ issuer=self.pool_url,
+ algorithms=["RS256"],
+ )
+ except (jwt.InvalidTokenError, jwt.ExpiredSignature, jwt.DecodeError) as exc:
+ raise TokenError(str(exc))
+ return jwt_data
diff --git a/cogauth/views.py b/cogauth/views.py
new file mode 100644
index 0000000..db6d083
--- /dev/null
+++ b/cogauth/views.py
@@ -0,0 +1,1118 @@
+#########################################################################
+# VINCE
+#
+# Copyright 2022 Carnegie Mellon University.
+#
+# NO WARRANTY. THIS CARNEGIE MELLON UNIVERSITY AND SOFTWARE ENGINEERING
+# INSTITUTE MATERIAL IS FURNISHED ON AN "AS-IS" BASIS. CARNEGIE MELLON
+# UNIVERSITY MAKES NO WARRANTIES OF ANY KIND, EITHER EXPRESSED OR IMPLIED,
+# AS TO ANY MATTER INCLUDING, BUT NOT LIMITED TO, WARRANTY OF FITNESS FOR
+# PURPOSE OR MERCHANTABILITY, EXCLUSIVITY, OR RESULTS OBTAINED FROM USE OF THE
+# MATERIAL. CARNEGIE MELLON UNIVERSITY DOES NOT MAKE ANY WARRANTY OF ANY KIND
+# WITH RESPECT TO FREEDOM FROM PATENT, TRADEMARK, OR COPYRIGHT INFRINGEMENT.
+#
+# Released under a MIT (SEI)-style license, please see license.txt or contact
+# permission@sei.cmu.edu for full terms.
+#
+# [DISTRIBUTION STATEMENT A] This material has been approved for public
+# release and unlimited distribution. Please see Copyright notice for non-US
+# Government use and distribution.
+#
+# Carnegie Mellon®, CERT® and CERT Coordination Center® are registered in the
+# U.S. Patent and Trademark Office by Carnegie Mellon University.
+#
+# This Software includes and/or makes use of Third-Party Software each subject
+# to its own license.
+#
+# DM21-1126
+########################################################################
+
+# Create your views here.
+from django.contrib.auth.mixins import LoginRequiredMixin, AccessMixin, UserPassesTestMixin
+from django.forms.utils import ErrorList
+from django.http import Http404
+from django.http import HttpResponse, HttpResponseRedirect
+from django.shortcuts import render, redirect, get_object_or_404
+from django.utils.translation import ugettext as _
+from django.utils.decorators import method_decorator
+from django.core.exceptions import PermissionDenied
+from urllib.parse import urlparse
+try:
+ from django.urls import reverse_lazy, reverse
+except ImportError:
+ from django.core.urlresolvers import reverse_lazy, reverse
+from rest_framework.authtoken.views import ObtainAuthToken
+from rest_framework.response import Response
+from django.views.generic import FormView, TemplateView
+from django.views.generic.list import ListView
+from django.contrib import messages
+from django.urls import resolve
+from django.contrib.auth import authenticate, login as auth_login
+from django.views.decorators.cache import never_cache
+from django.contrib.auth.views import LogoutView as CALogoutView
+from django.contrib.auth import update_session_auth_hash
+from django.conf import settings
+from django.contrib.auth import logout
+from lib.warrant import UserObj, Cognito
+from django.template.defaulttags import register
+from cogauth.utils import get_cognito, password_challenge_dance, get_group, cognito_verify_email, cognito_to_dict, cognito_check_permissions, mfa_challenge, rm_mfa, cognito_verify_sms, send_courtesy_email
+from cogauth.forms import *
+from vinny.models import Thread, VinceAPIToken, VinceCommGroupAdmin, GroupContact
+from vinny.permissions import is_in_group_vincegroupadmin
+from django.core.exceptions import SuspiciousOperation
+import boto3
+import os
+import binascii
+import requests
+import logging
+import traceback
+from boto3.exceptions import Boto3Error
+from botocore.exceptions import ClientError, ParamValidationError
+
+logger = logging.getLogger(__name__)
+logger.setLevel(logging.DEBUG)
+
+GOOGLE_VERIFY_URL = 'https://www.google.com/recaptcha/api/siteverify'
+
+def _unread_msg_count(user):
+ return len(Thread.ordered(Thread.unread(user)))
+
+def _my_contact_group(user):
+ groups = user.groups.exclude(groupcontact__isnull=True)
+ return groups
+
+def _other_groups(user):
+ groups = user.groups.exclude(groupcontact__isnull=False)
+ return groups
+
+def generate_key():
+ return binascii.hexlify(os.urandom(20)).decode()
+
+@register.filter('username')
+def username(user):
+ return user._metadata.get('username')
+
+@register.filter('mfafilter')
+def mfafilter(mfa_name):
+ return ','.join(mfa_name).replace('_', ' ')
+
+class TokenMixin(AccessMixin):
+
+ def dispatch(self, request, *args, **kwargs):
+ if not request.session.get('REFRESH_TOKEN'):
+ return self.handle_no_permission()
+ try:
+ c = get_cognito(request)
+ except (Boto3Error, ClientError) as e:
+ # likely that refresh token has expired so re-auth is required
+ logout(request)
+ return redirect(self.get_login_url())
+ except SuspiciousOperation:
+ logger.debug("suspicous operation - invalid jwt")
+ logout(request)
+ return redirect(self.get_login_url())
+ return super(TokenMixin, self).dispatch(
+ request, *args, **kwargs)
+
+class GetUserMixin(object):
+ cognito = None
+
+ def get_token_groups(self):
+ if (self.cognito == None):
+ self.cognito = get_cognito(self.request)
+ return get_group(self.request.session.get('ACCESS_TOKEN'))
+
+ def get_user(self):
+ if (self.cognito == None):
+ self.cognito = get_cognito(self.request)
+ return self.cognito.get_user(attr_map=settings.COGNITO_ATTR_MAPPING)
+
+
+class PendingTestMixin(UserPassesTestMixin):
+
+ def handle_no_permission(self):
+ if self.raise_exception:
+ raise PermissionDenied(self.get_permission_denied_message())
+ if self.request.user.is_authenticated and self.request.user.vinceprofile.multifactor==False:
+ return redirect("cogauth:mfa")
+ if self.request.user.is_authenticated and self.request.user.vinceprofile.pending:
+ return redirect("vinny:pending")
+ if self.request.user.is_authenticated and self.request.user.vinceprofile.service:
+ return redirect("vinny:serviceaccount")
+ elif self.request.user.is_authenticated:
+ raise PermissionDenied(self.get_permission_denied_message())
+ return redirect('%s?next=%s' % (reverse('vinny:login'), self.request.path))
+
+ def test_func(self):
+ if self.request.user.vinceprofile.multifactor == False:
+ return False
+ if self.request.user.vinceprofile.service:
+ return False
+ if self.request.user.vinceprofile.pending:
+ return False
+ else:
+ return True
+
+class ProfileView(LoginRequiredMixin,TokenMixin,GetUserMixin,PendingTestMixin,TemplateView):
+ template_name = 'cogauth/profile.html'
+ login_url = "cogauth:login"
+
+ def get_context_data(self, **kwargs):
+ context = super(ProfileView, self).get_context_data(**kwargs)
+ #group = get_group(self.request.session.get('ACCESS_TOKEN'))
+ context['coguser'] = self.get_user()
+ context['unread_msg_count'] = _unread_msg_count(self.request.user)
+ grs = _my_contact_group(self.request.user)
+ grs = grs.exclude(groupcontact__contact__vendor_name__isnull=True)
+ context['my_groups'] = ', '.join(grs.values_list('groupcontact__contact__vendor_name', flat=True))
+ context['other_groups'] = ', '.join(_other_groups(self.request.user).values_list('name', flat=True))
+ return context
+
+
+class AssociateSMSView(LoginRequiredMixin, TokenMixin, GetUserMixin, FormView):
+ template_name = 'cogauth/sms.html'
+ login_url = "cogauth:login"
+ form_class = MFASMSForm
+
+ def get_success_url(self):
+ return reverse('cogauth:profile')
+
+ def get_context_data(self, **kwargs):
+ context = super(AssociateSMSView, self).get_context_data(**kwargs)
+ context['form'] = MFASMSForm()
+ return context
+
+ def post(self, request, *args, **kwargs):
+ logger.debug(f"{self.__class__.__name__} post: {self.request.POST}")
+ form = MFASMSForm(request.POST)
+ if form.is_valid():
+ return self.form_valid(form)
+ else:
+ form._errors.setdefault("phone_number", ErrorList([
+ u"Invalid phone number format."
+ ]))
+
+ return render(request, 'cogauth/sms.html', {'form': form})
+
+ def form_valid(self, form):
+ logger.debug("in form valid")
+ coguser = self.get_user()
+ client= boto3.client('cognito-idp', region_name=settings.COGNITO_REGION)
+ u = Cognito(settings.COGNITO_USER_POOL_ID, settings.COGNITO_APP_ID,
+ user_pool_region=settings.COGNITO_REGION,
+ id_token=coguser.id_token, refresh_token=coguser.refresh_token,
+ access_token=coguser.access_token)
+ try:
+ u.update_profile({'phone_number':form.cleaned_data['phone_number']})
+ except (Boto3Error, ClientError) as e:
+ form._errors.setdefault("phone_number", ErrorList([
+ u"Invalid phone number format."
+ ]))
+ messages.error(self.request, "Invalid phone number format.")
+ return super().form_invalid(form)
+ try:
+ u.send_verification(attribute='phone_number')
+ except (Boto3Error, ClientError) as e:
+ logger.debug(traceback.format_exc())
+ return redirect("cogauth:limitexceeded")
+ return redirect("cogauth:verify_phone")
+
+class AssociateTOTPView(LoginRequiredMixin,TokenMixin,GetUserMixin,FormView):
+ template_name = 'cogauth/totp.html'
+ login_url = "cogauth:login"
+ form_class = TOTPForm
+
+ def get_success_url(self):
+ return reverse('cogauth:profile')
+
+ def get_context_data(self, **kwargs):
+ context = super(AssociateTOTPView, self).get_context_data(**kwargs)
+ coguser = self.get_user()
+ client= boto3.client('cognito-idp', region_name=settings.COGNITO_REGION)
+ response = client.associate_software_token(
+ AccessToken=coguser.access_token)
+ logger.debug(response)
+ context['secretcode'] = response['SecretCode']
+ context['form'] = TOTPForm()
+ context['qrtext'] = f"otpauth://totp/VINCE:{self.request.user.username}?secret={context['secretcode']}&issuer=VINCE"
+ return context
+
+ def form_valid(self, form):
+ logger.debug("in form valid")
+ coguser = self.get_user()
+ client= boto3.client('cognito-idp', region_name=settings.COGNITO_REGION)
+ try:
+ response = client.verify_software_token(
+ AccessToken= coguser.access_token,
+ UserCode = form.cleaned_data['temp_password'],
+ FriendlyDeviceName=form.cleaned_data['device_name'])
+ except (Boto3Error, ClientError) as e:
+ messages.error(self.request, "An error occurred when verifying the software token.")
+ form._errors.setdefault("code", ErrorList([
+ u"Code mismatch error. The code you entered was incorrect."
+ ]))
+ context = self.get_context_data()
+ context['form'] = form
+ return render(self.request, 'cogauth/totp.html', context)
+
+ if response['Status'] == "SUCCESS":
+ client.set_user_mfa_preference(
+ SoftwareTokenMfaSettings={
+ 'Enabled':True,
+ 'PreferredMfa':True},
+ AccessToken = coguser.access_token)
+ self.request.user.vinceprofile.multifactor = True
+ self.request.user.vinceprofile.save()
+ messages.success(self.request, "You have successfully enabled TOTP MFA on your account")
+ send_courtesy_email("enable_mfa", self.request.user)
+ else:
+ messages.error(self.request, "An error occurred when verifying the software token.")
+ return super(AssociateTOTPView, self).form_valid(form)
+
+
+ def post(self, request, *args, **kwargs):
+ logger.debug(f"{self.__class__.__name__} post: {self.request.POST}")
+ form = TOTPForm(request.POST)
+ if form.is_valid():
+ return self.form_valid(form)
+ else:
+ context = {}
+ context['form'] = form
+ context['secretcode'] = self.request.POST.get("secretcode")
+ context['qrtext'] = f"otpauth://totp/VINCE:{self.request.user.username}?secret={context['secretcode']}&issuer=VINCE"
+ return render(request, 'cogauth/totp.html', context)
+
+class RemoveMFAView(LoginRequiredMixin,TokenMixin,GetUserMixin,PendingTestMixin,TemplateView):
+ template_name = 'cogauth/rmmfa.html'
+ login_url = "cogauth:login"
+
+ def get_context_data(self, **kwargs):
+ context = super(RemoveMFAView, self).get_context_data(**kwargs)
+ return context
+
+ def post(self, request, *args, **kwargs):
+ logger.debug(f"{self.__class__.__name__} post: {self.request.POST}")
+ password = self.request.POST.get('password', None)
+ if password:
+ logger.debug("trying to auth...")
+ user = authenticate(request, username=self.request.user.username, password=password)
+ logger.debug(user)
+ if (user == None) and request.session.get('MFAREQUIRED'):
+ request.session['CHANGEMFA'] = True
+ request.session.save()
+ return redirect(settings.MFA_REDIRECT_URL)
+ messages.error(request, "Password was incorrect. MFA not removed")
+ return redirect("cogauth:profile")
+
+class GenerateTokenView(LoginRequiredMixin,TokenMixin,GetUserMixin,TemplateView):
+ template_name = 'cogauth/gentoken.html'
+ login_url = "cogauth:login"
+
+ def get_context_data(self, **kwargs):
+ context = super(GenerateTokenView, self).get_context_data(**kwargs)
+ context['coguser'] = self.get_user()
+ # generate a token
+ context['token'] = generate_key()
+ # does user already have a token
+ try:
+ token = VinceAPIToken.objects.get(user=self.request.user)
+ token.delete()
+ except VinceAPIToken.DoesNotExist:
+ pass
+
+ token = VinceAPIToken(user=self.request.user)
+ token.save(context['token'])
+ c = get_cognito(self.request)
+ c.update_profile({'custom:api_key':str(token)})
+ return context
+
+
+class GenerateServiceTokenView(LoginRequiredMixin,TokenMixin,UserPassesTestMixin,TemplateView):
+ template_name = 'cogauth/gentoken.html'
+ login_url = "cogauth:login"
+
+ def test_func(self):
+ if is_in_group_vincegroupadmin(self.request.user):
+ gc = get_object_or_404(GroupContact, id=self.kwargs.get('vendor_id'))
+ admin = VinceCommGroupAdmin.objects.filter(contact__id=gc.contact.id, email__email=self.request.user.email).first()
+ if admin:
+ return PendingTestMixin.test_func(self)
+ return False
+
+ def get_context_data(self, **kwargs):
+ context = super(GenerateServiceTokenView, self).get_context_data(**kwargs)
+ # get service account
+ gc = get_object_or_404(GroupContact, id=self.kwargs.get('vendor_id'))
+
+ service = User.objects.filter(groups__in=[gc.group], vinceprofile__service=True).first()
+ if service == None:
+ raise Http404
+
+ # generate a token
+ context['token'] = generate_key()
+
+ # does user already have a token
+ try:
+ token = VinceAPIToken.objects.get(user=service)
+ token.delete()
+ except VinceAPIToken.DoesNotExist:
+ pass
+
+ token = VinceAPIToken(user=service)
+ token.save(context['token'])
+
+ send_courtesy_email("service_account_change", self.request.user)
+ send_courtesy_email("service_account_change", service)
+
+ service.vinceprofile.api_key=str(token)
+ service.vinceprofile.save()
+
+ return context
+
+class EnableMFAView(LoginRequiredMixin,TokenMixin,GetUserMixin,TemplateView):
+ template_name = 'cogauth/mfa.html'
+ login_url = "cogauth:login"
+
+ def dispatch(self, request, *args, **kwargs):
+ self.cognito_user = self.get_user()
+ if self.cognito_user.mfa:
+ logger.debug("MFA already enabled")
+ self.request.user.vinceprofile.multifactor = True
+ self.request.user.vinceprofile.save()
+ return redirect("vinny:dashboard")
+ return super().dispatch(request, *args, **kwargs)
+
+ def get_context_data(self, **kwargs):
+ context = super(EnableMFAView, self).get_context_data(**kwargs)
+ context['coguser'] = self.cognito_user
+ return context
+
+ def post(self, request, *args, **kwargs):
+ logger.debug(f"{self.__class__.__name__} post: {self.request.POST}")
+ mfa= self.request.POST.get('mfa', None)
+ if mfa == "TOTP":
+ return redirect("cogauth:totp")
+
+ # set TOTP preferences
+ elif mfa == "SMS":
+ # set SMS preference
+ return redirect("cogauth:sms")
+
+ return redirect("cogauth:mfa")
+
+
+def pretty_request(request):
+ headers = ''
+ for header, value in request.META.items():
+ if not header.startswith('HTTP'):
+ continue
+ header = '-'.join([h.capitalize() for h in header[5:].lower().split('_')])
+ headers += '{}: {}\n'.format(header, value)
+
+ return (
+ '{method} HTTP/1.1\n'
+ 'Content-Length: {content_length}\n'
+ 'Content-Type: {content_type}\n'
+ '{headers}\n\n'
+ '{body}'
+ ).format(
+ method=request.method,
+ content_length=request.META.get('CONTENT_LENGTH'),
+ content_type=request.META.get('CONTENT_TYPE'),
+ headers=headers,
+ body=request.body,
+ )
+
+class COGLoginView(FormView):
+ template_name = 'cogauth/login.html'
+ form_class = COGAuthenticationForm
+
+ def get_success_url(self):
+
+ return reverse('vinny:dashboard')
+
+ def get_context_data(self, **kwargs):
+ context = super(COGLoginView, self).get_context_data(**kwargs)
+ logger.debug("IN COGLOGIN")
+ logger.debug(self.request.META.get('HTTP_REFERER'))
+ referer = self.request.META.get('HTTP_REFERER')
+ referer = urlparse(referer)
+ if settings.DEBUG:
+ context['token_login'] = True
+
+ return context
+
+ def form_valid(self, form):
+ return super(COGLoginView, self).form_valid(form)
+
+ def post(self, request, *args, **kwargs):
+ form = self.form_class(request.POST)
+ for key in list(request.session.keys()):
+ del request.session[key]
+ if form.is_valid():
+ username = form.cleaned_data.get('username')
+ password = form.cleaned_data.get('password')
+ next_url = request.GET.get('next')
+ user = authenticate(request, username=username, password=password)
+ if user is not None:
+ if user.last_login:
+ self.request.session['LAST_LOGIN'] = str(user.last_login)
+ else:
+ self.request.session['LAST_LOGIN'] = "New"
+ auth_login(request, user)
+ logger.debug("Checking permissions")
+ logger.debug(self.request.user.username)
+ logger.debug(self.request.user.is_authenticated)
+ cognito_check_permissions(self.request)
+ return super().form_valid(form)
+ #return redirect("vinny:dashboard")
+ else:
+ if request.session.get('FORCEPASSWORD', False):
+ logger.debug("REDIRECT")
+ return redirect('cogauth:password_register')
+ if request.session.get('MFAREQUIRED', False):
+ logger.debug("REDIRECT")
+ if next_url:
+ url = reverse(settings.MFA_REDIRECT_URL) + f"?next={next_url}"
+ return redirect(url)
+ else:
+ return redirect(settings.MFA_REDIRECT_URL)
+
+ elif request.session.get('RESETPASSWORD', False):
+ return redirect('cogauth:passwordreset')
+ elif request.session.get('NOTCONFIRMED', False):
+ return redirect('cogauth:account_activation_sent')
+ else:
+ form._errors.setdefault("username", ErrorList([
+ u"Please enter a correct username and password. "
+ "Note that both fields are case-sensitive."
+ ]))
+ return super().form_invalid(form)
+
+ return redirect('cogauth:register')
+ else:
+ return super().form_invalid(form)
+
+
+class CustomAuthToken(ObtainAuthToken):
+
+ def post(self, request, *args, **kwargs):
+ serializer = self.serializer_class(data=request.data,
+ context={'request': request})
+ serializer.is_valid(raise_exception=True)
+ user = serializer.validated_data['user']
+ return Response({
+ 'token': request.session.get('ID_TOKEN'),
+ 'email': user.username
+ })
+
+class LimitExceededView(LoginRequiredMixin, TemplateView):
+ login_url = "cogauth:login"
+ template_name = "cogauth/limitexceeded.html"
+
+
+class ResendConfirmationCode(TemplateView):
+ template_name='cogauth/resend.html'
+
+ def dispatch(self, request, *args, **kwargs):
+ if self.request.session.get('CONFIRM_ID'):
+ username = User.objects.filter(id=self.request.session.get('CONFIRM_ID')).first()
+ if username:
+ client = boto3.client('cognito-idp', region_name=settings.COGNITO_REGION)
+ try:
+ user = client.resend_confirmation_code(
+ ClientId=settings.COGNITO_APP_ID,
+ Username=username.email)
+ print(user)
+ details = user.get('CodeDeliveryDetails', None)
+ if details:
+ destination = details.get('Destination', None)
+ messages.success(request, "Resent confirmation code to %s" % destination)
+ except:
+ messages.success(request, "User is already verified. Please Login")
+ return redirect("cogauth:login")
+ self.request.session['RESEND']=True
+ return redirect("cogauth:account_activation_sent")
+ else:
+ return redirect("cogauth:register")
+ else:
+ return redirect("cogauth:login")
+
+class InitialPasswordResetView(FormView):
+ template_name='cogauth/pwreset.html'
+ form_class = COGInitialPWResetForm
+
+ def form_valid(self, form):
+ c = Cognito(settings.COGNITO_USER_POOL_ID, settings.COGNITO_APP_ID, user_pool_region=settings.COGNITO_REGION, username=form.cleaned_data['username'])
+ try:
+ c.initiate_forgot_password()
+ except (Boto3Error, ClientError) as e:
+ logger.warning("User %s does not exist" % form.cleaned_data['username'])
+ pass
+
+ self.request.session['RESETPASSWORD']=True
+ self.request.session['username']=form.cleaned_data['username']
+ return redirect("cogauth:passwordreset")
+
+class VerifyPhoneView(LoginRequiredMixin, TokenMixin, FormView):
+ template_name = 'cogauth/verify_phone.html'
+ form_class = COGVerifyEmailForm
+ login_url = "cogauth:login"
+
+ #def get(self, request, *args, **kwargs):
+ # try:
+ # cognito_verify_sms(request)
+ # except (Boto3Error, ClientError) as e:
+ # logger.debug(traceback.format_exc())
+ # return redirect("cogauth:limitexceeded")
+ # return super().get(request, *args, **kwargs)
+
+ def form_valid(self, form):
+ client = boto3.client('cognito-idp', region_name=settings.COGNITO_REGION)
+ user = None
+ try:
+ user = client.verify_user_attribute(
+ AccessToken=self.request.session['ACCESS_TOKEN'],
+ AttributeName='phone_number',
+ Code=form.cleaned_data['code'])
+ except (Boto3Error, ClientError) as e:
+ error_code = e.response['Error']['Code']
+ if error_code == "CodeMismatchException":
+ form._errors.setdefault("code", ErrorList([
+ u"Your code is incorrect."
+ ]))
+ elif error_code == "ExpiredCodeException":
+ form._errors.setdefault("code", ErrorList([
+ u"Your code has expired. Try again."
+ ]))
+ else:
+ logger.debug(traceback.format_exc())
+ form._errors.setdefault("code", ErrorList([
+ u"Your code is incorrect.."
+ ]))
+ return render(self.request, 'cogauth/verify_phone.html', {'form':form})
+ if user:
+ client.set_user_mfa_preference(
+ SMSMfaSettings={
+ 'Enabled':True,
+ 'PreferredMfa':True
+ },
+ AccessToken = self.request.session['ACCESS_TOKEN'])
+ self.request.user.vinceprofile.multifactor = True
+ self.request.user.vinceprofile.save()
+ messages.success(self.request,'You have successfully verified your phone number and enabled MFA.')
+ send_courtesy_email("enable_mfa", self.request.user)
+ else:
+ messages.error(self.request, "An error occurred when verifying the software token.")
+ return redirect("cogauth:profile")
+
+class VerifyEmailView(LoginRequiredMixin, TokenMixin, FormView):
+ template_name = 'cogauth/verify_email.html'
+ form_class = COGVerifyEmailForm
+ login_url = "cogauth:login"
+
+ def get(self, request, *args, **kwargs):
+ try:
+ cognito_verify_email(request)
+ except (Boto3Error, ClientError) as e:
+ return redirect("cogauth:limitexceeded")
+ return super().get(request, *args, **kwargs)
+
+ def form_valid(self, form):
+ client = boto3.client('cognito-idp', region_name=settings.COGNITO_REGION)
+ try:
+ user = client.verify_user_attribute(
+ AccessToken=self.request.session['ACCESS_TOKEN'],
+ AttributeName='email',
+ Code=form.cleaned_data['code'])
+ except (Boto3Error, ClientError) as e:
+ error_code = e.response['Error']['Code']
+ if error_code == "CodeMismatchException":
+ form._errors.setdefault("code", ErrorList([
+ u"Your code is incorrect."
+ ]))
+ elif error_code == "ExpiredCodeException":
+ form._errors.setdefault("code", ErrorList([
+ u"Your code has expired. Try again."
+ ]))
+ elif error_code == "NotAuthorizedException":
+ messages.error(self.request, e.response['Error']['Message'])
+ return redirect("cogauth:login")
+ else:
+ logger.debug(traceback.format_exc())
+ messages.error(self.request, e.response['Error']['Message'])
+ form._errors.setdefault("code", ErrorList([
+ u"An error occurred when verifying your code."
+ ]))
+ return super().form_invalid(form)
+
+ self.request.user.vinceprofile.email_verified=True
+ self.request.user.vinceprofile.save()
+ return redirect("vinny:dashboard")
+
+
+ def get_context_data(self, **kwargs):
+ context = super(VerifyEmailView, self).get_context_data(**kwargs)
+ email = self.request.user.email[:2]
+ for x in range(2, len(self.request.user.email)-4):
+ email = email + "*"
+ context['email']= email + self.request.user.email[-2:]
+ return context
+
+
+class MFAAuthRequiredView(FormView, AccessMixin):
+ template_name = 'cogauth/mfarequired.html'
+ form_class = COGVerifyEmailForm
+ login_url = "cogauth:login"
+
+ def dispatch(self, request, *args, **kwargs):
+ if not (request.session.get('MFAREQUIRED') and request.session.get('username')):
+ return self.handle_no_permission()
+ return super(MFAAuthRequiredView, self).dispatch(request, *args, **kwargs)
+
+ def get_context_data(self, **kwargs):
+ context = super(MFAAuthRequiredView, self).get_context_data(**kwargs)
+ if self.request.session.get('DEVICE_NAME'):
+ context['device'] = self.request.session.get('DEVICE_NAME')
+
+ try:
+ #try to get app name and url so we stay in the same namespace and add next param
+ app_name = resolve(self.request.path_info).view_name.split(':')[0]
+ context['action'] = reverse(f"{app_name}:{self.request.resolver_match.url_name}")
+ if self.request.GET.get('next'):
+ context['action'] = "%s?next=%s" % (context['action'], self.request.GET.get('next'))
+ except:
+ pass
+ return context
+
+ def form_valid(self, form):
+ c = Cognito(settings.COGNITO_USER_POOL_ID, settings.COGNITO_APP_ID,
+ user_pool_region=settings.COGNITO_REGION, username=self.request.session['username'])
+ try:
+ tokens = mfa_challenge(self.request,
+ form.cleaned_data['code'])
+ except (Boto3Error, ClientError) as e:
+ error_code = e.response['Error']['Code']
+ if error_code == "CodeMismatchException":
+ form._errors.setdefault("code", ErrorList([
+ u"Your code is incorrect."
+ ]))
+ elif error_code == "ExpiredCodeException":
+ form._errors.setdefault("code", ErrorList([
+ u"Your code has expired. Try again."
+ ]))
+ elif error_code == "NotAuthorizedException":
+ messages.error(self.request, e.response['Error']['Message'])
+ return redirect("cogauth:login")
+ else:
+ logger.debug(traceback.format_exc())
+ messages.error(self.request, e.response['Error']['Message'])
+ form._errors.setdefault("code", ErrorList([
+ u"An error occurred when verifying your code."
+ ]))
+ return super().form_invalid(form)
+ if tokens:
+ self.request.session['ID_TOKEN'] = tokens['AuthenticationResult']['IdToken']
+ self.request.session['REFRESH_TOKEN'] = tokens['AuthenticationResult']['RefreshToken']
+ self.request.session['ACCESS_TOKEN'] = tokens['AuthenticationResult']['AccessToken']
+ user = authenticate(self.request, username=self.request.session['username'])
+ if user:
+ del(self.request.session['username'])
+ auth_login(self.request, user)
+ self.cognito = get_cognito(self.request)
+ coguser = self.cognito.get_user(attr_map=settings.COGNITO_ATTR_MAPPING)
+ #set session timezone
+ self.request.session['timezone'] = coguser.timezone
+
+ if self.request.session.get('CHANGEMFA'):
+ rm_mfa(self.request)
+ self.request.user.vinceprofile.multifactor = False
+ self.request.user.vinceprofile.save()
+ del(self.request.session['MFASession'])
+ del(self.request.session['CHANGEMFA'])
+ messages.success(self.request, "MFA successfully disabled. Please choose another type of MFA.")
+ send_courtesy_email("mfa_removed", self.request.user)
+ del(self.request.session['MFAREQUIRED'])
+ return redirect("cogauth:profile")
+ cognito_check_permissions(self.request)
+ del(self.request.session['MFAREQUIRED'])
+
+ next_url = self.request.GET.get('next')
+ if next_url:
+ logger.debug(next_url)
+ try:
+ return redirect(next_url)
+ except:
+ pass
+ logger.debug("redirecting...")
+ return redirect(settings.LOGIN_REDIRECT_URL)
+ else:
+ logger.debug(traceback.format_exc())
+ form._errors.setdefault("code", ErrorList([
+ u"Your code is incorrect."
+ ]))
+ return super().form_invalid(form)
+
+ return redirect('cogauth:pw_reset_confirmed')
+
+class ResetPasswordView(FormView, AccessMixin):
+ template_name = 'cogauth/reset_password.html'
+ form_class = COGResetPasswordForm
+
+ def form_valid(self, form):
+ c = Cognito(settings.COGNITO_USER_POOL_ID, settings.COGNITO_APP_ID, user_pool_region=settings.COGNITO_REGION, username=self.request.session['username'])
+ try:
+ c.confirm_forgot_password(form.cleaned_data['code'], form.cleaned_data['new_password1'])
+ except (Boto3Error, ClientError) as e:
+ error_code = e.response['Error']['Code']
+ if error_code == "CodeMismatchException":
+ form._errors.setdefault("code", ErrorList([
+ u"Your code is incorrect."
+ ]))
+ elif error_code == "InvalidPasswordException":
+ form._errors.setdefault("new_password1", ErrorList([
+ f"New password is unacceptable: {e.response['Error']['Message']}"
+ ]))
+ else:
+ form._errors.setdefault("new_password1", ErrorList([
+ f"Error occurred: {e.response['Error']['Code']}: {e.response['Error']['Message']}"]))
+
+ return super().form_invalid(form)
+ del(self.request.session['username'])
+ del(self.request.session['RESETPASSWORD'])
+
+ return redirect('cogauth:pw_reset_confirmed')
+
+ def dispatch(self, request, *args, **kwargs):
+ if not (request.session.get('RESETPASSWORD') and request.session.get('username')):
+ return self.handle_no_permission()
+ return super(ResetPasswordView, self).dispatch(
+ request, *args, **kwargs)
+
+class ConfirmRegister(FormView):
+ template_name = 'cogauth/account_activation_sent.html'
+ form_class = VerificationForm
+ success_url = 'vince/index.html'
+
+ def dispatch(self, request, *args, **kwargs):
+ if self.request.session.get('CONFIRM_ID'):
+ return super(ConfirmRegister, self).dispatch(request, *args, **kwargs)
+ else:
+ return redirect("cogauth:login")
+
+ def form_valid(self, form):
+ c = Cognito(settings.COGNITO_USER_POOL_ID, settings.COGNITO_APP_ID, user_pool_region=settings.COGNITO_REGION)
+ if self.request.session.get('CONFIRM_ID'):
+ username = User.objects.using('vincecomm').filter(id=self.request.session.get('CONFIRM_ID')).first()
+ try:
+ logger.debug(form.cleaned_data['code'])
+ logger.debug(username.username)
+ c.confirm_sign_up(form.cleaned_data['code'], username=username.username)
+ username.vinceprofile.email_verified=True
+ username.vinceprofile.save()
+ except ClientError as e:
+ logger.debug(e.response['Error']['Code'])
+ logger.debug(e.response['Error']['Message'])
+ return render(self.request, 'cogauth/account_error.html', {'error_msg':e.response['Error']['Message']})
+ del(self.request.session['CONFIRM_ID'])
+ if self.request.session.get('SERVICE'):
+ service = self.request.session.get('SERVICE')
+ del(self.request.session['SERVICE'])
+ if self.request.session.get('RESEND'):
+ del(self.request.session['RESEND'])
+
+ messages.success(
+ self.request,
+ _('The account was successfully confirmed.'))
+ return redirect('vinny:admin', service)
+ return redirect('cogauth:account_confirmed')
+ else:
+ return render(self.request, 'cogauth/account_error.html', {'error_msg':'Invalid User/Code'})
+
+ def get_context_data(self, **kwargs):
+ context = super(ConfirmRegister, self).get_context_data(**kwargs)
+ if self.request.session.get('CONFIRM_ID'):
+ username = User.objects.using('vincecomm').filter(id=self.request.session['CONFIRM_ID']).first()
+ if username:
+ email = username.username[:2]
+ for x in range(2, len(username.email)-4):
+ email = email + "*"
+ context['email']= email + username.email[-2:]
+ if self.request.session.get('SERVICE'):
+ if not self.request.session.get('RESEND'):
+ self.template_name = 'cogauth/service_activation_sent.html'
+ return context
+
+
+class ChangePasswordView(LoginRequiredMixin, TokenMixin, PendingTestMixin, FormView):
+ template_name='cogauth/password_change_form.html'
+ form_class = COGPasswordChangeForm
+ login_url='cogauth:login'
+
+ def get_success_url(self):
+ return reverse('cogauth:password_change_done')
+
+ #def get_form_kwargs(self):
+ # kwargs = super(ChangePasswordView, self).get_form_kwargs()
+ # kwargs['user'] = self.request.user
+ # if self.request.method == 'POST':
+ # kwargs['data'] = self.request.POST
+ # return kwargs
+
+ #def post(self, request, *args, **kwargs):
+ # logger.debug(request.POST)
+ # form = COGPasswordChangeForm(request.user, request.POST)
+ # if form.is_valid():
+ # return self.form_valid(form)
+ # else:
+ # return super().form_invalid(form)
+
+ def form_valid(self, form):
+ #user = form.save()
+ #update_session_auth_hash(self.request, user)
+ c = get_cognito(self.request)
+ try:
+ c.change_password(form.cleaned_data['old_password'], form.cleaned_data['new_password1'])
+ except ParamValidationError:
+ form._errors.setdefault("new_password1", ErrorList([
+ u"New password is unacceptable."
+ ]))
+ return super().form_invalid(form)
+ except (Boto3Error, ClientError) as e:
+ error_code = e.response['Error']['Code']
+ if error_code == "NotAuthorizedException":
+ form._errors.setdefault("old_password", ErrorList([
+ u"Password is incorrect."
+ ]))
+ return super().form_invalid(form)
+ elif error_code == "InvalidPasswordException":
+ form._errors.setdefault("new_password1", ErrorList([
+ f"New password is unacceptable: {e.response['Error']['Message']}"
+ ]))
+ return super().form_invalid(form)
+ elif error_code == "LimitExceededException":
+ form._errors.setdefault("new_password1", ErrorList([
+ u"Password Change Limit Exceeded. Please try again later."
+ ]))
+ return super().form_invalid(form)
+ else:
+ logger.warning("UNEXPECTED ERROR WHILE CHANGING PASSWORD")
+ logger.warning(error_code)
+ form._errors.setdefault("new_password1", ErrorList([
+ u"An error occurred while trying to change your password."
+ ]))
+ return super().form_invalid(form)
+
+ send_courtesy_email("password_change", self.request.user)
+ return super().form_valid(form)
+
+class ChangePasswordandRegisterView(FormView, AccessMixin):
+ template_name='cogauth/change_password_and_register.html'
+ form_class = COGPasswordChangeForm
+ success_url = 'cogauth/password_change_done.html'
+
+ def form_valid(self, form):
+# user = form.save()
+ logger.debug(self.request.session.get('username'))
+ tokens = password_challenge_dance(self.request.session.get('username'), form.cleaned_data['old_password'], form.cleaned_data['new_password1'])
+ if tokens == None:
+ form._errors.setdefault("old_password", ErrorList([
+ u"Your temporary password is incorrect."
+ ]))
+ return super().form_invalid(form)
+ self.request.session['ID_TOKEN'] = tokens['AuthenticationResult']['IdToken']
+ self.request.session['REFRESH_TOKEN'] = tokens['AuthenticationResult']['RefreshToken']
+ self.request.session['ACCESS_TOKEN'] = tokens['AuthenticationResult']['AccessToken']
+ user = authenticate(self.request, username=self.request.session.get('username'), password=form.cleaned_data['new_password1'])
+ if user is not None:
+ del(self.request.session['username'])
+ del(self.request.session['FORCEPASSWORD'])
+ auth_login(self.request, user)
+ cognito_check_permissions(self.request)
+ send_courtesy_email("password_change", user)
+ return redirect("vinny:dashboard")
+ else:
+ if request.session.get('FORCEPASSWORD', False):
+ return redirect('cogauth:password_change')
+ else:
+ form._errors.setdefault("username", ErrorList([
+ u"Error Occurred. Please try again."
+ ]))
+ return super().form_invalid(form)
+
+ return super().form_valid(form)
+
+ def dispatch(self, request, *args, **kwargs):
+ if not (request.session.get('FORCEPASSWORD') and request.session.get('username')):
+ return self.handle_no_permission()
+ return super(ChangePasswordandRegisterView, self).dispatch(
+ request, *args, **kwargs)
+
+class RegisterView(FormView):
+ template_name = 'cogauth/signup.html'
+ form_class = SignUpForm
+ success_url = 'cogauth/account_activation_sent.html'
+
+
+ def get_context_data(self, **kwargs):
+ context = super(RegisterView, self).get_context_data(**kwargs)
+ if self.request.session.get('REGISTER', False):
+ context['form'] = self.form_class(initial={'email':self.request.session['REGISTER']})
+ context['title'] = "Confirm your VINCE Registration"
+ context['subtitle'] = "Before you can login, we need a bit more information from you."
+ else:
+ context['title'] = "Create a VINCE Account"
+ return context
+
+ def form_valid(self, form):
+ #Begin reCAPTCHA validation
+ recaptcha_response = self.request.POST.get('g-recaptcha-response')
+
+ data = {
+ 'secret' : settings.GOOGLE_RECAPTCHA_SECRET_KEY,
+ 'response': recaptcha_response
+ }
+ logger.debug(data)
+ r = requests.post(GOOGLE_VERIFY_URL, data=data)
+ result = r.json()
+ if result['success']:
+ logger.debug("successful recaptcha validation")
+ else:
+ logger.debug(result)
+ logger.debug("invalid recaptcha validation")
+ form._errors[forms.forms.NON_FIELD_ERRORS] = ErrorList([
+ u'Invalid reCAPTCHA. Please try again'
+ ])
+ return super().form_invalid(form)
+
+ dup = User.objects.using('vincecomm').filter(email__iexact = form.cleaned_data['email'])
+ if dup:
+ form._errors.setdefault("email", ErrorList([
+ u'Email already exists. Usernames are CASE SENSITIVE. Or did you forget your password? Reset your password.'
+ ]))
+ return super().form_invalid(form)
+ c = Cognito(settings.COGNITO_USER_POOL_ID, settings.COGNITO_APP_ID, user_pool_region=settings.COGNITO_REGION)
+ c.add_base_attributes(email=form.cleaned_data['email'], given_name=form.cleaned_data['first_name'], family_name=form.cleaned_data['last_name'], preferred_username=form.cleaned_data['preferred_username'])
+ c.add_custom_attributes(Organization=form.cleaned_data['organization'], title=form.cleaned_data['title'])
+ # must register user first, otherwise user will exist locally and not in cognito if
+ #password doesn't meet requirements
+ try:
+# c.register(form.cleaned_data['preferred_username'], form.cleaned_data['password1'])
+ c.register(form.cleaned_data['email'], form.cleaned_data['password1'])
+ except ClientError as e:
+ if e.response['Error']['Code'] == 'InvalidPasswordException':
+ form._errors.setdefault("password1", ErrorList([
+ f"Password not accepted: {e.response['Error']['Message']}"]))
+ return super().form_invalid(form)
+ elif e.response['Error']['Code'] == 'UsernameExistsException':
+ form._errors.setdefault("email", ErrorList([
+ u'Email already exists. Did you forget your password? Reset your password.'
+ ]))
+ return super().form_invalid(form)
+ else:
+ form._errors.setdefault("password1", ErrorList([
+ f"Error occurred: {e.response['Error']['Code']}: {e.response['Error']['Message']}"]))
+ return super().form_invalid(form)
+
+ user = form.save()
+ user.refresh_from_db()
+ user.username = user.email
+ user.is_active = True
+ user.vinceprofile.preferred_username=form.cleaned_data['preferred_username']
+ user.vinceprofile.org = form.cleaned_data['organization']
+ user.vinceprofile.title = form.cleaned_data['title']
+ user.vinceprofile.save()
+ user.save()
+ self.request.session['CONFIRM_ID'] = user.id
+ return redirect('cogauth:account_activation_sent')
+
+
+def dict_to_cognito(attributes, attr_map=None):
+ """
+ :param attributes: Dictionary of User Pool attribute names/values
+ :return: list of User Pool attribute formatted dicts: {'Name': , 'Value': }
+ """
+ if attr_map is None:
+ attr_map = {}
+ for k,v in attr_map.copy().items():
+ if v in attributes.keys():
+# attributes.update({k: attributes.pop(k, None)})
+ attributes[k] = attributes.pop(v)
+ else:
+ if k in attributes:
+ attributes.pop(k)
+# return [{'Name': key, 'Value': value} for key, value in attributes.items()]
+ return attributes
+
+class UpdateProfileView(LoginRequiredMixin,TokenMixin,GetUserMixin,FormView):
+ template_name = 'cogauth/update-profile.html'
+ form_class = ProfileForm
+ login_url = "cogauth:login"
+
+ def get_success_url(self):
+ return reverse_lazy('cogauth:profile')
+
+ def get_initial(self):
+ u = self.get_user()
+ initial = u.__dict__.get('_data')
+ initial['timezone'] = self.request.user.vinceprofile.timezone
+ return initial
+
+ def get_context_data(self, **kwargs):
+ context = super(UpdateProfileView, self).get_context_data(**kwargs)
+ context['unread_msg_count'] = _unread_msg_count(self.request.user)
+ return context
+
+ def form_valid(self, form):
+ c = get_cognito(self.request)
+ logger.debug(form.cleaned_data)
+ self.request.user.first_name = form.cleaned_data['first_name']
+ self.request.user.last_name = form.cleaned_data['last_name']
+ self.request.user.vinceprofile.preferred_username=form.cleaned_data['preferred_username']
+ self.request.user.vinceprofile.org= form.cleaned_data['org']
+ self.request.user.vinceprofile.country=form.cleaned_data['country']
+ self.request.user.vinceprofile.title=form.cleaned_data['title']
+ self.request.user.vinceprofile.timezone = form.cleaned_data['timezone']
+ self.request.user.vinceprofile.save()
+ self.request.user.save()
+ user_attrs = dict_to_cognito(form.cleaned_data, settings.COGNITO_ATTR_MAPPING)
+
+ #set new timezone
+ self.request.session['timezone'] = self.request.user.vinceprofile.timezone
+ logger.debug(user_attrs)
+ c.update_profile(user_attrs)
+ logger.debug(form.cleaned_data)
+ messages.success(self.request,'You have successfully updated your profile.')
+ return super(UpdateProfileView, self).form_valid(form)
+
+
+class LogoutView(CALogoutView):
+
+ @method_decorator(never_cache)
+ def dispatch(self, request, *args, **kwargs):
+ request.session.delete()
+ return super(LogoutView, self).dispatch(request, *args, **kwargs)
+
+
+class GetCognitoUserMixin(object):
+ client = boto3.client('apigateway')
+
+ def get_user_object(self):
+ cog_client = boto3.client('cognito-idp', region=settings.COGNITO_REGION)
+ user = cog_client.get_user(
+ AccessToken=self.request.session['ACCESS_TOKEN'])
+ c = get_cognito(self.request)
+ u = UserObj(username=user.get('UserAttributes')[0].get('username'),
+ attribute_list=user.get('UserAttributes'),
+ attr_map=settings.COGNITO_ATTR_MAPPING, cognito_obj=c)
+ return u
+
+ def get_queryset(self):
+ try:
+ u = self.get_user_object()
+ except KeyError:
+ raise Http404
+ my_plans = self.client.get_usage_plans(keyId=u.api_key_id)
+ return my_plans.get('items',[])
+
+
diff --git a/cron.yaml b/cron.yaml
new file mode 100644
index 0000000..4ec5817
--- /dev/null
+++ b/cron.yaml
@@ -0,0 +1,12 @@
+version: 1
+cron:
+ - name: "dailydigest"
+ url: "/vcworker/daily/"
+ schedule: "0 9 * * *"
+ - name: "vtdailydigest"
+ url: "/vinceworker/daily/"
+ schedule: "0 9 * * *"
+ - name: "vtgenreminders"
+ url: "/vinceworker/reminder/"
+ schedule: "0 9 * * *"
+
\ No newline at end of file
diff --git a/doc/configuration.md b/doc/configuration.md
new file mode 100644
index 0000000..b76993c
--- /dev/null
+++ b/doc/configuration.md
@@ -0,0 +1,115 @@
+Configuration
+==================
+
+Environment Variables
+---------------------
+
+VINCE requires many environment variables to be set before running. This section explains the required variables. If running locally, you can set these variables in bigvince/.env. Otherwise, they should be set in cdk/context/bigvince-prod.yaml. The names in parenthesis are the variable names in the cdk context file.
+
+Required
+----------
+
+* SECRET_KEY (django_secret_key): Django requires this variable to be set as it is used for hashing and signing data. You can use `python -c 'from django.core.management.utils import get_random_secret_key; print(get_random_secret_key())'` to generate a new secret key
+* VINCE_DEV_SYSTEM (vince_dev_banner): Set to 1 to display the "development system" banner and to use basic Django Email backend (not SES)
+* GOOGLE_SITE_KEY (google_site_key): Generate a reCAPTCHA site and secret key to use with the forms
+* GOOGLE_RECAPTCHA_SECRET_KEY (google_recaptcha_secret_key): generated with the site key
+* SERVER_NAME (kb_cloudfront_domain_name, vince_cloudfront_domain_name) this is used when generating links in automated email
+* VINCE_TRACK_DOMAIN (vince_cloudfront_domain_name)
+* VINCE_COMM_DOMAIN (kb_cloudfront_domain_name)
+* VINCE_PUB_DOMAIN (kb_cloudfront_domain_name)
+* AWS_DEPLOYED (set if running in AWS)
+* AWS_REGION region where services are deployed
+* AWS_STORAGE_BUCKET_NAME the name of the bucket used for static content
+* AWS_S3_REGION_NAME should be the same as AWS_REGION
+* AWS_S3_CUSTOM_DOMAIN typically the SERVER_NAME
+* AWS_LOCATION the top level folder in the AWS_STORAGE_BUCKET_NAME
+* S3_INCOMING_REPORTS S3 bucket name (auto-generated) for incoming vulnerability notes
+* S3_UPDATE_BUCKET_NAME S3 bucket name (auto-generated). Used when publishing vulnerability notes
+* S3_KB_SHARED_BUCKET_NAME the name of the S3 bucket used for vul notes
+* AWS_COGNITO_APP_ID app ID for Cognito user pool
+* AWS_COGNITO_ADMIN_GROUP the name of the Cognito group that, if available, will promote users to "staff members" which gives them access to the Admin interface. This will also be the group that receives general messages (not case-specific messages) through VINCEComm. If this group is not configured properly, sending messages will not work. AWS_COGNTIO_ADMIN_GROUP should be one of the groups listed in AWS_COGNITO_VINCETRACK_GROUPS if set.
+* AWS_COGNITO_SUPERUSER_GROUP the name of the Cognito group that, if available, will promote users to "superuser" which gives them access to the Admin interface, delete capability, as well as additional view access.
+* AWS_COGNITO_REGION the region where the Cognito user pool is configured
+* AWS_COGNITO_USER_POOL_ID the ID for the Cognito user pool
+* AWS_SECRET_MANAGER set to True to use secret manager
+* LOGLEVEL (DEBUG, INFO, WARNING)
+* NO_REPLY_EMAIL the FROM email address for automatic VINCE notifications
+* REPLY_EMAIL the FROM email address for VINCE manually-generated emails
+* PRIVATE_BUCKET_NAME the name of the S3 bucket that will be used for file storage
+* S3_EMAIL_BUCKET the name of the S3 bucket that is configured to receive email from SES
+* VINCE_COMM_AUTH the arn to the secret manager
+* VINCE_COMM_DB_HOST the hostname of the RDS instance
+* VINCE_COMM_DB_PORT the port for the RDS instance (5432)
+* VINCE_TRACK_AUTH the arn to the secret manager
+* VINCE_TRACK_DB_HOST the hostname of the RDS instance
+* VINCE_TRACK_DB_PORT the port for the RDS instance (5432)
+* VINCE_PUB_AUTH the arn to the secret manager
+* VINCE_PUB_DB_HOST the hostname of the RDS instance
+* VINCE_PUB_DB_PORT the port for the RDS instance (5432)
+* VINCE_NAMESPACE (vince, vinny, or vincepub) depending on which instance is running
+* VINCE_LOG_GROUP_NAME cloudwatch name for VINCE logging
+* VINCE_ERROR_SNS_ARN the SNS arn that VINCE errors are published to. Team email should be subscribed to this queue to receive any critical errors or misconfigurations
+* VINCE_SHARED_BUCKET_NAME the name of the "private" S3 bucket for VINCEComm. VINCETrack needs access to this to move information back and forth
+* VINCE_SUPERUSER_AUTH the arn for the secret manager that holds superuser credentials
+* VINCE_TRACK_SNS_ARN the SNS arn that the vinceworker is subscribed to
+
+settings.py variables
+--------------
+
+
+* DEBUG (should never be set on a production system)
+* DEFAULT_TIME_ZONE
+* MULTIURL_CONFIG This should be set if you plan to run the different VINCE applications on different domains. We chose to do this so we could setup Web ACLs in Cloudfront on the VINCETrack app. This configuration is used by the MultipleDomainMiddleware that forces Django to redirect to the correct domain depending on the URL requested. If the entire application is running under 1 domain, this should be set to False.
+* BAKERY_FILESYSTEM due to the read-only nature of elasticbeanstalk instances, this must be set to "mem://"
+* ALLOWED_HOSTS must contain the host/domain name that this site can serve.
+* STATIC_URL the URL to use when referring to static files located in STATIC_ROOT
+* STATIC_ROOT the absolute path to the directory where static files will collect for deployment - this does not need to be set for local deployments but should be set if using bakery to generate HTML files.
+* STANDARD_VENDOR_EMAIL the default email to use when notifying vendors of new cases
+* STANDARD_PARTICIPANT_EMAIL the default email to use when notifying potential participants of new cases
+* DEFAULT_PHONE_NUMBER the default phone number to use in the footer of email notifications
+* DEFAULT_EMAIL_SIGNATURE the default email signature using in automatic VINCE notifications
+* STANDARD_EMAIL_SIGNATURE this is the default email signature for non-automatic VINCE notifications
+* COGNITO_VINCETRACK_GROUPS these are Cognito groups that should be put into the VINCE "vincetrack" group in VINCEComm and the "vince" group in VINCETrack.
+* COGNITO_LIMITED_ACCESS_GROUPS these are the Cognito group names that have access to particular views in VINCEComm
+* COGNITO_ATTR_MAPPING this is the mapping from Cognito to the VINCE User and VinceProfile models. If additional information is needed for the user account, the mapping should be expanded to include those fields.
+* DEFAULT_FROM_EMAIL the default email to send VINCE notifications from
+* DEFAULT_REPLY_EMAIL the default email to send non-automatic VINCE notifications from
+* DEFAULT_VISIBLE_NAME the name to use with emails
+* DEFAULT_REPLY_TO_EMAIL the default email to use in the "reply-to" header in email
+* DEFAULT_EMAIL_HEADERS additional email headers to set on outgoing VINCE email
+* IGNORE_EMAILS_TO the list of email addresses that VINCE shall ignore if email received in VINCE are sent TO the list
+* IS_WORKER set to True to enable VINCE worker URLs and code
+* IS_VINCEWORKER set to True to enable VINCE Track worker URLS and code
+* IS_KBWORKER set to True to enable VINCEPub worker URLS and code
+* IS_VCWORKER set to True to enable VINCEComm worker URLs and code
+* VINCE_MAX_EMAIL_LENGTH the maximum bytes of an email that VINCE will append to a ticket
+
+
+VINCE Configuration
+---------------------
+
+Before you can use VINCE, you must do some basic configuration. Most of this can be done via the Django admin views.
+
+1. Visit ``http://vince.yoursite.com/vince/create/contact/ and add 1 contact for each of your coordination team(s)
+2. Visit ``http://vince.yoursite.com/admin/`` and add a Group(s). The required "vince" group has already been added if you ran the command loadinitialdata. The name of the Group should match the name in COGNITO_VINCETRACK_GROUPS. Anyone that should have access to VINCETrack will belong in the "vince" group. The additional groups that you add should be the names of the coordination teams that will be working in VINCE and will determine access to queues, tickets, etc. Under Group Settings, choose the Contact you added in step 1. Decide if this team should have certain permissions such as:
+
+* Publish - the ability to publish vulnerability notes
+* Contact Read - the ability to read Contact information (this can be changed at the user level, but will be the default for a user when they are added to this team.)
+* Contact Write - the ability to write/edit Contact information (this can be changed at the user level, but will be the default for a user when they are added to this team.)
+
+3. Visit ``http://vince.yoursite.com/admin/`` and add Ticket Queues. Some ticket queues have already been added. If you choose to use the provided queues, you must add edit each queue and add permissions for the group you created in step 2 to read/write/publish. Ideally you should add at least 3 ticket queues (1 of each type) for each team. Define the team owner for each ticket queue and add permissions for each team that should have access to the quque. Optionally, provide the s3 bucket name for incoming email. Email that originates from this bucket will create a ticket on this queue.
+
+Queue Types
+---------------
+
+* General Ticket
+* Case Task Queue
+* Case Request Queue
+
+In each ticket queue, you have to grant r/w permissions to the appropriate team(s). If you don't plan to create more than 1 team, you can grant permission to the "vince" group to allow universal r/w on the ticket queues.
+
+
+
+
+
+
diff --git a/doc/index.md b/doc/index.md
new file mode 100644
index 0000000..9e295b5
--- /dev/null
+++ b/doc/index.md
@@ -0,0 +1,38 @@
+VINCE documentation
+====================
+
+VINCE, the Vulnerability Information and Coordination Environment, is a cloud-based, web application written in Python (Django) for coordinated vulnerability disclosure. It was developed due to a lack of existing ticketing tools for multi-party vulnerability coordination.
+
+Key Features
+--------------
+
+VINCE was designed for vulnerability coordination teams who need to manage communications about vulnerabilties with multiple parties. It intends to replace the use of encrypted mail communication and bring all relevant parties to the platform to collaborate, discuss, and agree on an embargo date. In this context *'relevant parties'* may be reporters, researchers, vendors, and government stakeholders.
+
+
+There are 3 parts to VINCE:
+
+* VINCETrack
+* VINCEComm
+* VINCEPub
+
+VINCETrack
+------------
+
+VINCETrack was designed with the vulnerability coordination team in mind. It manages tickets, cases, vulnerabilities, contacts, and users. VINCETrack can have 1 or more coordination teams working..
+
+VINCEComm
+-------------
+
+VINCEComm is the collaborative part of the VINCE platform. Vendors and researchers also have access to VINCEComm to communicate about vulnerabilites pre-embargo. Coordinators decide what to share to each case.
+
+VINCEPub
+------------
+
+VINCEPub is the public-facing website for VINCE notifications and advisories. It also has a vulnerability reporting form for reporters that wish to remain anonymous.
+
+Licensing
+------------
+
+VINCE is licensed under a MIT (SEI)-style license. Please see LICENSE.txt or contact permission@sei.cmu.edu for full terms.
+
+
diff --git a/doc/install.md b/doc/install.md
new file mode 100644
index 0000000..00f08a4
--- /dev/null
+++ b/doc/install.md
@@ -0,0 +1,212 @@
+Installation Instructions
+==========================
+
+Local install instructions can be found in the README file. This instruction guide is for installing VINCE in AWS. There are several pre-installation AWS configuration requirements.
+
+Set up a development environment
+---------------------------------
+
+```
+git clone [vince-github-repo]
+
+python3 -m venv env
+
+source env/bin/activate
+
+pip install -r requirements
+
+```
+
+Create IAM user in AWS with programmatic access. Add keys to ~/.aws/config:
+
+ [profile devtest]
+ region=us-east-1
+ aws_access_key_id = XXXXXX
+ aws_secret_access_key = XXXXX!@#$
+
+```
+eb init --profile devtest
+```
+
+Google reCAPTCHA
+-----------------
+
+reCAPTCHA is used on a couple of the VINCE forms (vulnerability reporting form and VINCE registration page.) VINCE uses the v2 Invisible reCAPTCHA type. Register a new site by adding the domains and selecting the appropriate reCAPTCHA type (reCAPTCHA v2). You may need to add "localhost" if you will be testing locally.
+
+Cognito User Pool
+------------------
+
+Using the AWS console, create a Cognito User Pool with the name "vince". Choose to step through the settings to configure your new user pool:
+
+* How do you want your end users to sign in?
+ - Choose "Email Address" and "allow email addresses"
+ - Enable case insensitivity for username input (This is a newer feature that VINCE 1.0 could not take advantage of)
+* Which standard attributes are required
+ - Preferred username
+* Do you want to add custom attributes? YES, make sure all are "mutable", and min length 1, max noted below
+ - Organization (512 characters)
+ - first_name (256 characters)
+ - last_name (256 characters)
+ - title (256 characters)
+ - api_key (256 characters)
+* Password requirements: defaults are sufficient
+ - allow user to sign themselves up.
+* Do you want to enable multi-factor authentication?
+ - Choose "OPTIONAL"
+ * This is important, because otherwise it makes the signup/login process difficult and also makes it challenging to change MFA type. The MFA requirement is enforced in the VINCE application
+ - Choose both SMS and TOTP
+* How will a user be able to recover their account?
+ - Option 1: Email if available, otherwise phone, but don’t allow a user to reset their password via phone if they are also using it for MFA
+* Which attributes do you want to verify?
+ - Email
+* You must provide a role to allow Amazon Cognito to send SMS messages
+ - vince-SMS-role (auto-provided)
+
+* Message customizations:
+ - At this point, no email is setup, so you can't choose a FROM email address but once you setup SES, you will need to choose the email address you configure. You'll also want to select "YES" to send emails through SES.
+
+ - Customize email verification message:
+ - Code
+ - Email Subject: Your VINCE verification code
+ - Email Message: Your VINCE verification code is {}
+ - Do you want to customizer your user invitation messages?
+ - Your VINCE username is {} and temporary password is {}
+ - Email Subject: Your temporary password for VINCE
+
+* Add app client
+ - app client name: vince
+ - Make sure you uncheck "Generate client secret"
+ - Use Auth Flows Configuration defaults: ALLOW_CUSTOM_AUTH, ALLOW_USER_SRP_AUTH, ALLOW_REFRESH_TOKEN_AUTH
+ - Security Configuration: prevent user existence errors: Enabled
+ - Set attributes read and write permissions:
+ - make sure all attributes are readable and writable
+
+* Create a GROUP:
+ - Group name must match whatever the "cognito_admin_group" environment variable is set to.
+
+
+SNS
+----------
+
+Create 4 "Standard" Topics. Default options are fine.
+Names:
+
+* vince-email (Display name: VINCE)
+* vince-email-bounce (Display name: VINCE Email Bounce)
+* vince-pub
+* vince-pub-errors
+
+S3 Buckets
+------------
+
+Some S3 buckets will be created for you with cdk, but these 3 buckets must be created prior to deployment. Names can be customized but will need to be provided in environment variables:
+
+* deployment bucket (e.g. vince-deploy-123)
+* artifacts bucket (e.g. vince-artifacts-123)
+* email bucket (e.g. vince-email-123)
+
+Add the following bucket policy for the email bucket. Replace aws:Referer "xx123442223xx" with your account number:
+
+ {
+ "Version": "2012-10-17",
+ "Statement": [
+ {
+ "Sid": "AllowSESPuts",
+ "Effect": "Allow",
+ "Principal": {
+ "Service": "ses.amazonaws.com"
+ },
+ "Action": "s3:PutObject",
+ "Resource": "arn:aws:s3:::vince-email-a123/*",
+ "Condition": {
+ "StringEquals": {
+ "aws:Referer": "xx123442223xx"
+ }
+ }
+ }
+ ]
+ }
+
+
+SES
+-----
+
+Add your domain in SES
+Create receipt rule in email receiving
+Add email address: vince@yourdomain.com
+Add S3 action:
+S3 bucket: use email-bucket name from above
+SNS Topic: use SNS email topic from above
+Rule name: vince-rule-1
+Review and Create Rule: The bucket policy must be configured above or it will fail to write to the bucket.
+Optionally you can create IP address filters to only allow receiving email from particular IPs.
+
+Add MX record in ROUTE 53: 10 inbound-smtp.us-east-1.amazonaws.com
+
+Setup outgoing VINCE email:
+
+Once the MX record has been added, you can verify an email address.
+
+Add email address "vince@yourdomain.com" under Email addresses. AWS will send a verification which you'll have to retrieve from the S3 bucket. Download the file and copy/paste the link to verify the address.
+
+
+Additional Configuration after Deployment
+------------------------
+
+ALLOWED_HOSTS in bigvince/settings.py must contain the domain you are deploying to otherwise you'll see "Bad Request" when going to the new VINCE URL.
+
+You will have to create a new user using the regular VINCE Signup method. This user will be "pending."
+
+Once the user is created, in the AWS Cognito Console, you can add your user to the Group you made earlier. Logout the user and sign in again. This user will now be able to see the VINCE Dashboard.
+
+Create a superuser
+------------------
+
+Select Secret Manager in AWS console:
+
+find vincerdsmaster:
+
+copy secret value: XXXXX
+
+Select RDS in AWS console:
+
+Get RDS VINCE Endpoint: lsjfdlsjflsd.us-east-1.rds.amazonaws.com
+
+Select EC2 in AWS console find bigvince-bastion:
+
+Retrieve public ipv4 dns:
+
+ec2-39493/compute-1.amazonaws.com
+
+SSH into the bastion:
+
+then you have access to the database - use the endpoint from above and the secret password for the database:
+
+```
+psql -h lsjfdlsjflsd.us-east-1.rds.amazonaws.com -p 5432 -U postgres -W
+
+\c vincecord
+
+UPDATE auth_user set is_superuser=true where id=2;
+
+\c vincetrack
+
+UPDATE auth_user set is_superuser=true where id=2;
+```
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
diff --git a/doc/tickets.md b/doc/tickets.md
new file mode 100644
index 0000000..d0fde39
--- /dev/null
+++ b/doc/tickets.md
@@ -0,0 +1,10 @@
+VINCE Tickets {#tickets}
+===============================
+
+* [What is a ticket?](#whatis)
+
+
+What is a ticket? {#whatis}
+===========================
+
+A VINCE Ticket is
\ No newline at end of file
diff --git a/doc/vincepub.md b/doc/vincepub.md
new file mode 100644
index 0000000..e50663e
--- /dev/null
+++ b/doc/vincepub.md
@@ -0,0 +1,15 @@
+VINCEPub
+===========
+
+VINCEPub is the public facing website for VINCE. There are a few customization options available in bigvince/settings.
+
+* FAVICON - path to favicon image
+* WEB_TITLE - the website title
+* ORG_NAME - your organization name
+* CONTACT_EMAIL - the email address found in the footer of the wesbite
+* VINCEPUB_BASE_TEMPLATE - you can swap out the base template if you want to use your own template
+* ACK_EMAIL_TEMPLATE - the acknowledgement email sent to reporters that submit the vulnerability reporting form
+
+You may also decide to simply change the color scheme of the provided site. This can be done by changing the :root colors in vincepub/static/vincepub/css/styles.css.
+
+
diff --git a/kbworker/__init__.py b/kbworker/__init__.py
new file mode 100644
index 0000000..296bbf8
--- /dev/null
+++ b/kbworker/__init__.py
@@ -0,0 +1,28 @@
+#########################################################################
+# VINCE
+#
+# Copyright 2022 Carnegie Mellon University.
+#
+# NO WARRANTY. THIS CARNEGIE MELLON UNIVERSITY AND SOFTWARE ENGINEERING
+# INSTITUTE MATERIAL IS FURNISHED ON AN "AS-IS" BASIS. CARNEGIE MELLON
+# UNIVERSITY MAKES NO WARRANTIES OF ANY KIND, EITHER EXPRESSED OR IMPLIED,
+# AS TO ANY MATTER INCLUDING, BUT NOT LIMITED TO, WARRANTY OF FITNESS FOR
+# PURPOSE OR MERCHANTABILITY, EXCLUSIVITY, OR RESULTS OBTAINED FROM USE OF THE
+# MATERIAL. CARNEGIE MELLON UNIVERSITY DOES NOT MAKE ANY WARRANTY OF ANY KIND
+# WITH RESPECT TO FREEDOM FROM PATENT, TRADEMARK, OR COPYRIGHT INFRINGEMENT.
+#
+# Released under a MIT (SEI)-style license, please see license.txt or contact
+# permission@sei.cmu.edu for full terms.
+#
+# [DISTRIBUTION STATEMENT A] This material has been approved for public
+# release and unlimited distribution. Please see Copyright notice for non-US
+# Government use and distribution.
+#
+# Carnegie Mellon®, CERT® and CERT Coordination Center® are registered in the
+# U.S. Patent and Trademark Office by Carnegie Mellon University.
+#
+# This Software includes and/or makes use of Third-Party Software each subject
+# to its own license.
+#
+# DM21-1126
+########################################################################
diff --git a/kbworker/settings.py b/kbworker/settings.py
new file mode 100644
index 0000000..296bbf8
--- /dev/null
+++ b/kbworker/settings.py
@@ -0,0 +1,28 @@
+#########################################################################
+# VINCE
+#
+# Copyright 2022 Carnegie Mellon University.
+#
+# NO WARRANTY. THIS CARNEGIE MELLON UNIVERSITY AND SOFTWARE ENGINEERING
+# INSTITUTE MATERIAL IS FURNISHED ON AN "AS-IS" BASIS. CARNEGIE MELLON
+# UNIVERSITY MAKES NO WARRANTIES OF ANY KIND, EITHER EXPRESSED OR IMPLIED,
+# AS TO ANY MATTER INCLUDING, BUT NOT LIMITED TO, WARRANTY OF FITNESS FOR
+# PURPOSE OR MERCHANTABILITY, EXCLUSIVITY, OR RESULTS OBTAINED FROM USE OF THE
+# MATERIAL. CARNEGIE MELLON UNIVERSITY DOES NOT MAKE ANY WARRANTY OF ANY KIND
+# WITH RESPECT TO FREEDOM FROM PATENT, TRADEMARK, OR COPYRIGHT INFRINGEMENT.
+#
+# Released under a MIT (SEI)-style license, please see license.txt or contact
+# permission@sei.cmu.edu for full terms.
+#
+# [DISTRIBUTION STATEMENT A] This material has been approved for public
+# release and unlimited distribution. Please see Copyright notice for non-US
+# Government use and distribution.
+#
+# Carnegie Mellon®, CERT® and CERT Coordination Center® are registered in the
+# U.S. Patent and Trademark Office by Carnegie Mellon University.
+#
+# This Software includes and/or makes use of Third-Party Software each subject
+# to its own license.
+#
+# DM21-1126
+########################################################################
diff --git a/kbworker/urls.py b/kbworker/urls.py
new file mode 100644
index 0000000..927deb5
--- /dev/null
+++ b/kbworker/urls.py
@@ -0,0 +1,50 @@
+#########################################################################
+# VINCE
+#
+# Copyright 2022 Carnegie Mellon University.
+#
+# NO WARRANTY. THIS CARNEGIE MELLON UNIVERSITY AND SOFTWARE ENGINEERING
+# INSTITUTE MATERIAL IS FURNISHED ON AN "AS-IS" BASIS. CARNEGIE MELLON
+# UNIVERSITY MAKES NO WARRANTIES OF ANY KIND, EITHER EXPRESSED OR IMPLIED,
+# AS TO ANY MATTER INCLUDING, BUT NOT LIMITED TO, WARRANTY OF FITNESS FOR
+# PURPOSE OR MERCHANTABILITY, EXCLUSIVITY, OR RESULTS OBTAINED FROM USE OF THE
+# MATERIAL. CARNEGIE MELLON UNIVERSITY DOES NOT MAKE ANY WARRANTY OF ANY KIND
+# WITH RESPECT TO FREEDOM FROM PATENT, TRADEMARK, OR COPYRIGHT INFRINGEMENT.
+#
+# Released under a MIT (SEI)-style license, please see license.txt or contact
+# permission@sei.cmu.edu for full terms.
+#
+# [DISTRIBUTION STATEMENT A] This material has been approved for public
+# release and unlimited distribution. Please see Copyright notice for non-US
+# Government use and distribution.
+#
+# Carnegie Mellon®, CERT® and CERT Coordination Center® are registered in the
+# U.S. Patent and Trademark Office by Carnegie Mellon University.
+#
+# This Software includes and/or makes use of Third-Party Software each subject
+# to its own license.
+#
+# DM21-1126
+########################################################################
+"""kbworker URL Configuration
+
+The `urlpatterns` list routes URLs to views. For more information please see:
+ https://docs.djangoproject.com/en/1.10/topics/http/urls/
+Examples:
+Function views
+ 1. Add an import: from my_app import views
+ 2. Add a URL to urlpatterns: url(r'^$', views.home, name='home')
+Class-based views
+ 1. Add an import: from other_app.views import Home
+ 2. Add a URL to urlpatterns: url(r'^$', Home.as_view(), name='home')
+Including another URLconf
+ 1. Import the include() function: from django.conf.urls import url, include
+ 2. Add a URL to urlpatterns: url(r'^blog/', include('blog.urls'))
+"""
+from django.conf.urls import url
+from kbworker.views import check_for_updates
+
+urlpatterns = [
+ url(r'^check-for-updates/$', check_for_updates, name='checkupdate'),
+]
+
diff --git a/kbworker/views.py b/kbworker/views.py
new file mode 100644
index 0000000..d4dffa3
--- /dev/null
+++ b/kbworker/views.py
@@ -0,0 +1,247 @@
+#########################################################################
+# VINCE
+#
+# Copyright 2022 Carnegie Mellon University.
+#
+# NO WARRANTY. THIS CARNEGIE MELLON UNIVERSITY AND SOFTWARE ENGINEERING
+# INSTITUTE MATERIAL IS FURNISHED ON AN "AS-IS" BASIS. CARNEGIE MELLON
+# UNIVERSITY MAKES NO WARRANTIES OF ANY KIND, EITHER EXPRESSED OR IMPLIED,
+# AS TO ANY MATTER INCLUDING, BUT NOT LIMITED TO, WARRANTY OF FITNESS FOR
+# PURPOSE OR MERCHANTABILITY, EXCLUSIVITY, OR RESULTS OBTAINED FROM USE OF THE
+# MATERIAL. CARNEGIE MELLON UNIVERSITY DOES NOT MAKE ANY WARRANTY OF ANY KIND
+# WITH RESPECT TO FREEDOM FROM PATENT, TRADEMARK, OR COPYRIGHT INFRINGEMENT.
+#
+# Released under a MIT (SEI)-style license, please see license.txt or contact
+# permission@sei.cmu.edu for full terms.
+#
+# [DISTRIBUTION STATEMENT A] This material has been approved for public
+# release and unlimited distribution. Please see Copyright notice for non-US
+# Government use and distribution.
+#
+# Carnegie Mellon®, CERT® and CERT Coordination Center® are registered in the
+# U.S. Patent and Trademark Office by Carnegie Mellon University.
+#
+# This Software includes and/or makes use of Third-Party Software each subject
+# to its own license.
+#
+# DM21-1126
+########################################################################
+from django.shortcuts import render
+from django.core.management import call_command
+import json
+import boto3
+import logging
+from vincepub.models import VUReport, VendorRecord
+from vincepub import serializers
+from django.views.decorators.csrf import csrf_exempt
+from django.http import JsonResponse
+from django.conf import settings
+import traceback
+
+logger = logging.getLogger(__name__)
+logger.setLevel(logging.DEBUG)
+
+def send_sns(vul_id, issue, error):
+ subject = "%s: %s%s" % (issue, settings.CASE_IDENTIFIER, vul_id)
+ try:
+ client = boto3.client('sns', settings.AWS_REGION)
+ response = client.publish(
+ TopicArn=settings.VINCE_ERROR_SNS_ARN,
+ Subject=subject,
+ Message=error)
+ logger.debug("Response:{}".format(response))
+
+ except:
+ logger.debug(traceback.format_exc())
+ logger.debug('Error publishing to SNS')
+
+# Create your views here.
+
+@csrf_exempt
+def generate_reminders(request):
+ #we don't want to return 404s too many times so just return a success
+ # for this periodic task
+ return JsonResponse({'response':'success'}, status=200)
+
+@csrf_exempt
+def check_for_updates(request):
+ logger.debug(request)
+ if request.method == 'POST':
+ try:
+ body_unicode = request.body.decode('utf-8')
+ body_data = json.loads(body_unicode)
+ logger.debug(body_data)
+ message = json.loads(body_data['Message'])
+ logger.debug(message)
+ if message.get("Event"):
+ if message["Event"] == "s3:TestEvent":
+ return JsonResponse({'response':'success'}, status=200)
+ obj_key = message['Records'][0]['s3']['object']['key']
+ except:
+ error_msg = "%s \n %s" % (body_data, traceback.format_exc())
+ send_sns('Error in update script', 'issue with json load of HTTP POST', error_msg)
+ return render(request, 'vincepub/404.html', {}, status=404)
+ s3 = boto3.resource('s3', settings.AWS_REGION)
+ static_bucket = s3.Bucket(settings.AWS_STORAGE_BUCKET_NAME)
+ obj = s3.Object(settings.S3_UPDATE_BUCKET_NAME, obj_key)
+ if obj:
+ logger.debug("reading %s to update record" % obj.key)
+ fkey = obj.key
+ body = obj.get()['Body'].read().decode('utf-8')
+ if fkey.startswith("vu_"):
+ ldata = json.loads(body)
+ if ldata.get("vince"):
+ try:
+ report = VUReport.objects.filter(idnumber = ldata['idnumber']).first()
+ logger.debug(f"Publishing {settings.CASE_IDENTIFIER}{report.idnumber}:{report.name}")
+ # first if there are any files that need copied/removed, do that first
+ if ldata.get('copy_files') and ldata.get('replace_files'):
+ replace_files = ldata.get('replace_files')
+ copy_files = ldata.get('copy_files')
+ for no, f in enumerate(copy_files):
+ logger.debug(f"Copying file {f}")
+ copy_source = {'Bucket': settings.KB_SHARED_BUCKET,
+ 'Key': f}
+ static_bucket.copy(copy_source, settings.AWS_LOCATION + "/" + f)
+ try:
+ content = report.vulnote.content
+ replace_link = f"{settings.STATIC_URL}{f}"
+ logger.debug(f"Replacing file {replace_files[no]} in content with {replace_link}")
+ content = content.replace(replace_files[no], replace_link)
+ report.vulnote.content = content
+ report.vulnote.save()
+ except:
+ logger.debug("Problem with replacing vulnote content")
+ logger.debug(traceback.format_exc())
+
+ if ldata.get('unchanged_files'):
+ logger.debug("rewriting urls for unchanged files")
+ unchanged_files = ldata.get('unchanged_files')
+ for no, f in enumerate(unchanged_files):
+ logger.debug(f"Rewriting URL for file {f}")
+ try:
+ content = report.vulnote.content
+ replace_link = f"{settings.STATIC_URL}{f}"
+ logger.debug(f"Replacing file {unchanged_files[no]} in content with {replace_link}")
+ content = content.replace(unchanged_files[no], replace_link)
+ report.vulnote.content = content
+ report.vulnote.save()
+ except:
+ logger.debug("Problem with rewriting file URLS in vul note")
+ logger.debug(traceback.format_exc())
+
+ if ldata.get('remove_files'):
+ remove_files = ldata.get('remove_files')
+ for f in remove_files:
+ logger.debug(f"Removing file {f}")
+ s3.Object(settings.AWS_STORAGE_BUCKET_NAME, settings.AWS_LOCATION + "/" + f).delete()
+ if report:
+ call_command('rebuildnotes', ldata['idnumber'])
+ logger.debug("done building static file")
+ report.publish = True
+ report.save()
+ send_sns(ldata['idnumber'], "PUBLISHED", "Congratulations, the vulnote was published.")
+ return JsonResponse({'response':'success'}, status=200)
+ else:
+ raise Exception(f"no vulnote matched {ldata['idnumber']}")
+ except:
+ send_sns(ldata.get('cert_id'), "Problem building static vulnerability note", traceback.format_exc())
+ return JsonResponse({ 'problem': ldata['idnumber']}, status=500)
+
+ if ldata["DateFirstPublished"] == "":
+ ldata.pop("DateFirstPublished")
+ if ldata["PublicDate"] == "":
+ ldata.pop("PublicDate")
+ if 'US-CERTTechnicalAlert' in ldata:
+ ldata['uscerttechalert'] = ldata['US-CERTTechnicalAlert']
+ ldata.pop("US-CERTTechnicalAlert")
+ ldatalower = {k.lower(): v for k, v in ldata.items()}
+ for key,val in ldatalower.items():
+ if key.startswith("txt_"):
+ k = key[4:]
+ ldatalower[k] = val
+ ldatalower.pop(key)
+ ldatalower['name'] = ldatalower['name'].replace(""", "\"")
+ ldatalower['vuid'] = ldatalower['cert_id']
+ ldatalower['idnumber'] = ldatalower['vuid'][3:]
+ ldatalower['keywords_str'] = ", ".join(ldatalower['keywords'])
+ ldatalower['cve_str'] = ", ".join(ldatalower['cveids'])
+ ldatalower.pop('cert_id')
+ record = VUReport.objects.filter(vuid=ldatalower['vuid']).first()
+ report = None
+ if (record):
+ #update record
+ logger.debug("UPDATE TO %s" % ldatalower['vuid'])
+ report = serializers.VUReportSerializer(record, data=ldatalower, partial=True)
+ else:
+ #don't publish until static file created
+ ldatalower['publish'] = False
+ report = serializers.VUReportSerializer(data=ldatalower, partial=True)
+ if (report.is_valid()):
+ report = report.save()
+ logger.debug("successfully imported %s" % ldatalower['vuid'])
+ s3.Object(settings.S3_UPDATE_BUCKET_NAME, fkey).delete()
+ else:
+ send_sns(ldatalower['vuid'], "Error importing vul note", report.errors)
+ return JsonResponse({'vu problem': ldatalower['vuid']}, status=500)
+ elif fkey.startswith("vendor"):
+ ldata = json.loads(body)
+ if ldata["NotifiedDate"] == "":
+ ldata.pop("NotifiedDate")
+ else:
+ ldata["datenotified"] = ldata["NotifiedDate"]
+ if ldata["StatementDate"] != "":
+ ldata["dateresponded"] = ldata["StatementDate"]
+ ldatalower = {k.lower(): v for k, v in ldata.items()}
+ for key,val in ldatalower.items():
+ if key.startswith("txt_"):
+ k = key[4:]
+ ldatalower[k] = val
+ ldatalower.pop(key)
+ ldatalower['vuid'] = ldatalower['reference']
+ ldatalower['idnumber'] = ldatalower['reference'][3:]
+ ldatalower['vendorrecordid'] = ldatalower['idkey']
+ ldatalower['datelastupdated'] = parse(ldatalower['datelastupdated'])
+ vendor = VendorRecord.objects.filter(vendorrecordid=ldatalower['vendorrecordid']).first()
+ record = None
+ if (vendor):
+
+ logger.debug("updating vendor record for %s" % ldatalower['vendorrecordid'])
+ record = serializers.VendorRecordSerializer(vendor, data = ldatalower, partial=True)
+ else:
+ record = serializers.VendorRecordSerializer(data = ldatalower, partial=True)
+
+ if (record.is_valid()):
+ record.save()
+ logger.debug("successfully imported vendor record %s" % ldatalower['vendorrecordid'])
+ s3.Object(settings.S3_UPDATE_BUCKET_NAME, fkey).delete()
+ else:
+ send_sns(ldatalower['vendorrecordid'], "importing vendor record", record.errors)
+ return JsonResponse({'vendor problem': ldatalower['vendorrecordid']}, status=500)
+
+ call_command('rebuildnotes', ldatalower['idnumber'])
+ logger.debug("done building static file")
+ call_command('publish', '--no-delete')
+ logger.debug("done publishing")
+ report.publish = True
+ report.save()
+ send_sns(ldatalower['idnumber'], "PUBLISHED", "Congratulations, the vulnote was published.")
+ return JsonResponse({'response':'success'}, status=200)
+ else:
+ data = {}
+ return render(request, 'vincepub/404.html', data, status=404)
+
+
+@csrf_exempt
+def vc_daily_digest(request):
+ #we don't want to return 404s too many times so just return a success
+ # for this periodic task
+ return JsonResponse({'response':'success'}, status=200)
+
+
+@csrf_exempt
+def vt_daily_digest(request):
+ #we don't want to return 404s too many times so just return a success
+ # for this periodic task
+ return JsonResponse({'response':'success'}, status=200)
+
diff --git a/kbworker/wsgi.py b/kbworker/wsgi.py
new file mode 100644
index 0000000..cd53a47
--- /dev/null
+++ b/kbworker/wsgi.py
@@ -0,0 +1,44 @@
+#########################################################################
+# VINCE
+#
+# Copyright 2022 Carnegie Mellon University.
+#
+# NO WARRANTY. THIS CARNEGIE MELLON UNIVERSITY AND SOFTWARE ENGINEERING
+# INSTITUTE MATERIAL IS FURNISHED ON AN "AS-IS" BASIS. CARNEGIE MELLON
+# UNIVERSITY MAKES NO WARRANTIES OF ANY KIND, EITHER EXPRESSED OR IMPLIED,
+# AS TO ANY MATTER INCLUDING, BUT NOT LIMITED TO, WARRANTY OF FITNESS FOR
+# PURPOSE OR MERCHANTABILITY, EXCLUSIVITY, OR RESULTS OBTAINED FROM USE OF THE
+# MATERIAL. CARNEGIE MELLON UNIVERSITY DOES NOT MAKE ANY WARRANTY OF ANY KIND
+# WITH RESPECT TO FREEDOM FROM PATENT, TRADEMARK, OR COPYRIGHT INFRINGEMENT.
+#
+# Released under a MIT (SEI)-style license, please see license.txt or contact
+# permission@sei.cmu.edu for full terms.
+#
+# [DISTRIBUTION STATEMENT A] This material has been approved for public
+# release and unlimited distribution. Please see Copyright notice for non-US
+# Government use and distribution.
+#
+# Carnegie Mellon®, CERT® and CERT Coordination Center® are registered in the
+# U.S. Patent and Trademark Office by Carnegie Mellon University.
+#
+# This Software includes and/or makes use of Third-Party Software each subject
+# to its own license.
+#
+# DM21-1126
+########################################################################
+"""
+WSGI config for vulcert project.
+
+It exposes the WSGI callable as a module-level variable named ``application``.
+
+For more information on this file, see
+https://docs.djangoproject.com/en/1.10/howto/deployment/wsgi/
+"""
+
+import os
+
+from django.core.wsgi import get_wsgi_application
+
+os.environ.setdefault("DJANGO_SETTINGS_MODULE", "kbworker.settings")
+
+application = get_wsgi_application()
diff --git a/lib/vince/markdown_helpers.py b/lib/vince/markdown_helpers.py
new file mode 100644
index 0000000..a01f930
--- /dev/null
+++ b/lib/vince/markdown_helpers.py
@@ -0,0 +1,144 @@
+#########################################################################
+# VINCE
+#
+# Copyright 2022 Carnegie Mellon University.
+#
+# NO WARRANTY. THIS CARNEGIE MELLON UNIVERSITY AND SOFTWARE ENGINEERING
+# INSTITUTE MATERIAL IS FURNISHED ON AN "AS-IS" BASIS. CARNEGIE MELLON
+# UNIVERSITY MAKES NO WARRANTIES OF ANY KIND, EITHER EXPRESSED OR IMPLIED,
+# AS TO ANY MATTER INCLUDING, BUT NOT LIMITED TO, WARRANTY OF FITNESS FOR
+# PURPOSE OR MERCHANTABILITY, EXCLUSIVITY, OR RESULTS OBTAINED FROM USE OF THE
+# MATERIAL. CARNEGIE MELLON UNIVERSITY DOES NOT MAKE ANY WARRANTY OF ANY KIND
+# WITH RESPECT TO FREEDOM FROM PATENT, TRADEMARK, OR COPYRIGHT INFRINGEMENT.
+#
+# Released under a MIT (SEI)-style license, please see license.txt or contact
+# permission@sei.cmu.edu for full terms.
+#
+# [DISTRIBUTION STATEMENT A] This material has been approved for public
+# release and unlimited distribution. Please see Copyright notice for non-US
+# Government use and distribution.
+#
+# Carnegie Mellon®, CERT® and CERT Coordination Center® are registered in the
+# U.S. Patent and Trademark Office by Carnegie Mellon University.
+#
+# This Software includes and/or makes use of Third-Party Software each subject
+# to its own license.
+#
+# DM21-1126
+########################################################################
+from django.contrib.auth.models import User, Group
+import markdown as md
+from lib.vince.mdx_math import MathExtension
+import bleach
+from bleach_whitelist import generally_xss_safe, markdown_attrs
+import logging
+from bs4 import BeautifulSoup
+
+logger = logging.getLogger(__name__)
+logger.setLevel(logging.DEBUG)
+
+class UserMentionExtension(md.Extension):
+
+ UM_RE = r'\B((@(?![0-9]+$)(?!-)[-/a-zA-Z0-9+_.]{2,36})(\s[-/a-zA-Z0-9+_.]*)?)'
+
+ def __init__(self, users=None, **kwargs):
+ md.Extension.__init__(self)
+ self.user_list = users
+
+ def extendMarkdown(self, mde, md_globals):
+ mde.inlinePatterns["user_mentions"] = UserMentionInlinePattern(self.UM_RE, users=self.user_list)
+
+class UserMentionInlinePattern(md.inlinepatterns.Pattern):
+
+ def __init__(self, pattern, users=None):
+ md.inlinepatterns.Pattern.__init__(self, pattern)
+ if users:
+ self.user_lists = [d['value'] for d in users]
+ else:
+ self.user_lists = []
+
+ def query_users(self, user_name):
+ if self.user_lists:
+ return User.objects.using('vincecomm').filter(vinceprofile__preferred_username=user_name, vinceprofile__preferred_username__in=self.user_lists).first()
+ else:
+ try:
+ return User.objects.using('vincecomm').filter(vinceprofile__preferred_username=user_name).first()
+ except:
+ return None
+
+ def query_groups(self, group_name):
+ if self.user_lists:
+ return Group.objects.using('vincecomm').filter(groupcontact__contact__vendor_name=group_name, groupcontact__contact__vendor_name__in=self.user_lists).first()
+ else:
+ try:
+ # this will match on more than 1 space so group gets tagged, but it won't show tooltip
+ return Group.objects.using('vincecomm').filter(groupcontact__contact__vendor_name__istartswith=group_name).first()
+ except:
+ return None
+
+ def handleMatch(self, m):
+ user_name = m.group(3).replace("@", "")
+ user_name_with_space = m.group(2).replace("@", "")
+ if (len(m.groups()) > 3):
+ word_after_user_name = m.group(4)
+ else:
+ word_after_user_name = ""
+
+ if self.user_lists:
+ if user_name not in self.user_lists:
+ if user_name_with_space not in self.user_lists:
+ return "@%s" % user_name_with_space
+
+ # try group 2 (which includes the space):
+ user_name = m.group(2).replace("@", "")
+ user = self.query_users(user_name)
+ if user:
+ result = md.util.etree.Element('a')
+ result.text = "@%s" % user_name
+ result.set('href', user.vinceprofile.url)
+ result.set('class', 'user-mention')
+ return result
+
+ group = self.query_groups(user_name)
+ if group:
+ result = md.util.etree.Element('a')
+ result.text = "@%s" % user_name
+ result.set('href', group.groupcontact.url)
+ result.set('class', 'user-mention')
+ return result
+
+ #try group 1 (without space)
+ user_name = m.group(3).replace("@", "")
+ user = self.query_users(user_name)
+ if user:
+ result = md.util.etree.Element('a')
+ result.text = "@%s" % user_name
+ result.set('href', user.vinceprofile.url)
+ result.set('class', 'user-mention')
+ result.tail = word_after_user_name
+ return result
+ #or groupname
+ group = self.query_groups(user_name)
+ if group:
+ result = md.util.etree.Element('a')
+ result.text = "@%s" % user_name
+ result.set('href', group.groupcontact.url)
+ result.set('class', 'user-mention')
+ result.tail = word_after_user_name
+ return result
+
+ result = "@%s" % user_name_with_space
+ return result
+
+
+def markdown(value):
+ markdown_attrs['a'].append("class")
+ markdown_attrs['img'].append("width")
+ markdown_attrs['img'].append("height")
+ return bleach.clean(md.markdown(value, extensions=['toc', 'markdown.extensions.fenced_code', UserMentionExtension(), MathExtension()]), generally_xss_safe, markdown_attrs)
+
+def markdown_filter(value, users):
+ markdown_attrs['a'].append("class")
+ markdown_attrs['img'].append("width")
+ markdown_attrs['img'].append("height")
+ return bleach.clean(md.markdown(value, extensions=['toc', 'markdown.extensions.fenced_code', UserMentionExtension(users), MathExtension()]), generally_xss_safe, markdown_attrs)
diff --git a/lib/vince/mdx_math.py b/lib/vince/mdx_math.py
new file mode 100644
index 0000000..ee32c23
--- /dev/null
+++ b/lib/vince/mdx_math.py
@@ -0,0 +1,53 @@
+'''
+Math extension for Python-Markdown
+==================================
+Adds support for displaying math formulas using MathJax / KaTeX
+Copyright 2019-2020 Gautam Iyer
+Based on code originally written by Dmitry Shachnev
+https://github.com/gi1242/python-markdown-math/blob/master/mdx_math.py
+'''
+
+from markdown.inlinepatterns import InlineProcessor
+from markdown.extensions import Extension
+
+class inlineMathProcessor( InlineProcessor ):
+ def handleMatch( self, m, data ):
+ # MathJAX handles all the math. Just set the uses_math flag, and
+ # protect the contents from markdown expansion.
+ self.md.uses_math = True
+ return m.group(0), m.start(0), m.end(0)
+
+
+class MathExtension(Extension):
+ def __init__(self, *args, **kwargs):
+ self.config = {
+ 'enable_dollar_delimiter':
+ [False, 'Enable single-dollar delimiter'],
+ }
+ super(MathExtension, self).__init__(*args, **kwargs)
+
+ def extendMarkdown(self, md):
+ md.registerExtension(self)
+
+ mathRegExps = [
+ r'(? Attributes' page.
+Secondly, set permissions on 'Generals settings-> App clients-> Show details-> Set attribute read and write permissions' page.
+```python
+from warrant import Cognito
+
+u = Cognito('your-user-pool-id', 'your-client-id')
+
+u.add_base_attributes(email='you@you.com', some_random_attr='random value')
+
+u.add_custom_attributes(state='virginia', city='Centreville')
+
+u.register('username', 'password')
+```
+##### Arguments
+
+- **username:** User Pool username
+- **password:** User Pool password
+- **attr_map:** Attribute map to Cognito's attributes
+
+
+#### Authenticate ####
+
+Authenticates a user
+
+If this method call succeeds the instance will have the following attributes **id_token**, **refresh_token**, **access_token**, **expires_in**, **expires_datetime**, and **token_type**.
+
+```python
+from warrant import Cognito
+
+u = Cognito('your-user-pool-id','your-client-id',
+ username='bob')
+
+u.authenticate(password='bobs-password')
+```
+
+##### Arguments
+
+- **password:** - User's password
+
+#### Admin Authenticate
+
+Authenticate the user using admin super privileges
+
+```python
+from warrant import Cognito
+
+u = Cognito('your-user-pool-id','your-client-id',
+ username='bob')
+
+u.admin_authenticate(password='bobs-password')
+```
+
+- **password:** User's password
+
+#### Initiate Forgot Password
+
+Sends a verification code to the user to use to change their password.
+
+```python
+u = Cognito('your-user-pool-id','your-client-id',
+ username='bob')
+
+u.initiate_forgot_password()
+```
+
+##### Arguments
+
+No arguments
+
+#### Confirm Forgot Password
+
+Allows a user to enter a code provided when they reset their password
+to update their password.
+
+```python
+u = Cognito('your-user-pool-id','your-client-id',
+ username='bob')
+
+u.confirm_forgot_password('your-confirmation-code','your-new-password')
+```
+
+##### Arguments
+
+- **confirmation_code:** The confirmation code sent by a user's request
+to retrieve a forgotten password
+- **password:** New password
+
+#### Change Password ####
+
+Changes the user's password
+
+```python
+from warrant import Cognito
+
+#If you don't use your tokens then you will need to
+#use your username and password and call the authenticate method
+u = Cognito('your-user-pool-id','your-client-id',
+ id_token='id-token',refresh_token='refresh-token',
+ access_token='access-token')
+
+u.change_password('previous-password','proposed-password')
+```
+
+##### Arguments
+
+- **previous_password:** - User's previous password
+- **proposed_password:** - The password that the user wants to change to.
+
+#### Confirm Sign Up ####
+
+Use the confirmation code that is sent via email or text to confirm the user's account
+
+```python
+from warrant import Cognito
+
+u = Cognito('your-user-pool-id','your-client-id')
+
+u.confirm_sign_up('users-conf-code',username='bob')
+```
+
+##### Arguments
+
+- **confirmation_code:** Confirmation code sent via text or email
+- **username:** User's username
+
+#### Update Profile ####
+
+Update the user's profile
+
+```python
+from warrant import Cognito
+
+u = Cognito('your-user-pool-id','your-client-id',
+ id_token='id-token',refresh_token='refresh-token',
+ access_token='access-token')
+
+u.update_profile({'given_name':'Edward','family_name':'Smith',},attr_map=dict())
+```
+
+##### Arguments
+
+- **attrs:** Dictionary of attribute name, values
+- **attr_map:** Dictionary map from Cognito attributes to attribute names we would like to show to our users
+
+#### Send Verification ####
+
+Send verification email or text for either the email or phone attributes.
+
+```python
+from warrant import Cognito
+
+u = Cognito('your-user-pool-id','your-client-id',
+ id_token='id-token',refresh_token='refresh-token',
+ access_token='access-token')
+
+u.send_verification(attribute='email')
+```
+
+##### Arguments
+
+- **attribute:** - The attribute (email or phone) that needs to be verified
+
+#### Get User Object
+
+Returns an instance of the specified user_class.
+
+```python
+u = Cognito('your-user-pool-id','your-client-id',
+ id_token='id-token',refresh_token='refresh-token',
+ access_token='access-token')
+
+u.get_user_obj(username='bjones',
+ attribute_list=[{'Name': 'string','Value': 'string'},],
+ metadata={},
+ attr_map={"given_name":"first_name","family_name":"last_name"}
+ )
+```
+##### Arguments
+- **username:** Username of the user
+- **attribute_list:** List of tuples that represent the user's attributes as returned by the admin_get_user or get_user boto3 methods
+- **metadata: (optional)** Metadata about the user
+- **attr_map: (optional)** Dictionary that maps the Cognito attribute names to what we'd like to display to the users
+
+
+#### Get User
+
+Get all of the user's attributes. Gets the user's attributes using Boto3 and uses that info to create an instance of the user_class
+
+```python
+from warrant import Cognito
+
+u = Cognito('your-user-pool-id','your-client-id',
+ username='bob')
+
+user = u.get_user(attr_map={"given_name":"first_name","family_name":"last_name"})
+```
+
+##### Arguments
+- **attr_map:** Dictionary map from Cognito attributes to attribute names we would like to show to our users
+
+#### Get Users
+
+Get a list of the user in the user pool.
+
+
+```python
+from warrant import Cognito
+
+u = Cognito('your-user-pool-id','your-client-id')
+
+user = u.get_users(attr_map={"given_name":"first_name","family_name":"last_name"})
+```
+
+##### Arguments
+- **attr_map:** Dictionary map from Cognito attributes to attribute names we would like to show to our users
+
+#### Get Group object
+
+Returns an instance of the specified group_class.
+
+```python
+u = Cognito('your-user-pool-id', 'your-client-id')
+
+group_data = {'GroupName': 'user_group', 'Description': 'description',
+ 'Precedence': 1}
+
+group_obj = u.get_group_obj(group_data)
+```
+
+##### Arguments
+- **group_data:** Dictionary with group's attributes.
+
+#### Get Group
+
+Get all of the group's attributes. Returns an instance of the group_class.
+Requires developer credentials.
+
+```python
+from warrant import Cognito
+
+u = Cognito('your-user-pool-id','your-client-id')
+
+group = u.get_group(group_name='some_group_name')
+```
+
+##### Arguments
+- **group_name:** Name of a group
+
+#### Get Groups
+
+Get a list of groups in the user pool. Requires developer credentials.
+
+```python
+from warrant import Cognito
+
+u = Cognito('your-user-pool-id','your-client-id')
+
+groups = u.get_groups()
+```
+
+#### Check Token
+
+Checks the exp attribute of the access_token and either refreshes the tokens by calling the renew_access_tokens method or does nothing. **IMPORTANT:** Access token is required
+
+```python
+u = Cognito('your-user-pool-id','your-client-id',
+ id_token='id-token',refresh_token='refresh-token',
+ access_token='access-token')
+
+u.check_token()
+```
+##### Arguments
+
+No arguments for check_token
+
+#### Logout ####
+
+Logs the user out of all clients and removes the expires_in, expires_datetime, id_token, refresh_token, access_token, and token_type attributes.
+
+```python
+from warrant import Cognito
+
+#If you don't use your tokens then you will need to
+#use your username and password and call the authenticate method
+u = Cognito('your-user-pool-id','your-client-id',
+ id_token='id-token',refresh_token='refresh-token',
+ access_token='access-token')
+
+u.logout()
+```
+##### Arguments
+
+No arguments for check_token
+
+## Cognito SRP Utility
+The `AWSSRP` class is used to perform [SRP(Secure Remote Password protocol)](https://www.ietf.org/rfc/rfc2945.txt) authentication.
+This is the preferred method of user authentication with AWS Cognito.
+The process involves a series of authentication challenges and responses, which if successful,
+results in a final response that contains ID, access and refresh tokens.
+
+### Using AWSSRP
+The `AWSSRP` class takes a username, password, cognito user pool id, cognito app id, an optional
+client secret (if app client is configured with client secret), an optional pool_region or `boto3` client.
+Afterwards, the `authenticate_user` class method is used for SRP authentication.
+
+
+```python
+import boto3
+from warrant.aws_srp import AWSSRP
+
+client = boto3.client('cognito-idp')
+aws = AWSSRP(username='username', password='password', pool_id='user_pool_id',
+ client_id='client_id', client=client)
+tokens = aws.authenticate_user()
+```
+
+## Projects Using Warrant
+
+#### [Django Warrant](https://www.github.com/metametricsinc/django-warrant)
+
+## Authors
+
+### Brian Jinwright
+**Twitter:** [@brianjinwright](https://www.twitter.com/brianjinwright)
+**GitHub:** [@bjinwright](https://www.github.com/bjinwright/)
+
+### Eric Petway
+**GitHub:** [@ebpetway](https://www.github.com/ebpetway)
+
+### Sergey Vishnikin
+
+**GitHub:** [@armicron](https://www.github.com/armicron)
+
+## [Release Notes](https://github.com/capless/warrant/blob/master/HISTORY.md)
diff --git a/lib/warrant/__init__.py b/lib/warrant/__init__.py
new file mode 100644
index 0000000..055a20f
--- /dev/null
+++ b/lib/warrant/__init__.py
@@ -0,0 +1,688 @@
+import ast
+import boto3
+from boto3.exceptions import Boto3Error
+import datetime
+import re
+import requests
+import logging
+
+from envs import env
+from jose import jwt, JWTError
+
+from .aws_srp import AWSSRP
+from .exceptions import TokenVerificationException, SoftwareTokenException, SMSMFAException
+
+logger = logging.getLogger(__name__)
+
+def cognito_to_dict(attr_list, attr_map=None):
+ if attr_map is None:
+ attr_map = {}
+ attr_dict = dict()
+ for a in attr_list:
+ name = a.get('Name')
+ value = a.get('Value')
+ if value in ['true', 'false']:
+ value = ast.literal_eval(value.capitalize())
+ name = attr_map.get(name,name)
+ attr_dict[name] = value
+ return attr_dict
+
+def dict_to_cognito(attributes, attr_map=None):
+ """
+ :param attributes: Dictionary of User Pool attribute names/values
+ :return: list of User Pool attribute formatted dicts: {'Name': , 'Value': }
+ """
+ if attr_map is None:
+ attr_map = {}
+ for k,v in attr_map.items():
+ if v in attributes.keys():
+ attributes[k] = attributes.pop(v)
+
+ return [{'Name': key, 'Value': value} for key, value in attributes.items()]
+
+def camel_to_snake(camel_str):
+ """
+ :param camel_str: string
+ :return: string converted from a CamelCase to a snake_case
+ """
+ s1 = re.sub('(.)([A-Z][a-z]+)', r'\1_\2', camel_str)
+ return re.sub('([a-z0-9])([A-Z])', r'\1_\2', s1).lower()
+
+def snake_to_camel(snake_str):
+ """
+ :param snake_str: string
+ :return: string converted from a snake_case to a CamelCase
+ """
+ components = snake_str.split('_')
+ return ''.join(x.title() for x in components)
+
+
+class UserObj(object):
+
+ def __init__(self, username, attribute_list, cognito_obj, metadata=None, attr_map=None):
+ """
+ :param username:
+ :param attribute_list:
+ :param metadata: Dictionary of User metadata
+ """
+ self.username = username
+ self.pk = username
+ self._cognito = cognito_obj
+ self._attr_map = {} if attr_map is None else attr_map
+ self._data = cognito_to_dict(attribute_list,self._attr_map)
+ self.sub = self._data.pop('sub',None)
+ self.email_verified = self._data.pop('email_verified',None)
+ self.phone_number_verified = self._data.pop('phone_number_verified',None)
+ self._metadata = {} if metadata is None else metadata
+
+ def __repr__(self):
+ return '<{class_name}: {uni}>'.format(
+ class_name=self.__class__.__name__, uni=self.__unicode__())
+
+ def __unicode__(self):
+ return self.username
+
+ def __getattr__(self, name):
+ if name in list(self.__dict__.get('_data',{}).keys()):
+ return self._data.get(name)
+ if name in list(self.__dict__.get('_metadata',{}).keys()):
+ return self._metadata.get(name)
+
+ def __setattr__(self, name, value):
+ if name in list(self.__dict__.get('_data',{}).keys()):
+ self._data[name] = value
+ else:
+ super(UserObj, self).__setattr__(name, value)
+
+ def save(self,admin=False):
+ if admin:
+ self._cognito.admin_update_profile(self._data, self._attr_map)
+ return
+ self._cognito.update_profile(self._data,self._attr_map)
+
+ def delete(self,admin=False):
+ if admin:
+ self._cognito.admin_delete_user()
+ return
+ self._cognito.delete_user()
+
+
+class GroupObj(object):
+
+ def __init__(self, group_data, cognito_obj):
+ """
+ :param group_data: a dictionary with information about a group
+ :param cognito_obj: an instance of the Cognito class
+ """
+ self._data = group_data
+ self._cognito = cognito_obj
+ self.group_name = self._data.pop('GroupName', None)
+ self.description = self._data.pop('Description', None)
+ self.creation_date = self._data.pop('CreationDate', None)
+ self.last_modified_date = self._data.pop('LastModifiedDate', None)
+ self.role_arn = self._data.pop('RoleArn', None)
+ self.precedence = self._data.pop('Precedence', None)
+
+ def __unicode__(self):
+ return self.group_name
+
+ def __repr__(self):
+ return '<{class_name}: {uni}>'.format(
+ class_name=self.__class__.__name__, uni=self.__unicode__())
+
+
+class Cognito(object):
+
+ user_class = UserObj
+ group_class = GroupObj
+
+ def __init__(
+ self, user_pool_id, client_id,user_pool_region=None,
+ username=None, id_token=None, refresh_token=None,
+ access_token=None, client_secret=None,
+ access_key=None, secret_key=None,
+ ):
+ """
+ :param user_pool_id: Cognito User Pool ID
+ :param client_id: Cognito User Pool Application client ID
+ :param username: User Pool username
+ :param id_token: ID Token returned by authentication
+ :param refresh_token: Refresh Token returned by authentication
+ :param access_token: Access Token returned by authentication
+ :param access_key: AWS IAM access key
+ :param secret_key: AWS IAM secret key
+ """
+
+ self.user_pool_id = user_pool_id
+ logger.debug(f"self.user_pool_id: {self.user_pool_id} user_pool_id: {user_pool_id}")
+ self.client_id = client_id
+ # if user_pool_region:
+ # self.user_pool_region = user_pool_region
+ # else:
+ # self.user_pool_region = self.user_pool_id.split('_')[0]
+ self.user_pool_region = self.user_pool_id.split('_')[0]
+
+ self.username = username
+ self.id_token = id_token
+ self.access_token = access_token
+ self.refresh_token = refresh_token
+ self.client_secret = client_secret
+ self.token_type = None
+ self.custom_attributes = None
+ self.base_attributes = None
+
+ boto3_client_kwargs = {}
+ if access_key and secret_key:
+ boto3_client_kwargs['aws_access_key_id'] = access_key
+ boto3_client_kwargs['aws_secret_access_key'] = secret_key
+ if user_pool_region:
+ boto3_client_kwargs['region_name'] = user_pool_region
+
+ self.client = boto3.client('cognito-idp', **boto3_client_kwargs)
+
+ def get_keys(self):
+
+ try:
+ return self.pool_jwk
+ except AttributeError:
+ #Check for the dictionary in environment variables.
+ pool_jwk_env = env('COGNITO_JWKS', {},var_type='dict')
+ if len(pool_jwk_env.keys()) > 0:
+ self.pool_jwk = pool_jwk_env
+ return self.pool_jwk
+ #If it is not there use the requests library to get it
+ self.pool_jwk = requests.get(
+ 'https://cognito-idp.{}.amazonaws.com/{}/.well-known/jwks.json'.format(
+ self.user_pool_region,self.user_pool_id
+ )).json()
+ return self.pool_jwk
+
+ def get_key(self,kid):
+ keys = self.get_keys().get('keys')
+ key = list(filter(lambda x:x.get('kid') == kid,keys))
+ return key[0]
+
+ def verify_token(self,token,id_name,token_use):
+ kid = jwt.get_unverified_header(token).get('kid')
+ unverified_claims = jwt.get_unverified_claims(token)
+ token_use_verified = unverified_claims.get('token_use') == token_use
+ if not token_use_verified:
+ raise TokenVerificationException('Your {} token use could not be verified.')
+ hmac_key = self.get_key(kid)
+ try:
+ verified = jwt.decode(token,hmac_key,algorithms=['RS256'],
+ audience=unverified_claims.get('aud'),
+ issuer=unverified_claims.get('iss'))
+ except JWTError:
+ raise TokenVerificationException('Your {} token could not be verified.')
+ setattr(self,id_name,token)
+ return verified
+
+ def get_user_obj(self, username=None, attribute_list=None, metadata=None,
+ attr_map=None):
+ """
+ Returns the specified
+ :param username: Username of the user
+ :param attribute_list: List of tuples that represent the user's
+ attributes as returned by the admin_get_user or get_user boto3 methods
+ :param metadata: Metadata about the user
+ :param attr_map: Dictionary that maps the Cognito attribute names to
+ what we'd like to display to the users
+ :return:
+ """
+ return self.user_class(username=username,attribute_list=attribute_list,
+ cognito_obj=self,
+ metadata=metadata,attr_map=attr_map)
+
+ def get_group_obj(self, group_data):
+ """
+ Instantiates the self.group_class
+ :param group_data: a dictionary with information about a group
+ :return: an instance of the self.group_class
+ """
+ return self.group_class(group_data=group_data, cognito_obj=self)
+
+ def switch_session(self,session):
+ """
+ Primarily used for unit testing so we can take advantage of the
+ placebo library (https://githhub.com/garnaat/placebo)
+ :param session: boto3 session
+ :return:
+ """
+ self.client = session.client('cognito-idp')
+
+ def check_token(self, renew=True):
+ """
+ Checks the exp attribute of the access_token and either refreshes
+ the tokens by calling the renew_access_tokens method or does nothing
+ :param renew: bool indicating whether to refresh on expiration
+ :return: bool indicating whether access_token has expired
+ """
+ if not self.access_token:
+ raise AttributeError('Access Token Required to Check Token')
+ now = datetime.datetime.now()
+ dec_access_token = jwt.get_unverified_claims(self.access_token)
+
+ if now > datetime.datetime.fromtimestamp(dec_access_token['exp']):
+ expired = True
+ if renew:
+ self.renew_access_token()
+ else:
+ expired = False
+ return expired
+
+ def add_base_attributes(self, **kwargs):
+ self.base_attributes = kwargs
+
+ def add_custom_attributes(self, **kwargs):
+ custom_key = 'custom'
+ custom_attributes = {}
+
+ for old_key, value in kwargs.items():
+ new_key = custom_key + ':' + old_key
+ custom_attributes[new_key] = value
+
+ self.custom_attributes = custom_attributes
+
+ def register(self, username, password, attr_map=None):
+ """
+ Register the user. Other base attributes from AWS Cognito User Pools
+ are address, birthdate, email, family_name (last name), gender,
+ given_name (first name), locale, middle_name, name, nickname,
+ phone_number, picture, preferred_username, profile, zoneinfo,
+ updated at, website
+ :param username: User Pool username
+ :param password: User Pool password
+ :param attr_map: Attribute map to Cognito's attributes
+ :return response: Response from Cognito
+
+ Example response::
+ {
+ 'UserConfirmed': True|False,
+ 'CodeDeliveryDetails': {
+ 'Destination': 'string', # This value will be obfuscated
+ 'DeliveryMedium': 'SMS'|'EMAIL',
+ 'AttributeName': 'string'
+ }
+ }
+ """
+ attributes = self.base_attributes.copy()
+ if self.custom_attributes:
+ attributes.update(self.custom_attributes)
+ cognito_attributes = dict_to_cognito(attributes, attr_map)
+ params = {
+ 'ClientId': self.client_id,
+ 'Username': username,
+ 'Password': password,
+ 'UserAttributes': cognito_attributes
+ }
+ self._add_secret_hash(params, 'SecretHash')
+ response = self.client.sign_up(**params)
+
+ attributes.update(username=username, password=password)
+ self._set_attributes(response, attributes)
+
+ response.pop('ResponseMetadata')
+ return response
+
+ def admin_confirm_sign_up(self, username=None):
+ """
+ Confirms user registration as an admin without using a confirmation
+ code. Works on any user.
+ :param username: User's username
+ :return:
+ """
+ if not username:
+ username = self.username
+ self.client.admin_confirm_sign_up(
+ UserPoolId=self.user_pool_id,
+ Username=username,
+ )
+
+ def confirm_sign_up(self,confirmation_code,username=None):
+ """
+ Using the confirmation code that is either sent via email or text
+ message.
+ :param confirmation_code: Confirmation code sent via text or email
+ :param username: User's username
+ :return:
+ """
+ if not username:
+ username = self.username
+ params = {'ClientId': self.client_id,
+ 'Username': username,
+ 'ConfirmationCode': confirmation_code}
+ self._add_secret_hash(params, 'SecretHash')
+ self.client.confirm_sign_up(**params)
+
+ def admin_authenticate(self, password):
+ """
+ Authenticate the user using admin super privileges
+ :param password: User's password
+ :return:
+ """
+ auth_params = {
+ 'USERNAME': self.username,
+ 'PASSWORD': password
+ }
+ self._add_secret_hash(auth_params, 'SECRET_HASH')
+ tokens = self.client.admin_initiate_auth(
+ UserPoolId=self.user_pool_id,
+ ClientId=self.client_id,
+ # AuthFlow='USER_SRP_AUTH'|'REFRESH_TOKEN_AUTH'|'REFRESH_TOKEN'|'CUSTOM_AUTH'|'ADMIN_NO_SRP_AUTH',
+ AuthFlow='ADMIN_NO_SRP_AUTH',
+ AuthParameters=auth_params,
+ )
+
+ self.verify_token(tokens['AuthenticationResult']['IdToken'], 'id_token','id')
+ self.refresh_token = tokens['AuthenticationResult']['RefreshToken']
+ self.verify_token(tokens['AuthenticationResult']['AccessToken'], 'access_token','access')
+ self.token_type = tokens['AuthenticationResult']['TokenType']
+
+ def authenticate(self, password):
+ """
+ Authenticate the user using the SRP protocol
+ :param password: The user's passsword
+ :return:
+ """
+ aws = AWSSRP(username=self.username, password=password, pool_id=self.user_pool_id,
+ client_id=self.client_id, client=self.client,
+ client_secret=self.client_secret)
+ tokens = aws.authenticate_user()
+ if tokens.get('ChallengeName') == aws.SOFTWARE_TOKEN_MFA:
+ self.session = tokens.get('Session')
+ challengeparams = tokens.get('ChallengeParameters')
+ device_name=None
+ if challengeparams:
+ device_name = challengeparams.get('FRIENDLY_DEVICE_NAME')
+ raise SoftwareTokenException(device_name)
+ elif tokens.get('ChallengeName') == aws.SMS_MFA:
+ self.session = tokens.get('Session')
+ raise SMSMFAException('SMS MFA is enabled')
+ self.verify_token(tokens['AuthenticationResult']['IdToken'],'id_token','id')
+ self.refresh_token = tokens['AuthenticationResult']['RefreshToken']
+ self.verify_token(tokens['AuthenticationResult']['AccessToken'], 'access_token','access')
+ self.token_type = tokens['AuthenticationResult']['TokenType']
+
+ def new_password_challenge(self, password, new_password):
+ """
+ Respond to the new password challenge using the SRP protocol
+ :param password: The user's current passsword
+ :param password: The user's new passsword
+ """
+ aws = AWSSRP(username=self.username, password=password, pool_id=self.user_pool_id,
+ client_id=self.client_id, client=self.client,
+ client_secret=self.client_secret)
+ tokens = aws.set_new_password_challenge(new_password)
+ self.id_token = tokens['AuthenticationResult']['IdToken']
+ self.refresh_token = tokens['AuthenticationResult']['RefreshToken']
+ self.access_token = tokens['AuthenticationResult']['AccessToken']
+ self.token_type = tokens['AuthenticationResult']['TokenType']
+
+ def logout(self):
+ """
+ Logs the user out of all clients and removes the expires_in,
+ expires_datetime, id_token, refresh_token, access_token, and token_type
+ attributes
+ :return:
+ """
+ self.client.global_sign_out(
+ AccessToken=self.access_token
+ )
+
+ self.id_token = None
+ self.refresh_token = None
+ self.access_token = None
+ self.token_type = None
+
+ def admin_update_profile(self, attrs, attr_map=None):
+ user_attrs = dict_to_cognito(attrs, attr_map)
+ self.client.admin_update_user_attributes(
+ UserPoolId = self.user_pool_id,
+ Username = self.username,
+ UserAttributes = user_attrs
+ )
+
+ def update_profile(self, attrs, attr_map=None):
+ """
+ Updates User attributes
+ :param attrs: Dictionary of attribute name, values
+ :param attr_map: Dictionary map from Cognito attributes to attribute
+ names we would like to show to our users
+ """
+ user_attrs = dict_to_cognito(attrs,attr_map)
+ self.client.update_user_attributes(
+ UserAttributes=user_attrs,
+ AccessToken=self.access_token
+ )
+
+ def get_user(self, attr_map=None):
+ """
+ Returns a UserObj (or whatever the self.user_class is) by using the
+ user's access token.
+ :param attr_map: Dictionary map from Cognito attributes to attribute
+ names we would like to show to our users
+ :return:
+ """
+ user = self.client.get_user(
+ AccessToken=self.access_token
+ )
+
+ user_metadata = {
+ 'username': user.get('Username'),
+ 'mfa': user.get('UserMFASettingList'),
+ 'id_token': self.id_token,
+ 'access_token': self.access_token,
+ 'refresh_token': self.refresh_token,
+ }
+ #print(user_metadata)
+ return self.get_user_obj(username=self.username,
+ attribute_list=user.get('UserAttributes'),
+ metadata=user_metadata,attr_map=attr_map)
+
+ def get_users(self, attr_map=None):
+ """
+ Returns all users for a user pool. Returns instances of the
+ self.user_class.
+ :param attr_map:
+ :return:
+ """
+ kwargs = {"UserPoolId":self.user_pool_id}
+
+ response = self.client.list_users(**kwargs)
+ return [self.get_user_obj(user.get('Username'),
+ attribute_list=user.get('Attributes'),
+ metadata={'username':user.get('Username')},
+ attr_map=attr_map)
+ for user in response.get('Users')]
+
+ def admin_get_user(self, attr_map=None):
+ """
+ Get the user's details using admin super privileges.
+ :param attr_map: Dictionary map from Cognito attributes to attribute
+ names we would like to show to our users
+ :return: UserObj object
+ """
+ user = self.client.admin_get_user(
+ UserPoolId=self.user_pool_id,
+ Username=self.username)
+ user_metadata = {
+ 'enabled': user.get('Enabled'),
+ 'user_status':user.get('UserStatus'),
+ 'username':user.get('Username'),
+ 'id_token': self.id_token,
+ 'access_token': self.access_token,
+ 'refresh_token': self.refresh_token
+ }
+ return self.get_user_obj(username=self.username,
+ attribute_list=user.get('UserAttributes'),
+ metadata=user_metadata,attr_map=attr_map)
+
+ def admin_create_user(self, username, temporary_password='', attr_map=None, **kwargs):
+ """
+ Create a user using admin super privileges.
+ :param username: User Pool username
+ :param temporary_password: The temporary password to give the user.
+ Leave blank to make Cognito generate a temporary password for the user.
+ :param attr_map: Attribute map to Cognito's attributes
+ :param kwargs: Additional User Pool attributes
+ :return response: Response from Cognito
+ """
+ response = self.client.admin_create_user(
+ UserPoolId=self.user_pool_id,
+ Username=username,
+ UserAttributes=dict_to_cognito(kwargs, attr_map),
+ TemporaryPassword=temporary_password,
+ )
+ kwargs.update(username=username)
+ self._set_attributes(response, kwargs)
+
+ response.pop('ResponseMetadata')
+ return response
+
+ def send_verification(self, attribute='email'):
+ """
+ Sends the user an attribute verification code for the specified attribute name.
+ :param attribute: Attribute to confirm
+ """
+ self.check_token()
+ self.client.get_user_attribute_verification_code(
+ AccessToken=self.access_token,
+ AttributeName=attribute
+ )
+
+ def validate_verification(self, confirmation_code, attribute='email'):
+ """
+ Verifies the specified user attributes in the user pool.
+ :param confirmation_code: Code sent to user upon intiating verification
+ :param attribute: Attribute to confirm
+ """
+ self.check_token()
+ return self.client.verify_user_attribute(
+ AccessToken=self.access_token,
+ AttributeName=attribute,
+ Code=confirmation_code
+ )
+
+ def renew_access_token(self):
+ """
+ Sets a new access token on the User using the refresh token.
+ """
+ auth_params = {'REFRESH_TOKEN': self.refresh_token}
+ self._add_secret_hash(auth_params, 'SECRET_HASH')
+ try:
+ refresh_response = self.client.initiate_auth(
+ ClientId=self.client_id,
+ AuthFlow='REFRESH_TOKEN',
+ AuthParameters=auth_params,
+ )
+ except (Boto3Error) as e:
+ return
+
+ self._set_attributes(
+ refresh_response,
+ {
+ 'access_token': refresh_response['AuthenticationResult']['AccessToken'],
+ 'id_token': refresh_response['AuthenticationResult']['IdToken'],
+ 'token_type': refresh_response['AuthenticationResult']['TokenType']
+ }
+ )
+
+ def initiate_forgot_password(self):
+ """
+ Sends a verification code to the user to use to change their password.
+ """
+ params = {
+ 'ClientId': self.client_id,
+ 'Username': self.username
+ }
+ self._add_secret_hash(params, 'SecretHash')
+ self.client.forgot_password(**params)
+
+
+ def delete_user(self):
+
+ self.client.delete_user(
+ AccessToken=self.access_token
+ )
+
+
+ def admin_delete_user(self):
+ self.client.admin_delete_user(
+ UserPoolId=self.user_pool_id,
+ Username=self.username
+ )
+
+ def confirm_forgot_password(self, confirmation_code, password):
+ """
+ Allows a user to enter a code provided when they reset their password
+ to update their password.
