From e99c578010bd8a1c4909716ac30ebdc77379da99 Mon Sep 17 00:00:00 2001
From: roywu <roywu@webank.com>
Date: Thu, 19 Nov 2020 15:19:17 +0800
Subject: [PATCH] #1 update default model

---
 .gitignore                                    |   3 +-
 init.sql                                      | 257 ++++++++++++++----
 ui/package.json                               |   4 +-
 ui/src/locale/i18n/en-US.json                 |   7 +-
 ui/src/locale/i18n/zh-CN.json                 |   7 +-
 ui/src/pages/boxes.vue                        |  24 +-
 ui/src/pages/match-params.vue                 |  22 +-
 ui/src/pages/plugin-params.vue                |  22 +-
 ui/src/pages/policy.vue                       |  22 +-
 ui/src/pages/rule.vue                         |  28 +-
 ui/src/pages/subjects.vue                     |  22 +-
 ui/src/pages/targets.vue                      |  20 ++
 wecube_plugins_itsdangerous/db/models_box.py  |  74 +++--
 .../db/models_manage.py                       |  64 ++++-
 wecube_plugins_itsdangerous/db/resource.py    | 104 +++++--
 15 files changed, 575 insertions(+), 105 deletions(-)

diff --git a/.gitignore b/.gitignore
index af2be7a..85510fb 100644
--- a/.gitignore
+++ b/.gitignore
@@ -22,4 +22,5 @@ tmptests/reader.py
 build/lib/*
 build/bdist.win-amd64/*
 build/bdist.linux-x86_64/*
-ui/node_modules
\ No newline at end of file
+ui/node_modules
+.eggs/*
diff --git a/init.sql b/init.sql
index 1aa7265..99154c2 100644
--- a/init.sql
+++ b/init.sql
@@ -1,84 +1,117 @@
-SET FOREIGN_KEY_CHECKS = 0;
---
--- Table structure for table `policy`
---
-DROP TABLE IF EXISTS `policy`;
-CREATE TABLE `policy` (
-  `id` int(11) unsigned NOT NULL AUTO_INCREMENT,
-  `name` varchar(36) NOT NULL,
-  `description` varchar(63) DEFAULT '',
-  `enabled` tinyint(4) NOT NULL,
-  PRIMARY KEY (`id`)
-) ENGINE=InnoDB DEFAULT CHARSET=utf8;
-
-
---
--- Table structure for table `subject`
---
-DROP TABLE IF EXISTS `subject`;
-CREATE TABLE `subject` (
-  `id` int(11) unsigned NOT NULL AUTO_INCREMENT,
-  `name` varchar(36) NOT NULL,
-  `description` varchar(63) DEFAULT '',
-  `enabled` tinyint(4) NOT NULL,
-  PRIMARY KEY (`id`)
-) ENGINE=InnoDB DEFAULT CHARSET=utf8;
-
+/*!40101 SET @OLD_CHARACTER_SET_CLIENT=@@CHARACTER_SET_CLIENT */;
+/*!40101 SET @OLD_CHARACTER_SET_RESULTS=@@CHARACTER_SET_RESULTS */;
+/*!40101 SET @OLD_COLLATION_CONNECTION=@@COLLATION_CONNECTION */;
+/*!40101 SET NAMES utf8 */;
+/*!40103 SET @OLD_TIME_ZONE=@@TIME_ZONE */;
+/*!40103 SET TIME_ZONE='+00:00' */;
+/*!40014 SET @OLD_UNIQUE_CHECKS=@@UNIQUE_CHECKS, UNIQUE_CHECKS=0 */;
+/*!40014 SET @OLD_FOREIGN_KEY_CHECKS=@@FOREIGN_KEY_CHECKS, FOREIGN_KEY_CHECKS=0 */;
+/*!40101 SET @OLD_SQL_MODE=@@SQL_MODE, SQL_MODE='NO_AUTO_VALUE_ON_ZERO' */;
+/*!40111 SET @OLD_SQL_NOTES=@@SQL_NOTES, SQL_NOTES=0 */;
 
 --
 -- Table structure for table `box`
 --
+
 DROP TABLE IF EXISTS `box`;
+/*!40101 SET @saved_cs_client     = @@character_set_client */;
+/*!40101 SET character_set_client = utf8 */;
 CREATE TABLE `box` (
   `id` int(11) unsigned NOT NULL AUTO_INCREMENT,
   `name` varchar(36) NOT NULL,
   `description` varchar(63) DEFAULT '',
   `policy_id` int(11) unsigned NOT NULL,
   `subject_id` int(11) unsigned NOT NULL,
+  `created_by` varchar(36) DEFAULT NULL,
+  `created_time` datetime DEFAULT NULL,
+  `updated_by` varchar(36) DEFAULT NULL,
+  `updated_time` datetime DEFAULT NULL,
   PRIMARY KEY (`id`),
   KEY `fkey_box_policy_id` (`policy_id`),
   KEY `fkey_box_subject_id` (`subject_id`),
   CONSTRAINT `fkey_box_policy_id` FOREIGN KEY (`policy_id`) REFERENCES `policy` (`id`) ON DELETE NO ACTION ON UPDATE NO ACTION,
   CONSTRAINT `fkey_box_subject_id` FOREIGN KEY (`subject_id`) REFERENCES `subject` (`id`) ON DELETE NO ACTION ON UPDATE NO ACTION
-) ENGINE=InnoDB DEFAULT CHARSET=utf8;
+) ENGINE=InnoDB AUTO_INCREMENT=2 DEFAULT CHARSET=utf8;
+/*!40101 SET character_set_client = @saved_cs_client */;
 
+--
+-- Dumping data for table `box`
+--
+
+LOCK TABLES `box` WRITE;
+/*!40000 ALTER TABLE `box` DISABLE KEYS */;
+INSERT INTO `box` VALUES (1,'通用测试','一些基本的shell&sql危险命令规则集合，针对所有对象',1,1,NULL,NULL,NULL,NULL);
+/*!40000 ALTER TABLE `box` ENABLE KEYS */;
+UNLOCK TABLES;
 