+ :param confirmation_code: The confirmation code sent by a user's request
+ to retrieve a forgotten password
+ :param password: New password
+ """
+ params = {'ClientId': self.client_id,
+ 'Username': self.username,
+ 'ConfirmationCode': confirmation_code,
+ 'Password': password
+ }
+ self._add_secret_hash(params, 'SecretHash')
+ response = self.client.confirm_forgot_password(**params)
+ self._set_attributes(response, {'password': password})
+
+ def change_password(self, previous_password, proposed_password):
+ """
+ Change the User password
+ """
+ self.check_token()
+ response = self.client.change_password(
+ PreviousPassword=previous_password,
+ ProposedPassword=proposed_password,
+ AccessToken=self.access_token
+ )
+ self._set_attributes(response, {'password': proposed_password})
+
+ def _add_secret_hash(self, parameters, key):
+ """
+ Helper function that computes SecretHash and adds it
+ to a parameters dictionary at a specified key
+ """
+ if self.client_secret is not None:
+ secret_hash = AWSSRP.get_secret_hash(self.username, self.client_id,
+ self.client_secret)
+ parameters[key] = secret_hash
+
+ def _set_attributes(self, response, attribute_dict):
+ """
+ Set user attributes based on response code
+ :param response: HTTP response from Cognito
+ :attribute dict: Dictionary of attribute name and values
+ """
+ status_code = response.get(
+ 'HTTPStatusCode',
+ response['ResponseMetadata']['HTTPStatusCode']
+ )
+ if status_code == 200:
+ for k, v in attribute_dict.items():
+ setattr(self, k, v)
+
+ def get_group(self, group_name):
+ """
+ Get a group by a name
+ :param group_name: name of a group
+ :return: instance of the self.group_class
+ """
+ response = self.client.get_group(GroupName=group_name,
+ UserPoolId=self.user_pool_id)
+ return self.get_group_obj(response.get('Group'))
+
+ def get_groups(self):
+ """
+ Returns all groups for a user pool. Returns instances of the
+ self.group_class.
+ :return: list of instances
+ """
+ response = self.client.list_groups(UserPoolId=self.user_pool_id)
+ return [self.get_group_obj(group_data)
+ for group_data in response.get('Groups')]
+
diff --git a/lib/warrant/aws_srp.py b/lib/warrant/aws_srp.py
new file mode 100644
index 0000000..851dc67
--- /dev/null
+++ b/lib/warrant/aws_srp.py
@@ -0,0 +1,307 @@
+import base64
+import binascii
+import datetime
+import hashlib
+import hmac
+import re
+import contextlib
+import locale
+
+import boto3
+import os
+import six
+
+from .exceptions import ForceChangePasswordException, SoftwareTokenException, SMSMFAException
+
+# https://github.com/aws/amazon-cognito-identity-js/blob/master/src/AuthenticationHelper.js#L22
+n_hex = 'FFFFFFFFFFFFFFFFC90FDAA22168C234C4C6628B80DC1CD1' + '29024E088A67CC74020BBEA63B139B22514A08798E3404DD' + \
+ 'EF9519B3CD3A431B302B0A6DF25F14374FE1356D6D51C245' + 'E485B576625E7EC6F44C42E9A637ED6B0BFF5CB6F406B7ED' + \
+ 'EE386BFB5A899FA5AE9F24117C4B1FE649286651ECE45B3D' + 'C2007CB8A163BF0598DA48361C55D39A69163FA8FD24CF5F' + \
+ '83655D23DCA3AD961C62F356208552BB9ED529077096966D' + '670C354E4ABC9804F1746C08CA18217C32905E462E36CE3B' + \
+ 'E39E772C180E86039B2783A2EC07A28FB5C55DF06F4C52C9' + 'DE2BCBF6955817183995497CEA956AE515D2261898FA0510' + \
+ '15728E5A8AAAC42DAD33170D04507A33A85521ABDF1CBA64' + 'ECFB850458DBEF0A8AEA71575D060C7DB3970F85A6E1E4C7' + \
+ 'ABF5AE8CDB0933D71E8C94E04A25619DCEE3D2261AD2EE6B' + 'F12FFA06D98A0864D87602733EC86A64521F2B18177B200C' + \
+ 'BBE117577A615D6C770988C0BAD946E208E24FA074E5AB31' + '43DB5BFCE0FD108E4B82D120A93AD2CAFFFFFFFFFFFFFFFF'
+# https://github.com/aws/amazon-cognito-identity-js/blob/master/src/AuthenticationHelper.js#L49
+g_hex = '2'
+info_bits = bytearray('Caldera Derived Key', 'utf-8')
+
+
+def hash_sha256(buf):
+ """AuthenticationHelper.hash"""
+ a = hashlib.sha256(buf).hexdigest()
+ return (64 - len(a)) * '0' + a
+
+
+def hex_hash(hex_string):
+ return hash_sha256(bytearray.fromhex(hex_string))
+
+
+def hex_to_long(hex_string):
+ return int(hex_string, 16)
+
+
+def long_to_hex(long_num):
+ return '%x' % long_num
+
+
+def get_random(nbytes):
+ random_hex = binascii.hexlify(os.urandom(nbytes))
+ return hex_to_long(random_hex)
+
+
+def pad_hex(long_int):
+ """
+ Converts a Long integer (or hex string) to hex format padded with zeroes for hashing
+ :param {Long integer|String} long_int Number or string to pad.
+ :return {String} Padded hex string.
+ """
+ if not isinstance(long_int, six.string_types):
+ hash_str = long_to_hex(long_int)
+ else:
+ hash_str = long_int
+ if len(hash_str) % 2 == 1:
+ hash_str = '0%s' % hash_str
+ elif hash_str[0] in '89ABCDEFabcdef':
+ hash_str = '00%s' % hash_str
+ return hash_str
+
+
+def compute_hkdf(ikm, salt):
+ """
+ Standard hkdf algorithm
+ :param {Buffer} ikm Input key material.
+ :param {Buffer} salt Salt value.
+ :return {Buffer} Strong key material.
+ @private
+ """
+ prk = hmac.new(salt, ikm, hashlib.sha256).digest()
+ info_bits_update = info_bits + bytearray(chr(1), 'utf-8')
+ hmac_hash = hmac.new(prk, info_bits_update, hashlib.sha256).digest()
+ return hmac_hash[:16]
+
+
+def calculate_u(big_a, big_b):
+ """
+ Calculate the client's value U which is the hash of A and B
+ :param {Long integer} big_a Large A value.
+ :param {Long integer} big_b Server B value.
+ :return {Long integer} Computed U value.
+ """
+ u_hex_hash = hex_hash(pad_hex(big_a) + pad_hex(big_b))
+ return hex_to_long(u_hex_hash)
+
+@contextlib.contextmanager
+def temp_locale(new_locale):
+ original = locale.getlocale()
+ yield locale.setlocale(locale.LC_ALL, new_locale)
+ locale.setlocale(locale.LC_ALL, original)
+
+class AWSSRP(object):
+
+ NEW_PASSWORD_REQUIRED_CHALLENGE = 'NEW_PASSWORD_REQUIRED'
+ PASSWORD_VERIFIER_CHALLENGE = 'PASSWORD_VERIFIER'
+ SOFTWARE_TOKEN_MFA = 'SOFTWARE_TOKEN_MFA'
+ SMS_MFA = 'SMS_MFA'
+
+ def __init__(self, username, password, pool_id, client_id, pool_region=None,
+ client=None, client_secret=None):
+ if pool_region is not None and client is not None:
+ raise ValueError("pool_region and client should not both be specified "
+ "(region should be passed to the boto3 client instead)")
+
+ self.username = username
+ self.password = password
+ self.pool_id = pool_id
+ self.client_id = client_id
+ self.client_secret = client_secret
+ self.client = client if client else boto3.client('cognito-idp', region_name=pool_region)
+ self.big_n = hex_to_long(n_hex)
+ self.g = hex_to_long(g_hex)
+ self.k = hex_to_long(hex_hash('00' + n_hex + '0' + g_hex))
+ self.small_a_value = self.generate_random_small_a()
+ self.large_a_value = self.calculate_a()
+
+ def generate_random_small_a(self):
+ """
+ helper function to generate a random big integer
+ :return {Long integer} a random value.
+ """
+ random_long_int = get_random(128)
+ return random_long_int % self.big_n
+
+ def calculate_a(self):
+ """
+ Calculate the client's public value A = g^a%N
+ with the generated random number a
+ :param {Long integer} a Randomly generated small A.
+ :return {Long integer} Computed large A.
+ """
+ big_a = pow(self.g, self.small_a_value, self.big_n)
+ # safety check
+ if (big_a % self.big_n) == 0:
+ raise ValueError('Safety check for A failed')
+ return big_a
+
+ def get_password_authentication_key(self, username, password, server_b_value, salt):
+ """
+ Calculates the final hkdf based on computed S value, and computed U value and the key
+ :param {String} username Username.
+ :param {String} password Password.
+ :param {Long integer} server_b_value Server B value.
+ :param {Long integer} salt Generated salt.
+ :return {Buffer} Computed HKDF value.
+ """
+ u_value = calculate_u(self.large_a_value, server_b_value)
+ if u_value == 0:
+ raise ValueError('U cannot be zero.')
+ username_password = '%s%s:%s' % (self.pool_id.split('_')[1], username, password)
+ username_password_hash = hash_sha256(username_password.encode('utf-8'))
+
+ x_value = hex_to_long(hex_hash(pad_hex(salt) + username_password_hash))
+ g_mod_pow_xn = pow(self.g, x_value, self.big_n)
+ int_value2 = server_b_value - self.k * g_mod_pow_xn
+ s_value = pow(int_value2, self.small_a_value + u_value * x_value, self.big_n)
+ hkdf = compute_hkdf(bytearray.fromhex(pad_hex(s_value)),
+ bytearray.fromhex(pad_hex(long_to_hex(u_value))))
+ return hkdf
+
+ def get_auth_params(self):
+ auth_params = {'USERNAME': self.username,
+ 'SRP_A': long_to_hex(self.large_a_value)}
+ if self.client_secret is not None:
+ auth_params.update({
+ "SECRET_HASH":
+ self.get_secret_hash(self.username,self.client_id, self.client_secret)})
+ return auth_params
+
+ @staticmethod
+ def get_secret_hash(username, client_id, client_secret):
+ message = bytearray(username + client_id, 'utf-8')
+ hmac_obj = hmac.new(bytearray(client_secret, 'utf-8'), message, hashlib.sha256)
+ return base64.standard_b64encode(hmac_obj.digest()).decode('utf-8')
+
+ def process_challenge(self, challenge_parameters):
+ user_id_for_srp = challenge_parameters['USER_ID_FOR_SRP']
+ salt_hex = challenge_parameters['SALT']
+ srp_b_hex = challenge_parameters['SRP_B']
+ secret_block_b64 = challenge_parameters['SECRET_BLOCK']
+ # re strips leading zero from a day number (required by AWS Cognito)
+ with temp_locale(('en_US', 'UTF-8')):
+ timestamp = re.sub(r" 0(\d) ", r" \1 ",
+ datetime.datetime.utcnow().strftime("%a %b %d %H:%M:%S UTC %Y"))
+ hkdf = self.get_password_authentication_key(user_id_for_srp,
+ self.password, hex_to_long(srp_b_hex), salt_hex)
+ secret_block_bytes = base64.standard_b64decode(secret_block_b64)
+ msg = bytearray(self.pool_id.split('_')[1], 'utf-8') + bytearray(user_id_for_srp, 'utf-8') + \
+ bytearray(secret_block_bytes) + bytearray(timestamp, 'utf-8')
+ hmac_obj = hmac.new(hkdf, msg, digestmod=hashlib.sha256)
+ signature_string = base64.standard_b64encode(hmac_obj.digest())
+ response = {'TIMESTAMP': timestamp,
+ 'USERNAME': user_id_for_srp,
+ 'PASSWORD_CLAIM_SECRET_BLOCK': secret_block_b64,
+ 'PASSWORD_CLAIM_SIGNATURE': signature_string.decode('utf-8')}
+ if self.client_secret is not None:
+ response.update({
+ "SECRET_HASH":
+ self.get_secret_hash(self.username, self.client_id, self.client_secret)})
+ return response
+
+ def authenticate_user(self, client=None):
+ boto_client = self.client or client
+ auth_params = self.get_auth_params()
+ response = boto_client.initiate_auth(
+ AuthFlow='USER_SRP_AUTH',
+ AuthParameters=auth_params,
+ ClientId=self.client_id
+ )
+
+ if response['ChallengeName'] == self.PASSWORD_VERIFIER_CHALLENGE:
+ challenge_response = self.process_challenge(response['ChallengeParameters'])
+ challenge_response['USERNAME'] = self.username
+ tokens = boto_client.respond_to_auth_challenge(
+ ClientId=self.client_id,
+ ChallengeName=self.PASSWORD_VERIFIER_CHALLENGE,
+ ChallengeResponses=challenge_response)
+ if tokens.get('ChallengeName') == self.NEW_PASSWORD_REQUIRED_CHALLENGE:
+ raise ForceChangePasswordException('Change password before authenticating')
+ #elif tokens.get('ChallengeName') == self.SOFTWARE_TOKEN_MFA:
+ # raise SoftwareTokenException('MFA is enabled')
+
+ return tokens
+ else:
+ raise NotImplementedError('The %s challenge is not supported' % response['ChallengeName'])
+
+ def set_new_password_challenge(self, new_password, client=None):
+ boto_client = self.client or client
+ auth_params = self.get_auth_params()
+ response = boto_client.initiate_auth(
+ AuthFlow='USER_SRP_AUTH',
+ AuthParameters=auth_params,
+ ClientId=self.client_id
+ )
+ if response['ChallengeName'] == self.PASSWORD_VERIFIER_CHALLENGE:
+ challenge_response = self.process_challenge(response['ChallengeParameters'])
+ tokens = boto_client.respond_to_auth_challenge(
+ ClientId=self.client_id,
+ ChallengeName=self.PASSWORD_VERIFIER_CHALLENGE,
+ ChallengeResponses=challenge_response)
+ if tokens.get('ChallengeName') == self.NEW_PASSWORD_REQUIRED_CHALLENGE:
+ challenge_response = {
+ 'USERNAME': auth_params['USERNAME'],
+ 'NEW_PASSWORD': new_password
+ }
+ new_password_response = boto_client.respond_to_auth_challenge(
+ ClientId=self.client_id,
+ ChallengeName=self.NEW_PASSWORD_REQUIRED_CHALLENGE,
+ Session=tokens['Session'],
+ ChallengeResponses=challenge_response)
+ return new_password_response
+ return tokens
+ else:
+ raise NotImplementedError('The %s challenge is not supported' % response['ChallengeName'])
+
+ def set_mfa_challenge(self, code, session, client=None):
+ boto_client = self.client or client
+ auth_params = self.get_auth_params()
+ challenge_response = {
+ 'USERNAME': auth_params['USERNAME'],
+ 'SOFTWARE_TOKEN_MFA_CODE': code
+ }
+ tokens = boto_client.respond_to_auth_challenge(
+ ClientId=self.client_id,
+ ChallengeName=self.SOFTWARE_TOKEN_MFA,
+ ChallengeResponses=challenge_response,
+ Session=session)
+ if tokens.get('ChallengeName'):
+ if tokens['ChallengeName'] == self.SOFTWARE_TOKEN_MFA:
+ code_response = boto_client.respond_to_auth_challenge(
+ ClientId=self.client_id,
+ ChallengeName=self.SOFTWARE_TOKEN_MFA,
+ Session=tokens['Session'],
+ ChallengeResponses=challenge_response)
+ return code_response
+ return tokens
+
+
+ def set_sms_challenge(self, code, session, client=None):
+ boto_client = self.client or client
+ auth_params = self.get_auth_params()
+ challenge_response = {
+ 'USERNAME': auth_params['USERNAME'],
+ 'SMS_MFA_CODE': code
+ }
+ tokens = boto_client.respond_to_auth_challenge(
+ ClientId=self.client_id,
+ ChallengeName=self.SMS_MFA,
+ ChallengeResponses=challenge_response,
+ Session=session)
+ if tokens.get('ChallengeName'):
+ if tokens['ChallengeName'] == self.SMS_MFA:
+ code_response = boto_client.respond_to_auth_challenge(
+ ClientId=self.client_id,
+ ChallengeName=self.SOFTWARE_TOKEN_MFA,
+ Session=tokens['Session'],
+ ChallengeResponses=challenge_response)
+ return code_response
+ return tokens
diff --git a/lib/warrant/exceptions.py b/lib/warrant/exceptions.py
new file mode 100644
index 0000000..d4c1ac4
--- /dev/null
+++ b/lib/warrant/exceptions.py
@@ -0,0 +1,23 @@
+class WarrantException(Exception):
+ """Base class for all Warrant exceptions"""
+
+class ForceChangePasswordException(WarrantException):
+ """Raised when the user is forced to change their password"""
+
+
+class TokenVerificationException(WarrantException):
+ """Raised when token verification fails."""
+
+class SoftwareTokenException(WarrantException):
+ """Raised when user is required to verify software token."""
+ def __init__(self, device_name):
+ self.device_name = device_name
+
+ def __str__(self):
+ if self.device_name:
+ return self.device_name
+ else:
+ return "Device Name not set"
+
+class SMSMFAException(WarrantException):
+ """Raised when user is required to verify authentication via SMS."""
diff --git a/lib/warrant/requirements.txt b/lib/warrant/requirements.txt
new file mode 100644
index 0000000..48b028b
--- /dev/null
+++ b/lib/warrant/requirements.txt
@@ -0,0 +1,4 @@
+boto3>=1.4.3
+envs>=0.3.0
+python-jose-cryptodome>=1.3.2
+requests>=2.13.0
diff --git a/lib/warrant/requirements_test.txt b/lib/warrant/requirements_test.txt
new file mode 100644
index 0000000..5d611b3
--- /dev/null
+++ b/lib/warrant/requirements_test.txt
@@ -0,0 +1,3 @@
+mock>=2.0.0
+nose
+coverage
diff --git a/lib/warrant/setup.py b/lib/warrant/setup.py
new file mode 100644
index 0000000..f51d154
--- /dev/null
+++ b/lib/warrant/setup.py
@@ -0,0 +1,38 @@
+import os
+
+from setuptools import setup, find_packages
+from pip.req import parse_requirements
+
+install_reqs = parse_requirements('requirements.txt', session=False)
+test_reqs = parse_requirements('requirements_test.txt', session=False)
+
+version = '0.6.1'
+
+README="""Python class to integrate Boto3's Cognito client so it is easy to login users. With SRP support."""
+
+setup(
+ name='warrant',
+ version=version,
+ description=README,
+ long_description=README,
+ classifiers=[
+ "Programming Language :: Python :: 2.7",
+ "Programming Language :: Python :: 3.6",
+ "Topic :: Software Development :: Libraries :: Python Modules",
+ "Environment :: Web Environment",
+ ],
+ keywords='aws,cognito,api,gateway,capless',
+ author='Capless.io',
+ author_email='opensource@capless.io',
+ maintainer='Brian Jinwright',
+ packages=find_packages(),
+ url='https://github.com/capless/warrant',
+ license='Apache License 2.0',
+ install_requires=[str(ir.req) for ir in install_reqs],
+ extras_require={
+ 'test': [str(ir.req) for ir in test_reqs]
+ },
+ include_package_data=True,
+ zip_safe=True,
+
+)
diff --git a/lib/warrant/tests/__init__.py b/lib/warrant/tests/__init__.py
new file mode 100644
index 0000000..e69de29
diff --git a/lib/warrant/tests/tests.py b/lib/warrant/tests/tests.py
new file mode 100644
index 0000000..a653b89
--- /dev/null
+++ b/lib/warrant/tests/tests.py
@@ -0,0 +1,200 @@
+import unittest
+
+from mock import patch
+from envs import env
+
+from warrant import Cognito, UserObj, GroupObj, TokenVerificationException
+from warrant.aws_srp import AWSSRP
+
+
+class UserObjTestCase(unittest.TestCase):
+
+ def setUp(self):
+ if env('USE_CLIENT_SECRET') == 'True':
+ self.app_id = env('COGNITO_APP_WITH_SECRET_ID')
+ else:
+ self.app_id = env('COGNITO_APP_ID')
+ self.cognito_user_pool_id = env('COGNITO_USER_POOL_ID')
+ self.username = env('COGNITO_TEST_USERNAME')
+
+ self.user = Cognito(self.cognito_user_pool_id, self.app_id,
+ self.username)
+ self.user_metadata = {
+ 'user_status': 'CONFIRMED',
+ 'username': 'bjones',
+ }
+ self.user_info = [
+ {'Name': 'name', 'Value': 'Brian Jones'},
+ {'Name': 'given_name', 'Value': 'Brian'},
+ {'Name': 'birthdate', 'Value': '12/7/1980'}
+ ]
+
+ def test_init(self):
+ u = UserObj('bjones', self.user_info, self.user, self.user_metadata)
+ self.assertEqual(u.pk,self.user_metadata.get('username'))
+ self.assertEqual(u.name,self.user_info[0].get('Value'))
+ self.assertEqual(u.user_status,self.user_metadata.get('user_status'))
+
+
+class GroupObjTestCase(unittest.TestCase):
+
+ def setUp(self):
+ if env('USE_CLIENT_SECRET') == 'True':
+ self.app_id = env('COGNITO_APP_WITH_SECRET_ID')
+ else:
+ self.app_id = env('COGNITO_APP_ID')
+ self.cognito_user_pool_id = env('COGNITO_USER_POOL_ID')
+ self.group_data = {'GroupName': 'test_group', 'Precedence': 1}
+ self.cognito_obj = Cognito(self.cognito_user_pool_id, self.app_id)
+
+ def test_init(self):
+ group = GroupObj(group_data=self.group_data, cognito_obj=self.cognito_obj)
+ self.assertEqual(group.group_name, 'test_group')
+ self.assertEqual(group.precedence, 1)
+
+
+class CognitoAuthTestCase(unittest.TestCase):
+
+ def setUp(self):
+ if env('USE_CLIENT_SECRET') == 'True':
+ self.app_id = env('COGNITO_APP_WITH_SECRET_ID')
+ self.client_secret = env('COGNITO_CLIENT_SECRET')
+ else:
+ self.app_id = env('COGNITO_APP_ID')
+ self.client_secret = None
+ self.cognito_user_pool_id = env('COGNITO_USER_POOL_ID')
+ self.username = env('COGNITO_TEST_USERNAME')
+ self.password = env('COGNITO_TEST_PASSWORD')
+ self.user = Cognito(self.cognito_user_pool_id,self.app_id,
+ username=self.username, client_secret=self.client_secret)
+
+
+ def test_authenticate(self):
+ self.user.authenticate(self.password)
+ self.assertNotEqual(self.user.access_token,None)
+ self.assertNotEqual(self.user.id_token, None)
+ self.assertNotEqual(self.user.refresh_token, None)
+
+ def test_verify_token(self):
+ self.user.authenticate(self.password)
+ bad_access_token = '{}wrong'.format(self.user.access_token)
+
+ with self.assertRaises(TokenVerificationException) as vm:
+ self.user.verify_token(bad_access_token, 'access_token', 'access')
+
+ # def test_logout(self):
+ # self.user.authenticate(self.password)
+ # self.user.logout()
+ # self.assertEqual(self.user.id_token,None)
+ # self.assertEqual(self.user.refresh_token,None)
+ # self.assertEqual(self.user.access_token,None)
+
+ @patch('warrant.Cognito', autospec=True)
+ def test_register(self, cognito_user):
+ u = cognito_user(self.cognito_user_pool_id, self.app_id,
+ username=self.username)
+ u.add_base_attributes(
+ given_name='Brian', family_name='Jones',
+ name='Brian Jones', email='bjones39@capless.io',
+ phone_number='+19194894555', gender='Male',
+ preferred_username='billyocean')
+ res = u.register('sampleuser', 'sample4#Password')
+
+ #TODO: Write assumptions
+
+
+ def test_renew_tokens(self):
+ self.user.authenticate(self.password)
+ self.user.renew_access_token()
+
+ @patch('warrant.Cognito', autospec=True)
+ def test_update_profile(self,cognito_user):
+ u = cognito_user(self.cognito_user_pool_id, self.app_id,
+ username=self.username)
+ u.authenticate(self.password)
+ u.update_profile({'given_name':'Jenkins'})
+
+
+ def test_admin_get_user(self):
+ u = self.user.admin_get_user()
+ self.assertEqual(u.pk,self.username)
+
+ def test_check_token(self):
+ self.user.authenticate(self.password)
+ self.assertFalse(self.user.check_token())
+
+
+ @patch('warrant.Cognito', autospec=True)
+ def test_validate_verification(self,cognito_user):
+ u = cognito_user(self.cognito_user_pool_id,self.app_id,
+ username=self.username)
+ u.validate_verification('4321')
+
+ @patch('warrant.Cognito', autospec=True)
+ def test_confirm_forgot_password(self,cognito_user):
+ u = cognito_user(self.cognito_user_pool_id, self.app_id,
+ username=self.username)
+ u.confirm_forgot_password('4553','samplepassword')
+ with self.assertRaises(TypeError) as vm:
+ u.confirm_forgot_password(self.password)
+
+ @patch('warrant.Cognito', autospec=True)
+ def test_change_password(self,cognito_user):
+ u = cognito_user(self.cognito_user_pool_id, self.app_id,
+ username=self.username)
+ u.authenticate(self.password)
+ u.change_password(self.password,'crazypassword$45DOG')
+
+ with self.assertRaises(TypeError) as vm:
+ self.user.change_password(self.password)
+
+ def test_set_attributes(self):
+ u = Cognito(self.cognito_user_pool_id,self.app_id)
+ u._set_attributes({
+ 'ResponseMetadata':{
+ 'HTTPStatusCode':200
+ }
+ },
+ {
+ 'somerandom':'attribute'
+ }
+ )
+ self.assertEqual(u.somerandom,'attribute')
+
+
+ def test_admin_authenticate(self):
+
+ self.user.admin_authenticate(self.password)
+ self.assertNotEqual(self.user.access_token,None)
+ self.assertNotEqual(self.user.id_token, None)
+ self.assertNotEqual(self.user.refresh_token, None)
+
+
+class AWSSRPTestCase(unittest.TestCase):
+
+ def setUp(self):
+ if env('USE_CLIENT_SECRET') == 'True':
+ self.client_secret = env('COGNITO_CLIENT_SECRET')
+ self.app_id = env('COGNITO_APP_WITH_SECRET_ID')
+ else:
+ self.app_id = env('COGNITO_APP_ID')
+ self.client_secret = None
+ self.cognito_user_pool_id = env('COGNITO_USER_POOL_ID')
+ self.username = env('COGNITO_TEST_USERNAME')
+ self.password = env('COGNITO_TEST_PASSWORD')
+ self.aws = AWSSRP(username=self.username, password=self.password,
+ pool_id=self.cognito_user_pool_id,
+ client_id=self.app_id, client_secret=self.client_secret)
+
+ def tearDown(self):
+ del self.aws
+
+ def test_authenticate_user(self):
+ tokens = self.aws.authenticate_user()
+ self.assertTrue('IdToken' in tokens['AuthenticationResult'])
+ self.assertTrue('AccessToken' in tokens['AuthenticationResult'])
+ self.assertTrue('RefreshToken' in tokens['AuthenticationResult'])
+
+
+if __name__ == '__main__':
+ unittest.main()
diff --git a/manage.py b/manage.py
new file mode 100755
index 0000000..79fa852
--- /dev/null
+++ b/manage.py
@@ -0,0 +1,15 @@
+#!/usr/bin/env python
+import os
+import sys
+
+if __name__ == '__main__':
+ os.environ.setdefault('DJANGO_SETTINGS_MODULE', 'bigvince.settings')
+ try:
+ from django.core.management import execute_from_command_line
+ except ImportError as exc:
+ raise ImportError(
+ "Couldn't import Django. Are you sure it's installed and "
+ "available on your PYTHONPATH environment variable? Did you "
+ "forget to activate a virtual environment?"
+ ) from exc
+ execute_from_command_line(sys.argv)
diff --git a/requirements.txt b/requirements.txt
new file mode 100644
index 0000000..abfb162
--- /dev/null
+++ b/requirements.txt
@@ -0,0 +1,70 @@
+amqp==2.4.2
+appdirs==1.4.3
+asgiref==3.2.3
+asn1crypto==1.4.0
+awscli==1.20.57
+beautifulsoup4==4.8.2
+billiard==3.6.0.0
+bleach==3.1.3
+bleach-whitelist==0.0.10
+boto==2.49.0
+boto3==1.18.57
+botocore==1.21.57
+celery==4.3.0
+certifi==2021.10.8
+cffi==1.13.2
+chardet==3.0.4
+charset-normalizer==2.0.9
+colorama==0.4.3
+cryptography==2.8
+cvelib==0.7.0
+click==8.0.4
+dictdiffer==0.8.1
+Django==2.2.26
+django-appconf==1.0.3
+django-celery-results==1.0.4
+django-countries==5.3.3
+django-environ==0.4.5
+django-qr-code==1.1.0
+django-ses==1.0.3
+django-storages==1.7.1
+django-widget-tweaks==1.4.3
+djangorestframework==3.10.3
+docutils==0.14
+ecdsa==0.13.2
+envs==1.3
+fs==2.4.11
+fs-s3fs==1.1.1
+future==0.17.1
+idna==3.3
+jmespath==0.9.3
+kombu==4.5.0
+lxml==4.5.0
+M2Crypto==0.36.0
+Markdown==3.1
+pinax-messages==2.0.2
+pip-autoremove==0.9.1
+psycopg2-binary==2.8.2
+pyasn1==0.4.8
+pycparser==2.19
+pycryptodome==3.14.1
+PyJWT==1.7.1
+python-dateutil==2.8.0
+python-gnupg==0.4.5
+python-jose==3.2.0
+pytz==2019.3
+PyYAML==5.4.1
+qrcode==6.1
+redis==3.2.1
+requests==2.26.0
+rsa==4.6
+s3transfer==0.5.0
+simplejson==3.17.0
+six==1.12.0
+soupsieve==1.9.5
+sqlparse==0.3.0
+urllib3==1.26.7
+vine==1.3.0
+watchtower==1.0.6
+webencodings==0.5.1
+setuptools
diff --git a/requirements_local.txt b/requirements_local.txt
new file mode 100644
index 0000000..c0028c1
--- /dev/null
+++ b/requirements_local.txt
@@ -0,0 +1,2 @@
+django-bakery==0.12.7+cert.1
+warrant==0.6.1+cert.1
diff --git a/sbom/SPDX-VINCE-VUL-COORDINATION-1-3-1-SBOM-DRAFT-19-7-2021-13-4.spdx b/sbom/SPDX-VINCE-VUL-COORDINATION-1-3-1-SBOM-DRAFT-19-7-2021-13-4.spdx
new file mode 100644
index 0000000..5876e9a
--- /dev/null
+++ b/sbom/SPDX-VINCE-VUL-COORDINATION-1-3-1-SBOM-DRAFT-19-7-2021-13-4.spdx
@@ -0,0 +1,999 @@
+## Document Header
+SPDXVersion: SPDX-2.1
+DataLicense: CC0-1.0
+SPDXID: SPDXRef-DOCUMENT
+DocumentName: VINCE-VUL-COORDINATION-1.0-SBOM-DRAFT
+DocumentNamespace: https://kb.cert.org
+Creator: Organization: Software Engineering Institute
+Created: 2021-06-23T00:00:00Z
+CreatorComment: SwiftBOM generated at 2021-07-19T17:03:01.355Z
+## Packages
+## 2.4 Primary Component (described by the SBOM)
+PackageName: VINCE
+SPDXID: SPDXRef-VINCE
+PackageComment: PURL is pkg:supplier/%20Software%20Engineering%20Institute/VINCE@1.31.0
+ExternalRef: PACKAGE-MANAGER purl pkg:supplier/%20Software%20Engineering%20Institute/VINCE@1.31.0
+PackageVersion: 1.31.0
+PackageSupplier: Organization: Software Engineering Institute
+Relationship: SPDXRef-DOCUMENT DESCRIBES SPDXRef-VINCE
+Relationship: SPDXRef-VINCE CONTAINS NONE
+PackageDownloadLocation: NOASSERTION
+FilesAnalyzed: false
+PackageLicenseConcluded: NOASSERTION
+PackageLicenseDeclared: NOASSERTION
+PackageCopyrightText: NOASSERTION
+## 2.4 All-Levels Components
+##
+PackageName: amqp
+SPDXID: SPDXRef-amqp
+PackageComment: PURL is pkg:supplier/Barry%20Pederson/amqp@2.4.2 Warning: Package version was pinned to 2.4.2, latest is 5.0.6
+ExternalRef: PACKAGE-MANAGER purl pkg:supplier/Barry%20Pederson/amqp@2.4.2
+PackageVersion: 2.4.2
+PackageSupplier: Organization: Barry Pederson
+Relationship: SPDXRef-VINCE CONTAINS SPDXRef-amqp
+Relationship: SPDXRef-amqp CONTAINS NOASSERTION
+PackageDownloadLocation: NOASSERTION
+FilesAnalyzed: false
+PackageLicenseConcluded: NOASSERTION
+PackageLicenseDeclared: NOASSERTION
+PackageCopyrightText: NOASSERTION
+## 2.4 All-Levels Components
+##
+PackageName: appdirs
+SPDXID: SPDXRef-appdirs
+PackageComment: PURL is pkg:supplier/Trent%20Mick/appdirs@1.4.3 Warning: Package version was pinned to 1.4.3, latest is 1.4.4
+ExternalRef: PACKAGE-MANAGER purl pkg:supplier/Trent%20Mick/appdirs@1.4.3
+PackageVersion: 1.4.3
+PackageSupplier: Organization: Trent Mick
+Relationship: SPDXRef-VINCE CONTAINS SPDXRef-appdirs
+Relationship: SPDXRef-appdirs CONTAINS NOASSERTION
+PackageDownloadLocation: NOASSERTION
+FilesAnalyzed: false
+PackageLicenseConcluded: NOASSERTION
+PackageLicenseDeclared: NOASSERTION
+PackageCopyrightText: NOASSERTION
+## 2.4 All-Levels Components
+##
+PackageName: asgiref
+SPDXID: SPDXRef-asgiref
+PackageComment: PURL is pkg:supplier/Django%20Software%20Foundation/asgiref@3.2.3 Warning: Package version was pinned to 3.2.3, latest is 3.4.1
+ExternalRef: PACKAGE-MANAGER purl pkg:supplier/Django%20Software%20Foundation/asgiref@3.2.3
+PackageVersion: 3.2.3
+PackageSupplier: Organization: Django Software Foundation
+Relationship: SPDXRef-VINCE CONTAINS SPDXRef-asgiref
+Relationship: SPDXRef-asgiref CONTAINS NOASSERTION
+PackageDownloadLocation: NOASSERTION
+FilesAnalyzed: false
+PackageLicenseConcluded: NOASSERTION
+PackageLicenseDeclared: NOASSERTION
+PackageCopyrightText: NOASSERTION
+## 2.4 All-Levels Components
+##
+PackageName: asn1crypto
+SPDXID: SPDXRef-asn1crypto
+PackageComment: PURL is pkg:supplier/wbond/asn1crypto@1.4.0
+ExternalRef: PACKAGE-MANAGER purl pkg:supplier/wbond/asn1crypto@1.4.0
+PackageVersion: 1.4.0
+PackageSupplier: Organization: wbond
+Relationship: SPDXRef-VINCE CONTAINS SPDXRef-asn1crypto
+Relationship: SPDXRef-asn1crypto CONTAINS NOASSERTION
+PackageDownloadLocation: NOASSERTION
+FilesAnalyzed: false
+PackageLicenseConcluded: NOASSERTION
+PackageLicenseDeclared: NOASSERTION
+PackageCopyrightText: NOASSERTION
+## 2.4 All-Levels Components
+##
+PackageName: beautifulsoup4
+SPDXID: SPDXRef-beautifulsoup4
+PackageComment: PURL is pkg:supplier/Leonard%20Richardson/beautifulsoup4@4.8.2 Warning: Package version was pinned to 4.8.2, latest is 4.9.3
+ExternalRef: PACKAGE-MANAGER purl pkg:supplier/Leonard%20Richardson/beautifulsoup4@4.8.2
+PackageVersion: 4.8.2
+PackageSupplier: Organization: Leonard Richardson
+Relationship: SPDXRef-VINCE CONTAINS SPDXRef-beautifulsoup4
+Relationship: SPDXRef-beautifulsoup4 CONTAINS NOASSERTION
+PackageDownloadLocation: NOASSERTION
+FilesAnalyzed: false
+PackageLicenseConcluded: NOASSERTION
+PackageLicenseDeclared: NOASSERTION
+PackageCopyrightText: NOASSERTION
+## 2.4 All-Levels Components
+##
+PackageName: billiard
+SPDXID: SPDXRef-billiard
+PackageComment: PURL is pkg:supplier/R%20Oudkerk%20%2F%20Python%20Software%20Foundation/billiard@3.6.0.0 Warning: Package version was pinned to 3.6.0.0, latest is 3.6.4.0
+ExternalRef: PACKAGE-MANAGER purl pkg:supplier/R%20Oudkerk%20%2F%20Python%20Software%20Foundation/billiard@3.6.0.0
+PackageVersion: 3.6.0.0
+PackageSupplier: Organization: R Oudkerk / Python Software Foundation
+Relationship: SPDXRef-VINCE CONTAINS SPDXRef-billiard
+Relationship: SPDXRef-billiard CONTAINS NOASSERTION
+PackageDownloadLocation: NOASSERTION
+FilesAnalyzed: false
+PackageLicenseConcluded: NOASSERTION
+PackageLicenseDeclared: NOASSERTION
+PackageCopyrightText: NOASSERTION
+## 2.4 All-Levels Components
+##
+PackageName: bleach
+SPDXID: SPDXRef-bleach
+PackageComment: PURL is pkg:supplier/https%3A%2F%2Fgithub.com%2Fmozilla%2Fbleach/bleach@3.1.3 Warning: Package version was pinned to 3.1.3, latest is 3.3.1
+ExternalRef: PACKAGE-MANAGER purl pkg:supplier/https%3A%2F%2Fgithub.com%2Fmozilla%2Fbleach/bleach@3.1.3
+PackageVersion: 3.1.3
+PackageSupplier: Organization: https://github.com/mozilla/bleach
+Relationship: SPDXRef-VINCE CONTAINS SPDXRef-bleach
+Relationship: SPDXRef-bleach CONTAINS NOASSERTION
+PackageDownloadLocation: NOASSERTION
+FilesAnalyzed: false
+PackageLicenseConcluded: NOASSERTION
+PackageLicenseDeclared: NOASSERTION
+PackageCopyrightText: NOASSERTION
+## 2.4 All-Levels Components
+##
+PackageName: bleach-whitelist
+SPDXID: SPDXRef-bleach-whitelist
+PackageComment: PURL is pkg:supplier/Charlie%20DeTar/bleach-whitelist@0.0.10 Warning: Package version was pinned to 0.0.10, latest is 0.0.11
+ExternalRef: PACKAGE-MANAGER purl pkg:supplier/Charlie%20DeTar/bleach-whitelist@0.0.10
+PackageVersion: 0.0.10
+PackageSupplier: Organization: Charlie DeTar
+Relationship: SPDXRef-VINCE CONTAINS SPDXRef-bleach-whitelist
+Relationship: SPDXRef-bleach-whitelist CONTAINS NOASSERTION
+PackageDownloadLocation: NOASSERTION
+FilesAnalyzed: false
+PackageLicenseConcluded: NOASSERTION
+PackageLicenseDeclared: NOASSERTION
+PackageCopyrightText: NOASSERTION
+## 2.4 All-Levels Components
+##
+PackageName: boto
+SPDXID: SPDXRef-boto
+PackageComment: PURL is pkg:supplier/Mitch%20Garnaat/boto@2.49.0
+ExternalRef: PACKAGE-MANAGER purl pkg:supplier/Mitch%20Garnaat/boto@2.49.0
+PackageVersion: 2.49.0
+PackageSupplier: Organization: Mitch Garnaat
+Relationship: SPDXRef-VINCE CONTAINS SPDXRef-boto
+Relationship: SPDXRef-boto CONTAINS NOASSERTION
+PackageDownloadLocation: NOASSERTION
+FilesAnalyzed: false
+PackageLicenseConcluded: NOASSERTION
+PackageLicenseDeclared: NOASSERTION
+PackageCopyrightText: NOASSERTION
+## 2.4 All-Levels Components
+##
+PackageName: boto3
+SPDXID: SPDXRef-boto3
+PackageComment: PURL is pkg:supplier/Amazon%20Web%20Services/boto3@1.17.49 Warning: Package version was pinned to 1.17.49, latest is 1.18.1
+ExternalRef: PACKAGE-MANAGER purl pkg:supplier/Amazon%20Web%20Services/boto3@1.17.49
+PackageVersion: 1.17.49
+PackageSupplier: Organization: Amazon Web Services
+Relationship: SPDXRef-VINCE CONTAINS SPDXRef-boto3
+Relationship: SPDXRef-boto3 CONTAINS NOASSERTION
+PackageDownloadLocation: NOASSERTION
+FilesAnalyzed: false
+PackageLicenseConcluded: NOASSERTION
+PackageLicenseDeclared: NOASSERTION
+PackageCopyrightText: NOASSERTION
+## 2.4 All-Levels Components
+##
+PackageName: botocore
+SPDXID: SPDXRef-botocore
+PackageComment: PURL is pkg:supplier/Amazon%20Web%20Services/botocore@1.20.49 Warning: Package version was pinned to 1.20.49, latest is 1.21.1
+ExternalRef: PACKAGE-MANAGER purl pkg:supplier/Amazon%20Web%20Services/botocore@1.20.49
+PackageVersion: 1.20.49
+PackageSupplier: Organization: Amazon Web Services
+Relationship: SPDXRef-VINCE CONTAINS SPDXRef-botocore
+Relationship: SPDXRef-botocore CONTAINS NOASSERTION
+PackageDownloadLocation: NOASSERTION
+FilesAnalyzed: false
+PackageLicenseConcluded: NOASSERTION
+PackageLicenseDeclared: NOASSERTION
+PackageCopyrightText: NOASSERTION
+## 2.4 All-Levels Components
+##
+PackageName: celery
+SPDXID: SPDXRef-celery
+PackageComment: PURL is pkg:supplier/Ask%20Solem/celery@4.3.0 Warning: Package version was pinned to 4.3.0, latest is 5.1.2
+ExternalRef: PACKAGE-MANAGER purl pkg:supplier/Ask%20Solem/celery@4.3.0
+PackageVersion: 4.3.0
+PackageSupplier: Organization: Ask Solem
+Relationship: SPDXRef-VINCE CONTAINS SPDXRef-celery
+Relationship: SPDXRef-celery CONTAINS NOASSERTION
+PackageDownloadLocation: NOASSERTION
+FilesAnalyzed: false
+PackageLicenseConcluded: NOASSERTION
+PackageLicenseDeclared: NOASSERTION
+PackageCopyrightText: NOASSERTION
+## 2.4 All-Levels Components
+##
+PackageName: certifi
+SPDXID: SPDXRef-certifi
+PackageComment: PURL is pkg:supplier/Kenneth%20Reitz/certifi@2019.6.16 Warning: Package version was pinned to 2019.6.16, latest is 2021.5.30
+ExternalRef: PACKAGE-MANAGER purl pkg:supplier/Kenneth%20Reitz/certifi@2019.6.16
+PackageVersion: 2019.6.16
+PackageSupplier: Organization: Kenneth Reitz
+Relationship: SPDXRef-VINCE CONTAINS SPDXRef-certifi
+Relationship: SPDXRef-certifi CONTAINS NOASSERTION
+PackageDownloadLocation: NOASSERTION
+FilesAnalyzed: false
+PackageLicenseConcluded: NOASSERTION
+PackageLicenseDeclared: NOASSERTION
+PackageCopyrightText: NOASSERTION
+## 2.4 All-Levels Components
+##
+PackageName: cffi
+SPDXID: SPDXRef-cffi
+PackageComment: PURL is pkg:supplier/Armin%20Rigo%2C%20Maciej%20Fijalkowski/cffi@1.13.2 Warning: Package version was pinned to 1.13.2, latest is 1.14.6
+ExternalRef: PACKAGE-MANAGER purl pkg:supplier/Armin%20Rigo%2C%20Maciej%20Fijalkowski/cffi@1.13.2
+PackageVersion: 1.13.2
+PackageSupplier: Organization: Armin Rigo, Maciej Fijalkowski
+Relationship: SPDXRef-VINCE CONTAINS SPDXRef-cffi
+Relationship: SPDXRef-cffi CONTAINS NOASSERTION
+PackageDownloadLocation: NOASSERTION
+FilesAnalyzed: false
+PackageLicenseConcluded: NOASSERTION
+PackageLicenseDeclared: NOASSERTION
+PackageCopyrightText: NOASSERTION
+## 2.4 All-Levels Components
+##
+PackageName: chardet
+SPDXID: SPDXRef-chardet
+PackageComment: PURL is pkg:supplier/Mark%20Pilgrim/chardet@3.0.4 Warning: Package version was pinned to 3.0.4, latest is 4.0.0
+ExternalRef: PACKAGE-MANAGER purl pkg:supplier/Mark%20Pilgrim/chardet@3.0.4
+PackageVersion: 3.0.4
+PackageSupplier: Organization: Mark Pilgrim
+Relationship: SPDXRef-VINCE CONTAINS SPDXRef-chardet
+Relationship: SPDXRef-chardet CONTAINS NOASSERTION
+PackageDownloadLocation: NOASSERTION
+FilesAnalyzed: false
+PackageLicenseConcluded: NOASSERTION
+PackageLicenseDeclared: NOASSERTION
+PackageCopyrightText: NOASSERTION
+## 2.4 All-Levels Components
+##
+PackageName: cryptography
+SPDXID: SPDXRef-cryptography
+PackageComment: PURL is pkg:supplier/The%20Python%20Cryptographic%20Authority%20and%20individual%20contributors/cryptography@2.8 Warning: Package version was pinned to 2.8, latest is 3.4.7
+ExternalRef: PACKAGE-MANAGER purl pkg:supplier/The%20Python%20Cryptographic%20Authority%20and%20individual%20contributors/cryptography@2.8
+PackageVersion: 2.8
+PackageSupplier: Organization: The Python Cryptographic Authority and individual contributors
+Relationship: SPDXRef-VINCE CONTAINS SPDXRef-cryptography
+Relationship: SPDXRef-cryptography CONTAINS NOASSERTION
+PackageDownloadLocation: NOASSERTION
+FilesAnalyzed: false
+PackageLicenseConcluded: NOASSERTION
+PackageLicenseDeclared: NOASSERTION
+PackageCopyrightText: NOASSERTION
+## 2.4 All-Levels Components
+##
+PackageName: dictdiffer
+SPDXID: SPDXRef-dictdiffer
+PackageComment: PURL is pkg:supplier/Invenio%20Collaboration/dictdiffer@0.8.1
+ExternalRef: PACKAGE-MANAGER purl pkg:supplier/Invenio%20Collaboration/dictdiffer@0.8.1
+PackageVersion: 0.8.1
+PackageSupplier: Organization: Invenio Collaboration
+Relationship: SPDXRef-VINCE CONTAINS SPDXRef-dictdiffer
+Relationship: SPDXRef-dictdiffer CONTAINS NOASSERTION
+PackageDownloadLocation: NOASSERTION
+FilesAnalyzed: false
+PackageLicenseConcluded: NOASSERTION
+PackageLicenseDeclared: NOASSERTION
+PackageCopyrightText: NOASSERTION
+## 2.4 All-Levels Components
+##
+PackageName: Django
+SPDXID: SPDXRef-Django
+PackageComment: PURL is pkg:supplier/Django%20Software%20Foundation/Django@2.2.19 Warning: Package version was pinned to 2.2.19, latest is 3.2.5
+ExternalRef: PACKAGE-MANAGER purl pkg:supplier/Django%20Software%20Foundation/Django@2.2.19
+PackageVersion: 2.2.19
+PackageSupplier: Organization: Django Software Foundation
+Relationship: SPDXRef-VINCE CONTAINS SPDXRef-Django
+Relationship: SPDXRef-Django CONTAINS NOASSERTION
+PackageDownloadLocation: NOASSERTION
+FilesAnalyzed: false
+PackageLicenseConcluded: NOASSERTION
+PackageLicenseDeclared: NOASSERTION
+PackageCopyrightText: NOASSERTION
+## 2.4 All-Levels Components
+##
+PackageName: django-appconf
+SPDXID: SPDXRef-django-appconf
+PackageComment: PURL is pkg:supplier/Jannis%20Leidel/django-appconf@1.0.3 Warning: Package version was pinned to 1.0.3, latest is 1.0.4
+ExternalRef: PACKAGE-MANAGER purl pkg:supplier/Jannis%20Leidel/django-appconf@1.0.3
+PackageVersion: 1.0.3
+PackageSupplier: Organization: Jannis Leidel
+Relationship: SPDXRef-VINCE CONTAINS SPDXRef-django-appconf
+Relationship: SPDXRef-django-appconf CONTAINS NOASSERTION
+PackageDownloadLocation: NOASSERTION
+FilesAnalyzed: false
+PackageLicenseConcluded: NOASSERTION
+PackageLicenseDeclared: NOASSERTION
+PackageCopyrightText: NOASSERTION
+## 2.4 All-Levels Components
+##
+PackageName: django-celery-results
+SPDXID: SPDXRef-django-celery-results
+PackageComment: PURL is pkg:supplier/Asif%20Saif%20Uddin%2C%20Ask%20Solem/django-celery-results@1.0.4 Warning: Package version was pinned to 1.0.4, latest is 2.2.0
+ExternalRef: PACKAGE-MANAGER purl pkg:supplier/Asif%20Saif%20Uddin%2C%20Ask%20Solem/django-celery-results@1.0.4
+PackageVersion: 1.0.4
+PackageSupplier: Organization: Asif Saif Uddin, Ask Solem
+Relationship: SPDXRef-VINCE CONTAINS SPDXRef-django-celery-results
+Relationship: SPDXRef-django-celery-results CONTAINS NOASSERTION
+PackageDownloadLocation: NOASSERTION
+FilesAnalyzed: false
+PackageLicenseConcluded: NOASSERTION
+PackageLicenseDeclared: NOASSERTION
+PackageCopyrightText: NOASSERTION
+## 2.4 All-Levels Components
+##
+PackageName: django-countries
+SPDXID: SPDXRef-django-countries
+PackageComment: PURL is pkg:supplier/Chris%20Beaven/django-countries@5.3.3 Warning: Package version was pinned to 5.3.3, latest is 7.2.1
+ExternalRef: PACKAGE-MANAGER purl pkg:supplier/Chris%20Beaven/django-countries@5.3.3
+PackageVersion: 5.3.3
+PackageSupplier: Organization: Chris Beaven
+Relationship: SPDXRef-VINCE CONTAINS SPDXRef-django-countries
+Relationship: SPDXRef-django-countries CONTAINS NOASSERTION
+PackageDownloadLocation: NOASSERTION
+FilesAnalyzed: false
+PackageLicenseConcluded: NOASSERTION
+PackageLicenseDeclared: NOASSERTION
+PackageCopyrightText: NOASSERTION
+## 2.4 All-Levels Components
+##
+PackageName: django-environ
+SPDXID: SPDXRef-django-environ
+PackageComment: PURL is pkg:supplier/joke2k/django-environ@0.4.5
+ExternalRef: PACKAGE-MANAGER purl pkg:supplier/joke2k/django-environ@0.4.5
+PackageVersion: 0.4.5
+PackageSupplier: Organization: joke2k
+Relationship: SPDXRef-VINCE CONTAINS SPDXRef-django-environ
+Relationship: SPDXRef-django-environ CONTAINS NOASSERTION
+PackageDownloadLocation: NOASSERTION
+FilesAnalyzed: false
+PackageLicenseConcluded: NOASSERTION
+PackageLicenseDeclared: NOASSERTION
+PackageCopyrightText: NOASSERTION
+## 2.4 All-Levels Components
+##
+PackageName: django-qr-code
+SPDXID: SPDXRef-django-qr-code
+PackageComment: PURL is pkg:supplier/Philippe%20Docourt/django-qr-code@1.1.0 Warning: Package version was pinned to 1.1.0, latest is 2.2.0
+ExternalRef: PACKAGE-MANAGER purl pkg:supplier/Philippe%20Docourt/django-qr-code@1.1.0
+PackageVersion: 1.1.0
+PackageSupplier: Organization: Philippe Docourt
+Relationship: SPDXRef-VINCE CONTAINS SPDXRef-django-qr-code
+Relationship: SPDXRef-django-qr-code CONTAINS NOASSERTION
+PackageDownloadLocation: NOASSERTION
+FilesAnalyzed: false
+PackageLicenseConcluded: NOASSERTION
+PackageLicenseDeclared: NOASSERTION
+PackageCopyrightText: NOASSERTION
+## 2.4 All-Levels Components
+##
+PackageName: django-ses
+SPDXID: SPDXRef-django-ses
+PackageComment: PURL is pkg:supplier/Harry%20Marr/django-ses@1.0.3 Warning: Package version was pinned to 1.0.3, latest is 2.2.0
+ExternalRef: PACKAGE-MANAGER purl pkg:supplier/Harry%20Marr/django-ses@1.0.3
+PackageVersion: 1.0.3
+PackageSupplier: Organization: Harry Marr
+Relationship: SPDXRef-VINCE CONTAINS SPDXRef-django-ses
+Relationship: SPDXRef-django-ses CONTAINS NOASSERTION
+PackageDownloadLocation: NOASSERTION
+FilesAnalyzed: false
+PackageLicenseConcluded: NOASSERTION
+PackageLicenseDeclared: NOASSERTION
+PackageCopyrightText: NOASSERTION
+## 2.4 All-Levels Components
+##
+PackageName: django-storages
+SPDXID: SPDXRef-django-storages
+PackageComment: PURL is pkg:supplier/Josh%20Schneier/django-storages@1.7.1 Warning: Package version was pinned to 1.7.1, latest is 1.11.1
+ExternalRef: PACKAGE-MANAGER purl pkg:supplier/Josh%20Schneier/django-storages@1.7.1
+PackageVersion: 1.7.1
+PackageSupplier: Organization: Josh Schneier
+Relationship: SPDXRef-VINCE CONTAINS SPDXRef-django-storages
+Relationship: SPDXRef-django-storages CONTAINS NOASSERTION
+PackageDownloadLocation: NOASSERTION
+FilesAnalyzed: false
+PackageLicenseConcluded: NOASSERTION
+PackageLicenseDeclared: NOASSERTION
+PackageCopyrightText: NOASSERTION
+## 2.4 All-Levels Components
+##
+PackageName: django-widget-tweaks
+SPDXID: SPDXRef-django-widget-tweaks
+PackageComment: PURL is pkg:supplier/Mikhail%20Korobov/django-widget-tweaks@1.4.3 Warning: Package version was pinned to 1.4.3, latest is 1.4.8
+ExternalRef: PACKAGE-MANAGER purl pkg:supplier/Mikhail%20Korobov/django-widget-tweaks@1.4.3
+PackageVersion: 1.4.3
+PackageSupplier: Organization: Mikhail Korobov
+Relationship: SPDXRef-VINCE CONTAINS SPDXRef-django-widget-tweaks
+Relationship: SPDXRef-django-widget-tweaks CONTAINS NOASSERTION
+PackageDownloadLocation: NOASSERTION
+FilesAnalyzed: false
+PackageLicenseConcluded: NOASSERTION
+PackageLicenseDeclared: NOASSERTION
+PackageCopyrightText: NOASSERTION
+## 2.4 All-Levels Components
+##
+PackageName: djangorestframework
+SPDXID: SPDXRef-djangorestframework
+PackageComment: PURL is pkg:supplier/Tom%20Christie/djangorestframework@3.10.3 Warning: Package version was pinned to 3.10.3, latest is 3.12.4
+ExternalRef: PACKAGE-MANAGER purl pkg:supplier/Tom%20Christie/djangorestframework@3.10.3
+PackageVersion: 3.10.3
+PackageSupplier: Organization: Tom Christie
+Relationship: SPDXRef-VINCE CONTAINS SPDXRef-djangorestframework
+Relationship: SPDXRef-djangorestframework CONTAINS NOASSERTION
+PackageDownloadLocation: NOASSERTION
+FilesAnalyzed: false
+PackageLicenseConcluded: NOASSERTION
+PackageLicenseDeclared: NOASSERTION
+PackageCopyrightText: NOASSERTION
+## 2.4 All-Levels Components
+##
+PackageName: docutils
+SPDXID: SPDXRef-docutils
+PackageComment: PURL is pkg:supplier/David%20Goodger/docutils@0.14 Warning: Package version was pinned to 0.14, latest is 0.17.1
+ExternalRef: PACKAGE-MANAGER purl pkg:supplier/David%20Goodger/docutils@0.14
+PackageVersion: 0.14
+PackageSupplier: Organization: David Goodger
+Relationship: SPDXRef-VINCE CONTAINS SPDXRef-docutils
+Relationship: SPDXRef-docutils CONTAINS NOASSERTION
+PackageDownloadLocation: NOASSERTION
+FilesAnalyzed: false
+PackageLicenseConcluded: NOASSERTION
+PackageLicenseDeclared: NOASSERTION
+PackageCopyrightText: NOASSERTION
+## 2.4 All-Levels Components
+##
+PackageName: ecdsa
+SPDXID: SPDXRef-ecdsa
+PackageComment: PURL is pkg:supplier/Brian%20Warner/ecdsa@0.13.2 Warning: Package version was pinned to 0.13.2, latest is 0.17.0
+ExternalRef: PACKAGE-MANAGER purl pkg:supplier/Brian%20Warner/ecdsa@0.13.2
+PackageVersion: 0.13.2
+PackageSupplier: Organization: Brian Warner
+Relationship: SPDXRef-VINCE CONTAINS SPDXRef-ecdsa
+Relationship: SPDXRef-ecdsa CONTAINS NOASSERTION
+PackageDownloadLocation: NOASSERTION
+FilesAnalyzed: false
+PackageLicenseConcluded: NOASSERTION
+PackageLicenseDeclared: NOASSERTION
+PackageCopyrightText: NOASSERTION
+## 2.4 All-Levels Components
+##
+PackageName: envs
+SPDXID: SPDXRef-envs
+PackageComment: PURL is pkg:supplier/Brian%20Jinwright/envs@1.3
+ExternalRef: PACKAGE-MANAGER purl pkg:supplier/Brian%20Jinwright/envs@1.3
+PackageVersion: 1.3
+PackageSupplier: Organization: Brian Jinwright
+Relationship: SPDXRef-VINCE CONTAINS SPDXRef-envs
+Relationship: SPDXRef-envs CONTAINS NOASSERTION
+PackageDownloadLocation: NOASSERTION
+FilesAnalyzed: false
+PackageLicenseConcluded: NOASSERTION
+PackageLicenseDeclared: NOASSERTION
+PackageCopyrightText: NOASSERTION
+## 2.4 All-Levels Components
+##
+PackageName: fs
+SPDXID: SPDXRef-fs
+PackageComment: PURL is pkg:supplier/Will%20McGugan/fs@2.4.11 Warning: Package version was pinned to 2.4.11, latest is 2.4.13
+ExternalRef: PACKAGE-MANAGER purl pkg:supplier/Will%20McGugan/fs@2.4.11
+PackageVersion: 2.4.11
+PackageSupplier: Organization: Will McGugan
+Relationship: SPDXRef-VINCE CONTAINS SPDXRef-fs
+Relationship: SPDXRef-fs CONTAINS NOASSERTION
+PackageDownloadLocation: NOASSERTION
+FilesAnalyzed: false
+PackageLicenseConcluded: NOASSERTION
+PackageLicenseDeclared: NOASSERTION
+PackageCopyrightText: NOASSERTION
+## 2.4 All-Levels Components
+##
+PackageName: fs-s3fs
+SPDXID: SPDXRef-fs-s3fs
+PackageComment: PURL is pkg:supplier/Will%20McGugan/fs-s3fs@1.1.1
+ExternalRef: PACKAGE-MANAGER purl pkg:supplier/Will%20McGugan/fs-s3fs@1.1.1
+PackageVersion: 1.1.1
+PackageSupplier: Organization: Will McGugan
+Relationship: SPDXRef-VINCE CONTAINS SPDXRef-fs-s3fs
+Relationship: SPDXRef-fs-s3fs CONTAINS NOASSERTION
+PackageDownloadLocation: NOASSERTION
+FilesAnalyzed: false
+PackageLicenseConcluded: NOASSERTION
+PackageLicenseDeclared: NOASSERTION
+PackageCopyrightText: NOASSERTION
+## 2.4 All-Levels Components
+##
+PackageName: future
+SPDXID: SPDXRef-future
+PackageComment: PURL is pkg:supplier/Ed%20Schofield/future@0.17.1 Warning: Package version was pinned to 0.17.1, latest is 0.18.2
+ExternalRef: PACKAGE-MANAGER purl pkg:supplier/Ed%20Schofield/future@0.17.1
+PackageVersion: 0.17.1
+PackageSupplier: Organization: Ed Schofield
+Relationship: SPDXRef-VINCE CONTAINS SPDXRef-future
+Relationship: SPDXRef-future CONTAINS NOASSERTION
+PackageDownloadLocation: NOASSERTION
+FilesAnalyzed: false
+PackageLicenseConcluded: NOASSERTION
+PackageLicenseDeclared: NOASSERTION
+PackageCopyrightText: NOASSERTION
+## 2.4 All-Levels Components
+##
+PackageName: idna
+SPDXID: SPDXRef-idna
+PackageComment: PURL is pkg:supplier/Kim%20Davies/idna@2.8 Warning: Package version was pinned to 2.8, latest is 3.2
+ExternalRef: PACKAGE-MANAGER purl pkg:supplier/Kim%20Davies/idna@2.8
+PackageVersion: 2.8
+PackageSupplier: Organization: Kim Davies
+Relationship: SPDXRef-VINCE CONTAINS SPDXRef-idna
+Relationship: SPDXRef-idna CONTAINS NOASSERTION
+PackageDownloadLocation: NOASSERTION
+FilesAnalyzed: false
+PackageLicenseConcluded: NOASSERTION
+PackageLicenseDeclared: NOASSERTION
+PackageCopyrightText: NOASSERTION
+## 2.4 All-Levels Components
+##
+PackageName: jmespath
+SPDXID: SPDXRef-jmespath
+PackageComment: PURL is pkg:supplier/James%20Saryerwinnie/jmespath@0.9.3 Warning: Package version was pinned to 0.9.3, latest is 0.10.0
+ExternalRef: PACKAGE-MANAGER purl pkg:supplier/James%20Saryerwinnie/jmespath@0.9.3
+PackageVersion: 0.9.3
+PackageSupplier: Organization: James Saryerwinnie
+Relationship: SPDXRef-VINCE CONTAINS SPDXRef-jmespath
+Relationship: SPDXRef-jmespath CONTAINS NOASSERTION
+PackageDownloadLocation: NOASSERTION
+FilesAnalyzed: false
+PackageLicenseConcluded: NOASSERTION
+PackageLicenseDeclared: NOASSERTION
+PackageCopyrightText: NOASSERTION
+## 2.4 All-Levels Components
+##
+PackageName: kombu
+SPDXID: SPDXRef-kombu
+PackageComment: PURL is pkg:supplier/Ask%20Solem/kombu@4.5.0 Warning: Package version was pinned to 4.5.0, latest is 5.1.0
+ExternalRef: PACKAGE-MANAGER purl pkg:supplier/Ask%20Solem/kombu@4.5.0
+PackageVersion: 4.5.0
+PackageSupplier: Organization: Ask Solem
+Relationship: SPDXRef-VINCE CONTAINS SPDXRef-kombu
+Relationship: SPDXRef-kombu CONTAINS NOASSERTION
+PackageDownloadLocation: NOASSERTION
+FilesAnalyzed: false
+PackageLicenseConcluded: NOASSERTION
+PackageLicenseDeclared: NOASSERTION
+PackageCopyrightText: NOASSERTION
+## 2.4 All-Levels Components
+##
+PackageName: lxml
+SPDXID: SPDXRef-lxml
+PackageComment: PURL is pkg:supplier/lxml%20dev%20team/lxml@4.5.0 Warning: Package version was pinned to 4.5.0, latest is 4.6.3
+ExternalRef: PACKAGE-MANAGER purl pkg:supplier/lxml%20dev%20team/lxml@4.5.0
+PackageVersion: 4.5.0
+PackageSupplier: Organization: lxml dev team
+Relationship: SPDXRef-VINCE CONTAINS SPDXRef-lxml
+Relationship: SPDXRef-lxml CONTAINS NOASSERTION
+PackageDownloadLocation: NOASSERTION
+FilesAnalyzed: false
+PackageLicenseConcluded: NOASSERTION
+PackageLicenseDeclared: NOASSERTION
+PackageCopyrightText: NOASSERTION
+## 2.4 All-Levels Components
+##
+PackageName: M2Crypto
+SPDXID: SPDXRef-M2Crypto
+PackageComment: PURL is pkg:supplier/Ng%20Pheng%20Siong/M2Crypto@0.36.0 Warning: Package version was pinned to 0.36.0, latest is 0.38.0
+ExternalRef: PACKAGE-MANAGER purl pkg:supplier/Ng%20Pheng%20Siong/M2Crypto@0.36.0
+PackageVersion: 0.36.0
+PackageSupplier: Organization: Ng Pheng Siong
+Relationship: SPDXRef-VINCE CONTAINS SPDXRef-M2Crypto
+Relationship: SPDXRef-M2Crypto CONTAINS NOASSERTION
+PackageDownloadLocation: NOASSERTION
+FilesAnalyzed: false
+PackageLicenseConcluded: NOASSERTION
+PackageLicenseDeclared: NOASSERTION
+PackageCopyrightText: NOASSERTION
+## 2.4 All-Levels Components
+##
+PackageName: Markdown
+SPDXID: SPDXRef-Markdown
+PackageComment: PURL is pkg:supplier/Manfred%20Stienstra%2C%20Yuri%20takhteyev%20and%20Waylan%20limberg/Markdown@3.1 Warning: Package version was pinned to 3.1, latest is 3.3.4
+ExternalRef: PACKAGE-MANAGER purl pkg:supplier/Manfred%20Stienstra%2C%20Yuri%20takhteyev%20and%20Waylan%20limberg/Markdown@3.1
+PackageVersion: 3.1
+PackageSupplier: Organization: Manfred Stienstra, Yuri takhteyev and Waylan limberg
+Relationship: SPDXRef-VINCE CONTAINS SPDXRef-Markdown
+Relationship: SPDXRef-Markdown CONTAINS NOASSERTION
+PackageDownloadLocation: NOASSERTION
+FilesAnalyzed: false
+PackageLicenseConcluded: NOASSERTION
+PackageLicenseDeclared: NOASSERTION
+PackageCopyrightText: NOASSERTION
+## 2.4 All-Levels Components
+##
+PackageName: pinax-messages
+SPDXID: SPDXRef-pinax-messages
+PackageComment: PURL is pkg:supplier/Pinax%20Team/pinax-messages@2.0.2 Warning: Package version was pinned to 2.0.2, latest is 3.0.0
+ExternalRef: PACKAGE-MANAGER purl pkg:supplier/Pinax%20Team/pinax-messages@2.0.2
+PackageVersion: 2.0.2
+PackageSupplier: Organization: Pinax Team
+Relationship: SPDXRef-VINCE CONTAINS SPDXRef-pinax-messages
+Relationship: SPDXRef-pinax-messages CONTAINS NOASSERTION
+PackageDownloadLocation: NOASSERTION
+FilesAnalyzed: false
+PackageLicenseConcluded: NOASSERTION
+PackageLicenseDeclared: NOASSERTION
+PackageCopyrightText: NOASSERTION
+## 2.4 All-Levels Components
+##
+PackageName: pip-autoremove
+SPDXID: SPDXRef-pip-autoremove
+PackageComment: PURL is pkg:supplier/https%3A%2F%2Fgithub.com%2Finvl%2Fpip-autoremove/pip-autoremove@0.9.1
+ExternalRef: PACKAGE-MANAGER purl pkg:supplier/https%3A%2F%2Fgithub.com%2Finvl%2Fpip-autoremove/pip-autoremove@0.9.1
+PackageVersion: 0.9.1
+PackageSupplier: Organization: https://github.com/invl/pip-autoremove
+Relationship: SPDXRef-VINCE CONTAINS SPDXRef-pip-autoremove
+Relationship: SPDXRef-pip-autoremove CONTAINS NOASSERTION
+PackageDownloadLocation: NOASSERTION
+FilesAnalyzed: false
+PackageLicenseConcluded: NOASSERTION
+PackageLicenseDeclared: NOASSERTION
+PackageCopyrightText: NOASSERTION
+## 2.4 All-Levels Components
+##
+PackageName: psycopg2
+SPDXID: SPDXRef-psycopg2
+PackageComment: PURL is pkg:supplier/Federico%20Di%20Gregorio/psycopg2@2.7.7 Warning: Package version was pinned to 2.7.7, latest is 2.9.1
+ExternalRef: PACKAGE-MANAGER purl pkg:supplier/Federico%20Di%20Gregorio/psycopg2@2.7.7
+PackageVersion: 2.7.7
+PackageSupplier: Organization: Federico Di Gregorio
+Relationship: SPDXRef-VINCE CONTAINS SPDXRef-psycopg2
+Relationship: SPDXRef-psycopg2 CONTAINS NOASSERTION
+PackageDownloadLocation: NOASSERTION
+FilesAnalyzed: false
+PackageLicenseConcluded: NOASSERTION
+PackageLicenseDeclared: NOASSERTION
+PackageCopyrightText: NOASSERTION
+## 2.4 All-Levels Components
+##
+PackageName: psycopg2-binary
+SPDXID: SPDXRef-psycopg2-binary
+PackageComment: PURL is pkg:supplier/Federico%20Di%20Gregorio/psycopg2-binary@2.8.2 Warning: Package version was pinned to 2.8.2, latest is 2.9.1
+ExternalRef: PACKAGE-MANAGER purl pkg:supplier/Federico%20Di%20Gregorio/psycopg2-binary@2.8.2
+PackageVersion: 2.8.2
+PackageSupplier: Organization: Federico Di Gregorio
+Relationship: SPDXRef-VINCE CONTAINS SPDXRef-psycopg2-binary
+Relationship: SPDXRef-psycopg2-binary CONTAINS NOASSERTION
+PackageDownloadLocation: NOASSERTION
+FilesAnalyzed: false
+PackageLicenseConcluded: NOASSERTION
+PackageLicenseDeclared: NOASSERTION
+PackageCopyrightText: NOASSERTION
+## 2.4 All-Levels Components
+##
+PackageName: pyasn1
+SPDXID: SPDXRef-pyasn1
+PackageComment: PURL is pkg:supplier/Ilya%20Etingof/pyasn1@0.4.8
+ExternalRef: PACKAGE-MANAGER purl pkg:supplier/Ilya%20Etingof/pyasn1@0.4.8
+PackageVersion: 0.4.8
+PackageSupplier: Organization: Ilya Etingof
+Relationship: SPDXRef-VINCE CONTAINS SPDXRef-pyasn1
+Relationship: SPDXRef-pyasn1 CONTAINS NOASSERTION
+PackageDownloadLocation: NOASSERTION
+FilesAnalyzed: false
+PackageLicenseConcluded: NOASSERTION
+PackageLicenseDeclared: NOASSERTION
+PackageCopyrightText: NOASSERTION
+## 2.4 All-Levels Components
+##
+PackageName: pycparser
+SPDXID: SPDXRef-pycparser
+PackageComment: PURL is pkg:supplier/Eli%20Bendersky/pycparser@2.19 Warning: Package version was pinned to 2.19, latest is 2.20
+ExternalRef: PACKAGE-MANAGER purl pkg:supplier/Eli%20Bendersky/pycparser@2.19
+PackageVersion: 2.19
+PackageSupplier: Organization: Eli Bendersky
+Relationship: SPDXRef-VINCE CONTAINS SPDXRef-pycparser
+Relationship: SPDXRef-pycparser CONTAINS NOASSERTION
+PackageDownloadLocation: NOASSERTION
+FilesAnalyzed: false
+PackageLicenseConcluded: NOASSERTION
+PackageLicenseDeclared: NOASSERTION
+PackageCopyrightText: NOASSERTION
+## 2.4 All-Levels Components
+##
+PackageName: pycryptodome
+SPDXID: SPDXRef-pycryptodome
+PackageComment: PURL is pkg:supplier/Helder%20Eijs/pycryptodome@3.3.1 Warning: Package version was pinned to 3.3.1, latest is 3.10.1
+ExternalRef: PACKAGE-MANAGER purl pkg:supplier/Helder%20Eijs/pycryptodome@3.3.1
+PackageVersion: 3.3.1
+PackageSupplier: Organization: Helder Eijs
+Relationship: SPDXRef-VINCE CONTAINS SPDXRef-pycryptodome
+Relationship: SPDXRef-pycryptodome CONTAINS NOASSERTION
+PackageDownloadLocation: NOASSERTION
+FilesAnalyzed: false
+PackageLicenseConcluded: NOASSERTION
+PackageLicenseDeclared: NOASSERTION
+PackageCopyrightText: NOASSERTION
+## 2.4 All-Levels Components
+##
+PackageName: PyJWT
+SPDXID: SPDXRef-PyJWT
+PackageComment: PURL is pkg:supplier/Jose%20Padilla/PyJWT@1.7.1 Warning: Package version was pinned to 1.7.1, latest is 2.1.0
+ExternalRef: PACKAGE-MANAGER purl pkg:supplier/Jose%20Padilla/PyJWT@1.7.1
+PackageVersion: 1.7.1
+PackageSupplier: Organization: Jose Padilla
+Relationship: SPDXRef-VINCE CONTAINS SPDXRef-PyJWT
+Relationship: SPDXRef-PyJWT CONTAINS NOASSERTION
+PackageDownloadLocation: NOASSERTION
+FilesAnalyzed: false
+PackageLicenseConcluded: NOASSERTION
+PackageLicenseDeclared: NOASSERTION
+PackageCopyrightText: NOASSERTION
+## 2.4 All-Levels Components
+##
+PackageName: python-dateutil
+SPDXID: SPDXRef-python-dateutil
+PackageComment: PURL is pkg:supplier/Gustavo%20Niemeyer/python-dateutil@2.8.0 Warning: Package version was pinned to 2.8.0, latest is 2.8.2
+ExternalRef: PACKAGE-MANAGER purl pkg:supplier/Gustavo%20Niemeyer/python-dateutil@2.8.0
+PackageVersion: 2.8.0
+PackageSupplier: Organization: Gustavo Niemeyer
+Relationship: SPDXRef-VINCE CONTAINS SPDXRef-python-dateutil
+Relationship: SPDXRef-python-dateutil CONTAINS NOASSERTION
+PackageDownloadLocation: NOASSERTION
+FilesAnalyzed: false
+PackageLicenseConcluded: NOASSERTION
+PackageLicenseDeclared: NOASSERTION
+PackageCopyrightText: NOASSERTION
+## 2.4 All-Levels Components
+##
+PackageName: python-gnupg
+SPDXID: SPDXRef-python-gnupg
+PackageComment: PURL is pkg:supplier/Vinay%20Sajip/python-gnupg@0.4.5 Warning: Package version was pinned to 0.4.5, latest is 0.4.7
+ExternalRef: PACKAGE-MANAGER purl pkg:supplier/Vinay%20Sajip/python-gnupg@0.4.5
+PackageVersion: 0.4.5
+PackageSupplier: Organization: Vinay Sajip
+Relationship: SPDXRef-VINCE CONTAINS SPDXRef-python-gnupg
+Relationship: SPDXRef-python-gnupg CONTAINS NOASSERTION
+PackageDownloadLocation: NOASSERTION
+FilesAnalyzed: false
+PackageLicenseConcluded: NOASSERTION
+PackageLicenseDeclared: NOASSERTION
+PackageCopyrightText: NOASSERTION
+## 2.4 All-Levels Components
+##
+PackageName: python-jose
+SPDXID: SPDXRef-python-jose
+PackageComment: PURL is pkg:supplier/Michael%20Davis/python-jose@3.2.0 Warning: Package version was pinned to 3.2.0, latest is 3.3.0
+ExternalRef: PACKAGE-MANAGER purl pkg:supplier/Michael%20Davis/python-jose@3.2.0
+PackageVersion: 3.2.0
+PackageSupplier: Organization: Michael Davis
+Relationship: SPDXRef-VINCE CONTAINS SPDXRef-python-jose
+Relationship: SPDXRef-python-jose CONTAINS NOASSERTION
+PackageDownloadLocation: NOASSERTION
+FilesAnalyzed: false
+PackageLicenseConcluded: NOASSERTION
+PackageLicenseDeclared: NOASSERTION
+PackageCopyrightText: NOASSERTION
+## 2.4 All-Levels Components
+##
+PackageName: pytz
+SPDXID: SPDXRef-pytz
+PackageComment: PURL is pkg:supplier/Stuart%20Bishop/pytz@2019.3 Warning: Package version was pinned to 2019.3, latest is 2021.1
+ExternalRef: PACKAGE-MANAGER purl pkg:supplier/Stuart%20Bishop/pytz@2019.3
+PackageVersion: 2019.3
+PackageSupplier: Organization: Stuart Bishop
+Relationship: SPDXRef-VINCE CONTAINS SPDXRef-pytz
+Relationship: SPDXRef-pytz CONTAINS NOASSERTION
+PackageDownloadLocation: NOASSERTION
+FilesAnalyzed: false
+PackageLicenseConcluded: NOASSERTION
+PackageLicenseDeclared: NOASSERTION
+PackageCopyrightText: NOASSERTION
+## 2.4 All-Levels Components
+##
+PackageName: qrcode
+SPDXID: SPDXRef-qrcode
+PackageComment: PURL is pkg:supplier/Lincoln%20Loop/qrcode@6.1 Warning: Package version was pinned to 6.1, latest is 7.2
+ExternalRef: PACKAGE-MANAGER purl pkg:supplier/Lincoln%20Loop/qrcode@6.1
+PackageVersion: 6.1
+PackageSupplier: Organization: Lincoln Loop
+Relationship: SPDXRef-VINCE CONTAINS SPDXRef-qrcode
+Relationship: SPDXRef-qrcode CONTAINS NOASSERTION
+PackageDownloadLocation: NOASSERTION
+FilesAnalyzed: false
+PackageLicenseConcluded: NOASSERTION
+PackageLicenseDeclared: NOASSERTION
+PackageCopyrightText: NOASSERTION
+## 2.4 All-Levels Components
+##
+PackageName: redis
+SPDXID: SPDXRef-redis
+PackageComment: PURL is pkg:supplier/Andy%20McCurdy/redis@3.2.1 Warning: Package version was pinned to 3.2.1, latest is 3.5.3
+ExternalRef: PACKAGE-MANAGER purl pkg:supplier/Andy%20McCurdy/redis@3.2.1
+PackageVersion: 3.2.1
+PackageSupplier: Organization: Andy McCurdy
+Relationship: SPDXRef-VINCE CONTAINS SPDXRef-redis
+Relationship: SPDXRef-redis CONTAINS NOASSERTION
+PackageDownloadLocation: NOASSERTION
+FilesAnalyzed: false
+PackageLicenseConcluded: NOASSERTION
+PackageLicenseDeclared: NOASSERTION
+PackageCopyrightText: NOASSERTION
+## 2.4 All-Levels Components
+##
+PackageName: requests
+SPDXID: SPDXRef-requests
+PackageComment: PURL is pkg:supplier/Kenneth%20Reitz/requests@2.22.0 Warning: Package version was pinned to 2.22.0, latest is 2.26.0
+ExternalRef: PACKAGE-MANAGER purl pkg:supplier/Kenneth%20Reitz/requests@2.22.0
+PackageVersion: 2.22.0
+PackageSupplier: Organization: Kenneth Reitz
+Relationship: SPDXRef-VINCE CONTAINS SPDXRef-requests
+Relationship: SPDXRef-requests CONTAINS NOASSERTION
+PackageDownloadLocation: NOASSERTION
+FilesAnalyzed: false
+PackageLicenseConcluded: NOASSERTION
+PackageLicenseDeclared: NOASSERTION
+PackageCopyrightText: NOASSERTION
+## 2.4 All-Levels Components
+##
+PackageName: rsa
+SPDXID: SPDXRef-rsa
+PackageComment: PURL is pkg:supplier/Sybren%20A.%20Stuvel/rsa@4.6 Warning: Package version was pinned to 4.6, latest is 4.7.2
+ExternalRef: PACKAGE-MANAGER purl pkg:supplier/Sybren%20A.%20Stuvel/rsa@4.6
+PackageVersion: 4.6
+PackageSupplier: Organization: Sybren A. Stuvel
+Relationship: SPDXRef-VINCE CONTAINS SPDXRef-rsa
+Relationship: SPDXRef-rsa CONTAINS NOASSERTION
+PackageDownloadLocation: NOASSERTION
+FilesAnalyzed: false
+PackageLicenseConcluded: NOASSERTION
+PackageLicenseDeclared: NOASSERTION
+PackageCopyrightText: NOASSERTION
+## 2.4 All-Levels Components
+##
+PackageName: s3transfer
+SPDXID: SPDXRef-s3transfer
+PackageComment: PURL is pkg:supplier/Amazon%20Web%20Services/s3transfer@0.3.6 Warning: Package version was pinned to 0.3.6, latest is 0.5.0
+ExternalRef: PACKAGE-MANAGER purl pkg:supplier/Amazon%20Web%20Services/s3transfer@0.3.6
+PackageVersion: 0.3.6
+PackageSupplier: Organization: Amazon Web Services
+Relationship: SPDXRef-VINCE CONTAINS SPDXRef-s3transfer
+Relationship: SPDXRef-s3transfer CONTAINS NOASSERTION
+PackageDownloadLocation: NOASSERTION
+FilesAnalyzed: false
+PackageLicenseConcluded: NOASSERTION
+PackageLicenseDeclared: NOASSERTION
+PackageCopyrightText: NOASSERTION
+## 2.4 All-Levels Components
+##
+PackageName: simplejson
+SPDXID: SPDXRef-simplejson
+PackageComment: PURL is pkg:supplier/Bob%20Ippolito/simplejson@3.17.0 Warning: Package version was pinned to 3.17.0, latest is 3.17.3
+ExternalRef: PACKAGE-MANAGER purl pkg:supplier/Bob%20Ippolito/simplejson@3.17.0
+PackageVersion: 3.17.0
+PackageSupplier: Organization: Bob Ippolito
+Relationship: SPDXRef-VINCE CONTAINS SPDXRef-simplejson
+Relationship: SPDXRef-simplejson CONTAINS NOASSERTION
+PackageDownloadLocation: NOASSERTION
+FilesAnalyzed: false
+PackageLicenseConcluded: NOASSERTION
+PackageLicenseDeclared: NOASSERTION
+PackageCopyrightText: NOASSERTION
+## 2.4 All-Levels Components
+##
+PackageName: six
+SPDXID: SPDXRef-six
+PackageComment: PURL is pkg:supplier/Benjamin%20Peterson/six@1.12.0 Warning: Package version was pinned to 1.12.0, latest is 1.16.0
+ExternalRef: PACKAGE-MANAGER purl pkg:supplier/Benjamin%20Peterson/six@1.12.0
+PackageVersion: 1.12.0
+PackageSupplier: Organization: Benjamin Peterson
+Relationship: SPDXRef-VINCE CONTAINS SPDXRef-six
+Relationship: SPDXRef-six CONTAINS NOASSERTION
+PackageDownloadLocation: NOASSERTION
+FilesAnalyzed: false
+PackageLicenseConcluded: NOASSERTION
+PackageLicenseDeclared: NOASSERTION
+PackageCopyrightText: NOASSERTION
+## 2.4 All-Levels Components
+##
+PackageName: soupsieve
+SPDXID: SPDXRef-soupsieve
+PackageComment: PURL is pkg:supplier/Isaac%20Muse/soupsieve@1.9.5 Warning: Package version was pinned to 1.9.5, latest is 2.2.1
+ExternalRef: PACKAGE-MANAGER purl pkg:supplier/Isaac%20Muse/soupsieve@1.9.5
+PackageVersion: 1.9.5
+PackageSupplier: Organization: Isaac Muse
+Relationship: SPDXRef-VINCE CONTAINS SPDXRef-soupsieve
+Relationship: SPDXRef-soupsieve CONTAINS NOASSERTION
+PackageDownloadLocation: NOASSERTION
+FilesAnalyzed: false
+PackageLicenseConcluded: NOASSERTION
+PackageLicenseDeclared: NOASSERTION
+PackageCopyrightText: NOASSERTION
+## 2.4 All-Levels Components
+##
+PackageName: sqlparse
+SPDXID: SPDXRef-sqlparse
+PackageComment: PURL is pkg:supplier/Andi%20Albrecht/sqlparse@0.3.0 Warning: Package version was pinned to 0.3.0, latest is 0.4.1
+ExternalRef: PACKAGE-MANAGER purl pkg:supplier/Andi%20Albrecht/sqlparse@0.3.0
+PackageVersion: 0.3.0
+PackageSupplier: Organization: Andi Albrecht
+Relationship: SPDXRef-VINCE CONTAINS SPDXRef-sqlparse
+Relationship: SPDXRef-sqlparse CONTAINS NOASSERTION
+PackageDownloadLocation: NOASSERTION
+FilesAnalyzed: false
+PackageLicenseConcluded: NOASSERTION
+PackageLicenseDeclared: NOASSERTION
+PackageCopyrightText: NOASSERTION
+## 2.4 All-Levels Components
+##
+PackageName: urllib3
+SPDXID: SPDXRef-urllib3
+PackageComment: PURL is pkg:supplier/Andrey%20Petrov/urllib3@1.26.4 Warning: Package version was pinned to 1.26.4, latest is 1.26.6
+ExternalRef: PACKAGE-MANAGER purl pkg:supplier/Andrey%20Petrov/urllib3@1.26.4
+PackageVersion: 1.26.4
+PackageSupplier: Organization: Andrey Petrov
+Relationship: SPDXRef-VINCE CONTAINS SPDXRef-urllib3
+Relationship: SPDXRef-urllib3 CONTAINS NOASSERTION
+PackageDownloadLocation: NOASSERTION
+FilesAnalyzed: false
+PackageLicenseConcluded: NOASSERTION
+PackageLicenseDeclared: NOASSERTION
+PackageCopyrightText: NOASSERTION
+## 2.4 All-Levels Components
+##
+PackageName: vine
+SPDXID: SPDXRef-vine
+PackageComment: PURL is pkg:supplier/Ask%20Solem/vine@1.3.0 Warning: Package version was pinned to 1.3.0, latest is 5.0.0
+ExternalRef: PACKAGE-MANAGER purl pkg:supplier/Ask%20Solem/vine@1.3.0
+PackageVersion: 1.3.0
+PackageSupplier: Organization: Ask Solem
+Relationship: SPDXRef-VINCE CONTAINS SPDXRef-vine
+Relationship: SPDXRef-vine CONTAINS NOASSERTION
+PackageDownloadLocation: NOASSERTION
+FilesAnalyzed: false
+PackageLicenseConcluded: NOASSERTION
+PackageLicenseDeclared: NOASSERTION
+PackageCopyrightText: NOASSERTION
+## 2.4 All-Levels Components
+##
+PackageName: watchtower
+SPDXID: SPDXRef-watchtower
+PackageComment: PURL is pkg:supplier/Andrey%20Kislyuk/watchtower@1.0.6
+ExternalRef: PACKAGE-MANAGER purl pkg:supplier/Andrey%20Kislyuk/watchtower@1.0.6
+PackageVersion: 1.0.6
+PackageSupplier: Organization: Andrey Kislyuk
+Relationship: SPDXRef-VINCE CONTAINS SPDXRef-watchtower
+Relationship: SPDXRef-watchtower CONTAINS NOASSERTION
+PackageDownloadLocation: NOASSERTION
+FilesAnalyzed: false
+PackageLicenseConcluded: NOASSERTION
+PackageLicenseDeclared: NOASSERTION
+PackageCopyrightText: NOASSERTION
+## 2.4 All-Levels Components
+##
+PackageName: webencodings
+SPDXID: SPDXRef-webencodings
+PackageComment: PURL is pkg:supplier/Geoffrey%20Sneddon/webencodings@0.5.1
+ExternalRef: PACKAGE-MANAGER purl pkg:supplier/Geoffrey%20Sneddon/webencodings@0.5.1
+PackageVersion: 0.5.1
+PackageSupplier: Organization: Geoffrey Sneddon
+Relationship: SPDXRef-VINCE CONTAINS SPDXRef-webencodings
+Relationship: SPDXRef-webencodings CONTAINS NOASSERTION
+PackageDownloadLocation: NOASSERTION
+FilesAnalyzed: false
+PackageLicenseConcluded: NOASSERTION
+PackageLicenseDeclared: NOASSERTION
+PackageCopyrightText: NOASSERTION
+## 2.4 All-Levels Components
+##
+PackageName: django-bakery
+SPDXID: SPDXRef-django-bakery
+PackageComment: PURL is pkg:supplier/The%20Los%20Angeles%20Times%20Data%20Desk/django-bakery@0.12.7+cert.1 Warning: Package version was pinned to 0.12.7+cert.1, latest is 0.12.7
+ExternalRef: PACKAGE-MANAGER purl pkg:supplier/The%20Los%20Angeles%20Times%20Data%20Desk/django-bakery@0.12.7+cert.1
+PackageVersion: 0.12.7+cert.1
+PackageSupplier: Organization: The Los Angeles Times Data Desk
+Relationship: SPDXRef-VINCE CONTAINS SPDXRef-django-bakery
+Relationship: SPDXRef-django-bakery CONTAINS NOASSERTION
+PackageDownloadLocation: NOASSERTION
+FilesAnalyzed: false
+PackageLicenseConcluded: NOASSERTION
+PackageLicenseDeclared: NOASSERTION
+PackageCopyrightText: NOASSERTION
diff --git a/scripts/deploy-template.sh b/scripts/deploy-template.sh
new file mode 100755
index 0000000..a742cb4
--- /dev/null
+++ b/scripts/deploy-template.sh
@@ -0,0 +1,18 @@
+#!/bin/bash
+
+ZIP_NAME=bigvince.zip
+DEPLOY_BUCKET=:update:
+
+if [ "X${AWS_SECRET_ACCESS_KEY}" = "X" ]; then
+ echo "Environment must be configured for AWS access (access key, etc.)"
+ exit 1
+fi
+
+DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" >/dev/null 2>&1 && pwd )"
+
+cd ../
+git archive -v -o "$ZIP_NAME" --format=zip HEAD
+aws s3 cp bigvince.zip s3://"$DEPLOY_BUCKET" --profile "$PROFILE"
+rm $ZIP_NAME
+
+cd "$DIR"
diff --git a/vince/__init__.py b/vince/__init__.py
new file mode 100644
index 0000000..be3c813
--- /dev/null
+++ b/vince/__init__.py
@@ -0,0 +1,35 @@
+#########################################################################
+# VINCE
+#
+# Copyright 2022 Carnegie Mellon University.
+#
+# NO WARRANTY. THIS CARNEGIE MELLON UNIVERSITY AND SOFTWARE ENGINEERING
+# INSTITUTE MATERIAL IS FURNISHED ON AN "AS-IS" BASIS. CARNEGIE MELLON
+# UNIVERSITY MAKES NO WARRANTIES OF ANY KIND, EITHER EXPRESSED OR IMPLIED,
+# AS TO ANY MATTER INCLUDING, BUT NOT LIMITED TO, WARRANTY OF FITNESS FOR
+# PURPOSE OR MERCHANTABILITY, EXCLUSIVITY, OR RESULTS OBTAINED FROM USE OF THE
+# MATERIAL. CARNEGIE MELLON UNIVERSITY DOES NOT MAKE ANY WARRANTY OF ANY KIND
+# WITH RESPECT TO FREEDOM FROM PATENT, TRADEMARK, OR COPYRIGHT INFRINGEMENT.
+#
+# Released under a MIT (SEI)-style license, please see license.txt or contact
+# permission@sei.cmu.edu for full terms.
+#
+# [DISTRIBUTION STATEMENT A] This material has been approved for public
+# release and unlimited distribution. Please see Copyright notice for non-US
+# Government use and distribution.
+#
+# Carnegie Mellon®, CERT® and CERT Coordination Center® are registered in the
+# U.S. Patent and Trademark Office by Carnegie Mellon University.
+#
+# This Software includes and/or makes use of Third-Party Software each subject
+# to its own license.
+#
+# DM21-1126
+########################################################################
+from __future__ import absolute_import, unicode_literals
+from .celery import app as celery_app
+
+__all__ = ['celery_app']
+
+default_app_config = 'vince.apps.VinceTrackConfig'
+
diff --git a/vince/admin.py b/vince/admin.py
new file mode 100644
index 0000000..cb3305f
--- /dev/null
+++ b/vince/admin.py
@@ -0,0 +1,617 @@
+#########################################################################
+# VINCE
+#
+# Copyright 2022 Carnegie Mellon University.
+#
+# NO WARRANTY. THIS CARNEGIE MELLON UNIVERSITY AND SOFTWARE ENGINEERING
+# INSTITUTE MATERIAL IS FURNISHED ON AN "AS-IS" BASIS. CARNEGIE MELLON
+# UNIVERSITY MAKES NO WARRANTIES OF ANY KIND, EITHER EXPRESSED OR IMPLIED,
+# AS TO ANY MATTER INCLUDING, BUT NOT LIMITED TO, WARRANTY OF FITNESS FOR
+# PURPOSE OR MERCHANTABILITY, EXCLUSIVITY, OR RESULTS OBTAINED FROM USE OF THE
+# MATERIAL. CARNEGIE MELLON UNIVERSITY DOES NOT MAKE ANY WARRANTY OF ANY KIND
+# WITH RESPECT TO FREEDOM FROM PATENT, TRADEMARK, OR COPYRIGHT INFRINGEMENT.
+#
+# Released under a MIT (SEI)-style license, please see license.txt or contact
+# permission@sei.cmu.edu for full terms.
+#
+# [DISTRIBUTION STATEMENT A] This material has been approved for public
+# release and unlimited distribution. Please see Copyright notice for non-US
+# Government use and distribution.
+#
+# Carnegie Mellon®, CERT® and CERT Coordination Center® are registered in the
+# U.S. Patent and Trademark Office by Carnegie Mellon University.
+#
+# This Software includes and/or makes use of Third-Party Software each subject
+# to its own license.
+#
+# DM21-1126
+########################################################################
+from django import forms
+from django.contrib import admin, messages
+from django.conf import settings
+from django.contrib.auth.admin import UserAdmin
+from django.contrib.auth.admin import GroupAdmin as BaseGroupAdmin
+from django.contrib.auth.models import User, Group
+from django.contrib.auth import get_user_model
+from django.contrib.auth import views as auth_views
+from django.contrib.admin.views.decorators import staff_member_required
+from django.utils.translation import ugettext_lazy as _
+from vince.models import TicketQueue, Ticket, FollowUp, CaseTemplate, UserSettings, Contact, QueuePermissions, CasePermissions, TicketThread, CaseAssignment, CaseAction, ContactAssociation, CaseParticipant, CalendarEvent, VulNote, BounceEmailNotification
+from vince.models import TicketChange, Attachment, VulnerabilityCase, EmailTemplate, EmailContact, AdminPGPEmail, Artifact, Vulnerability, VendorStatus, VulnerableVendor, VinceSMIMECertificate, UserRole, VinceReminder, GroupSettings, TagManager
+from vinny.models import Thread, Message, VTCaseRequest, CaseMember, VendorAction
+from django.contrib.admin.helpers import ActionForm
+from cogauth.views import COGLoginView
+
+from vincepub.models import VUReport, VulnerabilityNote, NoteVulnerability, Vendor, VendorRecord
+
+# Register your models here.
+
+
+class QueuePermissionInline(admin.TabularInline):
+ model = QueuePermissions
+
+ def has_delete_permission(self, request, obj=None):
+ if request.user.is_superuser:
+ return True
+ return False
+
+@admin.register(TicketQueue)
+class QueueAdmin(admin.ModelAdmin):
+ list_display = ('title', 'slug', 'default_owner')
+ prepopulated_fields = {"slug": ("title",)}
+ inlines = [QueuePermissionInline,]
+
+ def has_delete_permission(self, request, obj=None):
+ return False
+
+ def get_form(self, request, obj=None, **kwargs):
+ form = super().get_form(request, obj, **kwargs)
+ is_superuser = request.user.is_superuser
+ disabled_fields = set()
+
+ if not is_superuser:
+ disabled_fields |= {
+ 'group',
+ 'group_read'
+ 'group_write',
+ }
+
+ for f in disabled_fields:
+ if f in form.base_fields:
+ form.base_fields[f].disabled = True
+
+ return form
+
+
+
+class CasePermissionInline(admin.TabularInline):
+ model = CasePermissions
+
+class CaseParticipantInline(admin.TabularInline):
+ model = CaseParticipant
+
+def bulk_reassign(modeladmin, request, queryset):
+ ct = queryset.count()
+ if int(request.POST['user']) == 0:
+ title = "Bulk unassign ticket by {request.user.usersettings.vince_username}"
+ else:
+ assignee = User.objects.get(id=request.POST['user']).usersettings.vince_username
+ title = f"Bulk reassign ticket to user {assignee} by {request.user.usersettings.vince_username}"
+
+ for x in queryset:
+ ca = FollowUp(ticket=x, title=title, user=request.user)
+ ca.save()
+
+ if int(request.POST['user']) == 0:
+ queryset.update(assigned_to=None)
+ else:
+ queryset.update(assigned_to=request.POST['user'])
+ messages.success(request, f"Successfully updated {ct} tickets")
+
+bulk_reassign.short_description = 'Reassign tickets to another user'
+
+
+def bulk_tktstatuschange(modeladmin, request, queryset):
+ ct = queryset.count()
+ status_dict = dict(Ticket.STATUS_CHOICES)
+
+ for x in queryset:
+ title = f"Bulk ticket status change to {status_dict[int(request.POST['status'])]} by {request.user.usersettings.vince_username}"
+ ca = FollowUp(ticket=x, title=title, user=request.user)
+ ca.save()
+
+ queryset.update(status = request.POST['status'])
+
+ messages.success(request, f"Successfully updated {ct} tickets")
+
+bulk_tktstatuschange.short_description = 'Change ticket status'
+
+
+def bulk_casestatuschange(modeladmin, request, queryset):
+ ct = queryset.count()
+ status_dict = dict(VulnerabilityCase.STATUS_CHOICES)
+ for x in queryset:
+ title = f"Bulk case status change to {status_dict[int(request.POST['status'])]} by {request.user.usersettings.vince_username}"
+ ca = CaseAction(case=x, user=request.user, title=title, action_type=0)
+ ca.save()
+ queryset.update(status = request.POST['status'])
+ messages.success(request, f"Successfully updated {ct} cases")
+
+bulk_casestatuschange.short_description = 'Change case status'
+
+def bulk_moveticket(modeladmin, request, queryset):
+ ct = queryset.count()
+ if request.POST.get('case') != "":
+ case = VulnerabilityCase.objects.filter(vuid=request.POST['case']).first()
+ queue = TicketQueue.objects.filter(slug="case").first()
+ if case and queue:
+ queryset.update(case=case, queue=queue)
+ messages.success(request, f"Successfully updated {ct} tickets")
+ else:
+ messages.error(request, f"Case doesn't exist")
+ else:
+ messages.error(request, f"Case doesn't exist")
+bulk_moveticket.short_description = "Move Tickets to Case Queue"
+
+def bulk_reassign_cases(modeladmin, request, queryset):
+ ct = queryset.count()
+ if int(request.POST['user']) == 0:
+ assignee = "None"
+ else:
+ assignee = User.objects.get(id=request.POST['user']).usersettings.vince_username
+
+ for x in queryset:
+ title = f"Bulk reassign owner to user {assignee} by {request.user.usersettings.vince_username}"
+ ca = CaseAction(case=x, user=request.user, title=title, action_type=0)
+ ca.save()
+
+ if int(request.POST['user']) == 0:
+ queryset.update(owner=None)
+ else:
+ queryset.update(owner=request.POST['user'])
+
+ messages.success(request, f"Successfully updated {ct} cases")
+
+bulk_reassign_cases.short_description = 'Change case ownership to another user'
+
+def bulk_add_user_case(modeladmin, request, queryset):
+ ct = queryset.count()
+ if int(request.POST['user']) > 0:
+ for x in queryset:
+ assignee = User.objects.get(id=request.POST['user'])
+ CaseAssignment.objects.get_or_create(assigned=assignee, case=x)
+ title = f"Bulk assigned user {assignee.usersettings.vince_username} by {request.user.usersettings.vince_username}"
+ ca = CaseAction(case=x, user=request.user, title=title, action_type=0)
+ ca.save()
+ messages.success(request, f"Successfully updated {ct} cases")
+ else:
+ messages.error(request, f"Use bulk unassigment action to unassign user from case")
+
+bulk_add_user_case.short_description = "Add user to case assignment"
+
+def bulk_unassign_user_case(modeladmin, request, queryset):
+ ct = queryset.count()
+ if int(request.POST['user']) > 0:
+ for x in queryset:
+ assignee = User.objects.get(id=request.POST['user'])
+ CaseAssignment.objects.filter(assigned=assignee, case=x).delete()
+ title = f"Bulk unassigned user {assignee.usersettings.vince_username} by {request.user.usersettings.vince_username}"
+ ca = CaseAction(case=x, user=request.user, title=title, action_type=0)
+ ca.save()
+ messages.success(request, f"Successfully updated {ct} cases")
+ else:
+ messages.error(request, f"Please select a user to unassign from selected cases")
+bulk_unassign_user_case.short_description = "Unassign user from all selected cases"
+
+class BulkAssignmentForm(ActionForm):
+ try:
+ USER_CHOICES = [(0, '--------')] + [(q.id, q.usersettings.preferred_username) for q in get_user_model().objects.all()]
+ except:
+ USER_CHOICES = []
+
+ user = forms.ChoiceField(choices=USER_CHOICES,
+ label=_('Assign a User'),
+ required=False
+ )
+
+ status = forms.ChoiceField(choices=Ticket.STATUS_CHOICES,
+ label=_('Change Ticket Status'),
+ required=False)
+
+ case = forms.CharField(label=_('Case ID Number'),
+ required=False)
+
+
+class CaseBulkAssignmentForm(ActionForm):
+ try:
+ USER_CHOICES = [(0, '--------')] + [(q.id, q.usersettings.preferred_username) for q in get_user_model().objects.all()]
+ except:
+ USER_CHOICES = []
+
+ user = forms.ChoiceField(choices=USER_CHOICES,
+ label=_('Assign a User'),
+ required=False
+ )
+
+ status = forms.ChoiceField(choices=VulnerabilityCase.STATUS_CHOICES,
+ label=_('Change Case Status'),
+ required=False
+ )
+
+class CaseAssignedFilter(admin.SimpleListFilter):
+ title = "Assigned"
+ parameter_name = 'assigned_to'
+
+ def lookups(self, request, model_admin):
+ return [(0, '--------')] + [(q.id, q.username) for q in get_user_model().objects.all()]
+
+ def queryset(self, request, queryset):
+ if self.value() == 0:
+ assignments = CaseAssignment.objects.all().values_list('case__id', flat=True)
+ return queryset.exclude(id__in=assignments)
+ elif self.value():
+ assignments = CaseAssignment.objects.filter(assigned=self.value()).values_list('case__id', flat=True)
+ return queryset.filter(id__in=assignments)
+ else:
+ return queryset
+
+
+
+@admin.register(VulnerabilityCase)
+class VinceCaseAdmin(admin.ModelAdmin):
+ list_display = ('vuid', 'title', 'team_owner', 'created', 'owner', 'status', 'product_name', 'case_get_assigned_to')
+ inlines = [CasePermissionInline, CaseParticipantInline, ]
+ search_fields = ('vuid', 'title', 'product_name')
+ list_filter = ('team_owner', 'owner', 'status', CaseAssignedFilter)
+ action_form = CaseBulkAssignmentForm
+ actions = [bulk_reassign_cases, bulk_add_user_case, bulk_unassign_user_case, bulk_casestatuschange]
+
+ def has_delete_permission(self, request, obj=None):
+ if request.user.is_superuser:
+ return True
+ return False
+
+ def case_get_assigned_to(self, obj):
+ return obj.get_assigned_to
+
+ case_get_assigned_to.short_description = _('Users assigned')
+
+@admin.register(EmailTemplate)
+class EmailTemplateAdmin (admin.ModelAdmin):
+ list_display = ('template_name', 'subject', 'heading', 'plain_text', 'locale' )
+ search_fields = ('template_name', 'locale', 'heading')
+ list_filter = ('locale', )
+
+ def has_delete_permission(self, request, obj=None):
+ return False
+
+
+class AssignedFilter(admin.SimpleListFilter):
+ title = "Filter by Assigned"
+ parameter_name = 'assigned_to'
+
+ def lookups(self, request, model_admin):
+ return [(0, '--------')] + [(q.id, q.username) for q in get_user_model().objects.all()]
+ def queryset(self, request, queryset):
+ return queryset.filter(assigned_to=self.value())
+
+
+@admin.register(Ticket)
+class TicketAdmin(admin.ModelAdmin):
+ search_fields=['title', 'case__vuid']
+ list_display = ('title', 'status', 'assigned_to', 'queue', )
+ date_hierarchy = 'created'
+ list_filter = ('queue', 'assigned_to', 'status')
+ action_form = BulkAssignmentForm
+ list_per_page = 250
+ actions = [bulk_reassign, bulk_tktstatuschange, bulk_moveticket]
+
+ def has_delete_permission(self, request, obj=None):
+ if request.user.is_superuser:
+ return True
+ return False
+
+ def hidden_submitter_email(self, ticket):
+ if ticket.submitter_email:
+ username, domain = ticket.submitter_email.split("@")
+ username = username[:2] + "*" * (len(username) - 2)
+ domain = domain[:1] + "*" * (len(domain) - 2) + domain[-1:]
+ return "%s@%s" % (username, domain)
+ else:
+ return ticket.submitter_email
+
+
+class TicketChangeInline(admin.StackedInline):
+ model = TicketChange
+
+class AttachmentInline(admin.StackedInline):
+ model = Attachment
+
+
+class ReminderAdmin(admin.ModelAdmin):
+ list_display = ('title', 'user', 'created_by', 'alert_date')
+ list_filter = ('user', 'alert_date', 'created_by')
+ list_per_page = 250
+
+ def has_delete_permission(self, request, obj=None):
+ if request.user.is_staff:
+ return True
+ return False
+
+@admin.register(FollowUp)
+class FollowUpAdmin(admin.ModelAdmin):
+ inlines = [TicketChangeInline, AttachmentInline]
+ list_display = ('ticket_get_ticket_for_url', 'title', 'date', 'ticket', 'user', 'new_status')
+ list_filter = ('user', 'date', 'new_status')
+
+ def ticket_get_ticket_for_url(self, obj):
+ return obj.ticket.ticket_for_url
+ ticket_get_ticket_for_url.short_description = _('Slug')
+
+
+class UserSettingsInline(admin.StackedInline):
+ model=UserSettings
+ can_delete=False
+ verbose_name_plural='UserSettings'
+ fk_name='user'
+ fields=('org', 'preferred_username', 'case_template', 'contacts_read', 'contacts_write')
+
+class CustomUserAdmin(UserAdmin):
+ inlines=(UserSettingsInline,)
+ list_display = ('username', 'first_name', 'last_name', 'get_preferred_username')
+ list_select_related = ('usersettings',)
+ actions=['get_preferred_username']
+
+
+ def has_delete_permission(self, request, obj=None):
+ if request.user.is_superuser:
+ return True
+ return False
+
+ def get_form(self, request, obj=None, **kwargs):
+ form = super().get_form(request, obj, **kwargs)
+ is_superuser = request.user.is_superuser
+ disabled_fields = set()
+
+ if not is_superuser:
+ disabled_fields |= {
+ 'username',
+ 'is_superuser',
+ 'email',
+ 'user_permissions',
+ }
+
+ if (not is_superuser
+ and obj is not None
+ and obj == request.user
+ ):
+ disabled_fields |= {
+ 'is_staff',
+ 'is_superuser',
+ 'groups',
+ 'user_permissions',
+ }
+
+ for f in disabled_fields:
+ if f in form.base_fields:
+ form.base_fields[f].disabled = True
+
+ return form
+
+ def get_preferred_username(self, instance):
+ return instance.usersettings.preferred_username
+ get_preferred_username.short_description = "Visible"
+
+ def get_inline_instances(self, request, obj=None):
+ if not obj:
+ return list()
+ return super(CustomUserAdmin, self).get_inline_instances(request, obj)
+
+class EmailContactInLine(admin.TabularInline):
+ model = EmailContact
+
+
+class ContactAdmin(admin.ModelAdmin):
+ search_fields=['vendor_id', 'vendor_name']
+ list_display=['vendor_id', 'vendor_name', 'active', "_emails"]
+
+ inlines = [
+ EmailContactInLine
+ ]
+
+ def has_delete_permission(self, request, obj=None):
+ if request.user.is_superuser:
+ return True
+ return False
+
+ def _emails(self, obj):
+ return obj.get_emails()
+
+#admin.site = CustomAdminSite("default")
+
+class AdminPGPEmailAdmin(admin.ModelAdmin):
+ fields = ('pgp_key_data', 'pgp_key_id', 'email', 'name', 'active')
+ list_display = ('pgp_key_id', 'email', 'name', 'active')
+
+ def has_delete_permission(self, request, obj=None):
+ if request.user.is_superuser:
+ return True
+ return False
+
+class VulAdmin(admin.ModelAdmin):
+ list_display = ('get_vul_id', 'cve', 'case', 'description')
+ search_fields=['description', 'case__vuid', 'cve']
+ actions = ['get_vul_id']
+ title = "Deleted Vulnerabilities"
+
+ def get_queryset(self, request):
+ qs = super().get_queryset(request)
+ return qs.filter(deleted=True)
+
+ def get_vul_id(self, instance):
+ return instance.vul
+ get_vul_id.short_description = "Vul ID"
+
+ def has_delete_permission(self, request, obj=None):
+ if request.user.is_superuser:
+ return True
+ return False
+
+class VulVendorAdmin(admin.ModelAdmin):
+ search_fields = ['case__vuid', 'case__title', 'vendor', 'contact__vendor_name']
+ list_filter = ('deleted', )
+
+ def has_delete_permission(self, request, obj=None):
+ if request.user.is_superuser:
+ return True
+ return False
+
+
+class MessageInline(admin.TabularInline):
+ model = Message
+ fields = ('content', 'created')
+
+ def has_delete_permission(self, request, obj=None):
+ if request.user.is_superuser:
+ return True
+ return False
+
+class ThreadAdmin(admin.ModelAdmin):
+ list_display = ('id', 'subject', 'to_group', 'from_group', 'case')
+ inlines = [MessageInline,]
+
+ def has_delete_permission(self, request, obj=None):
+ if request.user.is_superuser:
+ return True
+ return False
+
+class CaseMemberAdmin(admin.ModelAdmin):
+ search_fields = ['case__vuid', 'case__title', 'group__groupcontact__contact__vendor_name', 'participant__email']
+
+class VUReportInline(admin.TabularInline):
+ model = VUReport
+
+ def has_delete_permission(self, request, obj=None):
+ if request.user.is_superuser:
+ return True
+ return False
+
+class TrackVulNoteAdmin(admin.ModelAdmin):
+ search_fields = ['case__vuid', 'case__title']
+ list_display = ['case']
+
+ def has_delete_permission(self, request, obj=None):
+ if request.user.is_superuser:
+ return True
+ return False
+
+class VulNoteAdmin(admin.ModelAdmin):
+ search_fields = ['vuid', 'title']
+ list_display = ['vuid', 'title']
+ fields = ['vuid', 'title', 'dateupdated', 'datefirstpublished', 'revision_number', 'publicdate', 'published']
+ readonly_fields = ['vuid', 'title', 'dateupdated', 'datefirstpublished', 'revision_number']
+
+ def has_delete_permission(self, request, obj=None):
+ if request.user.is_superuser:
+ return True
+ return False
+
+class VUReportAdmin(admin.ModelAdmin):
+ search_fields = ['vuid', 'name', 'idnumber']
+ list_display = ('vuid', 'name',)
+ readonly_fields = ['vuid', 'idnumber', 'name', 'overview', 'vulnote', 'search_vector', 'clean_desc', 'impact', 'resolution', 'workarounds', 'sysaffected', 'thanks', 'author', 'public']
+
+ def has_delete_permission(self, request, obj=None):
+ if request.user.is_superuser:
+ return True
+ return False
+
+class VulPubAdmin(admin.ModelAdmin):
+
+ def has_delete_permission(self, request, obj=None):
+ if request.user.is_superuser:
+ return True
+ return False
+
+
+class VulPubVendorAdmin(admin.ModelAdmin):
+ search_fields = ['vendor']
+
+ def has_delete_permission(self, request, obj=None):
+ if request.user.is_superuser:
+ return True
+ return False
+
+class VulPubVendorRecord(admin.ModelAdmin):
+ search_fields = ['vendor', 'vuid', 'idnumber']
+
+ def has_delete_permission(self, request, obj=None):
+ if request.user.is_superuser:
+ return True
+ return False
+
+class VTCaseRequestAdmin(admin.ModelAdmin):
+ list_display = ['vrf_id', 'product_name', 'vendor_name', 'user', 'new_vuid','date_submitted', 'coordinator']
+ search_fields = ['vrf_id', 'product_name', 'new_vuid', 'vendor_name']
+
+
+class TagManagerAdmin(admin.ModelAdmin):
+ list_display = ['tag', 'description', 'tag_type', 'team']
+ search_fields = ['tag', 'description']
+
+class GroupInline(admin.StackedInline):
+ model = GroupSettings
+ can_delete = False
+ verbose_name_plural = 'Group Settings'
+
+class GroupAdmin(BaseGroupAdmin):
+ inlines = (GroupInline, )
+ list_display = ('name', 'get_org_name')
+
+ def get_org_name(self, instance):
+ if instance.groupsettings:
+ return instance.groupsettings.organization
+
+ return "-"
+ get_org_name.short_description = "Organization Name"
+
+class BounceAdmin(admin.ModelAdmin):
+ list_display = ['email', 'ticket', 'bounce_date', 'bounce_type', 'action_taken']
+ search_fields = ['email', 'subject']
+
+admin.site.login = staff_member_required(COGLoginView.as_view(template_name='vince/admin_login.html'), login_url = settings.LOGIN_URL)
+admin.site.logout = auth_views.LogoutView.as_view(template_name='vince/tracklogout.html')
+
+admin.site.site_header = "VinceTrack Admin"
+admin.site.site_title = "VinceTrack Admin Portal"
+admin.site.index_title = "Welcome to VinceTrack Portal"
+admin.site.site_url = "/vince/dashboard/"
+
+admin.site.unregister(User)
+admin.site.register(User, CustomUserAdmin)
+admin.site.unregister(Group)
+admin.site.register(Group, GroupAdmin)
+admin.site.register(CaseTemplate)
+admin.site.register(Contact, ContactAdmin)
+admin.site.register(Vulnerability, VulAdmin)
+admin.site.register(VinceSMIMECertificate)
+#admin.site.register(TicketThread)
+admin.site.register(AdminPGPEmail, AdminPGPEmailAdmin)
+#admin.site.register(Artifact)
+admin.site.register(VulnerableVendor, VulVendorAdmin)
+admin.site.register(Thread, ThreadAdmin)
+admin.site.register(VulnerabilityNote, VulNoteAdmin)
+admin.site.register(VUReport, VUReportAdmin)
+admin.site.register(NoteVulnerability, VulPubAdmin)
+admin.site.register(Vendor, VulPubVendorAdmin)
+admin.site.register(VendorRecord, VulPubVendorRecord)
+admin.site.register(UserRole)
+admin.site.register(ContactAssociation)
+admin.site.register(TagManager, TagManagerAdmin)
+admin.site.register(VinceReminder, ReminderAdmin)
+admin.site.register(VTCaseRequest, VTCaseRequestAdmin)
+admin.site.register(CalendarEvent)
+admin.site.register(VulNote, TrackVulNoteAdmin)
+admin.site.register(CaseMember, CaseMemberAdmin)
+admin.site.register(VendorAction)
+admin.site.register(BounceEmailNotification, BounceAdmin)
diff --git a/vince/apps.py b/vince/apps.py
new file mode 100644
index 0000000..bbc5223
--- /dev/null
+++ b/vince/apps.py
@@ -0,0 +1,36 @@
+#########################################################################
+# VINCE
+#
+# Copyright 2022 Carnegie Mellon University.
+#
+# NO WARRANTY. THIS CARNEGIE MELLON UNIVERSITY AND SOFTWARE ENGINEERING
+# INSTITUTE MATERIAL IS FURNISHED ON AN "AS-IS" BASIS. CARNEGIE MELLON
+# UNIVERSITY MAKES NO WARRANTIES OF ANY KIND, EITHER EXPRESSED OR IMPLIED,
+# AS TO ANY MATTER INCLUDING, BUT NOT LIMITED TO, WARRANTY OF FITNESS FOR
+# PURPOSE OR MERCHANTABILITY, EXCLUSIVITY, OR RESULTS OBTAINED FROM USE OF THE
+# MATERIAL. CARNEGIE MELLON UNIVERSITY DOES NOT MAKE ANY WARRANTY OF ANY KIND
+# WITH RESPECT TO FREEDOM FROM PATENT, TRADEMARK, OR COPYRIGHT INFRINGEMENT.
+#
+# Released under a MIT (SEI)-style license, please see license.txt or contact
+# permission@sei.cmu.edu for full terms.
+#
+# [DISTRIBUTION STATEMENT A] This material has been approved for public
+# release and unlimited distribution. Please see Copyright notice for non-US
+# Government use and distribution.
+#
+# Carnegie Mellon®, CERT® and CERT Coordination Center® are registered in the
+# U.S. Patent and Trademark Office by Carnegie Mellon University.
+#
+# This Software includes and/or makes use of Third-Party Software each subject
+# to its own license.
+#
+# DM21-1126
+########################################################################
+from django.apps import AppConfig
+
+
+class VinceTrackConfig(AppConfig):
+ name = 'vince'
+
+ def ready(self):
+ import vince.signals
diff --git a/vince/celery.py b/vince/celery.py
new file mode 100644
index 0000000..fac8140
--- /dev/null
+++ b/vince/celery.py
@@ -0,0 +1,51 @@
+#########################################################################
+# VINCE
+#
+# Copyright 2022 Carnegie Mellon University.
+#
+# NO WARRANTY. THIS CARNEGIE MELLON UNIVERSITY AND SOFTWARE ENGINEERING
+# INSTITUTE MATERIAL IS FURNISHED ON AN "AS-IS" BASIS. CARNEGIE MELLON
+# UNIVERSITY MAKES NO WARRANTIES OF ANY KIND, EITHER EXPRESSED OR IMPLIED,
+# AS TO ANY MATTER INCLUDING, BUT NOT LIMITED TO, WARRANTY OF FITNESS FOR
+# PURPOSE OR MERCHANTABILITY, EXCLUSIVITY, OR RESULTS OBTAINED FROM USE OF THE
+# MATERIAL. CARNEGIE MELLON UNIVERSITY DOES NOT MAKE ANY WARRANTY OF ANY KIND
+# WITH RESPECT TO FREEDOM FROM PATENT, TRADEMARK, OR COPYRIGHT INFRINGEMENT.
+#
+# Released under a MIT (SEI)-style license, please see license.txt or contact
+# permission@sei.cmu.edu for full terms.
+#
+# [DISTRIBUTION STATEMENT A] This material has been approved for public
+# release and unlimited distribution. Please see Copyright notice for non-US
+# Government use and distribution.
+#
+# Carnegie Mellon®, CERT® and CERT Coordination Center® are registered in the
+# U.S. Patent and Trademark Office by Carnegie Mellon University.
+#
+# This Software includes and/or makes use of Third-Party Software each subject
+# to its own license.
+#
+# DM21-1126
+########################################################################
+from __future__ import absolute_import, unicode_literals
+import os
+from celery import Celery
+from django.conf import settings
+
+# set the default Django settings module for the 'celery' program.
+os.environ.setdefault('DJANGO_SETTINGS_MODULE', 'bigvince.settings')
+
+app = Celery('bigvince', broker='redis://localhost:6379/0')
+
+# Using a string here means the worker doesn't have to serialize
+# the configuration object to child processes.
+# - namespace='CELERY' means all celery-related configuration keys
+# should have a `CELERY_` prefix.
+app.config_from_object('django.conf:settings', namespace='CELERY')
+
+# Load task modules from all registered Django app configs.
+app.autodiscover_tasks(lambda: settings.INSTALLED_APPS)
+
+
+@app.task(bind=True)
+def debug_task(self):
+ print('Request: {0!r}'.format(self.request))
diff --git a/vince/context_processors.py b/vince/context_processors.py
new file mode 100644
index 0000000..35b0584
--- /dev/null
+++ b/vince/context_processors.py
@@ -0,0 +1,53 @@
+#########################################################################
+# VINCE
+#
+# Copyright 2022 Carnegie Mellon University.
+#
+# NO WARRANTY. THIS CARNEGIE MELLON UNIVERSITY AND SOFTWARE ENGINEERING
+# INSTITUTE MATERIAL IS FURNISHED ON AN "AS-IS" BASIS. CARNEGIE MELLON
+# UNIVERSITY MAKES NO WARRANTIES OF ANY KIND, EITHER EXPRESSED OR IMPLIED,
+# AS TO ANY MATTER INCLUDING, BUT NOT LIMITED TO, WARRANTY OF FITNESS FOR
+# PURPOSE OR MERCHANTABILITY, EXCLUSIVITY, OR RESULTS OBTAINED FROM USE OF THE
+# MATERIAL. CARNEGIE MELLON UNIVERSITY DOES NOT MAKE ANY WARRANTY OF ANY KIND
+# WITH RESPECT TO FREEDOM FROM PATENT, TRADEMARK, OR COPYRIGHT INFRINGEMENT.
+#
+# Released under a MIT (SEI)-style license, please see license.txt or contact
+# permission@sei.cmu.edu for full terms.
+#
+# [DISTRIBUTION STATEMENT A] This material has been approved for public
+# release and unlimited distribution. Please see Copyright notice for non-US
+# Government use and distribution.
+#
+# Carnegie Mellon®, CERT® and CERT Coordination Center® are registered in the
+# U.S. Patent and Trademark Office by Carnegie Mellon University.
+#
+# This Software includes and/or makes use of Third-Party Software each subject
+# to its own license.
+#
+# DM21-1126
+########################################################################
+from django.conf import settings
+
+
+def vince_version(request):
+ # return the value you want as a dictionnary. you may add multiple values in there.