 --
 -- Table structure for table `match_param`
 --
+
 DROP TABLE IF EXISTS `match_param`;
+/*!40101 SET @saved_cs_client     = @@character_set_client */;
+/*!40101 SET character_set_client = utf8 */;
 CREATE TABLE `match_param` (
   `id` int(11) unsigned NOT NULL AUTO_INCREMENT,
   `name` varchar(36) NOT NULL,
   `description` varchar(63) DEFAULT '',
   `params` varchar(512) NOT NULL,
   `type` varchar(36) NOT NULL,
+  `created_by` varchar(36) DEFAULT NULL,
+  `created_time` datetime DEFAULT NULL,
+  `updated_by` varchar(36) DEFAULT NULL,
+  `updated_time` datetime DEFAULT NULL,
   PRIMARY KEY (`id`)
-) ENGINE=InnoDB DEFAULT CHARSET=utf8;
+) ENGINE=InnoDB AUTO_INCREMENT=8 DEFAULT CHARSET=utf8;
+/*!40101 SET character_set_client = @saved_cs_client */;
 
+--
+-- Dumping data for table `match_param`
+--
+
+LOCK TABLES `match_param` WRITE;
+/*!40000 ALTER TABLE `match_param` DISABLE KEYS */;
+INSERT INTO `match_param` VALUES (1,'iregex','针对大小写不敏感的场景','{\"flag\": \"I\"}','regex',NULL,NULL,NULL,NULL),(2,'rm','文件删除','{\"name\":\"rm\", \"args\": [{\"name\": \"force\", \"shortcut\": \"-f,--force\", \"action\": \"store_true\"}, {\"name\": \"recursive\", \"shortcut\": \"-r,-R,--recursive\", \"action\": \"store_true\"}, {\"name\": \"help\", \"shortcut\": \"--help\", \"action\": \"store_true\"}, {\"name\": \"version\", \"shortcut\": \"--version\", \"action\": \"store_true\"}, {\"name\": \"path\", \"repeatable\": \"*\"}]}','cli',NULL,NULL,NULL,NULL),(3,'kill','进程关闭','{\"name\":\"kill\", \"args\": [{\"name\": \"name\", \"shortcut\": \"-s\"}, {\"name\": \"number\", \"shortcut\": \"-n\"}, {\"name\": \"help\", \"shortcut\": \"--help\", \"action\": \"store_true\"}, {\"name\": \"s_kill\", \"shortcut\": \"-9,-15\", \"action\": \"store_true\"}, {\"name\": \"pid\", \"repeatable\": \"*\"}]}','cli',NULL,NULL,NULL,NULL),(4,'reboot','重启机器','{\"name\":\"reboot\", \"args\": [{\"name\": \"help\", \"shortcut\": \"--help\", \"action\": \"store_true\"}]}','cli',NULL,NULL,NULL,NULL),(5,'netcat','reverse shell(nc)','{\"name\":\"nc\", \"args\": []}','cli',NULL,NULL,NULL,NULL),(6,'socat','reverse shell(socat)','{\"name\":\"socat\", \"args\": []}','cli',NULL,NULL,NULL,NULL),(7,'bash','reverse shel','{\"name\":\"bash\", \"opt_strip_path\": true, \"args\": [{\"name\": \"interact\", \"shortcut\": \"-i\", \"action\": \"store_true\"},{\"name\": \"command\", \"repeatable\": \"*\"}]}','cli',NULL,NULL,NULL,NULL);
+/*!40000 ALTER TABLE `match_param` ENABLE KEYS */;
+UNLOCK TABLES;
 
 --
--- Table structure for table `rule`
+-- Table structure for table `policy`
 --
-DROP TABLE IF EXISTS `rule`;
-CREATE TABLE `rule` (
+
+DROP TABLE IF EXISTS `policy`;
+/*!40101 SET @saved_cs_client     = @@character_set_client */;
+/*!40101 SET character_set_client = utf8 */;
+CREATE TABLE `policy` (
   `id` int(11) unsigned NOT NULL AUTO_INCREMENT,
   `name` varchar(36) NOT NULL,
   `description` varchar(63) DEFAULT '',
-  `level` int(11) unsigned NOT NULL,
-  `effect_on` varchar(36) NOT NULL,
-  `match_type` varchar(36) NOT NULL,
-  `match_value` varchar(512) NOT NULL,
-  `match_param_id` int(11) unsigned DEFAULT NULL,
   `enabled` tinyint(4) NOT NULL,
+  `created_by` varchar(36) DEFAULT NULL,
+  `created_time` datetime DEFAULT NULL,
+  `updated_by` varchar(36) DEFAULT NULL,
+  `updated_time` datetime DEFAULT NULL,
   PRIMARY KEY (`id`)
-) ENGINE=InnoDB DEFAULT CHARSET=utf8;
+) ENGINE=InnoDB AUTO_INCREMENT=2 DEFAULT CHARSET=utf8;
+/*!40101 SET character_set_client = @saved_cs_client */;
+
+--
+-- Dumping data for table `policy`
+--
 
+LOCK TABLES `policy` WRITE;
+/*!40000 ALTER TABLE `policy` DISABLE KEYS */;
+INSERT INTO `policy` VALUES (1,'基础策略','基础策略',1,NULL,NULL,'admin','2020-11-19 11:42:23');
+/*!40000 ALTER TABLE `policy` ENABLE KEYS */;
+UNLOCK TABLES;
 