+
+ return {'VERSION': settings.VERSION,
+ 'VINCE_DEV_SYSTEM': settings.VINCE_DEV_SYSTEM,
+ 'GOOGLE_SITE_KEY': settings.GOOGLE_SITE_KEY,
+ 'VINCEPUB_URL': settings.VINCEPUB_URL,
+ 'VINCETRACK_URL': settings.VINCETRACK_URL,
+ 'VINCECOMM_URL': settings.VINCECOMM_URL,
+ 'FAVICON': settings.FAVICON,
+ 'WEB_TITLE': settings.WEB_TITLE,
+ 'ORG_NAME': settings.ORG_NAME,
+ 'CONTACT_EMAIL': settings.CONTACT_EMAIL,
+ 'VINCEPUB_BASE_TEMPLATE': settings.VINCEPUB_BASE_TEMPLATE,
+ 'VINCETRACK_BASE_TEMPLATE': settings.VINCETRACK_BASE_TEMPLATE,
+ 'VINCECOMM_BASE_TEMPLATE': settings.VINCECOMM_BASE_TEMPLATE,
+ 'CASE_ID': settings.CASE_IDENTIFIER,
+ 'REPORT_ID': settings.REPORT_IDENTIFIER}
+
+
+
+
diff --git a/vince/dbrouter.py b/vince/dbrouter.py
new file mode 100644
index 0000000..c1f3016
--- /dev/null
+++ b/vince/dbrouter.py
@@ -0,0 +1,129 @@
+#########################################################################
+# VINCE
+#
+# Copyright 2022 Carnegie Mellon University.
+#
+# NO WARRANTY. THIS CARNEGIE MELLON UNIVERSITY AND SOFTWARE ENGINEERING
+# INSTITUTE MATERIAL IS FURNISHED ON AN "AS-IS" BASIS. CARNEGIE MELLON
+# UNIVERSITY MAKES NO WARRANTIES OF ANY KIND, EITHER EXPRESSED OR IMPLIED,
+# AS TO ANY MATTER INCLUDING, BUT NOT LIMITED TO, WARRANTY OF FITNESS FOR
+# PURPOSE OR MERCHANTABILITY, EXCLUSIVITY, OR RESULTS OBTAINED FROM USE OF THE
+# MATERIAL. CARNEGIE MELLON UNIVERSITY DOES NOT MAKE ANY WARRANTY OF ANY KIND
+# WITH RESPECT TO FREEDOM FROM PATENT, TRADEMARK, OR COPYRIGHT INFRINGEMENT.
+#
+# Released under a MIT (SEI)-style license, please see license.txt or contact
+# permission@sei.cmu.edu for full terms.
+#
+# [DISTRIBUTION STATEMENT A] This material has been approved for public
+# release and unlimited distribution. Please see Copyright notice for non-US
+# Government use and distribution.
+#
+# Carnegie Mellon®, CERT® and CERT Coordination Center® are registered in the
+# U.S. Patent and Trademark Office by Carnegie Mellon University.
+#
+# This Software includes and/or makes use of Third-Party Software each subject
+# to its own license.
+#
+# DM21-1126
+########################################################################
+import logging
+import threading
+
+request_cfg = threading.local()
+
+logger = logging.getLogger(__name__)
+logger.setLevel(logging.DEBUG)
+
+class DatabaseRouterMiddleware:
+
+ def __init__(self, get_response):
+ self.get_response = get_response
+
+ def __call__(self, request):
+ response = self.get_response(request)
+
+ return response
+
+ def process_view(self, request, view_func, args, kwargs):
+
+ if "comm" in request.path:
+ request_cfg.cfg = "vincecomm"
+ elif 'vuls' in request.path:
+ request_cfg.cfg = "vincepub"
+ else:
+ if hasattr(request_cfg, 'cfg'):
+ del request_cfg.cfg
+
+ def process_response(self, request, response):
+ if hasattr(request_cfg, 'cfg'):
+ del request_cfg.cfg
+
+ return response
+
+
+class BigVinceRouter(object):
+ """
+ A router to contro all database operations on models in the vince application
+ """
+
+ def _default_db(self):
+
+ if hasattr(request_cfg, 'cfg'):
+ return request_cfg.cfg
+ else:
+ return None
+
+ def db_for_read(self, model, **hints):
+ """
+ If model is vince-track(bigvince), then use default database
+ """
+ if model._meta.app_label=="vinny":
+ return 'vincecomm'
+ elif model._meta.app_label == "cogauth":
+ return 'vincecomm'
+ elif model._meta.app_label=="vincepub":
+ return 'vincepub'
+ elif model._meta.app_label == "vince":
+ return None
+ return self._default_db()
+
+ def db_for_write(self, model, **hints):
+ """
+ If model is vince-track(bigvince), then use default database
+ """
+ if model._meta.app_label=="vinny":
+ return 'vincecomm'
+ elif model._meta.app_label=='cogauth':
+ return 'vincecomm'
+ elif model._meta.app_label == 'vincepub':
+ return 'vincepub'
+ elif model._meta.app_label == "vince":
+ return None
+ return self._default_db()
+
+ def allow_relation(self, obj1, obj2, **hints):
+ if obj1._meta.app_label == obj2._meta.app_label:
+ return True
+ if (obj1._meta.app_label in ['vincecomm', 'vinny']) and (obj2._meta.app_label in ['vincecomm', 'vinny']):
+ return False
+ return True
+
+ def allow_migrate(self, db, app_label, model_name=None, **hints):
+ """
+ All non-vincetrack models end up in this pool
+ """
+ return True
+#
+# if db == "vincecomm":
+# if app_label in ["vinny", "auth", "admin", "sessions", "contenttypes"]:
+# return True
+# else:
+# return False
+# else:
+# if app_label == "vinny":
+# return False
+# else:
+# return True
+#
+
+
diff --git a/vince/fixtures/EmailTemplate.json b/vince/fixtures/EmailTemplate.json
new file mode 100644
index 0000000..ec6cf37
--- /dev/null
+++ b/vince/fixtures/EmailTemplate.json
@@ -0,0 +1,2657 @@
+[
+{
+ "model": "vince.emailtemplate",
+ "pk": 1,
+ "fields": {
+ "template_name": "assigned_cc",
+ "subject": "(Assigned)",
+ "heading": "Ticket Assigned",
+ "plain_text": "Hello,\r\n\r\nThis is a courtesy e-mail to let you know that ticket {{ ticket.ticket }} (\"{{ ticket.title }}\") for {{ ticket.submitter_email }} has been {% if ticket.assigned_to %}assigned to {{ ticket.assigned_to }}{% else %}unassigned{% endif %}.\r\n\r\nTicket ID: {{ ticket.ticket }}\r\nQueue: {{ queue.title }}\r\nTitle: {{ ticket.title }}\r\nOpened: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\nSubmitter: {{ ticket.submitter_email|default:\"Unknown\" }}\r\nPriority: {{ ticket.get_priority_display }}\r\nStatus: {{ ticket.get_status }}\r\nAssigned to: {% if ticket.assigned_to %}{{ ticket.assigned_to }}{% else %}Unassigned{% endif %}\r\nView Online: {{ ticket.staff_url }}",
+ "html": "")
+ }
+ else:
+ title = _('Ticket Opened')
+
+ followup = self._create_follow_up(ticket, title=title, user=user)
+ followup.save()
+ logger.debug(f"followup: {followup}")
+ files = self._attach_files_to_follow_up(followup)
+ send_newticket_mail(followup, None, user=user)
+ return ticket
+
+
+
+class TicketCCForm(forms.ModelForm):
+ ''' Adds either an email address or helpdesk user as a CC on a Ticket. Used for processing POST requests. '''
+
+ class Meta:
+ model = TicketCC
+ exclude = ('ticket',)
+
+ def __init__(self, *args, **kwargs):
+ super(TicketCCForm, self).__init__(*args, **kwargs)
+ if helpdesk_settings.HELPDESK_STAFF_ONLY_TICKET_CC:
+ users = User.objects.filter(is_active=True, is_staff=True).order_by(User.USERNAME_FIELD)
+ else:
+ users = User.objects.filter(is_active=True).order_by(User.USERNAME_FIELD)
+ self.fields['user'].queryset = users
+
+
+class TicketCCUserForm(forms.ModelForm):
+ ''' Adds a helpdesk user as a CC on a Ticket '''
+
+ def __init__(self, *args, **kwargs):
+ super(TicketCCUserForm, self).__init__(*args, **kwargs)
+ if helpdesk_settings.HELPDESK_STAFF_ONLY_TICKET_CC:
+ users = User.objects.filter(is_active=True, is_staff=True).order_by(User.USERNAME_FIELD)
+ else:
+ users = User.objects.filter(is_active=True).order_by(User.USERNAME_FIELD)
+ self.fields['user'].queryset = users
+
+ class Meta:
+ model = TicketCC
+ exclude = ('ticket', 'email',)
+
+
+class TicketCCEmailForm(forms.ModelForm):
+ ''' Adds an email address as a CC on a Ticket '''
+
+ def __init__(self, *args, **kwargs):
+ super(TicketCCEmailForm, self).__init__(*args, **kwargs)
+
+ class Meta:
+ model = TicketCC
+ exclude = ('ticket', 'user',)
+
+class CloseTicketForm(forms.Form):
+ ''' Adds a close reason to a ticket '''
+
+ close_choice = forms.ChoiceField(
+ choices=Ticket.CLOSE_CHOICES,
+ label=_("Provide reason"),
+ required=False)
+ send_email = forms.ChoiceField(
+ choices=[(1, "No"), (2, 'Send Email'), (3, 'Send Message')],
+ label=_("Notify Submitter?"),
+ widget=forms.RadioSelect(attrs={'class': 'ul_nobullet'}),
+ required=True)
+ email_template = forms.ChoiceField(
+ choices=(),
+ label="Choose an email template to send to submitter",
+ required=False)
+ email = forms.CharField(
+ label="Edit Email",
+ widget=forms.Textarea(attrs={'rows': 8}),
+ required=False)
+ comment = forms.CharField(
+ max_length=20000,
+ widget=forms.HiddenInput(),
+ required=False)
+ new_status = forms.IntegerField(
+ required=False,
+ widget=forms.HiddenInput())
+
+ def __init__(self, *args, **kwargs):
+ super(CloseTicketForm, self).__init__(*args, **kwargs)
+ self.fields['send_email'].initial=1
+ self.fields['close_choice'].initial = 2
+
+class TicketDependencyForm(forms.ModelForm):
+ ''' Adds a different ticket as a dependency for this Ticket '''
+
+ class Meta:
+ model = TicketDependency
+ exclude = ('ticket',)
+
+class CaseDependencyForm(forms.ModelForm):
+ ''' Adds a different ticket as a dependency for this Case '''
+
+ class Meta:
+ model = CaseDependency
+ exclude = ('case',)
+
+
+WHY_NOT_CHOICES = [(1, 'Reporter has not attempted to contact any vendors'),
+ (2, 'Reporter is unable to find contact information for a vendor'),
+ (3, 'Other')]
+YES_NO_CHOICES = [(1, "YES"), (2, "NO")]
+
+class CreateCaseRequestForm(forms.ModelForm):
+ ''' Creates a new case request '''
+ ticket_ref = forms.IntegerField(required=False, widget=forms.HiddenInput())
+ vrf_id = forms.CharField(widget=forms.HiddenInput(), required=False)
+ date_submitted = forms.DateTimeField(widget=forms.HiddenInput(), required=False)
+ title = forms.CharField(widget=forms.HiddenInput(), required=False)
+ status = forms.IntegerField(required=False, widget=forms.HiddenInput())
+ create_case = forms.IntegerField(
+ widget=forms.HiddenInput(),
+ required=False)
+
+ queue = forms.IntegerField(
+ widget=forms.HiddenInput(),
+ label=_('Queue'),
+ required=True,
+ )
+ share_release = forms.ChoiceField(
+ choices=[(True, 'Yes'), (False, 'No')],
+ label='Do you want us to share your contact information with vendors?',
+ help_text='We will share contact information with vendors unless otherwise specified.',
+ required=False)
+ credit_release = forms.ChoiceField(
+ choices=[(True, 'Yes'), (False, 'No')],
+ label='Do you want to be acknowledged by name in any published document about this vulnerability?',
+ help_text='If we publish a document based on this report, we will credit you unless otherwise specified.',
+ required=False)
+ comm_attempt = forms.ChoiceField(
+ choices=[(True, 'Yes'), (False, 'No')],
+ label='Have you contacted the vendor about this vulnerability?',
+ required=False)
+ why_no_attempt = forms.ChoiceField(
+ choices=WHY_NOT_CHOICES, label="Why has the vendor not been contacted directly?",
+ widget=forms.RadioSelect(attrs={'class': 'ul_nobullet'}),
+ required=False)
+ first_contact = forms.DateField(
+ label="Date of First Contact Attempt",
+ input_formats=['%Y-%m-%d'],
+ widget=forms.DateInput(attrs={'placeholder':'YYYY-MM-DD', 'autocomplete':'off'}),
+ required=False)
+ vul_exploited = forms.ChoiceField(
+ choices=[(True, 'Yes'), (False, 'No')],
+ label='Is there evidence that this vulnerability is being actively exploited?',
+ required=False)
+ vul_public = forms.ChoiceField(
+ choices=[(True, 'Yes'), (False, 'No')],
+ label="Is this vulnerability publicly known?",
+ required=False)
+ vul_disclose = forms.ChoiceField(
+ choices=[(True, 'Yes'), (False, 'No')],
+ label='Do you plan to publicly disclose this vulnerability yourself?',
+ required=False)
+ disclosure_plans = forms.CharField(
+ max_length=1000,
+ label="What are your public disclosure plans? (max 1000 chars)",
+ widget=forms.Textarea(attrs={'placeholder': 'Include dates and events if applicable'}),
+ required=False)
+ exploit_references = forms.CharField(
+ max_length=20000,
+ label="Please provide references",
+ required=False,
+ widget=forms.Textarea(attrs={'placeholder': 'URL(s)'}))
+ public_references = forms.CharField(
+ max_length=1000,
+ label="Please provide references (max 1000 chars)",
+ widget=forms.Textarea(attrs={'placeholder': 'URL(s)'}),
+ required=False)
+ request_type = forms.ChoiceField(
+ choices=[(1, 'Vulnerability'),(3, 'US Gov Vulnerability')],
+ label=_('What type of request is this?'),
+ required=False)
+
+ class Meta:
+ model = CaseRequest
+ exclude = ('search_vector', 'vc_id', 'close_reason')
+
+ def __init__(self, *args, **kwargs):
+ super(CreateCaseRequestForm, self).__init__(*args, **kwargs)
+ self.fields['vul_public'].initial = False
+ self.fields['vul_exploited'].initial = False
+
+ def clean_queue(self):
+ data = self.cleaned_data['queue']
+ if data in [None, '', 'None']:
+ return self.ValidationError("must pick a queue")
+ else:
+ queue = TicketQueue.objects.get(id=int(data))
+ return queue
+
+ def save(self, user=None, submission=None, queue=None):
+ #submission is the full text returned from VRF
+ #queue_name can be the name of a queue to save the CR in.
+ logger.debug(self.cleaned_data)
+# case_fields = ['title', 'queue', 'created', 'modified', 'submitter_email', 'assigned_to', 'status', 'on_hold', 'description', 'resolution', 'priority', 'due_date']
+# for field in case_fields:
+# self.cleaned_data.pop(field)
+# logger.debug(self.cleaned_data)
+ newCR = {}
+
+ assigned_to = None
+
+ if user:
+ user_email = user.email
+ assigned_to = user
+ elif self.cleaned_data.get('contact_email'):
+ user_email = self.cleaned_data.get('contact_email')
+ else:
+ user_email = ""
+
+ if self.cleaned_data['share_release'] == "True":
+ newCR['share_release'] = True
+ else:
+ newCR['share_release'] = False
+ if self.cleaned_data['credit_release'] == "True":
+ newCR['credit_release'] = True
+ else:
+ newCR['credit_release'] = False
+ if self.cleaned_data['comm_attempt'] == "True":
+ newCR['comm_attempt'] = True
+ else:
+ newCR['comm_attempt'] = False
+ if self.cleaned_data['vul_public'] == "True":
+ newCR['vul_public'] = True
+ else:
+ newCR['vul_public'] = False
+ if self.cleaned_data['vul_disclose'] == "True":
+ newCR['vul_disclose'] = True
+ else:
+ newCR['vul_disclose'] = False
+ if self.cleaned_data['vul_exploited'] == "True":
+ newCR['vul_exploited'] = True
+ else:
+ newCR['vul_exploited'] = False
+
+
+
+ priority = 3
+ due_date = None
+
+ description = "New CR"
+
+ if submission:
+ description = submission
+
+ ticket = None
+ if self.cleaned_data.get('ticket_ref'):
+ ticket = Ticket.objects.filter(id = int(self.cleaned_data['ticket_ref'])).first()
+ if ticket:
+ assigned_to = ticket.assigned_to
+ priority = ticket.priority
+ description = ticket.description
+ if ticket.submitter_email:
+ user_email = ticket.submitter_email
+ if ticket.due_date:
+ due_date = ticket.due_date
+ else:
+ due_date = None
+
+
+ if queue:
+ logger.debug("GETTING QUEUE FROM PARAMETERS")
+ ticketqueue = TicketQueue.objects.filter(id = queue).first()
+ else:
+ logger.debug("GETTING QUEUE FROM DATA")
+ ticketqueue = self.cleaned_data['queue']
+
+ if ticketqueue == None:
+ logger.warning("NO QUEUE this will fail.")
+ else:
+ logger.debug("Adding CR on queue %s" % ticketqueue.title)
+
+
+ newCase = CaseRequest(vrf_id = self.cleaned_data['vrf_id'],
+ share_release = newCR['share_release'],
+ credit_release = newCR['credit_release'],
+ comm_attempt = newCR['comm_attempt'],
+ vul_public = newCR['vul_public'],
+ vul_disclose = newCR['vul_disclose'],
+ vul_exploited = newCR['vul_exploited'],
+ contact_name = self.cleaned_data['contact_name'],
+ contact_org = self.cleaned_data['contact_org'],
+ contact_email = self.cleaned_data['contact_email'],
+ contact_phone = self.cleaned_data['contact_phone'],
+ why_no_attempt = self.cleaned_data['why_no_attempt'],
+ please_explain = self.cleaned_data['please_explain'],
+ vendor_name = self.cleaned_data['vendor_name'],
+ first_contact = self.cleaned_data['first_contact'],
+ vendor_communication = self.cleaned_data['vendor_communication'],
+ product_name = self.cleaned_data['product_name'],
+ product_version = self.cleaned_data['product_version'],
+ ics_impact = self.cleaned_data['ics_impact'],
+ vul_description = self.cleaned_data['vul_description'],
+ vul_exploit = self.cleaned_data['vul_exploit'],
+ vul_impact = self.cleaned_data['vul_impact'],
+ vul_discovery = self.cleaned_data['vul_discovery'],
+ public_references = self.cleaned_data['public_references'],
+ exploit_references = self.cleaned_data['exploit_references'],
+ disclosure_plans = self.cleaned_data['disclosure_plans'],
+ tracking = self.cleaned_data['tracking'],
+ comments = self.cleaned_data['comments'],
+ submission_type = self.cleaned_data['submission_type'],
+ multiplevendors = self.cleaned_data['multiplevendors'],
+ title = self.cleaned_data['product_name'],
+ queue = ticketqueue,
+ description = description,
+ submitter_email = user_email,
+ created=timezone.now(),
+ status = Ticket.OPEN_STATUS,
+ priority = priority)
+
+
+ newCase.save()
+ if assigned_to:
+ newCase.assigned_to = assigned_to
+ newCase.save()
+
+ if due_date:
+ newCase.due_date = due_date
+ newCase.save()
+
+ if self.cleaned_data['date_submitted']:
+ newCase.date_submitted = self.cleaned_data['date_submitted']
+ newCase.save()
+
+ if ticket:
+ if ticket.case:
+ newCase.case = ticket.case
+ newCase.status = Ticket.CLOSED_STATUS
+ newCase.save()
+ tktcr = Ticket.objects.filter(id=newCase.id).first()
+ newCase.case.case_request = tktcr
+ newCase.case.save()
+
+ ticket.delete()
+ followup = FollowUp(ticket=newCase, title=_('Ticket Opened'), user=user)
+ followup.save()
+
+ send_newticket_mail(followup, None, user=user)
+
+# files = self._attach_files_to_follow_up(followup)
+# self._send_messages(ticket=newCase,
+# queue=newCase.queue,
+# followup=followup,
+# files=files,
+# user=user)
+
+ return newCase
+
+class CreateCaseForm(forms.ModelForm):
+ ''' Creates a new case '''
+ title = forms.CharField(
+ max_length=100,
+ required=False,
+ widget=forms.TextInput(attrs={'class': 'form-control'}),
+ help_text='The title of this vulnerability note. (Can be changed later).',
+ label=_('Title'),
+ )
+ summary = forms.CharField(
+ max_length=1000,
+ required=True,
+ help_text='The placeholder text is taken from the description in the case request.',
+ widget=forms.Textarea(attrs={'class': 'form-control'}),
+ label=_('Summary'),
+ )
+ case_request = forms.IntegerField(
+ required=False,
+ widget=forms.HiddenInput())
+ owner = forms.CharField(required=False, widget=forms.HiddenInput())
+ created = forms.CharField(required=False, widget=forms.HiddenInput())
+ vuid = forms.IntegerField(
+ required=True,
+ label=_('Case ID'),
+ )
+ template = forms.ChoiceField(
+ widget=forms.Select(attrs={'class': 'form-control'}),
+ choices=(),
+ required=False,
+ label=_('Use template'),
+ help_text='Choose a template to automatically create tasks for this case (Optional)',
+ )
+
+ #YES the choices are backwards. If lotus_notes is True then we won't be moving this case to Comm
+ lotus_notes = forms.ChoiceField(
+ choices=[(False, 'Yes'), (True, 'No')],
+ label=_('Do you want to create this case in VINCEComm?'),
+ help_text=_('If you check No, this case will not be created in VINCEComm (i.e. no collaborative coordination)'),
+ required=True,
+ widget=forms.RadioSelect(attrs={'class':'ul_nobullet horizontal_bullet'}))
+
+ auto_assign = forms.ChoiceField(
+ choices=[(True, 'Yes'), (False, 'No')],
+ label=_('Do you want to auto assign this case?'),
+ help_text=_('You will be assigned this case unless you choose to auto assign it.'),
+ required=True,
+ widget=forms.RadioSelect(attrs={'class':'ul_nobullet horizontal_bullet'
+}))
+
+ role = forms.ChoiceField(
+ choices=(),
+ label='Which role would you like to assign to this case?',
+ widget=forms.RadioSelect(attrs={'class':'ul_nobullet'}),
+ required=False)
+
+ field_order = ['vuid', 'title', 'team_owner', 'product_name', 'product_version', 'summary', 'template', 'lotus_notes', 'auto_assign', 'role']
+
+
+ def get_group_choices(self, user):
+ return [(q.id , q.name) for q in user.groups.exclude(groupsettings__contact__isnull=True)]
+
+ def __init__(self, *args, **kwargs):
+ user = kwargs.pop("user")
+ super(CreateCaseForm, self).__init__(*args, **kwargs)
+ self.fields['product_version'].required=False
+ self.fields['lotus_notes'].initial = False
+ self.fields['auto_assign'].initial = False
+ self.fields['team_owner'].choices = self.get_group_choices(user)
+
+ class Meta:
+ model = VulnerabilityCase
+ exclude = ('created', 'owner', 'case_request', 'due_date', 'status', 'modified', 'on_hold', 'search_vector', 'vul_incrementer', 'publicdate', 'publicurl', 'changes_to_publish')
+
+ def create_action(self, case, title, user=None):
+ action = CaseAction(case=case,
+ title=title,
+ date=timezone.now(),
+ comment=self.cleaned_data['summary'],
+ action_type = 1)
+ if user:
+ action.user = user
+ return action
+
+ def clean_template(self):
+ data = self.cleaned_data['template']
+ if data in [None, '', 'None']:
+ return None
+ else:
+ template = CaseTemplate.objects.get(id=int(data))
+ return template
+
+
+ def save(self, case=None, user=None, ticket=None):
+ """
+ Writes and returns a VulnerabilityCase() object
+ """
+ logger.debug("IN CASE FORM SAVE!!!")
+ if self.cleaned_data['lotus_notes'] == 'True':
+ lotus = True
+ else:
+ lotus = False
+
+
+ newcase = VulnerabilityCase(title=self.cleaned_data['title'],
+ summary=self.cleaned_data['summary'],
+ case_request=case,
+ product_name = self.cleaned_data['product_name'],
+ product_version = self.cleaned_data['product_version'],
+ owner=user,
+ team_owner = self.cleaned_data['team_owner'],
+ lotus_notes=lotus,
+ created=timezone.now(),
+ due_date = date.today()+timedelta(days=45),
+ vuid=self.cleaned_data['vuid'])
+ newcase.save()
+
+ #don't create a due date on a weekday
+ if newcase.due_date.weekday() >= 5: #sunday = 6
+ newcase.due_date = newcase.due_date+timedelta(days=(7-newcase.due_date.weekday()))
+ newcase.save()
+
+ assignment = CaseAssignment(assigned=user,
+ case=newcase)
+ assignment.save()
+ title = _('Case Opened')
+ action = self.create_action(newcase,title=title,user=user)
+ action.save()
+
+ if self.cleaned_data['template']:
+ template = self.cleaned_data['template']
+ newcase.template = template
+ newcase.save()
+ for task in CaseTask.objects.filter(template=template):
+ ticket = Ticket(title = task.task_title,
+ created = timezone.now(),
+ status = Ticket.OPEN_STATUS,
+ queue = template.queue,
+ description = task.task_description,
+ priority = task.task_priority,
+ case = newcase)
+ ticket.save()
+ if task.assigned_to:
+ ticket.assigned_to = task.assigned_to
+ ticket.save()
+ else:
+ # if the task is unassigned in the template,
+ # then assign it to the person creating the case
+ ticket.assigned_to = user
+ ticket.save()
+ # create dependencies
+ if task.dependency:
+ dep = CaseDependency(case=newcase, depends_on=ticket)
+ dep.save()
+ title = _("Ticket Opened By %s Template" % template.title)
+ fup = FollowUp(ticket=ticket,
+ title=title,
+ date=timezone.now(),
+ comment=task.task_title)
+ if user:
+ fup.user = user
+ fup.save()
+
+ #now close caserequest
+ if case:
+ old_status_str = case.get_status_display()
+ case.status = Ticket.CLOSED_STATUS
+ case.case = newcase
+ case.close_reason = 1
+ case.save()
+ comment = f"Closed case request. Created Case {settings.CASE_IDENTIFIER}{self.cleaned_data['vuid']}"
+ title = "%s" % case.get_status_display()
+ fup = FollowUp(ticket=case,
+ title=title,
+ date=timezone.now(),
+ comment=comment)
+ if user:
+ fup.user = user
+ fup.save()
+ c = TicketChange(
+ followup=fup,
+ field=_('Status'),
+ old_value=old_status_str,
+ new_value=case.get_status_display()
+ )
+ c.save()
+ # SEND EMAIL TO PARTICIPANT HERE!!!!
+ # look up vrf in vincecomm so we can see if we can add submitter to participants
+ cr = CaseRequest.objects.filter(id=case.id).first()
+ if cr:
+ vc_cr = VTCaseRequest.objects.filter(vrf_id=cr.vrf_id).first()
+ if vc_cr:
+ if user:
+ vc_user = User.objects.using('vincecomm').filter(username=user.username).first()
+ else:
+ vc_user = None
+
+ # update with new ID
+ vc_cr.new_vuid = newcase.vuid
+ vc_cr.status = VTCaseRequest.OPEN_STATUS
+ vc_cr.save()
+
+ cr = CRFollowUp(cr = vc_cr,
+ title = "Report status changed from Pending to Open",
+ user = vc_user,
+ comment = f"Case {settings.CASE_IDENTIFIER}{newcase.vuid} Opened")
+ cr.save()
+
+ if vc_cr.user:
+ cp = CaseParticipant(case=newcase,
+ user_name=vc_cr.user.username,
+ added_by=user)
+ cp.save()
+ ca = CaseAction(case=newcase, title="Participant Auto-added to Case",
+ user=user, action_type=1)
+ ca.save()
+
+
+ #create case permissions
+ if case or ticket:
+ if ticket:
+ #this case was formed from a general ticket, use queue perms to determine
+ #case perms
+ case=ticket
+ # get queue permissions and copy to case permissions
+ perms = QueuePermissions.objects.filter(queue=case.queue)
+ for perm in perms:
+ # if you're creating a case from a CR,
+ # permissions are transferred from the queue permissions
+ cp = CasePermissions(case=newcase,
+ group=perm.group,
+ group_read=perm.group_read,
+ group_write=perm.group_write,
+ publish=perm.publish)
+ cp.save()
+ elif user:
+ for group in user.groups.exclude(groupsettings__isnull=True):
+ # if you're creating a case from scratch,
+ # all members of your group have r/w and publish is disabled
+ # a superuser can enable publish
+ cp = CasePermissions(case=newcase,
+ group=group,
+ group_read=True,
+ group_write=True,
+ publish=group.groupsettings.publish)
+ cp.save()
+
+
+
+ return newcase
+
+class EditCaseForm(forms.ModelForm):
+ lotus_notes = forms.BooleanField(
+ label=_('Do not create this case in VINCEComm.'),
+ help_text=_('If you check this box, this case will never be transferred to VINCEComm (i.e. no collaborative coordination)'),
+ required=False)
+
+ publicdate = forms.DateTimeField(
+ label=_('Date Public'),
+ widget=forms.TextInput(attrs={'class': 'form-control', 'autocomplete': 'off'}),
+ help_text=_('The date this vulnerability became public.'),
+ required=False)
+
+ due_date = forms.DateTimeField(
+ label=_('Due Date'),
+ widget=forms.TextInput(attrs={'class': 'form-control', 'autocomplete': 'off'}),
+ help_text=_('Estimated Public Date'),
+ required=False)
+
+ field_order = ['vuid', 'title', 'product_name', 'product_version', 'summary', 'publicdate', 'publicurl', 'template', 'lotus_notes']
+
+ class Meta:
+ model = VulnerabilityCase
+ exclude = ('vuid', 'created', 'modified', 'status', 'on_hold', 'case_request', 'search_vector', 'vul_incrementer', 'changes_to_publish')
+ widgets = {
+ 'summary' : forms.Textarea(attrs={'rows': 4})
+ }
+
+ def get_group_choices(self, user):
+ return [(q.id , q.name) for q in user.groups.exclude(groupsettings__contact__isnull=True)]
+
+ def __init__(self, *args, **kwargs):
+ user = kwargs.pop("user")
+ super(EditCaseForm, self).__init__(*args, **kwargs)
+ self.fields['team_owner'].choices = self.get_group_choices(user)
+
+class AssignTicketTeamForm(forms.Form):
+
+ team = forms.ChoiceField(
+ choices=(),
+ widget=forms.RadioSelect(attrs={'class': 'ul_nobullet'}),
+ required=False,
+ label=_('Assign a Team'),
+ )
+
+class RejectCaseTransferForm(forms.Form):
+
+ reason = forms.CharField(
+ widget=forms.Textarea(attrs={'placeholder': 'Provide reason for transfer rejection'}),
+ required=True,
+ label=_('Reason for Rejection of Transfer'),
+ )
+
+class RequestCaseTransferForm(forms.Form):
+
+ team = forms.ChoiceField(
+ choices=(),
+ widget=forms.RadioSelect(attrs={'class': 'ul_nobullet'}),
+ label=_('Assign a Team'),
+ )
+
+ reason = forms.CharField(
+ widget=forms.Textarea(attrs={'placeholder': 'Provide reason for transfer'}),
+ required=False,
+ label=_('Reason for Transfer'),
+ )
+
+
+class VulCVSSForm(forms.ModelForm):
+
+ class Meta:
+ model = VulCVSS
+ exclude = ('user', 'last_modified', 'vector', 'severity', 'score')
+ widgets = {
+ 'vul': forms.HiddenInput()
+ }
+
+class EditTicketResolutionForm(forms.Form):
+
+ resolution = forms.CharField(
+ widget = forms.Textarea(),
+ required=False)
+
+
+class EditTicketForm(forms.ModelForm):
+
+ case = forms.CharField(
+ max_length=250,
+ label=_('Case'),
+ required=False,
+ help_text=_(f'If this ticket is associated with a specific Case, add it here. [{settings.CASE_IDENTIFIER}nnnnnn]'),
+ )
+
+ due_date = forms.DateTimeField(
+ widget=forms.TextInput(attrs={'class': 'form-control', 'autocomplete': 'off'}),
+ required=False,
+ label=_('Due on'),
+ )
+
+ class Meta:
+ model = Ticket
+ exclude = ('created', 'modified', 'status', 'on_hold', 'resolution', 'assigned_to', 'search_vector', 'close_reason')
+
+ def __init__(self, *args, **kwargs):
+ super(EditTicketForm, self).__init__(*args, **kwargs)
+
+ def clean_case(self):
+ data = self.cleaned_data['case']
+ if data in [None, '', 'None']:
+ return
+ else:
+ if data.startswith(settings.CASE_IDENTIFIER):
+ data = data[len(settings.CASE_IDENTIFIER):]
+ try:
+ case = VulnerabilityCase.objects.get(vuid=data)
+ return case
+ except:
+ raise forms.ValidationError("Invalid Case Selection")
+
+class TicketContactForm(forms.ModelForm):
+
+ contact = forms.CharField(
+ max_length=250,
+ label=_('Contact'),
+ required=False,
+ help_text=_('If this ticket is associated with a Contact, add it here.')
+ )
+
+ def clean_contact(self):
+ data = self.cleaned_data['contact']
+ if data in [None, '', 'None']:
+ return
+ try:
+ contact = Contact.objects.filter(vendor_name=data, active=True).first()
+ return contact
+ except:
+ print(traceback.format_exc())
+ raise forms.ValidationError("Invalid Contact")
+
+ def __init__(self, *args, **kwargs):
+ super(TicketContactForm, self).__init__(*args, **kwargs)
+
+ class Meta:
+ model = TicketContact
+ fields = ['id', 'contact']
+
+class EditCaseRequestForm(forms.ModelForm):
+ ticket_ref = forms.IntegerField(required=False, widget=forms.HiddenInput())
+ share_release = forms.ChoiceField(
+ choices=[(True, 'Yes'), (False, 'No')],
+ label='Do you want us to share your contact information with vendors?',
+ help_text='We will share contact information with vendors unless otherwise specified.',
+ required=True)
+ first_contact = forms.DateField(
+ label="Date of First Contact Attempt",
+ input_formats=['%Y-%m-%d'],
+ widget=forms.DateInput(attrs={'placeholder':'YYYY-MM-DD', 'autocomplete':'off'}),
+ required=False)
+ credit_release = forms.ChoiceField(
+ choices=[(True, 'Yes'), (False, 'No')],
+ label='Do you want to be acknowledged by name in any published document about this vulnerability?',
+ help_text='If we publish a document based on this report, we will credit you unless otherwise specified.',
+ required=True)
+ comm_attempt = forms.ChoiceField(
+ choices=[(True, 'Yes'), (False, 'No')],
+ label='Have you contacted the vendor about this vulnerability?',
+ required=True)
+ why_no_attempt = forms.ChoiceField(
+ choices=WHY_NOT_CHOICES, label="Why have you not contacted the vendor directly?",
+ widget=forms.RadioSelect(attrs={'class': 'ul_nobullet'}),
+ required=False)
+ vul_exploited = forms.ChoiceField(
+ choices=[(True, 'Yes'), (False, 'No')],
+ label='Is there evidence that this vulnerability is being actively exploited?',
+ required=True)
+ vul_public = forms.ChoiceField(
+ choices=[(True, 'Yes'), (False, 'No')],
+ label="Is this vulnerability publicly known?",
+ required=True)
+ vul_disclose = forms.ChoiceField(
+ choices=[(True, 'Yes'), (False, 'No')],
+ label='Do you plan to publicly disclose this vulnerability yourself?',
+ required=True)
+ disclosure_plans = forms.CharField(
+ max_length=1000,
+ label="What are your public disclosure plans? (max 1000 chars)",
+ widget=forms.Textarea(attrs={'placeholder': 'Include dates and events if applicable'}),
+ required=False)
+ exploit_references = forms.CharField(
+ max_length=20000,
+ label="Please provide references",
+ required=False,
+ widget=forms.Textarea(attrs={'placeholder': 'URL(s)'}))
+ public_references = forms.CharField(
+ max_length=1000,
+ label="Please provide references (max 1000 chars)",
+ widget=forms.Textarea(attrs={'placeholder': 'URL(s)'}),
+ required=False)
+ class Meta:
+ model = CaseRequest
+ exclude = ('created', 'modified', 'status', 'on_hold', 'resolution', 'assigned_to', 'title', 'description', 'priority', 'due_date', 'submitter_email', 'vrf_id', 'ticket_ptr_id', 'search_vector', 'request_type', 'close_reason', 'vc_id', 'case')
+ widgets = {
+ 'queue':forms.HiddenInput()
+ }
+
+class TicketDependencyForm(forms.ModelForm):
+ ''' Adds a different ticket as a dependency for this Ticket '''
+
+ class Meta:
+ model = TicketDependency
+ exclude = ('ticket',)
+
+##### CONTACT FORMS ##########
+
+class GroupForm(forms.ModelForm):
+ group_select = forms.CharField(required=False, widget=forms.Select(choices=[]))
+
+ def __init__(self, *args, **kwargs):
+ super(GroupForm,self).__init__(*args, **kwargs)
+ self.fields['version'].required=False
+
+ def clean_srmail_peer_name(self):
+ data = self.cleaned_data['srmail_peer_name']
+ if not data.islower():
+ raise forms.ValidationError("srmail peer names should be lowercase")
+ if " " in data or "'" in data or '@' in data or '+' in data:
+ raise forms.ValidationError("srmail peer names can not contain spaces, quotes, apostrophes, @, or +symbols")
+ return data
+
+ class Meta:
+ model=ContactGroup
+ fields=['name', 'vuid', 'description', 'srmail_peer_name', 'group_type', 'status', 'group_select', 'comment', 'version']
+ widgets = {
+ 'comment' : forms.Textarea(attrs={'rows': 4}),
+ 'version':forms.HiddenInput()
+ }
+
+class InitContactForm(forms.ModelForm):
+
+ contact = forms.CharField(
+ max_length=250,
+ label=_('Contact'),
+ help_text=_('The name of the vendor to verify with')
+ )
+
+ subject = forms.CharField(
+ max_length=200,
+ help_text=_('The subject of the email.'),
+ )
+
+ internal = forms.BooleanField(
+ required = False,
+ label=_('Internal Verification'),
+ help_text=_('By checking this box, an email will not be sent but the email body will be logged in the ticket and should provide justification for why external verification is not needed.')
+ )
+
+ email_body = forms.CharField(
+ widget=forms.Textarea(),
+ label=_('Email Body'),
+ required=True,
+ initial=settings.STANDARD_EMAIL_SIGNATURE)
+
+ ticket = forms.CharField(
+ max_length=200,
+ label=_('Ticket ID'),
+ help_text=_('If this is related to an existing ticket, provide the ID here'),
+ required=False)
+
+ class Meta:
+ model = ContactAssociation
+ fields = ['contact', 'user', 'email', 'internal', 'subject', 'email_body', 'ticket']
+
+
+ def clean_contact(self):
+ data = self.cleaned_data['contact']
+ print(data)
+ if data in [None, '', 'None']:
+ return
+ contact = Contact.objects.filter(vendor_name=data, active=True).first()
+ if contact:
+ return contact
+ else:
+ raise forms.ValidationError("Invalid Contact")
+
+ def clean_ticket(self):
+ data = self.cleaned_data['ticket']
+ if data in [None, '', 'None']:
+ return
+ try:
+ ticket = Ticket.objects.get(id=data)
+ return ticket
+ except:
+ raise forms.ValidationError("Invalid Ticket Selection. Use only numeric ID of Ticket.")
+
+class ContactForm(forms.ModelForm):
+ def __init__(self, *args, **kwargs):
+ super(ContactForm, self).__init__(*args, **kwargs)
+ self.fields['srmail_peer'].required=True
+ self.fields['lotus_id'].required=False
+ self.fields['version'].required=False
+ class Meta:
+ model = Contact
+ fields = ['vendor_name', 'vendor_type', 'srmail_peer', 'srmail_salutation', 'srmail_id', 'lotus_id', 'countrycode', 'active', 'location', 'comment', 'version']
+ widgets = {
+ 'comment' : forms.Textarea(attrs={'rows': 4}),
+ 'countrycode': CountrySelectWidget(layout='{widget}
+
+
+
+
+
+{% endblock %}
diff --git a/cogauth/templates/cogauth/pw_confirmed.html b/cogauth/templates/cogauth/pw_confirmed.html
new file mode 100644
index 0000000..ea87a09
--- /dev/null
+++ b/cogauth/templates/cogauth/pw_confirmed.html
@@ -0,0 +1,17 @@
+{% extends "vince/login.html" %}
+
+{% load i18n static %}
+
+{% block content_title %}| First Name: | +{{ user.first_name }} | +
| Last Name: | +{{ user.last_name }} | +
| Email: | +{{ user.email }} | +
| Country: | +{{ coguser.country }} | +
| Timezone: | +{{ coguser.timezone }} | +
| Preferred Display Name: | +{{ coguser.preferred_username }} | +
| Company/Affiliation: | +{{ coguser.org }} | +
| Title: | +{{ coguser.title }} | +
| Vendor Groups: | +{{ my_groups }} | +
| Other Groups: | +{{ other_groups }} | +
| Multi-factor Authentication (MFA) | +{% if coguser.mfa %}{{ coguser.mfa|mfafilter }} {% else %}{% endif %} | +
| MFA Preference | +{{ mfa_pref }} | +
| API Key | +{% if coguser.api_key %}ENABLED{% endif %} | +
Password Reset Complete
{% endblock %} + + +{% block content %} ++ Your password has been reset. You may now login. +
+ Login + +{% endblock %} + + + diff --git a/cogauth/templates/cogauth/pwreset.html b/cogauth/templates/cogauth/pwreset.html new file mode 100644 index 0000000..108e0c4 --- /dev/null +++ b/cogauth/templates/cogauth/pwreset.html @@ -0,0 +1,23 @@ +{% extends "vince/login.html" %} + +{% load i18n static %} + + +{% block content_title %}VINCE Password Reset
{% endblock %} + +{% block content %} +Use your VINCE username (case-sensitive) to reset your password or Login
+ +{% endblock %} + + diff --git a/cogauth/templates/cogauth/resend.html b/cogauth/templates/cogauth/resend.html new file mode 100644 index 0000000..4752d88 --- /dev/null +++ b/cogauth/templates/cogauth/resend.html @@ -0,0 +1,22 @@ +{% extends "vince/login.html" %} + +{% load i18n static %} + +{% block content_title %}VINCE Resend Confirmation Code
{% endblock %} + +{% block breadcrumbs %}{% endblock %} + +{% block content %} +Use your VINCE username to resend the confirmation code or Login
+ +{% endblock %} + diff --git a/cogauth/templates/cogauth/reset_password.html b/cogauth/templates/cogauth/reset_password.html new file mode 100644 index 0000000..618e039 --- /dev/null +++ b/cogauth/templates/cogauth/reset_password.html @@ -0,0 +1,36 @@ +{% extends "vince/login.html" %} + +{% load i18n static %} + +{% block content_title %}VINCE Password Reset
{% endblock %} + + +{% block content %} ++ Please check your email for a verification code. +
++ If you don't receive an email, please make sure you've entered the correct address, + and check your spam folder. +
+Password Requirements: +
-
+
- Minimum length is 8 characters +
- Maximum length is 50 characters +
- Requires at least 1 number +
- Requires at least 1 special character ("+" and "=" don't count) +
- Requires uppercase letters +
- Requires lowercase letters +
+
+
+
+{% endblock %}
+
diff --git a/cogauth/templates/cogauth/service_activation_sent.html b/cogauth/templates/cogauth/service_activation_sent.html
new file mode 100644
index 0000000..378c0c4
--- /dev/null
+++ b/cogauth/templates/cogauth/service_activation_sent.html
@@ -0,0 +1,28 @@
+{% load i18n %}
+
+
+
+
+
+
+
diff --git a/cogauth/templates/cogauth/signup.html b/cogauth/templates/cogauth/signup.html
new file mode 100644
index 0000000..f8b3a5a
--- /dev/null
+++ b/cogauth/templates/cogauth/signup.html
@@ -0,0 +1,55 @@
+{% extends "vince/login.html" %}
+{% load i18n static %}
+
+{% block extrahead %}
+
+
+
+{% endblock %}
+
+{% block title %}VINCE{% endblock %}
+
+{% block content_title %}Create a VINCE account
{% endblock %} + +{% block content %}
+
+
+
+
+{% endblock %}
+
+
diff --git a/cogauth/templates/cogauth/sms.html b/cogauth/templates/cogauth/sms.html
new file mode 100644
index 0000000..36b81d1
--- /dev/null
+++ b/cogauth/templates/cogauth/sms.html
@@ -0,0 +1,68 @@
+{% extends VINCECOMM_BASE_TEMPLATE %}
+{% load i18n static %}
+{% block js %}
+{{ block.super }}
+
+{% endblock %}
+{% block title %}VINCE Profile{% endblock %}
+
+{% block content %}
+
+
+
+
+
+
+
+ Enable SMS MFA
+
+
+
+
+
+
+
+
+
+
+ We recommend time-based, one-time password (TOTP) as a more reliable option than SMS for MFA. Use TOTP.
+
+
+
+{% if form.errors %}
+
+ {% for message in messages %}
+
+
+ {% endfor %}
+
+
+
+{% endif %}
+
+
+
+
+ Error submitting form! Please check below for errors and submit again.
+
+
+
+{% endblock %}
diff --git a/cogauth/templates/cogauth/totp.html b/cogauth/templates/cogauth/totp.html
new file mode 100644
index 0000000..0d6ffd0
--- /dev/null
+++ b/cogauth/templates/cogauth/totp.html
@@ -0,0 +1,54 @@
+{% extends VINCECOMM_BASE_TEMPLATE %}
+{% load i18n static qr_code %}
+{% block js %}
+{{ block.super }}
+
+{% endblock %}
+{% block title %}VINCE Profile{% endblock %}
+
+{% block content %}
+
+
+Please enter the phone number of the device where we should send the authorization code.
+ +
+
+
+
+
+
+
+ Associate TOTP Token
+
+
+
+
+
+
+
+ {% for message in messages %}
+
+
+{% if message.tags %}{% endif %}{{ message }}
+ {% endfor %}
+
+
+{% endblock %}
diff --git a/cogauth/templates/cogauth/update-profile.html b/cogauth/templates/cogauth/update-profile.html
new file mode 100644
index 0000000..4f59613
--- /dev/null
+++ b/cogauth/templates/cogauth/update-profile.html
@@ -0,0 +1,54 @@
+{% extends VINCECOMM_BASE_TEMPLATE %}
+{% load i18n static %}
+
+{% block title %}VINCE{% endblock %}
+
+{% block content %}
+
+
+Please scan the QR Code or enter the following secret key into any TOTP-generator, such as Google Authenticator, Duo, or LastPass Authenticator. If you are re-associating your app with VINCE, you may be required to remove the VINCE token in your app.
+ {% qr_from_text qrtext %} +{{ secretcode }}
+Once you have added the secret key into the app of your choice, it will generate a temporary password. Please enter the temporary password below. Optionally, you may also add a friendly device name to remind you later of the application you used. +
+
+
+
+{% if form.errors %}
+
+
+
+
+ Edit Profile
+
+
+
+
+{% endif %}
+
+
+{% endblock %}
diff --git a/cogauth/templates/cogauth/user_info.html b/cogauth/templates/cogauth/user_info.html
new file mode 100644
index 0000000..1869eeb
--- /dev/null
+++ b/cogauth/templates/cogauth/user_info.html
@@ -0,0 +1,13 @@
+{% extends 'cogauth/base.html' %}
+{% block title %}User Info{% endblock %}
+{% block main_content %}
+
+
+
+ {% if form.errors.items|length == 1 %}Please correct the error below.{% else %}Please correct the errors below.{% endif %}
+
+ Username: {{ request.user.username }}
+Email: {{ request.user.email }}
+First Name: {{ request.user.first_name }}
+Last Name: {{ request.user.last_name }}
+ID Token: {{ request.session.ID_TOKEN}}
+Access Token: {{ request.session.ACCESS_TOKEN }}
+Refresh Token: {{ request.session.REFRESH_TOKEN }}
+API Key: {{ request.session.API_KEY }}
+API Key ID: {{ request.session.API_KEY_ID }}
+{% endblock %} diff --git a/cogauth/templates/cogauth/verify_email.html b/cogauth/templates/cogauth/verify_email.html new file mode 100644 index 0000000..da9acd4 --- /dev/null +++ b/cogauth/templates/cogauth/verify_email.html @@ -0,0 +1,28 @@ +{% extends "vince/login.html" %} + +{% block extrahead %} +{% endblock %} + +{% load i18n static %} + +{% block content_title %}VINCE Verify Email
{% endblock %} + +{% block content %} +It looks like we haven't yet verified your email.
++ Please check your email to {{ email }} for a verification code. +
++ If you don't receive an email, please check your spam folder or contact {{ CONTACT_EMAIL }} to confirm that we have the correct email on file. +
+ + + +{% endblock %} + + + diff --git a/cogauth/templates/cogauth/verify_phone.html b/cogauth/templates/cogauth/verify_phone.html new file mode 100644 index 0000000..ee0c563 --- /dev/null +++ b/cogauth/templates/cogauth/verify_phone.html @@ -0,0 +1,25 @@ +{% extends "vince/login.html" %} + +{% block extrahead %} +{% endblock %} + +{% load i18n static %} + +{% block content_title %}VINCE Verify Phone Number
{% endblock %} + +{% block content %} +
+ Please verify your phone number by entering the code that was just sent to you.
+ Codes are only valid for 3 minutes.
+
Hello,
\r\n\r\nThis is a courtesy e-mail to let you know that ticket {{ ticket.ticket }} ({{ ticket.title }}) for {{ ticket.submitter_email }} has been {% if ticket.assigned_to %}assigned to {{ ticket.assigned_to }}{% else %}unassigned{% endif %}.
\r\n\r\n\r\nTicket ID: {{ ticket.ticket }}
\r\nQueue: {{ queue.title }}
\r\nTitle: {{ ticket.title }}
\r\nOpened: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\nSubmitter: {{ ticket.submitter_email|default:\"Unknown\" }}
\r\nPriority: {{ ticket.get_priority_display }}
\r\nStatus: {{ ticket.get_status }}
\r\nAssigned to: {% if ticket.assigned_to %}{{ ticket.assigned_to }}{% else %}Unassigned{% endif %}
\r\nView Online to update this ticket (login required)
Hello,
\r\n\r\nThis is a courtesy e-mail to let you know that ticket {{ ticket.ticket }} ({{ ticket.title }}) for {{ ticket.submitter_email }} has been assigned to you.
\r\n\r\n\r\nTicket ID: {{ ticket.ticket }}
\r\nQueue: {{ queue.title }}
\r\nTitle: {{ ticket.title }}
\r\nOpened: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\nSubmitter: {{ ticket.submitter_email|default:\"Unknown\" }}
\r\nPriority: {{ ticket.get_priority_display }}
\r\nStatus: {{ ticket.get_status }}
\r\nAssigned to: YOU
\r\nView Online to update this ticket (login required)
Hello,
\r\n\r\nTicket {{ ticket.title }} ('{{ ticket.title }}'){% if ticket.assigned_to %}, assigned to {{ ticket.get_assigned_to }}{% endif %} has been closed.
\r\n\r\n\r\nTicket ID: {{ ticket.ticket }}
\r\nQueue: {{ queue.title }}
\r\nTitle: {{ ticket.title }}
\r\nOpened: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\nSubmitter: {{ ticket.submitter_email|default:\"Unknown\" }}
\r\nPriority: {{ ticket.get_priority_display }}
\r\nStatus: {{ ticket.get_status }}
\r\nAssigned to: {{ ticket.get_assigned_to }}
\r\nView Online to update this ticket (login required)
Just for reference, the original ticket description was:
\r\n\r\n{{ ticket.description|linebreaksbr }}\r\n\r\n
The resolution provided was:
\r\n\r\n{{ resolution }}\r\n\r\n
If you wish to view this ticket online, you can visit {{ ticket.staff_url }}.
", + "locale": "en", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.776Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 4, + "fields": { + "template_name": "closed_owner", + "subject": "(Closed)", + "heading": "Ticket Closed", + "plain_text": "Hello,\r\n\r\nThe following ticket, which is currently assigned to you, has been closed.\r\n\r\nTicket ID: {{ ticket.ticket }}\r\nQueue: {{ queue.title }}\r\nTitle: {{ ticket.title }}\r\nOpened: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\nSubmitter: {{ ticket.submitter_email|default:\"Unknown\" }}\r\nPriority: {{ ticket.get_priority_display }}\r\nStatus: {{ ticket.get_status }}\r\nAssigned to: {{ ticket.get_assigned_to }}\r\nView Online: {{ ticket.staff_url }} (login required)\r\n\r\nIf you wish to view this ticket online, you can visit {{ ticket.staff_url }}.\r\n\r\n", + "html": "Hello,
\r\n\r\nThe following ticket, which is currently assigned to you, has been closed.
\r\n\r\n\r\nTicket ID: {{ ticket.ticket }}
\r\nQueue: {{ queue.title }}
\r\nTitle: {{ ticket.title }}
\r\nOpened: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\nSubmitter: {{ ticket.submitter_email|default:\"Unknown\" }}
\r\nPriority: {{ ticket.get_priority_display }}
\r\nStatus: {{ ticket.get_status }}
\r\nAssigned to: {{ ticket.get_assigned_to }}
\r\nView Online to update this ticket (login required)
Just for reference, the original ticket description was:
\r\n\r\n{{ ticket.description|linebreaksbr }}\r\n\r\n
The resolution provided was:
\r\n\r\n{{ ticket.resolution }}", + "locale": "en", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.779Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 5, + "fields": { + "template_name": "closed_submitter", + "subject": "(Closed)", + "heading": "Ticket Closed", + "plain_text": "Hello,\r\n\r\nYou recently logged a ticket with a subject of \"{{ ticket.title }}\" with us. This e-mail is to confirm that this ticket has been closed.\r\n\r\nIf you believe that further work is required on this ticket, please let us know by replying to this e-mail and keeping the subject intact.\r\n\r\nIf you wish to view this ticket online, you can visit {{ ticket.ticket_url }}.\r\n\r\nThe resolution provided was:\r\n\r\n{{ ticket.resolution }}\r\n\r\n", + "html": "
Hello,
\r\n\r\nYou recently logged a ticket with a subject of {{ ticket.title }} with us. This e-mail is to confirm that this ticket has been closed.
\r\n\r\nThe resolution that has been provided is:
\r\n\r\n{{ ticket.resolution }}\r\n\r\n
If you wish to view this ticket online, you can visit {{ ticket.ticket_url }}. If you believe that further work is required on this ticket, please let us know by replying to this e-mail and keeping the subject intact.
", + "locale": "en", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.782Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 6, + "fields": { + "template_name": "escalated_cc", + "subject": "(Escalated)", + "heading": "Ticket Escalated", + "plain_text": "Hello,\r\n\r\nThis is a courtesy e-mail to let you know that ticket {{ ticket.ticket }} (\"{{ ticket.title }}\") has been escalated automatically.\r\n\r\nTicket ID: {{ ticket.ticket }}\r\nQueue: {{ queue.title }}\r\nTitle: {{ ticket.title }}\r\nOpened: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\nSubmitter: {{ ticket.submitter_email|default:\"Unknown\" }}\r\nPriority: {{ ticket.get_priority_display }}\r\nStatus: {{ ticket.get_status }}\r\nAssigned to: {{ ticket.get_assigned_to }}\r\nView Online: {{ ticket.staff_url }} (login required)\r\n\r\nThe original ticket description was:\r\n\r\n{{ ticket.description }}\r\n\r\n", + "html": "Hello,
\r\n\r\nThis is a courtesy e-mail to let you know that ticket {{ ticket.ticket }} ('{{ ticket.title }}') has been escalated automatically.
\r\n\r\n\r\nTicket ID: {{ ticket.ticket }}
\r\nQueue: {{ queue.title }}
\r\nTitle: {{ ticket.title }}
\r\nOpened: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\nSubmitter: {{ ticket.submitter_email|default:\"Unknown\" }}
\r\nPriority: {{ ticket.get_priority_display }}
\r\nStatus: {{ ticket.get_status }}
\r\nAssigned to: {{ ticket.get_assigned_to }}
\r\nView Online to update this ticket (login required)
Just for reference, the original ticket description was:
\r\n\r\n{{ ticket.description|linebreaksbr }}", + "locale": "en", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.785Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 7, + "fields": { + "template_name": "escalated_submitter", + "subject": "(Escalated)", + "heading": "Your Ticket Has Been Escalated", + "plain_text": "Hello,\r\n\r\nYou recently logged a ticket with a subject of \"{{ ticket.title }}\" with us. This e-mail is to advise you of an automated escalation of that ticket as it has been open for longer than expected.\r\n\r\nWe will review your ticket shortly and attempt to provide a resolution as soon as possible.\r\n\r\nIf you wish to view this ticket online, you can visit {{ ticket.ticket_url }}.\r\n\r\n", + "html": "
Hello,
\r\n\r\nYou recently logged a ticket with a subject of {{ ticket.title }} with us. This e-mail is to advise you of an automated escalation of that ticket as it has been open for longer than expected.
\r\n\r\nWe will review your ticket shortly and attempt to provide a resolution as soon as possible.
\r\n\r\nIf you wish to view this ticket online, you can visit {{ ticket.ticket_url }}.
", + "locale": "en", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.788Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 8, + "fields": { + "template_name": "escalated_owner", + "subject": "(Escalated)", + "heading": "Ticket Assigned to You Has Been Escalated", + "plain_text": "Hello,\r\n\r\nA ticket currently assigned to you has been automatically escalated as it has been open for longer than expected.\r\n\r\nTicket ID: {{ ticket.ticket }}\r\nQueue: {{ queue.title }}\r\nTitle: {{ ticket.title }}\r\nOpened: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\nSubmitter: {{ ticket.submitter_email|default:\"Unknown\" }}\r\nPriority: {{ ticket.get_priority_display }}\r\nStatus: {{ ticket.get_status }}\r\nAssigned to: {{ ticket.get_assigned_to }}\r\nView Online: {{ ticket.staff_url }} (login required)\r\n\r\nThe original ticket description was:\r\n\r\n{{ ticket.description }}\r\n\r\nPlease review this ticket and attempt to provide a resolution as soon as possible.\r\n\r\n", + "html": "Hello,
\r\n\r\nA ticket currently assigned to you has been automatically escalated as it has been open for longer than expected.
\r\n\r\n\r\nTicket ID: {{ ticket.ticket }}
\r\nQueue: {{ queue.title }}
\r\nTitle: {{ ticket.title }}
\r\nOpened: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\nSubmitter: {{ ticket.submitter_email|default:\"Unknown\" }}
\r\nPriority: {{ ticket.get_priority_display }}
\r\nStatus: {{ ticket.get_status }}
\r\nAssigned to: {{ ticket.get_assigned_to }}
\r\nView Online to update this ticket (login required)
Just for reference, the original ticket description was:
\r\n\r\n{{ ticket.description|linebreaksbr }}", + "locale": "en", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.790Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 9, + "fields": { + "template_name": "newticket_cc", + "subject": "(Opened)", + "heading": "New Ticket Opened", + "plain_text": "Hello,\r\n\r\nThis is a courtesy e-mail to let you know that a new ticket has been opened.\r\n\r\nTicket ID: {{ ticket.ticket }}\r\nQueue: {{ queue.title }}\r\nTitle: {{ ticket.title }}\r\nOpened: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\nSubmitter: {{ ticket.submitter_email|default:\"Unknown\" }}\r\nStatus: {{ ticket.get_status }}\r\n\r\nView Online: {{ ticket.staff_url }} (login required)", + "html": "
Hello,
\r\n\r\nThis is a courtesy e-mail to let you know that a new ticket has been opened.
\r\n\r\n\r\nTicket ID: {{ ticket.ticket }}
\r\nQueue: {{ queue.title }}
\r\nTitle: {{ ticket.title }}
\r\nOpened: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\nSubmitter: {{ ticket.submitter_email|default:\"Unknown\" }}
\r\nStatus: {{ ticket.get_status }}
\r\n
\r\nView Online to update this ticket (login required)
Hello,
\r\n\r\nThis is a courtesy e-mail to let you know that we have received your vince.query with a subject of {{ ticket.title }}.
\r\n\r\nYou do not have to do anything further at this stage. Your ticket has been assigned a number of {{ ticket.ticket }} and will be responded to shortly.
\r\n\r\nIf you wish to send us further details, or if you have any queries about this ticket, please include the ticket id of {{ ticket.ticket }} in the subject. The easiest way to do this is just press \"reply\" to this message.
\r\n\r\nIf you wish to view this ticket online to provide further information, attach files or view recent updates, you can visit {{ ticket.ticket_url }}.
\r\n\r\nWe will investigate your query and attempt to resolve it as soon as possible. You will receive further updates and a resolution via this e-mail address.
", + "locale": "en", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.795Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 11, + "fields": { + "template_name": "resolved_cc", + "subject": "(Resolved)", + "heading": "Ticket Resolved", + "plain_text": "Hello,\r\n\r\nThe following ticket has been resolved:\r\n\r\nTicket ID: {{ ticket.ticket }}\r\nQueue: {{ queue.title }}\r\nTitle: {{ ticket.title }}\r\nOpened: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\nSubmitter: {{ ticket.submitter_email|default:\"Unknown\" }}\r\nPriority: {{ ticket.get_priority_display }}\r\nStatus: {{ ticket.get_status }}\r\nAssigned to: {{ ticket.get_assigned_to }}\r\nView Online: {{ ticket.staff_url }} (login required)\r\n\r\nThe original ticket description was:\r\n\r\n{{ ticket.description }}\r\n\r\nThe resolution provided was:\r\n\r\n{{ ticket.resolution }}\r\n\r\nThis resolution has been e-mailed to the submitter, who will verify it before you can close this ticket.\r\n\r\n", + "html": "Hello,
\r\n\r\nThe following ticket has been resolved.
\r\n\r\n\r\nTicket ID: {{ ticket.ticket }}
\r\nQueue: {{ queue.title }}
\r\nTitle: {{ ticket.title }}
\r\nOpened: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\nSubmitter: {{ ticket.submitter_email|default:\"Unknown\" }}
\r\nPriority: {{ ticket.get_priority_display }}
\r\nStatus: {{ ticket.get_status }}
\r\nAssigned to: {{ ticket.get_assigned_to }}
\r\nView Online to update this ticket (login required)
Just for reference, the original ticket description was:
\r\n\r\n{{ ticket.description|linebreaksbr }}\r\n\r\n
The resolution that was added was:
\r\n\r\n{{ ticket.resolution }}\r\n\r\n
This resolution has been e-mailed to the submitter, who will verify it before you can close this ticket.
", + "locale": "en", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.798Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 12, + "fields": { + "template_name": "resolved_owner", + "subject": "(Resolved)", + "heading": "Ticket Resolved", + "plain_text": "Hello,\r\n\r\nA ticket currently assigned to you has been resolved.\r\n\r\nTicket ID: {{ ticket.ticket }}\r\nQueue: {{ queue.title }}\r\nTitle: {{ ticket.title }}\r\nOpened: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\nSubmitter: {{ ticket.submitter_email|default:\"Unknown\" }}\r\nPriority: {{ ticket.get_priority_display }}\r\nStatus: {{ ticket.get_status }}\r\nAssigned to: {{ ticket.get_assigned_to }}\r\nView Online: {{ ticket.staff_url }} (login required)\r\n\r\nThe original ticket description was:\r\n\r\n{{ ticket.description }}\r\n\r\nThe resolution provided was:\r\n\r\n{{ ticket.resolution }}\r\n\r\nThis resolution has been e-mailed to the submitter, who will verify it before you can close this ticket.\r\n\r\n", + "html": "Hello,
\r\n\r\nA ticket currently assigned to you has been resolved.
\r\n\r\n\r\nTicket ID: {{ ticket.ticket }}
\r\nQueue: {{ queue.title }}
\r\nTitle: {{ ticket.title }}
\r\nOpened: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\nSubmitter: {{ ticket.submitter_email|default:\"Unknown\" }}
\r\nPriority: {{ ticket.get_priority_display }}
\r\nStatus: {{ ticket.get_status }}
\r\nAssigned to: {{ ticket.get_assigned_to }}
\r\nView Online to update this ticket (login required)
Just for reference, the original ticket description was:
\r\n\r\n{{ ticket.description|linebreaksbr }}\r\n\r\n
The resolution that was added was:
\r\n\r\n{{ ticket.resolution }}\r\n\r\n
This resolution has been e-mailed to the submitter, who will verify it before you can close this ticket.
", + "locale": "en", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.801Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 13, + "fields": { + "template_name": "resolved_submitter", + "subject": "(Resolved)", + "heading": "Your Ticket Has Been Resolved", + "plain_text": "Hello,\r\n\r\nYou recently logged a ticket with a subject of \"{{ ticket.title }}\" with us. This e-mail is to advise you of a resolution to that ticket.\r\n\r\nThe following resolution was added to ticket {{ ticket.ticket }}:\r\n\r\n{{ resolution }}\r\n\r\nCan you please confirm that this resolution addresses your needs so we may close this ticket? If you have any further queries, or if you do not believe this resolution is adequate, please reply to this e-mail and keep the subject intact.\r\n\r\nIf you wish to view this ticket online, you can visit {{ ticket.ticket_url }}\r\n\r\n", + "html": "Hello,
\r\n\r\nYou recently logged a ticket with a subject of {{ ticket.title }} with us. This e-mail is to advise you of a resolution to that ticket.
\r\n\r\nThe following resolution was added to ticket {{ ticket.ticket }}:
\r\n\r\n{{ resolution }}\r\n\r\n
Can you please confirm that this resolution addresses your needs so we may close this ticket? If you have any further queries, or if you do not believe this resolution is adequate, please reply to this e-mail and keep the subject intact.
\r\n\r\nIf you wish to view this ticket online, you can visit {{ ticket.ticket_url }}.
", + "locale": "en", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.804Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 14, + "fields": { + "template_name": "updated_cc", + "subject": "(Updated)", + "heading": "Ticket Updated", + "plain_text": "Hello,\r\n\r\nThis is a courtesy e-mail to let you know that ticket {{ ticket.ticket }} (\"{{ ticket.title }}\") {% if ticket.submitter_email %}for {{ ticket.submitter_email }} {% endif %}has been updated.\r\n\r\nTicket ID: {{ ticket.ticket }}\r\nQueue: {{ queue.title }}\r\nTitle: {{ ticket.title }}\r\nOpened: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\nSubmitter: {{ ticket.submitter_email|default:\"Unknown\" }}\r\nPriority: {{ ticket.get_priority_display }}\r\nStatus: {{ ticket.get_status }}\r\nAssigned to: {{ ticket.get_assigned_to }}\r\nView Online: {{ ticket.staff_url }} (login required)\r\nIf you wish to view this ticket online, you can visit {{ ticket.staff_url }}.", + "html": "Hello,
\r\n\r\nThis is a courtesy e-mail to let you know that ticket {{ ticket.ticket }} (\"{{ ticket.title }}\") {% if ticket.submitter_email %}for {{ ticket.submitter_email }}{% endif %} has been updated.
\r\n\r\n\r\nTicket ID: {{ ticket.ticket }}
\r\nQueue: {{ queue.title }}
\r\nTitle: {{ ticket.title }}
\r\nOpened: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\nSubmitter: {{ ticket.submitter_email|default:\"Unknown\" }}
\r\nPriority: {{ ticket.get_priority_display }}
\r\nStatus: {{ ticket.get_status }}
\r\nAssigned to: {{ ticket.get_assigned_to }}
\r\nView Online to update this ticket (login required)
Hello,
\r\n\r\nThis is a courtesy e-mail to let you know that ticket {{ ticket.ticket }} (\"{{ ticket.title }}\") for {{ ticket.submitter_email }}, which is assigned to you, has been updated.
\r\n\r\n\r\nTicket ID: {{ ticket.ticket }}
\r\nQueue: {{ queue.title }}
\r\nTitle: {{ ticket.title }}
\r\nOpened: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\nSubmitter: {{ ticket.submitter_email|default:\"Unknown\" }}
\r\nPriority: {{ ticket.get_priority_display }}
\r\nStatus: {{ ticket.get_status }}
\r\nAssigned to: {{ ticket.get_assigned_to }}
\r\nView Online to update this ticket (login required)
Just for reference, the original ticket description was:
", + "locale": "en", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.810Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 16, + "fields": { + "template_name": "updated_submitter", + "subject": "(Updated)", + "heading": "Your Ticket Has Been Updated", + "plain_text": "Hello,\r\n\r\nYou recently logged a ticket with a subject of \"{{ ticket.title }}\" with us. This e-mail is to advise you of an update to that ticket.\r\n\r\nThe following comment was added to ticket {{ ticket.ticket }}:\r\n\r\n{{ comment }}\r\n\r\nIf you need to provide us with further information, please reply to this e-mail and keep the subject intact. Alternatively, you can view and update this ticket online by visiting {{ ticket.ticket_url }}\r\n\r\n", + "html": "Hello,
\r\n\r\nYou recently logged a ticket with a subject of {{ ticket.title }} with us. This e-mail is to advise you of an update to that ticket.
\r\n\r\nThe following comment was added to ticket {{ ticket.ticket }}:
\r\n\r\n{{ comment }}\r\n\r\n
If you need to provide us with further information, please reply to this e-mail and keep the subject intact. Alternatively, you can view and update this ticket online by visiting {{ ticket.ticket_url }}.
", + "locale": "en", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.812Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 17, + "fields": { + "template_name": "assigned_cc", + "subject": " ", + "heading": "\u0417\u0430\u044f\u0432\u043a\u0430", + "plain_text": "\u0417\u0434\u0440\u0430\u0432\u0441\u0442\u0432\u0443\u0439\u0442\u0435,\r\n\r\n\u0423\u0432\u0435\u0434\u043e\u043c\u043b\u044f\u0435\u043c \u0412\u0430\u0441 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u0437\u0430\u044f\u0432\u043a\u0430, {{ ticket.ticket }} (\"{{ ticket.title }}\") \u043e\u0442 {{ ticket.submitter_email }}, \u0431\u044b\u043b\u0430 {% if ticket.assigned_to %} \u043f\u0440\u0438\u043d\u044f\u0442\u0430 {{ ticket.assigned_to }}{% else %} \u043e\u0442\u043a\u043b\u043e\u043d\u0435\u043d\u0430 {% endif %}.\r\n\r\nID \u0437\u0430\u044f\u0432\u043a\u0438: {{ ticket.ticket }}\r\n\u041e\u0447\u0435\u0440\u0435\u0434\u044c: {{ queue.title }}\r\n\u0417\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a: {{ ticket.title }}\r\n\u0421\u043e\u0437\u0434\u0430\u043d\u0430: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\n\u0410\u0432\u0442\u043e\u0440 \u0437\u0430\u044f\u0432\u043a\u0438: {{ ticket.submitter_email|default:\"Unknown\" }}\r\n\u041f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442: {{ ticket.get_priority_display }}\r\n\u0421\u0442\u0430\u0442\u0443\u0441: {{ ticket.get_status }}\r\n\u041f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u0430: {{ ticket.get_assigned_to }}\r\n\u041f\u0435\u0440\u0435\u0439\u0442\u0438 \u043a \u0437\u0430\u044f\u0432\u043a\u0435: {{ ticket.staff_url }}\r\n\r\n\u0418\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435:\r\n\r\n{{ ticket.description }}", + "html": "\u0417\u0434\u0440\u0430\u0432\u0441\u0442\u0432\u0443\u0439\u0442\u0435,
\r\n\r\n\u0423\u0432\u0435\u0434\u043e\u043c\u043b\u044f\u0435\u043c \u0412\u0430\u0441 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u0437\u0430\u044f\u0432\u043a\u0430 {{ ticket.ticket }} ({{ ticket.title }}) \u043e\u0442 {{ ticket.submitter_email }} \u0431\u044b\u043b\u0430 {% if ticket.assigned_to %}\u043f\u0440\u0438\u043d\u044f\u0442\u0430 {{ ticket.assigned_to }}{% else %}\u043e\u0442\u043a\u043b\u043e\u043d\u0435\u043d\u0430{% endif %}.
\r\n\r\n\r\nID \u0437\u0430\u044f\u0432\u043a\u0438: {{ ticket.ticket }}
\r\n\u041e\u0447\u0435\u0440\u0435\u0434\u044c: {{ queue.title }}
\r\n\u0417\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a: {{ ticket.title }}
\r\n\u0421\u043e\u0437\u0434\u0430\u043d\u0430: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\n\u0410\u0432\u0442\u043e\u0440 \u0437\u0430\u044f\u0432\u043a\u0438: {{ ticket.submitter_email|default:\"Unknown\" }}
\r\n\u041f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442: {{ ticket.get_priority_display }}
\r\n\u0421\u0442\u0430\u0442\u0443\u0441: {{ ticket.get_status }}
\r\n\u041f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u0430: {{ ticket.get_assigned_to }}
\r\n\u041f\u0435\u0440\u0435\u0439\u0442\u0438 \u043a \u0437\u0430\u044f\u0432\u043a\u0435 \u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 (\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u044f)
\u0418\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 :
\r\n\r\n{{ ticket.description|linebreaksbr }}", + "locale": "ru", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.815Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 18, + "fields": { + "template_name": "assigned_owner", + "subject": " ", + "heading": "\u0412\u0430\u043c \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u043d\u0430 \u0437\u0430\u044f\u0432\u043a\u0430", + "plain_text": "\u0417\u0434\u0440\u0430\u0432\u0441\u0442\u0432\u0443\u0439\u0442\u0435,\r\n\r\n\u0423\u0432\u0435\u0434\u043e\u043c\u043b\u044f\u0435\u043c \u0412\u0430\u0441 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u0437\u0430\u044f\u0432\u043a\u0430 {{ ticket.ticket }} (\"{{ ticket.title }}\") \u043e\u0442 {{ ticket.submitter_email }} \u0431\u044b\u043b\u0430 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u043d\u0430 \u0412\u0430\u043c.\r\n\r\nID \u0437\u0430\u044f\u0432\u043a\u0438: {{ ticket.ticket }}\r\n\u041e\u0447\u0435\u0440\u0435\u0434\u044c: {{ queue.title }}\r\n\u0417\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a: {{ ticket.title }}\r\n\u0421\u043e\u0437\u0434\u0430\u043d\u0430: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\n\u0410\u0432\u0442\u043e\u0440 \u0437\u0430\u044f\u0432\u043a\u0438: {{ ticket.submitter_email|default:\"Unknown\" }}\r\n\u041f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442: {{ ticket.get_priority_display }}\r\n\u0421\u0442\u0430\u0442\u0443\u0441: {{ ticket.get_status }}\r\n\u041f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u0430: \u0412\u0410\u041c\r\n\u041f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u043e\u043d\u043b\u0430\u0439\u043d: {{ ticket.staff_url }}\r\n\r\n\u0418\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435:\r\n\r\n{{ ticket.description }}", + "html": "
\u0417\u0434\u0440\u0430\u0432\u0441\u0442\u0432\u0443\u0439\u0442\u0435,
\r\n\r\n\u0423\u0432\u0435\u0434\u043e\u043c\u043b\u044f\u0435\u043c \u0412\u0430\u0441 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u0437\u0430\u044f\u0432\u043a\u0430 {{ ticket.ticket }} ({{ ticket.title }}) \u043e\u0442 {{ ticket.submitter_email }} \u0431\u044b\u043b\u0430 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u0430 \u0412\u0430\u043c.
\r\n\r\n\r\nID \u0437\u0430\u044f\u0432\u043a\u0438: {{ ticket.ticket }}
\r\n\u041e\u0447\u0435\u0440\u0435\u0434\u044c: {{ queue.title }}
\r\n\u0417\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a: {{ ticket.title }}
\r\n\u0421\u043e\u0437\u0434\u0430\u043d\u0430: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\n\u0410\u0432\u0442\u043e\u0440 \u0437\u0430\u044f\u0432\u043a\u0438: {{ ticket.submitter_email|default:\"Unknown\" }}
\r\n\u041f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442: {{ ticket.get_priority_display }}
\r\n\u0421\u0442\u0430\u0442\u0443\u0441: {{ ticket.get_status }}
\r\n\u041f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u0430: \u0412\u0410\u041c
\r\n\u041f\u0435\u0440\u0435\u0439\u0442\u0438 \u043a \u0437\u0430\u044f\u0432\u043a\u0435 \u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 (\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u044f)
\u0418\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0437\u0430\u044f\u0432\u043a\u0438:
\r\n\r\n{{ ticket.description|linebreaksbr }}", + "locale": "ru", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.818Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 19, + "fields": { + "template_name": "closed_cc", + "subject": " ", + "heading": "\u0417\u0430\u044f\u0432\u043a\u0430 \u0437\u0430\u043a\u0440\u044b\u0442\u0430", + "plain_text": "\u0417\u0434\u0440\u0430\u0432\u0441\u0442\u0432\u0443\u0439\u0442\u0435,\r\n\r\n\u0417\u0430\u044f\u0432\u043a\u0430 {{ ticket.title }} (\"{{ ticket.title }}\"){% if ticket.assigned_to %}, \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u043d\u0430\u044f {{ ticket.assigned_to }}{% endif %} \u0431\u044b\u043b\u0430 \u0437\u0430\u043a\u0440\u044b\u0442\u0430.\r\n\r\nID \u0437\u0430\u044f\u0432\u043a\u0438: {{ ticket.ticket }}\r\n\u041e\u0447\u0435\u0440\u0435\u0434\u044c: {{ queue.title }}\r\n\u0417\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a: {{ ticket.title }}\r\n\u0421\u043e\u0437\u0434\u0430\u043d\u0430: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\n\u0410\u0432\u0442\u043e\u0440 \u0437\u0430\u044f\u0432\u043a\u0438: {{ ticket.submitter_email|default:\"Unknown\" }}\r\n\u041f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442: {{ ticket.get_priority_display }}\r\n\u0421\u0442\u0430\u0442\u0443\u0441: {{ ticket.get_status }}\r\n\u041f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u0430: {{ ticket.get_assigned_to }}\r\n\u041f\u0435\u0440\u0435\u0439\u0442\u0438 \u043a \u0437\u0430\u044f\u0432\u043a\u0435: {{ ticket.staff_url }} (\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u044f)\r\n\r\n\u0418\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435:\r\n\r\n{{ ticket.description }}\r\n\r\n\u0411\u044b\u043b\u043e \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u0435:\r\n\r\n{{ resolution }}", + "html": "
\u0417\u0434\u0440\u0430\u0432\u0441\u0442\u0432\u0443\u0439\u0442\u0435,
\r\n\r\n\u0417\u0430\u044f\u0432\u043a\u0430 {{ ticket.title }} (\"{{ ticket.title }}\"){% if ticket.assigned_to %}, \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u043d\u0430\u044f {{ ticket.get_assigned_to }}{% endif %} \u0431\u044b\u043b\u0430 \u0437\u0430\u043a\u0440\u044b\u0442\u0430.
\r\n\r\n\r\nID \u0437\u0430\u044f\u0432\u043a\u0438: {{ ticket.ticket }}
\r\n\u041e\u0447\u0435\u0440\u0435\u0434\u044c: {{ queue.title }}
\r\n\u0417\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a: {{ ticket.title }}
\r\n\u0421\u043e\u0437\u0434\u0430\u043d\u0430: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\n\u0410\u0432\u0442\u043e\u0440 \u0437\u0430\u044f\u0432\u043a\u0438: {{ ticket.submitter_email|default:\"Unknown\" }}
\r\n\u041f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442: {{ ticket.get_priority_display }}
\r\n\u0421\u0442\u0430\u0442\u0443\u0441: {{ ticket.get_status }}
\r\n\u041f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u0430: {{ ticket.get_assigned_to }}
\r\n\u041f\u0435\u0440\u0435\u0439\u0442\u0438 \u043a \u0437\u0430\u044f\u0432\u043a\u0435 to \u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 (\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u044f)
\u0418\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435:
\r\n\r\n{{ ticket.description|linebreaksbr }}\r\n\r\n
\u0411\u044b\u043b\u043e \u043f\u0440\u0438\u043d\u044f\u0442\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u0435:
\r\n\r\n{{ resolution }}\r\n\r\n
\u041f\u0435\u0440\u0435\u0439\u0442\u0438 \u043a \u0437\u0430\u044f\u0432\u043a\u0435 {{ ticket.staff_url }}.
", + "locale": "ru", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.820Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 20, + "fields": { + "template_name": "closed_owner", + "subject": " ", + "heading": "\u0417\u0430\u044f\u0432\u043a\u0430 \u0437\u0430\u043a\u0440\u044b\u0442\u0430", + "plain_text": "Hello,\r\n\r\n\u0421\u043b\u0435\u0434\u0443\u044e\u0449\u0430\u044f \u0437\u0430\u044f\u0432\u043a\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u0430 \u0412\u0430\u043c, \u0431\u044b\u043b\u0430 \u0437\u0430\u043a\u0440\u044b\u0442\u0430.\r\n\r\nID \u0437\u0430\u044f\u0432\u043a\u0438: {{ ticket.ticket }}\r\n\u041e\u0447\u0435\u0440\u0435\u0434\u044c: {{ queue.title }}\r\n\u0417\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a: {{ ticket.title }}\r\n\u0421\u043e\u0437\u0434\u0430\u043d\u0430: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\n\u0410\u0432\u0442\u043e\u0440 \u0437\u0430\u044f\u0432\u043a\u0438: {{ ticket.submitter_email|default:\"Unknown\" }}\r\n\u041f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442: {{ ticket.get_priority_display }}\r\n\u0421\u0442\u0430\u0442\u0443\u0441: {{ ticket.get_status }}\r\n\u041f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u0430: {{ ticket.get_assigned_to }}\r\n\u041f\u0435\u0440\u0435\u0439\u0442\u0438 \u043a \u0437\u0430\u044f\u0432\u043a\u0435: {{ ticket.staff_url }} (\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438)\r\n\r\n\u0414\u043b\u044f \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0430 \u0437\u0430\u044f\u0432\u043a\u0438 \u043f\u0435\u0440\u0435\u0439\u0434\u0438\u0442\u0435 \u043f\u043e \u0441\u0441\u044b\u043b\u043a\u0435 {{ ticket.staff_url }}.\r\n\r\n", + "html": "\u0417\u0434\u0440\u0430\u0432\u0441\u0442\u0432\u0443\u0439\u0442\u0435,
\r\n\r\n\u0421\u043b\u0435\u0434\u0443\u044e\u0449\u0430\u044f \u0437\u0430\u044f\u0432\u043a\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u0430 \u0412\u0430\u043c, \u0431\u044b\u043b\u0430 \u0437\u0430\u043a\u0440\u044b\u0442\u0430.
\r\n\r\n\r\nID \u0437\u0430\u044f\u0432\u043a\u0438: {{ ticket.ticket }}
\r\n\u041e\u0447\u0435\u0440\u0435\u0434\u044c: {{ queue.title }}
\r\n\u0417\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a: {{ ticket.title }}
\r\n\u0421\u043e\u0437\u0434\u0430\u043d\u0430: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\n\u0410\u0432\u0442\u043e\u0440 \u0437\u0430\u044f\u0432\u043a\u0438: {{ ticket.submitter_email|default:\"Unknown\" }}
\r\n\u041f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442: {{ ticket.get_priority_display }}
\r\n\u0421\u0442\u0430\u0442\u0443\u0441: {{ ticket.get_status }}
\r\n\u041f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u0430: {{ ticket.get_assigned_to }}
\r\n\u041f\u0435\u0440\u0435\u0439\u0442\u0438 \u043a \u0437\u0430\u044f\u0432\u043a\u0435 \u041e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 (\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u044f)
\u0418\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435:
\r\n\r\n{{ ticket.description|linebreaksbr }}\r\n\r\n
\u0411\u044b\u043b\u043e \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u0435:
\r\n\r\n{{ ticket.resolution }}", + "locale": "ru", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.822Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 21, + "fields": { + "template_name": "closed_submitter", + "subject": " ", + "heading": "\u0417\u0430\u044f\u0432\u043a\u0430 \u0437\u0430\u043a\u0440\u044b\u0442\u0430", + "plain_text": "\u0417\u0434\u0440\u0430\u0432\u0441\u0442\u0432\u0443\u0439\u0442\u0435,\r\n\r\n\u0412\u0430\u043c\u0438 \u0431\u044b\u043b\u0430 \u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0430 \u0437\u0430\u044f\u0432\u043a\u0430 \"{{ ticket.title }}\" \u0423\u0432\u0435\u0434\u043e\u043c\u043b\u044f\u0435\u043c \u0412\u0430\u0441 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u0432\u0430\u0448\u0430 \u0437\u0430\u044f\u0432\u043a\u0430 \u0431\u044b\u043b\u0430 \u0437\u0430\u043a\u0440\u044b\u0442\u0430\r\n\r\n\u0415\u0441\u043b\u0438 \u0432\u044b \u0441\u0447\u0438\u0442\u0430\u0435\u0442\u0435, \u0447\u0442\u043e \u0434\u043b\u044f \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0430\u044f \u0440\u0430\u0431\u043e\u0442\u0430, \u043f\u043e\u0436\u0430\u043b\u0443\u0439\u0441\u0442\u0430, \u0441\u043e\u043e\u0431\u0449\u0438\u0442\u0435 \u043d\u0430\u043c \u043e\u0431 \u044d\u0442\u043e\u043c, \u043e\u0442\u0432\u0435\u0442\u0438\u0432 \u043d\u0430 \u044d\u0442\u043e \u043f\u0438\u0441\u044c\u043c\u043e.\r\n\r\n\u0414\u043b\u044f \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0430 \u0437\u0430\u044f\u0432\u043a\u0438 \u043f\u0435\u0440\u0435\u0439\u0434\u0438\u0442\u0435 \u043f\u043e \u0441\u0441\u044b\u043b\u043a\u0435 {{ ticket.ticket_url }}.\r\n\r\n\u0411\u044b\u043b\u043e \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u0435:\r\n\r\n{{ ticket.resolution }}", + "html": "
\u0417\u0434\u0440\u0430\u0432\u0441\u0442\u0432\u0443\u0439\u0442\u0435,
\r\n\r\n\u0412\u0430\u043c\u0438 \u0431\u044b\u043b\u0430 \u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0430 \u0437\u0430\u044f\u0432\u043a\u0430{{ ticket.title }} \u0423\u0432\u0435\u0434\u043e\u043c\u043b\u044f\u0435\u043c \u0412\u0430\u0441 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u0432\u0430\u0448\u0430 \u0437\u0430\u044f\u0432\u043a\u0430 \u0431\u044b\u043b\u0430 \u0437\u0430\u043a\u0440\u044b\u0442\u0430.
\r\n\r\n\u0411\u044b\u043b\u043e \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u0435:
\r\n\r\n{{ ticket.resolution }}\r\n\r\n
\u0414\u043b\u044f \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0430 \u0437\u0430\u044f\u0432\u043a\u0438 \u043f\u0435\u0440\u0435\u0439\u0434\u0438\u0442\u0435 \u043f\u043e \u0441\u0441\u044b\u043b\u043a\u0435 {{ ticket.ticket_url }}. \u0415\u0441\u043b\u0438 \u0432\u044b \u0441\u0447\u0438\u0442\u0430\u0435\u0442\u0435, \u0447\u0442\u043e \u0434\u043b\u044f \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0430\u044f \u0440\u0430\u0431\u043e\u0442\u0430, \u043f\u043e\u0436\u0430\u043b\u0443\u0439\u0441\u0442\u0430, \u0441\u043e\u043e\u0431\u0449\u0438\u0442\u0435 \u043d\u0430\u043c \u043e\u0431 \u044d\u0442\u043e\u043c, \u043e\u0442\u0432\u0435\u0442\u0438\u0432 \u043d\u0430 \u044d\u0442\u043e \u043f\u0438\u0441\u044c\u043c\u043e.
", + "locale": "ru", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.824Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 22, + "fields": { + "template_name": "escalated_cc", + "subject": " ", + "heading": "\u041f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442 \u0437\u0430\u044f\u0432\u043a\u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d", + "plain_text": "\u0417\u0434\u0440\u0430\u0432\u0441\u0442\u0432\u0443\u0439\u0442\u0435,\r\n\r\n\u0423\u0432\u0435\u0434\u043e\u043c\u043b\u044f\u0435\u043c \u0412\u0430\u0441 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442 \u0437\u0430\u044f\u0432\u043a\u0438 {{ ticket.ticket }} (\"{{ ticket.title }}\") \u0431\u044b\u043b \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d.\r\n\r\nID \u0437\u0430\u044f\u0432\u043a\u0438: {{ ticket.ticket }}\r\n\u041e\u0447\u0435\u0440\u0435\u0434\u044c: {{ queue.title }}\r\n\u0417\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a: {{ ticket.title }}\r\n\u0421\u043e\u0437\u0434\u0430\u043d\u0430: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\n\u0410\u0432\u0442\u043e\u0440 \u0437\u0430\u044f\u0432\u043a\u0438: {{ ticket.submitter_email|default:\"Unknown\" }}\r\n\u041f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442: {{ ticket.get_priority_display }}\r\n\u0421\u0442\u0430\u0442\u0443\u0441: {{ ticket.get_status }}\r\n\u041f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u0430: {{ ticket.get_assigned_to }}\r\n\u041f\u0435\u0440\u0435\u0439\u0442\u0438 \u043a \u0437\u0430\u044f\u0432\u043a\u0435: {{ ticket.staff_url }} (login required)\r\n\r\n\u0418\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435:\r\n\r\n{{ ticket.description }}", + "html": "\u0417\u0434\u0440\u0430\u0432\u0441\u0442\u0432\u0443\u0439\u0442\u0435,
\r\n\r\n\u0423\u0432\u0435\u0434\u043e\u043c\u043b\u044f\u0435\u043c \u0412\u0430\u0441 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442 \u0437\u0430\u044f\u0432\u043a\u0438 {{ ticket.ticket }} (\"{{ ticket.title }}\")\u0431\u044b\u043b \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d.
\r\n\r\n\r\nID \u0437\u0430\u044f\u0432\u043a\u0438: {{ ticket.ticket }}
\r\n\u041e\u0447\u0435\u0440\u0435\u0434\u044c: {{ queue.title }}
\r\n\u0417\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a: {{ ticket.title }}
\r\n\u0421\u043e\u0437\u0434\u0430\u043d\u0430: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\n\u0410\u0432\u0442\u043e\u0440 \u0437\u0430\u044f\u0432\u043a\u0438: {{ ticket.submitter_email|default:\"Unknown\" }}
\r\n\u041f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442: {{ ticket.get_priority_display }}
\r\n\u0421\u0442\u0430\u0442\u0443\u0441: {{ ticket.get_status }}
\r\n\u041f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u0430: {{ ticket.get_assigned_to }}
\r\n\u041f\u0435\u0440\u0435\u0439\u0442\u0438 \u043a \u0437\u0430\u044f\u0432\u043a\u0435 \u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 (\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u044f)
\u0418\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 :
\r\n\r\n{{ ticket.description|linebreaksbr }}", + "locale": "ru", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.827Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 23, + "fields": { + "template_name": "escalated_owner", + "subject": " ", + "heading": "\u041f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u043d\u043e\u0439 \u0412\u0430\u043c \u0437\u0430\u044f\u0432\u043a\u0438 \u0431\u044b\u043b \u043f\u043e\u0432\u044b\u0448\u0435\u043d", + "plain_text": "\u0417\u0434\u0440\u0430\u0432\u0441\u0442\u0432\u0443\u0439\u0442\u0435,\r\n\r\n\u041f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442 \u0437\u0430\u044f\u0432\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u0430 \u0412\u0430\u043c, \u0431\u044b\u043b \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d, \u0442\u0430\u043a \u043a\u0430\u043a \u043e\u043d\u0430 \u043e\u0441\u0442\u0430\u0432\u0430\u043b\u0430\u0441\u044c \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0434\u043e\u043b\u044c\u0448\u0435, \u0447\u0435\u043c \u043e\u0436\u0438\u0434\u0430\u043b\u043e\u0441\u044c.\r\n\r\nID \u0437\u0430\u044f\u0432\u043a\u0438: {{ ticket.ticket }}\r\n\u041e\u0447\u0435\u0440\u0435\u0434\u044c: {{ queue.title }}\r\n\u0417\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a: {{ ticket.title }}\r\n\u0421\u043e\u0437\u0434\u0430\u043d\u0430: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\n\u0410\u0432\u0442\u043e\u0440 \u0437\u0430\u044f\u0432\u043a\u0438: {{ ticket.submitter_email|default:\"Unknown\" }}\r\n\u041f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442: {{ ticket.get_priority_display }}\r\n\u0421\u0442\u0430\u0442\u0443\u0441: {{ ticket.get_status }}\r\n\u0410\u0434\u0440\u0435\u0441\u043e\u0432\u0430\u043d\u043d\u0430: {{ ticket.get_assigned_to }}\r\n\u041f\u0435\u0440\u0435\u0439\u0442\u0438 \u043a \u0437\u0430\u044f\u0432\u043a\u0435: {{ ticket.staff_url }} (\u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u0430 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u044f)\r\n\r\n\u0418\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435:\r\n\r\n{{ ticket.description }}\r\n\r\n\u041f\u043e\u0436\u0430\u043b\u0443\u0439\u0441\u0442\u0430, \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0438\u0442\u0435 \u0437\u0430\u044f\u0432\u043a\u0443 \u0438 \u0438 \u043f\u043e\u043f\u044b\u0442\u0430\u0439\u0442\u0435\u0441\u044c \u043d\u0430\u0439\u0442\u0438 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u0441\u0442\u0440\u0435\u0435.", + "html": "
\u0417\u0434\u0440\u0430\u0432\u0441\u0442\u0432\u0443\u0439\u0442\u0435,
\r\n\r\n\u041f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442 \u0437\u0430\u044f\u0432\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u0430 \u0412\u0430\u043c, \u0431\u044b\u043b \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d, \u0442\u0430\u043a \u043a\u0430\u043a \u043e\u043d\u0430 \u043e\u0441\u0442\u0430\u0432\u0430\u043b\u0430\u0441\u044c \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0434\u043e\u043b\u044c\u0448\u0435, \u0447\u0435\u043c \u043e\u0436\u0438\u0434\u0430\u043b\u043e\u0441\u044c.
\r\n\r\n\r\nID \u0437\u0430\u044f\u0432\u043a\u0438: {{ ticket.ticket }}
\r\n\u041e\u0447\u0435\u0440\u0435\u0434\u044c: {{ queue.title }}
\r\n\u0417\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a: {{ ticket.title }}
\r\n\u0421\u043e\u0437\u0434\u0430\u043d\u0430: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\n\u0410\u0432\u0442\u043e\u0440 \u0437\u0430\u044f\u0432\u043a\u0438: {{ ticket.submitter_email|default:\"Unknown\" }}
\r\n\u041f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442: {{ ticket.get_priority_display }}
\r\n\u0421\u0442\u0430\u0442\u0443\u0441: {{ ticket.get_status }}
\r\n\u041f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u0430: {{ ticket.get_assigned_to }}
\r\n\u041f\u0435\u0440\u0435\u0439\u0442\u0438 \u043a \u0437\u0430\u044f\u0432\u043a\u0435\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 (\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u044f)
\u0418\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0437\u0430\u044f\u0432\u043a\u0438:
\r\n\r\n{{ ticket.description|linebreaksbr }}", + "locale": "ru", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.830Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 24, + "fields": { + "template_name": "escalated_submitter", + "subject": " ", + "heading": "\u041f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u0430 \u0412\u0430\u0448\u0435\u0439 \u0437\u0430\u044f\u0432\u043a\u0438", + "plain_text": "\u0417\u0434\u0440\u0430\u0432\u0441\u0442\u0432\u0443\u0442\u0435,\r\n\r\n\u0412\u0430\u043c\u0438 \u0431\u044b\u043b\u0430 \u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0430 \u0437\u0430\u044f\u0432\u043a\u0430 \"{{ ticket.title }}\" \u0421\u043e\u0432\u0435\u0442\u0443\u0435\u043c \u0412\u0430\u043c \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u0430 \u044d\u0442\u043e\u0439 \u0437\u0430\u044f\u0432\u043a\u0438, \u0442\u0430\u043a \u043a\u0430\u043a \u043e\u043d\u0430 \u043e\u0441\u0442\u0430\u0432\u0430\u043b\u0430\u0441\u044c \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0434\u043e\u043b\u044c\u0448\u0435, \u0447\u0435\u043c \u043e\u0436\u0438\u0434\u0430\u043b\u043e\u0441\u044c.\r\n\r\n\u0412\u0441\u043a\u043e\u0440\u0435 \u043c\u044b \u043f\u0435\u0440\u0435\u0441\u043c\u043e\u0442\u0440\u0438\u043c \u0432\u0430\u0448\u0443 \u0437\u0430\u044f\u0432\u043a\u0443 \u0438 \u043f\u043e\u043f\u044b\u0442\u0430\u0435\u043c\u0441\u044f \u043d\u0430\u0439\u0442\u0438 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u0441\u0442\u0440\u0435\u0435.\r\n\r\n\u041f\u0435\u0440\u0435\u0439\u0442\u0438 \u043a \u0437\u0430\u044f\u0432\u043a\u0435 {{ ticket.ticket_url }}.", + "html": "
\u0417\u0434\u0440\u0430\u0432\u0441\u0442\u0432\u0443\u0439\u0442\u0435,
\r\n\r\n\u0412\u0430\u043c\u0438 \u0431\u044b\u043b\u0430 \u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0430 \u0437\u0430\u044f\u0432\u043a\u0430 {{ ticket.title }} \u0421\u043e\u0432\u0435\u0442\u0443\u0435\u043c \u0412\u0430\u043c \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\u0430 \u044d\u0442\u043e\u0439 \u0437\u0430\u044f\u0432\u043a\u0438, \u0442\u0430\u043a \u043a\u0430\u043a \u043e\u043d\u0430 \u043e\u0441\u0442\u0430\u0432\u0430\u043b\u0430\u0441\u044c \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0434\u043e\u043b\u044c\u0448\u0435, \u0447\u0435\u043c \u043e\u0436\u0438\u0434\u0430\u043b\u043e\u0441\u044c.
\r\n\r\n\u0412\u0441\u043a\u043e\u0440\u0435 \u043c\u044b \u043f\u0435\u0440\u0435\u0441\u043c\u043e\u0442\u0440\u0438\u043c \u0432\u0430\u0448\u0443 \u0437\u0430\u044f\u0432\u043a\u0443 \u0438 \u043f\u043e\u043f\u044b\u0442\u0430\u0435\u043c\u0441\u044f \u043d\u0430\u0439\u0442\u0438 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u0441\u0442\u0440\u0435\u0435.
\r\n\r\n\u041f\u0435\u0440\u0435\u0439\u0442\u0438 \u043a \u0437\u0430\u044f\u0432\u043a\u0435{{ ticket.ticket_url }}.
", + "locale": "ru", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.833Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 25, + "fields": { + "template_name": "newticket_cc", + "subject": " ", + "heading": "\u041f\u043e\u0434\u0430\u043d\u0430 \u043d\u043e\u0432\u0430\u044f \u0437\u0430\u044f\u0432\u043a\u0430", + "plain_text": "\u0417\u0434\u0440\u0430\u0432\u0441\u0442\u0432\u0443\u0439\u0442\u0435,\r\n\r\n\u0423\u0432\u0435\u0434\u043e\u043c\u043b\u044f\u0435\u043c \u0412\u0430\u0441 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u0431\u044b\u043b\u0430 \u043f\u043e\u0434\u0430\u043d\u0430 \u043d\u043e\u0432\u0430\u044f \u0437\u0430\u044f\u0432\u043a\u0430.\r\n\r\nID \u0437\u0430\u044f\u0432\u043a\u0438: {{ ticket.ticket }}\r\n\u041e\u0447\u0435\u0440\u0435\u0434\u044c: {{ queue.title }}\r\n\u0417\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a: {{ ticket.title }}\r\n\u0421\u043e\u0437\u0434\u0430\u043d\u0430: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\n\u0410\u0432\u0442\u043e\u0440 \u0437\u0430\u044f\u0432\u043a\u0438: {{ ticket.submitter_email|default:\"Unknown\" }}\r\n\u041f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442: {{ ticket.get_priority_display }}\r\n\u0421\u0442\u0430\u0442\u0443\u0441: {{ ticket.get_status }}\r\n\u041f\u0435\u0440\u0435\u0439\u0442\u0438 \u043a \u0437\u0430\u044f\u0432\u043a\u0435: {{ ticket.staff_url }} (login required)\r\n\r\n\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435:\r\n{{ ticket.description }}\r\n", + "html": "\u0417\u0434\u0440\u0430\u0432\u0441\u0442\u0432\u0443\u0439\u0442\u0435,
\r\n\r\n\u0423\u0432\u0435\u0434\u043e\u043c\u043b\u044f\u0435\u043c \u0412\u0430\u0441 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u0431\u044b\u043b\u0430 \u043f\u043e\u0434\u0430\u043d\u0430 \u043d\u043e\u0432\u0430\u044f \u0437\u0430\u044f\u0432\u043a\u0430
\r\n\r\n\r\nID \u0437\u0430\u044f\u0432\u043a\u0438: {{ ticket.ticket }}
\r\n\u041e\u0447\u0435\u0440\u0435\u0434\u044c: {{ queue.title }}
\r\n\u0417\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a: {{ ticket.title }}
\r\n\u0421\u043e\u0437\u0434\u0430\u043d\u0430: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\n\u0410\u0432\u0442\u043e\u0440 \u0437\u0430\u044f\u0432\u043a\u0438: {{ ticket.submitter_email|default:\"Unknown\" }}
\r\n\u041f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442: {{ ticket.get_priority_display }}
\r\n\u0421\u0442\u0430\u0442\u0443\u0441: {{ ticket.get_status }}
\r\n\u041f\u0435\u0440\u0435\u0439\u0442\u0438 \u043a \u0437\u0430\u044f\u0432\u043a\u0435 \u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 (\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u044f)
\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435:
\r\n\r\n{{ ticket.description|linebreaksbr }}", + "locale": "ru", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.836Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 26, + "fields": { + "template_name": "newticket_submitter", + "subject": " ", + "heading": "\u0412\u0430\u0448\u0430 \u0437\u0430\u044f\u0432\u043a\u0430 \u0431\u044b\u043b\u0430 \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u0430", + "plain_text": "\u0417\u0434\u0440\u0430\u0432\u0441\u0442\u0432\u0443\u0439\u0442\u0435,\r\n\r\n\u0423\u0432\u0435\u0434\u043e\u043c\u043b\u044f\u0435\u043c \u0412\u0430\u0441 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043c\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0412\u0430\u0448 \u0437\u0430\u043f\u0440\u043e\u0441 \u043d\u0430 \u0442\u0435\u043c\u0443 \"{{ ticket.title }}\". \r\n\r\n\u041d\u0430 \u0434\u0430\u043d\u043d\u043e\u043c \u044d\u0442\u0430\u043f\u0435 \u0412\u0430\u043c \u043d\u0435 \u043d\u0443\u0436\u043d\u043e \u043d\u0438\u0447\u0435\u0433\u043e \u0434\u0435\u043b\u0430\u0442\u044c. \u0412\u0430\u0448\u0435\u0439 \u0437\u0430\u044f\u0432\u043a\u0435 \u0431\u044b\u043b \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u043d\u043e\u043c\u0435\u0440 {{ ticket.ticket }}\u0438 \u0432\u0441\u043a\u043e\u0440\u0435 \u0412\u0430\u0448 \u0437\u0430\u043f\u0440\u043e\u0441 \u0431\u0443\u0434\u0435\u0442 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0430\u043d.\r\n\r\n\u0415\u0441\u043b\u0438 \u0412\u044b \u0445\u043e\u0442\u0438\u0442\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u0442\u044c \u043d\u0430\u043c \u043a\u0430\u043a\u0443\u044e-\u043b\u0438\u0431\u043e \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u0438\u043b\u0438 \u0435\u0441\u043b\u0438 \u0443 \u0412\u0430\u0441 \u0435\u0441\u0442\u044c \u0432\u043e\u043f\u0440\u043e\u0441\u044b \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0437\u0430\u044f\u0432\u043a\u0438, \u043f\u043e\u0436\u0430\u043b\u0443\u0439\u0441\u0442\u0430 \u043d\u0430\u043f\u0438\u0448\u0438\u0442\u0435 id \u0437\u0430\u044f\u0432\u043a\u0438 \"{{ ticket.ticket }}\" \u0432 \u0442\u0435\u043c\u0435 \u043f\u0438\u0441\u044c\u043c\u0430. \u041b\u0435\u0433\u0447\u0435 \u0432\u0441\u0435\u0433\u043e \u044d\u0442\u043e \u0441\u0434\u0435\u043b\u0430\u0442\u044c, \u043f\u0440\u043e\u0441\u0442\u043e \u043d\u0430\u0436\u0430\u0432 \"\u043e\u0442\u0432\u0435\u0442\u0438\u0442\u044c\".\r\n\r\n\u0415\u0441\u043b\u0438 \u0412\u044b \u0445\u043e\u0442\u0438\u0442\u0435 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u0437\u0430\u044f\u0432\u043a\u0443 \u043e\u043d\u043b\u0430\u0439\u043d, \u0441\u043e\u043e\u0431\u0449\u0438\u0442\u044c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u0438\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0438\u043b\u0438 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0438, \u0412\u044b \u043c\u043e\u0436\u0435\u0442\u0435 \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043f\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0439 \u0441\u0441\u044b\u043b\u043a\u0435. {{ ticket.ticket_url }}.\r\n\r\n\u041c\u044b \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0430\u0435\u043c \u0412\u0430\u0448 \u0437\u0430\u043f\u0440\u043e\u0441 \u0438 \u043f\u043e\u0441\u0442\u0430\u0440\u0430\u0435\u043c\u0441\u044f \u043d\u0430\u0439\u0442\u0438 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u0441\u0442\u0440\u0435\u0435. \u0412 \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u043c, \u043c\u044b \u0431\u0443\u0434\u0435\u043c \u0434\u0435\u0440\u0436\u0430\u0442\u044c \u0412\u0430\u0441 \u0432 \u043a\u0443\u0440\u0441\u0435 \u0434\u0435\u043b\u0430, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044f \u043f\u0438\u0441\u044c\u043c\u0430 \u0441 \u044d\u0442\u043e\u0433\u043e \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0433\u043e \u0430\u0434\u0440\u0435\u0441\u0430.", + "html": "
\u0417\u0434\u0440\u0430\u0432\u0441\u0442\u0432\u0443\u0439\u0442\u0435,
\r\n\r\n\u0423\u0432\u0435\u0434\u043e\u043c\u043b\u044f\u0435\u043c \u0412\u0430\u0441 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043c\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0412\u0430\u0448 \u0437\u0430\u043f\u0440\u043e\u0441 \u043d\u0430 \u0442\u0435\u043c\u0443 {{ ticket.title }}.
\r\n\r\n\u041d\u0430 \u0434\u0430\u043d\u043d\u043e\u043c \u044d\u0442\u0430\u043f\u0435 \u0412\u0430\u043c \u043d\u0435 \u043d\u0443\u0436\u043d\u043e \u043d\u0438\u0447\u0435\u0433\u043e \u0434\u0435\u043b\u0430\u0442\u044c. \u0412\u0430\u0448\u0435\u0439 \u0437\u0430\u044f\u0432\u043a\u0435 \u0431\u044b\u043b \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u043d\u043e\u043c\u0435\u0440 {{ ticket.ticket }} \u0438 \u0432\u0441\u043a\u043e\u0440\u0435 \u0412\u0430\u0448 \u0437\u0430\u043f\u0440\u043e\u0441 \u0431\u0443\u0434\u0435\u0442 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0430\u043d.
\r\n\r\n\u0415\u0441\u043b\u0438 \u0412\u044b \u0445\u043e\u0442\u0438\u0442\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u0442\u044c \u043d\u0430\u043c \u043a\u0430\u043a\u0443\u044e-\u043b\u0438\u0431\u043e \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u0438\u043b\u0438 \u0435\u0441\u043b\u0438 \u0443 \u0412\u0430\u0441 \u0435\u0441\u0442\u044c \u0432\u043e\u043f\u0440\u043e\u0441\u044b \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0437\u0430\u044f\u0432\u043a\u0438, \u043fo\u0436\u0430\u043b\u0443\u0439\u0441\u0442\u0430 \u043d\u0430\u043f\u0438\u0448\u0438\u0442\u0435 id \u0437\u0430\u044f\u0432\u043a\u0438 {{ ticket.ticket }} \u0432 \u0442\u0435\u043c\u0435 \u043f\u0438\u0441\u044c\u043c\u0430. \u041b\u0435\u0433\u0447\u0435 \u0432\u0441\u0435\u0433\u043e \u044d\u0442\u043e \u0441\u0434\u0435\u043b\u0430\u0442\u044c, \u043f\u0440\u043e\u0441\u0442\u043e \u043d\u0430\u0436\u0430\u0432 \"\u043e\u0442\u0432\u0435\u0442\u0438\u0442\u044c\".
\r\n\r\n\u0412\u044b \u0445\u043e\u0442\u0438\u0442\u0435 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u0437\u0430\u044f\u0432\u043a\u0443 \u043e\u043d\u043b\u0430\u0439\u043d, \u0441\u043e\u043e\u0431\u0449\u0438\u0442\u044c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u0438\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0438\u043b\u0438 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0438, \u0412\u044b \u043c\u043e\u0436\u0435\u0442\u0435 \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043f\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0439 \u0441\u0441\u044b\u043b\u043a\u0435. {{ ticket.ticket_url }}.
\r\n\r\n\u041c\u044b \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0430\u0435\u043c \u0412\u0430\u0448 \u0437\u0430\u043f\u0440\u043e\u0441 \u0438 \u043f\u043e\u0441\u0442\u0430\u0440\u0430\u0435\u043c\u0441\u044f \u043d\u0430\u0439\u0442\u0438 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u0441\u0442\u0440\u0435\u0435. \u0412 \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u043c, \u043c\u044b \u0431\u0443\u0434\u0435\u043c \u0434\u0435\u0440\u0436\u0430\u0442\u044c \u0412\u0430\u0441 \u0432 \u043a\u0443\u0440\u0441\u0435 \u0434\u0435\u043b\u0430, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044f \u043f\u0438\u0441\u044c\u043c\u0430 \u0441 \u044d\u0442\u043e\u0433\u043e \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0433\u043e \u0430\u0434\u0440\u0435\u0441\u0430.
", + "locale": "ru", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.838Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 27, + "fields": { + "template_name": "resolved_cc", + "subject": " ", + "heading": "\u0420\u0435\u0448\u0435\u043d\u0438\u0435 \u043d\u0430\u0439\u0434\u0435\u043d\u043e", + "plain_text": "\u0417\u0434\u0440\u0430\u0432\u0441\u0442\u0432\u0443\u0439\u0442\u0435,\r\n\r\n\u0411\u044b\u043b\u043e \u043d\u0430\u0439\u0434\u0435\u043d\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b, \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u043e\u0439 \u0432 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0439 \u0437\u0430\u044f\u0432\u043a\u0435:\r\n\r\nID \u0437\u0430\u044f\u0432\u043a\u0438: {{ ticket.ticket }}\r\n\u041e\u0447\u0435\u0440\u0435\u0434\u044c: {{ queue.title }}\r\n\u0417\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a: {{ ticket.title }}\r\n\u0421\u043e\u0437\u0434\u0430\u043d\u0430: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\n\u0410\u0432\u0442\u043e\u0440 \u0437\u0430\u044f\u0432\u043a\u0438: {{ ticket.submitter_email|default:\"Unknown\" }}\r\n\u041f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442: {{ ticket.get_priority_display }}\r\n\u0421\u0442\u0430\u0442\u0443\u0441: {{ ticket.get_status }}\r\n\u041f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u0430: {{ ticket.get_assigned_to }}\r\n\u041f\u0435\u0440\u0435\u0439\u0442\u0438 \u043a \u0437\u0430\u044f\u0432\u043a\u0435: {{ ticket.staff_url }} (\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u044f)\r\n\r\n\u0418\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435:\r\n\r\n{{ ticket.description }}\r\n\r\n\u0411\u044b\u043b\u043e \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u0435:\r\n\r\n{{ ticket.resolution }}\r\n\r\n\u042d\u0442\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u0431\u044b\u043b\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0430\u0432\u0442\u043e\u0440\u0443 \u0437\u0430\u044f\u0432\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0434\u043e\u043b\u0436\u0435\u043d \u0431\u0443\u0434\u0435\u0442 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u0442\u044c \u0435\u0433\u043e, \u043f\u0440\u0435\u0436\u0434\u0435 \u0447\u0435\u043c \u0412\u044b \u0441\u043c\u043e\u0436\u0435\u0442\u0435 \u0437\u0430\u043a\u0440\u044b\u0442\u044c \u044d\u0442\u0443 \u0437\u0430\u044f\u0432\u043a\u0443.", + "html": "\u0417\u0434\u0440\u0430\u0432\u0441\u0442\u0432\u0443\u0439\u0442\u0435,
\r\n\r\n\u0411\u044b\u043b\u043e \u043d\u0430\u0439\u0434\u0435\u043d\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b, \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u043e\u0439 \u0432 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0439 \u0437\u0430\u044f\u0432\u043a\u0435.
\r\n\r\n\r\nID \u0437\u0430\u044f\u0432\u043a\u0438: {{ ticket.ticket }}
\r\n\u041e\u0447\u0435\u0440\u0435\u0434\u044c: {{ queue.title }}
\r\n\u0417\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a: {{ ticket.title }}
\r\n\u0421\u043e\u0437\u0434\u0430\u043d\u0430: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\n\u0410\u0432\u0442\u043e\u0440 \u0437\u0430\u044f\u0432\u043a\u0438: {{ ticket.submitter_email|default:\"Unknown\" }}
\r\n\u041f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442: {{ ticket.get_priority_display }}
\r\n\u0421\u0442\u0430\u0442\u0443\u0441: {{ ticket.get_status }}
\r\n\u041f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u0430: {{ ticket.get_assigned_to }}
\r\n\u041f\u0435\u0440\u0435\u0439\u0442\u0438 \u043a \u0437\u0430\u044f\u0432\u043a\u0435 \u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 (\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u044f)
\u0418\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435:
\r\n\r\n{{ ticket.description|linebreaksbr }}\r\n\r\n
\u0411\u044b\u043b\u043e \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u0435:
\r\n\r\n{{ ticket.resolution }}\r\n\r\n
\u042d\u0442\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u0431\u044b\u043b\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0430\u0432\u0442\u043e\u0440\u0443 \u0437\u0430\u044f\u0432\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0434\u043e\u043b\u0436\u0435\u043d \u0431\u0443\u0434\u0435\u0442 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u0442\u044c \u0435\u0433\u043e, \u043f\u0440\u0435\u0436\u0434\u0435 \u0447\u0435\u043c \u0412\u044b \u0441\u043c\u043e\u0436\u0435\u0442\u0435 \u0437\u0430\u043a\u0440\u044b\u0442\u044c \u044d\u0442\u0443 \u0437\u0430\u044f\u0432\u043a\u0443.
", + "locale": "ru", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.840Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 28, + "fields": { + "template_name": "resolved_owner", + "subject": " ", + "heading": "\u0420\u0435\u0448\u0435\u043d\u0438\u0435 \u043d\u0430\u0439\u0434\u0435\u043d\u043e", + "plain_text": "\u0417\u0434\u0440\u0430\u0432\u0441\u0442\u0432\u0443\u0439\u0442\u0435,\r\n\r\n\u0411\u044b\u043b\u043e \u043d\u0430\u0439\u0434\u0435\u043d\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b, \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u043e\u0439 \u0432 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u043d\u043e\u0439 \u0412\u0430\u043c \u0437\u0430\u044f\u0432\u043a\u0435.\r\n\r\nID \u0437\u0430\u044f\u0432\u043a\u0438: {{ ticket.ticket }}\r\n\u041e\u0447\u0435\u0440\u0435\u0434\u044c: {{ queue.title }}\r\n\u0417\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a: {{ ticket.title }}\r\n\u0421\u043e\u0437\u0434\u0430\u043d\u0430: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\n\u0410\u0432\u0442\u043e\u0440 \u0437\u0430\u044f\u0432\u043a\u0438: {{ ticket.submitter_email|default:\"Unknown\" }}\r\n\u041f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442: {{ ticket.get_priority_display }}\r\n\u0421\u0442\u0430\u0442\u0443\u0441: {{ ticket.get_status }}\r\n\u041f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u0430: {{ ticket.get_assigned_to }}\r\n\u041f\u0435\u0440\u0435\u0439\u0442\u0438 \u043a \u0437\u0430\u044f\u0432\u043a\u0435: {{ ticket.staff_url }} (\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u044f)\r\n\r\n\u0418\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435:\r\n\r\n{{ ticket.description }}\r\n\r\n\u0411\u044b\u043b\u043e \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u0435:\r\n\r\n{{ ticket.resolution }}\r\n\r\n\u042d\u0442\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u0431\u044b\u043b\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0430\u0432\u0442\u043e\u0440\u0443 \u0437\u0430\u044f\u0432\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0434\u043e\u043b\u0436\u0435\u043d \u0431\u0443\u0434\u0435\u0442 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u0442\u044c \u0435\u0433\u043e, \u043f\u0440\u0435\u0436\u0434\u0435 \u0447\u0435\u043c \u0412\u044b \u0441\u043c\u043e\u0436\u0435\u0442\u0435 \u0437\u0430\u043a\u0440\u044b\u0442\u044c \u044d\u0442\u0443 \u0437\u0430\u044f\u0432\u043a\u0443.", + "html": "\u0417\u0434\u0440\u0430\u0432\u0441\u0442\u0432\u0443\u0439\u0442\u0435,
\r\n\r\n\u0411\u044b\u043b\u043e \u043d\u0430\u0439\u0434\u0435\u043d\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b, \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u043e\u0439 \u0432 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u043d\u043e\u0439 \u0412\u0430\u043c \u0437\u0430\u044f\u0432\u043a\u0435.
\r\n\r\n\r\nID \u0437\u0430\u044f\u0432\u043a\u0438: {{ ticket.ticket }}
\r\n\u043e\u0447\u0435\u0440\u0435\u0434\u044c: {{ queue.title }}
\r\n\u0417\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a: {{ ticket.title }}
\r\n\u0421\u043e\u0437\u0434\u0430\u043d\u0430: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\n\u0410\u0432\u0442\u043e\u0440 \u0437\u0430\u044f\u0432\u043a\u0438: {{ ticket.submitter_email|default:\"Unknown\" }}
\r\n\u041f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442: {{ ticket.get_priority_display }}
\r\n\u0421\u0442\u0430\u0442\u0443\u0441: {{ ticket.get_status }}
\r\n\u041f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u0430: {{ ticket.get_assigned_to }}
\r\n\u041f\u0435\u0440\u0435\u0439\u0442\u0438 \u043a \u0437\u0430\u044f\u0432\u043a\u0435 \u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 (\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u044f)
\u0418\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435:
\r\n\r\n{{ ticket.description|linebreaksbr }}\r\n\r\n
\u0411\u044b\u043b\u043e \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u0435:
\r\n\r\n{{ ticket.resolution }}\r\n\r\n
\u042d\u0442\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u0431\u044b\u043b\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0430\u0432\u0442\u043e\u0440\u0443 \u0437\u0430\u044f\u0432\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0434\u043e\u043b\u0436\u0435\u043d \u0431\u0443\u0434\u0435\u0442 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u0442\u044c \u0435\u0433\u043e, \u043f\u0440\u0435\u0436\u0434\u0435 \u0447\u0435\u043c \u0412\u044b \u0441\u043c\u043e\u0436\u0435\u0442\u0435 \u0437\u0430\u043a\u0440\u044b\u0442\u044c \u044d\u0442\u0443 \u0437\u0430\u044f\u0432\u043a\u0443.
", + "locale": "ru", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.844Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 29, + "fields": { + "template_name": "resolved_submitter", + "subject": " ", + "heading": "\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430, \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u0430\u044f \u0432 \u0412\u0430\u0448\u0435\u0439 \u0437\u0430\u044f\u0432\u043a\u0435 \u0431\u044b\u043b\u0430 \u0440\u0435\u0448\u0435\u043d\u0430.", + "plain_text": "\u0417\u0434\u0440\u0430\u0432\u0441\u0442\u0432\u0443\u0439\u0442\u0435,\r\n\r\n\u0412\u0430\u043c\u0438 \u0431\u044b\u043b\u0430 \u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0430 \u0437\u0430\u044f\u0432\u043a\u0430 \"{{ ticket.title }}\" \u0412 \u044d\u0442\u043e\u043c \u043f\u0438\u0441\u044c\u043c\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442\u0441\u044f \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u043e\u0439 \u0412\u0430\u043c\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b. \r\n\r\n\u0421\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u0431\u044b\u043b\u043e \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043e \u043a \u0437\u0430\u044f\u0432\u043a\u0435 {{ ticket.ticket }}:\r\n\r\n{{ resolution }}\r\n\r\n\u041d\u0435 \u043c\u043e\u0433\u043b\u0438 \u0431\u044b \u0412\u044b \u0441\u043e\u043e\u0431\u0449\u0438\u0442\u044c, \u043f\u043e\u0434\u0445\u043e\u0434\u0438\u0442 \u043b\u0438 \u0412\u0430\u043c \u044d\u0442\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u0435, \u0447\u0442\u043e\u0431\u044b \u043c\u044b \u043c\u043e\u0433\u043b\u0438 \u0437\u0430\u043a\u0440\u044b\u0442\u044c \u044d\u0442\u0443 \u0437\u0430\u044f\u0432\u043a\u0443? \u0415\u0441\u043b\u0438 \u0443 \u0412\u0430\u0441 \u0432\u043e\u0437\u043d\u0438\u043a\u043b\u0438 \u043a\u0430\u043a\u0438\u0435-\u043b\u0438\u0431\u043e \u0432\u043e\u043f\u0440\u043e\u0441\u044b \u0438\u043b\u0438 \u0441\u043e\u043c\u043d\u0435\u043d\u0438\u044f \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u0430\u0434\u0435\u043a\u0432\u0430\u0442\u043d\u043e\u0441\u0442\u0438 \u044d\u0442\u043e\u0433\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u044f, \u043f\u043e\u0436\u0430\u043b\u0443\u0439\u0441\u0442\u0430, \u043e\u0442\u0432\u0435\u0442\u044c\u0442\u0435 \u043d\u0430 \u044d\u0442\u043e \u043f\u0438\u0441\u044c\u043c\u043e.\r\n\r\n\u0414\u043b\u044f \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0430 \u0437\u0430\u044f\u0432\u043a\u0438 \u043f\u0435\u0440\u0435\u0439\u0434\u0438\u0442\u0435 \u043f\u043e \u0441\u0441\u044b\u043b\u043a\u0435 {{ ticket.ticket_url }}.", + "html": "\u0417\u0434\u0440\u0430\u0432\u0441\u0442\u0432\u0443\u0439\u0442\u0435,
\r\n\r\n\u0412\u0430\u043c\u0438 \u0431\u044b\u043b\u0430 \u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0430 \u0437\u0430\u044f\u0432\u043a\u0430 {{ ticket.title }} \u0412 \u044d\u0442\u043e\u043c \u043f\u0438\u0441\u044c\u043c\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442\u0441\u044f \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u043e\u0439 \u0412\u0430\u043c\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b.
\r\n\r\n\u0421\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0439 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 \u0431\u044b\u043b \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d \u043a \u0437\u0430\u044f\u0432\u043a\u0435 {{ ticket.ticket }}:
\r\n\r\n{{ resolution }}\r\n\r\n
\u041d\u0435 \u043c\u043e\u0433\u043b\u0438 \u0431\u044b \u0412\u044b \u0441\u043e\u043e\u0431\u0449\u0438\u0442\u044c, \u043f\u043e\u0434\u0445\u043e\u0434\u0438\u0442 \u043b\u0438 \u0412\u0430\u043c \u044d\u0442\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u0435, \u0447\u0442\u043e\u0431\u044b \u043c\u044b \u043c\u043e\u0433\u043b\u0438 \u0437\u0430\u043a\u0440\u044b\u0442\u044c \u044d\u0442\u0443 \u0437\u0430\u044f\u0432\u043a\u0443? \u0415\u0441\u043b\u0438 \u0443 \u0412\u0430\u0441 \u0432\u043e\u0437\u043d\u0438\u043a\u043b\u0438 \u043a\u0430\u043a\u0438\u0435-\u043b\u0438\u0431\u043e \u0432\u043e\u043f\u0440\u043e\u0441\u044b \u0438\u043b\u0438 \u0441\u043e\u043c\u043d\u0435\u043d\u0438\u044f \u0432 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u0438 \u0430\u0434\u0435\u043a\u0432\u0430\u0442\u043d\u043e\u0441\u0442\u0438 \u044d\u0442\u043e\u0433\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u044f, \u043f\u043e\u0436\u0430\u043b\u0443\u0439\u0441\u0442\u0430, \u043e\u0442\u0432\u0435\u0442\u044c\u0442\u0435 \u043d\u0430 \u044d\u0442\u043e \u043f\u0438\u0441\u044c\u043c\u043e.
\r\n\r\n\u0414\u043b\u044f \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0430 \u0437\u0430\u044f\u0432\u043a\u0438 \u043f\u0435\u0440\u0435\u0439\u0434\u0438\u0442\u0435 \u043f\u043e \u0441\u0441\u044b\u043b\u043a\u0435{{ ticket.ticket_url }}.
", + "locale": "ru", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.846Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 30, + "fields": { + "template_name": "updated_cc", + "subject": " ", + "heading": "\u0417\u0430\u044f\u0432\u043a\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0430", + "plain_text": "\u0417\u0434\u0440\u0430\u0432\u0441\u0442\u0432\u0443\u0439\u0442\u0435,\r\n\r\n\u0423\u0432\u0435\u0434\u043e\u043c\u043b\u044f\u0435\u043c \u0412\u0430\u0441 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e\u043e \u0437\u0430\u044f\u0432\u043a\u0430 {{ ticket.ticket }} (\"{{ ticket.title }}\") \u043e\u0442 {{ ticket.submitter_email }} \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0430.\r\n\r\nID \u0437\u0430\u044f\u0432\u043a\u0438: {{ ticket.ticket }}\r\n\u041e\u0447\u0435\u0440\u0435\u0434\u044c: {{ queue.title }}\r\n\u0417\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a: {{ ticket.title }}\r\n\u0421\u043e\u0437\u0434\u0430\u043d\u0430: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\n\u0410\u0432\u0442\u043e\u0440 \u0437\u0430\u044f\u0432\u043a\u0438: {{ ticket.submitter_email|default:\"Unknown\" }}\r\n\u041f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442: {{ ticket.get_priority_display }}\r\n\u0421\u0442\u0430\u0442\u0443\u0441: {{ ticket.get_status }}\r\n\u041f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u0430: {{ ticket.get_assigned_to }}\r\n\u041f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u043e\u043d\u043b\u0430\u0439\u043d: {{ ticket.staff_url }} (login required)\r\n\r\n\u0418\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435:\r\n\r\n{{ ticket.description }}\r\n\r\n\u0411\u044b\u043b \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0439 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439:\r\n\r\n{{ comment }}\r\n\r\n\u042d\u0442\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f {% if private %}\u043d\u0435 {% endif %} \u0431\u044b\u043b\u0430 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0430\u0434\u0440\u0435\u0441\u0430\u0442\u0443been e-mailed to the submitter.\r\n\r\n\u0415\u0441\u043b\u0438 \u0412\u044b \u0445\u043e\u0442\u0438\u0442\u0435 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c \u0437\u0430\u044f\u0432\u043a\u0443 \u043e\u043d\u043b\u0430\u0439\u043d, \u043f\u0435\u0440\u0435\u0439\u0434\u0438\u0442\u0435 \u043f\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0439 \u0441\u0441\u044b\u043b\u043a\u0435{{ ticket.staff_url }}.", + "html": "\u0417\u0434\u0440\u0430\u0432\u0441\u0442\u0432\u0443\u0439\u0442\u0435,
\r\n\r\n\u0423\u0432\u0435\u0434\u043e\u043c\u043b\u044f\u0435\u043c \u0412\u0430\u0441 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u0437\u0430\u044f\u0432\u043a\u0430{{ ticket.ticket }} (\"{{ ticket.title }}\") \u043e\u0442 {{ ticket.submitter_email }} \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0430.
\r\n\r\n\r\nID \u0437\u0430\u044f\u0432\u043a\u0438: {{ ticket.ticket }}
\r\n\u041e\u0447\u0435\u0440\u0435\u0434\u044c: {{ queue.title }}
\r\n\u0417\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a: {{ ticket.title }}
\r\n\u0421\u043e\u0437\u0434\u0430\u043d\u0430: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\n\u0410\u0432\u0442\u043e\u0440 \u0437\u0430\u044f\u0432\u043a\u0438: {{ ticket.submitter_email|default:\"Unknown\" }}
\r\n\u041f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442: {{ ticket.get_priority_display }}
\r\n\u0421\u0442\u0430\u0442\u0443\u0441: {{ ticket.get_status }}
\r\n\u041f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u0430: {{ ticket.get_assigned_to }}
\r\n\u041f\u0435\u0440\u0435\u0439\u0442\u0438 \u043a \u0437\u0430\u044f\u0432\u043a\u0435 \u041e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 (\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u044f)
\u0418\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 :
\r\n\r\n{{ ticket.description|linebreaksbr }}\r\n\r\n
\u0411\u044b\u043b \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0439 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439:
\r\n\r\n{{ comment }}\r\n\r\n
\u042d\u0442\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f {% if private %}\u043d\u0435{% endif %} \u0431\u044b\u043b\u0430 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430 \u043d\u0430 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u044b\u0439 \u044f\u0449\u0438\u043a \u0430\u0432\u0442\u043e\u0440\u0430 \u0437\u0430\u044f\u0432\u043a\u0438.
", + "locale": "ru", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.849Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 31, + "fields": { + "template_name": "updated_owner", + "subject": " ", + "heading": "\u0417\u0430\u044f\u0432\u043a\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0430", + "plain_text": "\u0417\u0434\u0440\u0430\u0432\u0441\u0442\u0432\u0443\u0439\u0442\u0435,\r\n\r\n\u0423\u0432\u0435\u0434\u043e\u043c\u043b\u044f\u0435\u043c \u0412\u0430\u0441 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043a \u0437\u0430\u044f\u0432\u043a\u0435 {{ ticket.ticket }} (\"{{ ticket.title }}\") \u043e\u0442 {{ ticket.submitter_email }}, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u043d\u0430 \u0412\u0430\u043c, \u0431\u044b\u043b \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d \u043d\u043e\u0432\u044b\u0439 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439.\r\n\r\nID \u0437\u0430\u044f\u0432\u043a\u0438: {{ ticket.ticket }}\r\n\u041e\u0447\u0435\u0440\u0435\u0434\u044c: {{ queue.title }}\r\n\u0417\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a: {{ ticket.title }}\r\n\u0421\u043e\u0437\u0434\u0430\u043d\u0430: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\n\u0410\u0432\u0442\u043e\u0440 \u0437\u0430\u044f\u0432\u043a\u0438: {{ ticket.submitter_email|default:\"Unknown\" }}\r\n\u041f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442: {{ ticket.get_priority_display }}\r\n\u0421\u0442\u0430\u0442\u0443\u0441: {{ ticket.get_status }}\r\n\u041f\u0440\u0441\u0432\u043e\u0435\u043d\u0430: {{ ticket.get_assigned_to }}\r\n\u041f\u0435\u0440\u0435\u0439\u0442\u0438 \u043a \u0437\u0430\u044f\u0432\u043a\u0435: {{ ticket.staff_url }} (\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u044f)\r\n\r\n\u0418\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435:\r\n\r\n{{ ticket.description }}\r\n\r\n\u0411\u044b\u043b \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0439 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439:\r\n\r\n{{ comment }}\r\n\r\n\u042d\u0442\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f {% if private %}\u043d\u0435 {% endif %} \u0431\u044b\u043b\u0430 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430 \u043d\u0430 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u044b\u0439 \u044f\u0449\u0438\u043a \u0430\u0432\u0442\u043e\u0440\u0430 \u0437\u0430\u044f\u0432\u043a\u0438.\r\n\r\n\u0414\u043b\u044f \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0430 \u0437\u0430\u044f\u0432\u043a\u0438 \u043e\u043d\u043b\u0430\u0439\u043d \u043f\u0435\u0440\u0435\u0439\u0434\u0438\u0442\u0435 \u043f\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0439 \u0441\u0441\u044b\u043b\u043a\u0435 {{ ticket.staff_url }}.", + "html": "\u0417\u0434\u0440\u0430\u0432\u0441\u0442\u0432\u0443\u0439\u0442\u0435,
\r\n\r\n\u0423\u0432\u0435\u0434\u043e\u043c\u043b\u044f\u0435\u043c \u0412\u0430\u0441 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043a \u0437\u0430\u044f\u0432\u043a\u0435 {{ ticket.ticket }} (\"{{ ticket.title }}\") \u043e\u0442 {{ ticket.submitter_email }}, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u043d\u0430 \u0412\u0430\u043c, \u0431\u044b\u043b \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d \u043d\u043e\u0432\u044b\u0439 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439.
\r\n\r\n\r\nID \u0437\u0430\u044f\u0432\u043a\u0438: {{ ticket.ticket }}
\r\n\u041e\u0447\u0435\u0440\u0435\u0434\u044c: {{ queue.title }}
\r\n\u0417\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a: {{ ticket.title }}
\r\n\u0421\u043e\u0437\u0434\u0430\u043d\u0430: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\n\u0410\u0432\u0442\u043e\u0440 \u0437\u0430\u044f\u0432\u043a\u0438: {{ ticket.submitter_email|default:\"Unknown\" }}
\r\n\u041f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442: {{ ticket.get_priority_display }}
\r\n\u0421\u0442\u0430\u0442\u0443\u0441: {{ ticket.get_status }}
\r\n\u041f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u0430: {{ ticket.get_assigned_to }}
\r\n\u041f\u0435\u0440\u0435\u0439\u0442\u0438 \u043a \u0437\u0430\u044f\u0432\u043a\u0435 \u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 (\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u044f)
\u0418\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 :
\r\n\r\n{{ ticket.description|linebreaksbr }}\r\n\r\n
\u0411\u044b\u043b \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0439 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439:
\r\n\r\n{{ comment }}\r\n\r\n
\u042d\u0442\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f{% if private %}\u043d\u0435 {% endif %}\u0431\u044b\u043b\u0430 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u043d\u0430 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u044b\u0439 \u044f\u0449\u0438\u043a \u0430\u0432\u0442\u043e\u0440\u0430 \u0437\u0430\u044f\u0432\u043a\u0438.
", + "locale": "ru", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.852Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 32, + "fields": { + "template_name": "updated_submitter", + "subject": " ", + "heading": "\u041a \u0412\u0430\u0448\u0435\u0439 \u0437\u0430\u044f\u0432\u043a\u0435 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d \u043d\u043e\u0432\u044b\u0439 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439", + "plain_text": "\u0417\u0434\u0440\u0430\u0432\u0441\u0442\u0432\u0443\u0439\u0442\u0435,\r\n\r\n\u0412\u0430\u043c\u0438 \u0431\u044b\u043b\u0430 \u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0430 \u0437\u0430\u044f\u0432\u043a\u0430 \"{{ ticket.title }}\". \u0421\u043e\u0432\u0435\u0442\u0443\u0435\u043c \u0412\u0430\u043c \u043f\u0440\u043e\u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0443 \u0437\u0430\u044f\u0432\u043a\u0443.\r\n\r\n\u0411\u044b\u043b \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0439 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 {{ ticket.ticket }}:\r\n\r\n{{ comment }}\r\n\r\n\u0415\u0441\u043b\u0438 \u0412\u044b \u0445\u043e\u0442\u0438\u0442\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u0442\u044c \u043d\u0430\u043c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u043f\u043e\u0436\u0430\u043b\u0443\u0439\u0441\u0442\u0430 \u043e\u0442\u0432\u0435\u0442\u044c\u0442\u0435 \u043d\u0430 \u044d\u0442\u043e \u043f\u0438\u0441\u044c\u043c\u043e. \u0418\u043b\u0438 \u0436\u0435 \u0412\u044b \u043c\u043e\u0436\u0435\u0442\u0435 \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u044d\u0442\u043e, \u043e\u0441\u0442\u0430\u0432\u0438\u0432 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 \u043a \u0441\u0432\u043e\u0435\u0439 \u0437\u0430\u044f\u0432\u043a\u0435. \u041f\u0435\u0440\u0435\u0439\u0442\u0438 \u043a \u0437\u0430\u044f\u0432\u043a\u0435{{ ticket.ticket_url }}.", + "html": "\u0417\u0434\u0440\u0430\u0432\u0441\u0442\u0432\u0443\u0439\u0442\u0435,
\r\n\r\n\u0412\u0430\u043c\u0438 \u0431\u044b\u043b\u0430 \u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0430 \u0437\u0430\u044f\u0432\u043a\u0430 {{ ticket.title }} \u0421\u043e\u0432\u0435\u0442\u0443\u0435\u043c \u0412\u0430\u043c \u043f\u0440\u043e\u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0443 \u0437\u0430\u044f\u0432\u043a\u0443.
\r\n\r\n\u0421\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0439 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 \u0431\u044b\u043b \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d \u043a \u0437\u0430\u044f\u0432\u043a\u0435{{ ticket.ticket }}:
\r\n\r\n{{ comment }}\r\n\r\n
\u0415\u0441\u043b\u0438 \u0412\u044b \u0445\u043e\u0442\u0438\u0442\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u0442\u044c \u043d\u0430\u043c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u043f\u043e\u0436\u0430\u043b\u0443\u0439\u0441\u0442\u0430 \u043e\u0442\u0432\u0435\u0442\u044c\u0442\u0435 \u043d\u0430 \u044d\u0442\u043e \u043f\u0438\u0441\u044c\u043c\u043e. \u0418\u043b\u0438 \u0436\u0435 \u0412\u044b \u043c\u043e\u0436\u0435\u0442\u0435 \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u044d\u0442\u043e, \u043e\u0441\u0442\u0430\u0432\u0438\u0432 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 \u043a \u0441\u0432\u043e\u0435\u0439 \u0437\u0430\u044f\u0432\u043a\u0435. \u041f\u0435\u0440\u0435\u0439\u0442\u0438 \u043a \u0437\u0430\u044f\u0432\u043a\u0435{{ ticket.ticket_url }}.
", + "locale": "ru", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.854Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 33, + "fields": { + "template_name": "assigned_cc", + "subject": "(Zugewiesen)", + "heading": "Ticket Zugewiesen", + "plain_text": "Hallo,\r\n\r\ngerne teilen wir Ihnen mit, dass Ticket {{ ticket.ticket }} (\"{{ ticket.title }}\") f\u00fcr {{ ticket.submitter_email }} {% if ticket.assigned_to %}zugewiesen wurde an {{ ticket.assigned_to }}{% else %}nicht mehr zugeordnet ist{% endif %}.\r\n\r\nTicket ID: {{ ticket.ticket }}\r\nTicketsammlung: {{ queue.title }}\r\nTitel: {{ ticket.title }}\r\nEr\u00f6ffnet: {{ ticket.created|date:\"l, j. N Y, \\u\\m H:i\" }}\r\nErsteller: {{ ticket.submitter_email|default:\"Unbekannt\" }}\r\nPriorit\u00e4t: {{ ticket.get_priority_display }}\r\nStatus: {{ ticket.get_status }}\r\nZugewiesen an: {{ ticket.get_assigned_to }}\r\nOnline ansehen: {{ ticket.staff_url }}\r\n\r\nDie urspr\u00fcngliche Ticketbeschreibung war:\r\n\r\n{{ ticket.description }}\r\n\r\n", + "html": "Hallo,
\r\n\r\ngerne teilen wir Ihnen mit, dass Ticket {{ ticket.ticket }} ({{ ticket.title }}) f\u00fcr {{ ticket.submitter_email }} {% if ticket.assigned_to %}zugewiesen wurde an {{ ticket.assigned_to }}{% else %}nicht mehr zugeordnet ist{% endif %}.
\r\n\r\n\r\nTicket ID: {{ ticket.ticket }}
\r\nTicketsammlung: {{ queue.title }}
\r\nTitel: {{ ticket.title }}
\r\nEr\u00f6ffnet: {{ ticket.created|date:\"l, j. N Y, \\u\\m H:i\" }}
\r\nErsteller: {{ ticket.submitter_email|default:\"Unbekannt\" }}
\r\nPriorit\u00e4t: {{ ticket.get_priority_display }}
\r\nStatus: {{ ticket.get_status }}
\r\nZugewiesen an: {{ ticket.get_assigned_to }}
\r\nOnline ansehen um dieses Ticket zu aktualisieren (Login erforderlich).
Die urspr\u00fcngliche Ticketbeschreibung war:
\r\n\r\n{{ ticket.description|linebreaksbr }}", + "locale": "de", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.858Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 34, + "fields": { + "template_name": "assigned_owner", + "subject": "(Ihnen zugewiesen)", + "heading": "Ein Ticket wurde Ihnen zugewiesen", + "plain_text": "Hello,\r\n\r\ngerne teilen wir Ihnen mit, dass Ticket {{ ticket.ticket }} (\"{{ ticket.title }}\") f\u00fcr {{ ticket.submitter_email }} Ihnen zugewiesen wurde.\r\n\r\nTicket ID: {{ ticket.ticket }}\r\nTicketsammlung: {{ queue.title }}\r\nTitel: {{ ticket.title }}\r\nEr\u00f6ffnet: {{ ticket.created|date:\"l, j. N Y, \\u\\m H:i\" }}\r\nErsteller: {{ ticket.submitter_email|default:\"Unbekannt\" }}\r\nPriorit\u00e4t: {{ ticket.get_priority_display }}\r\nStatus: {{ ticket.get_status }}\r\nZugewiesen an: SIE\r\nOnline ansehen: {{ ticket.staff_url }}\r\n\r\nDie urspr\u00fcngliche Ticketbeschreibung war:\r\n\r\n{{ ticket.description }}\r\n\r\n", + "html": "
Hallo,
\r\n\r\ngerne teilen wir Ihnen mit, dass Ticket {{ ticket.ticket }} ({{ ticket.title }}) f\u00fcr {{ ticket.submitter_email }} Ihnen zugewiesen wurde.
\r\n\r\n\r\nTicket ID: {{ ticket.ticket }}
\r\nTicketsammlung: {{ queue.title }}
\r\nTitel: {{ ticket.title }}
\r\nEr\u00f6ffnet: {{ ticket.created|date:\"l, j. N Y, \\u\\m H:i\" }}
\r\nErsteller: {{ ticket.submitter_email|default:\"Unbekannt\" }}
\r\nPriorit\u00e4t: {{ ticket.get_priority_display }}
\r\nStatus: {{ ticket.get_status }}
\r\nZugewiesen an: SIE
\r\nOnline ansehen um dieses Ticket zu aktualisieren (Login erforderlich)
Die urspr\u00fcngliche Ticketbeschreibung war:
\r\n\r\n{{ ticket.description|linebreaksbr }}", + "locale": "de", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.860Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 35, + "fields": { + "template_name": "closed_cc", + "subject": "(Geschlossen)", + "heading": "Ticket geschlossen", + "plain_text": "Hallo,\r\n\r\nTicket {{ ticket.title }} (\"{{ ticket.title }}\"){% if ticket.assigned_to %}, zugewiesen an {{ ticket.assigned_to }}{% endif %} wurde geschlossen.\r\n\r\nTicket ID: {{ ticket.ticket }}\r\nTicketsammlung: {{ queue.title }}\r\nTitel: {{ ticket.title }}\r\nEr\u00f6ffnet: {{ ticket.created|date:\"l, j. N Y, \\u\\m H:i\" }}\r\nErsteller: {{ ticket.submitter_email|default:\"Unbekannt\" }}\r\nPriorit\u00e4t: {{ ticket.get_priority_display }}\r\nStatus: {{ ticket.get_status }}\r\nZugewiesen an: {{ ticket.get_assigned_to }}\r\nOnline ansehen: {{ ticket.staff_url }} (Login erforderlich)\r\n\r\nDie urspr\u00fcngliche Ticketbeschreibung war:\r\n\r\n{{ ticket.description }}\r\n\r\nDie L\u00f6sung war:\r\n\r\n{{ resolution }}\r\n\r\n", + "html": "
Hallo,
\r\n\r\nTicket {{ ticket.title }} ('{{ ticket.title }}'){% if ticket.assigned_to %}, zugewiesen an {{ ticket.get_assigned_to }}{% endif %} wurde geschlossen.
\r\n\r\n\r\nTicket ID: {{ ticket.ticket }}
\r\nTicketsammlung: {{ queue.title }}
\r\nTitel: {{ ticket.title }}
\r\nEr\u00f6ffnet: {{ ticket.created|date:\"l, j. N Y, \\u\\m H:i\" }}
\r\nErsteller: {{ ticket.submitter_email|default:\"Unbekannt\" }}
\r\nPriorit\u00e4t: {{ ticket.get_priority_display }}
\r\nStatus: {{ ticket.get_status }}
\r\nZugewiesen an: {{ ticket.get_assigned_to }}
\r\nOnline ansehen um dieses Ticket zu aktualisieren (Login erforderlich)
Die urspr\u00fcngliche Ticketbeschreibung war:
\r\n\r\n{{ ticket.description|linebreaksbr }}\r\n\r\n
Die L\u00f6sung war:
\r\n\r\n{{ resolution }}\r\n\r\n
Sie k\u00f6nnen dieses Ticket unter folgendem Link online ansehen: {{ ticket.staff_url }}.
", + "locale": "de", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.862Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 36, + "fields": { + "template_name": "closed_owner", + "subject": "(Geschlossen)", + "heading": "Ticket geschlossen", + "plain_text": "Hallo,\r\n\r\nDas folgende Ticket, das Ihnen zugewiesen war, wurde geschlossen.\r\n\r\nTicket ID: {{ ticket.ticket }}\r\nTicketsammlung: {{ queue.title }}\r\nTitel: {{ ticket.title }}\r\nEr\u00f6ffnet: {{ ticket.created|date:\"l, j. N Y, \\u\\m H:i\" }}\r\nErsteller: {{ ticket.submitter_email|default:\"Unbekannt\" }}\r\nPriorit\u00e4t: {{ ticket.get_priority_display }}\r\nStatus: {{ ticket.get_status }}\r\nZugewiesen an: {{ ticket.get_assigned_to }}\r\nOnline ansehen: {{ ticket.staff_url }} (Login erforderlich)\r\n\r\nDie L\u00f6sung war:\r\n\r\n{{ resolution }}\r\n\r\n", + "html": "Hallo,
\r\n\r\nDas folgende Ticket, das Ihnen zugewiesen war, wurde geschlossen.
\r\n\r\n\r\nTicket ID: {{ ticket.ticket }}
\r\nTicketsammlung: {{ queue.title }}
\r\nTitel: {{ ticket.title }}
\r\nEr\u00f6ffnet: {{ ticket.created|date:\"l, j. N Y, \\u\\m H:i\" }}
\r\nErsteller: {{ ticket.submitter_email|default:\"Unbekannt\" }}
\r\nPriorit\u00e4t: {{ ticket.get_priority_display }}
\r\nStatus: {{ ticket.get_status }}
\r\nZugewiesen an: {{ ticket.get_assigned_to }}
\r\nOnline ansehen um dieses Ticket zu aktualisieren (Login erforderlich)
Die urspr\u00fcngliche Ticketbeschreibung war:
\r\n\r\n{{ ticket.description|linebreaksbr }}\r\n\r\n
Die L\u00f6sung war:
\r\n\r\n{{ ticket.resolution }}", + "locale": "de", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.864Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 37, + "fields": { + "template_name": "closed_submitter", + "subject": "(Geschlossen)", + "heading": "Ticket geschlossen", + "plain_text": "Hallo,\r\n\r\nSie haben k\u00fcrzlich das Ticket \"{{ ticket.title }}\" bei uns er\u00f6ffnet. Hiermit m\u00f6chten wir Ihnen mitteilen das dieses Ticket nun geschlossen wurde.\r\n\r\nDie L\u00f6sung war:\r\n\r\n{{ resolution }}\r\n\r\nWenn Sie der Meinung sind, dass weitere Arbeit an diesem Ticket n\u00f6tig ist, dann m\u00f6chten wir Sie bitten, auf diese E-Mail zu antworten und den Betreff unver\u00e4ndert zu lassen.\r\n\r\nUnter folgendem Link k\u00f6nnen Sie das Ticket online ansehen: {{ ticket.ticket_url }}.\r\n\r\n", + "html": "
Hallo,
\r\n\r\nSie haben k\u00fcrzlich das Ticket {{ ticket.title }} bei uns er\u00f6ffnet. Hiermit m\u00f6chten wir Ihnen mitteilen das dieses Ticket nun geschlossen wurde.
\r\n\r\nDie L\u00f6sung war:
\r\n\r\n{{ ticket.resolution }}\r\n\r\n
Unter folgendem Link k\u00f6nnen Sie das Ticket online ansehen: {{ ticket.ticket_url }}. Wenn Sie der Meinung sind, dass weitere Arbeit an diesem Ticket n\u00f6tig ist, dann m\u00f6chten wir Sie bitten, auf diese E-Mail zu antworten und den Betreff unver\u00e4ndert zu lassen.
", + "locale": "de", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.866Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 38, + "fields": { + "template_name": "escalated_cc", + "subject": "(Eskaliert)", + "heading": "Ticket Eskaliert", + "plain_text": "Hallo,\r\n\r\nGerne teilen wir Ihnen mit, dass das Ticket {{ ticket.ticket }} (\"{{ ticket.title }}\") automatisch eskaliert wurde.\r\n\r\nTicket ID: {{ ticket.ticket }}\r\nTicketsammlung: {{ queue.title }}\r\nTitel: {{ ticket.title }}\r\nEr\u00f6ffnet: {{ ticket.created|date:\"l, j. N Y, \\u\\m H:i\" }}\r\nErsteller: {{ ticket.submitter_email|default:\"Unbekannt\" }}\r\nPriorit\u00e4t: {{ ticket.get_priority_display }}\r\nStatus: {{ ticket.get_status }}\r\nZugewiesen an: {{ ticket.get_assigned_to }}\r\nOnline ansehen: {{ ticket.staff_url }} (Login erforderlich)\r\n\r\nDie urspr\u00fcngliche Ticketbeschreibung war:\r\n\r\n{{ ticket.description }}\r\n\r\n", + "html": "Hallo,
\r\n\r\nGerne teilen wir Ihnen mit, dass das Ticket {{ ticket.ticket }} ('{{ ticket.title }}') automatisch eskaliert wurde.
\r\n\r\n\r\nTicket ID: {{ ticket.ticket }}
\r\nTicketsammlung: {{ queue.title }}
\r\nTitel: {{ ticket.title }}
\r\nEr\u00f6ffnet: {{ ticket.created|date:\"l, j. N Y, \\u\\m H:i\" }}
\r\nErsteller: {{ ticket.submitter_email|default:\"Unbekannt\" }}
\r\nPriorit\u00e4t: {{ ticket.get_priority_display }}
\r\nStatus: {{ ticket.get_status }}
\r\nZugewiesen an: {{ ticket.get_assigned_to }}
\r\nOnline ansehen um dieses Ticket zu aktualisieren (Login erforderlich)
Die urspr\u00fcngliche Ticketbeschreibung war:
\r\n\r\n{{ ticket.description|linebreaksbr }}", + "locale": "de", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.868Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 39, + "fields": { + "template_name": "escalated_owner", + "subject": "(Eskaliert)", + "heading": "Ein an Sie zugewiesenes Ticket wurde eskaliert", + "plain_text": "Hallo,\r\n\r\nEin an Sie zugewiesenes Ticket wurde automatisch eskaliert da es l\u00e4nger offen war als erwartet.\r\n\r\nTicket ID: {{ ticket.ticket }}\r\nTicketsammlung: {{ queue.title }}\r\nTitel: {{ ticket.title }}\r\nEr\u00f6ffnet: {{ ticket.created|date:\"l, j. N Y, \\u\\m H:i\" }}\r\nErsteller: {{ ticket.submitter_email|default:\"Unbekannt\" }}\r\nPriorit\u00e4t: {{ ticket.get_priority_display }}\r\nStatus: {{ ticket.get_status }}\r\nZugewiesen an: {{ ticket.get_assigned_to }}\r\nOnline ansehen: {{ ticket.staff_url }} (Login erforderlich)\r\n\r\nDie urspr\u00fcngliche Ticketbeschreibung war:\r\n\r\n{{ ticket.description }}\r\n\r\nBitte pr\u00fcfen Sie dieses Ticket und versuchen Sie so bald wie m\u00f6glich eine L\u00f6sung zu finden.\r\n\r\n", + "html": "
Hallo,
\r\n\r\nEin an Sie zugewiesenes Ticket wurde automatisch eskaliert da es l\u00e4nger offen war als erwartet.
\r\n\r\n\r\nTicket ID: {{ ticket.ticket }}
\r\nTicketsammlung: {{ queue.title }}
\r\nTitel: {{ ticket.title }}
\r\nEr\u00f6ffnet: {{ ticket.created|date:\"l, j. N Y, \\u\\m H:i\" }}
\r\nErsteller: {{ ticket.submitter_email|default:\"Unbekannt\" }}
\r\nPriorit\u00e4t: {{ ticket.get_priority_display }}
\r\nStatus: {{ ticket.get_status }}
\r\nZugewiesen an: {{ ticket.get_assigned_to }}
\r\nOnline ansehen um dieses Ticket zu aktualisieren (Login erforderlich)
Die urspr\u00fcngliche Ticketbeschreibung war:
\r\n\r\n{{ ticket.description|linebreaksbr }}\r\n\r\n
Bitte pr\u00fcfen Sie dieses Ticket und versuchen Sie so bald wie m\u00f6glich eine L\u00f6sung zu finden.
", + "locale": "de", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.871Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 40, + "fields": { + "template_name": "escalated_submitter", + "subject": "(Eskaliert)", + "heading": "Ihr Ticket wurde eskaliert", + "plain_text": "Hallo,\r\n\r\nSie haben k\u00fcrzlich das Ticket \"{{ ticket.title }}\" bei uns er\u00f6ffnet. Hiermit m\u00f6chten wir Ihnen mitteilen, dass dieses Ticket automatisch eskaliert wurde, da es l\u00e4nger offen war als erwartet.\r\n\r\nWir werden Ihr Ticket in K\u00fcrze pr\u00fcfen und so bald wie m\u00f6glich eine L\u00f6sung finden.\r\n\r\nUnter folgendem Link k\u00f6nnen das Ticket online ansehen: {{ ticket.ticket_url }}.\r\n\r\n", + "html": "Hallo,
\r\n\r\nSie haben k\u00fcrzlich das Ticket {{ ticket.title }} bei uns er\u00f6ffnet. Hiermit m\u00f6chten wir Ihnen mitteilen, dass dieses Ticket automatisch eskaliert wurde, da es l\u00e4nger offen war als erwartet.
\r\n\r\nWir werden Ihr Ticket in K\u00fcrze pr\u00fcfen und so bald wie m\u00f6glich eine L\u00f6sung finden.
\r\n\r\nUnter folgendem Link k\u00f6nnen das Ticket online ansehen: {{ ticket.ticket_url }}.
", + "locale": "de", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.872Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 41, + "fields": { + "template_name": "newticket_cc", + "subject": "(Er\u00f6ffnet)", + "heading": "Neues Ticket er\u00f6ffnet", + "plain_text": "Hallo,\r\n\r\nGerne teilen wir Ihnen mit, dass ein neues Ticket er\u00f6ffnet wurde.\r\n\r\nTicket ID: {{ ticket.ticket }}\r\nTicketsammlung: {{ queue.title }}\r\nTitel: {{ ticket.title }}\r\nEr\u00f6ffnet: {{ ticket.created|date:\"l, j. N Y, \\u\\m H:i\" }}\r\nErsteller: {{ ticket.submitter_email|default:\"Unbekannt\" }}\r\nPriorit\u00e4t: {{ ticket.get_priority_display }}\r\nStatus: {{ ticket.get_status }}\r\nOnline ansehen: {{ ticket.staff_url }} (Login erforderlich)\r\n\r\nBeschreibung:\r\n{{ ticket.description }}\r\n\r\n", + "html": "Hallo,
\r\n\r\nGerne teilen wir Ihnen mit, dass ein neues Ticket er\u00f6ffnet wurde.
\r\n\r\n\r\nTicket ID: {{ ticket.ticket }}
\r\nTicketsammlung: {{ queue.title }}
\r\nTitel: {{ ticket.title }}
\r\nEr\u00f6ffnet: {{ ticket.created|date:\"l, j. N Y, \\u\\m H:i\" }}
\r\nErsteller: {{ ticket.submitter_email|default:\"Unbekannt\" }}
\r\nPriorit\u00e4t: {{ ticket.get_priority_display }}
\r\nStatus: {{ ticket.get_status }}
\r\nOnline ansehen um dieses Ticket zu aktualisieren (Login erforderlich)
Beschreibung:
\r\n\r\n{{ ticket.description|linebreaksbr }}", + "locale": "de", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.874Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 42, + "fields": { + "template_name": "newticket_submitter", + "subject": "(Er\u00f6ffnet)", + "heading": "Ihr Ticket wurde er\u00f6ffnet", + "plain_text": "Hallo,\r\n\r\nGerne teilen wir Ihnen mit, dass wir Ihre vince.Anforderung mit dem Betreff \"{{ ticket.title }}\" erhalten haben. \r\n\r\nAn dieser Stelle sind keine weiteren Eingaben von Ihnen n\u00f6tig. Ihrem Ticket wurde die ID {{ ticket.ticket }} zugewiesen und es wird in K\u00fcrze bearbeitet werden.\r\n\r\nWenn Sie uns weitere Details mitteilen m\u00f6chten oder wenn Sie Fragen zu diesem Ticket haben, k\u00f6nnen Sie uns gerne eine E-Mail senden mit der Ticket ID '{{ ticket.ticket }}' im Betreff. Die einfachste M\u00f6glichkeit dazu ist, direkt auf diese E-Mail zu \"antworten\".\r\n\r\nWenn Sie das Ticket online ansehen m\u00f6chten, um weitere Informationen hinzuzuf\u00fcgen, Dateien anzuh\u00e4ngen oder Aktualisierungen anzusehen, besuchen Sie bitte folgenden Link: {{ ticket.ticket_url }}.\r\n\r\nWir werden Ihr Ticket pr\u00fcfen und so bald wie m\u00f6glich eine L\u00f6sung erarbeiten. Weitere Aktualisierungen und die L\u00f6sung werden wir an diese E-Mail Adresse senden.\r\n", + "html": "
Hallo,
\r\n\r\nGerne teilen wir Ihnen mit, dass wir Ihre vince.Anforderung mit dem Betreff {{ ticket.title }} erhalten haben.
\r\n\r\nAn dieser Stelle sind keine weiteren Eingaben von Ihnen n\u00f6tig. Ihrem Ticket wurde die ID {{ ticket.ticket }} zugewiesen und es wird in K\u00fcrze bearbeitet werden.
\r\n\r\nWenn Sie uns weitere Details mitteilen m\u00f6chten oder wenn Sie Fragen zu diesem Ticket haben, k\u00f6nnen Sie uns gerne eine E-Mail senden mit der Ticket ID {{ ticket.ticket }} im Betreff. Die einfachste M\u00f6glichkeit dazu ist, direkt auf diese E-Mail zu \"antworten\".
\r\n\r\nWenn Sie das Ticket online ansehen m\u00f6chten, um weitere Informationen hinzuzuf\u00fcgen, Dateien anzuh\u00e4ngen oder Aktualisierungen anzusehen, besuchen Sie bitte folgenden Link: {{ ticket.ticket_url }}.
\r\n\r\nWir werden Ihr Ticket pr\u00fcfen und so bald wie m\u00f6glich eine L\u00f6sung erarbeiten. Weitere Aktualisierungen und die L\u00f6sung werden wir an diese E-Mail Adresse senden.
", + "locale": "de", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.877Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 43, + "fields": { + "template_name": "resolved_cc", + "subject": "(Gel\u00f6st)", + "heading": "Ticket gel\u00f6st", + "plain_text": "Hallo,\r\n\r\nDas folgende Ticket wurde gel\u00f6st:\r\n\r\nTicket ID: {{ ticket.ticket }}\r\nTicketsammlung: {{ queue.title }}\r\nTitel: {{ ticket.title }}\r\nEr\u00f6ffnet: {{ ticket.created|date:\"l, j. N Y, \\u\\m H:i\" }}\r\nErsteller: {{ ticket.submitter_email|default:\"Unbekannt\" }}\r\nPriorit\u00e4t: {{ ticket.get_priority_display }}\r\nStatus: {{ ticket.get_status }}\r\nZugewiesen an: {{ ticket.get_assigned_to }}\r\nOnline ansehen: {{ ticket.staff_url }} (Login erforderlich)\r\n\r\nDie urspr\u00fcngliche Ticketbeschreibung war:\r\n\r\n{{ ticket.description }}\r\n\r\nDie vorgeschlagene L\u00f6sung ist:\r\n\r\n{{ ticket.resolution }}\r\n\r\nDiese L\u00f6sung wurde an den Ersteller gesendet, der die L\u00f6sung \u00fcberpr\u00fcfen muss, bevor dieses Ticket geschlossen werden kann.\r\n\r\n", + "html": "Hallo,
\r\n\r\nDas folgende Ticket wurde gel\u00f6st:
\r\n\r\n\r\nTicket ID: {{ ticket.ticket }}
\r\nTicketsammlung: {{ queue.title }}
\r\nTitel: {{ ticket.title }}
\r\nEr\u00f6ffnet: {{ ticket.created|date:\"l, j. N Y, \\u\\m H:i\" }}
\r\nErsteller: {{ ticket.submitter_email|default:\"Unbekannt\" }}
\r\nPriorit\u00e4t: {{ ticket.get_priority_display }}
\r\nStatus: {{ ticket.get_status }}
\r\nZugewiesen an: {{ ticket.get_assigned_to }}
\r\nOnline ansehen um dieses Ticket zu aktualisieren (Login erforderlich)
Die urspr\u00fcngliche Ticketbeschreibung war:
\r\n\r\n{{ ticket.description|linebreaksbr }}\r\n\r\n
Die vergeschlagene L\u00f6sung ist:
\r\n\r\n{{ ticket.resolution }}\r\n\r\n
Diese L\u00f6sung wurde an den Ersteller gesendet, der die L\u00f6sung \u00fcberpr\u00fcfen muss, bevor dieses Ticket geschlossen werden kann.
", + "locale": "de", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.879Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 44, + "fields": { + "template_name": "resolved_owner", + "subject": "(Gel\u00f6st)", + "heading": "Ticket gel\u00f6st", + "plain_text": "Hallo,\r\n\r\nEin Ihnen zugeordnetes Ticket wurde gel\u00f6st.\r\n\r\nTicket ID: {{ ticket.ticket }}\r\nTicketsammlung: {{ queue.title }}\r\nTitel: {{ ticket.title }}\r\nEr\u00f6ffnet: {{ ticket.created|date:\"l, j. N Y, \\u\\m H:i\" }}\r\nErsteller: {{ ticket.submitter_email|default:\"Unbekannt\" }}\r\nPriorit\u00e4t: {{ ticket.get_priority_display }}\r\nStatus: {{ ticket.get_status }}\r\nZugewiesen an: {{ ticket.get_assigned_to }}\r\nOnline ansehen: {{ ticket.staff_url }} (Login erforderlich)\r\n\r\nDie urspr\u00fcngliche Ticketbeschreibung war:\r\n\r\n{{ ticket.description }}\r\n\r\nDie vorgeschlagene L\u00f6sung ist:\r\n\r\n{{ ticket.resolution }}\r\n\r\nDiese L\u00f6sung wurde an den Ersteller gesendet, der die L\u00f6sung \u00fcberpr\u00fcfen muss, bevor dieses Ticket geschlossen werden kann.\r\n\r\n", + "html": "Hallo,
\r\n\r\nEin Ihnen zugeordnetes Ticket wurde gel\u00f6st.
\r\n\r\n\r\nTicket ID: {{ ticket.ticket }}
\r\nTicketsammlung: {{ queue.title }}
\r\nTitel: {{ ticket.title }}
\r\nEr\u00f6ffnet: {{ ticket.created|date:\"l, j. N Y, \\u\\m H:i\" }}
\r\nErsteller: {{ ticket.submitter_email|default:\"Unbekannt\" }}
\r\nPriorit\u00e4t: {{ ticket.get_priority_display }}
\r\nStatus: {{ ticket.get_status }}
\r\nZugewiesen an: {{ ticket.get_assigned_to }}
\r\nOnline ansehen um dieses Ticket zu aktualisieren (Login erforderlich)
Die urspr\u00fcngliche Ticketbeschreibung war:
\r\n\r\n{{ ticket.description|linebreaksbr }}\r\n\r\n
Die vergeschlagene L\u00f6sung ist:
\r\n\r\n{{ ticket.resolution }}\r\n\r\n
Diese L\u00f6sung wurde an den Ersteller gesendet, der die L\u00f6sung \u00fcberpr\u00fcfen muss, bevor dieses Ticket geschlossen werden kann.
", + "locale": "de", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.881Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 45, + "fields": { + "template_name": "resolved_submitter", + "subject": "(Gel\u00f6st)", + "heading": "Ihr Ticket wurde gel\u00f6st", + "plain_text": "Hallo,\r\n\r\nSie haben k\u00fcrzlich das Ticket \"{{ ticket.title }}\" bei uns er\u00f6ffnet. Hiermit m\u00f6chten wir Ihnen mitteilen, dass daf\u00fcr eine L\u00f6sung gefunden wurde.\r\n\r\nF\u00fcr das Ticket {{ ticket.ticket }} wurde folgende L\u00f6sung vorgeschlagen:\r\n\r\n{{ resolution }}\r\n\r\nWir m\u00f6chten Sie bitten zu best\u00e4tigen, dass diese L\u00f6sung Ihren Anforderungen entspricht, damit wir dieses Ticket schlie\u00dfen k\u00f6nnen. Wenn Sie weitere Fragen haben, oder der Meinung sind, dass diese L\u00f6sung nicht ausreichend ist, dann antworten Sie bitte auf diese E-Mail und lassen den Betreff unver\u00e4ndert.\r\n\r\nUnter folgendem Link k\u00f6nnen Sie das Ticket online ansehen: {{ ticket.ticket_url }}\r\n\r\n", + "html": "Hallo,
\r\n\r\nSie haben k\u00fcrzlich das Ticket {{ ticket.title }} bei uns er\u00f6ffnet. Hiermit m\u00f6chten wir Ihnen mitteilen, dass daf\u00fcr eine L\u00f6sung gefunden wurde.
\r\n\r\nF\u00fcr das Ticket {{ ticket.ticket }} wurde folgende L\u00f6sung vorgeschlagen:
\r\n\r\n{{ resolution }}\r\n\r\n
Wir m\u00f6chten Sie bitten zu best\u00e4tigen, dass diese L\u00f6sung Ihren Anforderungen entspricht, damit wir dieses Ticket schlie\u00dfen k\u00f6nnen. Wenn Sie weitere Fragen haben, oder der Meinung sind, dass diese L\u00f6sung nicht ausreichend ist, dann antworten Sie bitte auf diese E-Mail und lassen den Betreff unver\u00e4ndert.
\r\n\r\nUnter folgendem Link k\u00f6nnen Sie das Ticket online ansehen: {{ ticket.ticket_url }}.
", + "locale": "de", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.883Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 46, + "fields": { + "template_name": "updated_cc", + "subject": "(Aktualisiert)", + "heading": "Ticket aktualisiert", + "plain_text": "Hallo,\r\n\r\nGerne teilen wir Ihnen mit, dass das Ticket {{ ticket.ticket }} (\"{{ ticket.title }}\") f\u00fcr {{ ticket.submitter_email }} aktualisiert wurde.\r\n\r\nTicket ID: {{ ticket.ticket }}\r\nTicketsammlung: {{ queue.title }}\r\nTitel: {{ ticket.title }}\r\nEr\u00f6ffnet: {{ ticket.created|date:\"l, j. N Y, \\u\\m H:i\" }}\r\nErsteller: {{ ticket.submitter_email|default:\"Unbekannt\" }}\r\nPriorit\u00e4t: {{ ticket.get_priority_display }}\r\nStatus: {{ ticket.get_status }}\r\nZugewiesen an: {{ ticket.get_assigned_to }}\r\nOnline ansehen: {{ ticket.staff_url }} (Login erforderlich)\r\n\r\nUrspr\u00fcngliche Ticketbeschreibung:\r\n\r\n{{ ticket.description }}\r\n\r\nFolgender Kommentar wurde hinzugef\u00fcgt:\r\n\r\n{{ comment }}\r\n\r\nDiese Information wurde {% if private %}nicht {% endif %} an den Ersteller gesendet.\r\n\r\nUnter folgendem Link k\u00f6nnen Sie das Ticket online ansehen: {{ ticket.staff_url }}.\r\n\r\n", + "html": "Hallo,
\r\n\r\nGerne teilen wir Ihnen mit, dass das Ticket {{ ticket.ticket }} (\"{{ ticket.title }}\") f\u00fcr {{ ticket.submitter_email }} aktualisiert wurde.
\r\n\r\n\r\nTicket ID: {{ ticket.ticket }}
\r\nTicketsammlung: {{ queue.title }}
\r\nTitel: {{ ticket.title }}
\r\nEr\u00f6ffnet: {{ ticket.created|date:\"l, j. N Y, \\u\\m H:i\" }}
\r\nErsteller: {{ ticket.submitter_email|default:\"Unbekannt\" }}
\r\nPriorit\u00e4t: {{ ticket.get_priority_display }}
\r\nStatus: {{ ticket.get_status }}
\r\nZugewiesen an: {{ ticket.get_assigned_to }}
\r\nOnline ansehen um dieses Ticket zu aktualisieren (Login erforderlich)
Die urspr\u00fcngliche Ticketbeschreibung war:
\r\n\r\n{{ ticket.description|linebreaksbr }}\r\n\r\n
Folgender Kommentar wurde hinzugef\u00fcgt:
\r\n\r\n{{ comment }}\r\n\r\n
Diese Information wurde {% if private %}nicht {% endif %} an den Ersteller gesendet.
", + "locale": "de", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.885Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 47, + "fields": { + "template_name": "updated_owner", + "subject": "(Aktualisiert)", + "heading": "Ticket Aktualisiert", + "plain_text": "Hallo,\r\n\r\nGerne teilen wir Ihnen mit, dass das Ticket {{ ticket.ticket }} (\"{{ ticket.title }}\") f\u00fcr {{ ticket.submitter_email }}, das Ihnen zugewiesen ist, aktualisiert wurde.\r\n\r\nTicket ID: {{ ticket.ticket }}\r\nTicketsammlung: {{ queue.title }}\r\nTitel: {{ ticket.title }}\r\nEr\u00f6ffnet: {{ ticket.created|date:\"l, j. N Y, \\u\\m H:i\" }}\r\nErsteller: {{ ticket.submitter_email|default:\"Unbekannt\" }}\r\nPriorit\u00e4t: {{ ticket.get_priority_display }}\r\nStatus: {{ ticket.get_status }}\r\nZugewiesen an: {{ ticket.get_assigned_to }}\r\nOnline ansehen: {{ ticket.staff_url }} (Login erforderlich)\r\n\r\nUrspr\u00fcngliche Ticketbeschreibung:\r\n\r\n{{ ticket.description }}\r\n\r\nFolgender Kommentar wurde hinzugef\u00fcgt:\r\n\r\n{{ comment }}\r\n\r\nDiese Information wurde {% if private %}nicht {% endif %} an den Ersteller gesendet.\r\n\r\nUnter folgendem Link k\u00f6nnen Sie das Ticket online ansehen: {{ ticket.staff_url }}\r\n\r\n", + "html": "Hallo,
\r\n\r\nGerne teilen wir Ihnen mit, dass das Ticket {{ ticket.ticket }} (\"{{ ticket.title }}\") f\u00fcr {{ ticket.submitter_email }}, das Ihnen zugewiesen ist, aktualisiert wurde.
\r\n\r\n\r\nTicket ID: {{ ticket.ticket }}
\r\nTicketsammlung: {{ queue.title }}
\r\nTitel: {{ ticket.title }}
\r\nEr\u00f6ffnet: {{ ticket.created|date:\"l, j. N Y, \\u\\m H:i\" }}
\r\nErsteller: {{ ticket.submitter_email|default:\"Unbekannt\" }}
\r\nPriorit\u00e4t: {{ ticket.get_priority_display }}
\r\nStatus: {{ ticket.get_status }}
\r\nZugewiesen an: {{ ticket.get_assigned_to }}
\r\nOnline ansehen um dieses Ticket zu aktualisieren (Login erforderlich)
Die urspr\u00fcngliche Ticketbeschreibung war:
\r\n\r\n{{ ticket.description|linebreaksbr }}\r\n\r\n
Folgender Kommentar wurde hinzugef\u00fcgt:
\r\n\r\n{{ comment }}\r\n\r\n
Diese Information wurde {% if private %}nicht {% endif %} an den Ersteller gesendet.
", + "locale": "de", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.887Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 48, + "fields": { + "template_name": "updated_submitter", + "subject": "(Aktualisiert)", + "heading": "Ihr Ticket wurde aktualisiert", + "plain_text": "Hallo,\r\n\r\nSie haben k\u00fcrzlich das Ticket \"{{ ticket.title }}\" bei uns er\u00f6ffnet. Hiermit m\u00f6chten wir Ihnen eine Aktualisierung mitteilen.\r\n\r\nFolgender Kommentar wurde zum Ticket {{ ticket.ticket }} hinzugef\u00fcgt:\r\n\r\n{{ comment }}\r\n\r\nWenn Sie uns weitere Informationen mitteilen m\u00f6chten, antworten Sie bitte auf diese E-Mail und lassen den Betreff unver\u00e4ndert. Oder Sie k\u00f6nnen das Ticket online ansehen und aktualisieren: {{ ticket.ticket_url }}\r\n\r\n", + "html": "Hallo,
\r\n\r\nSie haben k\u00fcrzlich das Ticket {{ ticket.title }} bei uns er\u00f6ffnet. Hiermit m\u00f6chten wir Ihnen eine Aktualisierung mitteilen.
\r\n\r\nFolgender Kommentar wurde zum Ticket {{ ticket.ticket }} hinzugef\u00fcgt:
\r\n\r\n{{ comment }}\r\n\r\n
Wenn Sie uns weitere Informationen mitteilen m\u00f6chten, antworten Sie bitte auf diese E-Mail und lassen den Betreff unver\u00e4ndert. Oder Sie k\u00f6nnen das Ticket online ansehen und aktualisieren: {{ ticket.ticket_url }}.
", + "locale": "de", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.889Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 49, + "fields": { + "template_name": "assigned_cc", + "subject": "(Assign\u00e9)", + "heading": "Ticket Assign\u00e9", + "plain_text": "Bonjour,\r\n\r\nCe courriel indicatif permet de vous pr\u00e9venir que le ticket {{ ticket.ticket }} (\"{{ ticket.title }}\") par {{ ticket.submitter_email }} {% if ticket.assigned_to %} a \u00e9t\u00e9 assign\u00e9 \u00e0 {{ ticket.assigned_to }}{% else %} n'est plus assign\u00e9 \u00e0 personne{% endif %}.\r\n\r\nIdentifiant\u00a0: {{ ticket.ticket }}\r\nFile d'attente\u00a0: {{ queue.title }}\r\nTitre\u00a0: {{ ticket.title }}\r\nOuvert le\u00a0: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\nSoumis par\u00a0: {{ ticket.submitter_email|default:\"Unknown\" }}\r\nPriorit\u00e9\u00a0: {{ ticket.get_priority_display }}\r\nStatut\u00a0: {{ ticket.get_status }}\r\nAssign\u00e9 \u00e0\u00a0: {{ ticket.get_assigned_to }}\r\nAdresse\u00a0: {{ ticket.staff_url }}\r\n\r\nLa description originelle \u00e9tait\u00a0:\r\n\r\n{{ ticket.description }}\r\n\r\n", + "html": "Bonjour,
\r\n\r\nCe courriel indicatif permet de vous pr\u00e9venir que le ticket {{ ticket.ticket }} ({{ ticket.title }}) par {{ ticket.submitter_email }} {% if ticket.assigned_to %}a \u00e9t\u00e9 assign\u00e9 \u00e0 {{ ticket.assigned_to }}{% else %} n'est plus assign\u00e9 \u00e0 personne{% endif %}.
\r\n\r\n\r\nFile d'attente : {{ ticket.ticket }}
\r\nQueue : {{ queue.title }}
\r\nTitre : {{ ticket.title }}
\r\nOuvert le : {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\nSoumis par : {{ ticket.submitter_email|default:\"Unknown\" }}
\r\nPriorit\u00e9 : {{ ticket.get_priority_display }}
\r\nStatut : {{ ticket.get_status }}
\r\nAssign\u00e9 \u00e0 : {{ ticket.get_assigned_to }}
\r\nVoir le ticket en ligne pour le mettre \u00e0 jour (apr\u00e8s authentification)
Pour m\u00e9moire, la description originelle \u00e9tait :
\r\n\r\n{{ ticket.description|linebreaksbr }}", + "locale": "fr", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.890Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 50, + "fields": { + "template_name": "assigned_owner", + "subject": "(Pour vous)", + "heading": "Le ticket vous est assign\u00e9", + "plain_text": "Bonjour,\r\n\r\nCe courriel indicatif permet de vous pr\u00e9venir que le ticket {{ ticket.ticket }} (\"{{ ticket.title }}\") pour {{ ticket.submitter_email }} vous a \u00e9t\u00e9 assign\u00e9.\r\n\r\nIdentifiant : {{ ticket.ticket }}\r\nFile d'attente : {{ queue.title }}\r\nTitre : {{ ticket.title }}\r\nOuvert le : {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\nSoumis par : {{ ticket.submitter_email|default:\"Unknown\" }}\r\nPriorit\u00e9 : {{ ticket.get_priority_display }}\r\nStatut : {{ ticket.get_status }}\r\nAssign\u00e9 \u00e0 : {{ ticket.get_assigned_to }}\r\nAdresse : {{ ticket.staff_url }}\r\n\r\nLa description originelle \u00e9tait :\r\n\r\n{{ ticket.description }}", + "html": "
Bonjour,
\r\n\r\nCe courriel indicatif permet de vous pr\u00e9venir que le ticket {{ ticket.ticket }} ({{ ticket.title }}) pour {{ ticket.submitter_email }} vous a \u00e9t\u00e9 assign\u00e9.
\r\n\r\n\r\nFile d'attente : {{ ticket.ticket }}
\r\nQueue : {{ queue.title }}
\r\nTitre : {{ ticket.title }}
\r\nOuvert le : {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\nSoumis par : {{ ticket.submitter_email|default:\"Unknown\" }}
\r\nPriorit\u00e9 : {{ ticket.get_priority_display }}
\r\nStatut : {{ ticket.get_status }}
\r\nAssign\u00e9 \u00e0 : {{ ticket.get_assigned_to }}
\r\nVoir le ticket en ligne pour le mettre \u00e0 jour (apr\u00e8s authentification)
Pour m\u00e9moire, la description originelle \u00e9tait :
\r\n\r\n{{ ticket.description|linebreaksbr }}", + "locale": "fr", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.893Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 51, + "fields": { + "template_name": "closed_cc", + "subject": "(Ferm\u00e9)", + "heading": "Ticket Ferm\u00e9", + "plain_text": "Bonjour,\r\n\r\nLe ticket {{ ticket.title }} (\"{{ ticket.title }}\"){% if ticket.assigned_to %}, assign\u00e9 \u00e0 {{ ticket.assigned_to }}{% endif %} a \u00e9t\u00e9 ferm\u00e9.\r\n\r\nIdentifiant : {{ ticket.ticket }}\r\nFile d'attente : {{ queue.title }}\r\nTitre : {{ ticket.title }}\r\nOuvert le : {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\nSoumis par : {{ ticket.submitter_email|default:\"Unknown\" }}\r\nPriorit\u00e9 : {{ ticket.get_priority_display }}\r\nStatut : {{ ticket.get_status }}\r\nAssign\u00e9 \u00e0 : {{ ticket.get_assigned_to }}\r\nAdresse : {{ ticket.staff_url }}\r\n\r\nLa description originelle \u00e9tait :\r\n\r\n{{ ticket.description }}\r\n\r\nLa motivation de r\u00e9solution est:\r\n\r\n{{ resolution }}\r\n\r\n", + "html": "
Bonjour,
\r\n\r\nLe ticket {{ ticket.title }} ('{{ ticket.title }}'){% if ticket.assigned_to %}, assign\u00e9 \u00e0 {{ ticket.get_assigned_to }}{% endif %} a \u00e9t\u00e9 ferm\u00e9.
\r\n\r\n\r\nFile d'attente : {{ ticket.ticket }}
\r\nQueue : {{ queue.title }}
\r\nTitre : {{ ticket.title }}
\r\nOuvert le : {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\nSoumis par : {{ ticket.submitter_email|default:\"Unknown\" }}
\r\nPriorit\u00e9 : {{ ticket.get_priority_display }}
\r\nStatut : {{ ticket.get_status }}
\r\nAssign\u00e9 \u00e0 : {{ ticket.get_assigned_to }}
\r\nVoir le ticket en ligne pour le mettre \u00e0 jour (apr\u00e8s authentification)
Pour m\u00e9moire, la description originelle \u00e9tait :
\r\n\r\n{{ ticket.description|linebreaksbr }}\r\n
La motivation de r\u00e9solution est:
\r\n\r\n{{ resolution }}", + "locale": "fr", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.895Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 52, + "fields": { + "template_name": "closed_owner", + "subject": "(Ferm\u00e9 - \u00e0 vous)", + "heading": "Ticket Ferm\u00e9", + "plain_text": "Bonjour,\r\n\r\nLe ticket suivant qui vous est actuellement assign\u00e9 a \u00e9t\u00e9 ferm\u00e9.\r\n\r\n\r\nIdentifiant : {{ ticket.ticket }}\r\nFile d'attente : {{ queue.title }}\r\nTitre : {{ ticket.title }}\r\nOuvert le : {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\nSoumis par : {{ ticket.submitter_email|default:\"Unknown\" }}\r\nPriorit\u00e9 : {{ ticket.get_priority_display }}\r\nStatut : {{ ticket.get_status }}\r\nAssign\u00e9 \u00e0 : {{ ticket.get_assigned_to }}\r\nAdresse : {{ ticket.staff_url }} (authentification obligatoire)\r\n\r\nLa description originelle \u00e9tait :\r\n\r\n{{ ticket.description }}\r\n\r\nLa motivation de r\u00e9solution est:\r\n\r\n{{ resolution }}", + "html": "
Bonjour,
\r\n\r\n\r\nLe ticket suivant qui vous est actuellement assign\u00e9 a \u00e9t\u00e9 ferm\u00e9.
\r\n\r\n\r\nFile d'attente : {{ ticket.ticket }}
\r\nQueue : {{ queue.title }}
\r\nTitre : {{ ticket.title }}
\r\nOuvert le : {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\nSoumis par : {{ ticket.submitter_email|default:\"Unknown\" }}
\r\nPriorit\u00e9 : {{ ticket.get_priority_display }}
\r\nStatut : {{ ticket.get_status }}
\r\nAssign\u00e9 \u00e0 : {{ ticket.get_assigned_to }}
\r\nVoir le ticket en ligne pour le mettre \u00e0 jour (apr\u00e8s authentification)
Pour m\u00e9moire, la description originelle \u00e9tait :
\r\n\r\n{{ ticket.description|linebreaksbr }}\r\n
La motivation de r\u00e9solution est:
\r\n\r\n{{ resolution }}\r\n", + "locale": "fr", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.898Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 53, + "fields": { + "template_name": "closed_submitter", + "subject": "(Ferm\u00e9)", + "heading": "Ticket Ferm\u00e9", + "plain_text": "Bonjour,\r\n\r\nVous avez r\u00e9cemment ouvert chez nous un ticket dont le sujet est \"{{ ticket.title }}\". Ce courriel vous confirme que ce ticket a \u00e9t\u00e9 ferm\u00e9.\r\n\r\nSi vous pensez que nous devons encore travailler sur ce probl\u00e8me, faites le nous savoir en r\u00e9pondant \u00e0 ce courriel en conservant le sujet tel-quel.\r\n\r\nVous pouvez visualiser ce ticket en ligne, en vous rendant \u00e0 l'adresse {{ ticket.ticket_url }}.\r\n\r\nLa r\u00e9solution a \u00e9t\u00e9 motiv\u00e9e ainsi\u00a0:\r\n\r\n{{ ticket.resolution }}\r\n\r\n", + "html": "
Bonjour,
\r\n\r\nVous avez r\u00e9cemment ouvert chez nous un ticket dont le sujet est {{ ticket.title }}. Ce courriel vous confirme que ce ticket a \u00e9t\u00e9 ferm\u00e9.
\r\n\r\n\"La r\u00e9solution a \u00e9t\u00e9 motiv\u00e9e ainsi :
\r\n\r\n{{ ticket.resolution }}\r\n\r\n
Vous pouvez visualiser ce ticket en ligne, en vous rendant \u00e0 l'adresse {{ ticket.ticket_url }}.
\r\n\r\nSi vous pensez que nous devons encore travailler sur ce probl\u00e8me, faites le nous savoir en r\u00e9pondant \u00e0 ce courriel en conservant le sujet tel-quel..
", + "locale": "fr", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.900Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 54, + "fields": { + "template_name": "escalated_cc", + "subject": "(Priorit\u00e9 augment\u00e9e)", + "heading": "Priorit\u00e9 du ticket augment\u00e9e", + "plain_text": "Bonjour,\r\n\r\nCe courriel indicatif permet de vous pr\u00e9venir que le ticket {{ ticket.ticket }} (\"{{ ticket.title }}\") a vu sa priorit\u00e9 augment\u00e9 de mani\u00e8re automatique.\r\n\r\nIdentifiant : {{ ticket.ticket }}\r\nFile d'attente : {{ queue.title }}\r\nTitre : {{ ticket.title }}\r\nOuvert le : {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\nSoumis par : {{ ticket.submitter_email|default:\"Unknown\" }}\r\nPriorit\u00e9 : {{ ticket.get_priority_display }}\r\nStatut : {{ ticket.get_status }}\r\nAssign\u00e9 \u00e0 : {{ ticket.get_assigned_to }}\r\nAdresse : {{ ticket.staff_url }}\r\n\r\nLa description originelle \u00e9tait :\r\n\r\n{{ ticket.description }}\r\n", + "html": "Bonjour,
\r\n\r\nCe courriel indicatif permet de vous pr\u00e9venir que le ticket {{ ticket.ticket }} ('{{ ticket.title }}') a vu sa priorit\u00e9 augment\u00e9 de mani\u00e8re automatique.
\r\n\r\nFile d'attente : {{ ticket.ticket }}
\r\nQueue : {{ queue.title }}
\r\nTitre : {{ ticket.title }}
\r\nOuvert le : {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\nSoumis par : {{ ticket.submitter_email|default:\"Unknown\" }}
\r\nPriorit\u00e9 : {{ ticket.get_priority_display }}
\r\nStatut : {{ ticket.get_status }}
\r\nAssign\u00e9 \u00e0 : {{ ticket.get_assigned_to }}
\r\nVoir le ticket en ligne pour le mettre \u00e0 jour (apr\u00e8s authentification)
Pour m\u00e9moire, la description originelle \u00e9tait :
\r\n\r\n{{ ticket.description|linebreaksbr }}", + "locale": "fr", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.902Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 55, + "fields": { + "template_name": "escalated_submitter", + "subject": "(Priorit\u00e9 augment\u00e9e)", + "heading": "Votre ticket a vu sa priorit\u00e9 augment\u00e9e", + "plain_text": "Bonjour,\r\n\r\n\r\nVous avez r\u00e9cemment ouvert chez nous un ticket dont le sujet est \"{{ ticket.title }}\". Ce courriel vous informe que ce ticket a vu sa priorit\u00e9 augment\u00e9 de mani\u00e8re automatique, vu son d\u00e9lai de r\u00e9solution plus long que pr\u00e9vu.\r\n\r\nNous allons reprendre rapidement ce ticket afin d'essayer de le r\u00e9soudre le plus vite possible.\r\n\r\nVous pouvez visualiser ce ticket en ligne, en vous rendant \u00e0 l'adresse {{ ticket.ticket_url }}.\r\n\r\n", + "html": "
Bonjour,
\r\n\r\nVous avez r\u00e9cemment ouvert chez nous un ticket dont le sujet est {{ ticket.title }} . Ce courriel vous informe que ce ticket a vu sa priorit\u00e9 augment\u00e9 de mani\u00e8re automatique, vu son d\u00e9lai de r\u00e9solution plus long que pr\u00e9vu.
\r\n\r\nNous allons reprendre rapidement ce ticket afin d'essayer de le r\u00e9soudre le plus vite possible.
\r\n\r\nVous pouvez visualiser ce ticket en ligne, en vous rendant \u00e0 l'adresse {{ ticket.ticket_url }}.
", + "locale": "fr", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.904Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 56, + "fields": { + "template_name": "escalated_owner", + "subject": "(Priorit\u00e9 augment\u00e9e - \u00e0 vous)", + "heading": "Priorit\u00e9 de votre ticket augment\u00e9e", + "plain_text": "Bonjour,\r\n\r\nUn ticket qui vous est assign\u00e9 a vu sa priorit\u00e9 augment\u00e9 vu son d\u00e9lai de r\u00e9solution plus long que pr\u00e9vu.\r\n\r\nIdentifiant : {{ ticket.ticket }}\r\nFile d'attente : {{ queue.title }}\r\nTitre : {{ ticket.title }}\r\nOuvert le : {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\nSoumis par : {{ ticket.submitter_email|default:\"Unknown\" }}\r\nPriorit\u00e9 : {{ ticket.get_priority_display }}\r\nStatut : {{ ticket.get_status }}\r\nAssign\u00e9 \u00e0 : {{ ticket.get_assigned_to }}\r\nAdresse : {{ ticket.staff_url }}\r\n\r\nLa description originelle \u00e9tait :\r\n\r\n{{ ticket.description }}\r\n\r\nMerci de reprendre ce ticket afin d'essayer de le r\u00e9soudre le plus vite possible.\r\n", + "html": "Bonjour,
\r\n\r\nUn ticket qui vous est assign\u00e9 a vu sa priorit\u00e9 augment\u00e9 vu son d\u00e9lai de r\u00e9solution plus long que pr\u00e9vu.
\r\n\r\n\r\nFile d'attente : {{ ticket.ticket }}
\r\nQueue : {{ queue.title }}
\r\nTitre : {{ ticket.title }}
\r\nOuvert le : {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\nSoumis par : {{ ticket.submitter_email|default:\"Unknown\" }}
\r\nPriorit\u00e9 : {{ ticket.get_priority_display }}
\r\nStatut : {{ ticket.get_status }}
\r\nAssign\u00e9 \u00e0 : {{ ticket.get_assigned_to }}
\r\nVoir le ticket en ligne pour le mettre \u00e0 jour (apr\u00e8s authentification)
Pour m\u00e9moire, la description originelle \u00e9tait :
\r\n\r\n{{ ticket.description|linebreaksbr }}\r\n\r\n
Merci de reprendre ce ticket afin d'essayer de le r\u00e9soudre le plus vite possible..
", + "locale": "fr", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.907Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 57, + "fields": { + "template_name": "newticket_cc", + "subject": "(Ouvert)", + "heading": "Nouveau ticket ouvert", + "plain_text": "Bonjour,\r\n\r\nCe courriel indicatif permet de vous pr\u00e9venir qu'un nouveau ticket a \u00e9t\u00e9 ouvert.\r\n\r\nIdentifiant : {{ ticket.ticket }}\r\nFile d'attente : {{ queue.title }}\r\nTitre : {{ ticket.title }}\r\nOuvert le : {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\nSoumis par : {{ ticket.submitter_email|default:\"Unknown\" }}\r\nPriorit\u00e9 : {{ ticket.get_priority_display }}\r\nStatut : {{ ticket.get_status }}\r\nAssign\u00e9 \u00e0 : {{ ticket.get_assigned_to }}\r\nAdresse : {{ ticket.staff_url }}\r\n\r\nDescription\u00a0:\r\n{{ ticket.description }}\r\n\r\n", + "html": "Bonjour,
\r\n\r\nCe courriel indicatif permet de vous pr\u00e9venir qu'un nouveau ticket a \u00e9t\u00e9 ouvert.
\r\n\r\n\r\nFile d'attente : {{ ticket.ticket }}
\r\nQueue : {{ queue.title }}
\r\nTitre : {{ ticket.title }}
\r\nOuvert le : {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\nSoumis par : {{ ticket.submitter_email|default:\"Unknown\" }}
\r\nPriorit\u00e9 : {{ ticket.get_priority_display }}
\r\nStatut : {{ ticket.get_status }}
\r\nAssign\u00e9 \u00e0 : {{ ticket.get_assigned_to }}
\r\nVoir le ticket en ligne pour le mettre \u00e0 jour (apr\u00e8s authentification)
Description :
\r\n\r\n{{ ticket.description|linebreaksbr }}", + "locale": "fr", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.909Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 58, + "fields": { + "template_name": "newticket_submitter", + "subject": "(Ouvert)", + "heading": "Votre ticket est d\u00e9sormais ouvert", + "plain_text": "Bonjour,\r\n\r\nCe courriel permet de vous informer que nous avons re\u00e7u votre demande de support dont le sujet est \"{{ ticket.title }}\".\r\n\r\nVous n'avez rien de plus \u00e0 faire pour le moment. Votre ticket porte l'identifiant {{ ticket.ticket }} et sera trait\u00e9 rapidement.\r\n\r\nSi vous voulez nous donner plus de d\u00e9tails ou si vous avez une question concernant ce ticket, merci d'inclure la r\u00e9f\u00e9rence '{{ ticket.ticket }}' dans le sujet du message. Le plus simple \u00e9tant d'utiliser la fonction 'r\u00e9pondre' de votre logiciel de messagerie.\r\n\r\nVous pouvez visualiser ce ticket en ligne et y ajouter des informations ou des pi\u00e8ces jointes ainsi que voir les derni\u00e8res mies \u00e0 jour en vous rendant \u00e0 l'adresse {{ ticket.ticket_url }}.\r\n\r\nNous allons traiter votre demande afin, si possible, de la r\u00e9soudre au plus vite. Vous recevrez des mise \u00e0 jour ou la r\u00e9ponse au ticket \u00e0 cette adresse mail.", + "html": "
Bonjour,
\r\n\r\nCe courriel permet de vous informer que nous avons re\u00e7u votre demande de support dont le sujet est {{ ticket.title }}.
\r\n\r\n\"Vous n'avez rien de plus \u00e0 faire pour le moment. Votre ticket porte l'identifiant {{ ticket.ticket }} et sera trait\u00e9 rapidement.
\r\n\r\nSi vous voulez nous donner plus de d\u00e9tails ou si vous avez une question concernant ce ticket, merci d'inclure la r\u00e9f\u00e9rence {{ ticket.ticket }} dans le sujet du message. Le plus simple \u00e9tant d'utiliser la fonction 'r\u00e9pondre' de votre logiciel de messagerie.
\r\n\r\nVous pouvez visualiser ce ticket en ligne et y ajouter des informations ou des pi\u00e8ces jointes ainsi que voir les derni\u00e8res mies \u00e0 jour en vous rendant \u00e0 l'adresse {{ ticket.ticket_url }}.
\r\n\r\nNous allons traiter votre demande afin, si possible, de la r\u00e9soudre au plus vite. Vous recevrez des mise \u00e0 jour ou la r\u00e9ponse au ticket \u00e0 cette adresse mail.
", + "locale": "fr", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.911Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 59, + "fields": { + "template_name": "resolved_cc", + "subject": "(R\u00e9solu)", + "heading": "Ticket r\u00e9solu", + "plain_text": "Bonjour,\r\n\r\nLe ticket suivant a \u00e9t\u00e9 r\u00e9solu.\r\n\r\nIdentifiant : {{ ticket.ticket }}\r\nFile d'attente : {{ queue.title }}\r\nTitre : {{ ticket.title }}\r\nOuvert le : {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\nSoumis par : {{ ticket.submitter_email|default:\"Unknown\" }}\r\nPriorit\u00e9 : {{ ticket.get_priority_display }}\r\nStatut : {{ ticket.get_status }}\r\nAssign\u00e9 \u00e0 : {{ ticket.get_assigned_to }}\r\nAdresse : {{ ticket.staff_url }}\r\n\r\nLa description originelle \u00e9tait :\r\n\r\n{{ ticket.description }}\r\n\r\nLa motivation de r\u00e9solution est:\r\n\r\n{{ resolution }}\r\n\r\nCette information a \u00e9t\u00e9 envoy\u00e9 au cr\u00e9ateur de ce ticket, qui la confirmera avant que vous puissiez fermer ce ticket.\r\n\r\n", + "html": "Bonjour,
\r\n\r\nLe ticket suivant a \u00e9t\u00e9 r\u00e9solu.
\r\n\r\n\r\nFile d'attente : {{ ticket.ticket }}
\r\nQueue : {{ queue.title }}
\r\nTitre : {{ ticket.title }}
\r\nOuvert le : {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\nSoumis par : {{ ticket.submitter_email|default:\"Unknown\" }}
\r\nPriorit\u00e9 : {{ ticket.get_priority_display }}
\r\nStatut : {{ ticket.get_status }}
\r\nAssign\u00e9 \u00e0 : {{ ticket.get_assigned_to }}
\r\nVoir le ticket en ligne pour le mettre \u00e0 jour (apr\u00e8s authentification)
Pour m\u00e9moire, la description originelle \u00e9tait :
\r\n\r\n{{ ticket.description|linebreaksbr }}\r\n
La motivation de r\u00e9solution est:
\r\n\r\n{{ resolution }}\r\n\r\n
\r\nCette information a \u00e9t\u00e9 envoy\u00e9 au cr\u00e9ateur de ce ticket, qui la confirmera avant que vous puissiez fermer ce ticket.
", + "locale": "fr", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.913Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 60, + "fields": { + "template_name": "resolved_owner", + "subject": "(R\u00e9solu - \u00e0 vous)", + "heading": "Ticket r\u00e9solu", + "plain_text": "Bonjour,\r\n\r\nUn ticket qui vous est assign\u00e9 a \u00e9t\u00e9 r\u00e9solu.\r\n\r\n\r\nIdentifiant : {{ ticket.ticket }}\r\nFile d'attente : {{ queue.title }}\r\nTitre : {{ ticket.title }}\r\nOuvert le : {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\nSoumis par : {{ ticket.submitter_email|default:\"Unknown\" }}\r\nPriorit\u00e9 : {{ ticket.get_priority_display }}\r\nStatut : {{ ticket.get_status }}\r\nAssign\u00e9 \u00e0 : {{ ticket.get_assigned_to }}\r\nAdresse : {{ ticket.staff_url }}\r\n\r\nLa description originelle \u00e9tait :\r\n\r\n{{ ticket.description }}\r\n\r\nLa motivation de r\u00e9solution est:\r\n\r\n{{ resolution }}\r\n\r\nCette information a \u00e9t\u00e9 envoy\u00e9 au cr\u00e9ateur de ce ticket, qui la confirmera avant que vous puissiez fermer ce ticket.\r\n\r\n", + "html": "Bonjour,
\r\n\r\nUn ticket qui vous est assign\u00e9 a \u00e9t\u00e9 r\u00e9solu.
\r\n\r\n\r\nFile d'attente : {{ ticket.ticket }}
\r\nQueue : {{ queue.title }}
\r\nTitre : {{ ticket.title }}
\r\nOuvert le : {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\nSoumis par : {{ ticket.submitter_email|default:\"Unknown\" }}
\r\nPriorit\u00e9 : {{ ticket.get_priority_display }}
\r\nStatut : {{ ticket.get_status }}
\r\nAssign\u00e9 \u00e0 : {{ ticket.get_assigned_to }}
\r\nVoir le ticket en ligne pour le mettre \u00e0 jour (apr\u00e8s authentification)
Pour m\u00e9moire, la description originelle \u00e9tait :
\r\n\r\n{{ ticket.description|linebreaksbr }}\r\n
La motivation de r\u00e9solution est:
\r\n\r\n{{ resolution }}\r\n\r\n
\r\nCette information a \u00e9t\u00e9 envoy\u00e9 au cr\u00e9ateur de ce ticket, qui la confirmera avant que vous puissiez fermer ce ticket.
", + "locale": "fr", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.915Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 61, + "fields": { + "template_name": "resolved_submitter", + "subject": "(R\u00e9solu)", + "heading": "Votre ticket a \u00e9t\u00e9 r\u00e9solu", + "plain_text": "Bonjour,\r\n\r\nVous avez r\u00e9cemment ouvert chez nous un ticket dont le sujet est \"{{ ticket.title }}\" . Ce message vous informe d'une r\u00e9solution de la demande.\r\n\r\nLa solution suivante a \u00e9t\u00e9 donn\u00e9e au ticket {{ ticket.ticket }}:\r\n\r\n{{ resolution }}\r\n\r\nMerci de confirmer que cette solution vous convient afin que nous puissions clore le ticket. Si vous avez d'autre demandes, o\u00f9 si vous pensez que cette solution n'est pas adapt\u00e9e, merci de r\u00e9pondre \u00e0 ce mail en conservant le sujet tel-quel.\r\n\r\nVous pouvez visualiser ce ticket en ligne, en vous rendant \u00e0 l'adresse {{ ticket.ticket_url }}.\r\n\r\n", + "html": "Bonjour,
\r\n\r\nVous avez r\u00e9cemment ouvert chez nous un ticket dont le sujet est {{ ticket.title }}. Ce message vous informe d'une r\u00e9solution de la demande.
\r\n\r\nLa solution suivante a \u00e9t\u00e9 donn\u00e9e au ticket {{ ticket.ticket }}:
\r\n\r\n{{ resolution }}\r\n\r\n
Merci de confirmer que cette solution vous convient afin que nous puissions clore le ticket. Si vous avez d'autre demandes, o\u00f9 si vous pensez que cette solution n'est pas adapt\u00e9e, merci de r\u00e9pondre \u00e0 ce mail en conservant le sujet tel-quel.
\r\n\r\nVous pouvez visualiser ce ticket en ligne, en vous rendant \u00e0 l'adresse {{ ticket.ticket_url }}.
", + "locale": "fr", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.917Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 62, + "fields": { + "template_name": "updated_cc", + "subject": "(Mis \u00e0 jour)", + "heading": "Ticket mis \u00e0 jour", + "plain_text": "Bonjour,\r\n\r\nCe courriel indicatif permet de vous pr\u00e9venir que le ticket {{ ticket.ticket }} (\"{{ ticket.title }}\") par {{ ticket.submitter_email }} a \u00e9t\u00e9 mis \u00e0 jour.\r\n\r\nIdentifiant : {{ ticket.ticket }}\r\nFile d'attente : {{ queue.title }}\r\nTitre : {{ ticket.title }}\r\nOuvert le : {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\nSoumis par : {{ ticket.submitter_email|default:\"Unknown\" }}\r\nPriorit\u00e9 : {{ ticket.get_priority_display }}\r\nStatut : {{ ticket.get_status }}\r\nAssign\u00e9 \u00e0 : {{ ticket.get_assigned_to }}\r\nAdresse : {{ ticket.staff_url }}\r\n\r\nDescription originelle :\r\n\r\n{{ ticket.description }}\r\n\r\nLe commentaire suivant a \u00e9t\u00e9 ajout\u00e9\u00a0:\r\n\r\n{{ comment }}\r\n\r\nCette information {% if private %} n' a pas {% else %} a {% endif %} \u00e9t\u00e9 envoy\u00e9 par mail \u00e0 l'\u00e9metteur.\r\n\r\n", + "html": "Bonjour,
\r\n\r\nCe courriel indicatif permet de vous pr\u00e9venir que le ticket {{ ticket.ticket }} (\"{{ ticket.title }}\") par {{ ticket.submitter_email }} a \u00e9t\u00e9 mis \u00e0 jour.
\r\n\r\n\r\nFile d'attente : {{ ticket.ticket }}
\r\nQueue : {{ queue.title }}
\r\nTitre : {{ ticket.title }}
\r\nOuvert le : {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\nSoumis par : {{ ticket.submitter_email|default:\"Unknown\" }}
\r\nPriorit\u00e9 : {{ ticket.get_priority_display }}
\r\nStatut : {{ ticket.get_status }}
\r\nAssign\u00e9 \u00e0 : {{ ticket.get_assigned_to }}
\r\nVoir le ticket en ligne pour le mettre \u00e0 jour (apr\u00e8s authentification)
Pour m\u00e9moire, la description originelle \u00e9tait :
\r\n\r\n{{ ticket.description|linebreaksbr }}\r\n\r\n
Le commentaire suivant a \u00e9t\u00e9 ajout\u00e9 :
\r\n\r\n{{ comment }}\r\n\r\n
Cette information {% if private %} n' a pas {% else %} a {% endif %} \u00e9t\u00e9 envoy\u00e9 par mail \u00e0 l'\u00e9metteur.
", + "locale": "fr", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.919Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 63, + "fields": { + "template_name": "updated_owner", + "subject": "(Mis \u00e0 jour - \u00e0 vous)", + "heading": "Ticket mis \u00e0 jour", + "plain_text": "Hello,\r\n\r\nCe courriel indicatif permet de vous pr\u00e9venir que le ticket {{ ticket.ticket }} (\"{{ ticket.title }}\") par {{ ticket.submitter_email }}, qui vous est assign\u00e9, a \u00e9t\u00e9 mis \u00e0 jour.\r\n\r\nIdentifiant : {{ ticket.ticket }}\r\nFile d'attente : {{ queue.title }}\r\nTitre : {{ ticket.title }}\r\nOuvert le : {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\nSoumis par : {{ ticket.submitter_email|default:\"Unknown\" }}\r\nPriorit\u00e9 : {{ ticket.get_priority_display }}\r\nStatut : {{ ticket.get_status }}\r\nAssign\u00e9 \u00e0 : {{ ticket.get_assigned_to }}\r\nAdresse : {{ ticket.staff_url }}\r\n\r\nDescription originelle :\r\n\r\n{{ ticket.description }}\r\n\r\nLe commentaire suivant a \u00e9t\u00e9 ajout\u00e9 :\r\n\r\n{{ comment }}\r\n\r\nCette information {% if private %} n' a pas {% else %} a {% endif %} \u00e9t\u00e9 envoy\u00e9 par mail \u00e0 l'\u00e9metteur.\r\n\r\n", + "html": "Bonjour,
\r\n\r\nCe courriel indicatif permet de vous pr\u00e9venir que le ticket {{ ticket.ticket }} (\"{{ ticket.title }}\") par {{ ticket.submitter_email }}, qui vous est assign\u00e9, a \u00e9t\u00e9 mis \u00e0 jour.
\r\n\r\n\r\nFile d'attente : {{ ticket.ticket }}
\r\nQueue : {{ queue.title }}
\r\nTitre : {{ ticket.title }}
\r\nOuvert le : {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\nSoumis par : {{ ticket.submitter_email|default:\"Unknown\" }}
\r\nPriorit\u00e9 : {{ ticket.get_priority_display }}
\r\nStatut : {{ ticket.get_status }}
\r\nAssign\u00e9 \u00e0 : {{ ticket.get_assigned_to }}
\r\nVoir le ticket en ligne pour le mettre \u00e0 jour (apr\u00e8s authentification)
Pour m\u00e9moire, la description originelle \u00e9tait :
\r\n\r\n{{ ticket.description|linebreaksbr }}\r\n\r\n
Le commentaire suivant a \u00e9t\u00e9 ajout\u00e9 :
\r\n\r\n{{ comment }}\r\n\r\n
Cette information {% if private %} n' a pas {% else %} a {% endif %} \u00e9t\u00e9 envoy\u00e9 par mail \u00e0 l'\u00e9metteur.
", + "locale": "fr", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.921Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 64, + "fields": { + "template_name": "updated_submitter", + "subject": "(Mis \u00e0 jour)", + "heading": "Votre ticket a \u00e9t\u00e9 mis \u00e0 jour", + "plain_text": "Bonjour,\r\n\r\nVous avez r\u00e9cemment ouvert chez nous un ticket dont le sujet est \"{{ ticket.title }}\". Ce message vous informe d'une mise \u00e0 jour du ticket.\r\n\r\nLe commentaire suivant a \u00e9t\u00e9 ajout\u00e9 au ticket {{ ticket.ticket }}\u00a0:\r\n\r\n{{ comment }}\r\n\r\nSi vous voulez nous fournir d'autres informations, merci de r\u00e9pondre \u00e0 ce mail en conservant le sujet tel-quel. Vous pouvez \u00e9galement voir et mettre \u00e0 jour ce ticket en ligne \u00e0 l'adresse {{ ticket.ticket_url }}", + "html": "Bonjour,
\r\n\r\nVous avez r\u00e9cemment ouvert chez nous un ticket dont le sujet est {{ ticket.title }} . Ce message vous informe d'une mise \u00e0 jour du ticket.
\r\n\r\nLe commentaire suivant a \u00e9t\u00e9 ajout\u00e9 au ticket {{ ticket.ticket }}:
\r\n\r\n{{ comment }}\r\n\r\n
\"Si vous voulez nous fournir d'autres informations, merci de r\u00e9pondre \u00e0 ce mail en conservant le sujet tel-quel. Vous pouvez \u00e9galement voir et mettre \u00e0 jour ce ticket en ligne \u00e0 l'adresse {{ ticket.ticket_url }}.
", + "locale": "fr", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.923Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 65, + "fields": { + "template_name": "assigned_cc", + "subject": "(Assegnato)", + "heading": "Ticket Assegnato", + "plain_text": "Salve,\r\n\r\nTi \u00e8 stata inviata questa email per informarti che il ticket {{ ticket.ticket }} (\"{{ ticket.title }}\") per {{ ticket.submitter_email }} {% if ticket.assigned_to %}\u00e8 stato assegnato a {{ ticket.assigned_to }}{% else %}non \u00e8 pi\u00f9 assegnato{% endif %}.\r\n\r\nID Ticket: {{ ticket.ticket }}\r\nCoda: {{ queue.title }}\r\nTitolo: {{ ticket.title }}\r\nAperto: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\nInserito da: {{ ticket.submitter_email|default:\"Sconosciuto\" }}\r\nPriorit\u00e0: {{ ticket.get_priority_display }}\r\nStato: {{ ticket.get_status }}\r\nAssegnato a: {{ ticket.get_assigned_to }}\r\nVedi Online: {{ ticket.staff_url }} (richiede login)\r\n\r\nLa descrizione del ticket era:\r\n\r\n{{ ticket.description }}", + "html": "Salve,
\r\n\r\nTi \u00e8 stata inviata questa email per informarti che il ticket {{ ticket.ticket }} ({{ ticket.title }}) per {{ ticket.submitter_email }} {% if ticket.assigned_to %}\u00e8 stato assegnato a {{ ticket.assigned_to }}{% else %}non \u00e8 pi\u00f9 assegnato{% endif %}.
\r\n\r\n\r\nTicket ID: {{ ticket.ticket }}
\r\nCoda: {{ queue.title }}
\r\nTitolo: {{ ticket.title }}
\r\nAperto: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\nInserito da: {{ ticket.submitter_email|default:\"Sconosciuto\" }}
\r\nPriorit\u00e0: {{ ticket.get_priority_display }}
\r\nStato: {{ ticket.get_status }}
\r\nAssegnato a: {{ ticket.get_assigned_to }}
\r\nVedi Online per aggiornare questo ticket (richiede login)
Per riferimento, la descrizione del ticket era:
\r\n\r\n{{ ticket.description|linebreaksbr }}", + "locale": "it", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.925Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 66, + "fields": { + "template_name": "assigned_owner", + "subject": "(Assegnato a Te)", + "heading": "Ticket Assegnato a Te", + "plain_text": "Salve,\r\n\r\nTi \u00e8 stata inviata questa email per informarti che ti \u00e8 stato assegnato il ticket {{ ticket.ticket }} (\"{{ ticket.title }}\") per {{ ticket.submitter_email }}.\r\n\r\nID Ticket: {{ ticket.ticket }}\r\nCoda: {{ queue.title }}\r\nTitolo: {{ ticket.title }}\r\nAperto: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\nInserito da: {{ ticket.submitter_email|default:\"Sconosciuto\" }}\r\nPriorit\u00e0: {{ ticket.get_priority_display }}\r\nStato: {{ ticket.get_status }}\r\nAssegnato a: {{ ticket.get_assigned_to }}\r\nVedi Online: {{ ticket.staff_url }} (richiede login)\r\n\r\nLa descrizione del ticket \u00e8:\r\n\r\n{{ ticket.description }}", + "html": "
Salve,
\r\n\r\nTi \u00e8 stata inviata questa email per informarti che ti \u00e8 stato assegnato il ticket {{ ticket.ticket }} ({{ ticket.title }}) per {{ ticket.submitter_email }}.
\r\n\r\n\r\nTicket ID: {{ ticket.ticket }}
\r\nCoda: {{ queue.title }}
\r\nTitolo: {{ ticket.title }}
\r\nAperto: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\nInserito da: {{ ticket.submitter_email|default:\"Sconosciuto\" }}
\r\nPriorit\u00e0: {{ ticket.get_priority_display }}
\r\nStato: {{ ticket.get_status }}
\r\nAssegnato a: {{ ticket.get_assigned_to }}
\r\nVedi Online per aggiornare questo ticket (richiede login)
La descrizione del ticket \u00e8:
\r\n\r\n{{ ticket.description|linebreaksbr }}", + "locale": "it", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.927Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 67, + "fields": { + "template_name": "closed_cc", + "subject": "(Closed)", + "heading": "Ticket Chiuso", + "plain_text": "Salve,\r\n\r\nIl ticket {{ ticket.title }} (\"{{ ticket.title }}\"){% if ticket.assigned_to %}, assegnato a {{ ticket.assigned_to }}{% endif %} \u00e8 stato chiuso.\r\n\r\nID Ticket: {{ ticket.ticket }}\r\nCoda: {{ queue.title }}\r\nTitolo: {{ ticket.title }}\r\nAperto: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\nInserito da: {{ ticket.submitter_email|default:\"Sconosciuto\" }}\r\nPriorit\u00e0: {{ ticket.get_priority_display }}\r\nStato: {{ ticket.get_status }}\r\nAssegnato a: {{ ticket.get_assigned_to }}\r\nVedi Online: {{ ticket.staff_url }} (richiede login)\r\n\r\nLa descrizione del ticket \u00e8:\r\n\r\n{{ ticket.description }}\r\n\r\nLa soluzione fornita \u00e8:\r\n\r\n{{ resolution }}", + "html": "
Salve,
\r\n\r\nIl ticket {{ ticket.title }} ('{{ ticket.title }}'){% if ticket.assigned_to %}, assegnato a {{ ticket.get_assigned_to }}{% endif %} \u00e8 stato chiuso.
\r\n\r\n\r\nTicket ID: {{ ticket.ticket }}
\r\nCoda: {{ queue.title }}
\r\nTitolo: {{ ticket.title }}
\r\nAperto: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\nInserito da: {{ ticket.submitter_email|default:\"Sconosciuto\" }}
\r\nPriorit\u00e0: {{ ticket.get_priority_display }}
\r\nStato: {{ ticket.get_status }}
\r\nAssegnato a: {{ ticket.get_assigned_to }}
\r\nVedi Online per aggiornare questo ticket (richiede login)
La descrizione del ticket \u00e8:
\r\n\r\n{{ ticket.description|linebreaksbr }}\r\n\r\n
La soluzione fornita \u00e8:
\r\n\r\n{{ resolution }}\r\n\r\n
Se vuoi vedere questo ticket online, puoi visitare l'indirizzo {{ ticket.staff_url }}.
", + "locale": "it", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.929Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 68, + "fields": { + "template_name": "closed_owner", + "subject": "(Chiuso)", + "heading": "Ticket Chiuso", + "plain_text": "Salve,\r\n\r\nIl seguente ticket, attualmente assegnato a te, \u00e8 stato chiuso.\r\n\r\nID Ticket: {{ ticket.ticket }}\r\nCoda: {{ queue.title }}\r\nTitolo: {{ ticket.title }}\r\nAperto: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\nInserito da: {{ ticket.submitter_email|default:\"Sconosciuto\" }}\r\nPriorit\u00e0: {{ ticket.get_priority_display }}\r\nStato: {{ ticket.get_status }}\r\nAssegnato a: {{ ticket.get_assigned_to }}\r\nVedi Online: {{ ticket.staff_url }} (richiede login)\r\n\r\nSe vuoi vedere il ticket online, puoi visitare l'indirizzo {{ ticket.staff_url }}.", + "html": "Salve,
\r\n\r\nIl seguente ticket, attualmente assegnato a te, \u00e8 stato chiuso.
\r\n\r\n\r\nTicket ID: {{ ticket.ticket }}
\r\nCoda: {{ queue.title }}
\r\nTitolo: {{ ticket.title }}
\r\nAperto: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\nInserito da: {{ ticket.submitter_email|default:\"Sconosciuto\" }}
\r\nPriorit\u00e0: {{ ticket.get_priority_display }}
\r\nStato: {{ ticket.get_status }}
\r\nAssegnato a: {{ ticket.get_assigned_to }}
\r\nVedi Online per aggiornare questo ticket (richiede login)
La descrizione del ticket \u00e8:
\r\n\r\n{{ ticket.description|linebreaksbr }}\r\n\r\n
La soluzione fornita \u00e8:
\r\n\r\n{{ ticket.resolution }}", + "locale": "it", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.930Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 69, + "fields": { + "template_name": "closed_submitter", + "subject": "(Closed)", + "heading": "Ticket Chiuso", + "plain_text": "Salve,\r\n\r\nHai recentemente inserito un ticket dal titolo \"{{ ticket.title }}\". Questa email ti \u00e8 inviata come conferma della chiusura del ticket.\r\n\r\nSe ritieni che questo ticket richieda ulteriori attivit\u00e0, per cortesia faccelo sapere rispondendo a questa email mantenendone invariato l'oggetto.\r\n\r\nSe vuoi vedere il ticket online, puoi visitare l'indirizzo {{ ticket.ticket_url }}.\r\n\r\nLa soluzione proposta \u00e8:\r\n\r\n{{ ticket.resolution }}", + "html": "
Salve,
\r\n\r\nHai recentemente inserito un ticket dal titolo {{ ticket.title }}. Questa email ti \u00e8 inviata come conferma della chiusura del ticket.
\r\n\r\nLa soluzione proposta \u00e8:
\r\n\r\n{{ ticket.resolution }}\r\n\r\n
Se vuoi vedere il ticket online, puoi visitare l'indirizzo {{ ticket.ticket_url }}. Se ritieni che questo ticket richieda ulteriori attivit\u00e0, per cortesia faccelo sapere rispondendo a questa email mantenendone invariato l'oggetto.\r\n
", + "locale": "it", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.933Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 70, + "fields": { + "template_name": "escalated_cc", + "subject": "(Priorit\u00e0)", + "heading": "Priorit\u00e0 Aumentata", + "plain_text": "Salve,\r\n\r\nTi \u00e8 stata inviata questa email per informarti che la priorit\u00e0 del ticket {{ ticket.ticket }} (\"{{ ticket.title }}\") \u00e8 stata aumentata automaticamente.\r\n\r\nID Ticket: {{ ticket.ticket }}\r\nCoda: {{ queue.title }}\r\nTitolo: {{ ticket.title }}\r\nAperto: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\nInserito da: {{ ticket.submitter_email|default:\"Sconosciuto\" }}\r\nPriorit\u00e0: {{ ticket.get_priority_display }}\r\nStato: {{ ticket.get_status }}\r\nAssegnato a: {{ ticket.get_assigned_to }}\r\nVedi Online: {{ ticket.staff_url }} (richiede login)\r\n\r\nLa descrizione originale del ticket era:\r\n\r\n{{ ticket.description }}", + "html": "Salve,
\r\n\r\nTi \u00e8 stata inviata questa email per informarti che la priorit\u00e0 del ticket {{ ticket.ticket }} (\"{{ ticket.title }}\") \u00e8 stata aumentata automaticamente.
\r\n\r\n\r\nTicket ID: {{ ticket.ticket }}
\r\nCoda: {{ queue.title }}
\r\nTitolo: {{ ticket.title }}
\r\nAperto: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\nInserito da: {{ ticket.submitter_email|default:\"Sconosciuto\" }}
\r\nPriorit\u00e0: {{ ticket.get_priority_display }}
\r\nStato: {{ ticket.get_status }}
\r\nAssegnato a: {{ ticket.get_assigned_to }}
\r\nVedi Online per aggiornare questo ticket (richiede login)
Per riferimento, la descrizione originale del ticket era:
\r\n\r\n{{ ticket.description|linebreaksbr }}", + "locale": "it", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.935Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 71, + "fields": { + "template_name": "escalated_owner", + "subject": "(Priorit\u00e0)", + "heading": "La Priorit\u00e0 di un Ticket Assegnato a Te \u00e8 Stata Aumentata", + "plain_text": "Salve,\r\n\r\nLa priorit\u00e0 di un ticket a te assegnato \u00e8 stata automaticamente aumentata in quanto questo \u00e8 rimasto aperto pi\u00f9 del previsto.\r\n\r\nID Ticket: {{ ticket.ticket }}\r\nCoda: {{ queue.title }}\r\nTitolo: {{ ticket.title }}\r\nAperto: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\nInserito da: {{ ticket.submitter_email|default:\"Sconosciuto\" }}\r\nPriorit\u00e0: {{ ticket.get_priority_display }}\r\nStato: {{ ticket.get_status }}\r\nAssegnato a: {{ ticket.get_assigned_to }}\r\nVedi Online: {{ ticket.staff_url }} (richiede login)\r\n\r\nLa descrizione originale del ticket era:\r\n\r\n{{ ticket.description }}\r\n\r\nRiesamina questo ticket e cerca di fornire una soluzione al pi\u00f9 presto.", + "html": "
Salve,
\r\n\r\nLa priorit\u00e0 di un ticket a te assegnato \u00e8 stata automaticamente aumentata in quanto questo \u00e8 rimasto aperto pi\u00f9 del previsto.
\r\n\r\n\r\nTicket ID: {{ ticket.ticket }}
\r\nCoda: {{ queue.title }}
\r\nTitolo: {{ ticket.title }}
\r\nAperto: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\nInserito da: {{ ticket.submitter_email|default:\"Sconosciuto\" }}
\r\nPriorit\u00e0: {{ ticket.get_priority_display }}
\r\nStato: {{ ticket.get_status }}
\r\nAssegnato a: {{ ticket.get_assigned_to }}
\r\nVedi Online per aggiornare questo ticket (richiede login)
Per riferimento, la descrizione originale del ticket era:
\r\n\r\n{{ ticket.description|linebreaksbr }}", + "locale": "it", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.936Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 72, + "fields": { + "template_name": "escalated_submitter", + "subject": "(Priorit\u00e0)", + "heading": "La Priorit\u00e0 del Tuo Ticket \u00e8 Stata Aumentata", + "plain_text": "Salve,\r\n\r\nHai recentemente inserito un ticket dal titolo \"{{ ticket.title }}\". Questa email ti \u00e8 inviata per informarti che la priorit\u00e0 del ticket \u00e8 stata automaticamente aumentata in quanto questo \u00e8 rimasto aperto pi\u00f9 a lungo del previsto.\r\n\r\nRiesamineremo a breve il ticket e cercheremo di fornire una soluzione quanto prima.\r\n\r\nSe vuoi visualizzare il ticket online, puoi visitare l'indirizzo {{ ticket.ticket_url }}.", + "html": "
Salve,
\r\n\r\nHai recentemente inserito un ticket dal titolo {{ ticket.title }}. Questa email ti \u00e8 inviata per informarti che la priorit\u00e0 del ticket \u00e8 stata automaticamente aumentata in quanto questo \u00e8 rimasto aperto pi\u00f9 a lungo del previsto.
\r\n\r\nRiesamineremo a breve il ticket e cercheremo di fornire una soluzione quanto prima.
\r\n\r\nSe vuoi visualizzare il ticket online, puoi visitare l'indirizzo {{ ticket.ticket_url }}.
", + "locale": "it", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.938Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 73, + "fields": { + "template_name": "newticket_cc", + "subject": "(Aperto)", + "heading": "Nuovo Ticket Aperto", + "plain_text": "Salve,\r\n\r\nQuesta email ti \u00e8 stata inviata per informarti che \u00e8 stato aperto un nuovo ticket.\r\n\r\nID Ticket: {{ ticket.ticket }}\r\nCoda: {{ queue.title }}\r\nTitolo: {{ ticket.title }}\r\nAperto: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\nInserito da: {{ ticket.submitter_email|default:\"Sconosciuto\" }}\r\nPriorit\u00e0: {{ ticket.get_priority_display }}\r\nStato: {{ ticket.get_status }}\r\nVedi Online: {{ ticket.staff_url }} (richiede login)\r\n\r\nDescrizione:\r\n{{ ticket.description }}", + "html": "Salve,
\r\n\r\nQuesta email ti \u00e8 stata inviata per informarti che \u00e8 stato aperto un nuovo ticket.
\r\n\r\n\r\nTicket ID: {{ ticket.ticket }}
\r\nCoda: {{ queue.title }}
\r\nTitolo: {{ ticket.title }}
\r\nAperto: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\nInserito da: {{ ticket.submitter_email|default:\"Sconosciuto\" }}
\r\nPriorit\u00e0: {{ ticket.get_priority_display }}
\r\nStato: {{ ticket.get_status }}
\r\nVedi Online per aggiornare questo ticket (richiede login)
Descrizione:
\r\n\r\n{{ ticket.description|linebreaksbr }}", + "locale": "it", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.941Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 74, + "fields": { + "template_name": "newticket_submitter", + "subject": "(Aperto)", + "heading": "Il Tuo Ticket \u00e8 Stato Aperto", + "plain_text": "Salve,\r\n\r\nQuesta email ti \u00e8 stata inviata per informarti che abbiamo ricevuto la tua richiesta di assistenza dal titolo \"{{ ticket.title }}\".\r\n\r\nNon \u00e8 necessario fare altro al momento. Il tuo ticket \u00e8 identificato dal codice {{ ticket.ticket }}, e verr\u00e0 esaminato al pi\u00f9 presto.\r\n\r\nSe vuoi aggiungere ulteriori dettagli o hai domande sul ticket, rispondi a questa email includendo l'id \"{{ ticket.ticket }}\" del ticket nell'oggetto. Il modo pi\u00f9 semplice per farlo \u00e8 premere il pulsante \"rispondi\" del tuo client di posta.\r\n\r\nSe vuoi vedere questo ticket online per aggiungere ulteriori informazioni, allegare file o vedere gli aggiornamenti, puoi visitare l'indirizzo {{ ticket.ticket_url }}.\r\n\r\nAnalizzeremo la tua richiesta e cercheremo di risolverla quanto prima. Riceverai successivi aggiornamenti e la notifica di risoluzione a questo indirizzo email.", + "html": "
Salve,
\r\n\r\nQuesta email ti \u00e8 stata inviata per informarti che abbiamo ricevuto la tua richiesta di assistenza dal titolo {{ ticket.title }}.
\r\n\r\nNon \u00e8 necessario fare altro al momento. Il tuo ticket \u00e8 identificato dal codice {{ ticket.ticket }} e verr\u00e0 esaminato al pi\u00f9 presto.
\r\n\r\nSe vuoi aggiungere ulteriori dettagli o hai domande sul ticket, rispondi a questa email includendo l'id {{ ticket.ticket}} del ticket nell'oggetto. Il modo pi\u00f9 semplice per farlo \u00e8 premere il pulsante \"rispondi\" del tuo client di posta.
\r\n\r\nSe vuoi vedere questo ticket online per aggiungere ulteriori informazioni, allegare file o vedere gli aggiornamenti, puoi visitare l'indirizzo {{ ticket.ticket_url }}.
\r\n\r\nAnalizzeremo la tua richiesta e cercheremo di risolverla quanto prima. Riceverai successivi aggiornamenti e la notifica di risoluzione a questo indirizzo email.
", + "locale": "it", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.943Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 75, + "fields": { + "template_name": "resolved_cc", + "subject": "(Risolto)", + "heading": "Ticket Risolto", + "plain_text": "Salve,\r\n\r\nIl seguente ticket \u00e8 stato risolto:\r\n\r\nID Ticket: {{ ticket.ticket }}\r\nCoda: {{ queue.title }}\r\nTitolo: {{ ticket.title }}\r\nAperto: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\nInserito da: {{ ticket.submitter_email|default:\"Sconosciuto\" }}\r\nPriorit\u00e0: {{ ticket.get_priority_display }}\r\nStato: {{ ticket.get_status }}\r\nAssegnato a: {{ ticket.get_assigned_to }}\r\nVedi Online: {{ ticket.staff_url }} (richiede login)\r\n\r\nLa descrizione del ticket \u00e8:\r\n\r\n{{ ticket.description }}\r\n\r\nLa risoluzione fornita \u00e8:\r\n\r\n{{ ticket.resolution }}\r\n\r\nLa risoluzione \u00e8 stata inviata al proprietario del ticket, che dovr\u00e0 verificarla prima che il ticket possa essere chiuso.", + "html": "Salve,
\r\n\r\nIl seguente ticket \u00e8 stato risolto:
\r\n\r\n\r\nTicket ID: {{ ticket.ticket }}
\r\nCoda: {{ queue.title }}
\r\nTitolo: {{ ticket.title }}
\r\nAperto: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\nInserito da: {{ ticket.submitter_email|default:\"Sconosciuto\" }}
\r\nPriorit\u00e0: {{ ticket.get_priority_display }}
\r\nStato: {{ ticket.get_status }}
\r\nAssegnato a: {{ ticket.get_assigned_to }}
\r\nVedi Online per aggiornare questo ticket (richiede login)
Per riferimento, la descrizione originale del ticket era:
\r\n\r\n{{ ticket.description|linebreaksbr }}\r\n\r\n
La risoluzione aggiunta era:
\r\n\r\n{{ ticket.resolution }}\r\n\r\n
La risoluzione \u00e8 stata inviata al proprietario del ticket, che dovr\u00e0 verificarla prima che il ticket possa essere chiuso.
", + "locale": "it", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.945Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 76, + "fields": { + "template_name": "resolved_owner", + "subject": "(Risolto)", + "heading": "Ticket Risolto", + "plain_text": "Salve,\r\n\r\nun ticket a te assegnato \u00e8 stato risolto.\r\n\r\nID Ticket: {{ ticket.ticket }}\r\nCoda: {{ queue.title }}\r\nTitolo: {{ ticket.title }}\r\nAperto: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\nInserito da: {{ ticket.submitter_email|default:\"Sconosciuto\" }}\r\nPriorit\u00e0: {{ ticket.get_priority_display }}\r\nStato: {{ ticket.get_status }}\r\nAssegnato a: {{ ticket.get_assigned_to }}\r\nVedi Online: {{ ticket.staff_url }} (richiede login)\r\n\r\nLa descrizione del ticket \u00e8:\r\n\r\n{{ ticket.description }}\r\n\r\nLa risoluzione fornita \u00e8:\r\n\r\n{{ ticket.resolution }}\r\n\r\nLa risoluzione \u00e8 stata inviata al proprietario del ticket, che dovr\u00e0 verificarla prima che il ticket possa essere chiuso.", + "html": "Salve,
\r\n\r\nUn ticket a te assegnato \u00e8 stato risolto.
\r\n\r\n\r\nTicket ID: {{ ticket.ticket }}
\r\nCoda: {{ queue.title }}
\r\nTitolo: {{ ticket.title }}
\r\nAperto: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\nInserito da: {{ ticket.submitter_email|default:\"Sconosciuto\" }}
\r\nPriorit\u00e0: {{ ticket.get_priority_display }}
\r\nStato: {{ ticket.get_status }}
\r\nAssegnato a: {{ ticket.get_assigned_to }}
\r\nVedi Online per aggiornare questo ticket (richiede login)
La descrizione del ticket \u00e8:
\r\n\r\n{{ ticket.description|linebreaksbr }}\r\n\r\n
La risoluzione fornita \u00e8:
\r\n\r\n{{ ticket.resolution }}\r\n\r\n
La risoluzione \u00e8 stata inviata al proprietario del ticket, che dovr\u00e0 verificarla prima che il ticket possa essere chiuso.
", + "locale": "it", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.947Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 77, + "fields": { + "template_name": "resolved_submitter", + "subject": "(Risolto)", + "heading": "Il Tuo Ticket \u00e8 Stato Risolto", + "plain_text": "Salve,\r\n\r\nHai recentemente inserito un ticket con titolo \"{{ ticket.title }}\". Questa email ti \u00e8 stata inviata per informarti della risoluzione del ticket.\r\n\r\nLa seguente risoluzione \u00e8 stata indicata per il ticket {{ ticket.ticket }}:\r\n\r\n{{ resolution }}\r\n\r\nPuoi per cortesia confermare che questa soluzione risolva i vostri problemi in modo tale da poter chiudere il ticket? Se hai ulteriori domande, o ritieni che la soluzione proposta non sia adeguata, rispondi a questa email mantenendo invariato l'oggetto.\r\n\r\nSe vuoi vedere il ticket online, puoi visitare l'indirizzo {{ ticket.ticket_url }}", + "html": "Salve,
\r\n\r\nHai recentemente inserito un ticket con titolo {{ ticket.title }}. Questa email ti \u00e8 stata inviata per informarti della risoluzione del ticket.
\r\n\r\nLa seguente risoluzione \u00e8 stata indicata per il ticket {{ ticket.ticket }}:
\r\n\r\n{{ resolution }}\r\n\r\n
Puoi per cortesia confermare che questa soluzione risolva i vostri problemi in modo tale da poter chiudere il ticket? Se hai ulteriori domande, o ritieni che la soluzione proposta non sia adeguata, rispondi a questa email mantenendo invariato l'oggetto.
\r\n\r\nSe vuoi vedere il ticket online, puoi visitare l'indirizzo {{ ticket.ticket_url }}.
", + "locale": "it", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.949Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 78, + "fields": { + "template_name": "updated_cc", + "subject": "(Aggiornato)", + "heading": "Ticket Aggiornato", + "plain_text": "Salve,\r\n\r\nQuesta email ti \u00e8 stata inviata per informarti che il ticket {{ ticket.ticket }} (\"{{ ticket.title }}\") per {{ ticket.submitter_email }} \u00e8 stato aggiornato.\r\n\r\nID Ticket: {{ ticket.ticket }}\r\nCoda: {{ queue.title }}\r\nTitolo: {{ ticket.title }}\r\nAperto: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\nInserito da: {{ ticket.submitter_email|default:\"Sconosciuto\" }}\r\nPriorit\u00e0: {{ ticket.get_priority_display }}\r\nStato: {{ ticket.get_status }}\r\nAssegnato a: {{ ticket.get_assigned_to }}\r\nVedi Online: {{ ticket.staff_url }} (richiede login)\r\n\r\nDescrizione originale:\r\n\r\n{{ ticket.description }}\r\n\r\nIl seguente commento \u00e8 stato aggiunto:\r\n\r\n{{ comment }}\r\n\r\nQuesta informazione{% if private %} non{% endif %} \u00e8 stata inviata al proprietario del ticket.\r\n\r\nSe vuoi vedere il ticket online, puoi visitare l'indirizzo {{ ticket.staff_url }}.", + "html": "Salve,
\r\n\r\nQuesta email ti \u00e8 stata inviata per informarti che il ticket {{ ticket.ticket }} (\"{{ ticket.title }}\") per {{ ticket.submitter_email }} \u00e8 stato aggiornato.
\r\n\r\n\r\nTicket ID: {{ ticket.ticket }}
\r\nCoda: {{ queue.title }}
\r\nTitolo: {{ ticket.title }}
\r\nAperto: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\nInserito da: {{ ticket.submitter_email|default:\"Sconosciuto\" }}
\r\nPriorit\u00e0: {{ ticket.get_priority_display }}
\r\nStato: {{ ticket.get_status }}
\r\nAssegnato a: {{ ticket.get_assigned_to }}
\r\nVedi Online per aggiornare questo ticket (richiede login)
Per riferimento, la descrizione originale era:
\r\n\r\n{{ ticket.description|linebreaksbr }}\r\n\r\n
Il seguente commento \u00e8 stato aggiunto:
\r\n\r\n{{ comment }}\r\n\r\n
Questa informazione{% if private %} non{% endif %} \u00e8 stata inviata al proprietario del ticket.
", + "locale": "it", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.950Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 79, + "fields": { + "template_name": "updated_owner", + "subject": "(Updated)", + "heading": "Ticket Aggiornato", + "plain_text": "Salve,\r\n\r\nTi \u00e8 stata inviata questa email per informarti che il ticket {{ ticket.ticket }} (\"{{ ticket.title }}\") per {{ ticket.submitter_email }}, a te assegnato, \u00e8 stato aggiornato.\r\n\r\nID Ticket: {{ ticket.ticket }}\r\nCoda: {{ queue.title }}\r\nTitolo: {{ ticket.title }}\r\nAperto: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\nInserito da: {{ ticket.submitter_email|default:\"Sconosciuto\" }}\r\nPriorit\u00e0: {{ ticket.get_priority_display }}\r\nStato: {{ ticket.get_status }}\r\nAssegnato a: {{ ticket.get_assigned_to }}\r\nVedi Online: {{ ticket.staff_url }} (richiede login)\r\n\r\nDescrizione originale:\r\n\r\n{{ ticket.description }}\r\n\r\nIl seguente commento \u00e8 stato aggiunto:\r\n\r\n{{ comment }}\r\n\r\nQuesta informazione{% if private %} non{% endif %} \u00e8 stata inviata al proprietario del ticket.\r\n\r\nSe vuoi vedere il ticket online, puoi visitare l'indirizzo {{ ticket.staff_url }}.", + "html": "Salve,
\r\n\r\nTi \u00e8 stata inviata questa email per informarti che il ticket {{ ticket.ticket }} (\"{{ ticket.title }}\") per {{ ticket.submitter_email }}, a te assegnato, \u00e8 stato aggiornato.
\r\n\r\n\r\nTicket ID: {{ ticket.ticket }}
\r\nCoda: {{ queue.title }}
\r\nTitolo: {{ ticket.title }}
\r\nAperto: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\nInserito da: {{ ticket.submitter_email|default:\"Sconosciuto\" }}
\r\nPriorit\u00e0: {{ ticket.get_priority_display }}
\r\nStato: {{ ticket.get_status }}
\r\nAssegnato a: {{ ticket.get_assigned_to }}
\r\nVedi Online per aggiornare questo ticket (richiede login)
Per riferimento, la descrizione originale del ticket era:
\r\n\r\n{{ ticket.description|linebreaksbr }}\r\n\r\n
Il seguente commento \u00e8 stato aggiunto:
\r\n\r\n{{ comment }}\r\n\r\n
Questa informazione{% if private %} non{% endif %} \u00e8 stata inviata al proprietario del ticket.
", + "locale": "it", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.953Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 80, + "fields": { + "template_name": "updated_submitter", + "subject": "(Aggiornato)", + "heading": "Il Tuo Ticket \u00e8 Stato Aggiornato", + "plain_text": "Salve,\r\n\r\nHai recentemente inserito un ticket con titolo \"{{ ticket.title }}\". Questa email ti \u00e8 stata inviata per informarti di un aggiornamento alla tua richiesta.\r\n\r\nIl seguente commento \u00e8 stato aggiunto al ticket {{ ticket.ticket }}:\r\n\r\n{{ comment }}\r\n\r\nPer fornire informazioni aggiuntive, rispondi a questa email mantenendone l'oggetto invariato. In alternativa, \u00e8 possibile vedere ed aggiornare il ticket online visitando l'indirizzo {{ ticket.ticket_url }}\r\n", + "html": "Salve,
\r\n\r\nHai recentemente inserito un ticket con titolo {{ ticket.title }}. Questa email ti \u00e8 stata inviata per informarti di un aggiornamento alla tua richiesta.
\r\n\r\nIl seguente commento \u00e8 stato aggiunto al ticket {{ ticket.ticket }}:
\r\n\r\n{{ comment }}\r\n\r\n
Per fornire informazioni aggiuntive, rispondi a questa email mantenendone l'oggetto invariato. In alternativa, \u00e8 possibile vedere ed aggiornare il ticket online visitando l'indirizzo {{ ticket.ticket_url }}.
", + "locale": "it", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.955Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 81, + "fields": { + "template_name": "assigned_cc", + "subject": "(Asignado)", + "heading": "Ticket asignado", + "plain_text": "Hola,\r\n\r\nEste e-mail es para informar que el Ticket {{ ticket.ticket }} (\"{{ ticket.title }}\") por {{ ticket.submitter_email }}{% if ticket.assigned_to %} ha sido asignado a {{ ticket.assigned_to }}{% else %} no ha sido asignado{% endif %}.\r\n\r\nTicket ID: {{ ticket.ticket }}\r\nCola: {{ queue.title }}\r\nT\u00edtulo: {{ ticket.title }}\r\nCreado: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\nRemitente: {{ ticket.submitter_email|default:\"Desconocido\" }}\r\nPrioridad: {{ ticket.get_priority_display }}\r\nEstado: {{ ticket.get_status }}\r\nAsignado a: {{ ticket.get_assigned_to }}\r\nVer online: {{ ticket.staff_url }}\r\n\r\nLa descripci\u00f3n original es:\r\n\r\n{{ ticket.description }}\r\n\r\n", + "html": "Hola,
\r\n\r\nEste e-mail es para informar que el Ticket {{ ticket.ticket }} ({{ ticket.title }}) por {{ ticket.submitter_email }} {% if ticket.assigned_to %} ha sido asignado a {{ ticket.assigned_to }}{% else %} no ha sido asignado{% endif %}.
\r\n\r\n\r\nTicket ID: {{ ticket.ticket }}
\r\nCola: {{ queue.title }}
\r\nT\u00edtulo: {{ ticket.title }}
\r\nCreado: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\nRemitente: {{ ticket.submitter_email|default:\"Desconocido\" }}
\r\nPrioridad: {{ ticket.get_priority_display }}
\r\nEstado: {{ ticket.get_status }}
\r\nAsignado a: {{ ticket.get_assigned_to }}
\r\nVer online para actualizar este Ticket (login requerido)
La descripci\u00f3n original es:
\r\n\r\n{{ ticket.description|linebreaksbr }}", + "locale": "es", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.957Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 82, + "fields": { + "template_name": "assigned_owner", + "subject": "(Asignado a ud)", + "heading": "Le asignaron un Ticket", + "plain_text": "Hola,\r\n\r\nEste e-mail es para informar que el Ticket {{ ticket.ticket }} (\"{{ ticket.title }}\") por {{ ticket.submitter_email }} ha sido asignado a usted.\r\n\r\nTicket ID: {{ ticket.ticket }}\r\nCola: {{ queue.title }}\r\nT\u00edtulo: {{ ticket.title }}\r\nCreado: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\nRemitente: {{ ticket.submitter_email|default:\"Desconocido\" }}\r\nPrioridad: {{ ticket.get_priority_display }}\r\nEstado: {{ ticket.get_status }}\r\nAsignado: USTED\r\nVer online: {{ ticket.staff_url }}\r\n\r\nLa descripci\u00f3n original del ticket es:\r\n\r\n{{ ticket.description }}\r\n\r\n", + "html": "
Hola,
\r\n\r\nEste e-mail es para informar que el Ticket {{ ticket.ticket }} ({{ ticket.title }}) por {{ ticket.submitter_email }} ha sido asignado a usted.