 --
 -- Table structure for table `policy_rule`
 --
+
 DROP TABLE IF EXISTS `policy_rule`;
+/*!40101 SET @saved_cs_client     = @@character_set_client */;
+/*!40101 SET character_set_client = utf8 */;
 CREATE TABLE `policy_rule` (
   `id` int(11) unsigned NOT NULL AUTO_INCREMENT,
   `policy_id` int(11) unsigned NOT NULL,
@@ -88,40 +121,121 @@ CREATE TABLE `policy_rule` (
   KEY `fkey_policy_rule_rule_id` (`rule_id`),
   CONSTRAINT `fkey_policy_rule_policy_id` FOREIGN KEY (`policy_id`) REFERENCES `policy` (`id`) ON DELETE NO ACTION ON UPDATE NO ACTION,
   CONSTRAINT `fkey_policy_rule_rule_id` FOREIGN KEY (`rule_id`) REFERENCES `rule` (`id`) ON DELETE NO ACTION ON UPDATE NO ACTION
-) ENGINE=InnoDB DEFAULT CHARSET=utf8;
+) ENGINE=InnoDB AUTO_INCREMENT=11 DEFAULT CHARSET=utf8;
+/*!40101 SET character_set_client = @saved_cs_client */;
+
+--
+-- Dumping data for table `policy_rule`
+--
+
+LOCK TABLES `policy_rule` WRITE;
+/*!40000 ALTER TABLE `policy_rule` DISABLE KEYS */;
+INSERT INTO `policy_rule` VALUES (1,1,18),(2,1,17),(3,1,16),(4,1,11),(5,1,8),(6,1,7),(7,1,6),(8,1,5),(9,1,4),(10,1,1);
+/*!40000 ALTER TABLE `policy_rule` ENABLE KEYS */;
+UNLOCK TABLES;
+
+--
+-- Table structure for table `rule`
+--
+
+DROP TABLE IF EXISTS `rule`;
+/*!40101 SET @saved_cs_client     = @@character_set_client */;
+/*!40101 SET character_set_client = utf8 */;
+CREATE TABLE `rule` (
+  `id` int(11) unsigned NOT NULL AUTO_INCREMENT,
+  `name` varchar(36) NOT NULL,
+  `description` varchar(63) DEFAULT '',
+  `level` int(11) unsigned NOT NULL,
+  `effect_on` varchar(36) NOT NULL,
+  `match_type` varchar(36) NOT NULL,
+  `match_value` varchar(512) NOT NULL,
+  `match_param_id` int(11) unsigned DEFAULT NULL,
+  `enabled` tinyint(4) NOT NULL,
+  `created_by` varchar(36) DEFAULT NULL,
+  `created_time` datetime DEFAULT NULL,
+  `updated_by` varchar(36) DEFAULT NULL,
+  `updated_time` datetime DEFAULT NULL,
+  PRIMARY KEY (`id`)
+) ENGINE=InnoDB AUTO_INCREMENT=19 DEFAULT CHARSET=utf8;
+/*!40101 SET character_set_client = @saved_cs_client */;
+
+--
+-- Dumping data for table `rule`
+--
+
+LOCK TABLES `rule` WRITE;
+/*!40000 ALTER TABLE `rule` DISABLE KEYS */;
+INSERT INTO `rule` VALUES (1,'删除*批量文件','全量文件删除',1,'script','cli','[{\"name\": \"force\", \"operator\": \"set\"}, {\"name\": \"recursive\", \"operator\": \"set\"}, {\"name\": \"help\", \"operator\": \"notset\"}, {\"name\": \"version\", \"operator\": \"notset\"}, {\"name\": \"path\", \"operator\": \"ilike\", \"value\": \"*\"}]',2,1,NULL,NULL,NULL,NULL),(2,'系统重启','系统重启',1,'script','cli','[{\"name\": \"help\", \"operator\": \"notset\"}]',4,1,NULL,NULL,NULL,NULL),(3,'修改系统参数','修改系统参数',3,'script','text','sysctl',NULL,0,NULL,NULL,NULL,NULL),(4,'删除数据表','drop table',0,'script','sql','^drop\\s+table\\s+.*$',1,1,NULL,NULL,NULL,NULL),(5,'销毁主机','danger destroy',1,'param','filter','{serviceName eq \'qcloud/vm(resource)/action\'}{inputParams.name eq \'destroy\'}',NULL,1,NULL,NULL,NULL,NULL),(6,'删除根分区','删除根分区',0,'script','cli','[{\"name\": \"force\", \"operator\": \"set\"}, {\"name\": \"recursive\", \"operator\": \"set\"}, {\"name\": \"help\", \"operator\": \"notset\"}, {\"name\": \"version\", \"operator\": \"notset\"}, {\"name\": \"path\", \"operator\": \"eq\", \"value\": \"/\"}]',2,1,NULL,NULL,NULL,NULL),(7,'清空数据表truncate','turnc table',0,'script','sql','^truncate\\s+table\\s+.*$',1,1,NULL,NULL,NULL,NULL),(8,'清空数据表delete','delete table without where',0,'script','sql','^delete\\s+from\\s+(?:(?!where).)*$',1,1,NULL,NULL,NULL,NULL),(9,'更改外键限制','SET FOREIGN_KEY_CHECKS',3,'script','sql','^SET\\s+FOREIGN_KEY_CHECKS=\\d;$',1,1,NULL,NULL,NULL,NULL),(10,'更改表结构','ALTER TABLE',2,'script','sql','^ALTER\\s+TABLE\\s+.*$',1,1,NULL,NULL,NULL,NULL),(11,'更新全量数据表','update table without where',0,'script','sql','^update\\s+(?:(?!where).)*$',1,1,NULL,NULL,NULL,NULL),(12,'强制kill(cli-s)','kill -9',2,'script','cli','[{\"name\": \"name\", \"operator\": \"in\", \"value\": [\"KILL\", \"TERM\"]}, {\"name\": \"pid\", \"operator\": \"set\"}]',3,1,NULL,NULL,NULL,NULL),(13,'强制kill(cli-n)','kill -9',2,'script','cli','[{\"name\": \"number\", \"operator\": \"in\", \"value\": [\"9\", \"15\"]}, {\"name\": \"pid\", \"operator\": \"set\"}]',3,1,NULL,NULL,NULL,NULL),(14,'强制kill(cli-9/15)','kill -9',2,'script','cli','[{\"name\": \"s_kill\", \"operator\": \"set\"}, {\"name\": \"pid\", \"operator\": \"set\"}]',3,1,NULL,NULL,NULL,NULL),(15,'创建表结构','CREATE TABLE',2,'script','sql','^CREATE\\s+TABLE\\s+.*$',1,1,NULL,NULL,NULL,NULL),(16,'反弹shell(nc)','nc',0,'script','cli','[{\"name\": \"N/A\", \"operator\": \"notset\"}]',5,1,NULL,NULL,NULL,NULL),(17,'反弹shell(socat)','socat',0,'script','cli','[{\"name\": \"N/A\", \"operator\": \"notset\"}]',6,1,NULL,NULL,NULL,NULL),(18,'反弹shell(bash)','bash',0,'script','cli','[{\"name\": \"interact\", \"operator\": \"set\"}, {\"name\": \"command\", \"operator\": \"ilike\", \"value\": \"/dev/tcp/\"}]',7,1,NULL,NULL,NULL,NULL);
+/*!40000 ALTER TABLE `rule` ENABLE KEYS */;
+UNLOCK TABLES;
 