\r\n\r\n\r\nTicket ID: {{ ticket.ticket }}
\r\nCola: {{ queue.title }}
\r\nT\u00edtulo: {{ ticket.title }}
\r\nCreado: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\nRemitente: {{ ticket.submitter_email|default:\"Desconocido\" }}
\r\nPrioridad: {{ ticket.get_priority_display }}
\r\nEstado: {{ ticket.get_status }}
\r\nAsignado a: USTED
\r\nVer online para actualizar el Ticket (login requerido)
La descripci\u00f3n original es:
\r\n\r\n{{ ticket.description|linebreaksbr }}", + "locale": "es", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.959Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 83, + "fields": { + "template_name": "closed_cc", + "subject": "(Cerrado)", + "heading": "Ticket cerrado", + "plain_text": "Hola,\r\n\r\nEl Ticket {{ ticket.title }} (\"{{ ticket.title }}\"){% if ticket.assigned_to %}, asignado a {{ ticket.assigned_to }}{% endif %} ha sido cerrado.\r\n\r\nTicket ID: {{ ticket.ticket }}\r\nCola: {{ queue.title }}\r\nT\u00edtulo: {{ ticket.title }}\r\nCreado: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\nRemitente: {{ ticket.submitter_email|default:\"Desconocido\" }}\r\nPrioridad: {{ ticket.get_priority_display }}\r\nEstado: {{ ticket.get_status }}\r\nAsignado a: {{ ticket.get_assigned_to }}\r\nVer online: {{ ticket.staff_url }} (login requerido)\r\n\r\nLa descripci\u00f3n original es:\r\n\r\n{{ ticket.description }}\r\n\r\nLa soluci\u00f3n dada fue:\r\n\r\n{{ resolution }}\r\n\r\n", + "html": "
Hola,
\r\n\r\nEl Ticket {{ ticket.title }} ('{{ ticket.title }}'){% if ticket.assigned_to %}, asignado a {{ ticket.get_assigned_to }}{% endif %} ha sido cerrado.
\r\n\r\n\r\nTicket ID: {{ ticket.ticket }}
\r\nCola: {{ queue.title }}
\r\nT\u00edtulo: {{ ticket.title }}
\r\nCreado: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\nRemitente: {{ ticket.submitter_email|default:\"Desconocido\" }}
\r\nPrioridad: {{ ticket.get_priority_display }}
\r\nEstado: {{ ticket.get_status }}
\r\nAsignado a: {{ ticket.get_assigned_to }}
\r\nVer online para actualizar este Ticket (login requerido)
La descripci\u00f3n original es:
\r\n\r\n{{ ticket.description|linebreaksbr }}\r\n\r\n
La soluci\u00f3n dada fue:
\r\n\r\n{{ resolution }}\r\n\r\n
Para ver este Ticket online, por favor visite {{ ticket.staff_url }}.
", + "locale": "es", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.961Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 84, + "fields": { + "template_name": "closed_owner", + "subject": "(Cerrado)", + "heading": "Ticket cerrado", + "plain_text": "Hola,\r\n\r\nEl siguiente Ticket asignado a usted ha sido cerrado.\r\n\r\nTicket ID: {{ ticket.ticket }}\r\nCola: {{ queue.title }}\r\nT\u00edtulo: {{ ticket.title }}\r\nCreado: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\nRemitente: {{ ticket.submitter_email|default:\"Desconocido\" }}\r\nPrioridad: {{ ticket.get_priority_display }}\r\nEstado: {{ ticket.get_status }}\r\nAsignado a: {{ ticket.get_assigned_to }}\r\nVer online: {{ ticket.staff_url }} (login requerido)\r\n\r\nPara ver este Ticket online, por favor visite {{ ticket.staff_url }}.\r\n\r\n", + "html": "Hola,
\r\n\r\nEl siguiente Ticket asignado a usted ha sido cerrado.
\r\n\r\n\r\nTicket ID: {{ ticket.ticket }}
\r\nCola: {{ queue.title }}
\r\nT\u00edtulo: {{ ticket.title }}
\r\nCreado: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\nRemitente: {{ ticket.submitter_email|default:\"Desconocido\" }}
\r\nPrioridad: {{ ticket.get_priority_display }}
\r\nEstado: {{ ticket.get_status }}
\r\nAsignado a: {{ ticket.get_assigned_to }}
\r\nVer online para actualizar este Ticket (login requerido)
La descripci\u00f3n original es:
\r\n\r\n{{ ticket.description|linebreaksbr }}\r\n\r\n
La soluci\u00f3n dada fue:
\r\n\r\n{{ ticket.resolution }}", + "locale": "es", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.963Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 85, + "fields": { + "template_name": "closed_submitter", + "subject": "(cerrado)", + "heading": "Ticket cerrado", + "plain_text": "Hola,\r\n\r\nRecientemente usted envi\u00f3 el Ticket \"{{ ticket.title }}\". Este e-mail es para confirmar que el Ticket ha sido cerrado.\r\n\r\nSi cree que se requiere trabajo adicional, por favor d\u00e9janoslo saber respondiendo a este correo dejando el asunto intacto.\r\n\r\nPara ver este Ticket online, por favor visite {{ ticket.ticket_url }}.\r\n\r\nLa soluci\u00f3n dada fue:\r\n\r\n{{ ticket.resolution }}\r\n\r\n", + "html": "
Hola,
\r\n\r\nRecientemente usted envi\u00f3 el Ticket {{ ticket.title }}. Este e-mail es para confirmar que el Ticket ha sido cerrado.
\r\n\r\nLa soluci\u00f3n dada es:
\r\n\r\n{{ ticket.resolution }}\r\n\r\n
Para ver este Ticket online, por favor visite {{ ticket.ticket_url }}. Si cree que se requiere trabajo adicional, por favor d\u00e9janoslo saber respondiendo a este correo dejando el asunto intacto.
", + "locale": "es", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.965Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 86, + "fields": { + "template_name": "escalated_cc", + "subject": "(Escalado)", + "heading": "Ticket escalado", + "plain_text": "Hola,\r\n\r\nEste e-mail es para informar que el Ticket {{ ticket.ticket }} (\"{{ ticket.title }}\") ha sido escalado autom\u00e1ticamente.\r\n\r\nTicket ID: {{ ticket.ticket }}\r\nCola: {{ queue.title }}\r\nT\u00edtulo: {{ ticket.title }}\r\nCreado: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\nRemitente: {{ ticket.submitter_email|default:\"Desconocido\" }}\r\nPrioridad: {{ ticket.get_priority_display }}\r\nEstado: {{ ticket.get_status }}\r\nAsignado a: {{ ticket.get_assigned_to }}\r\nVer online: {{ ticket.staff_url }} (login requerido)\r\n\r\nLa descripci\u00f3n original es:\r\n\r\n{{ ticket.description }}\r\n\r\n", + "html": "Hola,
\r\n\r\nEste e-mail es para informar que el Ticket {{ ticket.ticket }} ('{{ ticket.title }}') ha sido escalado autom\u00e1ticamente.
\r\n\r\n\r\nTicket ID: {{ ticket.ticket }}
\r\nCola: {{ queue.title }}
\r\nT\u00edtulo: {{ ticket.title }}
\r\nCreado: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\nRemitente: {{ ticket.submitter_email|default:\"Desconocido\" }}
\r\nPrioridad: {{ ticket.get_priority_display }}
\r\nEstado: {{ ticket.get_status }}
\r\nAsignado a: {{ ticket.get_assigned_to }}
\r\nVer online para actualizar este Ticket (login requerido)
La descripci\u00f3n original es:
\r\n\r\n{{ ticket.description|linebreaksbr }}", + "locale": "es", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.967Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 87, + "fields": { + "template_name": "escalated_submitter", + "subject": "(Escalado)", + "heading": "Su Ticket ha sido escalado", + "plain_text": "Hola,\r\n\r\nRecientemente usted envi\u00f3 el Ticket \"{{ ticket.title }}\". Este e-mail es para informarle que su Ticket ha sido escalado ya que ha estado abierto por mas tiempo del esperado.\r\n\r\nSe revisar\u00e1 su Ticket para darle una soluci\u00f3n tan pronto como sea posible.\r\n\r\nPara ver este Ticket online, por favor visite {{ ticket.ticket_url }}.\r\n\r\n", + "html": "
Hola,
\r\n\r\nRecientemente usted envi\u00f3 el Ticket {{ ticket.title }}. Este e-mail es para informarle que su Ticket ha sido escalado ya que ha estado abierto por mas tiempo del esperado.
\r\n\r\nSe revisar\u00e1 su Ticket para darle una soluci\u00f3n tan pronto como sea posible.
\r\n\r\nPara ver este Ticket online, por favor visite {{ ticket.ticket_url }}.
", + "locale": "es", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.970Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 88, + "fields": { + "template_name": "escalated_owner", + "subject": "(Escalado)", + "heading": "El Ticket asignado a usted ha sido escalado", + "plain_text": "Hola,\r\n\r\nUn Ticket asignado a usted ha sido automaticamente escalado ya que ha estado abierto por mas tiempo del esperado.\r\n\r\nTicket ID: {{ ticket.ticket }}\r\nCola: {{ queue.title }}\r\nT\u00edtulo: {{ ticket.title }}\r\nCreado: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\nRemitente: {{ ticket.submitter_email|default:\"Desconocido\" }}\r\nPrioridad: {{ ticket.get_priority_display }}\r\nEstado: {{ ticket.get_status }}\r\nAsignado a: {{ ticket.get_assigned_to }}\r\nVer online: {{ ticket.staff_url }} (login requerido)\r\n\r\nLa descripci\u00f3n original es::\r\n\r\n{{ ticket.description }}\r\n\r\nPor favor revisar este Ticket e intentar dar una soluci\u00f3n tan pronto como sea posible.\r\n\r\n", + "html": "Hola,
\r\n\r\nUn Ticket asignado a usted ha sido automaticamente escalado ya que ha estado abierto por mas tiempo del esperado.
\r\n\r\n\r\nTicket ID: {{ ticket.ticket }}
\r\nCola: {{ queue.title }}
\r\nT\u00edtulo: {{ ticket.title }}
\r\nCreado: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\nRemitente: {{ ticket.submitter_email|default:\"Desconocido\" }}
\r\nPrioridad: {{ ticket.get_priority_display }}
\r\nEstado: {{ ticket.get_status }}
\r\nAsignado a: {{ ticket.get_assigned_to }}
\r\nVer online para actualizar este Ticket (login requerido)
La descripci\u00f3n original es:
\r\n\r\n{{ ticket.description|linebreaksbr }}", + "locale": "es", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.972Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 89, + "fields": { + "template_name": "newticket_cc", + "subject": "(Creado)", + "heading": "Nuevo Ticket creado", + "plain_text": "Hola,\r\n\r\nEste e-mail es para informar que un Ticket ha sido creado.\r\n\r\nTicket ID: {{ ticket.ticket }}\r\nCola: {{ queue.title }}\r\nT\u00edtulo: {{ ticket.title }}\r\nCreado: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\nRemitente: {{ ticket.submitter_email|default:\"Desconocido\" }}\r\nPrioridad: {{ ticket.get_priority_display }}\r\nEstado: {{ ticket.get_status }}\r\nVer online: {{ ticket.staff_url }} (login requerido)\r\n\r\nDescripci\u00f3n:\r\n{{ ticket.description }}\r\n\r\n", + "html": "
Hola,
\r\n\r\nEste e-mail es para informar que un Ticket ha sido creado.
\r\n\r\n\r\nTicket ID: {{ ticket.ticket }}
\r\nCola: {{ queue.title }}
\r\nT\u00edtulo: {{ ticket.title }}
\r\nCreado: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\nRemitente: {{ ticket.submitter_email|default:\"Desconocido\" }}
\r\nPrioridad: {{ ticket.get_priority_display }}
\r\nEstado: {{ ticket.get_status }}
\r\nVer online para actualizar este Ticket (login requerido)
Descripci\u00f3n:
\r\n\r\n{{ ticket.description|linebreaksbr }}", + "locale": "es", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.974Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 90, + "fields": { + "template_name": "newticket_submitter", + "subject": "(Creado)", + "heading": "Su Ticket ha sido creado", + "plain_text": "Hola,\r\n\r\nEste e-mail es para informar que recibimos su consulta \"{{ ticket.title }}\". \r\n\r\nUsted no debe realizar nada en este momento. Su Ticket est\u00e1 identificado con el n\u00famero {{ ticket.ticket }} y ser\u00e1 respondido prontamente.\r\n\r\nSi desea enviar detalles adicionales, o si tiene cualquier consulta con respecto a este Ticket por favor incluya el Ticket ID '{{ ticket.ticket }}' en el asunto. La manera mas f\u00e1cil de hacerlo es presionando el bot\u00f3n de \"respuesta\" a este mensaje.\r\n\r\nPara ver este Ticket online y proveer informaci\u00f3n adicional, a\u00f1adir archivos adjuntos o ver actualizaciones recientes, por favor visite {{ ticket.ticket_url }}.\r\n\r\nNosotros trabajaremos en su consulta y la resolveremos tan pronto como sea posible. Usted recibir\u00e1 actualizaciones y la soluci\u00f3n a su consulta a trav\u00e9s de este e-mail.\r\n", + "html": "
Hola,
\r\n\r\nEste e-mail es para informar que recibimos su consulta {{ ticket.title }}.
\r\n\r\nUsted no debe realizar nada en este momento. Su Ticket est\u00e1 identificado con el n\u00famero {{ ticket.ticket }} y ser\u00e1 respondido prontamente.
\r\n\r\nSi desea enviar detalles adicionales, o si tiene cualquier consulta con respecto a este Ticket por favor incluya el Ticket ID {{ ticket.ticket }} en el asunto. La manera mas f\u00e1cil de hacerlo es presionando el bot\u00f3n de \"respuesta\" a este mensaje.
\r\n\r\nPara ver este Ticket online y proveer informaci\u00f3n adicional, a\u00f1adir archivos adjuntos o ver actualizaciones recientes, por favor visite {{ ticket.ticket_url }}.
\r\n\r\nNosotros trabajaremos en su consulta y la resolveremos tan pronto como sea posible. Usted recibir\u00e1 actualizaciones y la soluci\u00f3n a su consulta a trav\u00e9s de este e-mail.
", + "locale": "es", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.975Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 91, + "fields": { + "template_name": "resolved_cc", + "subject": "(Resuelto)", + "heading": "Ticket resuelto", + "plain_text": "Hola,\r\n\r\nEl siguiente Ticket ha sido resuelto:\r\n\r\nTicket ID: {{ ticket.ticket }}\r\nCola: {{ queue.title }}\r\nT\u00edtulo: {{ ticket.title }}\r\nCreado: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\nRemitente: {{ ticket.submitter_email|default:\"Desconocido\" }}\r\nPrioridad: {{ ticket.get_priority_display }}\r\nEstado: {{ ticket.get_status }}\r\nAsignado a: {{ ticket.get_assigned_to }}\r\nVer online: {{ ticket.staff_url }} (login requerido)\r\n\r\nLa descripci\u00f3n original es:\r\n\r\n{{ ticket.description }}\r\n\r\nLa soluci\u00f3n dada fue:\r\n\r\n{{ ticket.resolution }}\r\n\r\nEsta solucion ha sido enviada al remitente, quien realizar\u00e1 la verificaci\u00f3n antes de que pueda cerrar el Ticket.\r\n\r\n", + "html": "Hola,
\r\n\r\nEl siguiente Ticket ha sido resuelto.
\r\n\r\n\r\nTicket ID: {{ ticket.ticket }}
\r\nCola: {{ queue.title }}
\r\nT\u00edtulo: {{ ticket.title }}
\r\nCreado: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\nRemitente: {{ ticket.submitter_email|default:\"Desconocido\" }}
\r\nPrioridad: {{ ticket.get_priority_display }}
\r\nEstado: {{ ticket.get_status }}
\r\nAsignado a: {{ ticket.get_assigned_to }}
\r\nVer online para actualizar este Ticket (login requerido)
La descripci\u00f3n original es:
\r\n\r\n{{ ticket.description|linebreaksbr }}\r\n\r\n
La soluci\u00f3n dada fue:
\r\n\r\n{{ ticket.resolution }}\r\n\r\n
Esta solucion ha sido enviada al remitente, quien realizar\u00e1 la verificaci\u00f3n antes de que pueda cerrar el Ticket.
", + "locale": "es", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.977Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 92, + "fields": { + "template_name": "resolved_owner", + "subject": "(Resuelto)", + "heading": "Ticket resuelto", + "plain_text": "Hola,\r\n\r\nUn ticket asignado a usted ha sido resuelto.\r\n\r\nTicket ID: {{ ticket.ticket }}\r\nCola: {{ queue.title }}\r\nT\u00edtulo: {{ ticket.title }}\r\nCreado: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\nRemitente: {{ ticket.submitter_email|default:\"Desconocido\" }}\r\nPrioridad: {{ ticket.get_priority_display }}\r\nEstado: {{ ticket.get_status }}\r\nAsignado a: {{ ticket.get_assigned_to }}\r\nVer online: {{ ticket.staff_url }} (login requerido)\r\n\r\nLa descripci\u00f3n original es:\r\n\r\n{{ ticket.description }}\r\n\r\nLa soluci\u00f3n dada fue:\r\n\r\n{{ ticket.resolution }}\r\n\r\nEsta soluci\u00f3n ha sido enviada al remitente, quien realizar\u00e1 la verificaci\u00f3n antes de que pueda cerrar el Ticket.\r\n\r\n", + "html": "Hola,
\r\n\r\nUn ticket asignado a usted ha sido resuelto.
\r\n\r\n\r\nTicket ID: {{ ticket.ticket }}
\r\nCola: {{ queue.title }}
\r\nT\u00edtulo: {{ ticket.title }}
\r\nCreado: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\nRemitente: {{ ticket.submitter_email|default:\"Desconocido\" }}
\r\nPrioridad: {{ ticket.get_priority_display }}
\r\nEstado: {{ ticket.get_status }}
\r\nAsignado a: {{ ticket.get_assigned_to }}
\r\nVer online para actualizar este Ticket (login requerido)
La descripci\u00f3n original es:
\r\n\r\n{{ ticket.description|linebreaksbr }}\r\n\r\n
La soluci\u00f3n dada fue:
\r\n\r\n{{ ticket.resolution }}\r\n\r\n
Esta solucion ha sido enviada al remitente, quien realizar\u00e1 la verificaci\u00f3n antes de que pueda cerrar el Ticket.
", + "locale": "es", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.979Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 93, + "fields": { + "template_name": "resolved_submitter", + "subject": "(Resuelto)", + "heading": "Su Ticket ha sido resuelto", + "plain_text": "Hola,\r\n\r\nRecientemente usted envi\u00f3 el Ticket \"{{ ticket.title }}\". Este e-mail es para informar que su Ticket ha sido resuelto.\r\n\r\nLa siguiente soluci\u00f3n fue dada a su Ticket {{ ticket.ticket }}:\r\n\r\n{{ resolution }}\r\n\r\n\u00bfPuede confirmar que esta soluci\u00f3n cumple con lo que necesita para cerrar este Ticket? Si tiene otras consultas, o cree que esta soluci\u00f3n no es la adecuada, por favor responda este mensaje manteniendo el asunto intacto.\r\n\r\nSi desea ver este Ticket online, por favor visite {{ ticket.ticket_url }}\r\n\r\n", + "html": "Hola,
\r\n\r\nRecientemente usted envi\u00f3 el Ticket {{ ticket.title }}. Este e-mail es para informar que su Ticket ha sido resuelto.
\r\n\r\nLa siguiente soluci\u00f3n fue dada a su Ticket {{ ticket.ticket }}:
\r\n\r\n{{ resolution }}\r\n\r\n
\u00bfPuede confirmar que esta soluci\u00f3n cumple con lo que necesita para cerrar este Ticket? Si tiene otras consultas, o cree que esta soluci\u00f3n no es la adecuada, por favor responda este mensaje manteniendo el asunto intacto.
\r\n\r\nSi desea ver este Ticket online, por favor visite {{ ticket.ticket_url }}.
", + "locale": "es", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.980Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 94, + "fields": { + "template_name": "updated_cc", + "subject": "(Actualizado)", + "heading": "Ticket actualizado", + "plain_text": "Hola,\r\n\r\nEste e-mail es para informar que el Ticket {{ ticket.ticket }} (\"{{ ticket.title }}\") por {{ ticket.submitter_email }} ha sido actualizado.\r\n\r\nTicket ID: {{ ticket.ticket }}\r\nCola: {{ queue.title }}\r\nT\u00edtulo: {{ ticket.title }}\r\nCreado: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\nRemitente: {{ ticket.submitter_email|default:\"Desconocido\" }}\r\nPrioridad: {{ ticket.get_priority_display }}\r\nEstado: {{ ticket.get_status }}\r\nAsignado a: {{ ticket.get_assigned_to }}\r\nVer online: {{ ticket.staff_url }} (login requerido)\r\n\r\nDescripci\u00f3n:\r\n\r\n{{ ticket.description }}\r\n\r\nSe agreg\u00f3 el siguiente comentario:\r\n\r\n{{ comment }}\r\n\r\nEsta informaci\u00f3n {% if private %}no {% endif %} fue enviada al remitente.\r\n\r\nSi desea ver este Ticket online, por favor visite {{ ticket.staff_url }}.\r\n\r\n", + "html": "Hola,
\r\n\r\nEste e-mail es para informar que el Ticket {{ ticket.ticket }} (\"{{ ticket.title }}\") por {{ ticket.submitter_email }} ha sido actualizado.
\r\n\r\n\r\nTicket ID: {{ ticket.ticket }}
\r\nCola: {{ queue.title }}
\r\nT\u00edtulo: {{ ticket.title }}
\r\nCreado: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\nRemitente: {{ ticket.submitter_email|default:\"Desconocido\" }}
\r\nPrioridad: {{ ticket.get_priority_display }}
\r\nEstado: {{ ticket.get_status }}
\r\nAsignado a: {{ ticket.get_assigned_to }}
\r\nVer online para actualizar este Ticket (login requerido)
La descripci\u00f3n original es:
\r\n\r\n{{ ticket.description|linebreaksbr }}\r\n\r\n
Se agreg\u00f3 el siguiente comentario:
\r\n\r\n{{ comment }}\r\n\r\n
Esta informaci\u00f3n {% if private %}no {% endif %} fue enviada al remitente.
", + "locale": "es", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.982Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 95, + "fields": { + "template_name": "updated_owner", + "subject": "(Actualizado)", + "heading": "Ticket actualizado", + "plain_text": "Hola,\r\n\r\nEste e-mail es para informar que el Ticket {{ ticket.ticket }} (\"{{ ticket.title }}\") por {{ ticket.submitter_email }}, que le fue asignado, ha sido actualizado.\r\n\r\nTicket ID: {{ ticket.ticket }}\r\nCola: {{ queue.title }}\r\nT\u00edtulo: {{ ticket.title }}\r\nCreado: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\nRemitente: {{ ticket.submitter_email|default:\"Desconocido\" }}\r\nPrioridad: {{ ticket.get_priority_display }}\r\nEstado: {{ ticket.get_status }}\r\nAsignado a: {{ ticket.get_assigned_to }}\r\nVer online: {{ ticket.staff_url }} (login requerido)\r\n\r\nDescripci\u00f3n original:\r\n\r\n{{ ticket.description }}\r\n\r\nSe agreg\u00f3 el siguiente comentario:\r\n\r\n{{ comment }}\r\n\r\nEsta informaci\u00f3n {% if private %}no {% endif %} fue enviada al remitente.\r\n\r\nSi desea ver este Ticket online, por favor visite {{ ticket.staff_url }}\r\n\r\n", + "html": "Hola,
\r\n\r\nEste e-mail es para informar que el Ticket {{ ticket.ticket }} (\"{{ ticket.title }}\") por {{ ticket.submitter_email }}, que le fue asignado, ha sido actualizado.
\r\n\r\n\r\nTicket ID: {{ ticket.ticket }}
\r\nCola: {{ queue.title }}
\r\nT\u00edtulo: {{ ticket.title }}
\r\nCreado: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\nRemitente: {{ ticket.submitter_email|default:\"Desconocido\" }}
\r\nPrioridad: {{ ticket.get_priority_display }}
\r\nEstado: {{ ticket.get_status }}
\r\nAsignado a: {{ ticket.get_assigned_to }}
\r\nVer online para actualizar este Ticket (login requerido)
La descripci\u00f3n original es:
\r\n\r\n{{ ticket.description|linebreaksbr }}\r\n\r\n
Se agreg\u00f3 el siguiente comentario:
\r\n\r\n{{ comment }}\r\n\r\n
Esta informaci\u00f3n {% if private %}no {% endif %} fue enviada al remitente.
", + "locale": "es", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.984Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 96, + "fields": { + "template_name": "updated_submitter", + "subject": "(Actualizado)", + "heading": "Su Ticket ha sido actualizado", + "plain_text": "Hola,\r\n\r\nRecientemente usted envi\u00f3 el Ticket \"{{ ticket.title }}\". Este correo es para informar que su Ticket ha sido actualizado.\r\n\r\nSe agreg\u00f3 el siguiente comentario al Ticket {{ ticket.ticket }}:\r\n\r\n{{ comment }}\r\n\r\nSi necesita agregar informaci\u00f3n adicional por favor responda a este mensaje manteniendo el asunto intacto. Por otro lado, usted puede ver y actualizar la informaci\u00f3n de este Ticket visitando {{ ticket.ticket_url }}\r\n\r\n", + "html": "Hola,
\r\n\r\nRecientemente usted envi\u00f3 el Ticket {{ ticket.title }}. Este correo es para informar que su Ticket ha sido actualizado.
\r\n\r\nSe agreg\u00f3 el siguiente comentario al Ticket {{ ticket.ticket }}:
\r\n\r\n{{ comment }}\r\n\r\n
Si necesita agregar informaci\u00f3n adicional por favor responda a este mensaje manteniendo el asunto intacto. Por otro lado, usted puede ver y actualizar la informaci\u00f3n de este Ticket visitando {{ ticket.ticket_url }}.
", + "locale": "es", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.986Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 97, + "fields": { + "template_name": "assigned_cc", + "subject": "(\u5df2\u5206\u914d)", + "heading": "\u5de5\u5355\u5df2\u5206\u914d", + "plain_text": "\u60a8\u597d,\r\n\r\n\u6e29\u99a8\u63d0\u793a, {{ ticket.submitter_email }}\u63d0\u4ea4\u7684\u5de5\u5355 {{ ticket.ticket }} (\"{{ ticket.title }}\") \u5df2\u7ecf {% if ticket.assigned_to %}\u5206\u914d\u7ed9 {{ ticket.assigned_to }}{% else %}\u672a\u5206\u914d{% endif %}.\r\n\r\n\u5de5\u5355 ID: {{ ticket.ticket }}\r\n\u5f85\u529e: {{ queue.title }}\r\n\u6807\u9898: {{ ticket.title }}\r\n\u5df2\u6253\u5f00: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\n\u63d0\u4ea4\u4eba: {{ ticket.submitter_email|default:\"Unknown\" }}\r\n\u4f18\u5148\u7ea7:{{ ticket.get_priority_display }}\r\n\u72b6\u6001: {{ ticket.get_status }}\r\n\u5df2\u5206\u914d\u7ed9: {{ ticket.get_assigned_to }}\r\n\u5728\u7ebf\u67e5\u770b: {{ ticket.staff_url }}\r\n\r\n\u539f\u59cb\u63cf\u8ff0\u4e3a:\r\n\r\n{{ ticket.description }}\r\n\r\n", + "html": "\u60a8\u597d,
\r\n\r\n\u6e29\u99a8\u63d0\u793a, {{ ticket.submitter_email }}\u7684\u5de5\u5355 {{ ticket.ticket }} ({{ ticket.title }}) {% if ticket.assigned_to %}\u5df2\u7ecf\u5206\u914d\u7ed9 {{ ticket.assigned_to }}{% else %}\u8fd8\u672a\u5206\u914d{% endif %}.
\r\n\r\n\r\n\u5de5\u5355 ID: {{ ticket.ticket }}
\r\n\u5f85\u529e: {{ queue.title }}
\r\n\u6807\u9898: {{ ticket.title }}
\r\n\u5df2\u6253\u5f00: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\n\u63d0\u4ea4\u4eba: {{ ticket.submitter_email|default:\"Unknown\" }}
\r\n\u4f18\u5148\u7ea7: {{ ticket.get_priority_display }}
\r\n\u72b6\u6001: {{ ticket.get_status }}
\r\n\u5df2\u5206\u914d\u7ed9: {{ ticket.get_assigned_to }}
\r\n\u5728\u7ebf\u67e5\u770b \u66f4\u65b0\u6b64\u5de5\u5355 (\u9700\u8981\u767b\u5f55)
\u539f\u5de5\u5355\u63cf\u8ff0\u53c2\u8003\uff1a:
\r\n\r\n{{ ticket.description|linebreaksbr }}", + "locale": "zh", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.987Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 98, + "fields": { + "template_name": "assigned_owner", + "subject": "(\u5df2\u5206\u914d\u7ed9\u60a8)", + "heading": "\u5de5\u5355\u5df2\u5206\u914d\u7ed9\u60a8", + "plain_text": "\u60a8\u597d,\r\n\r\n\u6e29\u99a8\u63d0\u793a, \u5de5\u5355 \u63d0\u4ea4\u8005{{ ticket.submitter_email }}\u7684\u5de5\u5355{{ ticket.ticket }} \u5df2\u7ecf \u5206\u914d\u7ed9 you.\r\n\r\n\u5de5\u5355 ID: {{ ticket.ticket }}\r\n\u5f85\u529e: {{ queue.title }}\r\n\u6807\u9898: {{ ticket.title }}\r\n\u5df2\u6253\u5f00: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\n\u63d0\u4ea4\u4eba: {{ ticket.submitter_email|default:\"Unknown\" }}\r\n\u4f18\u5148\u7ea7:{{ ticket.get_priority_display }}\r\n\u72b6\u6001: {{ ticket.get_status }}\r\n\u5df2\u5206\u914d\u7ed9: YOU\r\n\u5728\u7ebf\u67e5\u770b: {{ ticket.staff_url }}\r\n\r\n\u539f\u59cb\u63cf\u8ff0\u4e3a:\r\n\r\n{{ ticket.description }}\r\n\r\n", + "html": "
\u60a8\u597d,
\r\n\r\n\u6e29\u99a8\u63d0\u793a, \u63d0\u4ea4\u8005{{ ticket.submitter_email }}\u7684\u5de5\u5355 {{ ticket.ticket }} ({{ ticket.title }}) \u5df2\u7ecf\u5206\u914d\u7ed9 you.
\r\n\r\n\r\n\u5de5\u5355 ID: {{ ticket.ticket }}
\r\n\u5f85\u529e: {{ queue.title }}
\r\n\u6807\u9898: {{ ticket.title }}
\r\n\u5df2\u6253\u5f00: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\n\u63d0\u4ea4\u4eba: {{ ticket.submitter_email|default:\"Unknown\" }}
\r\n\u4f18\u5148\u7ea7: {{ ticket.get_priority_display }}
\r\n\u72b6\u6001: {{ ticket.get_status }}
\r\n\u5df2\u5206\u914d\u7ed9: YOU
\r\n\u5728\u7ebf\u67e5\u770b \u66f4\u65b0\u6b64\u5de5\u5355 (\u9700\u8981\u767b\u5f55)
\u539f\u5de5\u5355\u63cf\u8ff0\u53c2\u8003\uff1a:
\r\n\r\n{{ ticket.description|linebreaksbr }}", + "locale": "zh", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.989Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 99, + "fields": { + "template_name": "closed_cc", + "subject": "(\u5df2\u5173\u95ed)", + "heading": "\u5de5\u5355\u5df2\u5173\u95ed", + "plain_text": "\u60a8\u597d,\r\n\r\n\u5de5\u5355 {{ ticket.title }} (\"{{ ticket.title }}\"){% if ticket.assigned_to %}, \u5206\u914d\u7ed9 {{ ticket.assigned_to }}{% endif %} \u5df2\u7ecf \u5173\u95ed\r\n\r\n\u5de5\u5355 ID: {{ ticket.ticket }}\r\n\u5f85\u529e: {{ queue.title }}\r\n\u6807\u9898: {{ ticket.title }}\r\n\u5df2\u6253\u5f00: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\n\u63d0\u4ea4\u4eba: {{ ticket.submitter_email|default:\"Unknown\" }}\r\n\u4f18\u5148\u7ea7:{{ ticket.get_priority_display }}\r\n\u72b6\u6001: {{ ticket.get_status }}\r\n\u5df2\u5206\u914d\u7ed9: {{ ticket.get_assigned_to }}\r\n\u5728\u7ebf\u67e5\u770b: {{ ticket.staff_url }} (\u9700\u8981\u767b\u5f55)\r\n\r\n\u539f\u59cb\u63cf\u8ff0\u4e3a:\r\n\r\n{{ ticket.description }}\r\n\r\n\u63d0\u4f9b\u7684\u89e3\u51b3\u65b9\u6848\u4e3a:\r\n\r\n{{ resolution }}\r\n\r\n", + "html": "
\u60a8\u597d,
\r\n\r\n\u5de5\u5355 {{ ticket.title }} ('{{ ticket.title }}'){% if ticket.assigned_to %}, \u5206\u914d\u7ed9 {{ ticket.get_assigned_to }}{% endif %} \u5df2\u7ecf \u5173\u95ed
\r\n\r\n\r\n\u5de5\u5355 ID: {{ ticket.ticket }}
\r\n\u5f85\u529e: {{ queue.title }}
\r\n\u6807\u9898: {{ ticket.title }}
\r\n\u5df2\u6253\u5f00: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\n\u63d0\u4ea4\u4eba: {{ ticket.submitter_email|default:\"Unknown\" }}
\r\n\u4f18\u5148\u7ea7: {{ ticket.get_priority_display }}
\r\n\u72b6\u6001: {{ ticket.get_status }}
\r\n\u5df2\u5206\u914d\u7ed9: {{ ticket.get_assigned_to }}
\r\n\u5728\u7ebf\u67e5\u770b \u66f4\u65b0\u6b64\u5de5\u5355 (\u9700\u8981\u767b\u5f55)
\u539f\u5de5\u5355\u63cf\u8ff0\u53c2\u8003\uff1a:
\r\n\r\n{{ ticket.description|linebreaksbr }}\r\n\r\n
\u63d0\u4f9b\u7684\u89e3\u51b3\u65b9\u6848\u4e3a:
\r\n\r\n{{ resolution }}\r\n\r\n
\u5982\u679c\u60a8\u60f3\u5728\u7ebf\u67e5\u770b\uff0c \u53ef\u4ee5\u8bbf\u95ee {{ ticket.staff_url }}.
", + "locale": "zh", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.990Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 100, + "fields": { + "template_name": "closed_owner", + "subject": "(\u5df2\u5173\u95ed)", + "heading": "\u5de5\u5355\u5df2\u5173\u95ed", + "plain_text": "\u60a8\u597d,\r\n\r\n\u4ee5\u4e0b\u5206\u914d\u7ed9\u60a8\u7684\u5de5\u5355, \u5df2\u7ecf\u5173\u95ed\r\n\r\n\u5de5\u5355 ID: {{ ticket.ticket }}\r\n\u5f85\u529e: {{ queue.title }}\r\n\u6807\u9898: {{ ticket.title }}\r\n\u5df2\u6253\u5f00: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\n\u63d0\u4ea4\u4eba: {{ ticket.submitter_email|default:\"Unknown\" }}\r\n\u4f18\u5148\u7ea7:{{ ticket.get_priority_display }}\r\n\u72b6\u6001: {{ ticket.get_status }}\r\n\u5df2\u5206\u914d\u7ed9: {{ ticket.get_assigned_to }}\r\n\u5728\u7ebf\u67e5\u770b: {{ ticket.staff_url }} (\u9700\u8981\u767b\u5f55)\r\n\r\n\u5982\u679c\u60a8\u60f3\u5728\u7ebf\u67e5\u770b\uff0c \u53ef\u4ee5\u8bbf\u95ee {{ ticket.staff_url }}.\r\n\r\n", + "html": "\u60a8\u597d,
\r\n\r\n\u4ee5\u4e0b\u5206\u914d\u7ed9\u60a8\u7684\u5de5\u5355, \u5df2\u7ecf\u5173\u95ed
\r\n\r\n\r\n\u5de5\u5355 ID: {{ ticket.ticket }}
\r\n\u5f85\u529e: {{ queue.title }}
\r\n\u6807\u9898: {{ ticket.title }}
\r\n\u5df2\u6253\u5f00: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\n\u63d0\u4ea4\u4eba: {{ ticket.submitter_email|default:\"Unknown\" }}
\r\n\u4f18\u5148\u7ea7: {{ ticket.get_priority_display }}
\r\n\u72b6\u6001: {{ ticket.get_status }}
\r\n\u5df2\u5206\u914d\u7ed9: {{ ticket.get_assigned_to }}
\r\n\u5728\u7ebf\u67e5\u770b \u66f4\u65b0\u6b64\u5de5\u5355 (\u9700\u8981\u767b\u5f55)
\u539f\u5de5\u5355\u63cf\u8ff0\u53c2\u8003\uff1a:
\r\n\r\n{{ ticket.description|linebreaksbr }}\r\n\r\n
\u63d0\u4f9b\u7684\u89e3\u51b3\u65b9\u6848\u4e3a:
\r\n\r\n{{ ticket.resolution }}", + "locale": "zh", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.992Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 101, + "fields": { + "template_name": "closed_submitter", + "subject": "(\u5df2\u5173\u95ed)", + "heading": "\u5de5\u5355\u5df2\u5173\u95ed", + "plain_text": "\u60a8\u597d,\r\n\r\n\u60a8\u6700\u8fd1\u8bb0\u5f55\u4e86\u4e3b\u9898\u4e3a\"{{ ticket.title }}\"\u7684\u5de5\u5355. \u672c\u90ae\u4ef6\u786e\u8ba4\u5de5\u5355\u5df2\u7ecf \u5173\u95ed\r\n\r\nI\u5982\u679c\u60a8\u8ba4\u4e3a\u8fd8\u9700\u8981\u540e\u7eed\u5de5\u4f5c\uff0c \u8bf7\u7528\u539f\u6807\u9898\u56de\u590d\u6b64\u90ae\u4ef6.\r\n\r\n\u5982\u679c\u60a8\u60f3\u5728\u7ebf\u67e5\u770b\uff0c \u53ef\u4ee5\u8bbf\u95ee {{ ticket.ticket_url }}.\r\n\r\n\u63d0\u4f9b\u7684\u89e3\u51b3\u65b9\u6848\u4e3a:\r\n\r\n{{ ticket.resolution }}\r\n\r\n", + "html": "
\u60a8\u597d,
\r\n\r\n\u60a8\u6700\u8fd1\u8bb0\u5f55\u4e86\u4e3b\u9898\u4e3a{{ ticket.title }}\u7684\u5de5\u5355. \u672c\u90ae\u4ef6\u786e\u8ba4\u5de5\u5355\u5df2\u7ecf \u5173\u95ed
\r\n\r\n\u5df2\u63d0\u4f9b\u7684\u65b9\u6848\u4e3a:
\r\n\r\n{{ ticket.resolution }}\r\n\r\n
\u5982\u679c\u60a8\u60f3\u5728\u7ebf\u67e5\u770b\uff0c \u53ef\u4ee5\u8bbf\u95ee {{ ticket.ticket_url }}. \u5982\u679c\u60a8\u8ba4\u4e3a\u8fd8\u9700\u8981\u540e\u7eed\u5de5\u4f5c\uff0c \u8bf7\u7528\u539f\u6807\u9898\u56de\u590d\u6b64\u90ae\u4ef6.
", + "locale": "zh", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.994Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 102, + "fields": { + "template_name": "escalated_cc", + "subject": "(\u5df2\u7ecf\u63d0\u5347\u4f18\u5148\u7ea7)", + "heading": "\u5de5\u5355 \u5df2\u7ecf\u63d0\u5347\u4f18\u5148\u7ea7", + "plain_text": "\u60a8\u597d,\r\n\r\n\u6e29\u99a8\u63d0\u793a, \u5de5\u5355 {{ ticket.ticket }} (\"{{ ticket.title }}\") \u5df2\u7ecf\u81ea\u52a8\u63d0\u5347\u4f18\u5148\u7ea7.\r\n\r\n\u5de5\u5355 ID: {{ ticket.ticket }}\r\n\u5f85\u529e: {{ queue.title }}\r\n\u6807\u9898: {{ ticket.title }}\r\n\u5df2\u6253\u5f00: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\n\u63d0\u4ea4\u4eba: {{ ticket.submitter_email|default:\"Unknown\" }}\r\n\u4f18\u5148\u7ea7:{{ ticket.get_priority_display }}\r\n\u72b6\u6001: {{ ticket.get_status }}\r\n\u5df2\u5206\u914d\u7ed9: {{ ticket.get_assigned_to }}\r\n\u5728\u7ebf\u67e5\u770b: {{ ticket.staff_url }} (\u9700\u8981\u767b\u5f55)\r\n\r\n\u539f\u59cb\u63cf\u8ff0\u4e3a:\r\n\r\n{{ ticket.description }}\r\n\r\n", + "html": "\u60a8\u597d,
\r\n\r\n\u6e29\u99a8\u63d0\u793a, \u5de5\u5355 {{ ticket.ticket }} ('{{ ticket.title }}') \u5df2\u7ecf \u81ea\u52a8\u63d0\u5347\u4f18\u5148\u7ea7.
\r\n\r\n\r\n\u5de5\u5355 ID: {{ ticket.ticket }}
\r\n\u5f85\u529e: {{ queue.title }}
\r\n\u6807\u9898: {{ ticket.title }}
\r\n\u5df2\u6253\u5f00: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\n\u63d0\u4ea4\u4eba: {{ ticket.submitter_email|default:\"Unknown\" }}
\r\n\u4f18\u5148\u7ea7: {{ ticket.get_priority_display }}
\r\n\u72b6\u6001: {{ ticket.get_status }}
\r\n\u5df2\u5206\u914d\u7ed9: {{ ticket.get_assigned_to }}
\r\n\u5728\u7ebf\u67e5\u770b \u66f4\u65b0\u6b64\u5de5\u5355 (\u9700\u8981\u767b\u5f55)
\u539f\u5de5\u5355\u63cf\u8ff0\u53c2\u8003\uff1a:
\r\n\r\n{{ ticket.description|linebreaksbr }}", + "locale": "zh", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.997Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 103, + "fields": { + "template_name": "escalated_owner", + "subject": "(\u5df2\u7ecf\u63d0\u5347\u4f18\u5148\u7ea7)", + "heading": "\u5de5\u5355 \u5df2\u5206\u914d\u7ed9 \u60a8 \u5df2\u7ecf\u63d0\u5347\u4f18\u5148\u7ea7", + "plain_text": "\u60a8\u597d,\r\n\r\nA \u5206\u914d\u7ed9\u60a8\u7684\u5f53\u524d\u5de5\u5355\u5df2\u7ecf\u81ea\u52a8\u63d0\u5347\u4f18\u5148\u7ea7\uff0c \u56e0\u4e3a\u6253\u5f00\u65f6\u95f4\u5df2\u7ecf\u8d85\u8fc7\u9884\u671f.\r\n\r\n\u5de5\u5355 ID: {{ ticket.ticket }}\r\n\u5f85\u529e: {{ queue.title }}\r\n\u6807\u9898: {{ ticket.title }}\r\n\u5df2\u6253\u5f00: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\n\u63d0\u4ea4\u4eba: {{ ticket.submitter_email|default:\"Unknown\" }}\r\n\u4f18\u5148\u7ea7:{{ ticket.get_priority_display }}\r\n\u72b6\u6001: {{ ticket.get_status }}\r\n\u5df2\u5206\u914d\u7ed9: {{ ticket.get_assigned_to }}\r\n\u5728\u7ebf\u67e5\u770b: {{ ticket.staff_url }} (\u9700\u8981\u767b\u5f55)\r\n\r\n\u539f\u59cb\u63cf\u8ff0\u4e3a:\r\n\r\n{{ ticket.description }}\r\n\r\n\u8bf7\u67e5\u770b\u6b64\u5de5\u5355\u5e76\u5c3d\u5feb\u63d0\u4f9b\u89e3\u51b3\u65b9\u6848.\r\n\r\n", + "html": "
\u60a8\u597d,
\r\n\r\nA \u5f53\u524d\u5206\u914d\u7ed9\u60a8\u7684\u5de5\u5355\u5df2\u7ecf\u81ea\u52a8\u63d0\u5347\u4f18\u5148\u7ea7 as it \u5df2\u7ecf \u6253\u5f00\u65f6\u95f4\u8d85\u8fc7\u9884\u671f.
\r\n\r\n\r\n\u5de5\u5355 ID: {{ ticket.ticket }}
\r\n\u5f85\u529e: {{ queue.title }}
\r\n\u6807\u9898: {{ ticket.title }}
\r\n\u5df2\u6253\u5f00: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\n\u63d0\u4ea4\u4eba: {{ ticket.submitter_email|default:\"Unknown\" }}
\r\n\u4f18\u5148\u7ea7: {{ ticket.get_priority_display }}
\r\n\u72b6\u6001: {{ ticket.get_status }}
\r\n\u5df2\u5206\u914d\u7ed9: {{ ticket.get_assigned_to }}
\r\n\u5728\u7ebf\u67e5\u770b \u66f4\u65b0\u6b64\u5de5\u5355 (\u9700\u8981\u767b\u5f55)
\u539f\u5de5\u5355\u63cf\u8ff0\u53c2\u8003\uff1a:
\r\n\r\n{{ ticket.description|linebreaksbr }}", + "locale": "zh", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:32.999Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 104, + "fields": { + "template_name": "escalated_submitter", + "subject": "(\u5df2\u7ecf\u63d0\u5347\u4f18\u5148\u7ea7)", + "heading": "\u60a8\u7684 \u5de5\u5355 \u5df2\u7ecf \u5df2\u7ecf\u63d0\u5347\u4f18\u5148\u7ea7", + "plain_text": "\u60a8\u597d,\r\n\r\n\u60a8\u6700\u8fd1\u4e3a\u6211\u4eec\u8bb0\u5f55\u4e86\u4e00\u4e2a\u6807\u9898\u4e3a \"{{ ticket.title }}\" \u7684\u5de5\u5355. \u672c\u90ae\u4ef6\u662f\u60f3\u63d0\u9192\u60a8\u5de5\u5355\u81ea\u52a8\u5347\u7ea7\uff0c \u56e0\u4e3a\u5df2\u7ecf\u6253\u5f00\u65f6\u95f4\u8d85\u8fc7\u9884\u671f.\r\n\r\n\u6211\u4eec\u5c06\u5c3d\u5feb\u67e5\u770b\u5e76\u63d0\u4f9b\u89e3\u51b3\u65b9\u6848.\r\n\r\n\u5982\u679c\u60a8\u60f3\u5728\u7ebf\u67e5\u770b\uff0c \u53ef\u4ee5\u8bbf\u95ee {{ ticket.ticket_url }}.\r\n\r\n", + "html": "
\u60a8\u597d,
\r\n\r\n\u60a8\u6700\u8fd1\u8bb0\u5f55\u4e86\u4e3b\u9898\u4e3a{{ ticket.title }}\u7684\u5de5\u5355. \u672c\u90ae\u4ef6\u662f\u60f3\u63d0\u9192\u60a8\u5de5\u5355\u81ea\u52a8\u5347\u7ea7\uff0c \u56e0\u4e3a\u5df2\u7ecf \u6253\u5f00\u65f6\u95f4\u8d85\u8fc7\u9884\u671f.
\r\n\r\n\u6211\u4eec\u5c06\u5c3d\u5feb\u67e5\u770b\u5e76\u63d0\u4f9b\u89e3\u51b3\u65b9\u6848.
\r\n\r\n\u5982\u679c\u60a8\u60f3\u5728\u7ebf\u67e5\u770b\uff0c \u53ef\u4ee5\u8bbf\u95ee {{ ticket.ticket_url }}.
", + "locale": "zh", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:33.001Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 105, + "fields": { + "template_name": "newticket_cc", + "subject": "(\u5df2\u6253\u5f00)", + "heading": "\u65b0\u5de5\u5355\u5df2\u6253\u5f00", + "plain_text": "\u60a8\u597d,\r\n\r\n\u6e29\u99a8\u63d0\u793a\uff1a \u65b0\u5de5\u5355\u5df2\u7ecf \u6253\u5f00.\r\n\r\n\u5de5\u5355 ID: {{ ticket.ticket }}\r\n\u5f85\u529e: {{ queue.title }}\r\n\u6807\u9898: {{ ticket.title }}\r\n\u5df2\u6253\u5f00: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\n\u63d0\u4ea4\u4eba: {{ ticket.submitter_email|default:\"Unknown\" }}\r\n\u4f18\u5148\u7ea7:{{ ticket.get_priority_display }}\r\n\u72b6\u6001: {{ ticket.get_status }}\r\n\u5728\u7ebf\u67e5\u770b: {{ ticket.staff_url }} (\u9700\u8981\u767b\u5f55)\r\n\r\nDescription:\r\n{{ ticket.description }}\r\n\r\n", + "html": "\u60a8\u597d,
\r\n\r\n\u6e29\u99a8\u63d0\u793a\uff1a \u65b0\u5de5\u5355\u5df2\u7ecf\u6253\u5f00.
\r\n\r\n\r\n\u5de5\u5355 ID: {{ ticket.ticket }}
\r\n\u5f85\u529e: {{ queue.title }}
\r\n\u6807\u9898: {{ ticket.title }}
\r\n\u5df2\u6253\u5f00: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\n\u63d0\u4ea4\u4eba: {{ ticket.submitter_email|default:\"Unknown\" }}
\r\n\u4f18\u5148\u7ea7: {{ ticket.get_priority_display }}
\r\n\u72b6\u6001: {{ ticket.get_status }}
\r\n\u5728\u7ebf\u67e5\u770b \u66f4\u65b0\u6b64\u5de5\u5355 (\u9700\u8981\u767b\u5f55)
Description:
\r\n\r\n{{ ticket.description|linebreaksbr }}", + "locale": "zh", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:33.003Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 106, + "fields": { + "template_name": "newticket_submitter", + "subject": "(\u5df2\u6253\u5f00)", + "heading": "\u60a8\u7684\u5de5\u5355\u5df2\u7ecf\u6253\u5f00", + "plain_text": "\u60a8\u597d,\r\n\r\n\u6e29\u99a8\u63d0\u793a\uff1a \u6211\u4eec\u5df2\u7ecf\u6536\u5230\u60a8\u4e3b\u9898\u4e3a \"{{ ticket.title }}\" \u7684\u67e5\u8be2. \r\n\r\n\u60a8\u5f53\u524d\u4ec0\u4e48\u90fd\u4e0d\u7528\u505a. \u60a8\u7684\u5de5\u5355\u5df2\u7ecf\u5206\u914d\u7f16\u53f7 {{ ticket.ticket }} \u4e14\u5c06\u5f88\u5feb\u6536\u5230\u56de\u590d.\r\n\r\n\u5982\u679c\u60a8\u60f3\u544a\u8bc9\u6211\u4eec\u66f4\u591a\u8be6\u60c5, \u6216\u8005\u8981\u67e5\u8be2\u6b64\u5de5\u5355, \u8bf7\u5728\u4e3b\u9898\u5e26\u4e0a\u5de5\u5355id '{{ ticket.ticket }}' . \u6700\u7b80\u5355\u65b9\u5f0f\u5c31\u662f\u6309\u4e0b\u6b64\u6d88\u606f \"\u56de\u590d\" .\r\n\r\n\u5982\u679c\u60a8\u5e0c\u671b\u5728\u7ebf\u67e5\u770b\u5e76\u63d0\u4f9b\u6b64\u5de5\u5355\u7684\u66f4\u591a\u4fe1\u606f, \u9644\u52a0\u6587\u4ef6\u6216\u8005\u67e5\u770b\u6700\u8fd1\u66f4\u65b0, \u60a8\u53ef\u4ee5\u8bbf\u95ee {{ ticket.ticket_url }}.\r\n\r\n\u6211\u4eec\u5c06\u8c03\u67e5\u60a8\u7684\u95ee\u9898\u5e76\u5c3d\u5feb\u89e3\u51b3. \u60a8\u5c06\u901a\u8fc7\u6b64\u90ae\u7bb1\u6536\u5230\u540e\u7eed\u66f4\u65b0\u548c\u89e3\u51b3\u65b9\u6848.\r\n", + "html": "
\u60a8\u597d,
\r\n\r\n\u6e29\u99a8\u63d0\u793a\uff1a \u6211\u4eec\u5df2\u6536\u5230\u60a8\u4e3b\u9898\u4e3a {{ ticket.title }}.
\r\n\r\n\u60a8\u5f53\u524d\u4ec0\u4e48\u90fd\u4e0d\u7528\u505a. \u60a8\u7684\u5de5\u5355 \u5df2\u7ecf \u5206\u914d\u7f16\u53f7 {{ ticket.ticket }} \u4e14\u5c06\u5f88\u5feb\u6536\u5230\u56de\u590d.
\r\n\r\n\u5982\u679c\u60a8\u60f3\u544a\u8bc9\u6211\u4eec\u66f4\u591a\u8be6\u60c5, \u6216\u8005\u8981\u67e5\u8be2\u6b64\u5de5\u5355, \u8bf7\u5728\u4e3b\u9898\u5e26\u4e0a\u5de5\u5355id {{ ticket.ticket }} . \u6700\u7b80\u5355\u5c31\u662f\u76f4\u63a5\u70b9\u8fd9\u4e2a\u6d88\u606f\u7684 \"\u56de\u590d\" \u6309\u94ae.
\r\n\r\n\u5982\u679c\u60a8\u5e0c\u671b\u5728\u7ebf\u67e5\u770b\u5e76\u63d0\u4f9b\u6b64\u5de5\u5355\u7684\u66f4\u591a\u4fe1\u606f, \u9644\u52a0\u6587\u4ef6\u6216\u8005\u67e5\u770b\u6700\u8fd1\u66f4\u65b0, \u60a8\u53ef\u4ee5\u8bbf\u95ee {{ ticket.ticket_url }}.
\r\n\r\n\u6211\u4eec\u5c06\u8c03\u67e5\u60a8\u7684\u95ee\u9898\u5e76\u5c3d\u5feb\u89e3\u51b3. \u60a8\u5c06\u901a\u8fc7\u6b64\u90ae\u7bb1\u6536\u5230\u540e\u7eed\u66f4\u65b0\u548c\u89e3\u51b3\u65b9\u6848.
", + "locale": "zh", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:33.005Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 107, + "fields": { + "template_name": "resolved_cc", + "subject": "(\u89e3\u51b3)", + "heading": "\u5de5\u5355 \u89e3\u51b3", + "plain_text": "\u60a8\u597d,\r\n\r\n\u4ee5\u4e0b\u5de5\u5355 \u5df2\u7ecf \u89e3\u51b3:\r\n\r\n\u5de5\u5355 ID: {{ ticket.ticket }}\r\n\u5f85\u529e: {{ queue.title }}\r\n\u6807\u9898: {{ ticket.title }}\r\n\u5df2\u6253\u5f00: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\n\u63d0\u4ea4\u4eba: {{ ticket.submitter_email|default:\"Unknown\" }}\r\n\u4f18\u5148\u7ea7:{{ ticket.get_priority_display }}\r\n\u72b6\u6001: {{ ticket.get_status }}\r\n\u5df2\u5206\u914d\u7ed9: {{ ticket.get_assigned_to }}\r\n\u5728\u7ebf\u67e5\u770b: {{ ticket.staff_url }} (\u9700\u8981\u767b\u5f55)\r\n\r\n\u539f\u59cb\u63cf\u8ff0\u4e3a:\r\n\r\n{{ ticket.description }}\r\n\r\n\u63d0\u4f9b\u7684\u89e3\u51b3\u65b9\u6848\u4e3a:\r\n\r\n{{ ticket.resolution }}\r\n\r\n\u6b64\u65b9\u6848\u5df2\u7ecf \u90ae\u4ef6\u53d1\u9001\u7ed9\u63d0\u4ea4\u8005, \u5728\u60a8\u5173\u95ed\u4e4b\u524d\u9700\u8981\u4ed6\u5148\u786e\u8ba4.\r\n\r\n", + "html": "\u60a8\u597d,
\r\n\r\n\u4ee5\u4e0b\u5de5\u5355 \u5df2\u7ecf \u89e3\u51b3.
\r\n\r\n\r\n\u5de5\u5355 ID: {{ ticket.ticket }}
\r\n\u5f85\u529e: {{ queue.title }}
\r\n\u6807\u9898: {{ ticket.title }}
\r\n\u5df2\u6253\u5f00: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\n\u63d0\u4ea4\u4eba: {{ ticket.submitter_email|default:\"Unknown\" }}
\r\n\u4f18\u5148\u7ea7: {{ ticket.get_priority_display }}
\r\n\u72b6\u6001: {{ ticket.get_status }}
\r\n\u5df2\u5206\u914d\u7ed9: {{ ticket.get_assigned_to }}
\r\n\u5728\u7ebf\u67e5\u770b \u66f4\u65b0\u6b64\u5de5\u5355 (\u9700\u8981\u767b\u5f55)
\u539f\u5de5\u5355\u63cf\u8ff0\u53c2\u8003\uff1a:
\r\n\r\n{{ ticket.description|linebreaksbr }}\r\n\r\n
\u589e\u52a0\u7684\u89e3\u51b3\u65b9\u6848\u4e3a:
\r\n\r\n{{ ticket.resolution }}\r\n\r\n
\u6b64\u65b9\u6848\u5df2\u7ecf \u90ae\u4ef6\u53d1\u9001\u7ed9\u63d0\u4ea4\u8005, \u5728\u60a8\u5173\u95ed\u4e4b\u524d\u9700\u8981\u4ed6\u5148\u786e\u8ba4.
", + "locale": "zh", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:33.006Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 108, + "fields": { + "template_name": "resolved_owner", + "subject": "(\u89e3\u51b3)", + "heading": "\u5de5\u5355 \u89e3\u51b3", + "plain_text": "\u60a8\u597d,\r\n\r\nA \u5f53\u524d\u5206\u914d\u7ed9\u60a8\u7684\u5de5\u5355\u5df2\u7ecf \u89e3\u51b3.\r\n\r\n\u5de5\u5355 ID: {{ ticket.ticket }}\r\n\u5f85\u529e: {{ queue.title }}\r\n\u6807\u9898: {{ ticket.title }}\r\n\u5df2\u6253\u5f00: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\n\u63d0\u4ea4\u4eba: {{ ticket.submitter_email|default:\"Unknown\" }}\r\n\u4f18\u5148\u7ea7:{{ ticket.get_priority_display }}\r\n\u72b6\u6001: {{ ticket.get_status }}\r\n\u5df2\u5206\u914d\u7ed9: {{ ticket.get_assigned_to }}\r\n\u5728\u7ebf\u67e5\u770b: {{ ticket.staff_url }} (\u9700\u8981\u767b\u5f55)\r\n\r\n\u539f\u59cb\u63cf\u8ff0\u4e3a:\r\n\r\n{{ ticket.description }}\r\n\r\n\u63d0\u4f9b\u7684\u65b9\u6848\u4e3a:\r\n\r\n{{ ticket.resolution }}\r\n\r\n\u6b64\u65b9\u6848\u5df2\u7ecf \u90ae\u4ef6\u53d1\u9001\u7ed9\u63d0\u4ea4\u8005, \u5728\u60a8\u5173\u95ed\u4e4b\u524d\u9700\u8981\u4ed6\u5148\u786e\u8ba4.\r\n\r\n", + "html": "\u60a8\u597d,
\r\n\r\nA \u5f53\u524d\u5206\u914d\u7ed9\u60a8\u7684\u5de5\u5355\u5df2\u7ecf \u89e3\u51b3.
\r\n\r\n\r\n\u5de5\u5355 ID: {{ ticket.ticket }}
\r\n\u5f85\u529e: {{ queue.title }}
\r\n\u6807\u9898: {{ ticket.title }}
\r\n\u5df2\u6253\u5f00: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\n\u63d0\u4ea4\u4eba: {{ ticket.submitter_email|default:\"Unknown\" }}
\r\n\u4f18\u5148\u7ea7: {{ ticket.get_priority_display }}
\r\n\u72b6\u6001: {{ ticket.get_status }}
\r\n\u5df2\u5206\u914d\u7ed9: {{ ticket.get_assigned_to }}
\r\n\u5728\u7ebf\u67e5\u770b \u66f4\u65b0\u6b64\u5de5\u5355 (\u9700\u8981\u767b\u5f55)
\u539f\u5de5\u5355\u63cf\u8ff0\u53c2\u8003\uff1a:
\r\n\r\n{{ ticket.description|linebreaksbr }}\r\n\r\n
\u589e\u52a0\u7684\u89e3\u51b3\u65b9\u6848\u4e3a:
\r\n\r\n{{ ticket.resolution }}\r\n\r\n
\u6b64\u65b9\u6848\u5df2\u7ecf \u90ae\u4ef6\u53d1\u9001\u7ed9\u63d0\u4ea4\u8005, \u5728\u60a8\u5173\u95ed\u4e4b\u524d\u9700\u8981\u4ed6\u5148\u786e\u8ba4.
", + "locale": "zh", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:33.008Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 109, + "fields": { + "template_name": "resolved_submitter", + "subject": "(\u89e3\u51b3)", + "heading": "\u60a8\u7684 \u5de5\u5355 \u5df2\u7ecf \u89e3\u51b3", + "plain_text": "\u60a8\u597d,\r\n\r\n\u60a8\u6700\u8fd1\u8bb0\u5f55\u4e86\u4e3b\u9898\u4e3a\"{{ ticket.title }}\"\u7684\u5de5\u5355. \u6b64\u90ae\u4ef6\u662f\u8981\u544a\u77e5\u60a8\u89e3\u51b3\u65b9\u6848.\r\n\r\n\u5de5\u5355\u6dfb\u52a0\u4e86\u4ee5\u4e0b\u89e3\u51b3\u65b9\u6848 {{ ticket.ticket }}:\r\n\r\n{{ resolution }}\r\n\r\n\u8bf7\u60a8\u786e\u8ba4\u4e0b\u6b64\u89e3\u51b3\u65b9\u6848\u662f\u5426\u89e3\u51b3\u4e86\u60a8\u7684\u95ee\u9898\uff0c \u8fd9\u6837\u6211\u4eec\u53ef\u4ee5\u5173\u95ed\u6b64\u5de5\u5355? \u5982\u679c\u6709\u66f4\u591a\u95ee\u9898\u6216\u8005\u8ba4\u4e3a\u65b9\u6848\u4e0d\u591f\u5145\u5206\uff0c, \u8bf7\u7ee7\u7eed\u4f7f\u7528\u90ae\u4ef6\u7684\u4e3b\u9898\u56de\u590d\u6b64\u90ae\u4ef6.\r\n\r\n\u5982\u679c\u60a8\u60f3\u5728\u7ebf\u67e5\u770b\uff0c \u53ef\u4ee5\u8bbf\u95ee {{ ticket.ticket_url }}\r\n\r\n", + "html": "\u60a8\u597d,
\r\n\r\n\u60a8\u6700\u8fd1\u8bb0\u5f55\u4e86\u4e3b\u9898\u4e3a{{ ticket.title }}\u7684\u5de5\u5355. \u6b64\u90ae\u4ef6\u662f\u8981\u544a\u77e5\u60a8\u89e3\u51b3\u65b9\u6848.
\r\n\r\n\u5de5\u5355\u6dfb\u52a0\u4e86\u4ee5\u4e0b\u89e3\u51b3\u65b9\u6848 {{ ticket.ticket }}:
\r\n\r\n{{ resolution }}\r\n\r\n
\u8bf7\u60a8\u786e\u8ba4\u4e0b\u6b64\u89e3\u51b3\u65b9\u6848\u662f\u5426\u89e3\u51b3\u4e86\u60a8\u7684\u95ee\u9898\uff0c \u8fd9\u6837\u6211\u4eec\u53ef\u4ee5\u5173\u95ed\u6b64\u5de5\u5355? \u5982\u679c\u6709\u66f4\u591a\u95ee\u9898\u6216\u8005\u8ba4\u4e3a\u65b9\u6848\u4e0d\u591f\u5145\u5206\uff0c, \u8bf7\u7ee7\u7eed\u4f7f\u7528\u90ae\u4ef6\u7684\u4e3b\u9898\u56de\u590d\u6b64\u90ae\u4ef6.
\r\n\r\n\u5982\u679c\u60a8\u60f3\u5728\u7ebf\u67e5\u770b\uff0c \u53ef\u4ee5\u8bbf\u95ee {{ ticket.ticket_url }}.
", + "locale": "zh", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:33.010Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 110, + "fields": { + "template_name": "updated_cc", + "subject": "(\u5df2\u66f4\u65b0)", + "heading": "\u5de5\u5355\u5df2\u66f4\u65b0", + "plain_text": "\u60a8\u597d,\r\n\r\n\u6e29\u99a8\u63d0\u793a, \u63d0\u4ea4\u8005{{ ticket.submitter_email }}\u7684\u5de5\u5355{{ ticket.ticket }} \u5df2\u7ecf\u66f4\u65b0.\r\n\r\n\u5de5\u5355 ID: {{ ticket.ticket }}\r\n\u5f85\u529e: {{ queue.title }}\r\n\u6807\u9898: {{ ticket.title }}\r\n\u5df2\u6253\u5f00: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\n\u63d0\u4ea4\u4eba: {{ ticket.submitter_email|default:\"Unknown\" }}\r\n\u4f18\u5148\u7ea7:{{ ticket.get_priority_display }}\r\n\u72b6\u6001: {{ ticket.get_status }}\r\n\u5df2\u5206\u914d\u7ed9: {{ ticket.get_assigned_to }}\r\n\u5728\u7ebf\u67e5\u770b: {{ ticket.staff_url }} (\u9700\u8981\u767b\u5f55)\r\n\r\n\u539f\u59cb\u63cf\u8ff0:\r\n\r\n{{ ticket.description }}\r\n\r\n\u5df2\u6dfb\u52a0\u4ee5\u4e0b\u8bc4\u8bba:\r\n\r\n{{ comment }}\r\n\r\n\u672c\u4fe1\u606f {% if private %}\u8fd8\u6ca1\u6709{% else %} \u5df2\u7ecf {% endif %} \u90ae\u4ef6\u53d1\u9001\u7ed9\u63d0\u4ea4\u8005.\r\n\r\n\u5982\u679c\u60a8\u60f3\u5728\u7ebf\u67e5\u770b\uff0c \u53ef\u4ee5\u8bbf\u95ee {{ ticket.staff_url }}.\r\n\r\n", + "html": "\u60a8\u597d,
\r\n\r\n\u6e29\u99a8\u63d0\u793a, {{ ticket.submitter_email }} \u7684\u5de5\u5355 {{ ticket.ticket }} (\"{{ ticket.title }}\") \u5df2\u7ecf\u66f4\u65b0.
\r\n\r\n\r\n\u5de5\u5355 ID: {{ ticket.ticket }}
\r\n\u5f85\u529e: {{ queue.title }}
\r\n\u6807\u9898: {{ ticket.title }}
\r\n\u5df2\u6253\u5f00: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\n\u63d0\u4ea4\u4eba: {{ ticket.submitter_email|default:\"Unknown\" }}
\r\n\u4f18\u5148\u7ea7: {{ ticket.get_priority_display }}
\r\n\u72b6\u6001: {{ ticket.get_status }}
\r\n\u5df2\u5206\u914d\u7ed9: {{ ticket.get_assigned_to }}
\r\n\u5728\u7ebf\u67e5\u770b \u66f4\u65b0\u6b64\u5de5\u5355 (\u9700\u8981\u767b\u5f55)
\u539f\u5de5\u5355\u63cf\u8ff0\u53c2\u8003\uff1a:
\r\n\r\n{{ ticket.description|linebreaksbr }}\r\n\r\n
\u5df2\u6dfb\u52a0\u4ee5\u4e0b\u8bc4\u8bba:
\r\n\r\n{{ comment }}\r\n\r\n
\u672c\u4fe1\u606f {% if private %} \u8fd8\u6ca1\u6709 {% else %} \u5df2\u7ecf {% endif %} \u90ae\u4ef6\u53d1\u9001\u7ed9\u63d0\u4ea4\u8005.
", + "locale": "zh", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:33.012Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 111, + "fields": { + "template_name": "updated_owner", + "subject": "(\u5df2\u66f4\u65b0)", + "heading": "\u5de5\u5355\u5df2\u66f4\u65b0", + "plain_text": "\u60a8\u597d,\r\n\r\n\u6e29\u99a8\u63d0\u793a, \u63d0\u4ea4\u8005\u5206\u914d\u7ed9{{ ticket.submitter_email }} \u60a8\u7684\u5de5\u5355 {{ ticket.ticket }} (\"{{ ticket.title }}\") , \u5df2\u7ecf\u66f4\u65b0.\r\n\r\n\u5de5\u5355 ID: {{ ticket.ticket }}\r\n\u5f85\u529e: {{ queue.title }}\r\n\u6807\u9898: {{ ticket.title }}\r\n\u5df2\u6253\u5f00: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\n\u63d0\u4ea4\u4eba: {{ ticket.submitter_email|default:\"Unknown\" }}\r\n\u4f18\u5148\u7ea7:{{ ticket.get_priority_display }}\r\n\u72b6\u6001: {{ ticket.get_status }}\r\n\u5df2\u5206\u914d\u7ed9: {{ ticket.get_assigned_to }}\r\n\u5728\u7ebf\u67e5\u770b: {{ ticket.staff_url }} (\u9700\u8981\u767b\u5f55)\r\n\r\n\u539f\u59cb\u63cf\u8ff0:\r\n\r\n{{ ticket.description }}\r\n\r\n\u6dfb\u52a0\u4e86\u4e00\u4e0b\u8bc4\u8bba:\r\n\r\n{{ comment }}\r\n\r\n\u672c\u4fe1\u606f {% if private %}\u8fd8\u6ca1\u6709 {% endif %} \u90ae\u4ef6\u53d1\u9001\u7ed9\u63d0\u4ea4\u8005.\r\n\r\n\u5982\u679c\u60a8\u60f3\u5728\u7ebf\u67e5\u770b\uff0c \u53ef\u4ee5\u8bbf\u95ee {{ ticket.staff_url }}\r\n\r\n", + "html": "\u60a8\u597d,
\r\n\r\n\u6e29\u99a8\u63d0\u793a, \u5206\u914d\u7ed9\u60a8,\u63d0\u4ea4\u8005{{ ticket.submitter_email }}\u7684\u5de5\u5355{{ ticket.ticket }}, \u5df2\u7ecf\u66f4\u65b0.
\r\n\r\n\r\n\u5de5\u5355 ID: {{ ticket.ticket }}
\r\n\u5f85\u529e: {{ queue.title }}
\r\n\u6807\u9898: {{ ticket.title }}
\r\n\u5df2\u6253\u5f00: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\n\u63d0\u4ea4\u4eba: {{ ticket.submitter_email|default:\"Unknown\" }}
\r\n\u4f18\u5148\u7ea7: {{ ticket.get_priority_display }}
\r\n\u72b6\u6001: {{ ticket.get_status }}
\r\n\u5df2\u5206\u914d\u7ed9: {{ ticket.get_assigned_to }}
\r\n\u5728\u7ebf\u67e5\u770b \u66f4\u65b0\u6b64\u5de5\u5355 (\u9700\u8981\u767b\u5f55)
\u539f\u5de5\u5355\u63cf\u8ff0\u53c2\u8003\uff1a:
\r\n\r\n{{ ticket.description|linebreaksbr }}\r\n\r\n
\u5df2\u6dfb\u52a0\u4ee5\u4e0b\u8bc4\u8bba:
\r\n\r\n{{ comment }}\r\n\r\n
\u672c\u4fe1\u606f {% if private %} \u8fd8\u672a {% else %} \u5df2\u7ecf {% endif %} been \u90ae\u4ef6\u53d1\u9001\u7ed9\u63d0\u4ea4\u8005.
", + "locale": "zh", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:33.014Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 112, + "fields": { + "template_name": "updated_submitter", + "subject": "(\u5df2\u66f4\u65b0)", + "heading": "\u60a8\u7684\u5de5\u5355\u5df2\u7ecf\u66f4\u65b0", + "plain_text": "\u60a8\u597d,\r\n\r\n\u60a8\u6700\u8fd1\u8bb0\u5f55\u4e86\u4e3b\u9898\u4e3a\"{{ ticket.title }}\"\u7684\u5de5\u5355. \u6b64\u90ae\u4ef6\u662f\u544a\u77e5\u60a8\u5de5\u5355\u7684\u66f4\u65b0.\r\n\r\n\u5de5\u5355\u6dfb\u52a0\u4e86\u4ee5\u4e0b\u8bc4\u8bba {{ ticket.ticket }}:\r\n\r\n{{ comment }}\r\n\r\n\u5982\u679c\u4f60\u9700\u8981\u63d0\u4f9b\u66f4\u591a\u4fe1\u606f, \u8bf7\u7ee7\u7eed\u4f7f\u7528\u90ae\u4ef6\u7684\u4e3b\u9898\u56de\u590d\u6b64\u90ae\u4ef6. \u6216\u8005\u60a8\u53ef\u4ee5\u5728\u7ebf\u67e5\u770b\u548c\u66f4\u65b0\u6b64\u5de5\u5355 {{ ticket.ticket_url }}\r\n\r\n", + "html": "\u60a8\u597d,
\r\n\r\n\u60a8\u6700\u8fd1\u8bb0\u5f55\u4e86\u4e3b\u9898\u4e3a{{ ticket.title }}\u7684\u5de5\u5355. \u6b64\u90ae\u4ef6\u662f\u544a\u77e5\u60a8\u5de5\u5355\u7684\u66f4\u65b0.
\r\n\r\n\u5de5\u5355\u6dfb\u52a0\u4e86\u4ee5\u4e0b\u8bc4\u8bba {{ ticket.ticket }}:
\r\n\r\n{{ comment }}\r\n\r\n
\u5982\u679c\u4f60\u9700\u8981\u63d0\u4f9b\u66f4\u591a\u4fe1\u606f, \u8bf7\u7ee7\u7eed\u4f7f\u7528\u90ae\u4ef6\u7684\u4e3b\u9898\u56de\u590d\u6b64\u90ae\u4ef6. \u6216\u8005\u60a8\u53ef\u4ee5\u5728\u7ebf\u67e5\u770b\u548c\u66f4\u65b0\u6b64\u5de5\u5355 {{ ticket.ticket_url }}.
", + "locale": "zh", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:33.016Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 113, + "fields": { + "template_name": "newticket_cc", + "subject": "(Otwarte)", + "heading": "Zarejestrowane nowe zg\u0142oszenie", + "plain_text": "Dzie\u0144 dobry,\r\n\r\nInformacja o nowo zarejestrowanym zg\u0142oszeniu.\r\n\r\nIdentyfikator zg\u0142oszenia: {{ ticket.ticket }}\r\nKolejka: {{ queue.title }}\r\nTytu\u0142: {{ ticket.title }}\r\nData Zg\u0142oszenia: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\nZg\u0142aszaj\u0105cy: {{ ticket.submitter_email|default:\"Unknown\" }}\r\nPriorytet: {{ ticket.get_priority_display }}\r\nStatus: {{ ticket.get_status }}\r\nZobacz: {{ ticket.staff_url }} (wymagana autoryzacja)\r\n\r\nOryginalny opis zg\u0142oszenia:\r\n{{ ticket.description }}\r\n\r\n\r\n", + "html": "Dzie\u0144 dobry,
\r\n\r\nInformacja o nowo zarejestrowanym zg\u0142oszeniu.
\r\n\r\n\r\nIdentyfikator: {{ ticket.ticket }}
\r\nKolejka: {{ queue.title }}
\r\nTytu\u0142: {{ ticket.title }}
\r\nData Zg\u0142oszenia: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\nZg\u0142aszaj\u0105cy: {{ ticket.submitter_email|default:\"Unknown\" }}
\r\nPriorytet: {{ ticket.get_priority_display }}
\r\nStatus: {{ ticket.get_status }}
\r\nZobacz Online aby zaktualizowa\u0107 zg\u0142oszenie (wymagana autoryzacja)
Oryginalny opis zg\u0142oszenia:
\r\n\r\n{{ ticket.description|linebreaksbr }}", + "locale": "pl", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:33.018Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 114, + "fields": { + "template_name": "newticket_submitter", + "subject": "(Otwarte)", + "heading": "Twoje zg\u0142oszenie zosta\u0142o zarejestowane", + "plain_text": "Dzie\u0144 dobry,\r\n\r\nTo jest wiadomo\u015b\u0107 e-mail z informacj\u0105, \u017ce otrzymali\u015bmy Twoje zapytanie do dzia\u0142u pomocy technicznej o temacie \"{{ ticket.title }}\". \r\n\r\nNa tym etapie nie musisz robi\u0107 nic wi\u0119cej. Twoje zg\u0142oszenie otrzyma\u0142o numer {{ ticket.ticket }} i wkr\u00f3tce otrzymasz odpowied\u017a.\r\n\r\nJe\u015bli chcesz przes\u0142a\u0107 nam dalsze szczeg\u00f3\u0142y lub masz pytania dotycz\u0105ce tego zg\u0142oszenia, podaj w temacie identyfikator zg\u0142oszenia '{{ ticket.ticket }}'. Najprostrzym sposobem na zrobienie tego jest \"odpowied\u017a\" na t\u0119 wiadomo\u015b\u0107 e-mail.\r\n\r\nJe\u015bli chcesz wy\u015bwietli\u0107 to zg\u0142oszenie online, aby poda\u0107 dalsze informacje, za\u0142\u0105czy\u0107 pliki lub wy\u015bwietli\u0107 najnowsze aktualizacje, mo\u017cesz odwiedzi\u0107 stron\u0119 {{ ticket.ticket_url }}.\r\n\r\nZbadamy Twoje zapytanie i spr\u00f3bujemy je jak najszybciej rozwi\u0105za\u0107. Otrzymasz dalsze aktualizacje i rozwi\u0105zanie za po\u015brednictwem tego adresu e-mail.\r\n\r\n\r\n", + "html": "
Dzie\u0144 dobry,
\r\n\r\nTo jest wiadomo\u015b\u0107 e-mail z informacj\u0105, \u017ce otrzymali\u015bmy Twoje zapytanie do dzia\u0142u pomocy technicznej o temacie {{ ticket.title }}.
\r\n\r\nNa tym etapie nie musisz robi\u0107 nic wi\u0119cej. Twoje zg\u0142oszenie otrzyma\u0142o numer {{ ticket.ticket }} i wkr\u00f3tce otrzymasz odpowied\u017a.
\r\n\r\ne\u015bli chcesz przes\u0142a\u0107 nam dalsze szczeg\u00f3\u0142y lub masz pytania dotycz\u0105ce tego zg\u0142oszenia, podaj w temacie identyfikator zg\u0142oszenia {{ ticket.ticket }}. Najprostrzym sposobem na zrobienie tego jest \"odpowied\u017a\" na t\u0119 wiadomo\u015b\u0107 e-mail.
\r\n\r\nJe\u015bli chcesz wy\u015bwietli\u0107 to zg\u0142oszenie online, aby poda\u0107 dalsze informacje, za\u0142\u0105czy\u0107 pliki lub wy\u015bwietli\u0107 najnowsze aktualizacje, mo\u017cesz odwiedzi\u0107 stron\u0119 {{ ticket.ticket_url }}.
\r\n\r\nZbadamy Twoje zapytanie i spr\u00f3bujemy je jak najszybciej rozwi\u0105za\u0107. Otrzymasz dalsze aktualizacje i rozwi\u0105zanie za po\u015brednictwem tego adresu e-mail.
", + "locale": "pl", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:33.020Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 115, + "fields": { + "template_name": "assigned_cc", + "subject": "(Przypisane)", + "heading": "Zg\u0142oszenie przypisane", + "plain_text": "Dzie\u0144 dobry,\r\n\r\nTo jest wiadomo\u015b\u0107 e-mail z informacj\u0105, \u017ce zg\u0142oszenie {{ ticket.ticket }} (\"{{ ticket.title }}\") na {{ ticket.submitter_email }} zosta\u0142o {% if ticket.assigned_to %}przypisane do {{ ticket.assigned_to }}{% else %}nieprzypisane{% endif %}.\r\n\r\nIdentyfikator Zg\u0142oszenia: {{ ticket.ticket }}\r\nKolejka: {{ queue.title }}\r\nTytu\u0142: {{ ticket.title }}\r\nData Zg\u0142oszenia: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\nZg\u0142aszaj\u0105cy: {{ ticket.submitter_email|default:\"Unknown\" }}\r\nPriorytet: {{ ticket.get_priority_display }}\r\nStatus: {{ ticket.get_status }}\r\nPrzypisane Do: {{ ticket.get_assigned_to }}\r\nZobacz Online: {{ ticket.staff_url }} (wymagana autoryzacja)\r\n\r\nOryginaly opis zg\u0142oszenia:\r\n\r\n{{ ticket.description }}\r\n\r\n", + "html": "Dzie\u0144 dobry,
\r\n\r\nTo jest wiadomo\u015b\u0107 e-mail z informacj\u0105, \u017ce zg\u0142oszenie {{ ticket.ticket }} ({{ ticket.title }}) na {{ ticket.submitter_email }} zosta\u0142o{% if ticket.assigned_to %} przypisane {{ ticket.assigned_to }}{% else %}nieprzypisane{% endif %}.
\r\n\r\n\r\nIdentyfikator Zg\u0142oszenia:: {{ ticket.ticket }}
\r\nKolejka: {{ queue.title }}
\r\nTytu\u0142: {{ ticket.title }}
\r\nData Zg\u0142oszenia: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\nZg\u0142aszaj\u0105cy: {{ ticket.submitter_email|default:\"Unknown\" }}
\r\nPriorytet: {{ ticket.get_priority_display }}
\r\nStatus: {{ ticket.get_status }}
\r\nPrzypisane Do: {{ ticket.get_assigned_to }}
\r\nZobacz Online aby zaktualizowa\u0107 zg\u0142oszenie (wymagana autoryzacja)
Oryginalny opis zg\u0142oszenia:
\r\n\r\n{{ ticket.description|linebreaksbr }}", + "locale": "pl", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:33.023Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 116, + "fields": { + "template_name": "assigned_owner", + "subject": "(Przypisane Do Ciebie)", + "heading": "Zg\u0142oszenie przypisane do Ciebie", + "plain_text": "Dzie\u0144 dobry,\r\n\r\nTo jest wiadomo\u015b\u0107 e-mail z informacj\u0105, \u017ce zg\u0142oszenie {{ ticket.ticket }} (\"{{ ticket.title }}\") od {{ ticket.submitter_email }} zosta\u0142o Ci przypisane.\r\n\r\nIdentyfikator Zg\u0142oszenia: {{ ticket.ticket }}\r\nKolejka: {{ queue.title }}\r\nTytu\u0142: {{ ticket.title }}\r\nData Zg\u0142oszenia: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\nZg\u0142aszaj\u0105cy: {{ ticket.submitter_email|default:\"Brak\" }}\r\nPriorytet: {{ ticket.get_priority_display }}\r\nStatus: {{ ticket.get_status }}\r\nPrzypisane Do: {{ ticket.get_assigned_to }}\r\nZobacz Online: {{ ticket.staff_url }} (wymagana autoryzacja)\r\n\r\nOryginaly opis zg\u0142oszenia:\r\n\r\n{{ ticket.description }}\r\n\r\n", + "html": "
Dzie\u0144 dobry,
\r\n\r\nTo jest wiadomo\u015b\u0107 e-mail z informacj\u0105, \u017ce zg\u0142oszenie {{ ticket.ticket }} ({{ ticket.title }}) od {{ ticket.submitter_email }} zosta\u0142o Ciprzypisane.
\r\n\r\n\r\nIdentyfikator Zg\u0142oszenia:: {{ ticket.ticket }}
\r\nKolejka: {{ queue.title }}
\r\nTytu\u0142: {{ ticket.title }}
\r\nData Zg\u0142oszenia: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\nZg\u0142aszaj\u0105cy: {{ ticket.submitter_email|default:\"Unknown\" }}
\r\nPriorytet: {{ ticket.get_priority_display }}
\r\nStatus: {{ ticket.get_status }}
\r\nPrzypisane Do: {{ ticket.get_assigned_to }}
\r\nZobacz Online aby zaktualizowa\u0107 zg\u0142oszenie (wymagana autoryzacja)
Oryginalny opis zg\u0142oszenia:
\r\n\r\n{{ ticket.description|linebreaksbr }}", + "locale": "pl", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:33.025Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 117, + "fields": { + "template_name": "updated_cc", + "subject": "(Zaktualizowane)", + "heading": "Zg\u0142oszenie zaktualizowane", + "plain_text": "Dzie\u0144 dobry,\r\n\r\nTo jest wiadomo\u015b\u0107 e-mail z informacj\u0105, \u017ce zg\u0142oszenie {{ ticket.ticket }} (\"{{ ticket.title }}\") od {{ ticket.submitter_email }} zosta\u0142o zaktualizowane.\r\n\r\nIdentyfikator Zg\u0142oszenia: {{ ticket.ticket }}\r\nKolejka: {{ queue.title }}\r\nTytu\u0142: {{ ticket.title }}\r\nData Zg\u0142oszenia: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\nZg\u0142aszaj\u0105cy: {{ ticket.submitter_email|default:\"Brak\" }}\r\nPriorytet: {{ ticket.get_priority_display }}\r\nStatus: {{ ticket.get_status }}\r\nPrzypisane Do: {{ ticket.get_assigned_to }}\r\nZobacz Online: {{ ticket.staff_url }} ( wymagana autoryzacja )\r\n\r\nOryginaly opis zg\u0142oszenia:\r\n\r\n{{ ticket.description }}\r\n\r\n\r\nNast\u0119puj\u0105cy komentarz zosta\u0142 dodany:\r\n\r\n{{ comment }}\r\n\r\nTa informacja zosta\u0142a {% if private %}nie zosta\u0142a {% endif %} wys\u0142ana do zg\u0142aszaj\u0105cego.\r\n\r\nJe\u015bli chcesz zobaczy\u0107 to zg\u0142oszenie online, mo\u017cesz dokona\u0107 tego pod adresem {{ ticket.staff_url }}\r\n\r\n\r\n", + "html": "
Dzie\u0144 dobry,
\r\n\r\nTo jest wiadomo\u015b\u0107 e-mail z informacj\u0105, \u017ce zg\u0142oszenie {{ ticket.ticket }} (\"{{ ticket.title }}\") od {{ ticket.submitter_email }} zosta\u0142o zaktualizowane.
\r\n\r\n\r\nIdentyfikator Zg\u0142oszenia:: {{ ticket.ticket }}
\r\nKolejka: {{ queue.title }}
\r\nTytu\u0142: {{ ticket.title }}
\r\nData Zg\u0142oszenia: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\nZg\u0142aszaj\u0105cy: {{ ticket.submitter_email|default:\"Unknown\" }}
\r\nPriorytet: {{ ticket.get_priority_display }}
\r\nStatus: {{ ticket.get_status }}
\r\nPrzypisane Do: {{ ticket.get_assigned_to }}
\r\nZobacz Online aby zaktualizowa\u0107 zg\u0142oszenie (wymagana autoryzacja)
Oryginalny opis zg\u0142oszenia:
\r\n\r\n{{ ticket.description|linebreaksbr }}\r\n\r\n
Ta informacja zosta\u0142a {% if private %}nie zosta\u0142a {% endif %} wys\u0142ana do zg\u0142aszaj\u0105cego.
", + "locale": "pl", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:33.027Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 118, + "fields": { + "template_name": "updated_owner", + "subject": "(Zaktualizowane)", + "heading": "Zg\u0142oszenie zaktualizowane", + "plain_text": "Dzie\u0144 dobry,\r\n\r\nTo jest wiadomo\u015b\u0107 e-mail z informacj\u0105, \u017ce zg\u0142oszenie {{ ticket.ticket }} (\"{{ ticket.title }}\") od {{ ticket.submitter_email }}, kt\u00f3re zosta\u0142o Ci przydzielone, zosta\u0142o zaktualizowane.\r\n\r\nIdentyfikator Zg\u0142oszenia: {{ ticket.ticket }}\r\nKolejka: {{ queue.title }}\r\nTytu\u0142: {{ ticket.title }}\r\nData Zg\u0142oszenia: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\nZg\u0142aszaj\u0105cy: {{ ticket.submitter_email|default:\"Brak\" }}\r\nPriorytet: {{ ticket.get_priority_display }}\r\nStatus: {{ ticket.get_status }}\r\nPrzypisane Do: {{ ticket.get_assigned_to }}\r\nZobacz Online: {{ ticket.staff_url }} ( wymagana autoryzacja )\r\n\r\nOryginaly opis zg\u0142oszenia:\r\n\r\n{{ ticket.description }}\r\n\r\n\r\nNast\u0119puj\u0105cy komentarz zosta\u0142 dodany:\r\n\r\n{{ comment }}\r\n\r\nTa informacja zosta\u0142a {% if private %}nie zosta\u0142a {% endif %} wys\u0142ana do zg\u0142aszaj\u0105cego.\r\n\r\nJe\u015bli chcesz zobaczy\u0107 to zg\u0142oszenie online, mo\u017cesz dokona\u0107 tego pod adresem {{ ticket.staff_url }}\r\n\r\n\r\n", + "html": "Dzie\u0144 dobry,
\r\n\r\nTo jest wiadomo\u015b\u0107 e-mail z informacj\u0105, \u017ce zg\u0142oszenie {{ ticket.ticket }} (\"{{ ticket.title }}\") od {{ ticket.submitter_email }}, kt\u00f3re zosta\u0142o Ci przydzielone, zosta\u0142o zaktualizowane.
\r\n\r\n\r\nIdentyfikator Zg\u0142oszenia:: {{ ticket.ticket }}
\r\nKolejka: {{ queue.title }}
\r\nTytu\u0142: {{ ticket.title }}
\r\nData Zg\u0142oszenia: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\nZg\u0142aszaj\u0105cy: {{ ticket.submitter_email|default:\"Unknown\" }}
\r\nPriorytet: {{ ticket.get_priority_display }}
\r\nStatus: {{ ticket.get_status }}
\r\nPrzypisane Do: {{ ticket.get_assigned_to }}
\r\nZobacz Online aby zaktualizowa\u0107 zg\u0142oszenie (wymagana autoryzacja)
Oryginalny opis zg\u0142oszenia:
\r\n\r\n{{ ticket.description|linebreaksbr }}\r\n\r\n
Ta informacja zosta\u0142a {% if private %}nie zosta\u0142a {% endif %} wys\u0142ana do zg\u0142aszaj\u0105cego.
", + "locale": "pl", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:33.029Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 119, + "fields": { + "template_name": "updated_submitter", + "subject": "(Zaktualizowane)", + "heading": "Twoje zg\u0142oszenie zosta\u0142o zaktualizowane", + "plain_text": "Dzie\u0144 dobry,\r\n\r\nOstatnio zarejestrowa\u0142e\u015b u nas zg\u0142oszenie \"{{ ticket.title }}\". Ninejszy e-mail jest informacj\u0105 o aktualizacji tego zg\u0142oszenia.\r\n\r\nNast\u0119puj\u0105cy komentarz zosta\u0142 dodany do zg\u0142oszenia {{ ticket.ticket }}:\r\n\r\n{{ comment }}\r\n\r\nJe\u015bli chcesz przekaza\u0107 nam dodatkowe informacje, odpowiedz na tego e-maila zachowuj\u0105c tytu\u0142 tej wiadomo\u015bci w nienaruszonym stanie.\r\nOpcjonalnie, mo\u017cesz r\u00f3wnie\u017c wy\u015bwietli\u0107 i zaktualizowa\u0107 to zg\u0142oszenie online, odwiedzaj\u0105c stron\u0119 {{ ticket.ticket_url }}\r\n\r\n\r\n", + "html": "Dzie\u0144 dobry,
\r\n\r\nOstatnio zarejestrowa\u0142e\u015b u nas zg\u0142oszenie {{ ticket.title }}. Ninejszy e-mail jest informacj\u0105 o aktualizacji tego zg\u0142oszenia.
\r\n\r\nNast\u0119puj\u0105cy komentarz zosta\u0142 dodany do zg\u0142oszenia {{ ticket.ticket }}:
\r\n\r\n{{ comment }}\r\n\r\n
Je\u015bli chcesz przekaza\u0107 nam dodatkowe informacje, odpowiedz na tego e-maila zachowuj\u0105c tytu\u0142 tej wiadomo\u015bci w nienaruszonym stanie. Opcjonalnie, mo\u017cesz r\u00f3wnie\u017c wy\u015bwietli\u0107 i zaktualizowa\u0107 to zg\u0142oszenie online, odwiedzaj\u0105c stron\u0119 {{ ticket.ticket_url }}.
", + "locale": "pl", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:33.031Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 120, + "fields": { + "template_name": "resolved_cc", + "subject": "(Rozwi\u0105zane)", + "heading": "Zg\u0142oszenie rozwi\u0105zane", + "plain_text": "Dzie\u0144 dobry,\r\n\r\nTw\u00f3j problem zosta\u0142 rozwi\u0105zany:\r\n\r\nIdentyfikator Zg\u0142oszenia: {{ ticket.ticket }}\r\nKolejka: {{ queue.title }}\r\nTytu\u0142: {{ ticket.title }}\r\nData Zg\u0142oszenia: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\nZg\u0142aszaj\u0105cy: {{ ticket.submitter_email|default:\"Brak\" }}\r\nPriorytet: {{ ticket.get_priority_display }}\r\nStatus: {{ ticket.get_status }}\r\nPrzypisane Do: {{ ticket.get_assigned_to }}\r\nZobacz Online: {{ ticket.staff_url }} ( wymagana autoryzacja )\r\n\r\nOryginaly opis zg\u0142oszenia:\r\n\r\n{{ ticket.description }}\r\n\r\nRozwi\u0105zanie problemu:\r\n\r\n{{ ticket.resolution }}\r\n\r\nRozwi\u0105zanie problemu zosta\u0142o przes\u0142ane do osoby zg\u0142aszaj\u0105cej problem, kt\u00f3ra zweryfikuje zaproponowane rozwi\u0105zanie, zanim b\u0119dzie mo\u017cna zamkn\u0105\u0107 zg\u0142oszenie.\r\n\r\n\r\n", + "html": "Dzie\u0144 dobry,
\r\n\r\nTw\u00f3j problem zosta\u0142 rozwi\u0105zany.
\r\n\r\n\r\nIdentyfikator Zg\u0142oszenia:: {{ ticket.ticket }}
\r\nKolejka: {{ queue.title }}
\r\nTytu\u0142: {{ ticket.title }}
\r\nData Zg\u0142oszenia: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\nZg\u0142aszaj\u0105cy: {{ ticket.submitter_email|default:\"Unknown\" }}
\r\nPriorytet: {{ ticket.get_priority_display }}
\r\nStatus: {{ ticket.get_status }}
\r\nPrzypisane Do: {{ ticket.get_assigned_to }}
\r\nZobacz Online aby zaktualizowa\u0107 zg\u0142oszenie (wymagana autoryzacja)
Oryginalny opis zg\u0142oszenia:
\r\n\r\n{{ ticket.description|linebreaksbr }}\r\n\r\n
Rozwi\u0105zanie problemu:
\r\n\r\n{{ ticket.resolution }}\r\n\r\n
Rozwi\u0105zanie problemu zosta\u0142o przes\u0142ane do osoby zg\u0142aszaj\u0105cej problem, kt\u00f3ra zweryfikuje zaproponowane rozwi\u0105zanie, zanim b\u0119dzie mo\u017cna zamkn\u0105\u0107 zg\u0142oszenie.
", + "locale": "pl", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:33.033Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 121, + "fields": { + "template_name": "resolved_owner", + "subject": "(Rozwi\u0105zane)", + "heading": "Zg\u0142oszenie rozwi\u0105zane", + "plain_text": "Dzie\u0144 dobry,\r\n\r\nZg\u0142oszenie przypisane do Ciebie zosta\u0142o rozwi\u0105zane.\r\n\r\nIdentyfikator Zg\u0142oszenia: {{ ticket.ticket }}\r\nKolejka: {{ queue.title }}\r\nTytu\u0142: {{ ticket.title }}\r\nData Zg\u0142oszenia: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\nZg\u0142aszaj\u0105cy: {{ ticket.submitter_email|default:\"Brak\" }}\r\nPriorytet: {{ ticket.get_priority_display }}\r\nStatus: {{ ticket.get_status }}\r\nPrzypisane Do: {{ ticket.get_assigned_to }}\r\nZobacz Online: {{ ticket.staff_url }} ( wymagana autoryzacja )\r\n\r\nOryginaly opis zg\u0142oszenia:\r\n\r\n{{ ticket.description }}\r\n\r\nRozwi\u0105zanie problemu:\r\n\r\n{{ ticket.resolution }}\r\n\r\nRozwi\u0105zanie problemu zosta\u0142o przes\u0142ane do osoby zg\u0142aszaj\u0105cej problem, kt\u00f3ra zweryfikuje zaproponowane rozwi\u0105zanie, zanim b\u0119dzie mo\u017cna zamkn\u0105\u0107 zg\u0142oszenie.\r\n\r\n\r\n", + "html": "Dzie\u0144 dobry,
\r\n\r\nZg\u0142oszenie przypisane do Ciebie zosta\u0142o rozwi\u0105zane.
\r\n\r\n\r\nIdentyfikator Zg\u0142oszenia:: {{ ticket.ticket }}
\r\nKolejka: {{ queue.title }}
\r\nTytu\u0142: {{ ticket.title }}
\r\nData Zg\u0142oszenia: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\nZg\u0142aszaj\u0105cy: {{ ticket.submitter_email|default:\"Unknown\" }}
\r\nPriorytet: {{ ticket.get_priority_display }}
\r\nStatus: {{ ticket.get_status }}
\r\nPrzypisane Do: {{ ticket.get_assigned_to }}
\r\nZobacz Online aby zaktualizowa\u0107 zg\u0142oszenie (wymagana autoryzacja)
Oryginalny opis zg\u0142oszenia:
\r\n\r\n{{ ticket.description|linebreaksbr }}\r\n\r\n
Rozwi\u0105zanie problemu:
\r\n\r\n{{ ticket.resolution }}\r\n\r\n
Rozwi\u0105zanie problemu zosta\u0142o przes\u0142ane do osoby zg\u0142aszaj\u0105cej problem, kt\u00f3ra zweryfikuje zaproponowane rozwi\u0105zanie, zanim b\u0119dzie mo\u017cna zamkn\u0105\u0107 zg\u0142oszenie.
", + "locale": "pl", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:33.035Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 122, + "fields": { + "template_name": "resolved_submitter", + "subject": "(Rozwi\u0105zane)", + "heading": "Twoje zg\u0142oszenie zosta\u0142o rozwi\u0105zane", + "plain_text": "Dzie\u0144 dobry, \r\n\r\nOstatnio zarejestrowa\u0142e\u015b u nas zg\u0142oszenie \"{{ ticket.title }}\". Ninejszy e-mail jest informacj\u0105 dla Ciebie, i\u017c uda\u0142o nam si\u0119 rozwi\u0105za\u0107 tw\u00f3j problem.\r\n\r\nNast\u0119puj\u0105ce rozwi\u0105zanie zosta\u0142o zaproponowane dla zg\u0142oszenia {{ ticket.ticket }}:\r\n\r\n{{ resolution }}\r\n\r\nCzy mo\u017cesz potwierdzi\u0107, \u017ce to rozwi\u0105zane spe\u0142nia twoje potrzeby, aby\u015bmy mogli zamkn\u0105\u0107 to zg\u0142oszenie ? Je\u015bli masz dalsze pytania lub uwa\u017casz, \u017ce to rozwi\u0105zane jest satysfakcjonuj\u0105ce, odpowiedz na tego e-maila zachowuj\u0105c tytu\u0142 e-maila w nienaruszonym stanie.\r\n\r\nJe\u015bli chcesz zobaczy\u0107 Twoje zg\u0142oszenie online, prosz\u0119 wejd\u017a na stron\u0119 {{ ticket.ticket_url }}", + "html": "Dzie\u0144 dobry,
\r\n\r\nOstatnio zarejestrowa\u0142e\u015b u nas zg\u0142oszenie {{ ticket.title }} Ninejszy e-mail jest informacj\u0105 dla Ciebie, i\u017c uda\u0142o nam si\u0119 rozwi\u0105za\u0107 tw\u00f3j problem.
\r\n\r\nNast\u0119puj\u0105ce rozwi\u0105zanie zosta\u0142o zaproponowane dla zg\u0142oszenia {{ ticket.ticket }}:
\r\n\r\n{{ resolution }}\r\n\r\n
Czy mo\u017cesz potwierdzi\u0107, \u017ce to rozwi\u0105zane spe\u0142nia twoje potrzeby, aby\u015bmy mogli zamkn\u0105\u0107 to zg\u0142oszenie ? Je\u015bli masz dalsze pytania lub uwa\u017casz, \u017ce to rozwi\u0105zane jest satysfakcjonuj\u0105ce, odpowiedz na tego e-maila zachowuj\u0105c tytu\u0142 e-maila w nienaruszonym stanie.
\r\n\r\nJe\u015bli chcesz zobaczy\u0107 Twoje zg\u0142oszenie online, prosz\u0119 wejd\u017a na stron\u0119 {{ ticket.ticket_url }}.
", + "locale": "pl", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:33.037Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 123, + "fields": { + "template_name": "closed_cc", + "subject": "(Zamkni\u0119te)", + "heading": "Zg\u0142oszenie zamkni\u0119te", + "plain_text": "Dzie\u0144 dobry,\r\n\r\nzg\u0142oszenie {{ ticket.title }} (\"{{ ticket.title }}\"){% if ticket.assigned_to %}, przypisane do {{ ticket.assigned_to }}{% endif %} zosta\u0142o zamkni\u0119te.\r\n\r\nIdentyfikator Zg\u0142oszenia: {{ ticket.ticket }}\r\nKolejka: {{ queue.title }}\r\nTytu\u0142: {{ ticket.title }}\r\nData Zg\u0142oszenia: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\nZg\u0142aszaj\u0105cy: {{ ticket.submitter_email|default:\"Brak\" }}\r\nPriorytet: {{ ticket.get_priority_display }}\r\nStatus: {{ ticket.get_status }}\r\nPrzypisane Do: {{ ticket.get_assigned_to }}\r\nZobacz Online: {{ ticket.staff_url }} ( wymagana autoryzacja )\r\n\r\nOryginaly opis zg\u0142oszenia:\r\n\r\n{{ ticket.description }}\r\n\r\nRozwi\u0105zanie problemu:\r\n\r\n{{ resolution }}\r\n\r\n\r\n", + "html": "Dzie\u0144 dobry,
\r\n\r\nZg\u0142oszenie {{ ticket.title }} ('{{ ticket.title }}'){% if ticket.assigned_to %}, przypisane {{ ticket.get_assigned_to }}{% endif %} zosta\u0142o zamkni\u0119te.
\r\n\r\n\r\nIdentyfikator Zg\u0142oszenia:: {{ ticket.ticket }}
\r\nKolejka: {{ queue.title }}
\r\nTytu\u0142: {{ ticket.title }}
\r\nData Zg\u0142oszenia: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\nZg\u0142aszaj\u0105cy: {{ ticket.submitter_email|default:\"Unknown\" }}
\r\nPriorytet: {{ ticket.get_priority_display }}
\r\nStatus: {{ ticket.get_status }}
\r\nPrzypisane Do: {{ ticket.get_assigned_to }}
\r\nZobacz Online aby zaktualizowa\u0107 zg\u0142oszenie (wymagana autoryzacja)
Oryginalny opis zg\u0142oszenia:
\r\n\r\n{{ ticket.description|linebreaksbr }}\r\n\r\n
Rozwi\u0105zanie problemu:
\r\n\r\n{{ resolution }}\r\n\r\n
Je\u015bli chcesz zobaczy\u0107 Twoje zg\u0142oszenie online, prosz\u0119 wejd\u017a na stron\u0119 {{ ticket.ticket_url }}.
", + "locale": "pl", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:33.039Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 124, + "fields": { + "template_name": "closed_owner", + "subject": "(Zamkni\u0119te)", + "heading": "Zg\u0142oszenie zamkni\u0119te", + "plain_text": "Dzie\u0144 dobry,\r\n\r\nZg\u0142oszenie przypisane do Ciebie zosta\u0142o zamkni\u0119te.\r\n\r\nIdentyfikator Zg\u0142oszenia: {{ ticket.ticket }}\r\nKolejka: {{ queue.title }}\r\nTytu\u0142: {{ ticket.title }}\r\nData Zg\u0142oszenia: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\nZg\u0142aszaj\u0105cy: {{ ticket.submitter_email|default:\"Brak\" }}\r\nPriorytet: {{ ticket.get_priority_display }}\r\nStatus: {{ ticket.get_status }}\r\nPrzypisane Do: {{ ticket.get_assigned_to }}\r\nZobacz Online: {{ ticket.staff_url }} ( wymagana autoryzacja )\r\n\r\nJe\u015bli chcesz zobaczy\u0107 zg\u0142oszenie online, odwied\u017a stron\u0119 {{ ticket.staff_url }}\r\n\r\n\r\n", + "html": "Dzie\u0144 dobry,
\r\n\r\nZg\u0142oszenie przypisane do Ciebie zosta\u0142o zamkni\u0119te.
\r\n\r\n\r\nIdentyfikator Zg\u0142oszenia:: {{ ticket.ticket }}
\r\nKolejka: {{ queue.title }}
\r\nTytu\u0142: {{ ticket.title }}
\r\nData Zg\u0142oszenia: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\nZg\u0142aszaj\u0105cy: {{ ticket.submitter_email|default:\"Unknown\" }}
\r\nPriorytet: {{ ticket.get_priority_display }}
\r\nStatus: {{ ticket.get_status }}
\r\nPrzypisane Do: {{ ticket.get_assigned_to }}
\r\nZobacz Online aby zaktualizowa\u0107 zg\u0142oszenie (wymagana autoryzacja)
Oryginalny opis zg\u0142oszenia:
\r\n\r\n{{ ticket.description|linebreaksbr }}\r\n\r\n
Rozwi\u0105zanie problemu:
\r\n\r\n{{ ticket.resolution }}", + "locale": "pl", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:33.041Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 125, + "fields": { + "template_name": "closed_submitter", + "subject": "(Zamkni\u0119te)", + "heading": "Zg\u0142oszenie zamkni\u0119te", + "plain_text": "Dzie\u0144 dobry,\r\n\r\nOstatnio zarejestrowa\u0142e\u015b u nas zg\u0142oszenie \"{{ ticket.title }}\". Ninejszy e-mail jest informacj\u0105 dla Ciebie, i\u017c zg\u0142oszenie zosta\u0142o zamkni\u0119te.\r\n\r\nJe\u015bli uwa\u017casz, \u017ce dla tego zg\u0142oszenia w dalszym ci\u0105gu wymagana jest dalsza praca, daj nam zna\u0107. Po prostu odpowiedz na ten e-mail zachowuj\u0105c tytu\u0142 wiadomo\u015bci w nienaruszonym stanie.\r\n\r\nJe\u015bli chcesz zobaczy\u0107 Twoje zg\u0142oszenie online, prosz\u0119 wejd\u017a na stron\u0119 {{ ticket.ticket_url }}.\r\n\r\nRozwi\u0105zanie problemu:\r\n\r\n{{ ticket.resolution }}\r\n\r\n\r\n", + "html": "
Dzie\u0144 dobry,
\r\n\r\nOstatnio zarejestrowa\u0142e\u015b u nas zg\u0142oszenie {{ ticket.title }}. Ninejszy e-mail jest informacj\u0105 dla Ciebie, i\u017c zg\u0142oszenie zosta\u0142o zamkni\u0119te.
\r\n\r\nRozwi\u0105zanie problemu::
\r\n\r\n{{ ticket.resolution }}\r\n\r\n
Je\u015bli chcesz zobaczy\u0107 Twoje zg\u0142oszenie online, prosz\u0119 wejd\u017a na stron\u0119 {{ ticket.ticket_url }}. Je\u015bli uwa\u017casz, \u017ce dla tego zg\u0142oszenia w dalszym ci\u0105gu wymagana jest dalsza praca, daj nam zna\u0107. Po prostu odpowiedz na ten e-mail zachowuj\u0105c tytu\u0142 wiadomo\u015bci w nienaruszonym stanie.
", + "locale": "pl", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:33.042Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 126, + "fields": { + "template_name": "escalated_cc", + "subject": "(Eskalacja)", + "heading": "Zmieniono priorytet zg\u0142oszenia", + "plain_text": "Dzie\u0144 dobry,\r\n\r\nTo jest wiadomo\u015b\u0107 e-mail z informacj\u0105, \u017ce dla zg\u0142oszenia {{ ticket.ticket }} (\"{{ ticket.title }}\") zosta\u0142 zmieniony priorytet automatycznie.\r\n\r\nIdentyfikator Zg\u0142oszenia: {{ ticket.ticket }}\r\nKolejka: {{ queue.title }}\r\nTytu\u0142: {{ ticket.title }}\r\nData Zg\u0142oszenia: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\nZg\u0142aszaj\u0105cy: {{ ticket.submitter_email|default:\"Brak\" }}\r\nPriorytet: {{ ticket.get_priority_display }}\r\nStatus: {{ ticket.get_status }}\r\nPrzypisane Do: {{ ticket.get_assigned_to }}\r\nZobacz Online: {{ ticket.staff_url }} ( wymagana autoryzacja )\r\n\r\nOryginaly opis zg\u0142oszenia:\r\n\r\n{{ ticket.description }}\r\n\r\n\r\n", + "html": "Dzie\u0144 dobry,
\r\n\r\nTo jest wiadomo\u015b\u0107 e-mail z informacj\u0105, \u017ce dla zg\u0142oszenia {{ ticket.ticket }} ('{{ ticket.title }}') zosta\u0142 zmieniony priorytet automatycznie.
\r\n\r\n\r\nIdentyfikator Zg\u0142oszenia:: {{ ticket.ticket }}
\r\nKolejka: {{ queue.title }}
\r\nTytu\u0142: {{ ticket.title }}
\r\nData Zg\u0142oszenia: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\nZg\u0142aszaj\u0105cy: {{ ticket.submitter_email|default:\"Unknown\" }}
\r\nPriorytet: {{ ticket.get_priority_display }}
\r\nStatus: {{ ticket.get_status }}
\r\nPrzypisane Do: {{ ticket.get_assigned_to }}
\r\nZobacz Online aby zaktualizowa\u0107 zg\u0142oszenie (wymagana autoryzacja)
Oryginalny opis zg\u0142oszenia:
\r\n\r\n{{ ticket.description|linebreaksbr }}", + "locale": "pl", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:33.044Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 127, + "fields": { + "template_name": "escalated_owner", + "subject": "(Eskalacja)", + "heading": "Zmienionio priorytet przydzielonego do Ciebie zg\u0142oszenia", + "plain_text": "Dzie\u0144 dobry,\r\n\r\nDla zg\u0142oszenia, kt\u00f3re zosta\u0142o Tobie przypisane, zosta\u0142 autmoatycznie zmieniony jego priorytet, poniewa\u017c by\u0142o otwarte d\u0142u\u017cej ni\u017c oczekiwano.\r\n\r\nIdentyfikator Zg\u0142oszenia: {{ ticket.ticket }}\r\nKolejka: {{ queue.title }}\r\nTytu\u0142: {{ ticket.title }}\r\nData Zg\u0142oszenia: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\nZg\u0142aszaj\u0105cy: {{ ticket.submitter_email|default:\"Brak\" }}\r\nPriorytet: {{ ticket.get_priority_display }}\r\nStatus: {{ ticket.get_status }}\r\nPrzypisane Do: {{ ticket.get_assigned_to }}\r\nZobacz Online: {{ ticket.staff_url }} ( wymagana autoryzacja )\r\n\r\nOryginaly opis zg\u0142oszenia:\r\n\r\n{{ ticket.description }}\r\n\r\nPrzejrzyj to zg\u0142oszenie i postaraj si\u0119 jak najszybciej rozwi\u0105za\u0107 problem.\r\n\r\n\r\n", + "html": "
Dzie\u0144 dobry,
\r\n\r\nDla zg\u0142oszenia, kt\u00f3re zosta\u0142o Tobie przypisane, zosta\u0142 autmoatycznie zmieniony jego priorytet, poniewa\u017c by\u0142o otwarte d\u0142u\u017cej ni\u017c oczekiwano.
\r\n\r\n\r\nIdentyfikator Zg\u0142oszenia:: {{ ticket.ticket }}
\r\nKolejka: {{ queue.title }}
\r\nTytu\u0142: {{ ticket.title }}
\r\nData Zg\u0142oszenia: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\nZg\u0142aszaj\u0105cy: {{ ticket.submitter_email|default:\"Unknown\" }}
\r\nPriorytet: {{ ticket.get_priority_display }}
\r\nStatus: {{ ticket.get_status }}
\r\nPrzypisane Do: {{ ticket.get_assigned_to }}
\r\nZobacz Online aby zaktualizowa\u0107 zg\u0142oszenie (wymagana autoryzacja)
Oryginalny opis zg\u0142oszenia:
\r\n\r\n{{ ticket.description|linebreaksbr }}", + "locale": "pl", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:33.046Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 128, + "fields": { + "template_name": "escalated_submitter", + "subject": "(Eskalacja)", + "heading": "Zmieniono priorytet Twojego zg\u0142oszenia", + "plain_text": "Dzie\u0144 dobry,\r\n\r\nOstatnio zarejestrowa\u0142e\u015b u nas zg\u0142oszenie \"{{ ticket.title }}\". Ten e-mail ma na celu poinformowanie Ci\u0119 o automatycznej zmianie priorytetu dla Twojego zg\u0142oszenia, poniewa\u017c by\u0142 on otwarty d\u0142u\u017cej ni\u017c oczekiwano.\r\n\r\n\r\nNied\u0142ugo przejrzymy Twoje zg\u0142oszenie i postaramy si\u0119 jak najszybciej rozwi\u0105za\u0107 problem.\r\n\r\nJe\u015bli chcesz zobaczy\u0107 Twoje zg\u0142oszenie online, prosz\u0119 wejd\u017a na stron\u0119 {{ ticket.ticket_url }}.\r\n\r\n\r\n\r\n\r\n", + "html": "
Dzie\u0144 dobry,
\r\n\r\nOstatnio zarejestrowa\u0142e\u015b u nas zg\u0142oszenie {{ ticket.title }}. Ten e-mail ma na celu poinformowanie Ci\u0119 o automatycznej zmianie priorytetu dla Twojego zg\u0142oszenia, poniewa\u017c by\u0142 on otwarty d\u0142u\u017cej ni\u017c oczekiwano.
\r\n\r\nNied\u0142ugo przejrzymy Twoje zg\u0142oszenie i postaramy si\u0119 jak najszybciej rozwi\u0105za\u0107 problem.
\r\n\r\nJe\u015bli chcesz zobaczy\u0107 Twoje zg\u0142oszenie online, prosz\u0119 wejd\u017a na stron\u0119 {{ ticket.ticket_url }}.
", + "locale": "pl", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:33.048Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 129, + "fields": { + "template_name": "assigned_cc", + "subject": "(P\u0159i\u0159azeno)", + "heading": "Ticket p\u0159i\u0159azen", + "plain_text": "Dobr\u00fd den,\r\n\r\nt\u00edmto automaticky generovan\u00fdm e-mailem V\u00e1m d\u00e1v\u00e1me na v\u011bdom\u00ed, \u017ee ticket {{ ticket.ticket }} (\"{{ ticket.title }}\") od {{ ticket.submitter_email }} {% if ticket.assigned_to %}byl p\u0159i\u0159azen {{ ticket.assigned_to }}{% else %}a nebyl nikomu p\u0159i\u0159azen{% endif %}.\r\n\r\nTicket ID: {{ ticket.ticket }}\r\nFronta: {{ queue.title }}\r\nNadpis: {{ ticket.title }}\r\nOtev\u0159eno: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\nZadavatel: {{ ticket.submitter_email|default:\"Nezn\u00e1m\u00fd\" }}\r\nPriorita: {{ ticket.get_priority_display }}\r\nStav: {{ ticket.get_status }}\r\nP\u0159i\u0159azeno: {{ ticket.get_assigned_to }}\r\nProhl\u00e9dnout on-line: {{ ticket.staff_url }}\r\n\r\nP\u016fvodn\u00ed zad\u00e1n\u00ed ticketu je:\r\n\r\n{{ ticket.description }}", + "html": "Dobr\u00fd den,
\r\n\r\nt\u00edmto automaticky generovan\u00fdm e-mailem V\u00e1m d\u00e1v\u00e1me na v\u011bdom\u00ed, \u017ee ticket {{ ticket.ticket }} ({{ ticket.title }}) od {{ ticket.submitter_email }} {% if ticket.assigned_to %}byl p\u0159i\u0159azen {{ ticket.assigned_to }}{% else %}nebyl nikomu p\u0159i\u0159azen{% endif %}.
\r\n\r\n\r\nTicket ID: {{ ticket.ticket }}
\r\nFronta: {{ queue.title }}
\r\nNadpis: {{ ticket.title }}
\r\nOtev\u0159eno: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\nZadavatel: {{ ticket.submitter_email|default:\"Unknown\" }}
\r\nPriorita: {{ ticket.get_priority_display }}
\r\nStav: {{ ticket.get_status }}
\r\nP\u0159i\u0159azeno: {{ ticket.get_assigned_to }}
\r\nProhl\u00e9dnout Online pro aktualizaci (je pot\u0159eba se p\u0159ihl\u00e1sit)
P\u016fvodn\u00ed zad\u00e1n\u00ed ticketu:
\r\n\r\n{{ ticket.description|linebreaksbr }}", + "locale": "cs", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:33.049Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 130, + "fields": { + "template_name": "assigned_owner", + "subject": "(Ticket V\u00e1m byl p\u0159i\u0159azen)", + "heading": "Ticket V\u00e1m byl p\u0159i\u0159azen", + "plain_text": "Dobr\u00fd den,\r\n\r\nt\u00edmto automaticky generovan\u00fdm e-mailem V\u00e1m d\u00e1v\u00e1me na v\u011bdom\u00ed, \u017ee ticket {{ ticket.ticket }} (\"{{ ticket.title }}\") od {{ ticket.submitter_email }} V\u00e1m byl p\u0159i\u0159azen.\r\n\r\nTicket ID: {{ ticket.ticket }}\r\nFronta: {{ queue.title }}\r\nNadpis: {{ ticket.title }}\r\nOtev\u0159eno: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\nZadavatel: {{ ticket.submitter_email|default:\"Nezn\u00e1m\u00fd\" }}\r\nPriorita: {{ ticket.get_priority_display }}\r\nStav: {{ ticket.get_status }}\r\nP\u0159i\u0159zeno: V\u00c1M\r\nProhl\u00e9dnout online: {{ ticket.staff_url }}\r\n\r\nP\u016fvodn\u00ed popis ticketu byl:\r\n\r\n{{ ticket.description }}", + "html": "
Hello,
\r\n\r\nt\u00edmto automaticky generovan\u00fdm e-mailem V\u00e1m d\u00e1v\u00e1me na v\u011bdom\u00ed, \u017ee ticket {{ ticket.ticket }} ({{ ticket.title }}) od {{ ticket.submitter_email }} V\u00e1m byl p\u0159i\u0159azen.
\r\n\r\n\r\nTicket ID: {{ ticket.ticket }}
\r\nFronta: {{ queue.title }}
\r\nNadpis: {{ ticket.title }}
\r\nOtev\u0159eno: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\nZadavatel: {{ ticket.submitter_email|default:\"Nezn\u00e1m\u00fd\" }}
\r\nPriorita: {{ ticket.get_priority_display }}
\r\nStav: {{ ticket.get_status }}
\r\nP\u0159i\u0159azeno: V\u00c1M
\r\nProhl\u00e9dnout online pro aktualizaci (nutn\u00e9 p\u0159ihl\u00e1\u0161en\u00ed)
P\u016fvodn\u00ed popis ticketu byl:
\r\n\r\n{{ ticket.description|linebreaksbr }}", + "locale": "cs", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:33.053Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 131, + "fields": { + "template_name": "closed_cc", + "subject": "(Uzav\u0159eno)", + "heading": "Ticket Closed", + "plain_text": "Dobr\u00fd den,\r\n\r\nTicket {{ ticket.title }} (\"{{ ticket.title }}\"){% if ticket.assigned_to %}, p\u0159i\u0159azen\u00fd {{ ticket.assigned_to }}{% endif %} byl uzav\u0159en.\r\n\r\nTicket ID: {{ ticket.ticket }}\r\nFronta: {{ queue.title }}\r\nNadpis: {{ ticket.title }}\r\nOtev\u0159en\u00fd: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\nZadavatel: {{ ticket.submitter_email|default:\"Nezn\u00e1m\u00fd\" }}\r\nPriorita: {{ ticket.get_priority_display }}\r\nStav: {{ ticket.get_status }}\r\nP\u0159i\u0159azeno: {{ ticket.get_assigned_to }}\r\nProhl\u00e9dnout online: {{ ticket.staff_url }} (nutn\u00e9 p\u0159\u00edhl\u00e1\u0161en\u00ed)\r\n\r\nP\u016fvodn\u00ed popis byl:\r\n\r\n{{ ticket.description }}\r\n\r\nUzav\u0159en\u00ed z d\u016fvodu:\r\n\r\n{{ resolution }}", + "html": "
Dobr\u00fd den,
\r\n\r\nTicket {{ ticket.title }} (\"{{ ticket.title }}\"){% if ticket.assigned_to %}, p\u0159i\u0159azen\u00fd {{ ticket.assigned_to }}{% endif %} byl uzav\u0159en.
\r\n\r\n\r\nTicket ID: {{ ticket.ticket }}
\r\nFronta: {{ queue.title }}
\r\nNadpis: {{ ticket.title }}
\r\nOtev\u0159eno: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\nZadavatel: {{ ticket.submitter_email|default:\"Nezn\u00e1m\u00fd\" }}
\r\nPriorita: {{ ticket.get_priority_display }}
\r\nStav: {{ ticket.get_status }}
\r\nP\u0159i\u0159azeno: {{ ticket.get_assigned_to }}
\r\nProhl\u00e9dnout online nebo aktualizovat (nutn\u00e9 p\u0159ihl\u00e1\u0161en\u00ed)
P\u016fvodn\u00ed popis:
\r\n\r\n{{ ticket.description|linebreaksbr }}\r\n\r\n
D\u016fvod uzav\u0159en\u00ed:
\r\n\r\n{{ resolution }}", + "locale": "cs", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:33.055Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 132, + "fields": { + "template_name": "closed_owner", + "subject": "(Uzav\u0159eno)", + "heading": "Ticket uzav\u0159en", + "plain_text": "Dobr\u00fd den,\r\n\r\nTicket {{ ticket.title }} (\"{{ ticket.title }}\") p\u0159i\u0159azen\u00fd V\u00c1M byl uzav\u0159en\r\n\r\nTicket ID: {{ ticket.ticket }}\r\nFronta: {{ queue.title }}\r\nNadpis: {{ ticket.title }}\r\nOtev\u0159en\u00fd: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\nZadavatel: {{ ticket.submitter_email|default:\"Unknown\" }}\r\nPriorita: {{ ticket.get_priority_display }}\r\nStav: {{ ticket.get_status }}\r\nP\u0159i\u0159azeno: Vy\r\nProhl\u00e9dnout online: {{ ticket.staff_url }} (nutn\u00e9 p\u0159\u00edhl\u00e1\u0161en\u00ed)\r\n\r\nP\u016fvodn\u00ed popis byl:\r\n\r\n{{ ticket.description }}\r\n\r\nUzav\u0159en\u00ed z d\u016fvodu:\r\n\r\n{{ resolution }}", + "html": "
Dobr\u00fd den,
\r\n\r\nTicket {{ ticket.title }} (\"{{ ticket.title }}\") p\u0159i\u0159azen\u00fd V\u00e1m byl uzav\u0159en.