 --
 -- Table structure for table `service_script`
 --
+
 DROP TABLE IF EXISTS `service_script`;
+/*!40101 SET @saved_cs_client     = @@character_set_client */;
+/*!40101 SET character_set_client = utf8 */;
 CREATE TABLE `service_script` (
   `id` int(11) NOT NULL AUTO_INCREMENT,
   `service` varchar(63) NOT NULL,
   `content_type` varchar(36) DEFAULT NULL,
   `content_field` varchar(63) DEFAULT NULL,
   `endpoint_field` varchar(63) DEFAULT NULL,
+  `created_by` varchar(36) DEFAULT NULL,
+  `created_time` datetime DEFAULT NULL,
+  `updated_by` varchar(36) DEFAULT NULL,
+  `updated_time` datetime DEFAULT NULL,
   PRIMARY KEY (`id`)
 ) ENGINE=InnoDB DEFAULT CHARSET=utf8 COMMENT='serivce script extraction ';
+/*!40101 SET character_set_client = @saved_cs_client */;
 
+--
+-- Dumping data for table `service_script`
+--
+
+LOCK TABLES `service_script` WRITE;
+/*!40000 ALTER TABLE `service_script` DISABLE KEYS */;
+/*!40000 ALTER TABLE `service_script` ENABLE KEYS */;
+UNLOCK TABLES;
 
 --
--- Table structure for table `target`
+-- Table structure for table `subject`
 --
-DROP TABLE IF EXISTS `target`;
-CREATE TABLE `target` (
+
+DROP TABLE IF EXISTS `subject`;
+/*!40101 SET @saved_cs_client     = @@character_set_client */;
+/*!40101 SET character_set_client = utf8 */;
+CREATE TABLE `subject` (
   `id` int(11) unsigned NOT NULL AUTO_INCREMENT,
   `name` varchar(36) NOT NULL,
-  `args_scope` varchar(512) DEFAULT NULL,
-  `entity_scope` varchar(512) DEFAULT NULL,
+  `description` varchar(63) DEFAULT '',
   `enabled` tinyint(4) NOT NULL,
+  `created_by` varchar(36) DEFAULT NULL,
+  `created_time` datetime DEFAULT NULL,
+  `updated_by` varchar(36) DEFAULT NULL,
+  `updated_time` datetime DEFAULT NULL,
   PRIMARY KEY (`id`)
-) ENGINE=InnoDB DEFAULT CHARSET=utf8;
+) ENGINE=InnoDB AUTO_INCREMENT=2 DEFAULT CHARSET=utf8;
+/*!40101 SET character_set_client = @saved_cs_client */;
 
+--
+-- Dumping data for table `subject`
+--
+
+LOCK TABLES `subject` WRITE;
+/*!40000 ALTER TABLE `subject` DISABLE KEYS */;
+INSERT INTO `subject` VALUES (1,'全部对象','全部对象',1,NULL,NULL,'admin','2020-11-19 11:35:48');
+/*!40000 ALTER TABLE `subject` ENABLE KEYS */;
+UNLOCK TABLES;
 
 --
 -- Table structure for table `subject_target`
 --
+
 DROP TABLE IF EXISTS `subject_target`;
+/*!40101 SET @saved_cs_client     = @@character_set_client */;
+/*!40101 SET character_set_client = utf8 */;
 CREATE TABLE `subject_target` (
   `id` int(11) unsigned NOT NULL AUTO_INCREMENT,
   `subject_id` int(11) unsigned NOT NULL,
@@ -131,6 +245,57 @@ CREATE TABLE `subject_target` (
   KEY `fkey_subject_target_target_id` (`target_id`),
   CONSTRAINT `fkey_subject_target_subject_id` FOREIGN KEY (`subject_id`) REFERENCES `subject` (`id`) ON DELETE NO ACTION ON UPDATE NO ACTION,
   CONSTRAINT `fkey_subject_target_target_id` FOREIGN KEY (`target_id`) REFERENCES `target` (`id`) ON DELETE NO ACTION ON UPDATE NO ACTION
-) ENGINE=InnoDB DEFAULT CHARSET=utf8;
+) ENGINE=InnoDB AUTO_INCREMENT=2 DEFAULT CHARSET=utf8;
+/*!40101 SET character_set_client = @saved_cs_client */;
+
+--
+-- Dumping data for table `subject_target`
+--
+
+LOCK TABLES `subject_target` WRITE;
+/*!40000 ALTER TABLE `subject_target` DISABLE KEYS */;
+INSERT INTO `subject_target` VALUES (1,1,1);
+/*!40000 ALTER TABLE `subject_target` ENABLE KEYS */;
+UNLOCK TABLES;
+
+--
+-- Table structure for table `target`
+--
+
+DROP TABLE IF EXISTS `target`;
+/*!40101 SET @saved_cs_client     = @@character_set_client */;
+/*!40101 SET character_set_client = utf8 */;
+CREATE TABLE `target` (
+  `id` int(11) unsigned NOT NULL AUTO_INCREMENT,
+  `name` varchar(36) NOT NULL,
+  `args_scope` varchar(512) DEFAULT NULL,
+  `entity_scope` varchar(512) DEFAULT NULL,
+  `enabled` tinyint(4) NOT NULL,
+  `created_by` varchar(36) DEFAULT NULL,
+  `created_time` datetime DEFAULT NULL,
+  `updated_by` varchar(36) DEFAULT NULL,
+  `updated_time` datetime DEFAULT NULL,
+  PRIMARY KEY (`id`)
+) ENGINE=InnoDB AUTO_INCREMENT=2 DEFAULT CHARSET=utf8;
+/*!40101 SET character_set_client = @saved_cs_client */;
+
+--
+-- Dumping data for table `target`
+--
+
+LOCK TABLES `target` WRITE;
+/*!40000 ALTER TABLE `target` DISABLE KEYS */;
+INSERT INTO `target` VALUES (1,'全体对象','','',1,NULL,NULL,NULL,NULL);
+/*!40000 ALTER TABLE `target` ENABLE KEYS */;
+UNLOCK TABLES;
+/*!40103 SET TIME_ZONE=@OLD_TIME_ZONE */;
+
+/*!40101 SET SQL_MODE=@OLD_SQL_MODE */;
+/*!40014 SET FOREIGN_KEY_CHECKS=@OLD_FOREIGN_KEY_CHECKS */;
+/*!40014 SET UNIQUE_CHECKS=@OLD_UNIQUE_CHECKS */;
+/*!40101 SET CHARACTER_SET_CLIENT=@OLD_CHARACTER_SET_CLIENT */;
+/*!40101 SET CHARACTER_SET_RESULTS=@OLD_CHARACTER_SET_RESULTS */;
+/*!40101 SET COLLATION_CONNECTION=@OLD_COLLATION_CONNECTION */;
+/*!40111 SET SQL_NOTES=@OLD_SQL_NOTES */;
 