\r\n\r\n\r\nTicket ID: {{ ticket.ticket }}
\r\nFronta: {{ queue.title }}
\r\nNadpis: {{ ticket.title }}
\r\nOtev\u0159eno: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\nZadavatel: {{ ticket.submitter_email|default:\"Unknown\" }}
\r\nPriorita: {{ ticket.get_priority_display }}
\r\nStav: {{ ticket.get_status }}
\r\nP\u0159i\u0159azeno: V\u00e1m
\r\nProhl\u00e9dnout online nebo aktualizovat (nutn\u00e9 p\u0159ihl\u00e1\u0161en\u00ed)
P\u016fvodn\u00ed popis:
\r\n\r\n{{ ticket.description|linebreaksbr }}\r\n\r\n
D\u016fvod uzav\u0159en\u00ed:
\r\n\r\n{{ resolution }}", + "locale": "cs", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:33.057Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 133, + "fields": { + "template_name": "closed_submitter", + "subject": "(Uzav\u0159eno)", + "heading": "Ticket uzav\u0159en", + "plain_text": "Dobr\u00fd den,\r\n\r\nned\u00e1vno jste n\u00e1m zadali ticket \"{{ ticket.title }}\". T\u00edmto e-mailem V\u00e1m potvrzujeme jeho uzav\u0159en\u00ed.\r\n\r\nPokud si mysl\u00edte, \u017ee ticket vy\u017eaduje dal\u0161\u00ed pr\u00e1ci, dejte n\u00e1m pros\u00edm v\u011bd\u011bt odpov\u011bd\u00ed na tento e-mail bez zm\u011bn\u011bn\u00e9ho p\u0159edm\u011btu zpr\u00e1vy.\r\n\r\nPokud si p\u0159ejete nahl\u00e1dnout na ticket on-line, nav\u0161tivte {{ ticket.ticket_url }}.\r\n\r\nD\u016fvod roz\u0159e\u0161en\u00ed:\r\n\r\n{{ ticket.resolution }}", + "html": "
Dobr\u00fd den,
\r\n\r\nned\u00e1vno jste n\u00e1m zadali ticket \"{{ ticket.title }}\". T\u00edmto e-mailem V\u00e1m potvrzujeme jeho uzav\u0159en\u00ed.
\r\n\r\nD\u016fvod roz\u0159e\u0161en\u00ed:
\r\n\r\n{{ ticket.resolution }}\r\n\r\n
Pokud si p\u0159ejete prohl\u00eddnout ticket on-line, nav\u0161tivte {{ ticket.ticket_url }}. Pokud si mysl\u00edte, \u017ee ticket vy\u017eaduje dal\u0161\u00ed pr\u00e1ci, dejte n\u00e1m pros\u00edm v\u011bd\u011bt odpov\u011bd\u00ed na tento e-mail bez zm\u011bn\u011bn\u00e9ho p\u0159edm\u011btu zpr\u00e1vy.
", + "locale": "cs", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:33.059Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 134, + "fields": { + "template_name": "escalated_cc", + "subject": "(Vyhroceno)", + "heading": "Ticket vyhrocen", + "plain_text": "Dobr\u00fd den,\r\n\r\nTicket {{ ticket.title }} (\"{{ ticket.title }}\"){% if ticket.assigned_to %}, p\u0159i\u0159azen\u00fd {{ ticket.assigned_to }}{% endif %} byl automaticky vyhrocen.\r\n\r\nTicket ID: {{ ticket.ticket }}\r\nFronta: {{ queue.title }}\r\nNadpis: {{ ticket.title }}\r\nOtev\u0159en\u00fd: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\nZadavatel: {{ ticket.submitter_email|default:\"Nezn\u00e1m\u00fd\" }}\r\nPriorita: {{ ticket.get_priority_display }}\r\nStav: {{ ticket.get_status }}\r\nP\u0159i\u0159azeno: {{ ticket.get_assigned_to }}\r\nProhl\u00e9dnout online: {{ ticket.staff_url }} (nutn\u00e9 p\u0159\u00edhl\u00e1\u0161en\u00ed)\r\n\r\nP\u016fvodn\u00ed popis byl:\r\n\r\n{{ ticket.description }}", + "html": "Dobr\u00fd den,
\r\n\r\nTicket {{ ticket.title }} (\"{{ ticket.title }}\"){% if ticket.assigned_to %}, p\u0159i\u0159azen\u00fd {{ ticket.assigned_to }}{% endif %} automaticky vyhrocen.
\r\n\r\n\r\nTicket ID: {{ ticket.ticket }}
\r\nFronta: {{ queue.title }}
\r\nNadpis: {{ ticket.title }}
\r\nOtev\u0159eno: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\nZadavatel: {{ ticket.submitter_email|default:\"Nezn\u00e1m\u00fd\" }}
\r\nPriorita: {{ ticket.get_priority_display }}
\r\nStav: {{ ticket.get_status }}
\r\nP\u0159i\u0159azeno: {{ ticket.get_assigned_to }}
\r\nProhl\u00e9dnout online nebo aktualizovat (nutn\u00e9 p\u0159ihl\u00e1\u0161en\u00ed)
P\u016fvodn\u00ed popis:
\r\n\r\n{{ ticket.description|linebreaksbr }}", + "locale": "cs", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:33.062Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 135, + "fields": { + "template_name": "escalated_owner", + "subject": "(Vyhroceno)", + "heading": "V\u00e1\u0161 p\u0159i\u0159azen\u00fd ticket byl vyhrocen", + "plain_text": "Dobr\u00fd den,\r\n\r\nticket, kter\u00fd V\u00e1m je p\u0159i\u0159azen byl automaticky vyhrocen, proto\u017ee byl otev\u0159en del\u0161\u00ed dobu, ne\u017e se \u010dekalo.\r\n\r\nTicket ID: {{ ticket.ticket }}\r\nFronta: {{ queue.title }}\r\nNadpis: {{ ticket.title }}\r\nOtev\u0159en\u00fd: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\nZadavatel: {{ ticket.submitter_email|default:\"Nezn\u00e1m\u00fd\" }}\r\nPriorita: {{ ticket.get_priority_display }}\r\nStav: {{ ticket.get_status }}\r\nP\u0159i\u0159azeno: {{ ticket.get_assigned_to }}\r\nProhl\u00e9dnout online: {{ ticket.staff_url }} (nutn\u00e9 p\u0159\u00edhl\u00e1\u0161en\u00ed)\r\n\r\nP\u016fvodn\u00ed popis byl:\r\n\r\n{{ ticket.description }}\r\n\r\nPros\u00edm pod\u00edvejte se na ticket a pokuste se ho roz\u0159e\u0161it co nejd\u0159\u00edve.", + "html": "
Dobr\u00fd den,
\r\n\r\nticket, kter\u00fd V\u00e1m je p\u0159i\u0159azen byl automaticky vyhrocen, proto\u017ee byl otev\u0159en del\u0161\u00ed dobu, ne\u017e se \u010dekalo.
\r\n\r\n\r\nTicket ID: {{ ticket.ticket }}
\r\nFronta: {{ queue.title }}
\r\nNadpis: {{ ticket.title }}
\r\nOtev\u0159eno: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\nZadavatel: {{ ticket.submitter_email|default:\"Nezn\u00e1m\u00fd\" }}
\r\nPriorita: {{ ticket.get_priority_display }}
\r\nStav: {{ ticket.get_status }}
\r\nP\u0159i\u0159azeno: {{ ticket.get_assigned_to }}
\r\nProhl\u00e9dnout online nebo aktualizovat (nutn\u00e9 p\u0159ihl\u00e1\u0161en\u00ed)
P\u016fvodn\u00ed popis:
\r\n\r\n{{ ticket.description|linebreaksbr }}\r\n\r\n\r\n
Pros\u00edm pod\u00edvejte se na ticket a pokuste se ho roz\u0159e\u0161it co nejd\u0159\u00edve.
", + "locale": "cs", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:33.064Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 136, + "fields": { + "template_name": "escalated_submitter", + "subject": "(Vyhroceno)", + "heading": "Ticket vyhrocen", + "plain_text": "Dobr\u00fd den,\r\n\r\nned\u00e1vno jste n\u00e1m zadali ticket \"{{ ticket.title }}\". T\u00edmto e-mailem V\u00e1s upozor\u0148ujeme na automatick\u00e9 vyhrocen\u00ed ticketu, proto\u017ee byl otev\u0159en d\u00e9le ne\u017e se o\u010dek\u00e1valo.\r\n\r\nBudeme se sna\u017eit o jeho nejrychlej\u0161\u00ed vy\u0159e\u0161en\u00ed.\r\n\r\nPokud si p\u0159ejete nahl\u00e1dnout na ticket on-line, nav\u0161tivte {{ ticket.ticket_url }}.", + "html": "Dobr\u00fd den,
\r\n\r\nned\u00e1vno jste n\u00e1m zadali ticket \"{{ ticket.title }}\". T\u00edmto e-mailem V\u00e1s upozor\u0148ujeme na automatick\u00e9 vyhrocen\u00ed ticketu, proto\u017ee byl otev\u0159en d\u00e9le ne\u017e se o\u010dek\u00e1valo.
\r\n\r\nBudeme se sna\u017eit o jeho nejrychlej\u0161\u00ed vy\u0159e\u0161en\u00ed.
\r\n\r\nPokud si p\u0159ejete nahl\u00e1dnout na ticket on-line, nav\u0161tivte {{ ticket.ticket_url }}.
", + "locale": "cs", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:33.066Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 137, + "fields": { + "template_name": "newticket_cc", + "subject": "(Otev\u0159en\u00fd)", + "heading": "Zalo\u017een nov\u00fd ticket", + "plain_text": "Dobr\u00fd den,\r\n\r\nt\u00edmto automaticky generovan\u00fdm e-mailem V\u00e1m d\u00e1v\u00e1me na v\u011bdom\u00ed, \u017ee ticket byl zalo\u017een\r\n\r\nTicket ID: {{ ticket.ticket }}\r\nFronta: {{ queue.title }}\r\nNadpis: {{ ticket.title }}\r\nOtev\u0159eno: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\nZadavatel: {{ ticket.submitter_email|default:\"Nezn\u00e1m\u00fd\" }}\r\nPriorita: {{ ticket.get_priority_display }}\r\nStav: {{ ticket.get_status }}\r\nP\u0159i\u0159azeno: {{ ticket.get_assigned_to }}\r\nProhl\u00e9dnout on-line: {{ ticket.staff_url }}\r\n\r\nZad\u00e1n\u00ed ticketu je:\r\n\r\n{{ ticket.description }}", + "html": "Dobr\u00fd den,
\r\n\r\nt\u00edmto automaticky generovan\u00fdm e-mailem V\u00e1m d\u00e1v\u00e1me na v\u011bdom\u00ed, \u017ee ticket byl zalo\u017een.
\r\n\r\n\r\nTicket ID: {{ ticket.ticket }}
\r\nFronta: {{ queue.title }}
\r\nNadpis: {{ ticket.title }}
\r\nOtev\u0159eno: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\nZadavatel: {{ ticket.submitter_email|default:\"Unknown\" }}
\r\nPriorita: {{ ticket.get_priority_display }}
\r\nStav: {{ ticket.get_status }}
\r\nP\u0159i\u0159azeno: {{ ticket.get_assigned_to }}
\r\nProhl\u00e9dnout Online pro aktualizaci (je pot\u0159eba se p\u0159ihl\u00e1sit)
Zad\u00e1n\u00ed:
\r\n\r\n{{ ticket.description|linebreaksbr }}", + "locale": "cs", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:33.069Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 138, + "fields": { + "template_name": "newticket_submitter", + "subject": "(Otev\u0159en)", + "heading": "V\u00e1\u0161 ticket byl zalo\u017een", + "plain_text": "Dobr\u00fd den,\r\n\r\nt\u00edmto automaticky generovan\u00fdm e-mailem V\u00e1m d\u00e1v\u00e1me v\u011bd\u011bt, \u017ee jsme p\u0159ijali ticket \"{{ ticket.title }}\". \r\n\r\nV tuto chv\u00edli nemus\u00edte d\u011blat nic. V\u00e1\u0161 ticket dostal \u010d\u00edslo {{ ticket.ticket }} a v kr\u00e1tk\u00e9 dob\u011b se k n\u011bmu dostaneme a odpov\u00edme V\u00e1m.\r\n\r\nP\u0159ejte-li si dostat dal\u0161\u00ed detaily nebo m\u00e1te-li jak\u00fdkoliv dotaz stran ticketu, p\u0159idejte pros\u00edm do p\u0159edm\u011btu Va\u0161eho e-mailu \u010d\u00edslo ticketu '{{ ticket.ticket }}'. Nejsn\u00e1ze tak u\u010din\u00edte, pokud odpov\u00edte na tento e-mail.\r\n\r\nPod\u00edv\u00e1me se na probl\u00e9m a pokus\u00edme se ho co nejd\u0159\u00edve vy\u0159e\u0161it. Dal\u0161\u00ed detaily V\u00e1m budeme ps\u00e1t na tuto e-mailovou adresu.Pokud se pot\u0159ebujete pod\u00edvat ticket online, p\u0159idat soubory nebo dal\u0161\u00ed detaily, nav\u0161tivte {{ ticket.ticket_url }}.", + "html": "
Dobr\u00fd den,
\r\n\r\n\r\nt\u00edmto automaticky generovan\u00fdm e-mailem V\u00e1m d\u00e1v\u00e1me v\u011bd\u011bt, \u017ee jsme p\u0159ijali ticket {{ ticket.title }}.
\r\n\r\nV tuto chv\u00edli nemus\u00edte d\u011blat nic. V\u00e1\u0161 ticket dostal \u010d\u00edslo {{ ticket.ticket }} a v kr\u00e1tk\u00e9 dob\u011b se k n\u011bmu dostaneme a odpov\u00edme V\u00e1m.
\r\n\r\nP\u0159ejte-li si dostat dal\u0161\u00ed detaily nebo m\u00e1te-li jak\u00fdkoliv dotaz stran ticketu, p\u0159idejte pros\u00edm do p\u0159edm\u011btu Va\u0161eho e-mailu \u010d\u00edslo ticketu {{ ticket.ticket }}. Nejsn\u00e1ze tak u\u010din\u00edte, pokud odpov\u00edte na tento e-mail.
\r\n\r\nPokud se pot\u0159ebujete pod\u00edvat ticket online, p\u0159idat soubory nebo dal\u0161\u00ed detaily, nav\u0161tivte {{ ticket.ticket_url }}.
", + "locale": "cs", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:33.071Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 139, + "fields": { + "template_name": "resolved_cc", + "subject": "(Roz\u0159e\u0161eno)", + "heading": "Ticket roz\u0159e\u0161en", + "plain_text": "Dobr\u00fd den,\r\n\r\nticket byl roz\u0159e\u0161en\r\n\r\nTicket ID: {{ ticket.ticket }}\r\nFronta: {{ queue.title }}\r\nNadpis: {{ ticket.title }}\r\nOtev\u0159eno: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\nZadavatel: {{ ticket.submitter_email|default:\"Nezn\u00e1m\u00fd\" }}\r\nPriorita: {{ ticket.get_priority_display }}\r\nStav: {{ ticket.get_status }}\r\nP\u0159i\u0159azeno: {{ ticket.get_assigned_to }}\r\nOn-line: {{ ticket.staff_url }} (nutn\u00e9 p\u0159ihl\u00e1\u0161en\u00ed)\r\n\r\nP\u016fvodn\u00ed popis ticketu:\r\n\r\n{{ ticket.description }}\r\n\r\nRoz\u0159e\u0161en\u00ed:\r\n\r\n{{ ticket.resolution }}\r\n\r\nToto roz\u0159e\u0161en\u00ed bylo zasl\u00e1no e-mailem zadavateli, kter\u00fd \u0159e\u0161en\u00ed ov\u011b\u0159\u00ed a potom jej bude mo\u017en\u00e9 uzav\u0159\u00edt.", + "html": "Dobr\u00fd den,
\r\n\r\nTicket byl roz\u0159e\u0161en.
\r\n\r\n\r\nTicket ID: {{ ticket.ticket }}
\r\nFronta: {{ queue.title }}
\r\nNadpis: {{ ticket.title }}
\r\nOtev\u0159eno: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\nZadavatel: {{ ticket.submitter_email|default:\"Nezn\u00e1m\u00fd\" }}
\r\nPriorita: {{ ticket.get_priority_display }}
\r\nStav: {{ ticket.get_status }}
\r\nP\u0159i\u0159azeno: {{ ticket.get_assigned_to }}
\r\nOn-line (nutn\u00e9 p\u0159ihl\u00e1\u0161en\u00ed)
P\u016fvodn\u00ed popis:
\r\n\r\n{{ ticket.description|linebreaksbr }}\r\n\r\n
Roz\u0159e\u0161en\u00ed:
\r\n\r\n{{ ticket.resolution }}\r\n\r\n
Toto roz\u0159e\u0161en\u00ed bylo zasl\u00e1no e-mailem zadavateli, kter\u00fd \u0159e\u0161en\u00ed ov\u011b\u0159\u00ed a potom jej bude mo\u017en\u00e9 uzav\u0159\u00edt.
", + "locale": "cs", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:33.073Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 140, + "fields": { + "template_name": "resolved_owner", + "subject": "(Roz\u0159e\u0161eno)", + "heading": "Ticket roz\u0159e\u0161en", + "plain_text": "Dobr\u00fd den,\r\n\r\nticket p\u0159i\u0159azen\u00fd V\u00e1m byl pr\u00e1v\u011b roz\u0159e\u0161en\r\n\r\nTicket ID: {{ ticket.ticket }}\r\nFronta: {{ queue.title }}\r\nNadpis: {{ ticket.title }}\r\nOtev\u0159eno: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\nZadaatel: {{ ticket.submitter_email|default:\"Unknown\" }}\r\nPriorita: {{ ticket.get_priority_display }}\r\nStav: {{ ticket.get_status }}\r\nP\u0159i\u0159azeno: {{ ticket.get_assigned_to }}\r\nOn-line: {{ ticket.staff_url }} po\u017eadov\u00e1no p\u0159ihl\u00e1\u0161en\u00ed)\r\n\r\nP\u016fvodn\u00ed popis:\r\n\r\n{{ ticket.description }}\r\n\r\nRoz\u0159e\u0161en\u00ed:\r\n\r\n{{ ticket.resolution }}\r\n\r\nRoz\u0159e\u0161en\u00ed bylo posl\u00e1no e-mailem zadavateli, kter\u00fd jej potvrd\u00ed a potom bude mo\u017en\u00e9 ticket zav\u0159\u00edt", + "html": "Dobr\u00fd den,
\r\n\r\nticket p\u0159i\u0159azen\u00fd V\u00e1m byl pr\u00e1v\u011b roz\u0159e\u0161en
\r\n\r\n\r\nTicket ID: {{ ticket.ticket }}
\r\nFronta: {{ queue.title }}
\r\nNadpis: {{ ticket.title }}
\r\nOtev\u0159eno: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\nZadavatel: {{ ticket.submitter_email|default:\"Unknown\" }}
\r\nPriorita: {{ ticket.get_priority_display }}
\r\nStav: {{ ticket.get_status }}
\r\nP\u0159i\u0159azeno: {{ ticket.get_assigned_to }}
\r\nProhl\u00e9dnout on-line (nutn\u00e9 p\u0159ihl\u00e1\u0161en\u00ed)
P\u016fvodn\u00ed zad\u00e1n\u00ed:
\r\n\r\n{{ ticket.description|linebreaksbr }}\r\n\r\n
Roz\u0159e\u0161en\u00ed:
\r\n\r\n{{ ticket.resolution }}\r\n\r\n
Roz\u0159e\u0161en\u00ed bylo posl\u00e1no e-mailem zadavateli, kter\u00fd jej potvrd\u00ed a potom bude mo\u017en\u00e9 ticket zav\u0159\u00edt.
", + "locale": "cs", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:33.075Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 141, + "fields": { + "template_name": "resolved_submitter", + "subject": "(Roz\u0159e\u0161eno)", + "heading": "V\u00e1\u0161 ticket byl roz\u0159e\u0161en", + "plain_text": "Dobr\u00fd den,\r\n\r\nned\u00e1vno jste n\u00e1m zadali ticket \"{{ ticket.title }}\". T\u00edmto e-mailem bychom V\u00e1s r\u00e1di informovali o jeho roz\u0159e\u0161en\u00ed.\r\n\r\nK ticketu {{ ticket.ticket }} bylo zad\u00e1no n\u00e1sleduj\u00edc\u00ed roz\u0159e\u0161en\u00ed:\r\n\r\n{{ resolution }}\r\n\r\nPros\u00edme V\u00e1s o potvrzen\u00ed, \u017ee toto roz\u0159e\u0161en\u00ed skute\u010dn\u011b \u0159e\u0161\u00ed Va\u0161e pot\u0159eby a my m\u016f\u017eeme ticket zav\u0159\u00edt. Pokud m\u00e1te jak\u00e9koliv dal\u0161\u00ed dotazy nebo pokud si mysl\u00edte, \u017ee \u0159e\u0161en\u00ed nen\u00ed adekv\u00e1tn\u00ed, odpov\u011bzte na tento e-mail a ponechte nezm\u011bn\u011bn\u00fd p\u0159edm\u011bt.\r\n\r\nPro on-line spr\u00e1vu pros\u00edm nav\u0161tivte {{ ticket.ticket_url }}", + "html": "Dobr\u00fd den,
\r\n\r\nned\u00e1vno jste n\u00e1m zadali ticket {{ ticket.title }}. T\u00edmto e-mailem bychom V\u00e1s r\u00e1di informovali o jeho roz\u0159e\u0161en\u00ed.
\r\n\r\nK ticketu {{ ticket.ticket }}: bylo zad\u00e1no n\u00e1sleduj\u00edc\u00ed roz\u0159e\u0161en\u00ed:
\r\n\r\n{{ resolution }}\r\n\r\n
Pros\u00edme V\u00e1s o potvrzen\u00ed, \u017ee toto roz\u0159e\u0161en\u00ed skute\u010dn\u011b \u0159e\u0161\u00ed Va\u0161e pot\u0159eby a my m\u016f\u017eeme ticket zav\u0159\u00edt. Pokud m\u00e1te jak\u00e9koliv dal\u0161\u00ed dotazy nebo pokud si mysl\u00edte, \u017ee \u0159e\u0161en\u00ed nen\u00ed adekv\u00e1tn\u00ed, odpov\u011bzte na tento e-mail a ponechte nezm\u011bn\u011bn\u00fd p\u0159edm\u011bt.
\r\n\r\nPro on-line spr\u00e1vu pros\u00edm nav\u0161tivte {{ ticket.ticket_url }}.
", + "locale": "cs", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:33.077Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 142, + "fields": { + "template_name": "updated_cc", + "subject": "(Aktualizov\u00e1no)", + "heading": "Ticket aktualizov\u00e1n", + "plain_text": "Dobr\u00fd den,\r\n\r\nt\u00edmto automaticky generovan\u00fdm e-mailem bychom V\u00e1s r\u00e1di informovali, \u017ee ticket {{ ticket.ticket }} od {{ ticket.submitter_email }} byl aktualizov\u00e1n.\r\n\r\nTicket ID: {{ ticket.ticket }}\r\nFronta: {{ queue.title }}\r\nNadpis: {{ ticket.title }}\r\nOtev\u0159eno: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\nZadavatel: {{ ticket.submitter_email|default:\"Nezn\u00e1m\u00fd\" }}\r\nPriorita: {{ ticket.get_priority_display }}\r\nStav: {{ ticket.get_status }}\r\nP\u0159i\u0159azeno: {{ ticket.get_assigned_to }}\r\nOn-line: {{ ticket.staff_url }} (nutn\u00e9 p\u0159ihl\u00e1\u0161en\u00ed)\r\n\r\nPopis:\r\n\r\n{{ ticket.description }}\r\n\r\nP\u0159idan\u00fd koment\u00e1\u0159:\r\n\r\n{{ comment }}\r\n\r\nTato informace {% if private %}ne{% endif %}byla posl\u00e1na e-mailem zadavateli.\r\n\r\nPro on-line spr\u00e1vu ticketu nav\u0161tivte {{ ticket.staff_url }}.", + "html": "Dobr\u00fd den,
\r\n\r\nt\u00edmto automaticky generovan\u00fdm e-mailem bychom V\u00e1s r\u00e1di informovali, \u017ee ticket {{ ticket.ticket }} od {{ ticket.submitter_email }} byl aktualizov\u00e1n.
\r\n\r\n\r\nTicket ID: {{ ticket.ticket }}
\r\nFronta: {{ queue.title }}
\r\nNadpis: {{ ticket.title }}
\r\nOtev\u0159eno: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\nZadavatel: {{ ticket.submitter_email|default:\"Unknown\" }}
\r\nPriorita: {{ ticket.get_priority_display }}
\r\nStav: {{ ticket.get_status }}
\r\nP\u0159i\u0159azeno: {{ ticket.get_assigned_to }}
\r\nOn-oline pro aktualizci (nutn\u00e9 p\u0159ihl\u00e1\u0161en\u00ed)
Popis:
\r\n\r\n{{ ticket.description|linebreaksbr }}\r\n\r\n
P\u0159idan\u00fd koment\u00e1\u0159:
\r\n\r\n{{ comment }}\r\n\r\n
Tato informace{% if private %}ne{% endif %}byla posl\u00e1na e-mailem zadavateli.
", + "locale": "cs", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:33.079Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 143, + "fields": { + "template_name": "updated_owner", + "subject": "(Aktualizov\u00e1no)", + "heading": "Ticket aktualizov\u00e1n", + "plain_text": "Dobr\u00fd den,\r\n\r\nt\u00edmto automaticky generovan\u00fdm e-mailem bychom V\u00e1s r\u00e1di informovali, \u017ee V\u00e1\u0161 ticket {{ ticket.ticket }} od {{ ticket.submitter_email }} byl aktualizov\u00e1n.\r\n\r\n\r\nTicket ID: {{ ticket.ticket }}\r\nFronta: {{ queue.title }}\r\nNadpis: {{ ticket.title }}\r\nOtev\u0159eno: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}\r\nZadavatel: {{ ticket.submitter_email|default:\"Nezn\u00e1m\u00fd\" }}\r\nPriorita: {{ ticket.get_priority_display }}\r\nStav: {{ ticket.get_status }}\r\nP\u0159i\u0159azeno: {{ ticket.get_assigned_to }}\r\nOn-line: {{ ticket.staff_url }} (nutn\u00e9 p\u0159ihl\u00e1\u0161en\u00ed)\r\n\r\nPopis:\r\n\r\n{{ ticket.description }}\r\n\r\nP\u0159idan\u00fd koment\u00e1\u0159:\r\n\r\n{{ comment }}\r\n\r\nTato informace {% if private %}ne{% endif %}byla posl\u00e1na e-mailem zadavateli.\r\n\r\nPro on-line spr\u00e1vu ticketu nav\u0161tivte {{ ticket.staff_url }}.", + "html": "Dobr\u00fd den,
\r\n\r\nt\u00edmto automaticky generovan\u00fdm e-mailem bychom V\u00e1s r\u00e1di informovali, \u017ee V\u00e1\u0161 ticket {{ ticket.ticket }} od {{ ticket.submitter_email }} byl aktualizov\u00e1n.
\r\n\r\n\r\nTicket ID: {{ ticket.ticket }}
\r\nFronta: {{ queue.title }}
\r\nNadpis: {{ ticket.title }}
\r\nOtev\u0159eno: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\nZadavatel: {{ ticket.submitter_email|default:\"Unknown\" }}
\r\nPriorita: {{ ticket.get_priority_display }}
\r\nStav: {{ ticket.get_status }}
\r\nP\u0159i\u0159azeno: {{ ticket.get_assigned_to }}
\r\nOn-oline pro aktualizci (nutn\u00e9 p\u0159ihl\u00e1\u0161en\u00ed)
Popis:
\r\n\r\n{{ ticket.description|linebreaksbr }}\r\n\r\n
P\u0159idan\u00fd koment\u00e1\u0159:
\r\n\r\n{{ comment }}\r\n\r\n
Tato informace{% if private %}ne{% endif %}byla posl\u00e1na e-mailem zadavateli.
", + "locale": "cs", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:33.081Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 144, + "fields": { + "template_name": "updated_submitter", + "subject": "(Aktualizov\u00e1no)", + "heading": "V\u00e1\u0161 ticket byl aktualizov\u00e1n", + "plain_text": "Dobr\u00fd den,\r\n\r\nned\u00e1vno jste n\u00e1m zadali ticket \"{{ ticket.title }}\". T\u00edmto e-mailem bychom V\u00e1s r\u00e1di informovali o jeho aktualizaci.\r\n\r\nK ticketu {{ ticket.ticket }} byl p\u0159id\u00e1n n\u00e1sleduj\u00edc\u00ed koment\u00e1\u0159:\r\n\r\n{{ comment }}\r\n\r\nPokud pot\u0159ebujete p\u0159idat dal\u0161\u00ed informace, pros\u00edm odpov\u011bzte na tento e-mail a ponechte p\u016fvodn\u00ed p\u0159edm\u011bt. Dal\u0161\u00ed mo\u017enost\u00ed je nav\u0161t\u00edvit p\u0159\u00edmo formul\u00e1\u0159 ticketu na adrese {{ ticket.ticket_url }}.", + "html": "Dobr\u00fd den,
\r\n\r\nned\u00e1vno jste n\u00e1m zadali ticket {{ ticket.title }}. T\u00edmto e-mailem bychom V\u00e1s r\u00e1di informovali o jeho aktualizaci.
\r\n\r\nK ticketu {{ ticket.ticket }} byl p\u0159id\u00e1n n\u00e1sleduj\u00edc\u00ed koment\u00e1\u0159::
\r\n\r\n{{ comment }}\r\n\r\n
Pokud pot\u0159ebujete p\u0159idat dal\u0161\u00ed informace, pros\u00edm odpov\u011bzte na tento e-mail a ponechte p\u016fvodn\u00ed p\u0159edm\u011bt. Dal\u0161\u00ed mo\u017enost\u00ed je nav\u0161t\u00edvit p\u0159\u00edmo formul\u00e1\u0159 ticketu na adrese {{ ticket.ticket_url }}.
", + "locale": "cs", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:33.083Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 145, + "fields": { + "template_name": "vendor_notify_newcase", + "subject": "{{ subject }}", + "heading": "New Case Available", + "plain_text": "Hello,\r\n\r\n{{ body }}\r\n\r\nView Online: {{ case.case_url }}\r\n\r\nAccess to the case requires a VINCE account. If you do not have an account, please create an account: {{ signup_url }}\r\n\r\nThank you,\r\n{{ team.team_signature }}", + "html": "Hello,
\r\n\r\n{{ body }}
\r\n\r\n\r\nView Online for more information (login required)
\r\n{{ case.case_url }}
\r\n\r\n\r\nAccess to the case requires a VINCE account. If you do not have an account, please create an account.\r\n
\r\n\r\nThank you,
\r\n{{ team.team_signature }}\r\n
Hello,
Hello, you have been requested to join VINCE in the group {{ group }} by {{ groupadmin }}. Please create a VINCE account and you will be able to view any vulnerability case information associated with {{ group }}.
Sign up here: {{ signup }}
Thank you,\r\n
{{ team_signature }}
Hello,
\r\n\r\nThis is a courtesy e-mail to let you know that a case you are working on has been updated.
\r\n\r\n\r\nCase ID: {{ case.vu_vuid }}
\r\nOwner: {{ case.owner }}
\r\nCase Opened: {{ case.created|date:\"l N jS Y, \\a\\t P\"}}
\r\nModified: {{ case.modified|date:\"l N jS Y, \\a\\t P\" }}
\r\nModified By: {{ action.user }}
\r\nView Online to update this ticket (login required)
Description:
\r\n\r\n{{ action.title|linebreaksbr }}", + "locale": "en", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:33.090Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 148, + "fields": { + "template_name": "case_new_post", + "subject": "(New Post)", + "heading": "Case has New Post", + "plain_text": "Hello,\r\n\r\nThis is a courtesy e-mail to let you know that a case you are working on has a new post.\r\n\r\n{{ action.title }}\r\n\r\nCase ID: {{ case.vu_vuid }}\r\nOwner: {{ case.owner }}\r\nCase Opened: {{ case.created|date:\"l N jS Y, \\a\\t P\" }}\r\nPost Time: {{ case.modified|date:\"l N jS Y, \\a\\t P\" }}\r\nView Online: {{ case.case_url }} (login required)", + "html": "
Hello,
\r\n\r\nThis is a courtesy e-mail to let you know that a case you are working on has a new post in VinceComm.
\r\n\r\n\r\nCase ID: {{ case.vu_vuid }}
\r\nOwner: {{ case.owner }}
\r\nCase Opened: {{ case.created|date:\"l N jS Y, \\a\\t P\"}}
\r\nModified: {{ case.modified|date:\"l N jS Y, \\a\\t P\" }}
\r\nView Online to update this ticket (login required)
Description:
\r\n\r\n{{ action.title|linebreaksbr }}", + "locale": "en", + "body_only": false, + "user": null, + "modified": "2021-11-15T19:09:38.066Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 149, + "fields": { + "template_name": "case_new_message", + "subject": "(New Message in Case)", + "heading": "New Case Message", + "plain_text": "Hello,\r\n\r\nThis is a courtesy e-mail to let you know that someone has messaged you about a case you are working on.\r\n\r\nCase ID: {{ case.vu_vuid}} {{ case.case_url }} \r\nOwner: {{ case.owner }}\r\nCase Opened: {{ case.created|date:\"l N jS Y, \\a\\t P\" }}\r\nMessage Received: {{ case.modified|date:\"l N jS Y, \\a\\t P\" }}\r\nView Online: {{ ticket.staff_url }} (login required)", + "html": "
Hello,
\r\n\r\nThis is a courtesy e-mail to let you know that a someone has messaged you about a case you are working on.
\r\n\r\n\r\nCase ID: {{ case.vu_vuid }}
\r\nOwner: {{ case.owner }}
\r\nCase Opened: {{ case.created|date:\"l N jS Y, \\a\\t P\"}}
\r\nMessage Received: {{ case.modified|date:\"l N jS Y, \\a\\t P\" }}
\r\nView Online to update this ticket (login required)
Hello,
\r\n\r\nThis is a courtesy e-mail to let you know that a vendor has updated their status for a case you are working on.
\r\n\r\n\r\nCase ID: {{ case.vu_vuid }}
\r\nOwner: {{ case.owner }}
\r\nCase Opened: {{ case.created|date:\"l N jS Y, \\a\\t P\"}}
\r\nModified: {{ case.modified|date:\"l N jS Y, \\a\\t P\" }}
\r\nView Online to update this ticket (login required)
Hello,
\r\n\r\nThis is a courtesy e-mail to let you know that a case {{ case.vu_vuid }} has been assigned to you by {{ case.assignee }}
\r\n\r\n\r\nCase ID: {{ case.vu_vuid }}
\r\nOwner: {{ case.owner }}
\r\nCase Opened: {{ case.created|date:\"l N jS Y, \\a\\t P\"}}
\r\nModified: {{ case.modified|date:\"l N jS Y, \\a\\t P\" }}
\r\nModified By: {{ action.user }}
\r\nStatus: {{ case.get_status }}
\r\nAssigned to: YOU
\r\nView Online to update this ticket (login required)
Description:
\r\n\r\n{{ action.title|linebreaksbr }}", + "locale": "en", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:33.099Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 152, + "fields": { + "template_name": "new_message", + "subject": "(New Message in VINCE)", + "heading": "New Message", + "plain_text": "Hello,\r\n\r\nThis is a courtesy e-mail to let you know that {% if thread.from_group %}{{ thread.from_group }}{% else %}{{ message.sender }}{% endif %} has sent you a message. Please login to view the message. \r\n\r\n{% if thread.case %}\r\nMessage refers to Case: {{ thread.case }}\r\n{% endif %}\r\nSent at: {{ message.created|date:\"c\" }}\r\nView Online: {{ message.message_url }} (login required)", + "html": "
Hello,
\r\n\r\nThis is a courtesy e-mail to let you know that {% if thread.from_group %}{{ thread.from_group }}{% else %}{{ message.sender }}{% endif %} has sent you a message. Please login to view the message.
\r\n\r\n\r\n{% if thread.case %}\r\nMessage refers to Case: {{ thread.case }}
\r\n{% endif %}\r\nSent at: {{ message.created|date:\"c\" }}
\r\nView Online to reply to this message (login required)
Hello,
\r\n\r\nThis is a courtesy e-mail to let you know that {% if thread.from_group %}{{ thread.from_group }}{% else %}{{ message.sender }}{% endif %} has sent you a message. Please login to view the message.
\r\n\r\nSent at: {{ message.created|date:\"c\" }}
\r\nView Online to reply to this message (login required)
Hello,
\r\n\r\nThis is a courtesy e-mail to let you know that a case you are working on has been updated.
\r\n\r\n\r\nCase {{ case.vu_vuid }}: {{ case.vu_vuid }}
\r\n
\r\nTicket ID: {{ ticket.ticket }}
\r\nOpened: {{ ticket.created|date:\"l N jS Y, \\a\\t P\" }}
\r\nSubmitter: {{ ticket.submitter_email|default:\"Unknown\" }}
\r\nView Online to update this ticket (login required)
Hello,
\r\n\r\n{{ body }}
\r\n\r\n\r\nView Online for more information (login required)
\r\n{{ case.case_url }}
\r\n\r\n\r\nAccess to the case requires a VINCE account. If you do not have an account, please create an account.\r\n
\r\n\r\nThank you,
\r\n{{ team.team_signature }}\r\n
Hello,
\r\n\r\nThis is a courtesy e-mail to let you know that you were tagged in a post by {{ mentioned_by }} for a case you're involved with.\r\n
\r\n\r\n\r\n\r\nView Online to view the contents of the post (login required).
\r\n\r\nIf you would prefer to not receive email notifications, please login to change your email preferences.
", + "locale": "en", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:33.109Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 157, + "fields": { + "template_name": "group_tagged", + "subject": "{% if tracking %}{{ tracking }}{% endif %} {{ vuid }} Your organization was tagged in a post.", + "heading": "Your organization was tagged in a post in Case {{vuid}}.", + "plain_text": "Hello,\r\n\r\nThis is a courtesy e-mail to let you know that your organization was tagged in a post by {{ mentioned_by }} for a case you're involved with.\r\n\r\nTo view the post:\r\n\r\nView Online: {{ post_link }} (login required)\r\n\r\nIf you would prefer to not receive email notifications, please login to change your email preferences.", + "html": "Hello,
\r\n\r\nThis is a courtesy e-mail to let you know that your organization was tagged in a post by {{ mentioned_by }} for a case you're involved with.\r\n
\r\n\r\n\r\n\r\nView Online to view the contents of the post (login required).
\r\n\r\nIf you would prefer to not receive email notifications, please login to change your email preferences.
", + "locale": "en", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:33.110Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 158, + "fields": { + "template_name": "approve_user", + "subject": "Your VINCE account has been approved", + "heading": "Account approved", + "plain_text": "Hello, \r\n\r\nThis is a courtesy e-mail to let you know that your VINCE account has been approved. You can now login to view the status of any reports and cases you are involved in.\r\n\r\n{{ login_url }}\r\n\r\nThank you,\r\n{{ team_signature }}", + "html": "Hello,
This is a courtesy e-mail to let you know that your VINCE account has been approved. You can now login to view the status of any reports and cases you are involved in.
\r\n\r\n{{login_url}}\r\n\r\nThank you,
\r\n\r\n{{ team_signature }}\r\n
", + "locale": "en", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:33.112Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 159, + "fields": { + "template_name": "enable_mfa", + "subject": "MFA successfully enabled", + "heading": "MFA successfully enabled", + "plain_text": "Hello, \r\n\r\nThis is a courtesy e-mail to let you know that multi-factor authentication (MFA) was successfully enabled on your VINCE account.\r\n\r\nIf you did not initiate this change, please let us know as soon as possible.", + "html": "Hello,
This is a courtesy e-mail to let you know that multi-factor authentication (MFA) was successfully enabled on your account.
\r\n\r\nIf you did not initiate this change, please let us know as soon as possible.\r\n
\r\n\r\n\r\nThank you,
\r\n\r\n{{team_signature}}\r\n
", + "locale": "en", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:33.114Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 160, + "fields": { + "template_name": "mfa_removed", + "subject": "MFA successfully removed", + "heading": "MFA successfully removed", + "plain_text": "Hello, \r\n\r\nThis is a courtesy e-mail to let you know that multi-factor authentication (MFA) was successfully disabled on your VINCE account.\r\n\r\nIf you did not initiate this change, please let us know as soon as possible.\r\n\r\nThank you,\r\n\r\n{{ team_signature }}", + "html": "Hello,
This is a courtesy e-mail to let you know that multi-factor authentication (MFA) was successfully disabled on your account.
\r\n\r\nIf you did not initiate this change, please let us know as soon as possible.\r\n
\r\n\r\n\r\nThank you,
\r\n\r\n{{ team_signature }}\r\n
", + "locale": "en", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:33.116Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 161, + "fields": { + "template_name": "blank_body", + "subject": "{% if vrf %}{{ vrf }} (Updated){% else %}{{ subject}} {% endif %}", + "heading": "{% if vrf %}{{ vrf }}{{ subject }}{% else %}{% endif %}", + "plain_text": "{{ body }}\r\n\r\n{% if caseurl %}\r\nView Online: {{ caseurl }}\r\n\r\nAccess to the case requires a VINCE account. If you do not have an account, please register at {{ signup_url }} to create an account.\r\n{% endif %}", + "html": "{{ body }}
\r\n\r\n\r\n{% if caseurl %}\r\nView Online for more information (login required)
\r\n\r\n\r\nAccess to the case requires a VINCE account. If you do not have an account, please create an account.\r\n{% endif %}\r\n
", + "locale": "en", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:33.118Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 162, + "fields": { + "template_name": "new_post", + "subject": "{% if tracking %}{{ tracking }}{% endif %} [{{vuid}}] New Post in Case Discussion", + "heading": "New Post", + "plain_text": "Hello,\r\n\r\nThis is a courtesy e-mail to let you know that there is a new post in the case discussion for a case you're involved with.\r\n\r\nTo view the post:\r\n\r\nView Online: {{ post_link }} (login required)\r\n\r\n\r\nIf you would prefer to not receive email notifications, please login to change your email preferences.", + "html": "Hello,
\r\n\r\nThis is a courtesy e-mail to let you know that there is a new post in the case discussion for a case you're involved with.\r\n
\r\n\r\n\r\n\r\nView Online to view the contents of the post (login required).
\r\n\r\nIf you would prefer to not receive email notifications, please login to change your email preferences.
", + "locale": "en", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:33.131Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 163, + "fields": { + "template_name": "vendor_approve_stmt", + "subject": "[{{case.vu_vuid}}] Statement Approved", + "heading": "Statement Approved", + "plain_text": "Hello,\r\n\r\nThis is a courtesy e-mail to let you know that your status/statement has been approved.\r\n\r\nView Online: {{ case.vt_case_url }}\r\n\r\nThank you,\r\n{{ team_signature }}", + "html": "Hello,
\r\n\r\nThis is a courtesy e-mail to let you know your status/statement has been approved by CERT/CC.
\r\n\r\n\r\nView Online for more information (login required)
\r\n{{ case.vt_case_url }}
\r\n\r\n\r\nAccess to the case requires a VINCE account. If you do not have an account, please create an account.\r\n
\r\n\r\nThank you,
\r\n{{ team_signature }}\r\n
Hello,
This is a courtesy e-mail to let you know that your password was recently changed on your VINCE account.
\r\n\r\nIf you did not initiate this change, please let us know as soon as possible.\r\n
\r\n\r\n\r\nThank you,
\r\n\r\n{{ team_signature }}\r\n
", + "locale": "en", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:33.134Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 165, + "fields": { + "template_name": "new_tracking", + "subject": "{{ tracking }} Tracking ID Added for {{vuid}}", + "heading": "Tracking ID {{ tracking }} added", + "plain_text": "Hello,\r\n\r\nThis is a courtesy e-mail to let you know that a tracking ID ({{tracking}})was recently added to the VINCE Case {{vuid}}.\r\n\r\nIf you did not initiate this change, please let us know as soon as possible.\r\n\r\nThank you,\r\n\r\n{{ team_signature }}", + "html": "Hello,
This is a courtesy e-mail to let you know that a tracking ID ({{tracking}}) was recently added to the VINCE Case {{ vuid }}.
\r\n\r\nIf you did not initiate this change, please let us know as soon as possible.\r\n
\r\n\r\n\r\nThank you,
\r\n\r\n{{ team_signature }}\r\n
", + "locale": "en", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:33.136Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 166, + "fields": { + "template_name": "pinned_post", + "subject": "{% if tracking %}{{ tracking }}{% endif %} [{{vuid}}] New Post in Case Discussion", + "heading": "New Post from Coordination Team", + "plain_text": "Hello,\r\n\r\nThis is a courtesy e-mail to let you know that you there is a new post from the coordination team in the case discussion for a case you're involved with.\r\n\r\nTo view the post:\r\n\r\nView Online: {{ post_link }} (login required)", + "html": "Hello,
\r\n\r\nThis is a courtesy e-mail to let you know that you there is a new post from the coordination team in the case discussion for a case you're involved with.\r\n
\r\n\r\n\r\n\r\nView Online to view the contents of the post (login required).
", + "locale": "en", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:33.138Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 167, + "fields": { + "template_name": "blank_body_no_sig", + "subject": "{{ subject }}", + "heading": "{{ subject }}", + "plain_text": "{{ body }}\r\n\r\n{% if caseurl %}\r\nView Online: {{ caseurl }}\r\n\r\nAccess to the case requires a VINCE account. If you do not have an account, please register at {{ signup_url }} to create an account.\r\n{% endif %}", + "html": "{{ body }}
\r\n\r\n\r\n{% if caseurl %}\r\nView Online for more information (login required)
\r\n\r\n\r\nAccess to the case requires a VINCE account. If you do not have an account, please create an account.\r\n{% endif %}\r\n
", + "locale": "en", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:33.142Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 168, + "fields": { + "template_name": "mfa_reset_request", + "subject": "(Reply Requested)", + "heading": "MFA Reset Requested", + "plain_text": "Hello,\r\n\r\nWe have recently received a request to reset the multi-factor authentication (MFA) on your VINCE account. Before we can do that, we would appreciate a reply to this email confirming your request. Please retain {{ ticket.ticket }} in the subject for tracking purposes.\r\n\r\nIf you use SMS as your MFA method, please verify your phone number in your email response.\r\n\r\nIf you did not initiate this change, please let us know as soon as possible.\r\n\r\nThank you,\r\n\r\n{{ team.team_signature }}", + "html": "Hello,
We have recently received a request to reset the multi-factor authentication (MFA) on your VINCE account. Before we can do that, we would appreciate a reply to this email confirming your request. Please retain {{ ticket.ticket }} in the subject for tracking purposes.
\r\nIf you use SMS as your MFA method, please verify your phone number in your email response.
\r\n\r\nIf you did not initiate this change, please let us know as soon as possible.\r\n
\r\n\r\nThank you,
\r\n\r\n{{ team.team_signature }}\r\n
", + "locale": "en", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:33.143Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 169, + "fields": { + "template_name": "default_vendor", + "subject": "New Case Available", + "heading": "", + "plain_text": "We have new information about a vulnerability that may affect your products. Please login to VINCE for more information about this vulnerability.", + "html": "", + "locale": "en", + "body_only": true, + "user": 1, + "modified": "2021-11-11T16:35:33.145Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 170, + "fields": { + "template_name": "default_participant", + "subject": "Invitation to Participate in Vulnerability Coordination", + "heading": "", + "plain_text": "You have been invited to participate in an active vulnerability disclosure case. Please login to VINCE for more information about this case.", + "html": "", + "locale": "en", + "body_only": true, + "user": 1, + "modified": "2021-11-11T16:35:33.147Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 171, + "fields": { + "template_name": "vincecomm_add_existing_user", + "subject": "Invitation to join {{ group }} on VINCE", + "heading": "Invitation to join {{ group }} on VINCE", + "plain_text": "Hello, you have been invited to access cases in VINCE for the group {{ group }} by {{ groupadmin }}. You will now be able to view vulnerability case information associated with {{ group }}. This is a courtesy notification. No immediate action is required. \r\n\r\nThank you, \r\n\r\n{{team_signature}}", + "html": "Hello,
Hello, you have been invited to access cases in VINCE for the group {{ group }} by {{ groupadmin }}. You will now be able to view vulnerability case information associated with {{ group }}.
This is a courtesy notification. No immediate action is required.
\r\n\r\n Thank you,\r\n
{{team_signature}}
Hello {{ username }}.
You have enabled daily emails for case notifications. Here's what you missed in the last 24 hours...
\r\n\r\n\r\n{% autoescape off %}{{ digest }}{% endautoescape %}\r\n
\r\n\r\nLogin to VINCE to see the full details.
\r\n\r\nCheers,
\r\n\r\n{{ team_signature }}\r\n
", + "locale": "en", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:33.151Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 173, + "fields": { + "template_name": "vt_daily_digest", + "subject": "VINCE Daily Activity", + "heading": "Here's what you missed ...", + "plain_text": "Hello {{ username }},\r\n\r\nYou have enabled daily emails for case notifications. Here's what you may have missed in the last 24 hours in your cases:\r\n\r\n{{ digest }}\r\n\r\nLogin to VINCE to see the full details.", + "html": "Hello {{ username }}.
You have enabled daily emails for case notifications. Here's what you may have missed in the last 24 hours in your cases:
\r\n\r\n\r\n{% autoescape off %}{{ digest }}{% endautoescape %}\r\n
\r\n\r\nLogin to VINCE to see the full details.
", + "locale": "en", + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:33.152Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 174, + "fields": { + "template_name": "service_account_created", + "subject": "Service Account Created", + "heading": "Service Account Created", + "plain_text": "Hello, \r\n\r\nThis is a courtesy e-mail to let you know that a service account was created for your organization. This account will have API access to your organization's case information.\r\n\r\nIf you did not initiate this change, please let us know as soon as possible.\r\n\r\nThank you,\r\n\r\n{{ team_signature }}", + "html": "Hello,
This is a courtesy e-mail to let you know that a service account was created for your organization. This account will have API access to your organization's case information.
\r\n\r\nIf you did not initiate this change, please let us know as soon as possible.\r\n
\r\n\r\n\r\nThank you,
\r\n\r\n{{team_signature}}\r\n
", + "locale": null, + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:33.197Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 175, + "fields": { + "template_name": "service_account_change", + "subject": "Service Account Change", + "heading": "Service Account API Key Change", + "plain_text": "Hello, \r\n\r\nThis is a courtesy e-mail to let you know that someone has generated a new API key for the VINCE service account associated with your organization.\r\n\r\nIf you did not initiate this change, please let us know as soon as possible.\r\n\r\nThank you,\r\n\r\n{{team_signature }}", + "html": "Hello,
This is a courtesy e-mail to let you know that someone has generated a new API key for the VINCE service account associated with your organization
\r\n\r\nIf you did not initiate this change, please let us know as soon as possible.\r\n
\r\n\r\n\r\nThank you,
\r\n\r\n{{ team_signature }}\r\n
", + "locale": null, + "body_only": false, + "user": null, + "modified": "2021-11-11T16:35:33.202Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 176, + "fields": { + "template_name": "user_verification", + "subject": "VINCE Verification", + "heading": "", + "plain_text": "Greetings,\r\n\r\nWe received a request from [EMAIL] to be associated with the [VENDOR] vendor contact within VINCE. We are reaching out to the team to ensure that this request is legitimate and that person can receive alerts on behalf of [VENDOR] before giving them access. Could a team member please confirm this? If approved, we can also make this user the administrator of the group so that they can handle future user requests and manage the team's access.\r\n\r\nRegards,\r\n\r\n[team_signature]", + "html": "", + "locale": "en", + "body_only": true, + "user": 1, + "modified": "2021-11-11T16:35:33.204Z" + } +}, +{ + "model": "vince.emailtemplate", + "pk": 177, + "fields": { + "template_name": "vendor_admin_user_request", + "subject": "VINCE Vendor User Maintenance Request", + "heading": "", + "plain_text": "Greetings--\r\n\r\nA user with email address [EMAIL] is asking to join the [VENDOR] group. Please add this user to your VINCE group if the user should have access, or please reply to let me know that the user should not receive access and I can convey that to the user.\r\n\r\nRegards,\r\n\r\n[team_signature]", + "html": "", + "locale": "en", + "body_only": true, + "user": 1, + "modified": "2021-11-11T16:35:33.207Z" + } +} +] diff --git a/vince/fixtures/TicketQueue.json b/vince/fixtures/TicketQueue.json new file mode 100644 index 0000000..bab06fe --- /dev/null +++ b/vince/fixtures/TicketQueue.json @@ -0,0 +1,67 @@ +[ +{ + "model": "vince.ticketqueue", + "pk": 1, + "fields": { + "title": "CR", + "slug": "cr", + "new_ticket_cc": null, + "updated_ticket_cc": null, + "default_owner": 1, + "queue_type": 2, + "from_email": "vince-email" + } +}, +{ + "model": "vince.ticketqueue", + "pk": 2, + "fields": { + "title": "Case", + "slug": "case", + "new_ticket_cc": null, + "updated_ticket_cc": null, + "default_owner": null, + "queue_type": 3, + "from_email": "vince-email" + } +}, +{ + "model": "vince.ticketqueue", + "pk": 3, + "fields": { + "title": "Vendor", + "slug": "vendor", + "new_ticket_cc": null, + "updated_ticket_cc": null, + "default_owner": 1, + "queue_type": 4, + "from_email": "vince-email" + } +}, +{ + "model": "vince.ticketqueue", + "pk": 4, + "fields": { + "title": "General", + "slug": "general", + "new_ticket_cc": null, + "updated_ticket_cc": null, + "default_owner": 1, + "queue_type": 1, + "from_email": "vince-email" + } +}, +{ + "model": "vince.ticketqueue", + "pk": 5, + "fields": { + "title": "Inbox", + "slug": "inbox", + "new_ticket_cc": null, + "updated_ticket_cc": null, + "default_owner": null, + "queue_type": 4, + "from_email": "vince-email" + } +} +] diff --git a/vince/fixtures/auth_group.json b/vince/fixtures/auth_group.json new file mode 100644 index 0000000..d90d9f1 --- /dev/null +++ b/vince/fixtures/auth_group.json @@ -0,0 +1,9 @@ +[ + { + "model": "auth.group", + "pk": 1, + "fields": { + "name": "vince" + } + } +] diff --git a/vince/fixtures/cwe_regular.json b/vince/fixtures/cwe_regular.json new file mode 100644 index 0000000..ad30e53 --- /dev/null +++ b/vince/fixtures/cwe_regular.json @@ -0,0 +1,129 @@ +{"examples": [ +"CWE-20 Improper Input Validation", +"CWE-129 Improper Validation of Array Index", +"CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')", +"CWE-1236 Improper Neutralization of Formula Elements in a CSV File", +"CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')", +"CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')", +"CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", +"CWE-88 Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')", +"CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')", +"CWE-91 XML Injection (aka Blind XPath Injection)", +"CWE-917 Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')", +"CWE-94 Improper Control of Generation of Code ('Code Injection')", +"CWE-116 Improper Encoding or Escaping of Output", +"CWE-838 Inappropriate Encoding for Output Context", +"CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer", +"CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')", +"CWE-125 Out-of-bounds Read", +"CWE-787 Out-of-bounds Write", +"CWE-824 Access of Uninitialized Pointer", +"CWE-200 Exposure of Sensitive Information to an Unauthorized Actor", +"CWE-203 Observable Discrepancy", +"CWE-209 Generation of Error Message Containing Sensitive Information", +"CWE-532 Insertion of Sensitive Information into Log File", +"CWE-269 Improper Privilege Management", +"CWE-287 Improper Authentication", +"CWE-290 Authentication Bypass by Spoofing", +"CWE-294 Authentication Bypass by Capture-replay", +"CWE-295 Improper Certificate Validation", +"CWE-306 Missing Authentication for Critical Function", +"CWE-307 Improper Restriction of Excessive Authentication Attempts", +"CWE-521 Weak Password Requirements", +"CWE-522 Insufficiently Protected Credentials", +"CWE-640 Weak Password Recovery Mechanism for Forgotten Password", +"CWE-798 Use of Hard-coded Credentials", +"CWE-311 Missing Encryption of Sensitive Data", +"CWE-312 Cleartext Storage of Sensitive Information", +"CWE-319 Cleartext Transmission of Sensitive Information", +"CWE-326 Inadequate Encryption Strength", +"CWE-327 Use of a Broken or Risky Cryptographic Algorithm", +"CWE-916 Use of Password Hash With Insufficient Computational Effort", +"CWE-330 Use of Insufficiently Random Values", +"CWE-331 Insufficient Entropy", +"CWE-335 Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)", +"CWE-338 Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)", +"CWE-345 Insufficient Verification of Data Authenticity", +"CWE-346 Origin Validation Error", +"CWE-347 Improper Verification of Cryptographic Signature", +"CWE-352 Cross-Site Request Forgery (CSRF)", +"CWE-354 Improper Validation of Integrity Check Value", +"CWE-924 Improper Enforcement of Message Integrity During Transmission in a Communication Channel", +"CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')", +"CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition", +"CWE-400 Uncontrolled Resource Consumption", +"CWE-770 Allocation of Resources Without Limits or Throttling", +"CWE-920 Improper Restriction of Power Consumption", +"CWE-404 Improper Resource Shutdown or Release", +"CWE-401 Missing Release of Memory after Effective Lifetime", +"CWE-459 Incomplete Cleanup", +"CWE-763 Release of Invalid Pointer or Reference", +"CWE-772 Missing Release of Resource after Effective Lifetime", +"CWE-436 Interpretation Conflict", +"CWE-444 Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')", +"CWE-610 Externally Controlled Reference to a Resource in Another Sphere", +"CWE-1021 Improper Restriction of Rendered UI Layers or Frames", +"CWE-384 Session Fixation", +"CWE-601 URL Redirection to Untrusted Site ('Open Redirect')", +"CWE-611 Improper Restriction of XML External Entity Reference", +"CWE-918 Server-Side Request Forgery (SSRF)", +"CWE-662 Improper Synchronization", +"CWE-667 Improper Locking", +"CWE-665 Improper Initialization", +"CWE-1188 Insecure Default Initialization of Resource", +"CWE-908 Use of Uninitialized Resource", +"CWE-909 Missing Initialization of Resource", +"CWE-668 Exposure of Resource to Wrong Sphere", +"CWE-134 Use of Externally-Controlled Format String", +"CWE-426 Untrusted Search Path", +"CWE-427 Uncontrolled Search Path Element", +"CWE-428 Unquoted Search Path or Element", +"CWE-552 Files or Directories Accessible to External Parties", +"CWE-669 Incorrect Resource Transfer Between Spheres", +"CWE-212 Improper Removal of Sensitive Information Before Storage or Transfer", +"CWE-434 Unrestricted Upload of File with Dangerous Type", +"CWE-494 Download of Code Without Integrity Check", +"CWE-565 Reliance on Cookies without Validation and Integrity Checking", +"CWE-829 Inclusion of Functionality from Untrusted Control Sphere", +"CWE-670 Always-Incorrect Control Flow Implementation", +"CWE-617 Reachable Assertion", +"CWE-672 Operation on a Resource after Expiration or Release", +"CWE-415 Double Free", +"CWE-416 Use After Free", +"CWE-613 Insufficient Session Expiration", +"CWE-674 Uncontrolled Recursion", +"CWE-776 Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')", +"CWE-682 Incorrect Calculation", +"CWE-131 Incorrect Calculation of Buffer Size", +"CWE-190 Integer Overflow or Wraparound", +"CWE-191 Integer Underflow (Wrap or Wraparound)", +"CWE-193 Off-by-one Error", +"CWE-369 Divide By Zero", +"CWE-697 Incorrect Comparison", +"CWE-704 Incorrect Type Conversion or Cast", +"CWE-681 Incorrect Conversion between Numeric Types", +"CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')", +"CWE-706 Use of Incorrectly-Resolved Name or Reference", +"CWE-178 Improper Handling of Case Sensitivity", +"CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')", +"CWE-59 Improper Link Resolution Before File Access ('Link Following')", +"CWE-732 Incorrect Permission Assignment for Critical Resource", +"CWE-276 Incorrect Default Permissions", +"CWE-281 Improper Preservation of Permissions", +"CWE-754 Improper Check for Unusual or Exceptional Conditions", +"CWE-252 Unchecked Return Value", +"CWE-273 Improper Check for Dropped Privileges", +"CWE-476 NULL Pointer Dereference", +"CWE-755 Improper Handling of Exceptional Conditions", +"CWE-834 Excessive Iteration", +"CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')", +"CWE-862 Missing Authorization", +"CWE-425 Direct Request ('Forced Browsing')", +"CWE-863 Incorrect Authorization", +"CWE-639 Authorization Bypass Through User-Controlled Key", +"CWE-913 Improper Control of Dynamically-Managed Code Resources", +"CWE-470 Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')", +"CWE-502 Deserialization of Untrusted Data", +"CWE-915 Improperly Controlled Modification of Dynamically-Determined Object Attributes", +"CWE-922 Insecure Storage of Sensitive Information" +]} diff --git a/vince/forms.py b/vince/forms.py new file mode 100644 index 0000000..64604b0 --- /dev/null +++ b/vince/forms.py @@ -0,0 +1,2954 @@ +######################################################################### +# VINCE +# +# Copyright 2022 Carnegie Mellon University. +# +# NO WARRANTY. THIS CARNEGIE MELLON UNIVERSITY AND SOFTWARE ENGINEERING +# INSTITUTE MATERIAL IS FURNISHED ON AN "AS-IS" BASIS. CARNEGIE MELLON +# UNIVERSITY MAKES NO WARRANTIES OF ANY KIND, EITHER EXPRESSED OR IMPLIED, +# AS TO ANY MATTER INCLUDING, BUT NOT LIMITED TO, WARRANTY OF FITNESS FOR +# PURPOSE OR MERCHANTABILITY, EXCLUSIVITY, OR RESULTS OBTAINED FROM USE OF THE +# MATERIAL. CARNEGIE MELLON UNIVERSITY DOES NOT MAKE ANY WARRANTY OF ANY KIND +# WITH RESPECT TO FREEDOM FROM PATENT, TRADEMARK, OR COPYRIGHT INFRINGEMENT. +# +# Released under a MIT (SEI)-style license, please see license.txt or contact +# permission@sei.cmu.edu for full terms. +# +# [DISTRIBUTION STATEMENT A] This material has been approved for public +# release and unlimited distribution. Please see Copyright notice for non-US +# Government use and distribution. +# +# Carnegie Mellon®, CERT® and CERT Coordination Center® are registered in the +# U.S. Patent and Trademark Office by Carnegie Mellon University. +# +# This Software includes and/or makes use of Third-Party Software each subject +# to its own license. +# +# DM21-1126 +######################################################################## +from datetime import timedelta, date +from django import forms +# from django_summernote.widgets import SummernoteWidget, SummernoteInplaceWidget +# from django.utils.translation import gettext, gettext_lazy as _, pgettext_lazy +from django.utils.translation import gettext, gettext_lazy as _ +from django_countries.widgets import CountrySelectWidget +from vince.lib import create_followup +from vince.lib import process_attachments, simple_merge, add_participant_vinny_case, add_coordinator_case, send_worker_email_all +from vince.mailer import send_newticket_mail, send_participant_email_notification +from django.conf import settings +from vinny.models import VTCaseRequest, CRFollowUp, VinceTrackAttachment, VinceAttachment, Case +# from django.utils import timezone +# from django.contrib.auth.forms import UserCreationForm +# from django.contrib.auth.models import User +from vince.models import * +from re import search +from django.core.exceptions import ValidationError +from vince.settings import DEFAULT_USER_SETTINGS, VULNOTE_TEMPLATE +from vince.permissions import get_user_gen_queue +import traceback +import os +from django.utils.encoding import smart_text +logger = logging.getLogger(__name__) +logger.setLevel(logging.DEBUG) + + + +class AllSearchForm(forms.Form): + searchbar = forms.CharField(max_length=100, label='Keyword(s)', widget=forms.TextInput(), required=False) + + +class RolesForm(forms.Form): + + assigned_to = forms.ChoiceField( + widget=forms.Select(attrs={'class': 'form-control'}), + choices=(), + required=False, + label=_('Assign a User'), + ) + + +class TeamSettingsForm(forms.Form): + + outgoing_email = forms.EmailField( + required=False, + label=_('Outgoing Email Address'), + widget=forms.TextInput(attrs={'class': 'form-control', 'readonly':'readonly'}), + help_text=_('This is the email address that will be used to send official case notifications ' + 'to VINCE users. Editing this field requires superuser permissions.'), + ) + + vulnote_template = forms.CharField( + widget=forms.Textarea(), + label=_('Vulnerability Note Template'), + initial=VULNOTE_TEMPLATE, + required=False + ) + + team_signature = forms.CharField( + widget=forms.Textarea(), + label=_('Email Signature'), + required=False + ) + + email_phone = forms.CharField( + label=_("Phone number in email footer"), + widget=forms.TextInput(attrs={'class': 'form-control', 'readonly':'readonly'}), + required=False, + help_text=_('Edit this in your team\'s public contact info in VINCEComm.'), + max_length=20 + ) + + email_email = forms.EmailField( + required=False, + label=_('Team email to use in email footer'), + help_text=_('Edit this in your team\'s Public Contact Info in VINCEComm.'), + widget=forms.TextInput(attrs={'class': 'form-control', 'readonly': 'readonly'}), + ) + + cna_email = forms.EmailField( + required=False, + label=_('Email to use for CVE assignment'), + help_text=('If not set, this will default to the team email field above, or the default VINCE email if team email is not set.'), + widget=forms.TextInput(attrs={'class':'form-control'}) + ) + + disclosure_link = forms.URLField( + required=False, + label=_('Link to disclosure guidance'), + help_text=_('Disclosure guidance is presented to case members at first view of case'), + ) + + def __init__(self, *args, **kwargs): + super(TeamSettingsForm, self).__init__(*args, **kwargs) + #if setting is not set for this user, set to default + + +class PreferencesForm(forms.Form): + + case_template = forms.ChoiceField( + widget = forms.Select(attrs={'class': 'form-control'}), + choices = (), + required = False, + label=_('Default Case Template'), + help_text=_('All new cases created by you will use this case template.') + ) + + new_tickets = forms.MultipleChoiceField( + choices=[], + required=False, + widget=forms.CheckboxSelectMultiple(attrs={'class': 'ul_nobullet'})) + + updated_tickets = forms.MultipleChoiceField( + choices=[], + required=False, + widget=forms.CheckboxSelectMultiple(attrs={'class': 'ul_nobullet'})) + + email_case_changes = forms.MultipleChoiceField( + choices=[(1, 'Immediately'), (2, 'Once Daily')], + widget=forms.CheckboxSelectMultiple(attrs={'class': 'ul_nobullet'}), + required=False) + + email_new_posts = forms.MultipleChoiceField( + choices=[(1, 'Immediately'), (2, 'Once Daily')], + widget=forms.CheckboxSelectMultiple(attrs={'class': 'ul_nobullet'}), + required=False) + + email_new_messages = forms.MultipleChoiceField( + choices=[(1, 'Immediately'), (2, 'Once Daily')], + widget=forms.CheckboxSelectMultiple(attrs={'class': 'ul_nobullet'}), + required=False) + + email_new_status = forms.MultipleChoiceField( + choices=[(1, 'Immediately'), (2, 'Once Daily')], + widget=forms.CheckboxSelectMultiple(attrs={'class': 'ul_nobullet'}), + required=False) + + email_tasks = forms.MultipleChoiceField( + choices=[(1, 'Immediately'), (2, 'Once Daily')], + widget=forms.CheckboxSelectMultiple(attrs={'class': 'ul_nobullet'}), + required=False) + + triage_role = forms.BooleanField(required=False) + + login_view_ticketlist = forms.BooleanField( + label=_('Show Ticket List on Login?'), + help_text=_('Display the ticket list upon login? Otherwise, the dashboard is shown.'), + required=False, + ) + + email_on_ticket_change = forms.BooleanField( + label=_('E-mail me on ticket change?'), + required=False) + + email_on_ticket_assign = forms.BooleanField( + label=_('E-mail me when assigned a ticket?'), + required=False) + + tickets_per_page = forms.ChoiceField( + label=_('Number of tickets to show per page'), + help_text=_('How many tickets do you want to see on the Ticket List page?'), + required=False, + choices=((10, '10'), (25, '25'), (50, '50'), (100, '100')), + ) + + email_preference = forms.ChoiceField( + choices=[(1, 'HTML'), (2, 'Plain Text')], + label='Which email format do you prefer?', + widget=forms.RadioSelect(attrs={'class':'ul_nobullet horizontal_bullet'}), + required=False) + + + reminder_tickets = forms.BooleanField( + label=_('Remind me about tickets open > 14 days?'), + required=False) + + reminder_publication = forms.BooleanField( + label=_('Remind me about case expected publish dates?'), + required=False) + + reminder_vendor_views = forms.BooleanField( + label=_('Remind me about vendors that have not viewed a case?'), + required=False) + + reminder_vendor_status = forms.BooleanField( + label=_('Remind me about vendors that have not submitted status?'), + required=False) + + reminder_cases = forms.BooleanField( + label=_('Remind me about active cases that have not been modified > 14 days?'), + required=False) + + def __init__(self, *args, **kwargs): + super(PreferencesForm, self).__init__(*args, **kwargs) + #if setting is not set for this user, set to default + logger.debug("THIS IS THE INITIAL") + logger.debug(self.initial) + if self.initial.get('templates'): + self.fields['case_template'].choices = self.initial.get('templates') + + for x,y in DEFAULT_USER_SETTINGS.items(): + if self.initial.get(x) is None: + if self.fields.get(x): + self.fields[x].initial=y + else: + if self.initial.get(x) == True: + #a lot of preferences have changed from T/F to multiple choice + if self.fields.get(x): + self.fields[x].initial = y + + + +class CreateVulNote(forms.Form): + + content = forms.CharField( + widget=forms.Textarea(), + label=_('Contents'), + required=False, + initial=VULNOTE_TEMPLATE + ) + + title = forms.CharField( + label=_('Title'), + ) + + summary = forms.CharField( + label=_('Revision comment'), + help_text=_("Write a brief message for the vulnote history (change)log."), + initial=_('Initial vul note.'), + required = False) + + references = forms.CharField( + widget=forms.Textarea(attrs={'rows': 4}), + label=_('References'), + required=False, + help_text=_("References should be valid URLs separated by a new line.")) + + def __init__(self, *args, **kwargs): + self.case = kwargs.pop("case") + self.references = kwargs.pop('references') + super(CreateVulNote, self).__init__(*args, **kwargs) + self.fields['title'].initial = self.case.title + self.fields['content'].initial = f"{VULNOTE_TEMPLATE}" + self.fields['references'].initial = "\r\n".join(self.references) + if self.case.team_owner: + if self.case.team_owner.groupsettings.vulnote_template: + if self.case.get_assigned_to: + self.fields['content'].initial = f"{self.case.team_owner.groupsettings.vulnote_template}This document was written by {self.case.get_assigned_to}.\r\n" + else: + self.fields['content'].initial = f"{self.case.team_owner.groupsettings.vulnote_template}.\r\n" + elif self.case.get_assigned_to: + self.fields['content'].initial = f"{VULNOTE_TEMPLATE}This document was written by {self.case.get_assigned_to}.\r\n" + +class VulNoteReviewForm(forms.Form): + content = forms.CharField( + widget=forms.Textarea(), + label=_('Contents') + ) + + feedback = forms.CharField( + widget=forms.Textarea(attrs={'rows': 4}), + label=_('Feedback'), + required=False, + help_text=_("General feedback/comments about this vulnerability note.")) + + current_revision = forms.IntegerField( + required=False, + widget=forms.HiddenInput() + ) + + completed = forms.BooleanField( + required=False, + widget=forms.HiddenInput() + ) + + approved = forms.BooleanField( + required=False, + widget=forms.HiddenInput() + ) + + +class EditVulNote(forms.Form): + content = forms.CharField( + widget=forms.Textarea(), + label=_('Contents') + ) + + title = forms.CharField( + label=_('Title'), + ) + + summary = forms.CharField( + label=_('Revision comment'), + help_text=_("Write a brief message for the vulnote history (change)log."), + required = False) + + current_revision = forms.IntegerField( + required=False, + widget=forms.HiddenInput() + ) + + references = forms.CharField( + widget=forms.Textarea(attrs={'rows': 4}), + label=_('References'), + required=False, + help_text=_("References should be valid URLs separated by a new line.")) + + + def __init__(self, request, current_revision, *args, **kwargs): + self.request = request + self.no_clean = kwargs.pop('no_clean', False) + self.preview = kwargs.pop('preview', False) + self.initial_revision = current_revision + self.presumed_revision = None + + if current_revision: + initial = {'content': current_revision.content, + 'title': current_revision.title, + 'references': current_revision.references, + 'current_revision': current_revision.id} + initial.update(kwargs.get('initial', {})) + + # Manipulate any data put in args[0] such that the current_revision + # is reset to match the actual current revision. + data = None + if len(args) > 0: + data = args[0] + args = args[1:] + if data is None: + data = kwargs.get('data', None) + if data: + self.presumed_revision = data.get('current_revision', None) + if not str( + self.presumed_revision) == str( + self.initial_revision.id): + newdata = {} + for k, v in data.items(): + newdata[k] = v + newdata['current_revision'] = self.initial_revision.id + newdata['content'] = simple_merge( + self.initial_revision.content, + data.get( + 'content', + "")) + newdata['title'] = current_revision.title + kwargs['data'] = newdata + else: + # Always pass as kwarg + kwargs['data'] = data + + kwargs['initial'] = initial + + super().__init__(*args, **kwargs) + + def clean(self): + """ + Validates form data by checking that no new revisions have been created + while user attempted to edit + """ + cd = super().clean() + logger.debug(cd) + if self.no_clean or self.preview: + return cd + if not str(self.initial_revision.id) == str(self.presumed_revision): + raise forms.ValidationError( + gettext('While you were editing, someone else changed the revision.')) + if ('title' in cd) and cd['title'] == self.initial_revision.title and cd['content'] == self.initial_revision.content and cd['references'] == self.initial_revision.references: + raise forms.ValidationError(gettext('No changes made. Nothing to save.')) + return cd + + +class NotificationForm(forms.Form): + title = forms.CharField( + max_length=200, + help_text=_('The subject of the email'), + ) + + email_template = forms.ChoiceField( + choices=(), + label="Choose an email template to send to the participant(s)", + required=False) + + email_body = forms.CharField( + widget=forms.Textarea(attrs={'class': 'form-control'}), + label=_('Body of Email Notification'), + help_text=_('This email template (participant_notify_newcase) already contains a greeting, a signature, and a link to the case.'), + initial=settings.STANDARD_PARTICIPANT_EMAIL, + required=True, + ) + + class Meta: + fields = ('title', 'email_template', 'email_body') + + def save(self, cp): + if cp.group: + contact = Contact.objects.filter(vendor_name=cp.user_name).first() + if contact: + if cp.coordinator: + add_coordinator_case(cp.case, contact, cp) + followup = CaseAction(case = cp.case, + title="Notified Coordinator Group: %s" % cp.user_name, + date=timezone.now(), + user = cp.added_by, + action_type = 1) + followup.save() + else: + followup = add_participant_vinny_case(cp.case, cp) + #get email + emails = contact.get_official_emails() + followup.comment = self.cleaned_data['email_body'] + followup.save() + for email in emails: + send_participant_email_notification([email], cp.case, + self.cleaned_data['title'], + self.cleaned_data['email_body']) + else: + vcuser = User.objects.using('vincecomm').filter(username=cp.user_name).first() + if vcuser: + send_participant_email_notification([cp.user_name], cp.case, + self.cleaned_data['title'], + self.cleaned_data['email_body']) + followup = add_participant_vinny_case(cp.case, cp) + followup.comment = self.cleaned_data['email_body'] + followup.save() + else: + send_participant_email_notification([cp.user_name], cp.case, + self.cleaned_data['title'], + self.cleaned_data['email_body']) + followup = add_participant_vinny_case(cp.case, cp) + followup.comment = self.cleaned_data['email_body'] + followup.save() + cp.status = "Notified" + cp.added_to_case = timezone.now() + cp.save() + + + + +class VendorNotificationForm(forms.ModelForm): + email_body = forms.CharField( + widget=forms.Textarea(), + label=_('Email Body'), + help_text=_('This email template (vendor_notify_newcase) already contains a greeting (Hello), the team signature (configurable in team settings), and a link to the case.'), + initial=settings.STANDARD_VENDOR_EMAIL, + required=True) + email_template = forms.ChoiceField( + choices=(), + label="Choose an email template to send to the vendor(s)", + required=False) + + class Meta: + model = VendorNotificationEmail + fields = ('subject', 'email_template', 'email_body') + + def __init__(self, *args, **kwargs): + super(VendorNotificationForm, self).__init__(*args, **kwargs) + + def save(self, user=None): + + email = VendorNotificationEmail( + subject=self.cleaned_data['subject'], + email_body = self.cleaned_data['email_body']) + email.save() + + return email + + +class ShareVulNoteForm(forms.Form): + content = forms.CharField( + label="Post Content", + required=False, + widget=forms.Textarea(attrs={'class': 'form-control'}) + ) + + +class NewPostForm(forms.ModelForm): + + def __init__(self, *args, **kwargs): + super(NewPostForm,self).__init__(*args, **kwargs) + self.fields['version'].required=False + self.fields['content'].required=False + + class Meta: + model = VendorNotificationContent + fields = ('content', 'version', ) + widgets = { + 'content': forms.Textarea(attrs={'class': 'form-control white-space:pre'}), + 'version': forms.HiddenInput() + + } + + +class UploadFileForm(forms.ModelForm): + file = forms.FileField( + required=False, + label=_('Upload file'), + widget=forms.FileInput(attrs={'class':'vulupload'}) + ) + + case_id = forms.CharField( + max_length=500, + ) + + pathname = forms.CharField( + max_length=500, + ) + + def __init__(self, *args, **kwargs): + self.user = kwargs.pop("user") + super(UploadFileForm, self).__init__(*args, **kwargs) + + class Meta: + model = VinceFile + fields = ('file',) + + def save(self): + case = int(self.cleaned_data['case_id']) + + case = VulnerabilityCase.objects.filter(id=case).first() + + pathname = self.cleaned_data['pathname'] + + file = self.cleaned_data['file'] + + vulnote = False + if 'notify' in pathname: + pass + else: + vulnote = True + + logger.debug("IN FILE UPLOAD SAVE") + #create the vincecommattachment + if file.size: + filename = smart_text(file.name) + logger.debug(filename) + try: + mime_type = file.content_type + except: + mime_type = mimetypes.guess_type(filename, strict=False)[0] + if not(mime_type): + mime_type = 'application/octet-stream' + + att = VinceAttachment( + file=file, + filename=os.path.basename(filename), + mime_type=mime_type, + size=file.size, + ) + att.save(using='vincecomm') + + vc_case = Case.objects.filter(vuid=case.vuid).first() + + attach = VinceTrackAttachment( + file = att, + vulnote=vulnote, + case=vc_case) + attach.save(using='vincecomm') + + vf = VinceFile(user=self.user, + case = case, + filename=att.filename, + vulnote = vulnote, + comm_id=attach.id) + vf.save() + + return vf + return None + + + +class AddArtifactForm(forms.ModelForm): + taggles = forms.CharField( + max_length=200, + label='Tag(s)', + required=False) + + attachment = forms.FileField( + required=False, + label=_('Attach File'), + help_text=_('You can attach a file such as a document or screenshot to this ticket.'), + widget=forms.FileInput(attrs={'class':'vulupload'}) + ) + is_file = forms.ChoiceField( + choices=[(True, 'Yes'), (False, 'No')], + label='Is this a file?', + widget=forms.RadioSelect(attrs={'class':'ul_nobullet horizontal_bullet'}), + required=False) + + def __init__(self, *args, **kwargs): + super(AddArtifactForm, self).__init__(*args, **kwargs) + self.initial['is_file'] = False + + def _attach_files_to_follow_up(self, followup): + files = self.cleaned_data['attachment'] + logger.debug(files) + + if files: + files = process_attachments(followup, [files]) + return files + + class Meta: + model = Artifact + fields = ('is_file', 'attachment', 'type', 'title', 'value', 'description', 'taggles') +# exclude = ('user', 'date_added', 'date_modified') + widgets = {'description': forms.Textarea(attrs={'class': 'form-control', 'rows': 4}), + 'value': forms.Textarea(attrs={'class':'form-control', 'rows': 4})} + + def save(self, ticket=None, case=None, user=None): + """ + Writes and returns an Artifact() object + """ + if ticket: + artifact = TicketArtifact(type = self.cleaned_data['type'], + title = self.cleaned_data['title'], + value = self.cleaned_data['value'], + description = self.cleaned_data['description'], + ticket=ticket) + elif case: + artifact = CaseArtifact(type = self.cleaned_data['type'], + title = self.cleaned_data['title'], + value = self.cleaned_data['value'], + description = self.cleaned_data['description'], + case=case) + + artifact.user = user + artifact.save() + + if ticket: + followup = create_followup(ticket=ticket, + title="Added artifact", + comment=self.cleaned_data['title'], + artifact=artifact, + user=user) + followup.save() + + # Todo update this with action type. + else: + followup = CaseAction(case = case, + title="Added artifact", + date=timezone.now(), + comment=self.cleaned_data['title'], + artifact=artifact, + action_type = 1, + user=user) + followup.save() + + files = self._attach_files_to_follow_up(followup) + + + return artifact + +class EditArtifactForm(forms.ModelForm): + taggles = forms.CharField( + max_length=200, + label='Tag(s)', + required=False) + + class Meta: + model = Artifact + exclude = ('user', 'date_added', 'date_modified', 'added_to_note', 'added_to_post') + widgets = {'description': forms.Textarea(attrs={'class': 'form-control'}),} + +class CaseCommunicationsFilterForm(forms.Form): + keyword = forms.CharField( + max_length=100, + label='Keyword(s)', + widget=forms.TextInput(attrs={'placeholder':'Keyword search'}), + required=False) + vendor = forms.MultipleChoiceField( + choices=(), + required=False, + widget=forms.CheckboxSelectMultiple(attrs={'class': 'ul_nobullet'}) + ) + participants = forms.MultipleChoiceField( + choices = (), + required=False, + widget=forms.CheckboxSelectMultiple(attrs={'class': 'ul_nobullet'}) + ) + communication_type = forms.MultipleChoiceField( + choices=CaseAction.ACTION_TYPE, + required=False, + widget=forms.CheckboxSelectMultiple(attrs={'class': 'ul_nobullet'}) + ) + datestart = forms.DateField(required=False) + dateend = forms.DateField(required=False) + timesort = forms.BooleanField(required=False) + + def __init__(self, *args, **kwargs): + super(CaseCommunicationsFilterForm, self).__init__(*args, **kwargs) + self.fields['dateend'].initial = timezone.now + +class CaseFilterForm(forms.Form): + + + STATUS_FILTER_CHOICES = ( + (VulnerabilityCase.ACTIVE_STATUS, _('Active')), + (VulnerabilityCase.INACTIVE_STATUS, _('Inactive')), + (3, _('Published')), + (4, _('Unpublished')), + ) + + wordSearch = forms.CharField( + max_length=100, + label='Keyword(s)', + widget=forms.TextInput(attrs={'placeholder':'Keyword/Tag search'}), + required=False) + status = forms.MultipleChoiceField( + choices=STATUS_FILTER_CHOICES, + required=False, + widget=forms.CheckboxSelectMultiple(attrs={'class': 'ul_nobullet'})) + + team = forms.MultipleChoiceField( + choices=(), + required=False, + widget=forms.CheckboxSelectMultiple(attrs={'class': 'ul_nobullet'}) + ) + + tag = forms.CharField( + max_length=50, + label='Tag', + required=False, + widget=forms.HiddenInput()) + + page = forms.CharField(max_length=5, + required=False) + + datestart = forms.DateField(required=False) + dateend = forms.DateField(required=False) + owner = forms.MultipleChoiceField( + choices=(), + required=False, + widget=forms.CheckboxSelectMultiple(attrs={'class': 'ul_nobullet'})) + + def __init__(self, *args, **kwargs): + super(CaseFilterForm, self).__init__(*args, **kwargs) + self.fields['dateend'].initial = timezone.now + +class ActivityFilterForm(forms.Form): + wordSearch = forms.CharField( + max_length=100, + label='Keyword(s)', + widget=forms.TextInput(attrs={'placeholder':'Keyword search'}), + required=False) + user = forms.MultipleChoiceField( + choices = (), + required=False, + widget=forms.CheckboxSelectMultiple(attrs={'class': 'ul_nobullet'}) + ) + page = forms.CharField(max_length=5, + required=False) + datestart = forms.DateField(required=False) + dateend = forms.DateField(required=False) + + def __init__(self, *args, **kwargs): + super(ActivityFilterForm, self).__init__(*args, **kwargs) + self.fields['dateend'].initial = timezone.now + now = timezone.now() + self.fields['datestart'].initial = now - timedelta(days=7) + +class TriageFilterForm(forms.Form): + wordSearch = forms.CharField( + max_length=100, + label='Keyword(s)', + widget=forms.TextInput(attrs={'placeholder':'Keyword search'}), + required=False) + queue = forms.MultipleChoiceField( + choices=(), + required=False, + widget=forms.CheckboxSelectMultiple(attrs={'class': 'ul_nobullet'}) + ) + page = forms.CharField(max_length=5, + required=False) + datestart = forms.DateField(required=False) + dateend = forms.DateField(required=False) + + def __init__(self, *args, **kwargs): + super(TriageFilterForm, self).__init__(*args, **kwargs) + self.fields['dateend'].initial = timezone.now + +class TicketFilterForm(forms.Form): + wordSearch = forms.CharField( + max_length=100, + label='Keyword(s)', + widget=forms.TextInput(attrs={'placeholder':'Keyword/Tag search'}), + required=False) + queue = forms.MultipleChoiceField( + choices=(), + required=False, + widget=forms.CheckboxSelectMultiple(attrs={'class': 'ul_nobullet'}) + ) + team = forms.MultipleChoiceField( + choices=(), + required=False, + widget=forms.CheckboxSelectMultiple(attrs={'class': 'ul_nobullet'}) + ) + + case = forms.MultipleChoiceField( + choices=(), + required=False, + widget=forms.CheckboxSelectMultiple(attrs={'class': 'ul_nobullet'}) + ) + tag = forms.CharField( + max_length=50, + label='Tag', + required=False, + widget=forms.HiddenInput()) + + page = forms.CharField(max_length=5, + required=False) + priority = forms.MultipleChoiceField( + choices=Ticket.PRIORITY_CHOICES, + required=False, + widget=forms.CheckboxSelectMultiple(attrs={'class': 'ul_nobullet'})) + status = forms.MultipleChoiceField( + choices=Ticket.STATUS_CHOICES, + required=False, + widget=forms.CheckboxSelectMultiple(attrs={'class': 'ul_nobullet'})) + datestart = forms.DateField(required=False) + dateend = forms.DateField(required=False) + owner = forms.MultipleChoiceField( + choices=(), + required=False, + widget=forms.CheckboxSelectMultiple(attrs={'class': 'ul_nobullet'})) + + def __init__(self, *args, **kwargs): + super(TicketFilterForm, self).__init__(*args, **kwargs) + self.fields['dateend'].initial = timezone.now + + +#eventually add a create structured vul note... + +class AbstractTicketForm(forms.Form): + """ + Contain all the common code and fields between "TicketForm" and + "PublicTicketForm". This Form is not intended to be used directly. + """ + + queue = forms.ChoiceField( + widget=forms.Select(attrs={'class': 'form-control'}), + label=_('Queue'), + required=True, + choices=() + ) + + title = forms.CharField( + max_length=200, + required=True, + widget=forms.TextInput(attrs={'class': 'form-control'}), + label=_('Summary/Title'), + ) + + body = forms.CharField( + widget=forms.Textarea(attrs={'class': 'form-control'}), + label=_('Description'), + required=True, + help_text=_('Please be as descriptive as possible and include all details'), + ) + + priority = forms.ChoiceField( + widget=forms.Select(attrs={'class': 'form-control'}), + choices=Ticket.PRIORITY_CHOICES, + required=True, + initial='3', + label=_('Priority'), + help_text=_("Please select a priority carefully. If unsure, leave it as '3'."), + ) + + due_date = forms.DateTimeField( + widget=forms.TextInput(attrs={'class': 'form-control', 'autocomplete': 'off'}), + required=False, + label=_('Due on'), + ) + + attachment = forms.FileField( + required=False, + label=_('Attach File'), + help_text=_('You can attach a file such as a document or screenshot to this ticket.'), + widget=forms.FileInput(attrs={'class':'vulupload'}) + ) + + def _create_ticket(self): + queue = TicketQueue.objects.get(id=int(self.cleaned_data['queue'])) + ticket = Ticket(title=self.cleaned_data['title'], + submitter_email=self.cleaned_data['submitter_email'], + created=timezone.now(), + status=Ticket.OPEN_STATUS, + queue=queue, + description=self.cleaned_data['body'], + priority=self.cleaned_data['priority'], + due_date=self.cleaned_data['due_date'], + ) + return ticket, queue + + def _create_follow_up(self, ticket, title, user=None): + followup = FollowUp(ticket=ticket, + title=title, + date=timezone.now(), + comment=self.cleaned_data['body'], + ) + if user: + followup.user = user + return followup + + def _attach_files_to_follow_up(self, followup): + files = self.cleaned_data['attachment'] + logger.debug(f"{self.__class__.__name__}: In _attach_files_to_follow_up. Files = {files}") + if files: + files = process_attachments(followup, [files]) + return files + + + +class TicketForm(AbstractTicketForm): + """ + Ticket Form creation for registered users. + """ + submitter_email = forms.EmailField( + required=False, + label=_('Submitter E-Mail Address'), + widget=forms.TextInput(attrs={'class': 'form-control'}), + help_text=_('This e-mail address will receive copies of all public ' + 'updates to this ticket.'), + ) + + assigned_to = forms.ChoiceField( + widget=forms.Select(attrs={'class': 'form-control'}), + choices=(), + required=False, + label=_('Assign a User'), + help_text=_('If you select an owner other than yourself, they\'ll be ' + 'e-mailed details of this ticket immediately.'), + ) + + case = forms.CharField( + max_length=250, + label=_('Case'), + required=False, + help_text=_(f'If this ticket is associated with a specific Case, add it here. [{settings.CASE_IDENTIFIER}nnnnnn]'), + ) + + role = forms.ChoiceField( + choices=(), + label='Which role would you like to assign to this ticket?', + widget=forms.RadioSelect(attrs={'class':'ul_nobullet'}), + required=False) + + vulnote_approval = forms.IntegerField(required=False, widget=forms.HiddenInput()) + + def __init__(self, *args, request=None, **kwargs): + """ + Add any custom fields that are defined to the form. + """ + super(TicketForm, self).__init__(*args, **kwargs) + self.request = request + + + def clean_case(self): + data = self.cleaned_data['case'] + if data in [None, '', 'None']: + return + else: + if data.startswith(settings.CASE_IDENTIFIER): + data = data[len(settings.CASE_IDENTIFIER):] + try: + case = VulnerabilityCase.objects.get(vuid=data) + return case + except: + raise forms.ValidationError("Invalid Case Selection") + + def save(self, user=None): + """ + Writes and returns a Ticket() object + """ + + logger.debug(f"{self.__class__.__name__} save. Attachment: {self.cleaned_data['attachment']}") + ticket, queue = self._create_ticket() + if self.cleaned_data['assigned_to']: + try: + u = User.objects.get(id=self.cleaned_data['assigned_to']) + ticket.assigned_to = u + except User.DoesNotExist: + ticket.assigned_to = None + ticket.save() + + + if self.cleaned_data['case']: + case = self.cleaned_data['case'] + ticket.case = case + ticket.save() + if self.cleaned_data['vulnote_approval']: + vulnote = VulNote.objects.filter(case=case).first() + if vulnote: + vulnote.ticket_to_approve = ticket + vulnote.save() + # create dependency + dep = CaseDependency(case=case, depends_on=ticket) + dep.save() + + if self.cleaned_data['assigned_to']: + title = _('Ticket Opened & Assigned to %(name)s') % { + 'name': ticket.get_assigned_to or _("- \
+
- Minimum length is 8 characters \ +
- Maximum length is 50 characters \ +
- Requires at least 1 number \ +
- Requires at least 1 special character ("+" and "=" don\'t count) \ +
- Requires uppercase letters \ +
- Requires lowercase letters \ +
{settings.CASE_IDENTIFIER}{x.case.vuid} Changes
- '
+ else:
+ text = text + f'{settings.CASE_IDENTIFIER}{x.case.vuid} Changes\r\n---------------\r\n'
+
+ # get notifications for each case
+ notes = n.filter(case=x.case).values_list('action_type').order_by('action_type').annotate(count=Count('action_type')).order_by('-count')
+ logger.debug(notes)
+ for y in notes:
+ if y[0] == 1:
+ ntext = f'{y[1]} changes to the case'
+ elif y[0] == 2:
+ last_viewed = CaseViewed.objects.filter(user__username=user.username, case__vuid=x.case.vuid).first()
+ if last_viewed:
+ unread = n.filter(case=x.case, action_type=2, action__date__gt=last_viewed.date_viewed).count()
+ ntext = f'{y[1]} new posts ({unread} Unread)'
+ else:
+ ntext = f'{y[1]} new posts ({y[1]} Unread)'
+ elif y[0] == 3:
+ msgs = n.filter(case=x.case, action_type=3, followup__ticket__status__in=[Ticket.OPEN_STATUS, Ticket.REOPENED_STATUS, Ticket.IN_PROGRESS_STATUS]).count()
+ ntext = f'{y[1]} new messages ({msgs} open)'
+ elif y[0] == 4:
+ opentix = n.filter(case=x.case, action_type=4, followup__ticket__status__in=[Ticket.OPEN_STATUS, Ticket.REOPENED_STATUS, Ticket.IN_PROGRESS_STATUS]).count()
+ ntext = f'{y[1]} vendor status updates ({opentix} require approval)'
+ else:
+ opentix = n.filter(case=x.case, action_type__in=[5,6,7,8], followup__ticket__status__in=[Ticket.OPEN_STATUS, Ticket.REOPENED_STATUS, Ticket.IN_PROGRESS_STATUS]).distinct('followup__ticket__id').count()
+ ntext = f'{y[1]} new tickets in the case ({opentix} OPEN)'
+
+ if html:
+ text = text + f'
- {ntext} ' + else: + text = text + f'{ntext}\r\n' + + if html: + text = text + "
')) + + + html_part = from_string( + "{%% extends '%s' %%}{%% block title %%}" + "%s" + "{%% endblock %%}{%% block content %%}%s{%% endblock %%}" + "{%% block phone %%}%s{%% endblock %%}{%% block email %%}%s{%% endblock %%}" % + (email_html_base_file, t.heading, t.html, context['team']['phone'], context['team']['email']) + ).render(context) + + if isinstance(recipients, str): + if recipients.find(','): + recipients = recipients.split(',') + elif type(recipients) != list: + recipients = [recipients] + + if sender == None: + sender = f"{settings.DEFAULT_VISIBLE_NAME} <{settings.DEFAULT_FROM_EMAIL}>" + + if replyto: + #if replyto, add default reply-to-email and headers + #this is usually an auto-notification + msg = EmailMultiAlternatives(subject_part, text_part, + sender or settings.DEFAULT_FROM_EMAIL, + recipients, bcc=bcc, + reply_to=[settings.DEFAULT_REPLY_TO_EMAIL], + headers=settings.DEFAULT_EMAIL_HEADERS) + else: + msg = EmailMultiAlternatives(subject_part, text_part, + sender or settings.DEFAULT_FROM_EMAIL, + recipients, bcc=bcc) + if html: + msg.attach_alternative(html_part, "text/html") + + if files: + for filename, filefield in files: + mime = mimetypes.guess_type(filename) + if mime[0] is not None and mime[0] == "text/plain": + with open(filefield.path, 'r') as attachedfile: + content = attachedfile.read() + msg.attach(filename, content) + else: + if six.PY3: + msg.attach_file(filefield.path) + else: + with open(filefield.path, 'rb') as attachedfile: + content = attachedfile.read() + msg.attach(filename, content) + + logger.debug('Sending email using template {} with subject "{}" to {!r}'.format(template_name, subject_part, recipients)) + + try: + return msg.send() + + except SMTPException as e: + logger.exception('SMTPException raised while sending email to {}'.format(recipients)) + logger.debug('SMTPException raised while sending email to {}'.format(recipients)) + if not fail_silently: + raise e + return 0 + + +def get_public_phone(contact): + #lookup vincecomm contact + vc_contact = VinceCommContact.objects.filter(uuid=contact.uuid).first() + if vc_contact: + phone = vc_contact.get_phone_number() + if phone != "": + return phone + return settings.DEFAULT_PHONE_NUMBER + + +def get_public_email(contact): + #lookup vincecomm contact + vc_contact = VinceCommContact.objects.filter(uuid=contact.uuid).first() + if vc_contact: + email = vc_contact.get_list_email() + if email != "": + return email + return settings.DEFAULT_REPLY_EMAIL + +def team_template_context(team): + #does this team have settings + context = {} + try: + if team.groupsettings.team_signature: + context['team_signature'] = team.groupsettings.team_signature + else: + context['team_signature'] = settings.DEFAULT_EMAIL_SIGNATURE + + context['phone'] = get_public_phone(team.groupsettings.contact) + context['email'] = get_public_email(team.groupsettings.contact) + except: + context['phone'] = context.get('phone', settings.DEFAULT_PHONE_NUMBER) + context['email'] = context.get('email', settings.DEFAULT_REPLY_EMAIL) + context['team_signature'] = context.get('team_signature', settings.DEFAULT_EMAIL_SIGNATURE) + return context + +def safe_template_context(ticket): + """ + Return a dictionary that can be used as a template context to render + comments and other details with ticket or queue parameters. Note that + we don't just provide the Ticket & Queue objects to the template as + they could reveal confidential information. Just imagine these two options: + * {{ ticket.queue.email_box_password }} + * {{ ticket.assigned_to.password }} + Ouch! + The downside to this is that if we make changes to the model, we will also + have to update this code. Perhaps we can find a better way in the future. + """ + + context = { + 'queue': queue_template_context(ticket.queue), + 'ticket': ticket_template_context(ticket), + 'team': team_template_context(ticket.queue.team) + } + + context['ticket']['queue'] = context['queue'] + + return context + + +def safe_case_context(case, action=None): + context = { + 'case': case_template_context(case), + 'team': team_template_context(case.team_owner) + } + + if action: + context.update({ + 'action': caseaction_template_context(action) + }) + + return context + +def queue_template_context(queue): + context = {} + + for field in ('title', 'slug', 'email_address', 'from_address'): + attr = getattr(queue, field, None) + if callable(attr): + context[field] = attr() + else: + context[field] = attr + + return context + + +def ticket_template_context(ticket): + context = {} + + for field in ('title', 'created', 'modified', 'submitter_email', + 'status', 'get_status_display', 'on_hold', 'description', + 'resolution', 'priority', 'get_priority_display', + 'last_escalation', 'ticket', 'ticket_for_url', + 'get_status', 'ticket_url', 'staff_url', '_get_assigned_to', + 'case' + ): + attr = getattr(ticket, field, None) + if callable(attr): + context[field] = '%s' % attr() + else: + context[field] = attr + context['assigned_to'] = context['_get_assigned_to'] + + return context + +def case_template_context(case): + context = {} + + for field in ('vuid', 'created', 'modified', 'on_hold', 'status', + 'summary', 'owner', 'case_request', 'product_name', + 'product_version', 'title', 'due_date', 'template', + 'case_for_url', 'get_status', 'vu_vuid', 'vutitle', + '_get_assigned_to' + ): + attr = getattr(case, field, None) + if callable(attr): + context[field] = '%s' % attr() + else: + context[field] = attr + + context['assigned_to'] = context['_get_assigned_to'] + #logger.debug(context) + return context + +def caseaction_template_context(action): + context = {} + + for field in ('vendor', 'notification', 'post', 'date', 'last_edit', + 'title', 'comment', 'user', 'new_status', 'artifact' + ): + attr = getattr(action, field, None) + if callable(attr): + context[field] = '%s' % attr() + else: + context[field] = attr + + return context + + +def send_approval_email(contact, case): + context = safe_case_context(case, None) + send_case_mail("vendor_approve_stmt", context, contact.get_official_emails()) + +def send_vendor_approval_emails(contacts, case): + for contact in contacts: + contact = Contact.objects.filter(id=contact).first() + send_approval_email(contact, case) + +def send_vendor_email_notification(contacts, case, subject, body): + context = safe_case_context(case, None) + + context['body'] = mark_safe(body) + context['subject'] = subject + + for contact in contacts: + contact = Contact.objects.filter(id=contact).first() + # don't send inactive contacts emails + if contact.active: + send_case_mail("vendor_notify_newcase", context, contact.get_official_emails()) + +def send_participant_email_notification(contacts, case, subject, body): + context = safe_case_context(case, None) + context['body'] = mark_safe(body) + context['subject'] = subject + + send_case_mail("participant_notify_newcase", context, contacts) + +def send_submitter_email_notification(contacts, ticket, subject, body, vtcr=None): + context = safe_template_context(ticket) + context['body'] = mark_safe(body) + context['subject'] = subject + context['signup_url'] = f"{settings.KB_SERVER_NAME}/vince/comm/signup/" + + if vtcr: + context['vrf'] = vtcr.vrf_id + context['caseurl'] = f"{settings.KB_SERVER_NAME}{vtcr.get_absolute_url()}" + + send_templated_mail("blank_body", context, contacts, html=False) + + +def send_reset_mfa_email(user, ticket, template): + context = safe_template_context(ticket) + + send_templated_mail(template, context, [user.email], sender=settings.DEFAULT_REPLY_EMAIL, html=False, replyto=False) + +def send_regular_email_notification(contacts, subject, body): + context = {} + context['body'] = mark_safe(body) + context['subject'] = subject + context['signup_url'] = f"{settings.KB_SERVER_NAME}/vince/comm/signup/" + + send_templated_mail("blank_body_no_sig", context, contacts, sender=settings.DEFAULT_REPLY_EMAIL, html=False, replyto=False) + + +def send_noreply_email_notification(contacts, subject, body): + context = {} + context['body'] = mark_safe(body) + context['subject'] = subject + context['signup_url'] = f"{settings.KB_SERVER_NAME}/vince/comm/signup/" + + send_templated_mail("blank_body_no_sig", context, contacts, sender=settings.DEFAULT_REPLY_TO_EMAIL, html=False, replyto=True) + +def send_email_notification(contacts, context, subject, body): + +# for contact in contacts: +# contact = Contact.objects.filter(id=contact).first() +# logger.debug(contact.get_emails()) + send_templated_mail("vendor_notify_newcase", context, contacts) + + +def send_user_approve_notification(user): + context = {} + context['login_url'] = f"{settings.KB_SERVER_NAME}/vince/" + context['team_signature'] = settings.DEFAULT_EMAIL_SIGNATURE + send_templated_mail("approve_user", context, user) + + +def send_sns(error): + subject = "Problem with sending pgp email" + try: + client = boto3.client('sns', settings.AWS_REGION) + response = client.publish( + TopicArn=settings.VINCE_ERROR_SNS_ARN, + Subject=subject, + Message=error) + logger.debug("Response:{}".format(response)) + + except: + logger.debug('Error publishing to SNS') + + +def encrypt_mail(contents, admin_email): + #get pgp email + tf = tempfile.TemporaryDirectory() + gpg = gnupg.GPG(gnupghome=tf.name) + try: + import_result = gpg.import_keys(admin_email.pgp_key_data) + pgp_fingerprint = import_result.fingerprints + keys = gpg.list_keys() + encrypted_data = gpg.encrypt(contents, pgp_fingerprint, always_trust=True) + logger.debug(encrypted_data.ok) + logger.debug(encrypted_data.status) + logger.debug(encrypted_data.stderr) + except: + send_sns(traceback.format_exc()) + logger.warning(traceback.format_exc()) + logger.warning("Could not encrypt data") + return None + return encrypted_data + +def get_base64_file(file_path): + bfile = file_path.open() + b_str = base64.b64encode(bfile.read()) + return b_str + + +def send_encrypted_mail(to_email, subject, contents, attachment=None): + + admin_email = to_email + + msg = Message() + msg.add_header(_name="Content-Type", _value="multipart/mixed", protected_headers="v1") + msg["From"] = settings.DEFAULT_REPLY_EMAIL + msg["To"] = admin_email.email + #msg["Cc"] = "test@example.org" + msg['Subject'] = subject + + msg_text = Message() + msg_text.add_header(_name="Content-Type", _value="multipart/mixed") + msg_text.add_header(_name="Content-Language", _value="en-US") + + msg_body = Message() + msg_body.add_header(_name="Content-Type", _value="text/plain", charset="utf-8") + msg_body.add_header(_name="Content-Transfer-Encoding", _value="quoted-printable") + pay_load = contents + 2*"\n" + msg_body.set_payload(pay_load.encode()) + + msg_attachment = Message() + if attachment: + msg_attachment.add_header(_name="Content-Type", _value=attachment.mime_type, name=attachment.filename) + msg_attachment.add_header(_name="Content-Transfer-Encoding", _value="base64") + msg_attachment.add_header(_name="Content-Disposition", _value="attachment", filename=attachment.filename) + msg_attachment.set_payload(get_base64_file(attachment.file)) + + msg_text.attach(msg_body) + + if attachment: + msg_text.attach(msg_attachment) + + msg.attach(msg_text) + + pgp_msg = MIMEBase(_maintype="multipart", _subtype="encrypted", protocol="application/pgp-encrypted") + pgp_msg["From"] = settings.DEFAULT_REPLY_EMAIL + pgp_msg["To"] = admin_email.email + #pgp_msg["Cc"] = "test@example.org" + pgp_msg["Subject"] = subject + + pgp_msg_part1 = Message() + pgp_msg_part1.add_header(_name="Content-Type", _value="application/pgp-encrypted") + pgp_msg_part1.add_header(_name="Content-Description", _value="PGP/MIME version identification") + pgp_msg_part1.set_payload("Version: 1" + "\n") + + pgp_msg_part2 = Message() + pgp_msg_part2.add_header(_name="Content-Type", _value="application/octet-stream", name="encrypted.asc") + pgp_msg_part2.add_header(_name="Content-Description", _value="OpenPGP encrypted message") + pgp_msg_part2.add_header(_name="Content-Disposition", _value="inline", filename="encrypted.asc") + try: + payload = encrypt_mail(msg.as_string(), admin_email) + except: + return f"Error encrypting data. Check key for {admin_email.email}" + + if payload == None: + return f"Error encrypting data. Check log email for problems" + + if payload.ok == False: + return f"Error encrypting data: {payload.status} {payload.stderr}" + else: + payload = str(payload) + + pgp_msg_part2.set_payload(payload) + + pgp_msg.attach(pgp_msg_part1) + pgp_msg.attach(pgp_msg_part2) + + sesclient = boto3.client('ses', 'us-east-1') + try: + response = sesclient.send_raw_email( + Destinations = admin_email.email.split(","), + RawMessage={ + 'Data': pgp_msg.as_string() + }, + Source= f'{settings.ORG_NAME} <{settings.CONTACT_EMAIL}>' + ) + except ClientError as e: + logger.debug("ERROR SENDING EMAIL") + send_sns(e.response['Error']['Message']) + return e.response['Error']['Message'] + except: + logger.debug("ERROR SENDING EMAIL - Not a ClientError") + send_sns(traceback.format_exc()) + return traceback.format_exc() + else: + logger.debug("Email Sent! Message ID: ") + logger.debug(response['MessageId']) + + return None + + +def send_smime_encrypted_mail(cert, subject, contents, attachment=None): + + tf = tempfile.NamedTemporaryFile() + with open(tf.name, 'wb+') as destination: + for chunk in cert.certificate.file.chunks(): + destination.write(chunk) + + msg = MIMEText(contents) + msg_str = msg.as_string() + + buf = BIO.MemoryBuffer(msg_str.encode()) + + Rand.load_file('randpool.dat', -1) + + # Instantiate an SMIME object. + s = SMIME.SMIME() + + x509 = X509.load_cert(tf.name) + sk = X509.X509_Stack() + sk.push(x509) + s.set_x509_stack(sk) + + # Set cipher: 3-key triple-DES in CBC mode. + s.set_cipher(SMIME.Cipher('des_ede3_cbc')) + + # Encrypt the buffer. + p7 = s.encrypt(buf) + + # Output p7 in mail-friendly format. + out = BIO.MemoryBuffer() + out.write(f'From: {settings.DEFAULT_REPLY_EMAIL}\n') + out.write(f'To: {cert.email}\n') + out.write(f'Subject: {subject}\n') + out.write(' \n') + s.write(out, p7) + + sesclient = boto3.client('ses', 'us-east-1') + try: + response = sesclient.send_raw_email( + Destinations = [cert.email], + RawMessage={ + 'Data': out.read() + }, + Source= f'{settings.ORG_NAME} <{settings.CONTACT_EMAIL}>' + ) + except ClientError as e: + logger.debug("ERROR SENDING EMAIL") + send_sns(e.response['Error']['Message']) + return e.response['Error']['Message'] + except: + logger.debug("ERROR SENDING EMAIL - Not a ClientError") + send_sns(traceback.format_exc()) + return traceback.format_exc() + else: + logger.debug("Email Sent! Message ID: ") + logger.debug(response['MessageId']) + + return None + +def send_daily_digest_mail(user, text): + subject = f'VINCE Daily Activity' + + context = { + 'digest': text, + 'username': user.usersettings.preferred_username, + 'login_url': f"{settings.SERVER_NAME}" + } + + html = get_html_preference(user) + + send_templated_mail( + 'vt_daily_digest', + context, + recipients=user.email, + fail_silently=True, + files=None, + html=html + ) + +def send_email_to_all(to_group, subject, content, from_user, ticket): + if to_group == '1': + # get all vendors = get all groups with contacts + groups = Group.objects.using('vincecomm').all().exclude(groupcontact__contact__isnull=True) + vendor_groups = groups.exclude(groupcontact__contact__vendor_type='Contact') + to_list = User.objects.using('vincecomm').filter(is_active=True, groups__in=vendor_groups).distinct() + to_list_str = 'all VINCE vendor users' + gcs = GroupContact.objects.filter(group__in=vendor_groups).values_list('contact__id', flat=True) + list_emails = VinceCommEmail.objects.filter(contact__id__in=gcs, email_list=True, status=True) + elif to_group == '2': + # get all admins + group_emails = VinceCommGroupAdmin.objects.all().values_list('email__email', flat=True).distinct() + to_list = User.objects.using('vincecomm').filter(is_active=True, email__in=group_emails) + to_list_str = 'all group admins' + elif to_group == '3': + # get all users + to_list = User.objects.using('vincecomm').filter(is_active=True) + to_list_str = 'all users' + logger.debug(to_list) + elif to_group == '4': + #staff + to_list = User.objects.using('vincecomm').filter(is_active=True, is_staff=True) + to_list_str = 'all staff' + logger.debug(to_list) + elif to_group == '5': + #find vendors without users + group_user = [group.groupcontact.contact.vendor_id for group in Group.objects.using('vincecomm').exclude(groupcontact__isnull=True) if len(group.user_set.all()) > 0] + contact_without_users = Contact.objects.filter(active=True, vendor_type='Vendor').exclude(id__in=group_user).values_list('id', flat=True) + to_list = EmailContact.objects.filter(status=True, contact__id__in=contact_without_users, email_function__in=['TO', 'CC']) + to_list_str = "all vendors without users" + logger.debug(to_list) + + + #send all emails individually + emails = [] + for u in to_list: + try: + send_noreply_email_notification([u.email], subject, content) + emails.append(u.email) + except: + logger.warning(f"Error sending email to user {u.email}") + logger.warning(traceback.format_exc()) + + if to_group == '1': + #also send to email lists + for u in list_emails: + if u.email not in emails: + try: + send_noreply_email_notification([u.email], subject, content) + emails.append(u.email) + except: + logger.warning(f"Error sending email to {u.email}") + logger.warning(traceback.format_exc()) + + + + ticket = Ticket.objects.filter(id=int(ticket)).first() + + if ticket: + #now add followup that it is done + followup = FollowUp(ticket=ticket, + title=f"Sent {len(emails)} emails to {to_list_str}", + user=from_user, + comment=", ".join(emails)) + followup.save() diff --git a/vince/management/__init__.py b/vince/management/__init__.py new file mode 100644 index 0000000..e69de29 diff --git a/vince/management/commands/__init__.py b/vince/management/commands/__init__.py new file mode 100644 index 0000000..e69de29 diff --git a/vince/management/commands/createsu.py b/vince/management/commands/createsu.py new file mode 100644 index 0000000..933a0cb --- /dev/null +++ b/vince/management/commands/createsu.py @@ -0,0 +1,38 @@ +######################################################################### +# VINCE +# +# Copyright 2022 Carnegie Mellon University. +# +# NO WARRANTY. THIS CARNEGIE MELLON UNIVERSITY AND SOFTWARE ENGINEERING +# INSTITUTE MATERIAL IS FURNISHED ON AN "AS-IS" BASIS. CARNEGIE MELLON +# UNIVERSITY MAKES NO WARRANTIES OF ANY KIND, EITHER EXPRESSED OR IMPLIED, +# AS TO ANY MATTER INCLUDING, BUT NOT LIMITED TO, WARRANTY OF FITNESS FOR +# PURPOSE OR MERCHANTABILITY, EXCLUSIVITY, OR RESULTS OBTAINED FROM USE OF THE +# MATERIAL. CARNEGIE MELLON UNIVERSITY DOES NOT MAKE ANY WARRANTY OF ANY KIND +# WITH RESPECT TO FREEDOM FROM PATENT, TRADEMARK, OR COPYRIGHT INFRINGEMENT. +# +# Released under a MIT (SEI)-style license, please see license.txt or contact +# permission@sei.cmu.edu for full terms. +# +# [DISTRIBUTION STATEMENT A] This material has been approved for public +# release and unlimited distribution. Please see Copyright notice for non-US +# Government use and distribution. +# +# Carnegie Mellon®, CERT® and CERT Coordination Center® are registered in the +# U.S. Patent and Trademark Office by Carnegie Mellon University. +# +# This Software includes and/or makes use of Third-Party Software each subject +# to its own license. +# +# DM21-1126 +######################################################################## +from django.conf import settings +from django.contrib.auth.models import User +from django.core.management.base import BaseCommand + + +class Command(BaseCommand): + def handle(self, *args, **options): + if not User.objects.filter(username="admin").exists(): + User.objects.create_superuser("admin", settings.SUPERUSER['username'], settings.SUPERUSER['password']) + diff --git a/vince/management/commands/loadcwe.py b/vince/management/commands/loadcwe.py new file mode 100644 index 0000000..d5cc23e --- /dev/null +++ b/vince/management/commands/loadcwe.py @@ -0,0 +1,32 @@ +# -*- coding: utf-8 -*- +from __future__ import unicode_literals +import os +import sys +import json +from django.core.management.base import BaseCommand, CommandError +from vince.models import CWEDescriptions +import logging + +logger = logging.getLogger(__name__) + +class Command(BaseCommand): + help = 'Import vulnerability data into postgres db' + + def add_arguments(self, parser): + parser.add_argument('in', nargs=1, type=str) + + + def handle(self, *args, **options): + with open(options['in'][0], 'r') as f: + data = json.load(f) + num_cwes = 0 + for x in data["examples"]: + c = CWEDescriptions.objects.update_or_create(cwe = x) + num_cwes = num_cwes + 1 + + logger.info(f"Updated {num_cwes} CWEs") + + + + + diff --git a/vince/management/commands/loadinitialdata.py b/vince/management/commands/loadinitialdata.py new file mode 100644 index 0000000..58755e0 --- /dev/null +++ b/vince/management/commands/loadinitialdata.py @@ -0,0 +1,105 @@ +######################################################################### +# VINCE +# +# Copyright 2022 Carnegie Mellon University. +# +# NO WARRANTY. THIS CARNEGIE MELLON UNIVERSITY AND SOFTWARE ENGINEERING +# INSTITUTE MATERIAL IS FURNISHED ON AN "AS-IS" BASIS. CARNEGIE MELLON +# UNIVERSITY MAKES NO WARRANTIES OF ANY KIND, EITHER EXPRESSED OR IMPLIED, +# AS TO ANY MATTER INCLUDING, BUT NOT LIMITED TO, WARRANTY OF FITNESS FOR +# PURPOSE OR MERCHANTABILITY, EXCLUSIVITY, OR RESULTS OBTAINED FROM USE OF THE +# MATERIAL. CARNEGIE MELLON UNIVERSITY DOES NOT MAKE ANY WARRANTY OF ANY KIND +# WITH RESPECT TO FREEDOM FROM PATENT, TRADEMARK, OR COPYRIGHT INFRINGEMENT. +# +# Released under a MIT (SEI)-style license, please see license.txt or contact +# permission@sei.cmu.edu for full terms. +# +# [DISTRIBUTION STATEMENT A] This material has been approved for public +# release and unlimited distribution. Please see Copyright notice for non-US +# Government use and distribution. +# +# Carnegie Mellon®, CERT® and CERT Coordination Center® are registered in the +# U.S. Patent and Trademark Office by Carnegie Mellon University. +# +# This Software includes and/or makes use of Third-Party Software each subject +# to its own license. +# +# DM21-1126 +######################################################################## +import logging +import os.path +from os import path +from django.core.management.base import BaseCommand +from django.core.management import call_command +from vince.models import * +from vinny.models import * + +from django.contrib.auth.models import Group +from django.conf import settings + +logger = logging.getLogger(__name__) + +class Command(BaseCommand): + help = 'Load Initial Data' + + def handle(self, *args, **options): + #if EmailTemplate.objects.count() > 0: + # logger.info("Email templates exist. Skipping creation.") + #else: + #load updated templates all the time + if TicketQueue.objects.count() > 0: + logger.info("Ticket queues exist. Skipping creation.") + else: + logger.info("Loading ticket queues.") + call_command('loaddata', 'TicketQueue.json') + logger.info("Done loading ticket queues.") + + + if settings.VINCE_NAMESPACE == 'vince': + if Group.objects.count() > 0: + logger.info("Groups already exist") + else: + logger.info("Loading Groups.") + call_command('loaddata', 'auth_group.json') + logger.info("Done loading groups.") + + logger.info("Loading email templates.") + if EmailTemplate.objects.count() > 0: + logger.info("Email Templates already exist") + # just need to update templates, not rewrite them + call_command('loadtemplates', 'vince/fixtures/EmailTemplate.json') + else: + call_command('loaddata', 'EmailTemplate.json') + logger.info("Done loading email templates.") + + if CWEDescriptions.objects.count() > 0: + logger.info("CWE Info already exists") + else: + call_command('loadcwe', 'vince/fixtures/cwe_regular.json') + logger.info("Done loading CWE Info") + + #call_command('copy_contact_uuid') + + #logger.info("Loading Contact Info") + #if settings.INITIAL_CONTACT_FILE: + #if path.exists(settings.INITIAL_CONTACT_FILE): + # call_command('loadsrmail', 'cmgr-contacts.srmail') + # logger.info("Done loading contacts") + # logger.info("Copy contacts to vincecomm") + # call_command('copy_contacts') + # logger.info("Done copying contacts to vincecomm") + + elif settings.VINCE_NAMESPACE == "vinny": + logger.info("Removing all Email Templates in vincecomm") + EmailTemplate.objects.using('vincecomm').all().delete() + logger.info("Loading email templates for vincecomm.") + call_command('loaddata', 'EmailTemplate.json') + logger.info("Done loading email templates for vincecomm.") + num_templates = EmailTemplate.objects.using('vincecomm').count() + logger.info(f"Vincecomm has {num_templates} Email Templates") + if Group.objects.using('vincecomm').count() > 0: + logger.info("VINCEComm groups already exist") + else: + logger.info("Loading VINCEComm Groups.") + call_command('loaddata', 'authgroup.vincecomm.json') + logger.info("Done loading VINCEComm Groups.") diff --git a/vince/management/commands/loadsrmail.py b/vince/management/commands/loadsrmail.py new file mode 100755 index 0000000..7065dc3 --- /dev/null +++ b/vince/management/commands/loadsrmail.py @@ -0,0 +1,259 @@ +######################################################################### +# VINCE +# +# Copyright 2022 Carnegie Mellon University. +# +# NO WARRANTY. THIS CARNEGIE MELLON UNIVERSITY AND SOFTWARE ENGINEERING +# INSTITUTE MATERIAL IS FURNISHED ON AN "AS-IS" BASIS. CARNEGIE MELLON +# UNIVERSITY MAKES NO WARRANTIES OF ANY KIND, EITHER EXPRESSED OR IMPLIED, +# AS TO ANY MATTER INCLUDING, BUT NOT LIMITED TO, WARRANTY OF FITNESS FOR +# PURPOSE OR MERCHANTABILITY, EXCLUSIVITY, OR RESULTS OBTAINED FROM USE OF THE +# MATERIAL. CARNEGIE MELLON UNIVERSITY DOES NOT MAKE ANY WARRANTY OF ANY KIND +# WITH RESPECT TO FREEDOM FROM PATENT, TRADEMARK, OR COPYRIGHT INFRINGEMENT. +# +# Released under a MIT (SEI)-style license, please see license.txt or contact +# permission@sei.cmu.edu for full terms. +# +# [DISTRIBUTION STATEMENT A] This material has been approved for public +# release and unlimited distribution. Please see Copyright notice for non-US +# Government use and distribution. +# +# Carnegie Mellon®, CERT® and CERT Coordination Center® are registered in the +# U.S. Patent and Trademark Office by Carnegie Mellon University. +# +# This Software includes and/or makes use of Third-Party Software each subject +# to its own license. +# +# DM21-1126 +######################################################################## +from django.core.management.base import BaseCommand, CommandError +from django.contrib import auth +from vince.models import * +from django.utils import timezone +from django.test import RequestFactory +import sys +import csv + +class Command(BaseCommand): + help = 'Load contact data from backup file into VINCE' + + def add_arguments(self, parser): + parser.add_argument('in', nargs=1, type=str) + + def handle(self, *args, **options): + + f = open(options['in'][0], 'r', encoding='utf8') + c = csv.reader(f, delimiter='\t') + count = 0 + success = 0 + grouprows = [] + newcontact = True + members = [] + phones = [] + keys = [] + status = True + for row in c: + if not len(row): + count = count+1 + + if not newcontact: + + print(f"trying to update {srmail_peer_name}") + if int(lotus_id) == 0: + vendor_type = "Contact" + add_contact, created = Contact.objects.update_or_create(srmail_peer = srmail_peer_name, + active = status, + defaults={ + 'vendor_name':vendor_name, + 'srmail_salutation':srmail_salutation, + 'lotus_id':int(lotus_id), + 'vendor_type':vendor_type, + 'location':vendor_location}) + else: + vendor_type = "Vendor" + try: + # try with just srmail peer name. if that returns 2, then try with lotus_id + add_contact, created = Contact.objects.update_or_create(srmail_peer = srmail_peer_name, + defaults={ + 'vendor_name':vendor_name, + 'srmail_salutation':srmail_salutation, + 'vendor_type':vendor_type, + 'location':vendor_location, + 'lotus_id':int(lotus_id), + 'active':status}) + except: + add_contact, created = Contact.objects.update_or_create(srmail_peer = srmail_peer_name, + lotus_id = int(lotus_id), + defaults={ + 'vendor_name':vendor_name, + 'srmail_salutation':srmail_salutation, + 'vendor_type':vendor_type, + 'location':vendor_location, + 'active':status}) + + + #if created: + #print("------ADDING %s-----" % srmail_peer_name) + + if add_contact.id: + for phone in phones: + phonenumber = phone[3] + try: + add_phone = PhoneContact.objects.update_or_create(contact=add_contact, + phone=phonenumber[phonenumber.find(' ')+1:], + defaults = { + 'country_code':phonenumber[:phonenumber.find(' ')], + 'phone_type':phone[2], + 'comment':phone[4]}) + except: + print("duplicate phone numbers") + pass + + for member in members: + try: + add_email = EmailContact.objects.update_or_create(contact=add_contact, + email=member[0], + defaults = { + 'name':member[1], + 'email_function':member[2]}) + except: + print("duplicate emails") + pass + for key in keys: + try: + add_pgp = ContactPgP.objects.update_or_create(contact=add_contact, + pgp_key_id=key, + defaults = { + 'startdate':startdate, + 'enddate':enddate, + 'pgp_protocol':protocol}) + except: + print("duplicate pgps") + pass + + success=success+1 + else: + print("ERROR COULD NOT ADD VENDOR") + + newcontact=True + phones.clear() + members.clear() + keys.clear() + srmail_salutation = "" + lotus_id=0 + startdate = "" + enddate = "" + protocol="" + status = True + continue + + if row[0].startswith("#"): + #this is a comment + continue + + if row[0].startswith("+"): + #this is a group + #save for later since we need to evaluate contacts first + grouprows.append(row) + continue + + + newcontact=False + srmail_peer_name = row[0] + + if row[1] == "ORG": + organization = row[2] + elif row[1] == "VAR": + if row[2] == "NAME": + vendor_name = row[3] + elif row[2] == "salutation": + srmail_salutation = row[3] + elif row[2] == "location": + vendor_location = row[3] + elif row[2] == "VEND": + lotus_id = row[3] + elif row[1] == "TO": + members.append((row[2], row[3], "TO")) + elif row[1] == "REPLYTO": + members.append((row[2], row[3], "REPLYTO")) + elif row[1] == "EMAIL": + members.append((row[2], row[3], "EMAIL")) + elif row[1] == "PHONE": + phones.append(row) + elif row[1] == "CRYPTO": + startdate = row[2] + enddate = row[3] + if len(row) > 4: + protocol = row[4] + if len(row) > 5: + for col in row[5:]: + if col.startswith("KEY="): + keys.append(col[col.find("=")+1:]) + elif row[1] == "CC": + members.append((row[2], row[3], "CC")) + elif row[1] == "STATUS": + status = False + else: + print("NOT IMPLEMENTED %s" % row[1]) + + save_for_later=[] + for row in grouprows: + + name=row[0][1:] + newgroup = ContactGroup.objects.filter(name=name).first() + if newgroup: + dupgroup = GroupDuplicate.objects.filter(group=newgroup) + else: + newgroup, created = ContactGroup.objects.update_or_create(srmail_peer_name=name, + defaults = {'name': name, + 'description':name}) + if created: + dupgroup = GroupDuplicate(group=newgroup) + dupgroup.save() + + vendors=row[1].split() + + for vendor in vendors: + search_contact = Contact.objects.filter(srmail_peer=vendor).first() + if search_contact: + newmember, created = GroupMember.objects.update_or_create(group=newgroup, contact=search_contact, + defaults={'member_type':search_contact.vendor_type}) + #if created: + # self.stdout.write( + # self.style.SUCCESS("Successfully added %s to %s" % (search_contact.vendor_name, row[0]))) + else: + #search in groups + search_group = ContactGroup.objects.filter(name=vendor).first() + if search_group: + groupdup = GroupDuplicate.objects.filter(group=search_group).first() + + groupingroup, created = GroupMember.objects.update_or_create(group=newgroup, group_member=groupdup, + defaults={'member_type':"Group"}) + #if created: + #self.stdout.write(self.style.SUCCESS( + # "Successfully added group %s to %s" % (vendor, row[0]))) + else: + self.stdout.write("CANNOT FIND vendor %s" % vendor) + save_for_later.append((name, vendor)) + + + for vendor in save_for_later: + search_group = ContactGroup.objects.filter(name=vendor[1]).first() + if search_group: + #big group + group = ContactGroup.objects.filter(name=vendor[0]).first() + + groupdup = GroupDuplicate.objects.filter(group=search_group).first() + groupingroup, created = GroupMember.objects.update_or_create(group=group, group_member=groupdup, + defaults={'member_type':"Group"}) + #if created: + # self.stdout.write(self.style.SUCCESS( + # "Successfully added group %s to %s" % (vendor[1], vendor[0]))) + else: + self.stdout.write("STILL CANNOT FIND vendor %s" % vendor[1]) + + + self.stdout.write(self.style.SUCCESS("Successfully read %d/%d contacts" % (success, count-1))) + + + diff --git a/vince/management/commands/loadtemplates.py b/vince/management/commands/loadtemplates.py new file mode 100644 index 0000000..d05f8e7 --- /dev/null +++ b/vince/management/commands/loadtemplates.py @@ -0,0 +1,65 @@ +######################################################################### +# VINCE +# +# Copyright 2022 Carnegie Mellon University. +# +# NO WARRANTY. THIS CARNEGIE MELLON UNIVERSITY AND SOFTWARE ENGINEERING +# INSTITUTE MATERIAL IS FURNISHED ON AN "AS-IS" BASIS. CARNEGIE MELLON +# UNIVERSITY MAKES NO WARRANTIES OF ANY KIND, EITHER EXPRESSED OR IMPLIED, +# AS TO ANY MATTER INCLUDING, BUT NOT LIMITED TO, WARRANTY OF FITNESS FOR +# PURPOSE OR MERCHANTABILITY, EXCLUSIVITY, OR RESULTS OBTAINED FROM USE OF THE +# MATERIAL. CARNEGIE MELLON UNIVERSITY DOES NOT MAKE ANY WARRANTY OF ANY KIND +# WITH RESPECT TO FREEDOM FROM PATENT, TRADEMARK, OR COPYRIGHT INFRINGEMENT. +# +# Released under a MIT (SEI)-style license, please see license.txt or contact +# permission@sei.cmu.edu for full terms. +# +# [DISTRIBUTION STATEMENT A] This material has been approved for public +# release and unlimited distribution. Please see Copyright notice for non-US +# Government use and distribution. +# +# Carnegie Mellon®, CERT® and CERT Coordination Center® are registered in the +# U.S. Patent and Trademark Office by Carnegie Mellon University. +# +# This Software includes and/or makes use of Third-Party Software each subject +# to its own license. +# +# DM21-1126 +######################################################################## + + + +from django.core.management.base import BaseCommand, CommandError +from django.contrib import auth +from vince.models import EmailTemplate +from django.utils import timezone +import sys +import csv +import json +import logging + +logger = logging.getLogger(__name__) + +class Command(BaseCommand): + help = 'Load templates to VINCE, but do not overwrite any that exist in production' + + def add_arguments(self, parser): + parser.add_argument('in', nargs=1, type=str) + + def handle(self, *args, **options): + num_templates = 0 + with open(options['in'][0], 'r') as f: + tmpls = json.load(f) + for t in tmpls: + #don't update team templates (body_only = True) + tmpl = EmailTemplate.objects.filter(template_name=t['fields']['template_name'], locale=t['fields']['locale']).exclude(body_only=True).first() + if tmpl: + #logger.debug(f"Updating {tmpl.template_name} ({tmpl.locale})") + num_templates = num_templates + 1 + tmpl.subject = t['fields']['subject'] + tmpl.heading = t['fields']['heading'] + tmpl.plain_text = t['fields']['plain_text'] + tmpl.html = t['fields']['html'] + tmpl.save() + + logger.info(f"Updated {num_templates} templates") diff --git a/vince/management/commands/newrebuild.py b/vince/management/commands/newrebuild.py new file mode 100644 index 0000000..4b729ec --- /dev/null +++ b/vince/management/commands/newrebuild.py @@ -0,0 +1,241 @@ +######################################################################### +# VINCE +# +# Copyright 2022 Carnegie Mellon University. +# +# NO WARRANTY. THIS CARNEGIE MELLON UNIVERSITY AND SOFTWARE ENGINEERING +# INSTITUTE MATERIAL IS FURNISHED ON AN "AS-IS" BASIS. CARNEGIE MELLON +# UNIVERSITY MAKES NO WARRANTIES OF ANY KIND, EITHER EXPRESSED OR IMPLIED, +# AS TO ANY MATTER INCLUDING, BUT NOT LIMITED TO, WARRANTY OF FITNESS FOR +# PURPOSE OR MERCHANTABILITY, EXCLUSIVITY, OR RESULTS OBTAINED FROM USE OF THE +# MATERIAL. CARNEGIE MELLON UNIVERSITY DOES NOT MAKE ANY WARRANTY OF ANY KIND +# WITH RESPECT TO