-SET FOREIGN_KEY_CHECKS = 1;
+-- Dump completed on 2020-11-19 11:42:30
diff --git a/ui/package.json b/ui/package.json
index 1e52460..590d1cc 100644
--- a/ui/package.json
+++ b/ui/package.json
@@ -1,6 +1,6 @@
 {
-  "name": "wecmdb",
-  "version": "0.1.0",
+  "name": "itsdangerous",
+  "version": "1.0.0",
   "private": true,
   "scripts": {
     "build": "vue-cli-service build",
diff --git a/ui/src/locale/i18n/en-US.json b/ui/src/locale/i18n/en-US.json
index 02721b6..c9892e5 100755
--- a/ui/src/locale/i18n/en-US.json
+++ b/ui/src/locale/i18n/en-US.json
@@ -101,7 +101,6 @@
     "emptyToadd": "There are empty items and cannot be added!",
     "emptyToSave": "There are empty items and cannot be saved!"
   },
-
   "delete_confirm": "Confirm the deletion：",
   "hr_policies": "Policies",
   "hr_box": "Boxes",
@@ -131,5 +130,9 @@
   "lineno": "Line No",
   "message": "Message",
   "script_name": "Script Name",
-  "content": "Content"
+  "content": "Content",
+  "hr_created_by": "Created By",
+  "hr_created_time": "Created Time",
+  "hr_updated_by": "Updated By",
+  "hr_updated_time": "Updated Time"
 }
diff --git a/ui/src/locale/i18n/zh-CN.json b/ui/src/locale/i18n/zh-CN.json
index 5d4c47b..772d560 100755
--- a/ui/src/locale/i18n/zh-CN.json
+++ b/ui/src/locale/i18n/zh-CN.json
@@ -101,7 +101,6 @@
     "emptyToadd": "存在空项，无法新增！",
     "emptyToSave": "存在空项，无法保存！"
   },
-
   "delete_confirm": "确认删除：",
   "hr_policies": "策略",
   "hr_box": "试盒",
@@ -131,5 +130,9 @@
   "lineno": "行号",
   "message": "信息",
   "script_name": "脚本名",
-  "content": "脚本内容"
+  "content": "脚本内容",
+  "hr_created_by": "创建用户",
+  "hr_created_time": "创建时间",
+  "hr_updated_by": "更新用户",
+  "hr_updated_time": "更新时间"
 }
diff --git a/ui/src/pages/boxes.vue b/ui/src/pages/boxes.vue
index e18cbd1..01b05e0 100644
--- a/ui/src/pages/boxes.vue
+++ b/ui/src/pages/boxes.vue
@@ -5,7 +5,7 @@
       <div slot="boxes">
         <div class="marginbottom params-each">
           <label class="col-md-2 label-name">{{ $t('hr_policies') }}:</label>
-          <Select v-model="modelConfig.addRow.policy_id" style="width:338px">
+          <Select v-model="modelConfig.addRow.policy_id" style="width: 338px">
             <Option v-for="item in modelConfig.v_select_configs.policyOptions" :value="item.value" :key="item.value">
               {{ item.label }}
             </Option>
@@ -13,7 +13,7 @@
         </div>
         <div class="marginbottom params-each">
           <label class="col-md-2 label-name">{{ $t('hr_subject') }}:</label>
-          <Select v-model="modelConfig.addRow.subject_id" style="width:338px">
+          <Select v-model="modelConfig.addRow.subject_id" style="width: 338px">
             <Option v-for="item in modelConfig.v_select_configs.subjectOptions" :value="item.value" :key="item.value">
               {{ item.label }}
             </Option>
@@ -56,6 +56,26 @@ let tableEle = [
     title: 'hr_subject',
     value: 'subject.name', //
     display: true
+  },
+  {
+    title: 'hr_created_by',
+    value: 'created_by', //
+    display: true
+  },
+  {
+    title: 'hr_created_time',
+    value: 'created_time', //
+    display: true
+  },
+  {
+    title: 'hr_updated_by',
+    value: 'updated_by', //
+    display: true
+  },
+  {
+    title: 'hr_updated_time',
+    value: 'updated_time', //
+    display: true
   }
 ]
 const btn = [
diff --git a/ui/src/pages/match-params.vue b/ui/src/pages/match-params.vue
index 7b5e17c..8d8962d 100644
--- a/ui/src/pages/match-params.vue
+++ b/ui/src/pages/match-params.vue
@@ -5,7 +5,7 @@
       <div slot="match-params">
         <div class="marginbottom params-each">
           <label class="col-md-2 label-name">{{ $t('hr_type') }}:</label>
-          <Select v-model="modelConfig.addRow.type" style="width:338px" multiple>
+          <Select v-model="modelConfig.addRow.type" style="width: 338px" multiple>
             <Option v-for="item in modelConfig.v_select_configs.typeOptions" :value="item.value" :key="item.value">
               {{ item.label }}
             </Option>
@@ -41,6 +41,26 @@ let tableEle = [
     title: 'hr_type',
     value: 'type',
     display: true
+  },
+  {
+    title: 'hr_created_by',
+    value: 'created_by', //
+    display: true
+  },
+  {
+    title: 'hr_created_time',
+    value: 'created_time', //
+    display: true
+  },
+  {
+    title: 'hr_updated_by',
+    value: 'updated_by', //
+    display: true
+  },
+  {
+    title: 'hr_updated_time',
+    value: 'updated_time', //
+    display: true
   }
 ]
 const btn = [
diff --git a/ui/src/pages/plugin-params.vue b/ui/src/pages/plugin-params.vue
index a079561..73dc37c 100644
--- a/ui/src/pages/plugin-params.vue
+++ b/ui/src/pages/plugin-params.vue
@@ -5,7 +5,7 @@
       <div slot="plugin-params">
         <div class="marginbottom params-each">
           <label class="col-md-2 label-name">{{ $t('content_type') }}:</label>
-          <Select v-model="modelConfig.addRow.content_type" style="width:338px">
+          <Select v-model="modelConfig.addRow.content_type" style="width: 338px">
             <Option
               v-for="item in modelConfig.v_select_configs.contentTypeOptions"
               :value="item.value"
@@ -42,6 +42,26 @@ let tableEle = [
     title: 'endpoint_field', // 脚本地址
     value: 'endpoint_field',
     display: true
+  },
+  {
+    title: 'hr_created_by',
+    value: 'created_by', //
+    display: true
+  },
+  {
+    title: 'hr_created_time',
+    value: 'created_time', //
+    display: true
+  },
+  {
+    title: 'hr_updated_by',
+    value: 'updated_by', //
+    display: true
+  },
+  {
+    title: 'hr_updated_time',
+    value: 'updated_time', //
+    display: true
   }
 ]
 const btn = [
diff --git a/ui/src/pages/policy.vue b/ui/src/pages/policy.vue
index fd85819..b8d0125 100644
--- a/ui/src/pages/policy.vue
+++ b/ui/src/pages/policy.vue
@@ -5,7 +5,7 @@
       <div slot="policy">
         <div class="marginbottom params-each">
           <label class="col-md-2 label-name">{{ $t('hr_rule') }}:</label>
-          <Select v-model="modelConfig.addRow.rules" style="width:338px" multiple>
+          <Select v-model="modelConfig.addRow.rules" style="width: 338px" multiple>
             <Option v-for="item in modelConfig.v_select_configs.ruleOptions" :value="item.value" :key="item.value">
               {{ item.label }}
             </Option>
@@ -33,6 +33,26 @@ let tableEle = [
     title: 'hr_enabled',
     value: 'enabled',
     display: true
+  },
+  {
+    title: 'hr_created_by',
+    value: 'created_by', //
+    display: true
+  },
+  {
+    title: 'hr_created_time',
+    value: 'created_time', //
+    display: true
+  },
+  {
+    title: 'hr_updated_by',
+    value: 'updated_by', //
+    display: true
+  },
+  {
+    title: 'hr_updated_time',
+    value: 'updated_time', //
+    display: true
   }
 ]
 const btn = [
diff --git a/ui/src/pages/rule.vue b/ui/src/pages/rule.vue
index 3c0ab99..c015ffe 100644
--- a/ui/src/pages/rule.vue
+++ b/ui/src/pages/rule.vue
@@ -5,7 +5,7 @@
       <div slot="rule">
         <div class="marginbottom params-each">
           <label class="col-md-2 label-name">{{ $t('effect_on') }}:</label>
-          <Select v-model="modelConfig.addRow.policy_id" style="width:338px">
+          <Select v-model="modelConfig.addRow.policy_id" style="width: 338px">
             <Option v-for="item in modelConfig.v_select_configs.effectOptions" :value="item.value" :key="item.value">
               {{ item.label }}
             </Option>
@@ -13,7 +13,7 @@
         </div>
         <div class="marginbottom params-each">
           <label class="col-md-2 label-name">{{ $t('match_type') }}:</label>
-          <Select v-model="modelConfig.addRow.match_type" style="width:338px">
+          <Select v-model="modelConfig.addRow.match_type" style="width: 338px">
             <Option v-for="item in modelConfig.v_select_configs.matchOptions" :value="item.value" :key="item.value">
               {{ item.label }}
             </Option>
@@ -21,7 +21,7 @@
         </div>
         <div class="marginbottom params-each">
           <label class="col-md-2 label-name">{{ $t('match_param_id') }}:</label>
-          <Select v-model="modelConfig.addRow.match_param_id" style="width:338px">
+          <Select v-model="modelConfig.addRow.match_param_id" style="width: 338px">
             <Option v-for="item in modelConfig.v_select_configs.matchParamOption" :value="item.value" :key="item.value">
               {{ item.label }}
             </Option>
@@ -72,7 +72,27 @@ let tableEle = [
   },
   {
     title: 'match_param_id', // 不必
-    value: 'match_param_id', // 调用参数
+    value: 'match_param.name', // 调用参数
+    display: true
+  },
+  {
+    title: 'hr_created_by',
+    value: 'created_by', //
+    display: true
+  },
+  {
+    title: 'hr_created_time',
+    value: 'created_time', //
+    display: true
+  },
+  {
+    title: 'hr_updated_by',
+    value: 'updated_by', //
+    display: true
+  },
+  {
+    title: 'hr_updated_time',
+    value: 'updated_time', //
     display: true
   }
 ]
diff --git a/ui/src/pages/subjects.vue b/ui/src/pages/subjects.vue
index fc64939..93c5f10 100644
--- a/ui/src/pages/subjects.vue
+++ b/ui/src/pages/subjects.vue
@@ -5,7 +5,7 @@
       <div slot="subjects">
         <div class="marginbottom params-each">
           <label class="col-md-2 label-name">{{ $t('hr_target') }}:</label>
-          <Select v-model="modelConfig.addRow.targets" style="width:338px" multiple>
+          <Select v-model="modelConfig.addRow.targets" style="width: 338px" multiple>
             <Option v-for="item in modelConfig.v_select_configs.targetOptions" :value="item.value" :key="item.value">
               {{ item.label }}
             </Option>
@@ -33,6 +33,26 @@ let tableEle = [
     title: 'hr_enabled',
     value: 'enabled',
     display: true
+  },
+  {
+    title: 'hr_created_by',
+    value: 'created_by', //
+    display: true
+  },
+  {
+    title: 'hr_created_time',
+    value: 'created_time', //
+    display: true
+  },
+  {
+    title: 'hr_updated_by',
+    value: 'updated_by', //
+    display: true
+  },
+  {
+    title: 'hr_updated_time',
+    value: 'updated_time', //
+    display: true
   }
 ]
 const btn = [
diff --git a/ui/src/pages/targets.vue b/ui/src/pages/targets.vue
index 4795655..c9f70a0 100644
--- a/ui/src/pages/targets.vue
+++ b/ui/src/pages/targets.vue
@@ -27,6 +27,26 @@ let tableEle = [
     title: 'hr_enabled',
     value: 'enabled',
     display: true
+  },
+  {
+    title: 'hr_created_by',
+    value: 'created_by', //
+    display: true
+  },
+  {
+    title: 'hr_created_time',
+    value: 'created_time', //
+    display: true
+  },
+  {
+    title: 'hr_updated_by',
+    value: 'updated_by', //
+    display: true
+  },
+  {
+    title: 'hr_updated_time',
+    value: 'updated_time', //
+    display: true
   }
 ]
 const btn = [
diff --git a/wecube_plugins_itsdangerous/db/models_box.py b/wecube_plugins_itsdangerous/db/models_box.py
index 4819f79..a74d3de 100644
--- a/wecube_plugins_itsdangerous/db/models_box.py
+++ b/wecube_plugins_itsdangerous/db/models_box.py
@@ -2,7 +2,7 @@
 
 from __future__ import absolute_import
 
-from sqlalchemy import Column, ForeignKey, String, text, JSON
+from sqlalchemy import Column, DateTime, ForeignKey, String, text, JSON
 from sqlalchemy.dialects.mysql import INTEGER, TINYINT
 from sqlalchemy.ext.declarative import declarative_base
 from sqlalchemy.orm import relationship
@@ -14,6 +14,7 @@
 
 class MatchParam(Base, DictBase):
     __tablename__ = 'match_param'
+    summary_attributes = ['id', 'name', 'type', 'params']
 
     id = Column(INTEGER(11), primary_key=True)
     name = Column(String(36), nullable=False)
@@ -21,18 +22,30 @@ class MatchParam(Base, DictBase):
     type = Column(String(36), nullable=False)
     params = Column(JSON, nullable=False)
 
+    created_by = Column(String(36), nullable=True)
+    created_time = Column(DateTime, nullable=True)
+    updated_by = Column(String(36), nullable=True)
+    updated_time = Column(DateTime, nullable=True)
+
 
 class Policy(Base, DictBase):
     __tablename__ = 'policy'
-    attributes = ['id', 'name', 'description', 'enabled', 'rules']
+    attributes = [
+        'id', 'name', 'description', 'enabled', 'rules', 'created_by', 'created_time', 'updated_by', 'updated_time'
+    ]
     detail_attributes = attributes
-    summary_attributes = attributes
+    summary_attributes = ['id', 'name', 'description', 'enabled', 'rules']
 
     id = Column(INTEGER(11), primary_key=True)
     name = Column(String(36), nullable=False)
     description = Column(String(63), server_default=text("''"), nullable=True)
     enabled = Column(TINYINT(4), nullable=False)
 
+    created_by = Column(String(36), nullable=True)
+    created_time = Column(DateTime, nullable=True)
+    updated_by = Column(String(36), nullable=True)
+    updated_time = Column(DateTime, nullable=True)
+
     rules = relationship("Rule", secondary="policy_rule", lazy='subquery')
 
 
@@ -40,10 +53,13 @@ class Rule(Base, DictBase):
     __tablename__ = 'rule'
     attributes = [
         'id', 'name', 'description', 'level', 'effect_on', 'enabled', 'match_type', 'match_param_id', 'match_value',
-        'match_param'
+        'created_by', 'created_time', 'updated_by', 'updated_time', 'match_param'
     ]
     detail_attributes = attributes
-    summary_attributes = attributes
+    summary_attributes = [
+        'id', 'name', 'description', 'level', 'effect_on', 'enabled', 'match_type', 'match_param_id', 'match_value',
+        'match_param'
+    ]
 
     id = Column(INTEGER(11), primary_key=True)
     name = Column(String(36), nullable=False)
@@ -55,26 +71,44 @@ class Rule(Base, DictBase):
     match_value = Column(String(512), nullable=False)
     enabled = Column(TINYINT(4), nullable=False)
 