FREEDOM FROM PATENT, TRADEMARK, OR COPYRIGHT INFRINGEMENT. +# +# Released under a MIT (SEI)-style license, please see license.txt or contact +# permission@sei.cmu.edu for full terms. +# +# [DISTRIBUTION STATEMENT A] This material has been approved for public +# release and unlimited distribution. Please see Copyright notice for non-US +# Government use and distribution. +# +# Carnegie Mellon®, CERT® and CERT Coordination Center® are registered in the +# U.S. Patent and Trademark Office by Carnegie Mellon University. +# +# This Software includes and/or makes use of Third-Party Software each subject +# to its own license. +# +# DM21-1126 +######################################################################## + +from django.core.management.base import BaseCommand, CommandError +from django.core.management import call_command +import sys +import os +import json +from vincepub.models import VUReport, NoteVulnerability, VulnerabilityNote, Vendor +from vincepub.serializers import * +from datetime import date +from dateutil.rrule import rrule, YEARLY +import requests +from django.conf import settings + + +START = date(1980, 1, 1) +END = date.today() + +class Command(BaseCommand): + help = 'Rebuild notes provided in the --in file' + + def add_arguments(self, parser): + parser.add_argument('id', nargs='?', type=str, help='rebuild static vul note for this id.') + parser.add_argument('--start', nargs='?', default='', type=str, const=True, help='Year to start') + + def handle(self, *args, **options): + done = False + + try: + if options['start']: + start = date(int(options['start']),1,1) + else: + start = START + + for dt in rrule(YEARLY, dtstart=start, until=END): + if options['id']: + notes = [f"{settings.CASE_IDENTIFIER}{options['id']}"] + if not(done): + done = True + else: + return + else: + url = "https://{}/vuls/api/{}/summary/".format(settings.VINCEPUB_URL,dt.year) + r = requests.get(url) + rj = r.json() + notes = rj['notes'] + for note in notes: + #assumes case identifier ends with # - may need to change + vu,vuid = note.split('#') + note_url = "https://{}/vuls/notes/{}/".format(settings.VINCEPUB_URL,vuid) + rn = requests.get(note_url) + rnj = rn.json() + print("Updating %s" % rnj['vuid']) + vulnote = None + if rnj.get('vulnote'): + vulnote = rnj['vulnote'] + # we need to pop the vulnote off so it doesn't get stuck in our DB + rnj.pop('vulnote') + + record = VUReport.objects.filter(vuid=rnj['vuid']).first() + if record: + report = VUReportSerializer(record, data=rnj, partial=True) + else: + report = VUReportSerializer(data=rnj, partial=True) + if (report.is_valid()): + record = report.save() + else: + print(record.errors) + return + + #update vulnote if there is one + if vulnote: + note = VulnerabilityNote.objects.filter(vuid=vuid).first() + if note: + note.content = rnj['overview'] + note.title = rnj['name'] + if isinstance(rnj['public'], list): + note.references = "\n".join(rnj['public']) + else: + note.references = rnj['public'] + note.dateupdated = rnj['dateupdated'] + note.datefirstpublished = rnj['datefirstpublished'] + note.revision_number = rnj['revision'] + note.publicdate = rnj['publicdate'] + note.save() + else: + # create a new one + note = VulnerabilityNote(vuid=vuid, + content = rnj['overview'], + title = rnj['name'], + dateupdated = rnj['dateupdated'], + datefirstpublished = rnj['datefirstpublished'], + revision_number = rnj['revision'], + publicdate = rnj['publicdate']) + if isinstance(rnj['public'], list): + note.references = "\n".join(rnj['public']) + else: + note.references = rnj['public'] + + note.save() + record.vulnote = note + record.save() + # else: content comes from vureporthtml saved + + #now get vendors + vendor_url = "https://{}/vuls/api/vendors/{}/".format(settings.VINCEPUB_URL,vuid) + rv = requests.get(vendor_url) + rvj = rv.json() + for vendor in rvj: + # change language of no statement + if vendor["statement"] == "No statement is currently available from the vendor regarding this vulnerability.": + #pop it + vendor["statement"] = None + elif vendor["statement"] == "We have not received a statement from the vendor.": + #pop it + vendor["statement"] = None + if vendor.get("addendum") == "There are no additional comments at this time.": + vendor["addendum"] = None + if vulnote: + #then use the Vendor + ov = Vendor.objects.filter(vendor=vendor['vendor'].strip(), note__vuid=vuid).first() + + + if ov: + vendor['note'] = record.vulnote.id + rec = VendorSerializer(ov, data=vendor, partial=True) + else: + print("NEW VENDOR %s for %s" % (vendor['vendor'], vuid)) + vendor['note'] = record.vulnote.id + + rec = VendorIngestSerializer(data=vendor, partial=True) + if (rec.is_valid()): + rec.save() + else: + print("ERROR SAVING VENDOR") + print(rec.errors) + else: + #use the vendorrecord + if 'vendorinformation' in vendor: + if vendor['vendorinformation'] == "We are not aware of further vendor information regarding this vulnerability": + vendor["vendorinformation"] == None + + ov = VendorRecord.objects.filter(vendorrecordid=vendor['vendorrecordid']).first() + if ov: + rec = VendorRecordSerializer(ov, data=vendor, partial=True) + else: + rec = VendorRecordSerializer(data=vendor, partial=True) + if (rec.is_valid()): + rec.save() + else: + print("VENDOR RECORD ERRORS") + print(rec.errors) + return + + if not vulnote: + continue + # also need vuls + vul_url = "https://{}/vuls/api/vuls/{}/".format(settings.VINCEPUB_URL,vuid) + rvuls = requests.get(vul_url) + rvlj = rvuls.json() + for vul in rvlj: + oldvul = NoteVulnerability.objects.filter(note__vuid=vuid, uid=vul['uid']).first() + vul['note'] = record.vulnote.id + if oldvul: + rec = VulSerializer(oldvul, data=vul, partial=True) + if (rec.is_valid()): + rec.save() + else: + print("ERROR SAVING VUL") + print(rec.errors) + else: + rec = NoteVulnerability(cve=vul['cve'], + description=vul['description'], + uid = vul['uid'], + case_increment=vul['case_increment'], + date_added=vul['date_added'], + dateupdated=vul['dateupdated'], + note=record.vulnote) + rec.save() + + #vendor vul status + vendorvuls = "https://{}/vuls/api/vendors/vuls/{}/".format(settings.VINCEPUB_URL,vuid) + vvuls = requests.get(vendorvuls) + vvulsj = vvuls.json() + for vv in vvulsj: + ovendvul = VendorVulStatus.objects.filter(vendor__vendor=vv['vendor'], + vul__uid=vv['vul']).first() + ven = Vendor.objects.filter(vendor=vv['vendor'].strip(), note__vuid=vuid).first() + vul = NoteVulnerability.objects.filter(note__vuid=vuid, uid=vv['vul']).first() + vv['vendor'] = ven.id + + vv['vul'] = vul.id + if vv['status'] == "Affected": + vv['status'] = 1 + elif vv['status'] in ["Not Affected", "Unaffected"]: + vv['status'] = 2 + else: + vv['status'] = 3 + if ovendvul: + vvs = VVSerializer(ovendvul, data=vv, partial=True) + else: + vvs = VVSerializer(data=vv, partial=True) + + if (vvs.is_valid()): + vvs.save() + else: + print("ERROR SAVING VENDOR VUL STATUS") + print(vvs.errors) + return + + + except KeyboardInterrupt: + print("exiting...") + sys.exit(0) diff --git a/vince/management/commands/process_mail.py b/vince/management/commands/process_mail.py new file mode 100644 index 0000000..a1c7152 --- /dev/null +++ b/vince/management/commands/process_mail.py @@ -0,0 +1,55 @@ +######################################################################### +# VINCE +# +# Copyright 2022 Carnegie Mellon University. +# +# NO WARRANTY. THIS CARNEGIE MELLON UNIVERSITY AND SOFTWARE ENGINEERING +# INSTITUTE MATERIAL IS FURNISHED ON AN "AS-IS" BASIS. CARNEGIE MELLON +# UNIVERSITY MAKES NO WARRANTIES OF ANY KIND, EITHER EXPRESSED OR IMPLIED, +# AS TO ANY MATTER INCLUDING, BUT NOT LIMITED TO, WARRANTY OF FITNESS FOR +# PURPOSE OR MERCHANTABILITY, EXCLUSIVITY, OR RESULTS OBTAINED FROM USE OF THE +# MATERIAL. CARNEGIE MELLON UNIVERSITY DOES NOT MAKE ANY WARRANTY OF ANY KIND +# WITH RESPECT TO FREEDOM FROM PATENT, TRADEMARK, OR COPYRIGHT INFRINGEMENT. +# +# Released under a MIT (SEI)-style license, please see license.txt or contact +# permission@sei.cmu.edu for full terms. +# +# [DISTRIBUTION STATEMENT A] This material has been approved for public +# release and unlimited distribution. Please see Copyright notice for non-US +# Government use and distribution. +# +# Carnegie Mellon®, CERT® and CERT Coordination Center® are registered in the +# U.S. Patent and Trademark Office by Carnegie Mellon University. +# +# This Software includes and/or makes use of Third-Party Software each subject +# to its own license. +# +# DM21-1126 +######################################################################## + +from django.core.management.base import BaseCommand, CommandError +from django.core.management import call_command +import sys +import os +import json +from vince.models import * +from vince.lib import create_ticket_from_email_s3 +from datetime import datetime, timedelta +from datetime import timezone +import dateutil.parser +import boto3 +import traceback + +class Command(BaseCommand): + help = 'Read an email from S3 given the object key' + + def add_arguments(self, parser): + parser.add_argument('--key', nargs=1, type=str, help='Object Key to Read') + parser.add_argument('--bucket', nargs=1, type=str, help='Bucket to read from') + + def handle(self, *args, **options): + + self.stdout.write("Reading email " + options['key'][0] + " from bucket " + options['bucket'][0]) + email_msg = create_ticket_from_email_s3(options['key'][0], options['bucket'][0]) + self.stdout.write(self.style.SUCCESS("Successfully read email")) + diff --git a/vince/management/commands/rebuildnotes.py b/vince/management/commands/rebuildnotes.py new file mode 100644 index 0000000..a224a96 --- /dev/null +++ b/vince/management/commands/rebuildnotes.py @@ -0,0 +1,55 @@ +######################################################################### +# VINCE +# +# Copyright 2022 Carnegie Mellon University. +# +# NO WARRANTY. THIS CARNEGIE MELLON UNIVERSITY AND SOFTWARE ENGINEERING +# INSTITUTE MATERIAL IS FURNISHED ON AN "AS-IS" BASIS. CARNEGIE MELLON +# UNIVERSITY MAKES NO WARRANTIES OF ANY KIND, EITHER EXPRESSED OR IMPLIED, +# AS TO ANY MATTER INCLUDING, BUT NOT LIMITED TO, WARRANTY OF FITNESS FOR +# PURPOSE OR MERCHANTABILITY, EXCLUSIVITY, OR RESULTS OBTAINED FROM USE OF THE +# MATERIAL. CARNEGIE MELLON UNIVERSITY DOES NOT MAKE ANY WARRANTY OF ANY KIND +# WITH RESPECT TO FREEDOM FROM PATENT, TRADEMARK, OR COPYRIGHT INFRINGEMENT. +# +# Released under a MIT (SEI)-style license, please see license.txt or contact +# permission@sei.cmu.edu for full terms. +# +# [DISTRIBUTION STATEMENT A] This material has been approved for public +# release and unlimited distribution. Please see Copyright notice for non-US +# Government use and distribution. +# +# Carnegie Mellon®, CERT® and CERT Coordination Center® are registered in the +# U.S. Patent and Trademark Office by Carnegie Mellon University. +# +# This Software includes and/or makes use of Third-Party Software each subject +# to its own license. +# +# DM21-1126 +######################################################################## + +from django.core.management.base import BaseCommand, CommandError +from django.core.management import call_command +import sys +import os +import json +from vincepub.models import VUReport + + + +class Command(BaseCommand): + help = 'Rebuild notes provided in the --in file' + + def add_arguments(self, parser): + parser.add_argument('id', nargs='?', type=str, help='rebuild static vul note for this id.') + + def handle(self, *args, **options): + try: + tobuild = VUReport.objects.filter(idnumber=options['id']) + for site in tobuild: + site.build() + call_command('publish', '--no-delete', '--s3fs') + print("done building") + + except KeyboardInterrupt: + print("exiting...") + sys.exit(0) diff --git a/vince/middleware.py b/vince/middleware.py new file mode 100644 index 0000000..229a871 --- /dev/null +++ b/vince/middleware.py @@ -0,0 +1,95 @@ +######################################################################### +# VINCE +# +# Copyright 2022 Carnegie Mellon University. +# +# NO WARRANTY. THIS CARNEGIE MELLON UNIVERSITY AND SOFTWARE ENGINEERING +# INSTITUTE MATERIAL IS FURNISHED ON AN "AS-IS" BASIS. CARNEGIE MELLON +# UNIVERSITY MAKES NO WARRANTIES OF ANY KIND, EITHER EXPRESSED OR IMPLIED, +# AS TO ANY MATTER INCLUDING, BUT NOT LIMITED TO, WARRANTY OF FITNESS FOR +# PURPOSE OR MERCHANTABILITY, EXCLUSIVITY, OR RESULTS OBTAINED FROM USE OF THE +# MATERIAL. CARNEGIE MELLON UNIVERSITY DOES NOT MAKE ANY WARRANTY OF ANY KIND +# WITH RESPECT TO FREEDOM FROM PATENT, TRADEMARK, OR COPYRIGHT INFRINGEMENT. +# +# Released under a MIT (SEI)-style license, please see license.txt or contact +# permission@sei.cmu.edu for full terms. +# +# [DISTRIBUTION STATEMENT A] This material has been approved for public +# release and unlimited distribution. Please see Copyright notice for non-US +# Government use and distribution. +# +# Carnegie Mellon®, CERT® and CERT Coordination Center® are registered in the +# U.S. Patent and Trademark Office by Carnegie Mellon University. +# +# This Software includes and/or makes use of Third-Party Software each subject +# to its own license. +# +# DM21-1126 +######################################################################## +from django.conf import settings +from django.utils.deprecation import MiddlewareMixin +from django.utils import timezone +from django.http import HttpResponseRedirect +from django.urls import resolve +from urllib.parse import urlparse +import logging +import pytz +import traceback + +logger = logging.getLogger(__name__) +logger.setLevel(logging.DEBUG) + +class MultipleDomainMiddleware(MiddlewareMixin): + + def process_request(self, request): + + url_config = getattr(settings, 'MULTIURL_CONFIG', None) + if not url_config: + return + + host = None + server = None + path = request.get_full_path() + if request.session.session_key: + #logger.debug(request.META.get('HTTP_REFERER')) + #referer = request.META.get('HTTP_REFERER') + #referer = urlparse(referer) + #logger.debug(referer.netloc) + logger.debug(f"Path is {path}") + scheme = "http" if not request.is_secure() else "https" + + try: + app_name = resolve(request.path_info).view_name.split(':')[0] + except: + return None + + my_domain = url_config[settings.VINCE_NAMESPACE] + if app_name == settings.VINCE_NAMESPACE: + # this is the same namespace + return + + if app_name in url_config: + #request.urlconf = url_config[host] + domain = url_config[app_name] + if domain == my_domain: + # different namespace, but same domain, so don't redirect + return + logger.debug(f"Middleware redirect to {domain}") + return HttpResponseRedirect("{0}://{1}{2}".format( + scheme, domain, path)) + + +class TimezoneMiddleware: + + def __init__(self, get_response): + self.get_response = get_response + + def __call__(self, request): + if settings.DEBUG: + return self.get_response(request) + + default_tz = getattr(settings, 'DEFAULT_TIME_ZONE', 'UTC') + tzname = request.session.get('timezone') or default_tz + timezone.activate(pytz.timezone(tzname)) + return self.get_response(request) + diff --git a/vince/migrations/0001_initial.py b/vince/migrations/0001_initial.py new file mode 100644 index 0000000..f950a20 --- /dev/null +++ b/vince/migrations/0001_initial.py @@ -0,0 +1,1657 @@ +# Generated by Django 2.2.26 on 2022-05-13 14:05 + +import bigvince.storage_backends +import datetime +from django.conf import settings +import django.contrib.postgres.indexes +import django.contrib.postgres.search +from django.db import migrations, models +import django.db.models.deletion +import django.utils.timezone +import django_countries.fields +import uuid +import vince.models + + +class Migration(migrations.Migration): + + initial = True + + dependencies = [ + migrations.swappable_dependency(settings.AUTH_USER_MODEL), + ('auth', '0011_update_proxy_permissions'), + ] + + operations = [ + migrations.CreateModel( + name='Action', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('date', models.DateTimeField(default=django.utils.timezone.now, verbose_name='Date')), + ('last_edit', models.DateTimeField(blank=True, null=True, verbose_name='Last Modified Date')), + ('title', models.CharField(blank=True, max_length=200, null=True, verbose_name='Title')), + ('comment', models.TextField(blank=True, null=True, verbose_name='Comment')), + ('new_status', models.IntegerField(blank=True, choices=[(1, 'Open'), (2, 'Reopened'), (3, 'Resolved'), (4, 'Closed'), (5, 'Duplicate')], help_text='If the status was changed, what was it changed to?', null=True, verbose_name='New Status')), + ], + ), + migrations.CreateModel( + name='Artifact', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('type', models.CharField(blank=True, help_text='The type of data, a product name, an exploit, CVSS, etc.', max_length=200, null=True)), + ('title', models.CharField(help_text='A title for this value that could be used in a report or vul note.', max_length=200)), + ('value', models.CharField(help_text='The artifact that you want to document.', max_length=500)), + ('date_added', models.DateTimeField(default=django.utils.timezone.now)), + ('date_modified', models.DateTimeField(auto_now=True)), + ('description', models.CharField(blank=True, help_text='A description of this artifact.', max_length=200, null=True)), + ('added_to_note', models.BooleanField(default=False, help_text='If artifact has been added to vulnote')), + ('added_to_post', models.BooleanField(default=False, help_text='If artifact has been added to vendor notification')), + ('user', models.ForeignKey(blank=True, help_text='The user that added this artifact.', null=True, on_delete=django.db.models.deletion.SET_NULL, to=settings.AUTH_USER_MODEL)), + ], + ), + migrations.CreateModel( + name='Attachment', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('file', models.FileField(max_length=1000, storage=bigvince.storage_backends.PrivateMediaStorage(), upload_to='', verbose_name='File')), + ('filename', models.CharField(max_length=1000, verbose_name='Filename')), + ('mime_type', models.CharField(max_length=255, verbose_name='MIME Type')), + ('size', models.IntegerField(help_text='Size of this file in bytes', verbose_name='Size')), + ('public', models.BooleanField(default=False)), + ('action', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='vince.Action', verbose_name='Action')), + ], + options={ + 'verbose_name': 'Attachment', + 'verbose_name_plural': 'Attachments', + 'ordering': ('filename',), + }, + ), + migrations.CreateModel( + name='CaseTemplate', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('title', models.CharField(max_length=100)), + ('description', models.CharField(max_length=200)), + ('date_modified', models.DateTimeField(auto_now=True)), + ('vendor_email', models.TextField(default='We have new information about a vulnerability that may affect your products. Please login to the VINCE portal for more information about this vulnerability.', help_text='The context available to you includes {{ vu }}, {{ title }}, and {{ owner }}.', verbose_name='Vendor Notification Email Content')), + ('participant_email', models.TextField(default='Hello, you have been invited you to participate in an active vulnerability disclosure case. Please login to the VINCE portal for more information about this case.', help_text='The context available to you includes {{ vu }}, {{ title }}, and {{ owner }}.', verbose_name='Participant Notification Email Content')), + ], + ), + migrations.CreateModel( + name='Contact', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('vendor_id', models.CharField(blank=True, max_length=10, null=True)), + ('vendor_name', models.CharField(max_length=100)), + ('vendor_type', models.CharField(choices=[('Contact', 'Contact'), ('Vendor', 'Vendor')], default='Vendor', max_length=50)), + ('srmail_peer', models.CharField(blank=True, max_length=100, null=True)), + ('srmail_salutation', models.CharField(blank=True, max_length=100, null=True)), + ('srmail_id', models.IntegerField(blank=True, null=True)), + ('lotus_id', models.IntegerField(blank=True, null=True)), + ('countrycode', django_countries.fields.CountryField(blank=True, default='US', max_length=2, null=True)), + ('active', models.BooleanField(default=True)), + ('date_added', models.DateTimeField(default=django.utils.timezone.now)), + ('location', models.CharField(choices=[('Domestic', 'Domestic'), ('International', 'International')], default='domestic', max_length=15)), + ('comment', models.TextField(blank=True, null=True)), + ('search_vector', django.contrib.postgres.search.SearchVectorField(null=True)), + ('modified', models.DateTimeField(auto_now=True)), + ('version', models.IntegerField(default=0)), + ('user_added', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, to=settings.AUTH_USER_MODEL)), + ], + ), + migrations.CreateModel( + name='ContactGroup', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('name', models.CharField(max_length=100)), + ('vuid', models.CharField(blank=True, max_length=50, null=True)), + ('description', models.CharField(max_length=250)), + ('srmail_peer_name', models.CharField(max_length=50)), + ('group_type', models.CharField(choices=[('srmail', 'SRMail List'), ('vendorlist', 'Vendor Contact List')], default='srmail', max_length=20)), + ('status', models.CharField(choices=[('Active', 'Active'), ('Inactive', 'Inactive'), ('Unknown', 'Unknown')], default='Active', max_length=20)), + ('comment', models.TextField(blank=True, null=True)), + ('date_added', models.DateTimeField(default=django.utils.timezone.now)), + ('version', models.IntegerField(default=0)), + ('modified', models.DateTimeField(auto_now=True)), + ('user_added', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.CASCADE, to=settings.AUTH_USER_MODEL)), + ], + ), + migrations.CreateModel( + name='EmailContact', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('email', models.EmailField(max_length=254)), + ('email_type', models.CharField(choices=[('Work', 'Work'), ('Other', 'Other'), ('Home', 'Home'), ('School', 'School')], default='Work', max_length=20)), + ('name', models.CharField(blank=True, max_length=200, null=True)), + ('email_function', models.CharField(choices=[('TO', 'TO'), ('CC', 'CC'), ('EMAIL', 'EMAIL'), ('REPLYTO', 'REPLYTO')], default='TO', max_length=10)), + ('status', models.BooleanField(default=True)), + ('version', models.IntegerField(default=0)), + ('contact', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='vince.Contact')), + ('user_added', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, to=settings.AUTH_USER_MODEL)), + ], + ), + migrations.CreateModel( + name='EmailTemplate', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('template_name', models.CharField(max_length=100, verbose_name='Template Name')), + ('subject', models.CharField(help_text='This will be prefixed with "[ticket.ticket] ticket.title". We recommend something simple such as "(Updated") or "(Closed)" - the same context is available as in plain_text, below.', max_length=100, verbose_name='Subject')), + ('heading', models.CharField(help_text='In HTML e-mails, this will be the heading at the top of the email - the same context is available as in plain_text, below.', max_length=100, verbose_name='Heading')), + ('plain_text', models.TextField(help_text='The context available to you includes {{ ticket }}, {{ queue }}, and depending on the time of the call: {{ resolution }} or {{ comment }}.', verbose_name='Plain Text')), + ('html', models.TextField(help_text='The same context is available here as in plain_text, above.', verbose_name='HTML')), + ('locale', models.CharField(blank=True, help_text='Locale of this template.', max_length=10, null=True, verbose_name='Locale')), + ('body_only', models.BooleanField(default=False)), + ], + options={ + 'verbose_name': 'e-mail template', + 'verbose_name_plural': 'e-mail templates', + 'ordering': ('template_name', 'locale'), + }, + ), + migrations.CreateModel( + name='FollowupMessage', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('msg', models.IntegerField(verbose_name='VinceComm Msg ID')), + ], + ), + migrations.CreateModel( + name='GroupDuplicate', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('group', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='vince.ContactGroup')), + ], + ), + migrations.CreateModel( + name='Ticket', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('title', models.CharField(max_length=200, verbose_name='Title')), + ('created', models.DateTimeField(blank=True, help_text='Date this ticket was first created', verbose_name='Created')), + ('modified', models.DateTimeField(blank=True, help_text='Date this ticket was most recently changed.', verbose_name='Modified')), + ('submitter_email', models.EmailField(blank=True, help_text='The submitter will receive an email for all public follow-ups left for this task.', max_length=254, null=True, verbose_name='Submitter E-Mail')), + ('status', models.IntegerField(choices=[(1, 'Open'), (2, 'Reopened'), (3, 'Resolved'), (4, 'Closed'), (5, 'Duplicate')], default=1, verbose_name='Status')), + ('on_hold', models.BooleanField(blank=True, default=False, help_text='If a ticket is on hold, it will not automatically be escalated.', verbose_name='On Hold')), + ('description', models.TextField(blank=True, help_text='The content of the customers query.', null=True, verbose_name='Description')), + ('resolution', models.TextField(blank=True, help_text='The resolution provided to the customer by our staff.', null=True, verbose_name='Resolution')), + ('priority', models.IntegerField(blank=3, choices=[(1, '1. Critical'), (2, '2. High'), (3, '3. Normal'), (4, '4. Low'), (5, '5. Very Low')], default=3, help_text='1 = Highest Priority, 5 = Low Priority', verbose_name='Priority')), + ('due_date', models.DateTimeField(blank=True, null=True, verbose_name='Due on')), + ('close_reason', models.IntegerField(choices=[(1, 'Opened Case'), (2, 'Task Complete'), (3, 'Spam'), (4, 'Decline'), (5, 'Decline, already fixed'), (6, 'Decline, vendor not contacted'), (7, 'Decline, vendor cooperating'), (8, 'Decline, live website vul'), (9, 'Forward')], default=1)), + ('search_vector', django.contrib.postgres.search.SearchVectorField(null=True)), + ('assigned_to', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.CASCADE, related_name='assigned_to', to=settings.AUTH_USER_MODEL, verbose_name='Assigned to')), + ], + ), + migrations.CreateModel( + name='TicketChange', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('field', models.CharField(max_length=100, verbose_name='Field')), + ('old_value', models.TextField(blank=True, null=True, verbose_name='Old Value')), + ('new_value', models.TextField(blank=True, null=True, verbose_name='New Value')), + ], + options={ + 'verbose_name': 'Ticket change', + 'verbose_name_plural': 'Ticket changes', + }, + ), + migrations.CreateModel( + name='TicketThread', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('ticket', models.IntegerField(verbose_name='VinceTrack Ticket ID')), + ('thread', models.IntegerField(verbose_name='VinceComm Thread ID')), + ], + ), + migrations.CreateModel( + name='VendorContactData', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('org_name', models.CharField(max_length=250)), + ('email', models.EmailField(max_length=254)), + ('phone', models.CharField(blank=True, max_length=50, null=True)), + ('other_emails', models.CharField(blank=True, max_length=1000, null=True)), + ('person', models.CharField(max_length=250)), + ('title', models.CharField(blank=True, max_length=250, null=True)), + ], + ), + migrations.CreateModel( + name='VendorNotificationEmail', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('subject', models.CharField(help_text='The subject of the email.', max_length=200)), + ('email_body', models.TextField(blank=True, default='We have new information about a vulnerability that may affect your products. Please login to the VINCE portal for more information about this vulnerability.', help_text='The body of the email that will be sent to vendors to notify them to login to VINCE. ', null=True)), + ], + ), + migrations.CreateModel( + name='VinceSQS', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('date_polled', models.DateTimeField(default=django.utils.timezone.now)), + ('title', models.CharField(max_length=200)), + ('date_submitted', models.DateTimeField(default=django.utils.timezone.now)), + ('vrf_id', models.CharField(max_length=20)), + ('read', models.BooleanField(default=False)), + ('receipt_handle', models.CharField(blank=True, max_length=500, null=True)), + ('deleted_from_queue', models.BooleanField(default=False)), + ('report_type', models.IntegerField(choices=[(1, 'VRF'), (2, 'Vendor Statement'), (3, 'Gov Report')], default=1, verbose_name='Report Type')), + ('attached_file', models.CharField(blank=True, max_length=250, null=True)), + ], + ), + migrations.CreateModel( + name='VulnerabilityCase', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('vuid', models.CharField(max_length=20)), + ('created', models.DateTimeField(default=django.utils.timezone.now)), + ('modified', models.DateTimeField(blank=True, help_text='Date this case was most recently changed.', null=True, verbose_name='Modified')), + ('on_hold', models.BooleanField(blank=True, default=False, help_text='If a case is on hold, it will not automatically be escalated.', verbose_name='On Hold')), + ('status', models.IntegerField(choices=[(1, 'Active'), (2, 'Inactive')], default=1, verbose_name='Status')), + ('product_name', models.CharField(help_text='The vulnerable product name/affected website.', max_length=500)), + ('product_version', models.CharField(blank=True, help_text='The product version that is vulnerable (if available).', max_length=100, null=True)), + ('summary', models.CharField(help_text='A summary of the vulnerable. This may be taken from the description in the CaseRequest.', max_length=1000)), + ('title', models.CharField(help_text='A title for this case.', max_length=500)), + ('due_date', models.DateTimeField(blank=True, null=True)), + ('vul_incrementer', models.IntegerField(default=0)), + ('lotus_notes', models.BooleanField(default=False, help_text='Do not create this case in VinceComm.')), + ('search_vector', django.contrib.postgres.search.SearchVectorField(null=True)), + ('case_request', models.ForeignKey(blank=True, help_text='The CaseRequest that this is Case is derived from', null=True, on_delete=django.db.models.deletion.SET_NULL, to='vince.Ticket')), + ('owner', models.ForeignKey(blank=True, help_text='The User that has selected the case for coordination', null=True, on_delete=django.db.models.deletion.SET_NULL, to=settings.AUTH_USER_MODEL)), + ('template', models.ForeignKey(blank=True, help_text='Changing the template will result in the addition of new tasks to this case. Existing tasks will not be modified.', null=True, on_delete=django.db.models.deletion.SET_NULL, to='vince.CaseTemplate')), + ], + ), + migrations.CreateModel( + name='VulNote', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('created', models.DateTimeField(auto_now_add=True)), + ('modified', models.DateTimeField(auto_now=True)), + ('group_read', models.BooleanField(default=True, verbose_name='group read access')), + ('group_write', models.BooleanField(default=True, verbose_name='group write access')), + ('other_read', models.BooleanField(default=True, verbose_name='other read access')), + ('approved', models.BooleanField(default=False, help_text='Vul note must be approved before publishing')), + ('date_published', models.DateTimeField(blank=True, null=True)), + ('date_last_published', models.DateTimeField(blank=True, null=True)), + ('date_shared', models.DateTimeField(blank=True, null=True)), + ('revision_shared', models.IntegerField(default=999)), + ('revision_published', models.IntegerField(default=999)), + ('case', models.OneToOneField(help_text='The case this vul note belongs with.', on_delete=django.db.models.deletion.CASCADE, to='vince.VulnerabilityCase')), + ], + ), + migrations.CreateModel( + name='CaseAction', + fields=[ + ('action_ptr', models.OneToOneField(auto_created=True, on_delete=django.db.models.deletion.CASCADE, parent_link=True, primary_key=True, serialize=False, to='vince.Action')), + ('action_type', models.IntegerField(default=0)), + ('post', models.IntegerField(blank=True, null=True, verbose_name='VinceComm Post ID')), + ], + options={ + 'verbose_name': 'Case Action', + 'verbose_name_plural': 'Case Actions', + 'ordering': ('date',), + }, + bases=('vince.action',), + ), + migrations.CreateModel( + name='CaseArtifact', + fields=[ + ('artifact_ptr', models.OneToOneField(auto_created=True, on_delete=django.db.models.deletion.CASCADE, parent_link=True, primary_key=True, serialize=False, to='vince.Artifact')), + ], + bases=('vince.artifact',), + ), + migrations.CreateModel( + name='CaseRequest', + fields=[ + ('ticket_ptr', models.OneToOneField(auto_created=True, on_delete=django.db.models.deletion.CASCADE, parent_link=True, primary_key=True, serialize=False, to='vince.Ticket')), + ('vrf_id', models.CharField(max_length=20)), + ('request_type', models.IntegerField(choices=[(1, 'VRF'), (3, 'GOV')], default=1, verbose_name='Request Type')), + ('contact_name', models.CharField(blank=True, max_length=100, null=True)), + ('contact_org', models.CharField(blank=True, max_length=100, null=True)), + ('contact_email', models.EmailField(blank=True, max_length=254, null=True)), + ('contact_phone', models.CharField(blank=True, max_length=20, null=True)), + ('share_release', models.BooleanField(default=True)), + ('credit_release', models.BooleanField(default=True)), + ('comm_attempt', models.BooleanField(blank=True, null=True)), + ('why_no_attempt', models.CharField(blank=True, max_length=100, null=True)), + ('please_explain', models.TextField(blank=True, null=True)), + ('vendor_name', models.CharField(blank=True, max_length=100, null=True)), + ('multiplevendors', models.BooleanField(default=False)), + ('other_vendors', models.TextField(blank=True, null=True)), + ('first_contact', models.DateTimeField(blank=True, null=True)), + ('vendor_communication', models.TextField(blank=True, null=True)), + ('product_name', models.CharField(max_length=500)), + ('product_version', models.CharField(blank=True, max_length=100, null=True)), + ('vul_description', models.TextField(blank=True, null=True)), + ('vul_exploit', models.TextField(blank=True, null=True)), + ('vul_impact', models.TextField(blank=True, null=True)), + ('vul_discovery', models.TextField(blank=True, null=True)), + ('vul_public', models.BooleanField(default=False)), + ('public_references', models.CharField(blank=True, max_length=1000, null=True)), + ('vul_exploited', models.BooleanField(default=False)), + ('exploit_references', models.CharField(blank=True, max_length=1000, null=True)), + ('vul_disclose', models.BooleanField(default=False)), + ('disclosure_plans', models.CharField(blank=True, max_length=1000, null=True)), + ('user_file', models.FileField(blank=True, null=True, upload_to=vince.models.update_filename)), + ('tracking', models.CharField(blank=True, max_length=100, null=True)), + ('comments', models.TextField(blank=True, null=True)), + ('date_submitted', models.DateTimeField(default=django.utils.timezone.now)), + ('submission_type', models.CharField(choices=[('email', 'email'), ('web', 'web'), ('manual', 'manual')], default='web', max_length=15)), + ('vc_id', models.IntegerField(default=0)), + ], + bases=('vince.ticket',), + ), + migrations.CreateModel( + name='FollowUp', + fields=[ + ('action_ptr', models.OneToOneField(auto_created=True, on_delete=django.db.models.deletion.CASCADE, parent_link=True, primary_key=True, serialize=False, to='vince.Action')), + ], + options={ + 'verbose_name': 'Follow-up', + 'verbose_name_plural': 'Follow-ups', + 'ordering': ('date',), + }, + bases=('vince.action',), + ), + migrations.CreateModel( + name='TicketArtifact', + fields=[ + ('artifact_ptr', models.OneToOneField(auto_created=True, on_delete=django.db.models.deletion.CASCADE, parent_link=True, primary_key=True, serialize=False, to='vince.Artifact')), + ], + bases=('vince.artifact',), + ), + migrations.CreateModel( + name='Website', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('url', models.URLField()), + ('description', models.CharField(blank=True, max_length=100, null=True)), + ('date_added', models.DateTimeField(default=django.utils.timezone.now)), + ('version', models.IntegerField(default=0)), + ('contact', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='vince.Contact')), + ('user_added', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, to=settings.AUTH_USER_MODEL)), + ], + ), + migrations.CreateModel( + name='VulNoteRevision', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('revision_number', models.IntegerField(editable=False, verbose_name='revision number')), + ('user_message', models.TextField(blank=True)), + ('automatic_log', models.TextField(blank=True, editable=False)), + ('modified', models.DateTimeField(auto_now=True)), + ('created', models.DateTimeField(auto_now_add=True)), + ('deleted', models.BooleanField(default=False, verbose_name='deleted')), + ('locked', models.BooleanField(default=False, verbose_name='locked')), + ('content', models.TextField(blank=True, verbose_name='vulnote contents')), + ('title', models.CharField(help_text='Each revision contains a title field that must be filled out, even if the title has not changed', max_length=512, verbose_name='vul note title')), + ('references', models.TextField(blank=True, verbose_name='references')), + ('date_published', models.DateTimeField(blank=True, null=True)), + ('date_shared', models.DateTimeField(blank=True, null=True)), + ('previous_revision', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, to='vince.VulNoteRevision')), + ('user', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, to=settings.AUTH_USER_MODEL, verbose_name='user')), + ('vulnote', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='vince.VulNote', verbose_name='vulnote')), + ], + options={ + 'ordering': ('created',), + 'get_latest_by': 'revision_number', + 'unique_together': {('vulnote', 'revision_number')}, + }, + ), + migrations.AddField( + model_name='vulnote', + name='current_revision', + field=models.OneToOneField(blank=True, help_text='The revision being displayed for this vul note. If you need to rollback, change value of this field.', null=True, on_delete=django.db.models.deletion.CASCADE, related_name='current_set', to='vince.VulNoteRevision'), + ), + migrations.AddField( + model_name='vulnote', + name='group', + field=models.ForeignKey(blank=True, help_text='Group permissions', null=True, on_delete=django.db.models.deletion.SET_NULL, to='auth.Group'), + ), + migrations.AddField( + model_name='vulnote', + name='owner', + field=models.ForeignKey(blank=True, help_text='The owner of this vul note, typically the creator.', null=True, on_delete=django.db.models.deletion.SET_NULL, to=settings.AUTH_USER_MODEL), + ), + migrations.AddField( + model_name='vulnote', + name='ticket_to_approve', + field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.CASCADE, to='vince.Ticket'), + ), + migrations.CreateModel( + name='VulnerableVendor', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('vendor', models.CharField(help_text='The name of the vendor that may be affected.', max_length=200)), + ('added_to_case', models.DateTimeField(blank=True, help_text='The date that this vendor was added to the case.', null=True)), + ('contact_date', models.DateTimeField(blank=True, help_text='The date that this vendor was first contacted about this vulnerability.', null=True)), + ('seen', models.BooleanField(default=False, help_text='Has the user logged in to view vuln?')), + ('references', models.TextField(blank=True, help_text='Vendor references for this case', null=True)), + ('statement', models.TextField(blank=True, help_text='A general vendor statement for all vuls in the case', null=True)), + ('addendum', models.TextField(blank=True, help_text='VINCE coordinators added text about this vendor.', null=True)), + ('date_modified', models.DateTimeField(auto_now=True)), + ('submission_type', models.CharField(choices=[('email', 'email'), ('kb', 'kb'), ('manual', 'manual'), ('vince', 'vince')], default='vince', max_length=15)), + ('approved', models.BooleanField(default=False, help_text='If all status/statements have been approved.')), + ('time_approved', models.DateTimeField(blank=True, help_text='The time the statement was approved.', null=True)), + ('deleted', models.BooleanField(default=False, help_text='This field is only true if a vendor was removed after the vulnote was published')), + ('share', models.BooleanField(default=False, help_text='Does the vendor give permission to share status/statement pre-publication')), + ('lotus_id', models.CharField(blank=True, help_text='Old Lotus notes style vendor record ID', max_length=20, null=True)), + ('added_by', models.ForeignKey(blank=True, help_text='The user that added this vendor to the case', null=True, on_delete=django.db.models.deletion.SET_NULL, to=settings.AUTH_USER_MODEL)), + ('case', models.ForeignKey(help_text='The Case that describes this vulnerability.', on_delete=django.db.models.deletion.CASCADE, to='vince.VulnerabilityCase')), + ('contact', models.ForeignKey(help_text='The formal contact information if we have it', on_delete=django.db.models.deletion.CASCADE, to='vince.Contact')), + ('user_approved', models.ForeignKey(blank=True, help_text='The user that approved this request.', null=True, on_delete=django.db.models.deletion.SET_NULL, related_name='user_approved', to=settings.AUTH_USER_MODEL)), + ('vendor_contact', models.ForeignKey(blank=True, help_text='More information about the person that provided the statement', null=True, on_delete=django.db.models.deletion.SET_NULL, to='vince.VendorContactData')), + ], + options={ + 'unique_together': {('case', 'contact')}, + }, + ), + migrations.CreateModel( + name='Vulnerability', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('cve', models.CharField(blank=True, max_length=50, null=True, verbose_name='CVE')), + ('description', models.TextField(verbose_name='Description')), + ('date_added', models.DateTimeField(default=django.utils.timezone.now)), + ('modified', models.DateTimeField(auto_now=True)), + ('ask_vendor_status', models.BooleanField(default=False)), + ('deleted', models.BooleanField(default=False, help_text='Only present if a vulnerability is deleted after a case has been published.')), + ('added_to_note', models.BooleanField(default=False)), + ('added_to_post', models.BooleanField(default=False, help_text='If artifact has been added to vendor notification')), + ('case_increment', models.IntegerField(default=0)), + ('search_vector', django.contrib.postgres.search.SearchVectorField(null=True)), + ('case', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='vince.VulnerabilityCase')), + ('user', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, to=settings.AUTH_USER_MODEL)), + ], + ), + migrations.CreateModel( + name='VulCWE', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('cwe', models.CharField(max_length=20, verbose_name='CWE')), + ('date_added', models.DateTimeField(default=django.utils.timezone.now)), + ('user', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, to=settings.AUTH_USER_MODEL)), + ('vul', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='vince.Vulnerability')), + ], + ), + migrations.CreateModel( + name='VendorStatus', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('status', models.IntegerField(choices=[(1, 'Affected'), (2, 'Unaffected'), (3, 'Unknown')], default=3, help_text='The vendor status. Unknown until vendor says otherwise.')), + ('user', models.CharField(help_text='The user that responded to the status request.', max_length=30)), + ('date_added', models.DateTimeField(default=django.utils.timezone.now)), + ('date_modified', models.DateTimeField(auto_now=True)), + ('references', models.TextField(blank=True, null=True)), + ('statement', models.TextField(blank=True, null=True)), + ('approved', models.BooleanField(default=False)), + ('time_approved', models.DateTimeField(blank=True, help_text='The time the statement was approved.', null=True)), + ('user_approved', models.ForeignKey(blank=True, help_text='The user that approved this request.', null=True, on_delete=django.db.models.deletion.SET_NULL, related_name='user_approve', to=settings.AUTH_USER_MODEL)), + ('vendor', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='vince.VulnerableVendor')), + ('vul', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='vince.Vulnerability')), + ], + ), + migrations.CreateModel( + name='VendorNotificationContent', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('version', models.IntegerField(default=0)), + ('post', models.IntegerField(default=0, help_text='The order of the posts.')), + ('content', models.CharField(help_text='This will be a pinned post in the vendor case view.', max_length=3000)), + ('created', models.DateTimeField(auto_now_add=True)), + ('modified', models.DateTimeField(auto_now=True)), + ('published', models.BooleanField(default=False)), + ('published_date', models.DateTimeField(blank=True, help_text='Datetime when the post was published', null=True)), + ('case', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='vince.VulnerabilityCase')), + ('user', models.ForeignKey(blank=True, help_text='The user that wrote the notification', null=True, on_delete=django.db.models.deletion.SET_NULL, to=settings.AUTH_USER_MODEL)), + ], + ), + migrations.CreateModel( + name='VendorNotification', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('notify_date', models.DateTimeField(default=django.utils.timezone.now, help_text='Date the notification was sent')), + ('notification', models.ForeignKey(help_text='The content of the message', on_delete=django.db.models.deletion.CASCADE, to='vince.VendorNotificationEmail')), + ('user', models.ForeignKey(blank=True, help_text='The user that notified', null=True, on_delete=django.db.models.deletion.SET_NULL, to=settings.AUTH_USER_MODEL)), + ('vendor', models.ForeignKey(help_text='The vendor notified', on_delete=django.db.models.deletion.CASCADE, to='vince.VulnerableVendor')), + ], + ), + migrations.CreateModel( + name='UserSettings', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('settings_pickled', models.TextField(blank=True, help_text='This is a base64-encoded representation of a pickled Python dictionary. Do not change this field via the admin.', null=True, verbose_name='Settings Dictionary')), + ('org', models.CharField(blank=True, max_length=250, null=True)), + ('preferred_username', models.CharField(blank=True, max_length=250, null=True)), + ('triage', models.BooleanField(default=False)), + ('user', models.OneToOneField(on_delete=django.db.models.deletion.CASCADE, related_name='usersettings', to=settings.AUTH_USER_MODEL)), + ], + options={ + 'verbose_name': 'User Setting', + 'verbose_name_plural': 'User Settings', + }, + ), + migrations.CreateModel( + name='TicketQueue', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('title', models.CharField(max_length=100, verbose_name='Title')), + ('slug', models.SlugField(help_text="This slug is used when building ticket ID's. Once set, try not to change it or e-mailing may get messy.", unique=True, verbose_name='Slug')), + ('new_ticket_cc', models.CharField(blank=True, help_text='If an e-mail address is entered here, then it will receive notification of all new tickets created for this queue. Enter a comma between multiple e-mail addresses.', max_length=200, null=True, verbose_name='New Ticket CC Address')), + ('updated_ticket_cc', models.CharField(blank=True, help_text='If an e-mail address is entered here, then it will receive notification of all activity (new tickets, closed tickets, updates, reassignments, etc) for this queue. Separate multiple addresses with a comma.', max_length=200, null=True, verbose_name='Updated Ticket CC Address')), + ('queue_type', models.IntegerField(choices=[(1, 'General Ticket'), (2, 'Case Request Queue'), (3, 'Case Task Queue')], default=1, verbose_name='Queue Type')), + ('sqs_url', models.CharField(blank=True, max_length=250, null=True, verbose_name='AWS SQS Queue')), + ('default_owner', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, related_name='default_owner', to=settings.AUTH_USER_MODEL, verbose_name='Default owner')), + ], + ), + migrations.CreateModel( + name='TicketDependency', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('depends_on', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='depends_on', to='vince.Ticket', verbose_name='Depends On Ticket')), + ('ticket', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='ticketdependency', to='vince.Ticket', verbose_name='Ticket')), + ], + options={ + 'verbose_name': 'Ticket dependency', + 'verbose_name_plural': 'Ticket dependencies', + }, + ), + migrations.CreateModel( + name='TicketCC', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('email', models.EmailField(blank=True, help_text='For non-user followers, enter their e-mail address', max_length=254, null=True, verbose_name='E-Mail Address')), + ('can_view', models.BooleanField(blank=True, default=False, help_text='Can this CC login to view the ticket details?', verbose_name='Can View Ticket?')), + ('can_update', models.BooleanField(blank=True, default=False, help_text='Can this CC login and update the ticket?', verbose_name='Can Update Ticket?')), + ('ticket', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='vince.Ticket', verbose_name='Ticket')), + ('user', models.ForeignKey(blank=True, help_text='User who wishes to receive updates for this ticket.', null=True, on_delete=django.db.models.deletion.CASCADE, to=settings.AUTH_USER_MODEL, verbose_name='User')), + ], + ), + migrations.AddField( + model_name='ticket', + name='case', + field=models.ForeignKey(blank=True, help_text='The case this ticket is associated to', null=True, on_delete=django.db.models.deletion.SET_NULL, to='vince.VulnerabilityCase', verbose_name='Case'), + ), + migrations.AddField( + model_name='ticket', + name='queue', + field=models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='vince.TicketQueue', verbose_name='Queue'), + ), + migrations.CreateModel( + name='QueuePermissions', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('group_read', models.BooleanField(default=True, verbose_name='group read access')), + ('group_write', models.BooleanField(default=True, verbose_name='group write access')), + ('group', models.ForeignKey(help_text='Group permissions', on_delete=django.db.models.deletion.CASCADE, to='auth.Group')), + ('queue', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='vince.TicketQueue', verbose_name='Queue')), + ], + ), + migrations.CreateModel( + name='PostalAddress', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('country', django_countries.fields.CountryField(blank=True, default='US', max_length=2, null=True)), + ('primary', models.BooleanField(default=True)), + ('address_type', models.CharField(choices=[('Home', 'Home'), ('Work', 'Work'), ('Other', 'Other'), ('School', 'School')], default='Work', max_length=20)), + ('street', models.CharField(max_length=150)), + ('street2', models.CharField(blank=True, max_length=150, null=True)), + ('city', models.CharField(max_length=50)), + ('state', models.CharField(max_length=40)), + ('zip_code', models.CharField(max_length=12)), + ('comment', models.CharField(blank=True, max_length=200, null=True)), + ('date_added', models.DateTimeField(default=django.utils.timezone.now)), + ('version', models.IntegerField(default=0)), + ('contact', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='vince.Contact')), + ('user_added', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, to=settings.AUTH_USER_MODEL)), + ], + ), + migrations.CreateModel( + name='PhoneContact', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('country_code', models.CharField(default='+1', max_length=5)), + ('phone', models.CharField(max_length=50)), + ('phone_type', models.CharField(choices=[('Fax', 'Fax'), ('Home', 'Home'), ('Hotline', 'Hotline'), ('Office', 'Office'), ('Mobile', 'Mobile')], default='Work', max_length=20)), + ('comment', models.CharField(blank=True, max_length=200, null=True)), + ('date_added', models.DateTimeField(default=django.utils.timezone.now)), + ('version', models.IntegerField(default=0)), + ('contact', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='vince.Contact')), + ('user_added', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, to=settings.AUTH_USER_MODEL)), + ], + ), + migrations.CreateModel( + name='NotificationAttachment', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('attached', models.DateTimeField(default=django.utils.timezone.now)), + ('attachment', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='vince.Attachment')), + ('notification', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='vince.VendorNotificationContent', verbose_name='Notification')), + ('user', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, to=settings.AUTH_USER_MODEL)), + ], + ), + migrations.CreateModel( + name='GroupMember', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('member_type', models.CharField(choices=[('Organization', 'Organization'), ('Person', 'Person'), ('Group', 'Group')], default='Organization', max_length=30)), + ('date_added', models.DateTimeField(default=django.utils.timezone.now)), + ('contact', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.CASCADE, to='vince.Contact')), + ('group', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='vince.ContactGroup')), + ('group_member', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.CASCADE, to='vince.GroupDuplicate')), + ('user_added', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, to=settings.AUTH_USER_MODEL)), + ], + ), + migrations.CreateModel( + name='GroupAdmin', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('contact', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='vince.Contact')), + ('email', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='vince.EmailContact')), + ], + ), + migrations.CreateModel( + name='GroupActivity', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('text', models.CharField(blank=True, max_length=1500, null=True)), + ('action', models.IntegerField()), + ('action_ts', models.DateTimeField(default=django.utils.timezone.now)), + ('group', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='vince.ContactGroup')), + ('user', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to=settings.AUTH_USER_MODEL)), + ], + ), + migrations.CreateModel( + name='CVEAllocation', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('title', models.CharField(max_length=200, verbose_name='Title')), + ('assigner', models.EmailField(default='test@example.com', max_length=254)), + ('cve_name', models.CharField(max_length=200, verbose_name='CVE ID')), + ('references', vince.models.OldJSONField(blank=True, null=True, verbose_name='References')), + ('source', models.IntegerField(blank=True, choices=[(1, 'INTERNAL'), (2, 'EXTERNAL'), (3, 'USER'), (4, 'UNKNOWN')], null=True)), + ('description', models.CharField(max_length=500, verbose_name='Description')), + ('work_around', vince.models.OldJSONField(blank=True, null=True, verbose_name='Workaround')), + ('resolution', models.CharField(blank=True, max_length=500, null=True, verbose_name='Resolution')), + ('credit', models.CharField(blank=True, max_length=500, null=True, verbose_name='Credit')), + ('cwe', vince.models.OldJSONField(blank=True, null=True, verbose_name='CWE')), + ('date_added', models.DateTimeField(blank=True, default=django.utils.timezone.now, null=True)), + ('modified', models.DateTimeField(auto_now=True)), + ('search_vector', django.contrib.postgres.search.SearchVectorField(null=True)), + ('user', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, to=settings.AUTH_USER_MODEL)), + ('vul', models.OneToOneField(blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, to='vince.Vulnerability')), + ], + ), + migrations.CreateModel( + name='CVEAffectedProduct', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('name', models.CharField(max_length=200, verbose_name='Affected Product Name')), + ('version_name', models.CharField(blank=True, max_length=100, null=True, verbose_name='Affected Version')), + ('version_value', models.CharField(max_length=100, verbose_name='Affected Version Value')), + ('organization', models.CharField(blank=True, max_length=100, null=True, verbose_name='Affected Organization')), + ('cve', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='vince.CVEAllocation')), + ], + ), + migrations.CreateModel( + name='ContactPgP', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('created_ts', models.DateTimeField(default=django.utils.timezone.now)), + ('pgp_key_id', models.CharField(max_length=200)), + ('pgp_fingerprint', models.CharField(blank=True, max_length=200, null=True)), + ('pgp_version', models.IntegerField(blank=True, null=True)), + ('pgp_key_data', models.TextField(blank=True, null=True)), + ('revoked', models.BooleanField(default=False)), + ('startdate', models.CharField(blank=True, max_length=12, null=True)), + ('enddate', models.CharField(blank=True, max_length=12, null=True)), + ('pgp_protocol', models.CharField(blank=True, max_length=30, null=True)), + ('version', models.IntegerField(default=0)), + ('contact', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='vince.Contact')), + ('user', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, to=settings.AUTH_USER_MODEL)), + ], + ), + migrations.AddField( + model_name='casetemplate', + name='queue', + field=models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='vince.TicketQueue', verbose_name='Queue'), + ), + migrations.AddField( + model_name='casetemplate', + name='user', + field=models.ForeignKey(blank=True, help_text='The user that created this template.', null=True, on_delete=django.db.models.deletion.SET_NULL, to=settings.AUTH_USER_MODEL), + ), + migrations.CreateModel( + name='CaseTask', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('task_title', models.CharField(max_length=200, verbose_name='Title')), + ('task_description', models.TextField(blank=True, null=True, verbose_name='Description')), + ('task_priority', models.IntegerField(choices=[(1, '1. Critical'), (2, '2. High'), (3, '3. Normal'), (4, '4. Low'), (5, '5. Very Low')], default=3, help_text='1 = Highest Priority, 5 = Low Priority', verbose_name='Priority')), + ('time_to_complete', models.DurationField(default=datetime.timedelta(days=5), verbose_name='Time to complete')), + ('dependency', models.BooleanField(default=False, help_text='Ticket will be created as a dependency of the case.')), + ('assigned_to', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.CASCADE, to=settings.AUTH_USER_MODEL)), + ('template', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='vince.CaseTemplate')), + ], + ), + migrations.CreateModel( + name='CasePermissions', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('group_read', models.BooleanField(default=True, verbose_name='group read access')), + ('group_write', models.BooleanField(default=True, verbose_name='group write access')), + ('case', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='vince.VulnerabilityCase', verbose_name='Case')), + ('group', models.ForeignKey(help_text='Group permissions', on_delete=django.db.models.deletion.CASCADE, to='auth.Group')), + ], + ), + migrations.CreateModel( + name='CaseParticipant', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('user_name', models.CharField(help_text='The name of the user.', max_length=100)), + ('added_to_case', models.DateTimeField(default=django.utils.timezone.now, help_text='The date that this user was added to the case.')), + ('status', models.CharField(blank=True, help_text='Participant status.', max_length=50, null=True)), + ('coordinator', models.BooleanField(default=False, help_text='Is this user a vulnerability coordinator?')), + ('added_by', models.ForeignKey(blank=True, help_text='The user that added this vendor to the case', null=True, on_delete=django.db.models.deletion.SET_NULL, to=settings.AUTH_USER_MODEL)), + ('case', models.ForeignKey(help_text='The Case that describes this vulnerability.', on_delete=django.db.models.deletion.CASCADE, to='vince.VulnerabilityCase')), + ], + ), + migrations.CreateModel( + name='CaseDependency', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('case', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='casedependency', to='vince.VulnerabilityCase', verbose_name='Case')), + ('depends_on', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='case_depends_on', to='vince.Ticket', verbose_name='Depends On Ticket')), + ], + options={ + 'verbose_name': 'Case dependency', + 'verbose_name_plural': 'Case dependencies', + }, + ), + migrations.CreateModel( + name='CaseAttachment', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('attached', models.DateTimeField(default=django.utils.timezone.now)), + ('attachment', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='vince.Attachment')), + ('case', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='vince.VulnerabilityCase', verbose_name='Case')), + ('user', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, to=settings.AUTH_USER_MODEL)), + ], + ), + migrations.CreateModel( + name='CaseAssignment', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('assigned', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to=settings.AUTH_USER_MODEL)), + ('case', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='vince.VulnerabilityCase')), + ], + ), + migrations.CreateModel( + name='ArtifactTag', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('tag', models.CharField(help_text='A short word or phrase to identify this artifact.', max_length=50)), + ('date_added', models.DateTimeField(default=django.utils.timezone.now)), + ('artifact', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='vince.Artifact')), + ('user', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, to=settings.AUTH_USER_MODEL)), + ], + ), + migrations.CreateModel( + name='ArtifactAttachment', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('artifact', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='vince.Artifact', verbose_name='Artifact')), + ('attachment', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='vince.Attachment')), + ], + ), + migrations.CreateModel( + name='Activity', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('text', models.CharField(blank=True, max_length=1500, null=True)), + ('action', models.IntegerField()), + ('action_ts', models.DateTimeField(default=django.utils.timezone.now)), + ('contact', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='vince.Contact')), + ('user', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to=settings.AUTH_USER_MODEL)), + ], + ), + migrations.AddField( + model_name='action', + name='artifact', + field=models.ForeignKey(blank=True, help_text='If an artifact was added, reference to artifact.', null=True, on_delete=django.db.models.deletion.CASCADE, to='vince.Artifact'), + ), + migrations.AddField( + model_name='action', + name='user', + field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.CASCADE, to=settings.AUTH_USER_MODEL, verbose_name='User'), + ), + migrations.CreateModel( + name='CaseMessageAction', + fields=[ + ('caseaction_ptr', models.OneToOneField(auto_created=True, on_delete=django.db.models.deletion.CASCADE, parent_link=True, primary_key=True, serialize=False, to='vince.CaseAction')), + ('message', models.IntegerField(verbose_name='VinceComm Message ID')), + ('thread', models.IntegerField(verbose_name='VinceComm Thread ID')), + ('replied', models.BooleanField(default=False, verbose_name='Is this a reply?')), + ], + bases=('vince.caseaction',), + ), + migrations.AddIndex( + model_name='vulnerabilitycase', + index=django.contrib.postgres.indexes.GinIndex(fields=['search_vector'], name='case_gin'), + ), + migrations.AddIndex( + model_name='vulnerability', + index=django.contrib.postgres.indexes.GinIndex(fields=['search_vector'], name='vulnerability_gin'), + ), + migrations.AlterUniqueTogether( + name='vendorstatus', + unique_together={('vendor', 'vul')}, + ), + migrations.AlterUniqueTogether( + name='ticketdependency', + unique_together={('ticket', 'depends_on')}, + ), + migrations.AddField( + model_name='ticketchange', + name='followup', + field=models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='vince.FollowUp', verbose_name='Follow-up'), + ), + migrations.AddField( + model_name='ticketartifact', + name='ticket', + field=models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='vince.Ticket'), + ), + migrations.AddIndex( + model_name='ticket', + index=django.contrib.postgres.indexes.GinIndex(fields=['search_vector'], name='ticket_gin'), + ), + migrations.AlterUniqueTogether( + name='queuepermissions', + unique_together={('queue', 'group')}, + ), + migrations.AddField( + model_name='followupmessage', + name='followup', + field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.CASCADE, to='vince.FollowUp', verbose_name='Follow-up'), + ), + migrations.AddField( + model_name='followup', + name='ticket', + field=models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='vince.Ticket', verbose_name='Ticket'), + ), + migrations.AddIndex( + model_name='cveallocation', + index=django.contrib.postgres.indexes.GinIndex(fields=['search_vector'], name='cve_gin'), + ), + migrations.AddIndex( + model_name='contact', + index=django.contrib.postgres.indexes.GinIndex(fields=['search_vector'], name='cmgr_gin'), + ), + migrations.AlterUniqueTogether( + name='casepermissions', + unique_together={('case', 'group')}, + ), + migrations.AlterUniqueTogether( + name='casedependency', + unique_together={('case', 'depends_on')}, + ), + migrations.AddField( + model_name='caseartifact', + name='case', + field=models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='vince.VulnerabilityCase'), + ), + migrations.AddField( + model_name='caseaction', + name='case', + field=models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='vince.VulnerabilityCase', verbose_name='Case'), + ), + migrations.AddField( + model_name='caseaction', + name='notification', + field=models.ForeignKey(blank=True, help_text='What notification was sent?', null=True, on_delete=django.db.models.deletion.CASCADE, to='vince.VendorNotificationContent'), + ), + migrations.AddField( + model_name='caseaction', + name='vendor', + field=models.ForeignKey(blank=True, help_text='What vendor was involved in the change?', null=True, on_delete=django.db.models.deletion.CASCADE, to='vince.VulnerableVendor'), + ), + migrations.AddField( + model_name='caseaction', + name='vulnote', + field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.CASCADE, to='vince.VulNoteRevision'), + ), + migrations.RunSQL( + sql='\n DROP TRIGGER IF EXISTS ticket_update_trigger\n ON vince_ticket;\n ', + ), + migrations.RunSQL( + sql="\n CREATE TRIGGER ticket_update_trigger\n BEFORE INSERT OR UPDATE of title, description, search_vector\n ON vince_ticket\n FOR EACH ROW EXECUTE PROCEDURE\n tsvector_update_trigger(search_vector, 'pg_catalog.english', title, description);\n\n UPDATE vince_ticket SET search_vector = NULL;\n ", + reverse_sql='\n DROP TRIGGER IF EXISTS ticket_update_trigger\n ON vince_ticket;\n ', + ), + migrations.RunSQL( + sql='\n DROP TRIGGER IF EXISTS case_update_trigger\n ON vince_vulnerabilitycase;\n ', + ), + migrations.RunSQL( + sql="\n CREATE TRIGGER case_update_trigger\n BEFORE INSERT OR UPDATE of vuid, title, summary, product_name, product_version, search_vector\n ON vince_vulnerabilitycase\n\n FOR EACH ROW EXECUTE PROCEDURE\n tsvector_update_trigger(search_vector, 'pg_catalog.english', vuid, title, summary, product_name, product_version);\n UPDATE vince_vulnerabilitycase SET search_vector = NULL;\n ", + reverse_sql='\n DROP TRIGGER IF EXISTS case_update_trigger\n ON vince_vulnerabilitycase;\n ', + ), + migrations.RunSQL( + sql='\n DROP TRIGGER IF EXISTS cmgr_update_trigger\n ON vince_contact;\n ', + ), + migrations.RunSQL( + sql="\n CREATE TRIGGER cmgr_update_trigger\n BEFORE INSERT OR UPDATE of vendor_name, srmail_peer, srmail_salutation, countrycode, search_vector\n\n ON vince_contact\n FOR EACH ROW EXECUTE PROCEDURE\n tsvector_update_trigger(search_vector, 'pg_catalog.english', vendor_name, srmail_peer, srmail_salutation, countrycode);\n UPDATE vince_contact SET search_vector = NULL;\n ", + reverse_sql='\n DROP TRIGGER IF EXISTS cmgr_update_trigger\n ON vince_contact;\n ', + ), + migrations.RunSQL( + sql='\n DROP TRIGGER IF EXISTS cve_update_trigger\n ON vince_cveallocation;\n ', + ), + migrations.RunSQL( + sql="\n CREATE TRIGGER cve_update_trigger\n BEFORE INSERT OR UPDATE of title, assigner, cve_name, description, resolution, credit, search_vector\n\n ON vince_cveallocation\n FOR EACH ROW EXECUTE PROCEDURE\n tsvector_update_trigger(search_vector, 'pg_catalog.english', title, assigner, cve_name, description, resolution, credit);\n UPDATE vince_cveallocation SET search_vector = NULL;\n ", + reverse_sql='\n DROP TRIGGER IF EXISTS cve_update_trigger\n ON vince_cveallocation;\n ', + ), + migrations.RunSQL( + sql='\n DROP TRIGGER IF EXISTS vulnerability_update_trigger\n ON vince_vulnerability;\n ', + ), + migrations.RunSQL( + sql="\n CREATE TRIGGER vulnerability_update_trigger\n BEFORE INSERT OR UPDATE of cve, description, search_vector\n\n ON vince_vulnerability\n FOR EACH ROW EXECUTE PROCEDURE\n tsvector_update_trigger(search_vector, 'pg_catalog.english', cve, description);\n UPDATE vince_vulnerability SET search_vector = NULL;\n ", + reverse_sql='\n DROP TRIGGER IF EXISTS vulnerability_update_trigger\n ON vince_vulnerability;\n ', + ), + migrations.AlterField( + model_name='caserequest', + name='user_file', + field=models.FileField(blank=True, null=True, storage=bigvince.storage_backends.PrivateMediaStorage(), upload_to=vince.models.update_filename), + ), + migrations.AddField( + model_name='emailcontact', + name='email_list', + field=models.BooleanField(default=False), + ), + migrations.AddField( + model_name='vulnerablevendor', + name='statement_date', + field=models.DateTimeField(blank=True, null=True), + ), + migrations.AddField( + model_name='vulnerabilitycase', + name='publicdate', + field=models.DateTimeField(blank=True, null=True), + ), + migrations.AlterField( + model_name='caseparticipant', + name='added_to_case', + field=models.DateTimeField(blank=True, help_text='The date that this user was added to the case.', null=True), + ), + migrations.AlterField( + model_name='ticket', + name='close_reason', + field=models.IntegerField(choices=[(1, 'Opened Case'), (2, 'Task Complete'), (3, 'Spam'), (4, 'Decline'), (5, 'Decline, already fixed'), (6, 'Decline, vendor not contacted'), (7, 'Decline, vendor cooperating'), (8, 'Decline, live website vul'), (9, 'Forward')], default=2), + ), + migrations.AlterField( + model_name='vendorstatus', + name='user', + field=models.CharField(help_text='The user that responded to the status request.', max_length=200), + ), + migrations.AddField( + model_name='vulnerablevendor', + name='approve_ticket', + field=models.OneToOneField(blank=True, help_text='The ticket to approve this vendor', null=True, on_delete=django.db.models.deletion.SET_NULL, related_name='approve_vendor', to='vince.Ticket'), + ), + migrations.AlterField( + model_name='vendorstatus', + name='status', + field=models.IntegerField(choices=[(1, 'Affected'), (2, 'Not Affected'), (3, 'Unknown')], default=3, help_text='The vendor status. Unknown until vendor says otherwise.'), + ), + migrations.AlterModelOptions( + name='vendorstatus', + options={'verbose_name_plural': 'Vendor Statuses'}, + ), + migrations.AlterField( + model_name='vulnerabilitycase', + name='due_date', + field=models.DateTimeField(blank=True, help_text='Estimated Public Date', null=True), + ), + migrations.AlterModelOptions( + name='ticket', + options={}, + ), + migrations.AlterField( + model_name='ticket', + name='submitter_email', + field=models.CharField(blank=True, help_text='The submitter will receive an email for all public follow-ups left for this task.', max_length=300, null=True, verbose_name='Submitter E-Mail'), + ), + migrations.AlterField( + model_name='contactpgp', + name='pgp_protocol', + field=models.CharField(default='GPG1 ARMOR MIME', max_length=30), + ), + migrations.AlterField( + model_name='action', + name='title', + field=models.CharField(blank=True, max_length=300, null=True, verbose_name='Title'), + ), + migrations.AddField( + model_name='contact', + name='uuid', + field=models.UUIDField(default=uuid.uuid4, editable=False, unique=True), + ), + migrations.AddField( + model_name='vulnerabilitycase', + name='publicurl', + field=models.CharField(blank=True, help_text='The URL for the public notice of a vulnerability.', max_length=500, null=True, verbose_name='Public URL'), + ), + migrations.CreateModel( + name='AdminPGPEmail', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('pgp_key_data', models.TextField(default=1)), + ('pgp_key_id', models.CharField(max_length=200)), + ('email', models.CharField(help_text='Multiple emails should be separated by a comma only (no space)', max_length=254, verbose_name='Email(s)')), + ('name', models.CharField(blank=True, max_length=200, null=True)), + ('user_added', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, to=settings.AUTH_USER_MODEL)), + ('active', models.BooleanField(default=True)), + ], + ), + migrations.AddField( + model_name='vulnerabilitycase', + name='changes_to_publish', + field=models.BooleanField(default=False, help_text='Switch to True if changes to case require publishing'), + ), + migrations.AlterField( + model_name='action', + name='new_status', + field=models.IntegerField(blank=True, choices=[(1, 'Open'), (2, 'Reopened'), (3, 'Resolved'), (4, 'Closed'), (5, 'Duplicate'), (6, 'In progress')], help_text='If the status was changed, what was it changed to?', null=True, verbose_name='New Status'), + ), + migrations.AlterField( + model_name='ticket', + name='status', + field=models.IntegerField(choices=[(1, 'Open'), (2, 'Reopened'), (3, 'Resolved'), (4, 'Closed'), (5, 'Duplicate'), (6, 'In progress')], default=1, verbose_name='Status'), + ), + migrations.CreateModel( + name='TicketContact', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('contact', models.ForeignKey(help_text='The contact associated with this ticket.', on_delete=django.db.models.deletion.CASCADE, to='vince.Contact')), + ('ticket', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='vince.Ticket', verbose_name='Ticket')), + ], + ), + migrations.AddField( + model_name='caseparticipant', + name='group', + field=models.BooleanField(default=False, help_text='Is this a vendor or a group?'), + ), + migrations.AlterField( + model_name='vendornotificationcontent', + name='content', + field=models.TextField(help_text='This will be a pinned post in the vendor case view.'), + ), + migrations.AddField( + model_name='vendornotification', + name='emails', + field=models.CharField(blank=True, help_text='A comma separated list of the emails that was sent this message', max_length=1000, null=True), + ), + migrations.AlterField( + model_name='attachment', + name='file', + field=models.FileField(max_length=1000, storage=bigvince.storage_backends.PrivateMediaStorage(), upload_to=vince.models.get_uuid_filename, verbose_name='File'), + ), + migrations.CreateModel( + name='CognitoUserAction', + fields=[ + ('action_ptr', models.OneToOneField(auto_created=True, on_delete=django.db.models.deletion.CASCADE, parent_link=True, primary_key=True, serialize=False, to='vince.Action')), + ('email', models.EmailField(help_text='The email address of the cognito user', max_length=254)), + ], + bases=('vince.action',), + ), + migrations.AddField( + model_name='attachment', + name='uuid', + field=models.UUIDField(default=uuid.uuid4, editable=False, unique=True), + ), + migrations.CreateModel( + name='VinceFile', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('user', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, to=settings.AUTH_USER_MODEL)), + ('case', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, to='vince.VulnerabilityCase', verbose_name='Case')), + ('vulnote', models.BooleanField(default=False)), + ('comm_id', models.IntegerField(default=0, verbose_name='VinceComm VinceTrackAttachment ID')), + ('filename', models.CharField(default='filename', max_length=500)), + ('to_remove', models.BooleanField(default=False)), + ], + ), + migrations.AlterField( + model_name='action', + name='artifact', + field=models.ForeignKey(blank=True, help_text='If an artifact was added, reference to artifact.', null=True, on_delete=django.db.models.deletion.SET_NULL, to='vince.Artifact'), + ), + migrations.CreateModel( + name='VinceSMIMECertificate', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('email', models.EmailField(help_text='The email that belongs to the certificate', max_length=254)), + ('certificate', models.FileField(storage=bigvince.storage_backends.PrivateMediaStorage(location='certs'), upload_to='', verbose_name='Certificate')), + ], + ), + migrations.CreateModel( + name='VinceEmail', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('to', models.CharField(help_text='The email address(es). Multiple emails should be separated by a comma.', max_length=1000)), + ('pgp_key_id', models.CharField(blank=True, max_length=50, null=True)), + ('email_type', models.IntegerField(choices=[(1, 'Regular'), (2, 'PgP'), (3, 'S/MIME')], default=1)), + ('certificate', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, to='vince.VinceSMIMECertificate')), + ('notification', models.ForeignKey(help_text='The subject/content of the message', on_delete=django.db.models.deletion.CASCADE, to='vince.VendorNotificationEmail')), + ('ticket', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, to='vince.Ticket', verbose_name='Ticket')), + ('user', models.ForeignKey(blank=True, help_text='The user that is sending the email.', null=True, on_delete=django.db.models.deletion.SET_NULL, to=settings.AUTH_USER_MODEL)), + ], + ), + migrations.AddField( + model_name='contactpgp', + name='pgp_email', + field=models.EmailField(blank=True, help_text='The email that belongs with this PGP Key.', max_length=254, null=True), + ), + migrations.AddField( + model_name='vendornotificationemail', + name='search_vector', + field=django.contrib.postgres.search.SearchVectorField(null=True), + ), + migrations.AddIndex( + model_name='vendornotificationemail', + index=django.contrib.postgres.indexes.GinIndex(fields=['search_vector'], name='email_gin'), + ), + migrations.RunSQL( + sql="\n CREATE TRIGGER email_update_trigger\n BEFORE INSERT OR UPDATE of subject, email_body, search_vector\n ON vince_vendornotificationemail\n FOR EACH ROW EXECUTE PROCEDURE\n tsvector_update_trigger(search_vector, 'pg_catalog.english', subject, email_body);\n\n UPDATE vince_vendornotificationemail SET search_vector = NULL;\n ", + reverse_sql='\n DROP TRIGGER IF EXISTS email_update_trigger\n ON vince_vendornotificationemail;\n ', + ), + migrations.AddField( + model_name='vinceemail', + name='created', + field=models.DateTimeField(default=django.utils.timezone.now), + ), + migrations.AlterField( + model_name='vinceemail', + name='pgp_key_id', + field=models.CharField(blank=True, max_length=500, null=True), + ), + migrations.CreateModel( + name='MFAResetTicket', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('user_id', models.IntegerField(help_text='The vincecomm user that requested the reset')), + ('created', models.DateTimeField(default=django.utils.timezone.now)), + ('ticket', models.ForeignKey(help_text='The ticket used for mfa tracking', on_delete=django.db.models.deletion.CASCADE, to='vince.Ticket')), + ], + ), + migrations.AddField( + model_name='emailtemplate', + name='modified', + field=models.DateTimeField(auto_now=True), + ), + migrations.AddField( + model_name='emailtemplate', + name='user', + field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, to=settings.AUTH_USER_MODEL), + ), + migrations.AlterField( + model_name='emailtemplate', + name='plain_text', + field=models.TextField(help_text='If related to a ticket, the context available to you includes {{ ticket }}, {{ queue }}, and depending on the time of the call: {{ resolution }} or {{ comment }}.', verbose_name='Plain Text'), + ), + migrations.AlterField( + model_name='emailtemplate', + name='subject', + field=models.CharField(help_text='If related to a ticket action, This will be prefixed "[ticket.ticket] ticket.title". We recommend something simple such as "(Updated") or "(Closed)" - the same context is available as in plain_text, below.', max_length=100, verbose_name='Subject'), + ), + migrations.AlterField( + model_name='phonecontact', + name='phone_type', + field=models.CharField(choices=[('Fax', 'Fax'), ('Home', 'Home'), ('Hotline', 'Hotline'), ('Office', 'Office'), ('Mobile', 'Mobile')], default='Office', max_length=20), + ), + migrations.CreateModel( + name='TicketTag', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('created', models.DateTimeField(auto_now_add=True)), + ('tag', models.CharField(help_text='The tag', max_length=50)), + ('ticket', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='vince.Ticket', verbose_name='Ticket')), + ('user', models.ForeignKey(blank=True, help_text='User that tags this ticket.', null=True, on_delete=django.db.models.deletion.CASCADE, to=settings.AUTH_USER_MODEL, verbose_name='User')), + ], + ), + migrations.AddField( + model_name='usersettings', + name='case_template', + field=models.ForeignKey(blank=True, help_text='The default template to use when creating cases', null=True, on_delete=django.db.models.deletion.SET_NULL, to='vince.CaseTemplate'), + ), + migrations.CreateModel( + name='CalendarEvent', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('created', models.DateTimeField(default=django.utils.timezone.now)), + ('date', models.DateTimeField()), + ('title', models.CharField(max_length=200, verbose_name='Event Title')), + ('event_id', models.IntegerField(choices=[(1, 'Triage'), (2, 'Out of Office')], default=1)), + ('user', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='assigned', to=settings.AUTH_USER_MODEL)), + ('user_added', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, related_name='user_added', to=settings.AUTH_USER_MODEL)), + ('end_date', models.DateTimeField(blank=True, null=True)), + ], + ), + migrations.AlterField( + model_name='artifact', + name='description', + field=models.TextField(blank=True, help_text='A description of this artifact.', null=True), + ), + migrations.CreateModel( + name='UserRole', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('role', models.CharField(max_length=200)), + ('group', models.ForeignKey(blank=True, help_text='Not required, but if left blank, will be a global role.', null=True, on_delete=django.db.models.deletion.CASCADE, to='auth.Group')), + ], + ), + migrations.CreateModel( + name='UserAssignmentWeight', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('weight', models.IntegerField()), + ('current_weight', models.IntegerField(default=0)), + ('effective_weight', models.IntegerField()), + ('role', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='vince.UserRole')), + ('user', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, related_name='assignment', to=settings.AUTH_USER_MODEL)), + ], + options={ + 'unique_together': {('user', 'role')}, + }, + ), + migrations.CreateModel( + name='VTDailyNotification', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('action_type', models.IntegerField()), + ('action', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.CASCADE, to='vince.CaseAction')), + ('case', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='vince.VulnerabilityCase')), + ('followup', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.CASCADE, to='vince.FollowUp')), + ('user', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to=settings.AUTH_USER_MODEL)), + ], + ), + migrations.CreateModel( + name='VulNoteReview', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('review', models.TextField()), + ('feedback', models.TextField(blank=True, help_text='Feedback/Comments to the Author', null=True, verbose_name='Feedback')), + ('marks', vince.models.OldJSONField(blank=True, null=True)), + ('complete', models.BooleanField(default=False)), + ('approve', models.BooleanField(default=False)), + ('reviewer', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, to=settings.AUTH_USER_MODEL)), + ('ticket', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, to='vince.Ticket')), + ('vulnote', models.ForeignKey(help_text='The revision of the vulnote being reviewed.', on_delete=django.db.models.deletion.CASCADE, to='vince.VulNoteRevision')), + ('date_complete', models.DateTimeField(blank=True, null=True)), + ], + ), + migrations.AddField( + model_name='artifact', + name='file_hash', + field=models.CharField(blank=True, help_text='The hash of the file', max_length=100, null=True), + ), + migrations.RemoveField( + model_name='ticketqueue', + name='sqs_url', + ), + migrations.AddField( + model_name='casepermissions', + name='publish', + field=models.BooleanField(default=True, verbose_name='publish permissions'), + ), + migrations.AddField( + model_name='queuepermissions', + name='publish', + field=models.BooleanField(default=True, verbose_name='queue publish access'), + ), + migrations.AddField( + model_name='ticketqueue', + name='from_email', + field=models.CharField(blank=True, max_length=250, null=True, verbose_name='S3 Bucket Name for Email'), + ), + migrations.AlterField( + model_name='ticketqueue', + name='queue_type', + field=models.IntegerField(choices=[(1, 'General Ticket'), (2, 'Case Request Queue'), (3, 'Case Task Queue'), (4, 'Other Queue')], default=1, verbose_name='Queue Type'), + ), + migrations.AddField( + model_name='action', + name='email_bucket', + field=models.CharField(blank=True, help_text='If email-originated, bucket name here', max_length=100, null=True), + ), + migrations.AddField( + model_name='action', + name='email_id', + field=models.CharField(blank=True, help_text='If email-originated, email ID here', max_length=150, null=True), + ), + migrations.AlterField( + model_name='vulnote', + name='ticket_to_approve', + field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, to='vince.Ticket'), + ), + migrations.CreateModel( + name='VulExploit', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('date_added', models.DateTimeField(default=django.utils.timezone.now)), + ('reference_date', models.DateTimeField(blank=True, null=True)), + ('link', models.URLField()), + ('reference_type', models.CharField(choices=[('code', 'code'), ('report', 'report'), ('other', 'other')], default='code', max_length=30)), + ('notes', models.TextField(blank=True, null=True)), + ('user', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, to=settings.AUTH_USER_MODEL)), + ('vul', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='vince.Vulnerability')), + ('publish', models.BooleanField(default=False)), + ('share', models.BooleanField(default=False)), + ], + ), + migrations.CreateModel( + name='VulSSVC', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('state', models.IntegerField(choices=[(0, 'Undecided'), (1, 'POC'), (2, 'Active')], default=0)), + ('automatable', models.BooleanField(default=False)), + ('value_density', models.IntegerField(choices=[(0, 'Undecided'), (1, 'diffuse'), (2, 'concentrated')], default=0)), + ('technical_impact', models.IntegerField(choices=[(0, 'Undecided'), (1, 'Partial'), (2, 'Total')], default=0)), + ('vul', models.OneToOneField(on_delete=django.db.models.deletion.CASCADE, to='vince.Vulnerability')), + ('json_file', vince.models.OldJSONField(blank=True, null=True, verbose_name='SSVC JSON File')), + ('decision', models.CharField(blank=True, max_length=50, null=True)), + ('last_edit', models.DateTimeField(default=django.utils.timezone.now, verbose_name='Last Modified Date')), + ('user', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, to=settings.AUTH_USER_MODEL, verbose_name='User')), + ], + ), + migrations.AddField( + model_name='vulnerablevendor', + name='from_group', + field=models.ForeignKey(blank=True, help_text='If this vendor was added from a group, add it here', null=True, on_delete=django.db.models.deletion.SET_NULL, to='vince.ContactGroup'), + ), + migrations.CreateModel( + name='VulCVSS', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('AV', models.CharField(max_length=2, verbose_name='Attack Vector')), + ('AC', models.CharField(max_length=2, verbose_name='Attack Complexity')), + ('PR', models.CharField(max_length=2, verbose_name='Privileges Required')), + ('UI', models.CharField(max_length=2, verbose_name='User Interaction')), + ('S', models.CharField(max_length=2, verbose_name='Scope')), + ('C', models.CharField(max_length=2, verbose_name='Confidentiality')), + ('I', models.CharField(max_length=2, verbose_name='Integrity')), + ('A', models.CharField(max_length=2, verbose_name='Availability')), + ('last_modified', models.DateTimeField(default=django.utils.timezone.now, verbose_name='Last Modified Date')), + ('scored_by', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, to=settings.AUTH_USER_MODEL, verbose_name='User')), + ('vul', models.OneToOneField(on_delete=django.db.models.deletion.CASCADE, to='vince.Vulnerability')), + ('score', models.DecimalField(blank=True, decimal_places=1, max_digits=3, null=True, verbose_name='CVSS Base Score')), + ('severity', models.CharField(blank=True, max_length=20, null=True, verbose_name='CVSS Severity')), + ('vector', models.CharField(blank=True, max_length=100, null=True, verbose_name='CVSS Vector String')), + ('E', models.CharField(default='X', max_length=2, verbose_name='Exploit Code Maturity')), + ('RC', models.CharField(default='X', max_length=2, verbose_name='Report Confidence')), + ('RL', models.CharField(default='X', max_length=2, verbose_name='Remediation Level')), + ], + ), + migrations.AddField( + model_name='ticketqueue', + name='team', + field=models.ForeignKey(blank=True, help_text='Team Owner', null=True, on_delete=django.db.models.deletion.SET_NULL, to='auth.Group'), + ), + migrations.AddField( + model_name='usersettings', + name='contacts_read', + field=models.BooleanField(default=True, help_text='Does this user have permissions to read VINCE contacts'), + ), + migrations.AddField( + model_name='usersettings', + name='contacts_write', + field=models.BooleanField(default=True, help_text='Does this user have permissions to add/edit VINCE contacts'), + ), + migrations.CreateModel( + name='VinceReminder', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('alert_date', models.DateTimeField()), + ('title', models.CharField(max_length=1000)), + ('created', models.DateTimeField(default=django.utils.timezone.now)), + ('case', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.CASCADE, to='vince.VulnerabilityCase')), + ('created_by', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, related_name='created_by', to=settings.AUTH_USER_MODEL)), + ('ticket', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.CASCADE, to='vince.Ticket')), + ('user', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to=settings.AUTH_USER_MODEL)), + ('create_ticket', models.BooleanField(default=False, help_text='Create a new ticket on a future date')), + ('frequency', models.IntegerField(choices=[(0, 'None'), (1, 'Daily'), (7, 'Weekly'), (14, 'Biweekly'), (28, 'Monthly')], default=0, help_text='Recurrence of Reminder')), + ], + ), + migrations.CreateModel( + name='VulnerabilityTag', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('created', models.DateTimeField(auto_now_add=True)), + ('tag', models.CharField(help_text='The tag', max_length=50)), + ('user', models.ForeignKey(blank=True, help_text='User that created this tag.', null=True, on_delete=django.db.models.deletion.CASCADE, to=settings.AUTH_USER_MODEL, verbose_name='User')), + ('vulnerability', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='vince.Vulnerability', verbose_name='Vulnerability')), + ], + ), + migrations.CreateModel( + name='ContactTag', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('created', models.DateTimeField(auto_now_add=True)), + ('tag', models.CharField(help_text='The tag', max_length=50)), + ('contact', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='vince.Contact', verbose_name='Contact')), + ('user', models.ForeignKey(blank=True, help_text='User that tagged this contact.', null=True, on_delete=django.db.models.deletion.CASCADE, to=settings.AUTH_USER_MODEL, verbose_name='User')), + ], + ), + migrations.CreateModel( + name='CaseTag', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('created', models.DateTimeField(auto_now_add=True)), + ('tag', models.CharField(help_text='The tag', max_length=50)), + ('case', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='vince.VulnerabilityCase', verbose_name='Case')), + ('user', models.ForeignKey(blank=True, help_text='User that tagged this case.', null=True, on_delete=django.db.models.deletion.CASCADE, to=settings.AUTH_USER_MODEL, verbose_name='User')), + ], + ), + migrations.CreateModel( + name='TagManager', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('tag_type', models.IntegerField(choices=[(1, 'Ticket'), (2, 'Contact'), (3, 'Case'), (4, 'Vulnerability')], default=1, verbose_name='Tag Type')), + ('created', models.DateTimeField(auto_now_add=True)), + ('tag', models.CharField(help_text='The tag', max_length=50)), + ('alert_on_add', models.BooleanField(default=False, help_text='Alert user when adding this tag')), + ('description', models.CharField(help_text='Description of tag', max_length=300)), + ('team', models.ForeignKey(blank=True, help_text='Team Tag, otherwise global', null=True, on_delete=django.db.models.deletion.CASCADE, to='auth.Group')), + ('user', models.ForeignKey(blank=True, help_text='User that created this tag.', null=True, on_delete=django.db.models.deletion.CASCADE, to=settings.AUTH_USER_MODEL, verbose_name='User')), + ], + ), + migrations.AddField( + model_name='vulnerablevendor', + name='tagged', + field=models.ForeignKey(blank=True, help_text='Ticket dependency if vendor is tagged', null=True, on_delete=django.db.models.deletion.CASCADE, related_name='tagged', to='vince.Ticket'), + ), + migrations.AddField( + model_name='vulnerabilitycase', + name='team_owner', + field=models.ForeignKey(blank=True, help_text='The team that owns this case', null=True, on_delete=django.db.models.deletion.SET_NULL, to='auth.Group'), + ), + migrations.AddField( + model_name='caserequest', + name='ics_impact', + field=models.BooleanField(default=False), + ), + migrations.AlterField( + model_name='adminpgpemail', + name='email', + field=models.CharField(help_text='Multiple emails should be separated by a comma and space', max_length=254, verbose_name='Email(s)'), + ), + migrations.CreateModel( + name='ContactAssociation', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('user', models.EmailField(help_text='The email of the user to verify.', max_length=254, verbose_name='User Email')), + ('email', models.EmailField(help_text='The company email address to send to', max_length=254, verbose_name='Contact Email Address for Verification')), + ('email_body', models.TextField(blank=True, help_text='The body of the email that will be sent to the above address for contact verification ', null=True)), + ('complete', models.BooleanField(default=False)), + ('contact', models.ForeignKey(on_delete=django.db.models.deletion.CASCADE, to='vince.Contact')), + ('ticket', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, to='vince.Ticket', verbose_name='Ticket')), + ('approval_requested', models.BooleanField(default=False)), + ('authorized_by', models.ForeignKey(blank=True, help_text='The user that authorized this request', null=True, on_delete=django.db.models.deletion.SET_NULL, related_name='Authorizer', to=settings.AUTH_USER_MODEL)), + ('initiated_by', models.ForeignKey(blank=True, help_text='The user that initiated the request', null=True, on_delete=django.db.models.deletion.SET_NULL, to=settings.AUTH_USER_MODEL)), + ], + ), + migrations.AlterField( + model_name='vulnerablevendor', + name='addendum', + field=models.TextField(blank=True, help_text='Text added by coordination team about this vendor.', null=True), + ), + migrations.CreateModel( + name='GroupSettings', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('publish', models.BooleanField(default=True)), + ('organization', models.CharField(blank=True, help_text='The name of the cognito group', max_length=50, null=True)), + ('group', models.OneToOneField(on_delete=django.db.models.deletion.CASCADE, to='auth.Group')), + ('contacts_read', models.BooleanField(default=True, help_text='Does this group have permissions to read VINCE contacts')), + ('contacts_write', models.BooleanField(default=True, help_text='Does this group have permissions to add/edit VINCE contacts')), + ('contact', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, to='vince.Contact')), + ('vulnote_template', models.TextField(blank=True, null=True)), + ('team_email', models.CharField(blank=True, help_text='Email address to use for outgoing email. If not set, uses DEFAULT_REPLY_EMAIL in settings', max_length=100, null=True)), + ('team_signature', models.TextField(blank=True, help_text='Email signature for automatic case messages sent by VINCE to case participants', null=True)), + ], + ), + migrations.AddField( + model_name='caseparticipant', + name='contact', + field=models.ForeignKey(blank=True, help_text='If this is a vendor/group, then link them here', null=True, on_delete=django.db.models.deletion.SET_NULL, to='vince.Contact'), + ), + migrations.AlterField( + model_name='caseparticipant', + name='group', + field=models.BooleanField(default=False, help_text='Is this a vendor/group?'), + ), + migrations.AddField( + model_name='vulnoterevision', + name='search_vector', + field=django.contrib.postgres.search.SearchVectorField(null=True), + ), + migrations.AddIndex( + model_name='vulnoterevision', + index=django.contrib.postgres.indexes.GinIndex(fields=['search_vector'], name='vulnote_gin'), + ), + migrations.RunSQL( + sql=" \n CREATE TRIGGER vulnote_update_trigger\n BEFORE INSERT OR UPDATE of content, title, search_vector \n ON vince_vulnoterevision \n FOR EACH ROW EXECUTE PROCEDURE \n tsvector_update_trigger(search_vector, 'pg_catalog.english', content, title);\n \n UPDATE vince_vulnoterevision SET search_vector = NULL; \n ", + reverse_sql=' \n DROP TRIGGER IF EXISTS vulnote_update_trigger \n ON vince_vulnoterevision; \n ', + ), + migrations.AlterField( + model_name='contactassociation', + name='email', + field=models.CharField(help_text='The company email address to send to. Multiple emails should be separated by a comma', max_length=1000, verbose_name='Contact Email Address(es) for Verification.'), + ), + migrations.AlterField( + model_name='casetemplate', + name='participant_email', + field=models.TextField(default='Hello, VINCE coordinators invite you to participate in an active vulnerability disclosure case. Please login to the VINCE portal for more information about this case.', help_text='The context available to you includes {{ vu }}, {{ title }}, and {{ owner }}.', verbose_name='Participant Notification Email Content'), + ), + migrations.AlterField( + model_name='cveallocation', + name='assigner', + field=models.EmailField(default='vuls@vince.org', max_length=254), + ), + migrations.AddField( + model_name='vincefile', + name='post', + field=models.ForeignKey(blank=True, help_text='Post file was added to.', null=True, on_delete=django.db.models.deletion.CASCADE, to='vince.VendorNotificationContent'), + ), + migrations.AddField( + model_name='groupsettings', + name='disclosure_link', + field=models.URLField(blank=True, help_text='Link to disclosure guidance that will be presented to case members at first view of case', null=True), + ), + migrations.CreateModel( + name='CWEDescriptions', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('cwe', models.CharField(max_length=1000)), + ], + ), + migrations.AddField( + model_name='cveallocation', + name='date_public', + field=models.DateTimeField(blank=True, null=True, verbose_name='Date Public'), + ), + migrations.AddField( + model_name='cveaffectedproduct', + name='version_affected', + field=models.CharField(blank=True, max_length=10, null=True, verbose_name='Version Affected'), + ), + migrations.AlterField( + model_name='cveallocation', + name='title', + field=models.CharField(blank=True, max_length=200, null=True, verbose_name='Title'), + ), + migrations.CreateModel( + name='CVEServicesAccount', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('org_name', models.CharField(help_text='Organization registered with CVE Services', max_length=200, verbose_name='Organization')), + ('api_key', models.CharField(help_text='API Key', max_length=100, verbose_name='API Key')), + ('email', models.EmailField(help_text='Email associated with the account', max_length=254, verbose_name='Email')), + ('first_name', models.CharField(blank=True, max_length=100, null=True)), + ('last_name', models.CharField(blank=True, max_length=100, null=True)), + ('active', models.BooleanField(default=True)), + ('team', models.ForeignKey(help_text='VINCE Team', on_delete=django.db.models.deletion.CASCADE, to='auth.Group')), + ], + ), + migrations.CreateModel( + name='CVEReservation', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('cve_id', models.CharField(max_length=50)), + ('time_reserved', models.DateTimeField(default=django.utils.timezone.now)), + ('account', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, to='vince.CVEServicesAccount')), + ('cve_info', models.OneToOneField(blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, to='vince.CVEAllocation')), + ('user_reserved', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, to=settings.AUTH_USER_MODEL)), + ], + ), + migrations.AddField( + model_name='groupsettings', + name='cna_email', + field=models.CharField(blank=True, help_text='Email address used for CVE assignment', max_length=100, null=True), + ), + migrations.RunSQL( + sql='\n DROP TRIGGER IF EXISTS cve_update_trigger \n ON vince_cveallocation; \n ', + ), + migrations.AlterField( + model_name='cveallocation', + name='description', + field=models.TextField(verbose_name='Description'), + ), + migrations.RunSQL( + sql=" \n CREATE TRIGGER cve_update_trigger \n BEFORE INSERT OR UPDATE of title, assigner, cve_name, description, resolution, credit, search_vector \n \n ON vince_cveallocation \n FOR EACH ROW EXECUTE PROCEDURE\n tsvector_update_trigger(search_vector, 'pg_catalog.english', title, assigner, cve_name, description, resolution, credit);\n UPDATE vince_cveallocation SET search_vector = NULL; \n ", + reverse_sql=' \n DROP TRIGGER IF EXISTS cve_update_trigger \n ON vince_cveallocation; \n ', + ), + migrations.AddField( + model_name='contactassociation', + name='restart', + field=models.BooleanField(default=False), + ), + migrations.AlterField( + model_name='action', + name='user', + field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, to=settings.AUTH_USER_MODEL, verbose_name='User'), + ), + migrations.AlterField( + model_name='ticket', + name='assigned_to', + field=models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, related_name='assigned_to', to=settings.AUTH_USER_MODEL, verbose_name='Assigned to'), + ), + migrations.CreateModel( + name='BounceEmailNotification', + fields=[ + ('id', models.AutoField(auto_created=True, primary_key=True, serialize=False, verbose_name='ID')), + ('email', models.CharField(max_length=320)), + ('user_id', models.IntegerField(blank=True, null=True)), + ('bounce_date', models.DateTimeField(default=django.utils.timezone.now)), + ('bounce_type', models.IntegerField(choices=[(0, 'Transient'), (1, 'Permanent')], default=0, verbose_name='Bounce Type')), + ('subject', models.TextField(blank=True, null=True)), + ('action_taken', models.BooleanField(default=False)), + ('ticket', models.ForeignKey(blank=True, null=True, on_delete=django.db.models.deletion.SET_NULL, to='vince.Ticket')), + ], + ), + ] diff --git a/vince/migrations/__init__.py b/vince/migrations/__init__.py new file mode 100644 index 0000000..e69de29 diff --git a/vince/models.py b/vince/models.py new file mode 100644 index 0000000..df6a5f3 --- /dev/null +++ b/vince/models.py @@ -0,0 +1,4468 @@ +######################################################################### +# VINCE +# +# Copyright 2022 Carnegie Mellon University. +# +# NO WARRANTY. THIS CARNEGIE MELLON UNIVERSITY AND SOFTWARE ENGINEERING +# INSTITUTE MATERIAL IS FURNISHED ON AN "AS-IS" BASIS. CARNEGIE MELLON +# UNIVERSITY MAKES NO WARRANTIES OF ANY KIND, EITHER EXPRESSED OR IMPLIED, +# AS TO ANY MATTER INCLUDING, BUT NOT LIMITED TO, WARRANTY OF FITNESS FOR +# PURPOSE OR MERCHANTABILITY, EXCLUSIVITY, OR RESULTS OBTAINED FROM USE OF THE +# MATERIAL. CARNEGIE MELLON UNIVERSITY DOES NOT MAKE ANY WARRANTY OF ANY KIND +# WITH RESPECT TO FREEDOM FROM PATENT, TRADEMARK, OR COPYRIGHT INFRINGEMENT. +# +# Released under a MIT (SEI)-style license, please see license.txt or contact +# permission@sei.cmu.edu for full terms. +# +# [DISTRIBUTION STATEMENT A] This material has been approved for public +# release and unlimited distribution. Please see Copyright notice for non-US +# Government use and distribution. +# +# Carnegie Mellon®, CERT® and CERT Coordination Center® are registered in the +# U.S. Patent and Trademark Office by Carnegie Mellon University. +# +# This Software includes and/or makes use of Third-Party Software each subject +# to its own license. +# +# DM21-1126 +######################################################################## +import logging +from django.db import models +from django.contrib.auth.models import User, Group +from django.utils import timezone +from django.utils.translation import gettext_lazy as _ +from django.conf import settings +from django.contrib.postgres.indexes import GinIndex +from django.contrib.postgres.search import SearchVectorField +from django_countries.fields import CountryField +from django.contrib.postgres import fields +from django.conf import settings +from bigvince.storage_backends import PrivateMediaStorage, SharedMediaStorage +from django.db.models import Q +from datetime import timedelta, date, datetime +from django.urls import reverse +import json +import uuid +import re +import traceback + +logger = logging.getLogger(__name__) + +logger.setLevel(logging.DEBUG) + +GENERAL_TICKET_QUEUE = 1 +CASE_REQUEST_QUEUE = 2 +CASE_TASK_QUEUE = 3 +OTHER_QUEUE = 4 +QUEUE_TYPE = ( + (GENERAL_TICKET_QUEUE, _('General Ticket')), + (CASE_REQUEST_QUEUE, _('Case Request Queue')), + (CASE_TASK_QUEUE, _('Case Task Queue')), + (OTHER_QUEUE, _('Other Queue')) +) + + + +class GroupSettings(models.Model): + group = models.OneToOneField( + Group, + on_delete=models.CASCADE) + + publish = models.BooleanField( + default=True) + + organization = models.CharField( + help_text=_('The name of the cognito group'), + max_length=50, + blank=True, + null=True) + + vulnote_template = models.TextField( + blank=True, + null=True) + + team_email = models.CharField( + max_length=100, + blank=True, + null=True, + help_text=_('Email address to use for outgoing email. If not set, uses DEFAULT_REPLY_EMAIL in settings'), + ) + + team_signature = models.TextField( + blank=True, + null=True, + help_text=_('Email signature for automatic case messages sent by VINCE to case participants'), + ) + + disclosure_link = models.URLField( + blank=True, + null=True, + help_text=_("Link to disclosure guidance that will be presented to case members at first view of case") + ) + + cna_email = models.CharField( + max_length=100, + blank=True, + null=True, + help_text=_('Email address used for CVE assignment'), + ) + + contact = models.ForeignKey( + "Contact", + blank=True, + null=True, + on_delete=models.SET_NULL) + + contacts_read = models.BooleanField( + help_text=_('Does this group have permissions to read VINCE contacts'), + default=True) + + contacts_write = models.BooleanField( + help_text=_('Does this group have permissions to add/edit VINCE contacts'), + default=True) + + def _get_triage(self): + #get cr wueue + queue = TicketQueue.objects.filter(queue_type=2, team=self.group).first() + return queue + + triage = property(_get_triage) + + +class OldJSONField(fields.JSONField): + def db_type(self, connection): + return 'json' + +# Create your models here. +GROUP_TYPE = ( + ('srmail', 'SRMail List'), + ('vendorlist', 'Vendor Contact List') + ) + +STATUS_TYPE = ( + ('Active', 'Active'), + ('Inactive', 'Inactive'), + ('Unknown', 'Unknown') +) + +MEMBER_TYPE = ( + ('Organization', 'Organization'), + ('Person', 'Person'), + ('Group', 'Group')) + +#### CONTACTS MODELS #### + +class ContactManager(models.Manager): + def search(self, query=None): + qs = self.get_queryset() + if query is not None: + qs = qs.extra(where=["search_vector @@ (to_tsquery('english', %s))=true"],params=[query]) + return qs + +class Contact(models.Model): + VENDOR_TYPE = ( + ('Contact', 'Contact'), + ('Vendor', 'Vendor'), + ) + LOCATION_CHOICES=( + ('Domestic', 'Domestic'), + ('International', 'International') + ) + vendor_id = models.CharField(max_length=10, blank=True, null=True) + vendor_name = models.CharField(max_length=100) + vendor_type = models.CharField(max_length=50, default="Vendor", choices=VENDOR_TYPE) + srmail_peer = models.CharField(max_length=100, blank=True, null=True) + srmail_salutation = models.CharField(max_length=100, blank=True, null=True) + srmail_id = models.IntegerField(blank=True, null=True) + lotus_id = models.IntegerField(blank=True, null=True) + countrycode = CountryField(blank=True, null=True, default="US") + active = models.BooleanField(default=True) + date_added = models.DateTimeField(default=timezone.now) + user_added = models.ForeignKey(settings.AUTH_USER_MODEL, on_delete=models.SET_NULL, blank=True, null=True) + location = models.CharField(max_length=15, choices=LOCATION_CHOICES, default="domestic") + comment = models.TextField(blank=True, null=True) + search_vector = SearchVectorField(null=True) + modified = models.DateTimeField( + auto_now=True + ) + version = models.IntegerField(default=0) + uuid = models.UUIDField(default=uuid.uuid4, editable=False, unique=True) + objects = ContactManager() + + def __str__(self): + return self.vendor_name + + def get_absolute_url(self): + return reverse('vince:contact', args=(self.id,)) + + def get_emails(self): + email_contact = EmailContact.objects.filter(contact=self, status=True).values_list('email', flat=True) + return list(email_contact) + + def get_official_emails(self): + email_contact = EmailContact.objects.filter(contact=self, email_function__in=["TO", "CC"], status=True).values_list('email', flat=True) + return list(email_contact) + + def get_list_email(self): + email_list = EmailContact.objects.filter(contact=self, email_list=True, status=True).exclude(name__icontains='service').first() + if email_list: + return email_list.email + else: + return "" + + def get_phone_number(self): + phone = PhoneContact.objects.filter(contact=self).first() + if phone: + return phone.phone + else: + return "" + + def _get_tag_html(self): + tags = self.contacttag_set.all() + html = "" + search_url = reverse("vince:searchcontacts") + for tag in tags: + html = html + f" {tag} " + return html + + get_tag_html = property(_get_tag_html) + + name = property(__str__) + + class Meta: + indexes = [GinIndex( + fields=['search_vector'], + name= 'cmgr_gin', + ) + ] + +class GroupAdmin(models.Model): + contact = models.ForeignKey(Contact, + on_delete=models.CASCADE) + + email = models.ForeignKey("EmailContact", + on_delete=models.CASCADE) + + def __str__(self): + return "%s" % self.email + + +class ContactTag(models.Model): + """ + This is the way to classify contacts + """ + + contact = models.ForeignKey( + Contact, + on_delete=models.CASCADE, + verbose_name=_('Contact'), + ) + + created = models.DateTimeField( + auto_now_add=True + ) + + user = models.ForeignKey( + settings.AUTH_USER_MODEL, + on_delete=models.CASCADE, + blank=True, + null=True, + help_text=_('User that tagged this contact.'), + verbose_name=_('User'), + ) + + tag = models.CharField( + max_length=50, + help_text=_('The tag') + ) + + def __str__(self): + return self.tag + + +class PostalAddress(models.Model): + ADDRESS_TYPE = ( + ('Home', 'Home'), + ('Work', 'Work'), + ('Other', 'Other'), + ('School', 'School'), + ) + contact = models.ForeignKey(Contact, on_delete=models.CASCADE) + country = CountryField(blank=True, null=True, default="US") + primary = models.BooleanField(default=True) + address_type = models.CharField(max_length=20, choices=ADDRESS_TYPE, default='Work') + street = models.CharField(max_length=150) + street2 = models.CharField(max_length=150, blank=True, null=True) + city = models.CharField(max_length=50) + state = models.CharField(max_length=40) + zip_code = models.CharField(max_length=12) + comment = models.CharField(max_length=200, blank=True, null=True) + date_added = models.DateTimeField(default=timezone.now) + user_added = models.ForeignKey(settings.AUTH_USER_MODEL, on_delete=models.SET_NULL, blank=True, null=True) + version = models.IntegerField(default=0) + def __str__(self): + return "%s %s, %s %s" % (self.street, self.city, self.state, self.zip_code) + +class PhoneContact(models.Model): + PHONE_TYPE = ( + ('Fax', 'Fax'), + ('Home', 'Home'), + ('Hotline', 'Hotline'), + ('Office', 'Office'), + ('Mobile', 'Mobile'), + ) + contact = models.ForeignKey(Contact, on_delete=models.CASCADE) + country_code = models.CharField(max_length=5, default="+1") + phone = models.CharField(max_length=50) + phone_type = models.CharField(max_length=20, choices=PHONE_TYPE, default='Office') + comment = models.CharField(max_length=200, blank=True, null=True) + date_added = models.DateTimeField(default=timezone.now) + user_added = models.ForeignKey(settings.AUTH_USER_MODEL, on_delete=models.SET_NULL, blank=True, null=True) + version = models.IntegerField(default=0) + + def __str__(self): + return "%s %s" % (country_code, phone) + +class EmailContact(models.Model): + EMAIL_FUNCTION=( + ('TO', 'TO'), + ('CC', 'CC'), + ('EMAIL', 'EMAIL'), + ('REPLYTO', 'REPLYTO') + ) + EMAIL_TYPE = ( + ('Work', 'Work'), + ('Other', 'Other'), + ('Home', 'Home'), + ('School', 'School') + ) + contact = models.ForeignKey(Contact, on_delete=models.CASCADE) + email = models.EmailField(max_length=254) + email_type = models.CharField(max_length=20, choices=EMAIL_TYPE, default='Work') + name = models.CharField(max_length=200, blank=True, null=True) + user_added = models.ForeignKey(settings.AUTH_USER_MODEL, on_delete=models.SET_NULL, blank=True, null=True) + email_function = models.CharField(max_length=10, choices=EMAIL_FUNCTION, default='TO') + status = models.BooleanField(default=True) + version = models.IntegerField(default=0) + email_list = models.BooleanField(default=False) + + def __str__(self): + return self.email + +class Website(models.Model): + contact = models.ForeignKey(Contact, on_delete=models.CASCADE) + url = models.URLField() + description = models.CharField(max_length=100, blank=True, null=True) + date_added = models.DateTimeField(default=timezone.now) + user_added = models.ForeignKey(settings.AUTH_USER_MODEL, on_delete=models.SET_NULL, blank=True, null=True) + version = models.IntegerField(default=0) + + def __str__(self): + return self.url + +class ContactPgP(models.Model): + contact = models.ForeignKey(Contact, on_delete=models.CASCADE) + user = models.ForeignKey(settings.AUTH_USER_MODEL, on_delete=models.SET_NULL, blank=True, null=True) + created_ts = models.DateTimeField(default=timezone.now) + pgp_key_id = models.CharField(max_length=200) + pgp_fingerprint = models.CharField(max_length=200, blank=True, null=True) + pgp_version = models.IntegerField(blank=True, null=True) + pgp_key_data = models.TextField(blank=True, null=True) + revoked = models.BooleanField(default=False) + startdate = models.CharField(max_length=12, blank=True, null=True) + enddate = models.CharField(max_length=12, blank=True, null=True) + pgp_protocol = models.CharField(max_length=30, default="GPG1 ARMOR MIME") + version = models.IntegerField(default=0) + pgp_email = models.EmailField(max_length=254, + help_text=_('The email that belongs with this PGP Key.'), + blank=True, + null=True) + + def __str__(self): + return self.pgp_key_id + + +class ContactGroup(models.Model): + name = models.CharField(max_length=100) + vuid = models.CharField(max_length=50, blank=True, null=True) + description = models.CharField(max_length=250) + srmail_peer_name = models.CharField(max_length=50) + group_type = models.CharField(max_length=20, choices=GROUP_TYPE, default="srmail") + status = models.CharField(max_length=20, choices=STATUS_TYPE, default="Active") + comment = models.TextField(blank=True, null=True) + date_added = models.DateTimeField(default=timezone.now) + user_added = models.ForeignKey(settings.AUTH_USER_MODEL, on_delete=models.CASCADE, blank=True, null=True) + version = models.IntegerField(default=0) + modified = models.DateTimeField( + auto_now=True + ) + + def __str__(self): + return self.name + + def get_absolute_url(self): + return reverse('vince:group', args=(self.id,)) + +class GroupDuplicate(models.Model): + group = models.ForeignKey(ContactGroup, on_delete=models.CASCADE) + + def __str__(self): + return self.group.name + +class GroupMember(models.Model): + group = models.ForeignKey(ContactGroup, on_delete=models.CASCADE) + contact = models.ForeignKey(Contact, blank=True, null=True, on_delete=models.CASCADE) + group_member = models.ForeignKey(GroupDuplicate, on_delete=models.CASCADE, blank=True, null=True) + member_type = models.CharField(max_length=30, choices=MEMBER_TYPE, default="Organization") + date_added = models.DateTimeField(default=timezone.now) + user_added = models.ForeignKey(settings.AUTH_USER_MODEL, on_delete=models.SET_NULL, blank=True, null=True) + + def __str__(self): + return self.group.name + +#1 - create +#2 - remove(change status) +#3 - modify +#4 - add to group +#5 - remove from group +#6 - tags + +class Activity(models.Model): + contact = models.ForeignKey(Contact, on_delete=models.CASCADE) + user = models.ForeignKey(settings.AUTH_USER_MODEL, on_delete=models.CASCADE) + text = models.CharField(max_length=1500, blank=True, null=True) + action = models.IntegerField() + action_ts = models.DateTimeField(default=timezone.now) + + def __str__(self): + return "%s %s on contact: %s" % (self.user.email, self.text, self.contact.vendor_name) + +# 1 - create +# 2 - add to +# 3 - remove from +# 4 - change status +# 5 - change description/name + +class GroupActivity(models.Model): + group = models.ForeignKey(ContactGroup, on_delete=models.CASCADE) + user = models.ForeignKey(settings.AUTH_USER_MODEL, on_delete=models.CASCADE) + text = models.CharField(max_length=1500, blank=True, null=True) + action = models.IntegerField() + action_ts = models.DateTimeField(default=timezone.now) + + def __str__(self): + return "%s %s on Group: %s" % (self.user.email, self.text, self.group.name) + +class ContactAssociation(models.Model): + contact = models.ForeignKey(Contact, + on_delete=models.CASCADE) + + user = models.EmailField( + _('User Email'), + help_text=_('The email of the user to verify.'), + max_length=254) + + ticket = models.ForeignKey( + "Ticket", + on_delete=models.SET_NULL, + verbose_name=_('Ticket'), + blank=True, + null=True + ) + + initiated_by = models.ForeignKey( + settings.AUTH_USER_MODEL, + on_delete=models.SET_NULL, + help_text=_('The user that initiated the request'), + blank=True, + null=True) + + authorized_by = models.ForeignKey( + settings.AUTH_USER_MODEL, + on_delete=models.SET_NULL, + related_name=_('Authorizer'), + help_text=_('The user that authorized this request'), + blank=True, + null=True) + + email = models.CharField( + _('Contact Email Address(es) for Verification.'), + help_text=_('The company email address to send to. Multiple emails should be separated by a comma'), + max_length=1000) + + email_body = models.TextField( + help_text=_('The body of the email that will be sent to the above address for contact verification '), + blank=True, + null=True) + + restart = models.BooleanField( + default=False) + + complete = models.BooleanField( + default=False) + + approval_requested = models.BooleanField( + default=False) + + def __str__(self): + return f"{self.user} for {self.contact.vendor_name}" + + +#### TICKETING ##### + +class TicketQueue(models.Model): + """ + A queue is a collection of tickets into what would generally be business + areas or departments. + For example, a company may have a queue for each Product they provide, or + a queue for each of Accounts, Pre-Sales, and Support. + """ + + title = models.CharField(_('Title'), + max_length=100) + + slug = models.SlugField( + _('Slug'), + max_length=50, + unique=True, + help_text=_('This slug is used when building ticket ID\'s. Once set, ' + 'try not to change it or e-mailing may get messy.'), + ) + + new_ticket_cc = models.CharField( + _('New Ticket CC Address'), + blank=True, + null=True, + max_length=200, + help_text=_('If an e-mail address is entered here, then it will ' + 'receive notification of all new tickets created for this queue. ' + 'Enter a comma between multiple e-mail addresses.'), + ) + + updated_ticket_cc = models.CharField( + _('Updated Ticket CC Address'), + blank=True, + null=True, + max_length=200, + help_text=_('If an e-mail address is entered here, then it will ' + 'receive notification of all activity (new tickets, closed ' + 'tickets, updates, reassignments, etc) for this queue. Separate ' + 'multiple addresses with a comma.'), + ) + + default_owner = models.ForeignKey( + settings.AUTH_USER_MODEL, + on_delete=models.SET_NULL, + related_name='default_owner', + blank=True, + null=True, + verbose_name=_('Default owner'), + ) + + queue_type = models.IntegerField( + _('Queue Type'), + choices = QUEUE_TYPE, + default = GENERAL_TICKET_QUEUE) + + from_email = models.CharField( + _('S3 Bucket Name for Email'), + max_length=250, + blank=True, + null=True) + + + #If this queue is owned by a team, set it here + team = models.ForeignKey( + Group, + blank=True, + null=True, + help_text=_('Team Owner'), + on_delete=models.SET_NULL + ) + + # Possibly adding this to associate a form with a queue + #content_type = models.ForeignKey(ContentType, on_delete=models.CASCADE) + + #object_id = models.PositiveIntegerField() + + #content_object = GenericForeignKey('content_type', 'object_id') + + def __str__(self): + return "%s" % self.title + + + def _from_address(self): + """ + Short property to provide a sender address in SMTP format, + eg 'Name
"
+ elif "Submitted" in self.title:
+ return f"
"
+ elif "message" in self.title:
+ return f"
"
+ else:
+ return f"
"
+
+ html_logo = property(_get_html_logo)
+
+
+class TicketChange(models.Model):
+ """
+ For each FollowUp, any changes to the parent ticket (eg Title, Priority,
+ etc) are tracked here for display purposes.
+ """
+
+ followup = models.ForeignKey(
+ FollowUp,
+ on_delete=models.CASCADE,
+ verbose_name=_('Follow-up'),
+ )
+
+ field = models.CharField(
+ _('Field'),
+ max_length=100,
+ )
+
+ old_value = models.TextField(
+ _('Old Value'),
+ blank=True,
+ null=True,
+ )
+
+ new_value = models.TextField(
+ _('New Value'),
+ blank=True,
+ null=True,
+ )
+
+ def __str__(self):
+ out = '%s ' % self.field
+ if not self.new_value:
+ out += _('removed')
+ elif not self.old_value:
+ out += _('set to %s') % self.new_value
+ else:
+ out += _('changed from "%(old_value)s" to "%(new_value)s"') % {
+ 'old_value': self.old_value,
+ 'new_value': self.new_value
+ }
+ return out
+
+ class Meta:
+ verbose_name = _('Ticket change')
+ verbose_name_plural = _('Ticket changes')
+
+
+def attachment_path(instance, filename):
+ """
+ Provide a file path that will help prevent files being overwritten, by
+ putting attachments in a folder off attachments for ticket/followup_id/.
+ """
+ import os
+ os.umask(0)
+ if instance.action.get_related_ticket:
+ path = 'vince/attachments/%s/%s' % (instance.action.get_related_ticket.ticket_for_url, instance.action.id)
+ else:
+ path = 'vince/attachments/%s/%s' % (instance.action.get_related_case.case_for_url, instance.action.id)
+
+ att_path = os.path.join(settings.MEDIA_ROOT, path)
+ if settings.DEFAULT_FILE_STORAGE == "django.core.files.storage.FileSystemStorage":
+ if not os.path.exists(att_path):
+ os.makedirs(att_path, 0o777)
+ return os.path.join(path, filename)
+
+
+def get_uuid_filename(self, filename):
+
+ name = str(self.uuid)
+
+ return name
+
+class Attachment(models.Model):
+ """
+ Represents a file attached to a follow-up. This could come from an e-mail
+ attachment, or it could be uploaded via the web interface.
+ """
+
+ file = models.FileField(
+ _('File'),
+ storage=PrivateMediaStorage(),
+ upload_to=get_uuid_filename,
+ max_length=1000,
+ )
+
+ action = models.ForeignKey(
+ Action,
+ on_delete=models.CASCADE,
+ verbose_name=_('Action'),
+ )
+
+ filename = models.CharField(
+ _('Filename'),
+ max_length=1000,
+ )
+
+ mime_type = models.CharField(
+ _('MIME Type'),
+ max_length=255,
+ )
+
+ size = models.IntegerField(
+ _('Size'),
+ help_text=_('Size of this file in bytes'),
+ )
+
+ public = models.BooleanField(
+ default=False)
+
+ uuid = models.UUIDField(
+ default=uuid.uuid4,
+ editable=False,
+ unique=True)
+
+ def __str__(self):
+ return '%s' % self.filename
+
+ def _get_access_url(self):
+ url = self.file.storage.url(self.file.name, parameters={'ResponseContentDisposition': f'attachment; filename="{self.filename}"'})
+ return url
+
+ access_url = property(_get_access_url)
+
+ class Meta:
+ ordering = ('filename',)
+ verbose_name = _('Attachment')
+ verbose_name_plural = _('Attachments')
+
+class CaseAttachment(models.Model):
+ case = models.ForeignKey(
+ "VulnerabilityCase",
+ on_delete=models.CASCADE,
+ verbose_name=_('Case'),
+ )
+ attachment = models.ForeignKey(
+ Attachment,
+ on_delete=models.CASCADE)
+ attached = models.DateTimeField(
+ default=timezone.now)
+ user = models.ForeignKey(
+ settings.AUTH_USER_MODEL,
+ blank=True,
+ null=True,
+ on_delete=models.SET_NULL)
+
+class NotificationAttachment(models.Model):
+ notification = models.ForeignKey(
+ 'VendorNotificationContent',
+ on_delete=models.CASCADE,
+ verbose_name=_('Notification'),
+ )
+ attachment = models.ForeignKey(
+ Attachment,
+ on_delete=models.CASCADE)
+ attached = models.DateTimeField(
+ default=timezone.now)
+ user = models.ForeignKey(
+ settings.AUTH_USER_MODEL,
+ blank=True,
+ null=True,
+ on_delete=models.SET_NULL)
+
+
+
+class TicketCC(models.Model):
+ """
+ Often, there are people who wish to follow a ticket who aren't the
+ person who originally submitted it. This model provides a way for those
+ people to follow a ticket.
+ In this circumstance, a 'person' could be either an e-mail address or
+ an existing system user.
+ """
+
+ ticket = models.ForeignKey(
+ Ticket,
+ on_delete=models.CASCADE,
+ verbose_name=_('Ticket'),
+ )
+
+ user = models.ForeignKey(
+ settings.AUTH_USER_MODEL,
+ on_delete=models.CASCADE,
+ blank=True,
+ null=True,
+ help_text=_('User who wishes to receive updates for this ticket.'),
+ verbose_name=_('User'),
+ )
+
+ email = models.EmailField(
+ _('E-Mail Address'),
+ blank=True,
+ null=True,
+ help_text=_('For non-user followers, enter their e-mail address'),
+ )
+
+ can_view = models.BooleanField(
+ _('Can View Ticket?'),
+ blank=True,
+ default=False,
+ help_text=_('Can this CC login to view the ticket details?'),
+ )
+
+ can_update = models.BooleanField(
+ _('Can Update Ticket?'),
+ blank=True,
+ default=False,
+ help_text=_('Can this CC login and update the ticket?'),
+ )
+
+ def _email_address(self):
+ if self.user and self.user.email is not None:
+ return self.user.email
+ else:
+ return self.email
+ email_address = property(_email_address)
+
+ def _display(self):
+ if self.user:
+ return self.user
+ else:
+ return self.email
+
+ display = property(_display)
+
+ def __str__(self):
+ return '%s for %s' % (self.display, self.ticket.title)
+
+
+class TicketTag(models.Model):
+ """
+ This is the way to classify tickets.
+ """
+
+ ticket = models.ForeignKey(
+ Ticket,
+ on_delete=models.CASCADE,
+ verbose_name=_('Ticket'),
+ )
+
+ created = models.DateTimeField(
+ auto_now_add=True
+ )
+
+ user = models.ForeignKey(
+ settings.AUTH_USER_MODEL,
+ on_delete=models.CASCADE,
+ blank=True,
+ null=True,
+ help_text=_('User that tags this ticket.'),
+ verbose_name=_('User'),
+ )
+
+ tag = models.CharField(
+ max_length=50,
+ help_text=_('The tag')
+ )
+
+ def __str__(self):
+ return self.tag
+
+
+class TicketDependency(models.Model):
+ """
+ The ticket identified by `ticket` cannot be resolved until the ticket in `depends_on` has been resolved.
+
+ To help enforce this, a helper function `can_be_resolved` on each Ticket instance checks that
+ these have all been resolved.
+ """
+ class Meta:
+ unique_together = (('ticket', 'depends_on'),)
+ verbose_name = _('Ticket dependency')
+ verbose_name_plural = _('Ticket dependencies')
+
+ ticket = models.ForeignKey(
+ Ticket,
+ on_delete=models.CASCADE,
+ verbose_name=_('Ticket'),
+ related_name='ticketdependency',
+ )
+
+ depends_on = models.ForeignKey(
+ Ticket,
+ on_delete=models.CASCADE,
+ verbose_name=_('Depends On Ticket'),
+ related_name='depends_on',
+ )
+
+ def __str__(self):
+ return '%s / %s' % (self.ticket, self.depends_on)
+
+
+class CaseDependency(models.Model):
+ """
+ The case identified by `case` cannot be resolved until the ticket in `depends_on` has been resolved.
+
+ To help enforce this, a helper function `can_be_resolved` on each Ticket instance checks that
+ these have all been resolved.
+ """
+ class Meta:
+ unique_together = (('case', 'depends_on'),)
+ verbose_name = _('Case dependency')
+ verbose_name_plural = _('Case dependencies')
+
+ case = models.ForeignKey(
+ 'VulnerabilityCase',
+ on_delete=models.CASCADE,
+ verbose_name=_('Case'),
+ related_name='casedependency',
+ )
+ depends_on = models.ForeignKey(
+ Ticket,
+ on_delete=models.CASCADE,
+ verbose_name=_('Depends On Ticket'),
+ related_name='case_depends_on',
+ )
+
+ def __str__(self):
+ return '%s / %s' % (self.case, self.depends_on)
+
+
+class VulNote(models.Model):
+ current_revision = models.OneToOneField(
+ 'VulNoteRevision',
+ blank=True, null=True,
+ on_delete=models.CASCADE,
+ related_name='current_set',
+ help_text=_('The revision being displayed for this vul note. If you need to rollback, change value of this field.')
+ )
+
+ case = models.OneToOneField(
+ 'VulnerabilityCase',
+ help_text=_('The case this vul note belongs with.'),
+ on_delete=models.CASCADE
+ )
+
+ created = models.DateTimeField(
+ auto_now_add=True
+ )
+
+ modified = models.DateTimeField(
+ auto_now=True
+ )
+
+ owner = models.ForeignKey(
+ settings.AUTH_USER_MODEL,
+ blank=True, null=True,
+ help_text=_('The owner of this vul note, typically the creator.'),
+ on_delete=models.SET_NULL)
+
+ group = models.ForeignKey(
+ Group,
+ blank=True, null=True,
+ help_text=_('Group permissions'),
+ on_delete=models.SET_NULL
+ )
+
+ group_read = models.BooleanField(
+ default=True,
+ verbose_name=_('group read access'))
+
+ group_write = models.BooleanField(
+ default=True,
+ verbose_name=_('group write access'))
+
+ other_read = models.BooleanField(
+ default=True,
+ verbose_name=_('other read access'))
+
+ approved = models.BooleanField(
+ default=False,
+ help_text=('Vul note must be approved before publishing'))
+
+ ticket_to_approve = models.ForeignKey(
+ Ticket,
+ blank=True, null=True,
+ on_delete = models.SET_NULL)
+
+ date_published = models.DateTimeField(
+ blank=True, null=True)
+
+ date_last_published = models.DateTimeField(
+ blank=True, null=True)
+
+ date_shared = models.DateTimeField(
+ blank=True, null=True)
+
+ revision_shared = models.IntegerField(
+ default = 999)
+
+ revision_published = models.IntegerField(
+ default = 999)
+
+ def add_revision(self, new_revision, save=True):
+ """
+ Sets the properties of a revision and ensures its the current
+ revision.
+ """
+ assert self.id or save, (
+ 'Article.add_revision: Sorry, you cannot add a'
+ 'revision to an article that has not been saved '
+ 'without using save=True')
+ if not self.id:
+ self.save()
+ revisions = self.vulnoterevision_set.all()
+ try:
+ new_revision.revision_number = revisions.latest().revision_number + 1
+ except VulNoteRevision.DoesNotExist:
+ new_revision.revision_number = 0
+ new_revision.vulnote = self
+ new_revision.previous_revision = self.current_revision
+ if save:
+ new_revision.clean()
+ new_revision.save()
+ self.current_revision = new_revision
+ if save:
+ self.save()
+
+
+ def __str__(self):
+ if self.current_revision:
+ return self.current_revision.title
+ obj_name = _('Vul Note without content (%(id)d)') % {'id': self.id}
+ return str(obj_name)
+
+
+
+class BaseRevisionMixin(models.Model):
+
+ """This is an abstract model used as a mixin: Do not override any of the
+ core model methods but respect the inheritor's freedom to do so itself."""
+
+ revision_number = models.IntegerField(
+ editable=False,
+ verbose_name=_('revision number'))
+
+ user_message = models.TextField(
+ blank=True,
+ )
+
+ automatic_log = models.TextField(
+ blank=True,
+ editable=False,
+ )
+
+ user = models.ForeignKey(
+ settings.AUTH_USER_MODEL,
+ verbose_name=_('user'),
+ blank=True, null=True,
+ on_delete=models.SET_NULL)
+
+ modified = models.DateTimeField(
+ auto_now=True)
+ created = models.DateTimeField(
+ auto_now_add=True)
+
+ previous_revision = models.ForeignKey(
+ 'self',
+ blank=True, null=True,
+ on_delete=models.SET_NULL
+ )
+
+ deleted = models.BooleanField(
+ verbose_name=_('deleted'),
+ default=False,
+ )
+
+ locked = models.BooleanField(
+ verbose_name=_('locked'),
+ default=False,
+ )
+
+ def inherit_predecessor(self, predecessor):
+ """
+ This is a naive way of inheriting, assuming that ``predecessor`` is in
+ fact the predecessor and there hasn't been any intermediate changes!
+ :param: predecessor is an instance of whatever object for which
+ object.current_revision implements BaseRevisionMixin.
+ """
+ predecessor = predecessor.current_revision
+ self.previous_revision = predecessor
+ self.deleted = predecessor.deleted
+ self.locked = predecessor.locked
+ self.revision_number = predecessor.revision_number + 1
+
+
+ def set_from_request(self, request):
+ if request.user.is_authenticated:
+ self.user = request.user
+
+ class Meta:
+ abstract = True
+
+
+class VulNoteRevision(BaseRevisionMixin, models.Model):
+
+ """This is where main revision data is stored. To make it easier to
+ copy, do NEVER create m2m relationships."""
+
+ vulnote = models.ForeignKey(
+ 'VulNote',
+ on_delete=models.CASCADE,
+ verbose_name=_('vulnote'))
+
+ # This is where the content goes, with whatever markup language is used
+ content = models.TextField(
+ blank=True,
+ verbose_name=_('vulnote contents'))
+
+ # This title is automatically set from either the article's title or
+ # the last used revision...
+ title = models.CharField(
+ max_length=512,
+ verbose_name=_('vul note title'),
+ null=False,
+ blank=False,
+ help_text=_(
+ 'Each revision contains a title field that must be filled out, even if the title has not changed'))
+ references = models.TextField(
+ blank=True,
+ verbose_name=_('references'))
+
+ date_published = models.DateTimeField(
+ blank=True, null=True)
+
+ date_shared = models.DateTimeField(
+ blank=True, null=True)
+
+ search_vector = SearchVectorField(null=True)
+
+ def __str__(self):
+ logger.debug("in revision")
+ logger.debug(self.content)
+ if self.revision_number:
+ return "%s (%d)" % (self.title, self.revision_number)
+ else:
+ return "%s" % self.title
+
+ def clean(self):
+ # Enforce DOS line endings \r\n. It is the standard for web browsers,
+ # but when revisions are created programatically, they might
+ # have UNIX line endings \n instead.
+ self.content = self.content.replace('\r', '').replace('\n', '\r\n')
+
+ def inherit_predecessor(self, vulnote):
+ """
+ Inherit certain properties from predecessor because it's very
+ convenient. Remember to always call this method before
+ setting properties :)"""
+ predecessor = vulnote.current_revision
+ self.vulnote = predecessor.vulnote
+ self.content = predecessor.content
+ self.title = predecessor.title
+ self.references = predecessor.references
+ self.deleted = predecessor.deleted
+ self.locked = predecessor.locked
+
+ def _get_reviews(self):
+ return VulNoteReview.objects.filter(vulnote=self, complete=True)
+
+ reviews = property(_get_reviews)
+
+ class Meta:
+ indexes = [GinIndex(
+ fields=['search_vector'],
+ name= 'vulnote_gin',
+ )
+ ]
+ get_latest_by = 'revision_number'
+ ordering = ('created',)
+ unique_together = ('vulnote', 'revision_number')
+
+
+
+class VulNoteReview(models.Model):
+ reviewer = models.ForeignKey(
+ settings.AUTH_USER_MODEL,
+ on_delete=models.SET_NULL,
+ blank=True,
+ null=True)
+
+ vulnote = models.ForeignKey(
+ VulNoteRevision,
+ on_delete=models.CASCADE,
+ help_text=_('The revision of the vulnote being reviewed.')
+ )
+
+ review = models.TextField(
+ )
+
+ feedback = models.TextField(
+ _('Feedback'),
+ blank=True, null=True,
+ help_text=_('Feedback/Comments to the Author')
+ )
+
+ ticket = models.ForeignKey(
+ Ticket,
+ blank=True, null=True,
+ on_delete=models.SET_NULL)
+
+ marks = OldJSONField(
+ blank=True,
+ null=True)
+
+ date_complete = models.DateTimeField(
+ blank=True, null=True)
+
+ complete = models.BooleanField(
+ default=False)
+
+ approve = models.BooleanField(
+ default=False)
+
+ def _marks_json(self):
+ return json.loads(self.marks)
+
+ marksj = property(_marks_json)
+
+ def __str__(self):
+ if self.reviewer:
+ return f"{self.vulnote.vulnote.case.vu_vuid} review by {self.reviewer.usersettings.preferred_username}"
+ else:
+ return f"{self.vulnote.vulnote.case.vu_vuid} review unassigned."
+
+class EmailTemplate(models.Model):
+ """
+ Since these are more likely to be changed than other templates, we store
+ them in the database.
+ This means that an admin can change email templates without having to have
+ access to the filesystem.
+ """
+
+ template_name = models.CharField(
+ _('Template Name'),
+ max_length=100,
+ )
+
+ subject = models.CharField(
+ _('Subject'),
+ max_length=100,
+ help_text=_('If related to a ticket action, This will be prefixed '
+ '"[ticket.ticket] ticket.title"'
+ '. We recommend something simple such as '
+ '"(Updated") or "(Closed)"'
+ ' - the same context is available as in plain_text, below.'),
+ )
+
+ heading = models.CharField(
+ _('Heading'),
+ max_length=100,
+ help_text=_('In HTML e-mails, this will be the heading at the top of '
+ 'the email - the same context is available as in plain_text, '
+ 'below.'),
+ )
+
+ plain_text = models.TextField(
+ _('Plain Text'),
+ help_text=_('If related to a ticket, the context available to you'
+ ' includes {{ ticket }}, '
+ '{{ queue }}, and depending on the time of the call: '
+ '{{ resolution }} or {{ comment }}.'),
+ )
+
+ html = models.TextField(
+ _('HTML'),
+ help_text=_('The same context is available here as in plain_text, above.'),
+ )
+
+ locale = models.CharField(
+ _('Locale'),
+ max_length=10,
+ blank=True,
+ null=True,
+ help_text=_('Locale of this template.'),
+ )
+
+ body_only = models.BooleanField(
+ default=False)
+
+ user = models.ForeignKey(
+ settings.AUTH_USER_MODEL,
+ on_delete=models.SET_NULL,
+ blank=True,
+ null=True)
+
+ modified = models.DateTimeField(
+ auto_now=True
+ )
+
+ def __str__(self):
+ return '%s' % self.template_name
+
+
+ def as_dict(self):
+ if self.user:
+ user = self.user.usersettings.preferred_username
+ else:
+ user = "system"
+ return {
+ 'id': self.id,
+ 'name': self.template_name,
+ 'user': user,
+ 'subject': self.subject,
+ 'modified': self.modified.strftime('%Y-%m-%d'),
+ 'locale': self.locale,
+ 'auto': not(self.body_only)}
+
+ class Meta:
+ ordering = ('template_name', 'locale')
+ verbose_name = _('e-mail template')
+ verbose_name_plural = _('e-mail templates')
+
+
+def update_filename(instance, filename):
+ if instance.vrf_id:
+ new_filename = "vrf%s_%s" % (instance.vrf_id, filename)
+ else:
+ new_filename= "novrf_%s" % filename
+
+ return new_filename
+
+
+class CaseRequest(Ticket):
+ """
+ A Case Request is a request for VINCE vulnerability coordination that
+ has either been manually created by a coordinator or has come from
+ the Vulnerability Reporting Form (VRF).
+
+ A Case Request will eventually (but not always) become a Vulnerability
+ Case if selected by the Vuln Coordination Team.
+ """
+ SUB_CHOICES = (
+ ('email', 'email'),
+ ('web', 'web'),
+ ('manual', 'manual'),
+ )
+ VRF_FORM = 1
+ GOV_FORM = 3
+
+ REQUEST_TYPES = (
+ (VRF_FORM, 'VRF'),
+ (GOV_FORM, 'GOV'),
+ )
+
+ vrf_id = models.CharField(max_length=20)
+ request_type = models.IntegerField(
+ _('Request Type'),
+ choices=REQUEST_TYPES,
+ default=VRF_FORM,
+ )
+ contact_name = models.CharField(max_length=100, blank=True, null=True)
+ contact_org = models.CharField(max_length=100, blank=True, null=True)
+ contact_email = models.EmailField(max_length=254, blank=True, null=True)
+ contact_phone = models.CharField(max_length=20, blank=True, null=True)
+ share_release = models.BooleanField(default=True)
+ credit_release = models.BooleanField(default=True)
+ comm_attempt = models.BooleanField(blank=True, null=True)
+ why_no_attempt = models.CharField(max_length=100, blank=True, null=True)
+ please_explain = models.TextField(blank=True, null=True)
+ vendor_name = models.CharField(max_length=100, blank=True, null=True)
+ multiplevendors = models.BooleanField(default=False)
+ other_vendors = models.TextField(blank=True, null=True)
+ first_contact = models.DateTimeField(blank=True, null=True)
+ vendor_communication = models.TextField(blank=True, null=True)
+ product_name = models.CharField(max_length=500)
+ product_version = models.CharField(max_length=100, blank=True, null=True)
+ ics_impact = models.BooleanField(default=False)
+ vul_description = models.TextField(blank=True, null=True)
+ vul_exploit = models.TextField(blank=True, null=True)
+ vul_impact = models.TextField(blank=True, null=True)
+ vul_discovery = models.TextField(blank=True, null=True)
+ vul_public = models.BooleanField(default=False)
+ public_references = models.CharField(max_length=1000, blank=True, null=True)
+ vul_exploited = models.BooleanField(default=False)
+ exploit_references = models.CharField(max_length=1000, blank=True, null=True)
+ vul_disclose = models.BooleanField(default=False)
+ disclosure_plans = models.CharField(max_length=1000, blank=True, null=True)
+ user_file = models.FileField(blank=True, null=True, storage=PrivateMediaStorage(), upload_to=update_filename)
+ tracking = models.CharField(max_length=100,blank=True, null=True)
+ comments = models.TextField(blank=True, null=True)
+ date_submitted = models.DateTimeField(default=timezone.now)
+ submission_type = models.CharField(max_length=15, choices=SUB_CHOICES, default="web")
+ vc_id = models.IntegerField(default = 0)
+
+
+ def get_vrf_subject(self):
+ if self.vrf_id:
+ return "%s%s" % (settings.REPORT_IDENTIFIER, self.vrf_id)
+ elif self.tracking:
+ return "%s" % self.tracking
+ else:
+ return "New Vulnerability Report"
+
+ vrf_subject = property(get_vrf_subject)
+
+class VulnerabilityCaseManager(models.Manager):
+ def search(self, query=None):
+ qs = self.get_queryset()
+ if query is not None:
+ qs = qs.extra(where=["search_vector @@ (to_tsquery('english', %s))=true"],params=[query])
+ return qs
+
+class VulnerabilityCase(models.Model):
+ """
+ A Vulnerability Case is a case that has been selected by a
+ VINCE Coordination team for vulnerability coordination
+ """
+ INACTIVE_STATUS = 2
+ ACTIVE_STATUS = 1
+
+ STATUS_CHOICES = (
+ (ACTIVE_STATUS, _('Active')),
+ (INACTIVE_STATUS, _('Inactive')),
+ )
+ vuid = models.CharField(max_length=20)
+ created = models.DateTimeField(default=timezone.now)
+
+ modified = models.DateTimeField(
+ _('Modified'),
+ blank=True,
+ null=True,
+ help_text=_('Date this case was most recently changed.'),
+ )
+
+ on_hold = models.BooleanField(
+ _('On Hold'),
+ blank=True,
+ default=False,
+ help_text=_('If a case is on hold, it will not automatically be escalated.'),
+ )
+ status = models.IntegerField(
+ _('Status'),
+ choices=STATUS_CHOICES,
+ default=ACTIVE_STATUS,
+ )
+
+ owner = models.ForeignKey(
+ settings.AUTH_USER_MODEL,
+ help_text=_('The User that has selected the case for coordination'),
+ on_delete=models.SET_NULL,
+ blank=True,
+ null=True
+ )
+
+ team_owner = models.ForeignKey(
+ Group,
+ help_text=_('The team that owns this case'),
+ on_delete=models.SET_NULL,
+ blank=True,
+ null=True
+ )
+
+ case_request = models.ForeignKey(
+ Ticket,
+ blank=True,
+ null=True,
+ on_delete=models.SET_NULL,
+ help_text=_('The CaseRequest that this is Case is derived from'))
+
+ product_name = models.CharField(
+ max_length=500,
+ help_text=_('The vulnerable product name/affected website.')
+ )
+
+ product_version = models.CharField(
+ max_length=100,
+ help_text=_('The product version that is vulnerable (if available).'),
+ blank=True,
+ null=True
+ )
+
+ summary = models.CharField(
+ max_length=1000,
+ help_text=_('A summary of the vulnerable. This may be taken from the description in the CaseRequest.')
+ )
+
+ title = models.CharField(
+ max_length=500,
+ help_text=_('A title for this case.'))
+
+ due_date = models.DateTimeField(
+ help_text=_('Estimated Public Date'),
+ blank=True, null=True
+ )
+
+ publicdate = models.DateTimeField(
+ blank=True, null=True
+ )
+
+
+ publicurl = models.CharField(
+ _('Public URL'),
+ max_length=500, blank=True, null=True,
+ help_text=_('The URL for the public notice of a vulnerability.'),
+ )
+
+
+ template = models.ForeignKey(
+ 'CaseTemplate',
+ blank=True,
+ null=True,
+ on_delete=models.SET_NULL,
+ help_text=_('Changing the template will result in the addition of new tasks to this case. Existing tasks will not be modified.'),
+ )
+
+ vul_incrementer = models.IntegerField(
+ default = 0
+ )
+
+ lotus_notes = models.BooleanField(
+ default = False,
+ help_text=_('Do not create this case in VinceComm.')
+ )
+
+ changes_to_publish = models.BooleanField(
+ default = False,
+ help_text=_('Switch to True if changes to case require publishing')
+ )
+
+ search_vector = SearchVectorField(null=True)
+
+ objects = VulnerabilityCaseManager()
+
+ class Meta:
+ indexes = [ GinIndex(
+ fields = ['search_vector'],
+ name = 'case_gin',
+ )
+ ]
+
+ def get_title(self):
+ return f"{settings.CASE_IDENTIFIER}{self.vuid}: {self.title}"
+
+ vutitle = property(get_title)
+
+ def get_vuid(self):
+ return f"{settings.CASE_IDENTIFIER}{self.vuid}"
+
+ vu_vuid = property(get_vuid)
+
+ def __str__(self):
+ return self.vuid
+
+ def get_absolute_url(self):
+ return reverse('vince:case', args=(self.id,))
+
+ def _get_case_for_url(self):
+ """ A URL-friendly ticket ID, used in links. """
+ return u"VU%s" % (self.vuid)
+
+ case_for_url = property(_get_case_for_url)
+
+ def _get_status(self):
+ """
+ Displays the ticket status, with an "On Hold" message if needed.
+ """
+ held_msg = ''
+# if self.on_hold:
+# held_msg = _(' - On Hold')
+# dep_msg = ''
+ return u'%s%s' % (self.get_status_display(), held_msg)
+ get_status = property(_get_status)
+
+ def _can_be_resolved(self):
+ """
+ Returns a boolean.
+ True = any dependencies are resolved
+ False = There are non-resolved dependencies
+ """
+ OPEN_STATUSES = (Ticket.OPEN_STATUS, Ticket.REOPENED_STATUS)
+ return CaseDependency.objects.filter(case=self).filter(
+ depends_on__status__in=OPEN_STATUSES).count() == 0
+ can_be_resolved = property(_can_be_resolved)
+
+ def _get_assigned_to(self):
+ """ Custom property to allow us to easily print 'Unassigned' if a
+ case has no owner, or the users name if it's assigned. If the user
+ has a full name configured, we use that, otherwise their username. """
+ assignments = list(CaseAssignment.objects.filter(case=self).values_list('assigned__usersettings__preferred_username', flat=True))
+ if assignments:
+ return ",".join(assignments)
+ else:
+ return _('Unassigned')
+
+ get_assigned_to = property(_get_assigned_to)
+
+ def _get_status_html(self):
+ if self.status == self.ACTIVE_STATUS:
+ if self.published:
+ return f"{self.get_status_display()} Published"
+ return f"{self.get_status_display()}"
+
+ else:
+ if self.published:
+ return f"{self.get_status_display()} Published"
+ else:
+ return f"{self.get_status_display()}"
+
+ get_status_html = property(_get_status_html)
+
+ def _get_tag_html(self):
+ tags = self.casetag_set.all()
+ html = ""
+ search_url = reverse("vince:casesearch")
+ for tag in tags:
+ html = html + f" {tag} "
+ return html
+
+ get_tag_html = property(_get_tag_html)
+
+ def _get_owner_html(self):
+ if self.team_owner:
+ return f"{self.team_owner.name}"
+ else:
+ return ""
+
+ get_owner_html = property(_get_owner_html)
+
+ def _is_published(self):
+ try:
+ if self.vulnote.date_published:
+ return True
+ except:
+ pass
+ return False
+
+ published = property(_is_published)
+
+ def is_active(self):
+ today = date.today()
+ if ((today.year - self.created.year) > 0):
+ return False
+ return True
+
+ def get_cves(self):
+ cves = []
+ for vul in self.vulnerability_set.all():
+ if not(vul.deleted):
+ if vul.cve:
+ cves.append(f"CVE-{vul.cve}")
+ return cves
+
+ def as_dict(self):
+
+ url = str(self.get_absolute_url())
+
+ #number of posts
+ activity = CaseAction.objects.filter(case=self, post__isnull=False).count()
+
+ #vendors
+ vendors = VulnerableVendor.casevendors(self);
+ vendors_notified = vendors.filter(contact_date__isnull=False).count()
+ vendors_seen = vendors.filter(seen=True).count()
+
+ try:
+ vulnote = self.vulnote
+ if vulnote:
+ if vulnote.date_published:
+ vulnote = "Published " + vulnote.date_published.strftime('%Y-%m-%d')
+ elif vulnote.date_shared:
+ vulnote = "Shared " + vulnote.date_shared.strftime('%Y-%m-%d')
+ else:
+ vulnote = "Draft " + vulnote.modified.strftime('%Y-%m-%d')
+ except:
+ vulnote = "Not started"
+
+ if self.due_date:
+ due_date = self.due_date.strftime('%Y-%m-%d')
+ if self.due_date < timezone.now():
+ color = "error"
+ else:
+ color = "goodtext"
+ else:
+ due_date = None
+ color = "warningtext"
+
+ if self.publicdate:
+ publicdate = self.publicdate.strftime('%Y-%m-%d')
+ if self.publicdate < timezone.now():
+ color = "warningtext"
+ else:
+ publicdate = None
+
+ assignment = str(self.get_assigned_to)
+
+ if self.modified:
+ modified = self.modified.strftime('%Y-%m-%d')
+ else:
+ modified = self.created.strftime('%Y-%m-%d')
+
+ return {
+ 'id': self.id,
+ 'vu': self.vu_vuid,
+ 'title': self.title,
+ 'url': url,
+ 'description': self.summary,
+ 'created':self.created.strftime('%Y-%m-%d'),
+ 'date': modified,
+ 'due_date':due_date,
+ "date_color": color,
+ 'publicdate': publicdate,
+ 'vuls': Vulnerability.casevuls(self).count(),
+ 'posts': activity,
+ 'assigned_to': assignment,
+ 'vendors': vendors.count(),
+ 'vendors_notified': vendors_notified,
+ 'vendors_seen': vendors_seen,
+ 'vulnote':vulnote
+ }
+
+
+class CasePermissions(models.Model):
+
+ case = models.ForeignKey(
+ VulnerabilityCase,
+ on_delete=models.CASCADE,
+ verbose_name=_('Case')
+ )
+
+ group = models.ForeignKey(
+ Group,
+ help_text=_('Group permissions'),
+ on_delete=models.CASCADE
+ )
+
+ group_read = models.BooleanField(
+ default=True,
+ verbose_name=_('group read access'))
+
+ group_write = models.BooleanField(
+ default=True,
+ verbose_name=_('group write access'))
+
+ publish = models.BooleanField(
+ default=True,
+ verbose_name=_('publish permissions'))
+
+ class Meta:
+ unique_together = (('case', 'group'),)
+
+
+class CaseTag(models.Model):
+ """
+ This is the way to classify cases
+ """
+
+ case = models.ForeignKey(
+ VulnerabilityCase,
+ on_delete=models.CASCADE,
+ verbose_name=_('Case'),
+ )
+
+ created = models.DateTimeField(
+ auto_now_add=True
+ )
+
+ user = models.ForeignKey(
+ settings.AUTH_USER_MODEL,
+ on_delete=models.CASCADE,
+ blank=True,
+ null=True,
+ help_text=_('User that tagged this case.'),
+ verbose_name=_('User'),
+ )
+
+ tag = models.CharField(
+ max_length=50,
+ help_text=_('The tag')
+ )
+
+ def __str__(self):
+ return self.tag
+
+class CaseAction(Action):
+ """
+ A CaseAction is a comment and/or change to a case.
+
+ The title will be automatically generated at save-time based on
+ what action the user took.
+
+ """
+
+ TASK_ACTIVITY = 8
+
+ ACTION_TYPE = (
+ (1, "VinceTrack"),
+ (2, "Post"),
+ (3, "Message"),
+ (4, "Status Change"),
+ (5, "VinceComm Artifact"),
+ (6, "Threads"),
+ (7, "Vendor Viewed"),
+ (TASK_ACTIVITY, "Task Activity"),
+ (9, "Publish Vul Note"),
+ (10, "Status Change Notify"),
+ (11, "Edit Post"),
+ (12, "Post Removed"),
+ )
+
+ action_type = models.IntegerField(
+ default=0
+ )
+
+ case = models.ForeignKey(
+ VulnerabilityCase,
+ on_delete=models.CASCADE,
+ verbose_name=_('Case')
+ )
+
+ vendor = models.ForeignKey(
+ 'VulnerableVendor',
+ blank=True,
+ null=True,
+ help_text=_('What vendor was involved in the change?'),
+ on_delete=models.CASCADE
+ )
+
+ notification = models.ForeignKey(
+ 'VendorNotificationContent',
+ on_delete=models.CASCADE,
+ blank=True,
+ null=True,
+ help_text=_('What notification was sent?'),
+ )
+
+ post = models.IntegerField(
+ _('VinceComm Post ID'),
+ blank=True,
+ null=True)
+
+ vulnote = models.ForeignKey(
+ "VulNoteRevision",
+ blank=True,
+ null=True,
+ on_delete=models.CASCADE)
+
+ @classmethod
+ def publishactions(cls, case):
+ return cls.objects.filter(
+ case = case,
+ action_type=9
+ ).order_by('-date')
+
+
+# message = models.IntegerField(
+# _('VinceComm Message ID'),
+# blank=True,
+# null=True)
+
+ class Meta:
+ ordering = ('date',)
+ verbose_name = _('Case Action')
+ verbose_name_plural = _('Case Actions')
+
+ def save(self, *args, **kwargs):
+ c = self.case
+ c.modified = timezone.now()
+ c.save()
+
+ #send the emails
+ super(CaseAction, self).save(*args, **kwargs)
+
+
+class CaseMessageAction(CaseAction):
+ message = models.IntegerField(
+ _('VinceComm Message ID'))
+
+ thread = models.IntegerField(
+ _('VinceComm Thread ID'))
+
+ replied = models.BooleanField(
+ _('Is this a reply?'),
+ default=False)
+
+
+class VendorNotificationContent(models.Model):
+ version = models.IntegerField(
+ default=0)
+
+ post = models.IntegerField(
+ default=0,
+ help_text=_('The order of the posts.')
+ )
+ content = models.TextField(
+ help_text=_('This will be a pinned post in the vendor case view.')
+ )
+ case = models.ForeignKey(
+ VulnerabilityCase,
+ on_delete=models.CASCADE
+ )
+ created = models.DateTimeField(
+ auto_now_add=True
+ )
+ modified = models.DateTimeField(
+ auto_now=True
+ )
+ user = models.ForeignKey(
+ settings.AUTH_USER_MODEL,
+ blank=True,
+ null=True,
+ on_delete=models.SET_NULL,
+ help_text=_('The user that wrote the notification'))
+
+ published = models.BooleanField(
+ default=False)
+
+ published_date = models.DateTimeField(
+ blank=True,
+ null=True,
+ help_text=_('Datetime when the post was published')
+ )
+
+
+class VendorNotificationEmail(models.Model):
+
+ subject = models.CharField(
+ max_length=200,
+ help_text=_('The subject of the email.'),
+ )
+
+ email_body = models.TextField(
+ help_text=_('The body of the email that will be sent to vendors to notify them to login to VINCE. '),
+ blank=True,
+ default=settings.STANDARD_VENDOR_EMAIL,
+ null=True)
+
+ search_vector = SearchVectorField(null=True)
+
+ class Meta:
+ indexes = [ GinIndex(
+ fields = ['search_vector'],
+ name = 'email_gin',
+ )
+ ]
+
+
+
+
+class VendorNotification(models.Model):
+ vendor = models.ForeignKey(
+ 'VulnerableVendor',
+ on_delete=models.CASCADE,
+ help_text=_('The vendor notified')
+ )
+ emails = models.CharField(
+ max_length=1000,
+ help_text=_('A comma separated list of the emails that was sent this message'),
+ blank=True,
+ null=True
+ )
+ notification = models.ForeignKey(
+ VendorNotificationEmail,
+ on_delete=models.CASCADE,
+ help_text=('The content of the message')
+ )
+ notify_date = models.DateTimeField(
+ default=timezone.now,
+ help_text=_("Date the notification was sent")
+ )
+ user = models.ForeignKey(
+ settings.AUTH_USER_MODEL,
+ blank=True,
+ null=True,
+ on_delete=models.SET_NULL,
+ help_text=_('The user that notified'))
+
+
+class VulnerableVendor(models.Model):
+ """
+ A vendor that may or may not be vulnerable to a Case.
+ """
+
+ SUB_CHOICES = (
+ ('email', 'email'),
+ ('kb', 'kb'),
+ ('manual', 'manual'),
+ ('vince', 'vince'),
+ )
+
+ case = models.ForeignKey(
+ VulnerabilityCase,
+ on_delete=models.CASCADE,
+ help_text=_('The Case that describes this vulnerability.')
+ )
+ vendor = models.CharField(
+ max_length=200,
+ help_text=_('The name of the vendor that may be affected.')
+ )
+ added_to_case = models.DateTimeField(
+ blank=True,
+ null=True,
+ help_text=_('The date that this vendor was added to the case.')
+ )
+ added_by = models.ForeignKey(
+ settings.AUTH_USER_MODEL,
+ on_delete=models.SET_NULL,
+ blank=True,
+ null=True,
+ help_text=_('The user that added this vendor to the case')
+ )
+ contact_date = models.DateTimeField(
+ blank=True,
+ null=True,
+ help_text=_('The date that this vendor was first contacted about this vulnerability.')
+ )
+ contact = models.ForeignKey(
+ Contact,
+ on_delete=models.CASCADE,
+ help_text=_('The formal contact information if we have it')
+ )
+
+ seen = models.BooleanField(default=False,
+ help_text=_("Has the user logged in to view vuln?"))
+
+ references = models.TextField(
+ help_text=_('Vendor references for this case'),
+ blank=True,
+ null=True)
+
+ statement = models.TextField(
+ help_text=_('A general vendor statement for all vuls in the case'),
+ blank=True,
+ null=True)
+
+ addendum = models.TextField(
+ help_text=_('Text added by coordination team about this vendor.'),
+ blank=True,
+ null=True)
+
+ date_modified = models.DateTimeField(
+ auto_now=True
+ )
+
+ statement_date = models.DateTimeField(
+ blank=True,
+ null=True)
+
+ vendor_contact = models.ForeignKey(
+ 'VendorContactData',
+ blank=True, null=True,
+ on_delete=models.SET_NULL,
+ help_text=('More information about the person that provided the statement'),
+ )
+
+ submission_type = models.CharField(max_length=15,
+ choices=SUB_CHOICES,
+ default="vince")
+
+ approved = models.BooleanField(
+ default=False,
+ help_text=_('If all status/statements have been approved.'),
+ )
+
+ user_approved = models.ForeignKey(
+ settings.AUTH_USER_MODEL,
+ help_text=_('The user that approved this request.'),
+ on_delete=models.SET_NULL,
+ related_name='user_approved',
+ blank=True,
+ null=True)
+
+ time_approved = models.DateTimeField(
+ blank=True, null=True,
+ help_text=_('The time the statement was approved.'),
+ )
+
+ deleted = models.BooleanField(
+ default = False,
+ help_text=_('This field is only true if a vendor was removed after the vulnote was published')
+ )
+
+ share = models.BooleanField(
+ default = False,
+ help_text=_("Does the vendor give permission to share status/statement pre-publication"),
+ )
+
+ approve_ticket = models.OneToOneField(
+ Ticket,
+ on_delete=models.SET_NULL,
+ help_text=_('The ticket to approve this vendor'),
+ related_name='approve_vendor',
+ blank=True,
+ null=True
+ )
+
+ lotus_id = models.CharField(
+ max_length=20,
+ blank=True,
+ null=True,
+ help_text='Old Lotus notes style vendor record ID')
+
+
+ tagged = models.ForeignKey(
+ Ticket,
+ on_delete=models.CASCADE,
+ help_text=_('Ticket dependency if vendor is tagged'),
+ related_name='tagged',
+ blank=True,
+ null=True
+ )
+
+ from_group = models.ForeignKey(
+ 'ContactGroup',
+ on_delete=models.SET_NULL,
+ blank=True,
+ null=True,
+ help_text='If this vendor was added from a group, add it here')
+
+ @classmethod
+ def casevendors(cls, case):
+ return cls.objects.filter(
+ case = case,
+ deleted=False,
+ )
+
+ def __str__(self):
+ return "%s in %s" % (self.vendor, self.case.vutitle)
+
+ def get_status(self):
+ status = VendorStatus.objects.filter(vendor=self).order_by('status').first()
+ if status:
+ return status.get_status_display()
+ else:
+ return "Unknown"
+
+ def save(self, *args, **kwargs):
+ if not self.id:
+ self.added_to_case = timezone.now()
+
+ super(VulnerableVendor, self).save(*args, **kwargs)
+ class Meta:
+ unique_together = ('case', 'contact',)
+
+ def as_dict(self):
+ if self.contact_date:
+ rm_confirm = True
+ remove_link = reverse("vince:rmvendorconfirm", args=[self.id])
+ else:
+ rm_confirm = False
+ remove_link = reverse("vince:rmvendor", args=[self.id])
+
+ other_statement = VendorStatus.objects.filter(vendor=self).exclude(statement__isnull=True)
+
+ if self.statement or self.references or other_statement:
+ statement_link = reverse("vince:vendorstatusmodal", args=[self.id])
+ else:
+ statement_link = None
+
+ if self.user_approved:
+ approved = True
+ else:
+ approved = False
+
+ if self.contact_date:
+ contact_date = self.contact_date.strftime('%Y-%m-%d')
+ else:
+ contact_date = None
+
+ if self.statement_date:
+ statement_date = self.statement_date.strftime('%Y-%m-%d')
+ else:
+ statement_date = None
+
+ edit_date_url = reverse("vince:confirmvendordate", args=[self.id])
+ vendor_notify_url = reverse("vince:notification", args=[self.id])
+
+ tags = self.contact.contacttag_set.all().values_list('tag', flat=True)
+
+ tagged = False
+ if self.tagged:
+ if self.tagged.status in [Ticket.OPEN_STATUS, Ticket.REOPENED_STATUS]:
+ tagged = True
+
+ return {
+ 'id': self.id,
+ 'contact_link': self.contact.get_absolute_url(),
+ 'contact_id': self.contact.id,
+ 'vendor': self.contact.vendor_name,
+ 'status': self.get_status(),
+ 'contact_date': contact_date,
+ 'seen': self.seen,
+ 'user_approved': approved,
+ 'approved': self.approved,
+ 'remove_link': remove_link,
+ 'statement': statement_link,
+ 'statement_date': statement_date,
+ 'rm_confirm': rm_confirm,
+ 'edit_date_url': edit_date_url,
+ 'vendor_notification': vendor_notify_url,
+ 'alert_tags': list(tags),
+ 'tagged': tagged,
+ }
+
+class VendorContactData(models.Model):
+ org_name = models.CharField(max_length=250)
+ email = models.EmailField(max_length=254)
+ phone = models.CharField(max_length=50, blank=True, null=True)
+ other_emails = models.CharField(max_length=1000, blank=True, null=True)
+ person = models.CharField(max_length=250)
+ title = models.CharField(max_length=250, blank=True, null=True)
+
+class VendorStatusManager(models.Manager):
+
+ def get_queryset(self):
+ return super(VendorStatusManager, self).get_queryset().filter(vul__deleted=False)
+
+
+class VendorStatus(models.Model):
+ AFFECTED_STATUS = 1
+ UNAFFECTED_STATUS = 2
+ UNKNOWN_STATUS = 3
+
+ STATUS_CHOICES = (
+ (AFFECTED_STATUS, "Affected"),
+ (UNAFFECTED_STATUS, "Not Affected"),
+ (UNKNOWN_STATUS, "Unknown")
+ )
+
+ vendor = models.ForeignKey(
+ VulnerableVendor,
+ on_delete=models.CASCADE)
+
+ vul = models.ForeignKey(
+ "Vulnerability",
+ on_delete=models.CASCADE)
+
+ status = models.IntegerField(
+ choices=STATUS_CHOICES,
+ default = UNKNOWN_STATUS,
+ help_text=_('The vendor status. Unknown until vendor says otherwise.')
+ )
+
+ user = models.CharField(
+ max_length=200,
+ help_text=_('The user that responded to the status request.')
+ )
+
+ date_added = models.DateTimeField(
+ default=timezone.now)
+
+ date_modified = models.DateTimeField(
+ auto_now=True
+ )
+
+ references = models.TextField(
+ blank=True,
+ null=True)
+
+ statement = models.TextField(
+ blank=True,
+ null=True)
+
+ approved = models.BooleanField(
+ default=False)
+
+ user_approved = models.ForeignKey(
+ settings.AUTH_USER_MODEL,
+ help_text=_('The user that approved this request.'),
+ on_delete=models.SET_NULL,
+ related_name='user_approve',
+ blank=True,
+ null=True)
+
+ time_approved = models.DateTimeField(
+ blank=True, null=True,
+ help_text=_('The time the statement was approved.'),
+ )
+
+ objects = VendorStatusManager()
+
+ def __str__(self):
+ return "Vendor " + self.vendor.contact.vendor_name + " status: " + str(self.status) + " for " + str(self.vul)
+
+ class Meta:
+ unique_together = (('vendor', 'vul'),)
+ verbose_name_plural = _('Vendor Statuses')
+
+class CaseAssignment(models.Model):
+ """
+ A vulnerability case may have more than one person assigned to it.
+ This model handles that relationship
+ """
+ case = models.ForeignKey(
+ VulnerabilityCase,
+ on_delete=models.CASCADE)
+
+ assigned = models.ForeignKey(
+ settings.AUTH_USER_MODEL,
+ on_delete=models.CASCADE)
+
+ def __str__(self):
+ return "%s is assigned to %s" % (self.assigned.get_username(), self.case.vu_vuid)
+
+class CaseParticipant(models.Model):
+ case = models.ForeignKey(
+ VulnerabilityCase,
+ on_delete=models.CASCADE,
+ help_text=_('The Case that describes this vulnerability.')
+ )
+ user_name = models.CharField(
+ max_length=100,
+ help_text=_('The name of the user.')
+ )
+
+ group = models.BooleanField(
+ default=False,
+ help_text=_('Is this a vendor/group?')
+ )
+
+ contact = models.ForeignKey(
+ "Contact",
+ help_text=_('If this is a vendor/group, then link them here'),
+ blank=True,
+ null=True,
+ on_delete=models.SET_NULL)
+
+ added_to_case = models.DateTimeField(
+ blank=True, null=True,
+ help_text=_('The date that this user was added to the case.')
+ )
+ status = models.CharField(
+ max_length=50,
+ help_text=_('Participant status.'),
+ blank=True, null=True)
+
+ added_by = models.ForeignKey(
+ settings.AUTH_USER_MODEL,
+ on_delete=models.SET_NULL,
+ blank=True,
+ null=True,
+ help_text=_('The user that added this vendor to the case')
+ )
+
+ coordinator=models.BooleanField(
+ help_text=_('Is this user a vulnerability coordinator?'),
+ default=False)
+
+ def __str__(self):
+ return self.user_name
+
+
+ def as_dict(self):
+ if self.added_to_case:
+ notified = self.added_to_case.strftime('%Y-%m-%d')
+ else:
+ notified = None
+
+ link = None
+ if self.group:
+ if self.contact:
+ link = reverse("vince:contact", args=[self.contact.id])
+ else:
+ contact = Contact.objects.filter(vendor_name=self.user_name).first()
+ if contact:
+ link = reverse("vince:contact", args=[contact.id])
+ else:
+ user = User.objects.using('vincecomm').filter(email__iexact=self.user_name).first()
+ if user:
+ link = reverse('vince:vcuser', args=[user.id])
+
+ remove_link = reverse("vince:rmpartnoconfirm", args=[self.id])
+ rm_confirm = False
+ if self.status:
+ if 'Notified' in self.status:
+ remove_link = reverse("vince:rmparticipant", args=[self.id])
+ rm_confirm = True
+
+
+ if self.coordinator:
+ coordinator = "Coordinator"
+ else:
+ coordinator = "Reporter"
+
+ if self.contact:
+ name = self.contact.vendor_name
+ contact_link = self.contact.get_absolute_url()
+ else:
+ name = self.user_name
+ contact_link = None
+
+ seen = False
+ if self.status:
+ if any(x in self.status for x in ["Seen", "Lead"]):
+ seen = True
+
+ return {
+ 'id': self.id,
+ 'name': name,
+ 'link': link,
+ 'status': self.status,
+ 'seen': seen,
+ 'notified': notified,
+ 'remove_link': remove_link,
+ 'role': coordinator,
+ 'changetype': reverse("vince:partype", args=[self.id]),
+ 'rm_confirm': rm_confirm
+ }
+
+class Artifact(models.Model):
+ """
+ This is an observable or outcome as result of completing a task.
+ Artifacts can be used to generate vul notes or reports.
+ """
+ type = models.CharField(
+ max_length=200,
+ blank=True,
+ null=True,
+ help_text=_('The type of data, a product name, an exploit, CVSS, etc.')
+ )
+ title = models.CharField(
+ max_length=200,
+ help_text=_('A title for this value that could be used in a report or vul note.')
+ )
+ value = models.CharField(
+ max_length=500,
+ help_text=_('The artifact that you want to document.'),
+ )
+ user = models.ForeignKey(
+ settings.AUTH_USER_MODEL,
+ blank=True,
+ null=True,
+ on_delete=models.SET_NULL,
+ help_text=_('The user that added this artifact.')
+ )
+ date_added = models.DateTimeField(
+ default=timezone.now)
+
+ date_modified = models.DateTimeField(
+ auto_now=True)
+
+ description = models.TextField(
+ blank=True,
+ null=True,
+ help_text=_('A description of this artifact.')
+ )
+ added_to_note = models.BooleanField(
+ default = False,
+ help_text=_('If artifact has been added to vulnote'))
+
+ added_to_post = models.BooleanField(
+ default = False,
+ help_text=_('If artifact has been added to vendor notification'))
+
+ file_hash = models.CharField(
+ max_length=100,
+ help_text=_('The hash of the file'),
+ blank=True,
+ null=True)
+
+ def as_dict(self):
+ if self.get_related_ticket():
+ tkt = self.get_related_ticket()
+ ticket = tkt.get_absolute_url()
+ ticket_url = tkt.ticket_for_url
+ delete_url = reverse('vince:rmartifact', args=[tkt.id, self.id])
+ share_url = reverse('vince:maketktpublic', args=[self.id])
+ else:
+ ticket = None
+ ticket_url = None
+ delete_url = reverse('vince:rmcase_artifact', args=[self.id])
+ share_url = reverse('vince:makepublic', args=[self.id])
+
+ if self.get_related_attachment():
+ #url = self.get_related_attachment().file.url
+ url = reverse('vince:attachment', args=[self.get_related_attachment().uuid])
+ public = self.get_related_attachment().public
+ else:
+ url = None
+ public = False
+
+ return {
+ 'id': self.id,
+ 'related_ticket': ticket,
+ 'ticket_url': ticket_url,
+ 'type': self.type,
+ 'url': url,
+ 'title': self.title,
+ 'value': self.value,
+ 'public': public,
+ 'user': self.user.usersettings.vince_username if self.user else None,
+ 'date_added': self.date_added.strftime('%Y-%m-%d'),
+ 'date_modified': self.date_modified,
+ 'description': self.description,
+ 'added_to_note': self.added_to_note,
+ 'added_to_post': self.added_to_post,
+ 'tags': self.get_related_tags(),
+ 'delete_url': delete_url,
+ 'share_url': share_url
+ }
+
+ def get_related_case(self):
+ case = CaseArtifact.objects.filter(artifact_ptr=self).first()
+ if case:
+ return case.case
+ else:
+ return None
+
+ def get_related_ticket(self):
+ ticket = TicketArtifact.objects.filter(artifact_ptr=self).first()
+ if ticket:
+ return ticket.ticket
+ else:
+ return None
+
+ def get_related_tags(self):
+ tags = ArtifactTag.objects.filter(artifact=self).values_list('tag', flat=True)
+ return list(tags)
+
+
+ def get_related_attachment(self):
+ att = ArtifactAttachment.objects.filter(artifact=self).first()
+ if att:
+ return att.attachment
+ else:
+ return None
+
+ def __str__(self):
+ return "%s: %s" % (self.title, self.value)
+
+class ArtifactAttachment(models.Model):
+ artifact = models.ForeignKey(
+ Artifact,
+ on_delete=models.CASCADE,
+ verbose_name=_('Artifact'),
+ )
+ attachment = models.ForeignKey(
+ Attachment,
+ on_delete=models.CASCADE)
+
+
+class ArtifactTag(models.Model):
+ """
+ This is a tag for an artifact - something
+ that can easily be searched on later.
+ """
+ artifact = models.ForeignKey(
+ Artifact,
+ on_delete=models.CASCADE)
+ tag = models.CharField(
+ max_length=50,
+ help_text=_('A short word or phrase to identify this artifact.'))
+ user = models.ForeignKey(
+ settings.AUTH_USER_MODEL,
+ blank=True,
+ null=True,
+ on_delete=models.SET_NULL)
+ date_added = models.DateTimeField(
+ default=timezone.now)
+
+ def __str__(self):
+ return self.tag
+
+class TicketArtifact(Artifact):
+ """
+ This ties an artifact to ticket (and to a case).
+ A ticket can have zero to many artifacts.
+ """
+ ticket = models.ForeignKey(
+ Ticket,
+ on_delete=models.CASCADE)
+
+ show_ticket_info = property(True)
+
+class CaseArtifact(Artifact):
+ """
+ This ties an artifact to a case.
+ A case can have zero to many artifacts. Artifacts
+ might belong to a case through a ticket.
+ """
+ case = models.ForeignKey(
+ VulnerabilityCase,
+ on_delete=models.CASCADE)
+
+
+class CaseTemplate(models.Model):
+ title = models.CharField(
+ max_length=100)
+ queue = models.ForeignKey(
+ TicketQueue,
+ on_delete=models.CASCADE,
+ verbose_name=_('Queue'),
+ )
+ description = models.CharField(
+ max_length=200
+ )
+
+ user = models.ForeignKey(
+ settings.AUTH_USER_MODEL,
+ on_delete=models.SET_NULL,
+ help_text=_('The user that created this template.'),
+ blank=True,
+ null=True)
+
+ date_modified = models.DateTimeField(
+ auto_now=True
+ )
+
+ vendor_email = models.TextField(
+ _('Vendor Notification Email Content'),
+ help_text=_('The context available to you includes {{ vu }}, '
+ '{{ title }}, and {{ owner }}.'),
+ default = settings.STANDARD_VENDOR_EMAIL
+ )
+
+ participant_email = models.TextField(
+ _('Participant Notification Email Content'),
+ help_text=_('The context available to you includes {{ vu }}, '
+ '{{ title }}, and {{ owner }}.'),
+ default = settings.STANDARD_PARTICIPANT_EMAIL
+ )
+
+ def __str__(self):
+ return self.title
+
+ def as_dict(self):
+ tasks = CaseTask.objects.filter(template=self)
+ if self.user:
+ user = self.user.usersettings.preferred_username
+ else:
+ user = None
+ return {
+ 'id': self.id,
+ 'title': self.title,
+ 'user': user,
+ 'description': self.description,
+ 'date': self.date_modified.strftime('%Y-%m-%d'),
+ 'tasks': len(tasks),
+ 'queue': self.queue.title}
+
+
+
+class CaseTask(models.Model):
+ template = models.ForeignKey(
+ CaseTemplate,
+ on_delete=models.CASCADE
+ )
+
+ task_title = models.CharField(
+ _('Title'),
+ max_length=200,
+ )
+ task_description = models.TextField(
+ _('Description'),
+ blank=True,
+ null=True,
+ )
+ task_priority = models.IntegerField(
+ _('Priority'),
+ choices=Ticket.PRIORITY_CHOICES,
+ default=3,
+ help_text=_('1 = Highest Priority, 5 = Low Priority')
+ )
+ assigned_to = models.ForeignKey(
+ settings.AUTH_USER_MODEL,
+ on_delete=models.CASCADE,
+ blank=True,
+ null=True,
+ )
+
+ time_to_complete = models.DurationField(
+ _('Time to complete'),
+ default = timedelta(days=5)
+ )
+
+ dependency = models.BooleanField(
+ default = False,
+ help_text=_("Ticket will be created as a dependency of the case."))
+
+ def as_dict(self):
+ if self.assigned_to:
+ user = self.assigned_to.usersettings.preferred_username
+ else:
+ user = None
+ return {
+ 'id': self.id,
+ 'title': self.task_title,
+ 'user': user,
+ 'priority': self.task_priority,
+ 'description': self.task_description,
+ 'time': str(self.time_to_complete),
+ 'dependency': self.dependency
+ }
+
+class VulnerabilityManager(models.Manager):
+ def search(self, query=None):
+ qs = self.get_queryset()
+ if query is not None:
+ if re.match('cve-', query, re.I):
+ query = query[4:]
+ qs = qs.extra(where=["search_vector @@ (to_tsquery('english', %s))=true"],params=[query])
+ #or_lookup = (Q(cve__icontains=query) |
+ # Q(description__icontains=query)|
+ # Q(vulcwe__cwe__icontains=query)
+ #)
+ #qs = qs.filter(or_lookup).distinct()
+ return qs
+
+class Vulnerability(models.Model):
+ cve = models.CharField(
+ _('CVE'),
+ max_length=50,
+ blank=True,
+ null=True)
+
+ description = models.TextField(
+ _('Description'))
+
+ case = models.ForeignKey(
+ VulnerabilityCase,
+ on_delete=models.CASCADE)
+
+ user = models.ForeignKey(
+ settings.AUTH_USER_MODEL,
+ blank=True,
+ null=True,
+ on_delete=models.SET_NULL)
+
+ date_added = models.DateTimeField(
+ default=timezone.now)
+
+ modified = models.DateTimeField(
+ auto_now=True
+ )
+
+ ask_vendor_status = models.BooleanField(
+ default=False)
+
+ deleted = models.BooleanField(
+ default=False,
+ help_text=_('Only present if a vulnerability is deleted after a case has been published.'))
+
+ added_to_note = models.BooleanField(
+ default=False)
+
+ added_to_post = models.BooleanField(
+ default = False,
+ help_text=_('If artifact has been added to vendor notification'))
+
+ case_increment = models.IntegerField(
+ default = 0)
+
+ objects = VulnerabilityManager()
+
+ search_vector = SearchVectorField(null=True)
+
+ class Meta:
+ indexes = [GinIndex(
+ fields=['search_vector'],
+ name= 'vulnerability_gin',
+ )
+ ]
+
+ @classmethod
+ def casevuls(cls, case):
+ return cls.objects.filter(
+ case = case,
+ deleted=False,
+ )
+
+ def __str__(self):
+ return self.vul
+
+
+ def __str__(self):
+ return "%s" % self.vul
+
+ def _get_vul(self):
+ """ A user-friendly Vul ID, which is the cve if cve exists,
+ otherwise it's a combination of vul ID and case. """
+ if (self.cve):
+ return u"CVE-%s" % self.cve
+ else:
+ return u"%s" % (self.cert_id)
+ vul = property(_get_vul)
+
+ def as_dict(self):
+ cwes = []
+ for cwe in self.vulcwe_set.all():
+ cwes.append(cwe.cwe)
+ remove_link = reverse('vince:rmvul', args=[self.case.id, self.id])
+ cveallocation = CVEAllocation.objects.filter(vul=self).first()
+ if cveallocation:
+ if cveallocation.cwe:
+ cwes.clear()
+ for x in json.loads(cveallocation.cwe):
+ cwe = x.split(" ", 1)
+ cwes.append(cwe[0])
+ exploits = VulExploit.objects.filter(vul=self).count()
+ edit_link = reverse("vince:editvul", args=[self.id])
+ if cveallocation:
+ if cveallocation.cveaffectedproduct_set.count():
+ #only provide download link if all info is provided
+ cveallocation = cveallocation.id
+ else:
+ cveallocation = None
+ tags = list(self.vulnerabilitytag_set.values_list('tag', flat=True))
+ return {
+ 'id': self.id,
+ 'cert_id': self.cert_id,
+ 'ask_vendor_status': self.ask_vendor_status,
+ 'description': self.description,
+ 'cve': self.cve,
+ 'cveallocation':cveallocation,
+ 'exploits': exploits,
+ 'cwe': cwes,
+ 'date_added': self.date_added.strftime('%Y-%m-%d'),
+ 'remove_link': remove_link,
+ 'edit_link': edit_link,
+ 'tags': tags,
+ }
+
+ def _get_tag_html(self):
+ tags = self.vulnerabilitytag_set.all()
+ html = ""
+ search_url = reverse("vince:search")
+ for tag in tags:
+ html = html + f" {tag} "
+ return html
+
+ get_tag_html = property(_get_tag_html)
+
+ def _get_uid(self):
+ """ A user-friendly Vul ID, which is the cve if cve exists,
+ otherwise it's a combination of vul ID and case. """
+ if (self.cve):
+ return u"CVE-%s" % self.cve
+ else:
+ return u"%s" % (self.cert_id)
+ uid = property(_get_uid)
+
+ def _get_vul_for_url(self):
+ """ A URL-friendly vul ID, used in links. """
+ return u"%s" % (self.vul)
+ vul_for_url = property(_get_vul_for_url)
+
+ def get_absolute_url(self):
+ return reverse('vince:vul', args=(self.id,))
+
+ def _get_cert_id(self):
+ return u"%s.%d" % (self.case.vu_vuid, self.case_increment)
+
+ cert_id = property(_get_cert_id)
+
+
+class VulnerabilityTag(models.Model):
+ """
+ This is the way to classify vulnerabilities.
+ """
+
+ vulnerability = models.ForeignKey(
+ Vulnerability,
+ on_delete=models.CASCADE,
+ verbose_name=_('Vulnerability'),
+ )
+
+ created = models.DateTimeField(
+ auto_now_add=True
+ )
+
+ user = models.ForeignKey(
+ settings.AUTH_USER_MODEL,
+ on_delete=models.CASCADE,
+ blank=True,
+ null=True,
+ help_text=_('User that created this tag.'),
+ verbose_name=_('User'),
+ )
+
+ tag = models.CharField(
+ max_length=50,
+ help_text=_('The tag')
+ )
+
+ def __str__(self):
+ return self.tag
+
+
+class VulCVSS(models.Model):
+ vul = models.OneToOneField(
+ Vulnerability,
+ on_delete=models.CASCADE)
+
+ AV = models.CharField(
+ _('Attack Vector'),
+ max_length=2)
+
+ AC = models.CharField(
+ _('Attack Complexity'),
+ max_length=2)
+
+ PR = models.CharField(
+ _('Privileges Required'),
+ max_length=2)
+
+ UI = models.CharField(
+ _('User Interaction'),
+ max_length=2)
+
+ S = models.CharField(
+ _('Scope'),
+ max_length=2)
+
+ C = models.CharField(
+ _('Confidentiality'),
+ max_length=2)
+
+ I = models.CharField(
+ _('Integrity'),
+ max_length=2)
+
+ A = models.CharField(
+ _('Availability'),
+ max_length=2)
+
+ #Temporal metrics - X if not defined
+
+ E = models.CharField(
+ _('Exploit Code Maturity'),
+ default='X',
+ max_length=2)
+
+ RL = models.CharField(
+ _('Remediation Level'),
+ default='X',
+ max_length=2)
+
+ RC = models.CharField(
+ _('Report Confidence'),
+ default='X',
+ max_length=2)
+
+ scored_by = models.ForeignKey(
+ settings.AUTH_USER_MODEL,
+ on_delete=models.SET_NULL,
+ blank=True,
+ null=True,
+ verbose_name=_('User'),
+ )
+
+ last_modified = models.DateTimeField(
+ _('Last Modified Date'),
+ default=timezone.now)
+
+ vector = models.CharField(
+ _('CVSS Vector String'),
+ max_length=100,
+ blank=True,
+ null=True)
+
+ score = models.DecimalField(
+ _('CVSS Base Score'),
+ max_digits=3,
+ decimal_places=1,
+ blank=True,
+ null=True)
+
+ severity = models.CharField(
+ _('CVSS Severity'),
+ max_length=20,
+ blank=True,
+ null=True)
+
+
+
+class VulSSVC(models.Model):
+
+ EXPLOIT_STATE_CHOICES = ((0, 'Undecided'),
+ (1, 'POC'),
+ (2, 'Active'))
+
+
+ EXPLOIT_VALUE_CHOICES = ((0, 'Undecided'),
+ (1, 'diffuse'),
+ (2, 'concentrated'))
+
+ EXPLOIT_TECHIMPACT_CHOICES = ((0, 'Undecided'),
+ (1, 'Partial'),
+ (2, 'Total'))
+
+
+ vul = models.OneToOneField(
+ Vulnerability,
+ on_delete=models.CASCADE)
+
+ state = models.IntegerField(
+ choices=EXPLOIT_STATE_CHOICES,
+ default=0)
+
+ automatable = models.BooleanField(
+ default=False)
+
+ value_density = models.IntegerField(
+ choices=EXPLOIT_VALUE_CHOICES,
+ default = 0)
+
+ technical_impact = models.IntegerField(
+ choices=EXPLOIT_TECHIMPACT_CHOICES,
+ default = 0)
+
+ user = models.ForeignKey(
+ settings.AUTH_USER_MODEL,
+ on_delete=models.SET_NULL,
+ blank=True,
+ null=True,
+ verbose_name=_('User'),
+ )
+
+ last_edit = models.DateTimeField(
+ _('Last Modified Date'),
+ default=timezone.now)
+
+ decision = models.CharField(
+ max_length=50,
+ blank=True,
+ null=True
+ )
+
+ json_file = OldJSONField(
+ _('SSVC JSON File'),
+ blank=True,
+ null=True)
+
+ def _get_utility(self):
+ if self.automatable:
+ if self.value_density==1:
+ return "laborious"
+ elif self.value_density==2:
+ return "efficient"
+ else:
+ if self.value_density==1:
+ return "efficient"
+ elif self.value_density==2:
+ return "super effective"
+ return "undefined"
+
+ utility = property(_get_utility)
+
+ def __str__(self):
+ state_dict = dict(EXPLOIT_STATE_CHOICES)
+ return f"SSVCv2/E:{state_dict[self.state][0]}:"
+
+class VulCWE(models.Model):
+ cwe = models.CharField(
+ _('CWE'),
+ max_length=20,
+ )
+
+ vul = models.ForeignKey(
+ Vulnerability,
+ on_delete = models.CASCADE)
+
+ user = models.ForeignKey(
+ settings.AUTH_USER_MODEL,
+ blank=True,
+ null=True,
+ on_delete=models.SET_NULL)
+
+ date_added = models.DateTimeField(
+ default=timezone.now)
+
+ def __str__(self):
+ return "CWE-%d" % self.cwe
+
+
+class VulExploit(models.Model):
+
+ EXPLOIT_CHOICES = (('code', 'code'),
+ ('report', 'report'),
+ ('other', 'other')
+ )
+
+ vul = models.ForeignKey(
+ Vulnerability,
+ on_delete=models.CASCADE)
+
+ user = models.ForeignKey(
+ settings.AUTH_USER_MODEL,
+ blank=True,
+ null=True,
+ on_delete=models.SET_NULL)
+
+ date_added = models.DateTimeField(
+ default=timezone.now)
+
+ reference_date = models.DateTimeField(
+ blank=True,
+ null=True)
+
+ link = models.URLField()
+
+ reference_type = models.CharField(
+ max_length=30,
+ choices=EXPLOIT_CHOICES,
+ default='code')
+
+ notes = models.TextField(blank=True,
+ null=True)
+
+ share = models.BooleanField(
+ default=False)
+
+ publish = models.BooleanField(
+ default=False)
+
+ def __str__(self):
+ return "%s" % self.link
+
+
+class VinceSQS(models.Model):
+
+ VRF_FORM = 1
+ VENDOR_STMT = 2
+ GOV_REPORT = 3
+
+ FORM_CHOICES = (
+ (VRF_FORM, 'VRF'),
+ (VENDOR_STMT, 'Vendor Statement'),
+ (GOV_REPORT, 'Gov Report'),
+ )
+
+ date_polled = models.DateTimeField(
+ default=timezone.now)
+
+ title = models.CharField(
+ max_length=200)
+
+ date_submitted = models.DateTimeField(
+ default=timezone.now)
+
+ vrf_id = models.CharField(
+ max_length=20)
+
+ read = models.BooleanField(
+ default = False)
+
+ receipt_handle = models.CharField(
+ max_length=500,
+ blank=True,
+ null=True)
+
+ deleted_from_queue = models.BooleanField(
+ default = False)
+
+ report_type = models.IntegerField(
+ _('Report Type'),
+ choices=FORM_CHOICES,
+ default=VRF_FORM,
+ )
+ #Name of file if submitter attached file
+ attached_file = models.CharField(
+ max_length=250,
+ blank=True,
+ null=True
+ )
+
+class CVEAllocation(models.Model):
+ CVE_DISCOVERY_CHOICES = (
+ (1, _('INTERNAL')),
+ (2, _('EXTERNAL')),
+ (3, _('USER')),
+ (4, _('UNKNOWN')),
+ )
+
+ title = models.CharField(
+ _('Title'),
+ blank=True,
+ null=True,
+ max_length=200)
+
+ assigner = models.EmailField(
+ max_length=254,
+ default=settings.CONTACT_EMAIL)
+
+ cve_name = models.CharField(
+ _('CVE ID'),
+ max_length=200)
+
+ references = OldJSONField(
+ _('References'),
+ blank=True,
+ null=True)
+
+ source = models.IntegerField(
+ blank=True,
+ null=True,
+ choices=CVE_DISCOVERY_CHOICES)
+ description = models.TextField(
+ _('Description'))
+
+ work_around = OldJSONField(
+ _('Workaround'),
+ blank=True,
+ null=True)
+ resolution = models.CharField(
+ _('Resolution'),
+ max_length=500,
+ blank=True,
+ null=True)
+ credit = models.CharField(
+ _('Credit'),
+ max_length=500,
+ blank=True,
+ null=True)
+ cwe = OldJSONField(
+ _('CWE'),
+ blank=True,
+ null=True)
+ vul = models.OneToOneField(
+ Vulnerability,
+ blank=True,
+ null=True,
+ on_delete=models.SET_NULL)
+ date_added = models.DateTimeField(
+ default=timezone.now,
+ blank=True,
+ null=True)
+ user = models.ForeignKey(
+ settings.AUTH_USER_MODEL,
+ blank=True,
+ null=True,
+ on_delete=models.SET_NULL)
+
+ modified = models.DateTimeField(
+ auto_now=True
+ )
+
+ date_public = models.DateTimeField(
+ _('Date Public'),
+ blank=True, null=True)
+
+ search_vector = SearchVectorField(null=True)
+
+ class Meta:
+ indexes = [GinIndex(
+ fields=['search_vector'],
+ name= 'cve_gin',
+ )
+ ]
+ def __str__(self):
+ return self.cve_name
+
+ def complete(self):
+ if self.references and self.cwe:
+ refs = json.loads(self.references)
+ cwes = json.loads(self.cwe)
+ else:
+ return False
+ if self.cve_name and self.date_public and len(refs) and len(cwes):
+ logger.debug(len(self.references))
+ return True
+ else:
+ return False
+
+class CVEAffectedProduct(models.Model):
+ cve = models.ForeignKey(
+ CVEAllocation,
+ on_delete=models.CASCADE)
+
+ name = models.CharField(
+ _('Affected Product Name'),
+ max_length=200)
+
+ version_name = models.CharField(
+ _('Affected Version'),
+ blank=True,
+ null=True,
+ max_length=100)
+
+ version_affected = models.CharField(
+ _('Version Affected'),
+ blank=True,
+ null=True,
+ max_length=10)
+
+ version_value = models.CharField(
+ _('Affected Version Value'),
+ max_length=100)
+
+ organization = models.CharField(
+ _('Affected Organization'),
+ max_length=100,
+ blank=True,
+ null=True)
+
+
+class CVEReservation(models.Model):
+
+ cve_info = models.OneToOneField(
+ CVEAllocation,
+ on_delete=models.SET_NULL,
+ blank=True,
+ null=True)
+
+ cve_id = models.CharField(
+ max_length=50)
+
+ time_reserved = models.DateTimeField(
+ default=timezone.now)
+
+ account = models.ForeignKey(
+ "CVEServicesAccount",
+ on_delete = models.SET_NULL,
+ blank=True,
+ null=True)
+
+ user_reserved = models.ForeignKey(
+ settings.AUTH_USER_MODEL,
+ blank=True,
+ null=True,
+ on_delete = models.SET_NULL)
+
+ def __str__(self):
+ return self.cve_id
+
+ def as_dict(self):
+ if self.cve_info:
+ vul = reverse("vince:vul", args=[self.cve_info.vul.id])
+ case = self.cve_info.vul.case.vu_vuid
+ else:
+ vul = None
+ case =None
+ if self.user_reserved:
+ user = self.user_reserved.usersettings.preferred_username
+ else:
+ user = "Unknown"
+ return {
+ 'cve_id': self.cve_id,
+ 'state': 'RESERVED',
+ 'vul': vul,
+ 'case': case,
+ 'user': user,
+ 'cve_link': reverse("vince:detailedcve", args=[self.account.id, self.cve_id]),
+ 'reserved':self.time_reserved.strftime('%Y-%m-%d'),
+ }
+
+class AdminPGPEmail(models.Model):
+ pgp_key_data = models.TextField()
+
+ pgp_key_id = models.CharField(
+ max_length=200)
+
+ email = models.CharField(
+ _('Email(s)'),
+ help_text=_('Multiple emails should be separated by a comma and space'),
+ max_length=254)
+
+ name = models.CharField(
+ max_length=200, blank=True, null=True)
+
+ user_added = models.ForeignKey(
+ settings.AUTH_USER_MODEL,
+ on_delete=models.SET_NULL,
+ blank=True, null=True)
+
+ active = models.BooleanField(
+ default = True)
+
+ def __str__(self):
+ return self.pgp_key_id
+
+
+class UserSettings(models.Model):
+ """
+ A bunch of user-specific settings that we want to be able to define, such
+ as notification preferences and other things that should probably be
+ configurable.
+ We should always refer to user.usersettings.settings['setting_name'].
+ """
+
+ user = models.OneToOneField(
+ settings.AUTH_USER_MODEL,
+ on_delete=models.CASCADE,
+ related_name="usersettings")
+
+ settings_pickled = models.TextField(
+ _('Settings Dictionary'),
+ help_text=_('This is a base64-encoded representation of a pickled Python dictionary. '
+ 'Do not change this field via the admin.'),
+ blank=True,
+ null=True,
+ )
+
+ org = models.CharField(
+ max_length=250,
+ blank=True,
+ null=True)
+
+ preferred_username = models.CharField(
+ max_length=250,
+ blank=True,
+ null=True)
+
+ triage = models.BooleanField(
+ default=False)
+
+
+ case_template = models.ForeignKey(
+ CaseTemplate,
+ help_text=_('The default template to use when creating cases'),
+ blank=True,
+ null=True,
+ on_delete=models.SET_NULL
+ )
+
+ #these permissions are initially inherited from the group,
+ #but supersedes group permissions
+ contacts_read = models.BooleanField(
+ help_text=_('Does this user have permissions to read VINCE contacts'),
+ default=True)
+
+ contacts_write = models.BooleanField(
+ help_text=_('Does this user have permissions to add/edit VINCE contacts'),
+ default=True)
+
+ def _set_settings(self, data):
+ # data should always be a Python dictionary.
+ try:
+ import pickle
+ except ImportError:
+ import cPickle as pickle
+ from base64 import encodebytes as b64encode
+ self.settings_pickled = b64encode(pickle.dumps(data)).decode()
+
+ def _get_settings(self):
+ # return a python dictionary representing the pickled data.
+ try:
+ import pickle
+ except ImportError:
+ import cPickle as pickle
+
+
+ try:
+ from base64 import decodebytes as b64decode
+ return pickle.loads(b64decode(self.settings_pickled.encode('utf-8')))
+ except pickle.UnpicklingError:
+ return {}
+
+ settings = property(_get_settings, _set_settings)
+
+ def _get_vince_username(self):
+ if self.preferred_username:
+ return self.preferred_username
+ else:
+ return self.user.get_full_name()
+
+ vince_username = property(_get_vince_username)
+
+ def __str__(self):
+ return 'Preferences for %s' % self.user
+
+ class Meta:
+ verbose_name = _('User Setting')
+ verbose_name_plural = _('User Settings')
+
+
+class UserRole(models.Model):
+
+ role = models.CharField(
+ max_length=200)
+
+
+ group = models.ForeignKey(
+ Group,
+ blank=True, null=True,
+ help_text=_('Not required, but if left blank, will be a global role.'),
+ on_delete=models.CASCADE)
+
+ def __str__(self):
+ return self.role
+
+
+class UserAssignmentWeight(models.Model):
+
+ user = models.ForeignKey(
+ settings.AUTH_USER_MODEL,
+ on_delete=models.CASCADE,
+ related_name="assignment")
+
+ role = models.ForeignKey(
+ UserRole,
+ on_delete=models.CASCADE)
+
+ weight = models.IntegerField(
+ )
+
+ current_weight = models.IntegerField(
+ default = 0)
+
+ effective_weight = models.IntegerField(
+ )
+
+ def save(self, *args, **kwargs):
+
+ # set effective weight to weight if new object
+ if self.pk is None:
+ self.effective_weight = self.weight
+
+ return super(UserAssignmentWeight, self).save(*args, **kwargs)
+
+ def _get_probability(self):
+ #get all weights of this role
+ weight_sum = UserAssignmentWeight.objects.filter(role=self.role).aggregate(models.Sum('weight'))
+ return self.weight/weight_sum['weight__sum'] * 100
+
+ probability = property(_get_probability)
+
+ class Meta:
+ unique_together = (('user', 'role'),)
+
+class VinceFile(models.Model):
+ user = models.ForeignKey(
+ settings.AUTH_USER_MODEL,
+ on_delete=models.SET_NULL,
+ blank=True,
+ null=True)
+
+ case = models.ForeignKey(
+ VulnerabilityCase,
+ on_delete=models.SET_NULL,
+ verbose_name=_('Case'),
+ blank=True,
+ null=True
+ )
+
+ #if false, probably added to a post
+ vulnote = models.BooleanField(
+ default = False)
+
+ filename = models.CharField(
+ max_length=500,
+ default="filename"
+ )
+
+ post = models.ForeignKey(
+ 'VendorNotificationContent',
+ blank=True,
+ null=True,
+ on_delete = models.CASCADE,
+ help_text=_('Post file was added to.'),
+ )
+
+ to_remove = models.BooleanField(
+ default=False)
+
+ comm_id = models.IntegerField(
+ _('VinceComm VinceTrackAttachment ID'),
+ default=0)
+
+
+class CognitoUserAction(Action):
+
+ email = models.EmailField(
+ max_length=254,
+ help_text=_('The email address of the cognito user')
+ )
+
+class VinceSMIMECertificate(models.Model):
+ email = models.EmailField(
+ max_length=254,
+ help_text=_('The email that belongs to the certificate')
+ )
+
+ certificate = models.FileField(
+ _('Certificate'),
+ storage=PrivateMediaStorage(location="certs"),
+ )
+
+ def __str__(self):
+ return "%s" % self.email
+
+
+class VinceEmail(models.Model):
+
+ REGULAR = 1
+ PGP = 2
+ SMIME = 3
+
+ EMAIL_TYPE = (
+ (REGULAR, 'Regular'),
+ (PGP, 'PgP'),
+ (SMIME, 'S/MIME'),
+ )
+
+ user = models.ForeignKey(
+ settings.AUTH_USER_MODEL,
+ on_delete=models.SET_NULL,
+ help_text=('The user that is sending the email.'),
+ blank=True,
+ null=True)
+
+ notification = models.ForeignKey(
+ VendorNotificationEmail,
+ on_delete=models.CASCADE,
+ help_text=('The subject/content of the message')
+ )
+
+ to = models.CharField(
+ max_length=1000,
+ help_text=('The email address(es). Multiple emails should be separated by a comma.')
+ )
+
+ ticket = models.ForeignKey(
+ Ticket,
+ on_delete=models.SET_NULL,
+ verbose_name=_('Ticket'),
+ blank=True,
+ null=True
+ )
+
+ pgp_key_id = models.CharField(
+ max_length=500,
+ blank=True,
+ null=True)
+
+ email_type = models.IntegerField(choices=EMAIL_TYPE, default=REGULAR)
+
+ certificate = models.ForeignKey(
+ VinceSMIMECertificate,
+ on_delete = models.SET_NULL,
+ blank=True,
+ null=True
+ )
+
+ created = models.DateTimeField(default=timezone.now)
+
+
+class MFAResetTicket(models.Model):
+
+ user_id = models.IntegerField(
+ help_text=_('The vincecomm user that requested the reset'),
+ )
+
+ ticket = models.ForeignKey(
+ Ticket,
+ on_delete = models.CASCADE,
+ help_text=_('The ticket used for mfa tracking')
+ )
+
+ created = models.DateTimeField(
+ default=timezone.now)
+
+
+class CalendarEvent(models.Model):
+
+ TRIAGE = 1
+ OOF = 2
+
+ EVENT_CHOICES = (
+ (TRIAGE, _('Triage')),
+ (OOF, _('Out of Office'))
+ )
+
+ user = models.ForeignKey(
+ settings.AUTH_USER_MODEL,
+ related_name="assigned",
+ on_delete=models.CASCADE
+ )
+
+ user_added = models.ForeignKey(
+ settings.AUTH_USER_MODEL,
+ on_delete=models.SET_NULL,
+ related_name="user_added",
+ blank=True,
+ null=True)
+
+ created = models.DateTimeField(
+ default=timezone.now)
+
+ date = models.DateTimeField()
+
+ end_date = models.DateTimeField(
+ blank=True,
+ null=True)
+
+ title = models.CharField(
+ _('Event Title'),
+ max_length=200)
+
+ event_id = models.IntegerField(
+ choices=EVENT_CHOICES,
+ default=TRIAGE
+ )
+
+ def as_dict(self):
+ if self.event_id == 1:
+ class_name = "triage_event"
+ else:
+ class_name = "oof_event"
+
+ if self.end_date:
+ end = self.end_date.strftime('%Y-%m-%d')
+ else:
+ end = self.date.strftime('%Y-%m-%d')
+ return {
+ 'id': self.id,
+ 'title': self.title,
+ 'start': self.date.strftime('%Y-%m-%d'),
+ 'end': end,
+ 'allDay': True,
+ 'className': class_name
+ }
+
+
+
+#action types - this corresponds with action type in CaseAction
+# 1 - case change
+# 2 - new post
+# 3 - message ticket/reply
+# 4 - vendor status update
+# 8 - new case tasks (emails, bounces, tasks)
+# 5 - reopened cases tasks
+
+class VTDailyNotification(models.Model):
+
+ user = models.ForeignKey(
+ settings.AUTH_USER_MODEL,
+ on_delete=models.CASCADE)
+
+ action = models.ForeignKey(
+ CaseAction,
+ blank=True,
+ null=True,
+ on_delete=models.CASCADE)
+
+ followup = models.ForeignKey(
+ FollowUp,
+ blank=True,
+ null=True,
+ on_delete=models.CASCADE)
+
+ case = models.ForeignKey(
+ VulnerabilityCase,
+ on_delete=models.CASCADE,
+ )
+
+ action_type = models.IntegerField()
+
+
+class VinceReminder(models.Model):
+
+ RECURRENCE_CHOICES = (
+ (0, 'None'),
+ (1, 'Daily'),
+ (7, 'Weekly'),
+ (14, 'Biweekly'),
+ (28, 'Monthly'),
+ )
+
+ alert_date = models.DateTimeField()
+
+
+ title = models.CharField(
+ max_length=1000)
+
+ case = models.ForeignKey(
+ VulnerabilityCase,
+ on_delete=models.CASCADE,
+ blank=True,
+ null=True
+ )
+
+ ticket = models.ForeignKey(
+ Ticket,
+ on_delete=models.CASCADE,
+ blank=True,
+ null=True)
+
+ user = models.ForeignKey(
+ settings.AUTH_USER_MODEL,
+ on_delete=models.CASCADE)
+
+
+ created_by = models.ForeignKey(
+ settings.AUTH_USER_MODEL,
+ related_name=_('created_by'),
+ on_delete=models.SET_NULL,
+ blank=True,
+ null=True)
+
+ created = models.DateTimeField(
+ default=timezone.now)
+
+ create_ticket = models.BooleanField(
+ help_text=_('Create a new ticket on a future date'),
+ default = False)
+
+ frequency = models.IntegerField(
+ help_text=_('Recurrence of Reminder'),
+ choices=RECURRENCE_CHOICES,
+ default = 0)
+
+ def __str__(self):
+ return self.title
+
+
+
+class TagManager(models.Model):
+
+ TAG_TYPE_CHOICES = (
+ (1, _('Ticket')),
+ (2, _('Contact')),
+ (3, _('Case')),
+ (4, _('Vulnerability'))
+ )
+
+ tag_type = models.IntegerField(
+ _('Tag Type'),
+ choices=TAG_TYPE_CHOICES,
+ default=1,
+ )
+
+ created = models.DateTimeField(
+ auto_now_add=True
+ )
+
+ user = models.ForeignKey(
+ settings.AUTH_USER_MODEL,
+ on_delete=models.CASCADE,
+ blank=True,
+ null=True,
+ help_text=_('User that created this tag.'),
+ verbose_name=_('User'),
+ )
+
+ tag = models.CharField(
+ max_length=50,
+ help_text=_('The tag')
+ )
+
+ alert_on_add = models.BooleanField(
+ default=False,
+ help_text=_('Alert user when adding this tag'),
+ )
+
+ description = models.CharField(
+ max_length=300,
+ help_text=_('Description of tag')
+ )
+
+ #If this tag is team-specific, set it here:
+ team = models.ForeignKey(
+ Group,
+ blank=True,
+ null=True,
+ help_text=_('Team Tag, otherwise global'),
+ on_delete=models.CASCADE
+ )
+
+
+class CWEDescriptions(models.Model):
+
+ cwe = models.CharField(
+ max_length=1000,
+ )
+
+class CVEServicesAccount(models.Model):
+
+ team = models.ForeignKey(
+ Group,
+ help_text=_('VINCE Team'),
+ on_delete=models.CASCADE
+ )
+
+ org_name = models.CharField(
+ _('Organization'),
+ max_length=200,
+ help_text=_('Organization registered with CVE Services'),
+ )
+
+ api_key = models.CharField(
+ _('API Key'),
+ max_length=100,
+ help_text=_('API Key'),
+ )
+
+ email = models.EmailField(
+ _('Email'),
+ help_text=_('Email associated with the account'),
+ )
+
+ first_name = models.CharField(
+ max_length=100,
+ blank=True,
+ null=True)
+
+ last_name = models.CharField(
+ max_length=100,
+ blank=True,
+ null=True)
+
+ active = models.BooleanField(
+ default=True)
+
+
+class BounceEmailNotification(models.Model):
+
+ TRANSIENT=0
+ PERMANENT=1
+
+ BOUNCE_CHOICES = (
+ (TRANSIENT, _('Transient')),
+ (PERMANENT, _('Permanent'))
+ )
+
+ email = models.CharField(
+ max_length=320)
+
+ user_id = models.IntegerField(
+ blank=True,
+ null=True)
+
+ bounce_date = models.DateTimeField(
+ default=timezone.now)
+
+ bounce_type = models.IntegerField(
+ _('Bounce Type'),
+ choices=BOUNCE_CHOICES,
+ default=TRANSIENT
+ )
+
+ subject = models.TextField(
+ blank=True,
+ null=True)
+
+ ticket = models.ForeignKey(
+ Ticket,
+ on_delete=models.SET_NULL,
+ blank=True,
+ null=True)
+
+ action_taken = models.BooleanField(
+ default = False)
+
+
diff --git a/vince/permissions.py b/vince/permissions.py
new file mode 100644
index 0000000..6729e70
--- /dev/null
+++ b/vince/permissions.py
@@ -0,0 +1,172 @@
+#########################################################################
+# VINCE
+#
+# Copyright 2022 Carnegie Mellon University.
+#
+# NO WARRANTY. THIS CARNEGIE MELLON UNIVERSITY AND SOFTWARE ENGINEERING
+# INSTITUTE MATERIAL IS FURNISHED ON AN "AS-IS" BASIS. CARNEGIE MELLON
+# UNIVERSITY MAKES NO WARRANTIES OF ANY KIND, EITHER EXPRESSED OR IMPLIED,
+# AS TO ANY MATTER INCLUDING, BUT NOT LIMITED TO, WARRANTY OF FITNESS FOR
+# PURPOSE OR MERCHANTABILITY, EXCLUSIVITY, OR RESULTS OBTAINED FROM USE OF THE
+# MATERIAL. CARNEGIE MELLON UNIVERSITY DOES NOT MAKE ANY WARRANTY OF ANY KIND
+# WITH RESPECT TO FREEDOM FROM PATENT, TRADEMARK, OR COPYRIGHT INFRINGEMENT.
+#
+# Released under a MIT (SEI)-style license, please see license.txt or contact
+# permission@sei.cmu.edu for full terms.
+#
+# [DISTRIBUTION STATEMENT A] This material has been approved for public
+# release and unlimited distribution. Please see Copyright notice for non-US
+# Government use and distribution.
+#
+# Carnegie Mellon®, CERT® and CERT Coordination Center® are registered in the
+# U.S. Patent and Trademark Office by Carnegie Mellon University.
+#
+# This Software includes and/or makes use of Third-Party Software each subject
+# to its own license.
+#
+# DM21-1126
+########################################################################
+from .apps import VinceTrackConfig
+from vince.models import Ticket, TicketQueue, QueuePermissions, CasePermissions, CaseAssignment
+from django.conf import settings
+
+def is_in_group_vincetrack(user):
+ return user.groups.filter(name=VinceTrackConfig.name).exists()
+
+def has_queue_read_access(user, queue):
+ if user.is_superuser:
+ return True
+ return QueuePermissions.objects.filter(queue=queue, group__in=user.groups.all(), group_read=True).exists()
+
+def has_queue_write_access(user, queue):
+ if user.is_superuser:
+ return True
+ return QueuePermissions.objects.filter(queue=queue, group__in=user.groups.all(), group_write=True).exists()
+
+def has_case_read_access(user, case):
+ if user.is_superuser:
+ return True
+ if case.owner == user:
+ return True
+ #if assigned?
+ if CaseAssignment.objects.filter(case=case, assigned=user).exists():
+ return True
+ return CasePermissions.objects.filter(case=case, group__in=user.groups.all(), group_read=True).exists()
+
+def has_case_write_access(user, case):
+ if user.is_superuser:
+ return True
+ if case.owner == user:
+ return True
+ #if assigned
+ if CaseAssignment.objects.filter(case=case, assigned=user).exists():
+ return True
+
+ return CasePermissions.objects.filter(case=case, group__in=user.groups.all(), group_write=True).exists()
+
+def has_case_publish_access(user, case):
+ if user.is_superuser:
+ return True
+ return CasePermissions.objects.filter(case=case, group__in=user.groups.all(), publish=True).exists()
+
+def get_rw_queues(user):
+ user_groups = user.groups.exclude(groupsettings__contact__isnull=True)
+ queues = QueuePermissions.objects.filter(group__in=user_groups, group_read=True, group_write=True).values_list('queue', flat=True)
+ return queues
+
+def get_r_queues(user):
+ user_groups = user.groups.exclude(groupsettings__contact__isnull=True)
+ queues = QueuePermissions.objects.filter(group__in=user_groups, group_read=True).values_list('queue', flat=True)
+ return queues
+
+def get_case_case_queue(case):
+ groups = CasePermissions.objects.filter(case=case, group_write=True).exclude(group__groupsettings__contact__isnull=True).values_list('group', flat=True)
+ qperm = QueuePermissions.objects.filter(group__in=groups, group_write=True, queue__queue_type=3).first()
+ if qperm:
+ return qperm.queue
+ return TicketQueue.objects.get(slug='case')
+
+def get_user_case_queue(user):
+ user_groups = user.groups.exclude(groupsettings__contact__isnull=True)
+ perms = QueuePermissions.objects.filter(group__in=user_groups, group_read=True, group_write=True, queue__queue_type=3).first()
+ if perms:
+ return perms.queue
+ return TicketQueue.objects.get(slug='case')
+
+def get_user_gen_queue(user):
+ user_groups = user.groups.exclude(groupsettings__contact__isnull=True)
+ perms = QueuePermissions.objects.filter(group__in=user_groups, group_read=True, group_write=True, queue__queue_type=1).first()
+ if perms:
+ return perms.queue
+ return TicketQueue.objects.get(slug='gen')
+
+
+def get_vendor_queue(user):
+ user_groups = user.groups.exclude(groupsettings__contact__isnull=True)
+ #does this user have access to the Vendor queue?
+ perms = QueuePermissions.objects.filter(group__in=user_groups, group_read=True, group_write=True, queue__title="Vendor").first()
+ if perms:
+ return perms.queue
+ return get_user_gen_queue(user)
+
+
+def get_user_cr_queue(user):
+ user_groups = user.groups.exclude(groupsettings__contact__isnull=True)
+ perms = QueuePermissions.objects.filter(group__in=user_groups, group_read=True, group_write=True, queue__queue_type=2).first()
+ if perms:
+ return perms.queue
+ return TicketQueue.objects.get(slug='cr')
+
+def get_all_cr_queue(user):
+ user_groups = user.groups.exclude(groupsettings__contact__isnull=True)
+ perms = QueuePermissions.objects.filter(group__in=user_groups, group_read=True, group_write=True, queue__queue_type=2).values_list('queue', flat=True)
+ if perms:
+ return TicketQueue.objects.filter(id__in=perms)
+ return None
+
+
+def get_contact_read_perms(user):
+ user_groups = user.groups.filter(groupsettings__contacts_read=True).exclude(groupsettings__contact__isnull=True)
+ if user_groups:
+ return True
+ if user.usersettings.contacts_read:
+ # if this user has special permissions (outside the normal group perms), this will be set to True
+ return True
+ return False
+
+def get_contact_write_perms(user):
+ user_groups = user.groups.filter(groupsettings__contacts_write=True).exclude(groupsettings__contact__isnull=True)
+ if user_groups:
+ return True
+ if user.usersettings.contacts_write:
+ # if this user has special permissions (outside the normal group perms), this will be set to True
+ return True
+ return False
+
+def get_team_queues(team):
+ #team == group
+ return TicketQueue.objects.filter(team=team)
+
+def is_my_team(user, team):
+ #team == group
+ if user.is_superuser:
+ return True
+ return user.groups.filter(id=team).exists()
+
+def get_my_team(user):
+ user_groups = user.groups.exclude(groupsettings__contact__isnull=True)
+ if user_groups:
+ return user_groups[0]
+ else:
+ return None
+
+def get_team_sig(user):
+ my_team = get_my_team(user)
+ if my_team:
+ try:
+ if my_team.groupsettings.team_signature:
+ return my_team.groupsettings.team_signature
+ return settings.DEFAULT_EMAIL_SIGNATURE
+ except:
+ return settings.DEFAULT_EMAIL_SIGNATURE
+ return settings.DEFAULT_EMAIL_SIGNATURE
diff --git a/vince/serializers.py b/vince/serializers.py
new file mode 100644
index 0000000..09d86a7
--- /dev/null
+++ b/vince/serializers.py
@@ -0,0 +1,51 @@
+#########################################################################
+# VINCE
+#
+# Copyright 2022 Carnegie Mellon University.
+#
+# NO WARRANTY. THIS CARNEGIE MELLON UNIVERSITY AND SOFTWARE ENGINEERING
+# INSTITUTE MATERIAL IS FURNISHED ON AN "AS-IS" BASIS. CARNEGIE MELLON
+# UNIVERSITY MAKES NO WARRANTIES OF ANY KIND, EITHER EXPRESSED OR IMPLIED,
+# AS TO ANY MATTER INCLUDING, BUT NOT LIMITED TO, WARRANTY OF FITNESS FOR
+# PURPOSE OR MERCHANTABILITY, EXCLUSIVITY, OR RESULTS OBTAINED FROM USE OF THE
+# MATERIAL. CARNEGIE MELLON UNIVERSITY DOES NOT MAKE ANY WARRANTY OF ANY KIND
+# WITH RESPECT TO FREEDOM FROM PATENT, TRADEMARK, OR COPYRIGHT INFRINGEMENT.
+#
+# Released under a MIT (SEI)-style license, please see license.txt or contact
+# permission@sei.cmu.edu for full terms.
+#
+# [DISTRIBUTION STATEMENT A] This material has been approved for public
+# release and unlimited distribution. Please see Copyright notice for non-US
+# Government use and distribution.
+#
+# Carnegie Mellon®, CERT® and CERT Coordination Center® are registered in the
+# U.S. Patent and Trademark Office by Carnegie Mellon University.
+#
+# This Software includes and/or makes use of Third-Party Software each subject
+# to its own license.
+#
+# DM21-1126
+########################################################################
+from django.contrib.auth.models import User
+from rest_framework import serializers
+from vince.models import CaseRequest, VulnerabilityCase, Vulnerability, VulnerableVendor
+
+class CaseRequestSerializer(serializers.ModelSerializer):
+ first_contact = serializers.DateTimeField(input_formats=["%Y-%m-%d", 'iso-8601'], allow_null=True, required=False)
+ class Meta:
+ model = CaseRequest
+ exclude = ['vc_id']
+
+class CaseSerializer(serializers.ModelSerializer):
+ class Meta:
+ model = VulnerabilityCase
+ fields = ["created", "modified", "vuid", "status", "product_name", "summary", "title", "due_date", "lotus_notes", "publicdate"]
+
+class VulnerabilitySerializer(serializers.ModelSerializer):
+ class Meta:
+ model = Vulnerability
+ fields = ["cve", "description", "case", "case_increment"]
+
+
+
+
diff --git a/vince/settings.py b/vince/settings.py
new file mode 100644
index 0000000..82c4261
--- /dev/null
+++ b/vince/settings.py
@@ -0,0 +1,89 @@
+#########################################################################
+# VINCE
+#
+# Copyright 2022 Carnegie Mellon University.
+#
+# NO WARRANTY. THIS CARNEGIE MELLON UNIVERSITY AND SOFTWARE ENGINEERING
+# INSTITUTE MATERIAL IS FURNISHED ON AN "AS-IS" BASIS. CARNEGIE MELLON
+# UNIVERSITY MAKES NO WARRANTIES OF ANY KIND, EITHER EXPRESSED OR IMPLIED,
+# AS TO ANY MATTER INCLUDING, BUT NOT LIMITED TO, WARRANTY OF FITNESS FOR
+# PURPOSE OR MERCHANTABILITY, EXCLUSIVITY, OR RESULTS OBTAINED FROM USE OF THE
+# MATERIAL. CARNEGIE MELLON UNIVERSITY DOES NOT MAKE ANY WARRANTY OF ANY KIND
+# WITH RESPECT TO FREEDOM FROM PATENT, TRADEMARK, OR COPYRIGHT INFRINGEMENT.
+#
+# Released under a MIT (SEI)-style license, please see license.txt or contact
+# permission@sei.cmu.edu for full terms.
+#
+# [DISTRIBUTION STATEMENT A] This material has been approved for public
+# release and unlimited distribution. Please see Copyright notice for non-US
+# Government use and distribution.
+#
+# Carnegie Mellon®, CERT® and CERT Coordination Center® are registered in the
+# U.S. Patent and Trademark Office by Carnegie Mellon University.
+#
+# This Software includes and/or makes use of Third-Party Software each subject
+# to its own license.
+#
+# DM21-1126
+########################################################################
+"""
+Default settings for django-helpdesk.
+"""
+
+from django.conf import settings
+from django.core.exceptions import ImproperlyConfigured
+
+DEFAULT_USER_SETTINGS = {
+ 'use_email_as_submitter': True,
+ 'email_on_ticket_assign': True,
+ 'email_on_ticket_change': True,
+ 'email_case_changes': 1,
+ 'email_new_posts': 1,
+ 'email_new_messages': 1,
+ 'email_new_status': 1,
+ 'email_tasks': 1,
+ 'login_view_ticketlist': True,
+ 'tickets_per_page': 25,
+ 'send_reminders': True,
+ 'reminder_days': 2,
+ 'email_preference': 1,
+ 'triage': False,
+ 'reminder_tickets': True,
+ 'reminder_publication': True,
+ 'reminder_vendor_status': True,
+ 'reminder_vendor_views': True,
+ 'reminder_cases': True,
+
+}
+
+# triage assign setting
+# the default is to create tickets unassigned by default
+# By changing this setting to True, the user assigned as Triage
+# will be assigned to incoming tickets
+VINCE_ASSIGN_TRIAGE = getattr(settings, 'VINCE_ASSIGN_TRIAGE', False)
+
+#If set to True, VINCE will only create a ticket for PERMANENT bounces.
+#Transient bounces will be recorded and can be viewed in the Bounce Manager, but a ticket will not be created.
+VINCE_IGNORE_TRANSIENT_BOUNCES = getattr(settings, 'VINCE_IGNORE_TRANSIENT_BOUNCES', False)
+
+##########################################
+# generic options - visible on all pages #
+##########################################
+
+# allow the subject to have a configurable template.
+VINCE_EMAIL_SUBJECT_TEMPLATE = getattr(
+ settings, 'VINCE_EMAIL_SUBJECT_TEMPLATE',
+ "%(subject)s {{ ticket.ticket }} {{ ticket.title|safe }}")
+# since django-helpdesk may not work correctly without the ticket ID
+# in the subject, let's do a check for it quick:
+if VINCE_EMAIL_SUBJECT_TEMPLATE.find("ticket.ticket") < 0:
+ raise ImproperlyConfigured
+
+# default fallback locale when queue locale not found
+VINCE_EMAIL_FALLBACK_LOCALE = getattr(settings, 'VINCE_EMAIL_FALLBACK_LOCALE', 'en')
+
+VULNOTE_TEMPLATE = getattr(settings, 'VULNOTE_TEMPLATE',
+ "### Overview\r\n\r\n### Description\r\n\r\n"\
+ "### Impact\r\nThe complete impact of this vulnerability is not yet known.\r\n\r\n### Solution"\
+ "\r\nThe CERT/CC is currently unaware of a practical solution to this problem."\
+ "\r\n\r\n### Acknowledgements\r\nThanks to the reporter who wishes to remain anonymous.\r\n\r\n")
diff --git a/vince/signals.py b/vince/signals.py
new file mode 100644
index 0000000..f16980e
--- /dev/null
+++ b/vince/signals.py
@@ -0,0 +1,149 @@
+#########################################################################
+# VINCE
+#
+# Copyright 2022 Carnegie Mellon University.
+#
+# NO WARRANTY. THIS CARNEGIE MELLON UNIVERSITY AND SOFTWARE ENGINEERING
+# INSTITUTE MATERIAL IS FURNISHED ON AN "AS-IS" BASIS. CARNEGIE MELLON
+# UNIVERSITY MAKES NO WARRANTIES OF ANY KIND, EITHER EXPRESSED OR IMPLIED,
+# AS TO ANY MATTER INCLUDING, BUT NOT LIMITED TO, WARRANTY OF FITNESS FOR
+# PURPOSE OR MERCHANTABILITY, EXCLUSIVITY, OR RESULTS OBTAINED FROM USE OF THE
+# MATERIAL. CARNEGIE MELLON UNIVERSITY DOES NOT MAKE ANY WARRANTY OF ANY KIND
+# WITH RESPECT TO FREEDOM FROM PATENT, TRADEMARK, OR COPYRIGHT INFRINGEMENT.
+#
+# Released under a MIT (SEI)-style license, please see license.txt or contact
+# permission@sei.cmu.edu for full terms.
+#
+# [DISTRIBUTION STATEMENT A] This material has been approved for public
+# release and unlimited distribution. Please see Copyright notice for non-US
+# Government use and distribution.
+#
+# Carnegie Mellon®, CERT® and CERT Coordination Center® are registered in the
+# U.S. Patent and Trademark Office by Carnegie Mellon University.
+#
+# This Software includes and/or makes use of Third-Party Software each subject
+# to its own license.
+#
+# DM21-1126
+########################################################################
+import logging
+
+from django.db.models.signals import post_save, post_delete
+from django.dispatch import receiver
+
+from vince.lib import update_vinny_case, add_vul_vinny_case, add_coordinator_case, rm_vul_vinny_case, update_vc_vul_status, update_case_assignment, delete_case_assignment, vince_track_async_email, update_vinny_exploit, rm_vinny_exploit, update_vinny_cvss, update_vinny_cr, update_vinny_team_settings
+from vince.models import VulnerabilityCase, Vulnerability, Contact, CaseArtifact, CaseAction, CaseMessageAction, UserSettings, FollowUp, VendorStatus, CaseAssignment, CaseRequest, VendorNotification, VulExploit, VulCVSS, GroupSettings
+from vinny.models import VinceCommContact, VinceProfile
+from vince.mailer import send_updatecase_mail, send_updateticket_mail
+from django.conf import settings
+
+logger = logging.getLogger(__name__)
+logger.setLevel(logging.DEBUG)
+
+@receiver(post_save, sender=VulnerabilityCase)
+def update_case(sender, instance, created, **kwargs):
+ if not(instance.lotus_notes):
+ # don't move old cases into vincecomm
+ update_vinny_case(instance)
+ #add coordinator to case
+ if instance.team_owner:
+ add_coordinator_case(instance, instance.team_owner.groupsettings.contact)
+
+ elif instance.owner:
+ coord_group = instance.owner.groups.exclude(groupsettings__contact__isnull=True).first()
+ if coord_group:
+ logger.debug(coord_group.groupsettings.contact)
+ add_coordinator_case(instance, coord_group.groupsettings.contact)
+
+@receiver(post_save, sender=VendorStatus)
+def update_vinny_vendorvulstatus(sender, instance, created, **kwargs):
+ update_vc_vul_status(instance)
+
+@receiver(post_save, sender=CaseRequest)
+def update_case_request(sender, instance, created, **kwargs):
+ if instance.case:
+ update_case(sender, instance.case, created, **kwargs)
+ else:
+ update_vinny_cr(instance)
+
+@receiver(post_save, sender=Vulnerability)
+def update_vinny_vul(sender, instance, created, **kwargs):
+ add_vul_vinny_case(instance.case, instance)
+
+@receiver(post_delete, sender=Vulnerability)
+def remove_vinny_vul(sender, instance, **kwargs):
+ rm_vul_vinny_case(instance.case, instance)
+
+@receiver(post_save, sender=VulCVSS)
+def update_vinny_vul_cvss(sender, instance, created, **kwargs):
+ update_vinny_cvss(instance)
+
+@receiver(post_delete, sender=VulExploit)
+def rm_vincecomm_exploit(sender, instance, **kwargs):
+ rm_vinny_exploit(instance)
+
+@receiver(post_save, sender=VulExploit)
+def update_vincecomm_exploit(sender, instance, **kwargs):
+ update_vinny_exploit(instance)
+
+@receiver(post_save, sender=CaseAssignment)
+def update_casecoordinator(sender, instance, created, **kwargs):
+ update_case_assignment(instance)
+
+@receiver(post_save, sender=VendorNotification)
+def send_vendor_notification(sender, instance, created, **kwargs):
+ if created:
+ vince_track_async_email(instance)
+
+@receiver(post_delete, sender=CaseAssignment)
+def remove_casecoordinator(sender, instance, **kwargs):
+ delete_case_assignment(instance)
+
+@receiver(post_save, sender=Contact)
+def update_contact(sender, instance, created, **kwargs):
+ obj, created = VinceCommContact.objects.update_or_create(
+ vendor_id=instance.id,
+ defaults={'vendor_name': instance.vendor_name,
+ 'vendor_type': instance.vendor_type,
+ 'countrycode': instance.countrycode,
+ 'active': instance.active,
+ 'location': instance.location,
+ 'uuid': instance.uuid})
+ if not (created):
+ obj.version = obj.version + 1
+ obj.save()
+
+@receiver(post_save, sender=CaseAction)
+def send_action_mail(sender, instance, created, **kwargs):
+ send_updatecase_mail(instance)
+
+@receiver(post_save, sender=FollowUp)
+def send_tix_action_mail(sender, instance, created, **kwargs):
+ send_updateticket_mail(instance)
+
+@receiver(post_save, sender=GroupSettings)
+def update_team_settings(sender, instance, created, **kwargs):
+ update_vinny_team_settings(instance)
+
+@receiver(post_save, sender=settings.AUTH_USER_MODEL)
+def create_usersettings(sender, instance, created, using, **kwargs):
+ """
+ Helper function to create UserSettings instances as
+ required, eg when we first create the UserSettings database
+ table via 'syncdb' or when we save a new user.
+ If we end up with users with no UserSettings, then we get horrible
+ 'DoesNotExist: UserSettings matching query does not exist.' errors.
+ """
+ if using=='default' and created:
+ from vince.settings import DEFAULT_USER_SETTINGS
+ muser = UserSettings.objects.create(user=instance, settings=DEFAULT_USER_SETTINGS)
+ muser.save()
+ if using=='vincecomm' and created:
+ from vinny.settings import DEFAULT_USER_SETTINGS
+ muser = VinceProfile.objects.create(user=instance, settings=DEFAULT_USER_SETTINGS)
+ muser.save()
+ logger.debug("Successfully added USER %s to VINCE" % instance.email)
+
+
+
+
diff --git a/vince/static/vince/css/admin.css b/vince/static/vince/css/admin.css
new file mode 100644
index 0000000..8536e04
--- /dev/null
+++ b/vince/static/vince/css/admin.css
@@ -0,0 +1,87 @@
+body{
+ background-color: #fff;
+ color: rgba(0, 0, 0, 0.65);
+ font-family: "Open Sans", "Helvetica Neue", Helvetica, Arial, sans-serif;
+ font-size: 1rem;
+ font-weight: 400;
+ line-height: 1.5;
+ -webkit-font-smoothing: subpixel-antialiased;
+ /* display: flex;*/
+/* flex-direction: column;*/
+}
+
+
+h1, h2, h3, h4, h5, h6{
+ font-family: "Open Sans", "Helvetica", sans-serif;
+ font-weight: 300;
+}
+
+
+#header {
+ background: #b00;
+ color: #fefefe;
+}
+
+
+#branding h1 {
+ color: #FFF;
+ font-weight: 500;
+}
+
+#branding h1 a:link, #branding h1 a:visited {
+ color: #FFF;
+}
+
+#branding h1 a:hover {
+ color: #f4f4f4;
+}
+
+.button, input[type=submit], input[type=button] {
+ background: #b00;
+}
+
+.button.default, input[type=submit].default {
+ background: #b00;
+}
+
+.selector-chosen h2 {
+ background: #b00 !important;
+}
+
+.module caption, .module h2 {
+ background: #b00;
+}
+
+a:link, a:visited {
+ color: rgba(0, 0, 0, 0.65);
+}
+
+a:hover {
+ opacity: 0.5;
+}
+
+div.breadcrumbs {
+ background: rgba(0, 0, 0, 0.65);
+}
+
+.object-tools a.addlink {
+ border: 2px solid #b00 !important;
+ color: #b00 !important;
+ padding: 1.0rem !important;
+ font-weight:400 !important;
+ text-align: center;
+ line-height: 1.0 !important;
+ background-color: #fff !important;
+ border-radius: 5px;
+ background-image: none;
+
+
+}
+
+.object-tools a.addlink:hover {
+ background-color: #b00 !important;
+ border: 2px solid #fff !important;
+ color: #fff !important;
+ text-decoration: none !important;
+
+}
diff --git a/vince/static/vince/css/basic.css b/vince/static/vince/css/basic.css
new file mode 100644
index 0000000..b72d7de
--- /dev/null
+++ b/vince/static/vince/css/basic.css
@@ -0,0 +1,39 @@
+/*
+ * The MIT License
+ * Copyright (c) 2012 Matias Meno
LOADING
"); + $("#id_page").val("1"); + var url = "/vince/activity/results/"; + + if(priorSearchReq) { + priorSearchReq.abort(); + } + + priorSearchReq = $.ajax({ + url: url, + type: "POST", + data: $('#searchform').serialize(), + success: function(data) { + $("#searchresults").html(data); + } + }); +} + + + +$(document).ready(function() { + + $(document).on("click", '.search_page', function(event) { + var page = $(this).attr('next'); + nextPage(page); + }); + + $(document).on("click", '.search_notes', function(event) { + var page = $(this).attr('next'); + nextActivity(page); + }); + + var input = document.getElementById("id_wordSearch"); + if (input) { + input.addEventListener("keydown", function(event) { + if (event.keyCode == 13) { + searchActivity(event); + } + }); + } + + searchActivity(); + + var form = document.getElementById('searchform'); + if (form) { + if (form.attachEvent) { + form.attachEvent("submit", searchActivity); + } else { + form.addEventListener("submit", searchActivity); + } + } + + $("#id_user").change(function() { + searchActivity(); + }); + + $("#filter_by_dropdown_select_all_2").click(function(){ + $("#id_user input[type=checkbox]").prop('checked', $(this).prop('checked')); + searchActivity(); + }); + + + var dateFormat = "yy-mm-dd", + from = $( "#id_datestart" ) + .datepicker({ + defaultDate: "+1w", + changeMonth: true, + changeYear: true, + dateFormat: dateFormat, + numberOfMonths: 1, + maxDate: "+0D" + }) + .on( "change", function() { + /*to.datepicker( "option", "minDate", getDate( this ) );*/ + searchActivity(); + }), + to = $( "#id_dateend" ).datepicker({ + defaultDate: "+1w", + changeMonth: true, + changeYear: true, + dateFormat: dateFormat, + numberOfMonths: 1, + maxDate: "+0D" + + }) + .on( "change", function() { + from.datepicker( "option", "maxDate", getDate( this ) ); + searchActivity(); + }); + + function getDate( element ) { + var date; + try { + date = $.datepicker.parseDate( dateFormat, element.value ); + } catch( error ) { + date = null; + } + + return date; + } +}); + diff --git a/vince/static/vince/js/addvuls.js b/vince/static/vince/js/addvuls.js new file mode 100644 index 0000000..51e77d3 --- /dev/null +++ b/vince/static/vince/js/addvuls.js @@ -0,0 +1,457 @@ +/*######################################################################### +# VINCE +# +# Copyright 2022 Carnegie Mellon University. +# +# NO WARRANTY. THIS CARNEGIE MELLON UNIVERSITY AND SOFTWARE ENGINEERING +# INSTITUTE MATERIAL IS FURNISHED ON AN "AS-IS" BASIS. CARNEGIE MELLON +# UNIVERSITY MAKES NO WARRANTIES OF ANY KIND, EITHER EXPRESSED OR IMPLIED, +# AS TO ANY MATTER INCLUDING, BUT NOT LIMITED TO, WARRANTY OF FITNESS FOR +# PURPOSE OR MERCHANTABILITY, EXCLUSIVITY, OR RESULTS OBTAINED FROM USE OF THE +# MATERIAL. CARNEGIE MELLON UNIVERSITY DOES NOT MAKE ANY WARRANTY OF ANY KIND +# WITH RESPECT TO FREEDOM FROM PATENT, TRADEMARK, OR COPYRIGHT INFRINGEMENT. +# +# Released under a MIT (SEI)-style license, please see license.txt or contact +# permission@sei.cmu.edu for full terms. +# +# [DISTRIBUTION STATEMENT A] This material has been approved for public +# release and unlimited distribution. Please see Copyright notice for non-US +# Government use and distribution. +# +# Carnegie Mellon®, CERT® and CERT Coordination Center® are registered in the +# U.S. Patent and Trademark Office by Carnegie Mellon University. +# +# This Software includes and/or makes use of Third-Party Software each subject +# to its own license. +# +# DM21-1126 +######################################################################## +*/ + + +function permissionDenied(modal) { + + modal.html("Error: You are not permitted to perform this action
All Base Metrics are required to calculate score.
");
+ $("#errorfield").show();
+ $('input').focus();
+ return false;
+ }
+
+
+}
+
+function add_tag(taggle, tag, modal){
+ var csrftoken = getCookie('csrftoken');
+ var url = $("#vul_taggs").attr("action");
+ $.post(url,
+ {'csrfmiddlewaretoken': csrftoken, 'tag': tag, 'add_tag': true}, function(data) {
+ console.log("success adding");
+ })
+ .fail(function (data) {
+ console.log(data);
+ if (data['responseJSON']['error']) {
+ if (modal) {
+ modal.html("Error: "+data['responseJSON']['error']+"/p>