+    created_by = Column(String(36), nullable=True)
+    created_time = Column(DateTime, nullable=True)
+    updated_by = Column(String(36), nullable=True)
+    updated_time = Column(DateTime, nullable=True)
+
     match_param = relationship('MatchParam', lazy=False)
     # policies = relationship("Policy", back_populates="policy_rule")
 
 
 class Subject(Base, DictBase):
     __tablename__ = 'subject'
-    attributes = ['id', 'name', 'description', 'enabled', 'targets']
+    attributes = [
+        'id', 'name', 'description', 'enabled', 'created_by', 'created_time', 'updated_by', 'updated_time', 'targets'
+    ]
     detail_attributes = attributes
-    summary_attributes = attributes
+    summary_attributes = ['id', 'name', 'description', 'enabled', 'targets']
 
     id = Column(INTEGER(11), primary_key=True)
     name = Column(String(36), nullable=False)
     description = Column(String(63), server_default=text("''"), nullable=True)
     enabled = Column(TINYINT(4), nullable=False)
 
+    created_by = Column(String(36), nullable=True)
+    created_time = Column(DateTime, nullable=True)
+    updated_by = Column(String(36), nullable=True)
+    updated_time = Column(DateTime, nullable=True)
+
     targets = relationship('Target', secondary='subject_target', lazy='subquery')
 
 
 class Target(Base, DictBase):
     __tablename__ = 'target'
+    attributes = [
+        'id', 'name', 'args_scope', 'entity_scope', 'enabled', 'created_by', 'created_time', 'updated_by',
+        'updated_time'
+    ]
+    detail_attributes = attributes
+    summary_attributes = ['id', 'name', 'args_scope', 'entity_scope', 'enabled']
 
     id = Column(INTEGER(11), primary_key=True)
     name = Column(String(36), nullable=False)
@@ -82,12 +116,20 @@ class Target(Base, DictBase):
     entity_scope = Column(String(512), nullable=True)
     enabled = Column(TINYINT(4), nullable=False)
 
+    created_by = Column(String(36), nullable=True)
+    created_time = Column(DateTime, nullable=True)
+    updated_by = Column(String(36), nullable=True)
+    updated_time = Column(DateTime, nullable=True)
+
     # subjects = relationship('SubjectTarget', back_populates='target')
 
 
 class Box(Base, DictBase):
     __tablename__ = 'box'
-    attributes = ['id', 'name', 'description', 'policy_id', 'subject_id', 'policy', 'subject']
+    attributes = [
+        'id', 'name', 'description', 'policy_id', 'subject_id', 'created_by', 'created_time', 'updated_by',
+        'updated_time', 'policy', 'subject'
+    ]
     detail_attributes = attributes
     summary_attributes = attributes
 
@@ -97,6 +139,11 @@ class Box(Base, DictBase):
     policy_id = Column(ForeignKey('policy.id'), nullable=False, index=True)
     subject_id = Column(ForeignKey('subject.id'), nullable=False, index=True)
 
+    created_by = Column(String(36), nullable=True)
+    created_time = Column(DateTime, nullable=True)
+    updated_by = Column(String(36), nullable=True)
+    updated_time = Column(DateTime, nullable=True)
+
     policy = relationship('Policy', lazy=False)
     subject = relationship('Subject', lazy=False)
 
@@ -121,14 +168,3 @@ class SubjectTarget(Base, DictBase):
 
     # subject = relationship('Subject', back_populates='targets')
     # target = relationship('Target', back_populates='subjects')
-
-
-class SerivceScript(Base, DictBase):
-    __tablename__ = 'serivce_script'
-    __table_args__ = {'comment': 'serivce script extraction '}
-
-    id = Column(INTEGER(11), primary_key=True)
-    service = Column(String(63), nullable=False)
-    content_type = Column(String(36))
-    content_field = Column(String(63))
-    endpoint_field = Column(String(63))
diff --git a/wecube_plugins_itsdangerous/db/models_manage.py b/wecube_plugins_itsdangerous/db/models_manage.py
index 4cb7730..54ba386 100644
--- a/wecube_plugins_itsdangerous/db/models_manage.py
+++ b/wecube_plugins_itsdangerous/db/models_manage.py
@@ -2,7 +2,7 @@
 
 from __future__ import absolute_import
 
-from sqlalchemy import Column, ForeignKey, String, text, JSON
+from sqlalchemy import Column, DateTime, ForeignKey, String, text, JSON
 from sqlalchemy.dialects.mysql import INTEGER, TINYINT
 from sqlalchemy.ext.declarative import declarative_base
 from sqlalchemy.orm import relationship
@@ -14,6 +14,7 @@
 
 class MatchParam(Base, DictBase):
     __tablename__ = 'match_param'
+    summary_attributes = ['id', 'name', 'type', 'params']
 
     id = Column(INTEGER(11), primary_key=True)
     name = Column(String(36), nullable=False)
@@ -21,10 +22,17 @@ class MatchParam(Base, DictBase):
     type = Column(String(36), nullable=False)
     params = Column(JSON, nullable=False)
 
+    created_by = Column(String(36), nullable=True)
+    created_time = Column(DateTime, nullable=True)
+    updated_by = Column(String(36), nullable=True)
+    updated_time = Column(DateTime, nullable=True)
+
 
 class Policy(Base, DictBase):
     __tablename__ = 'policy'
-    attributes = ['id', 'name', 'description', 'enabled', 'rules']
+    attributes = [
+        'id', 'name', 'description', 'enabled', 'created_by', 'created_time', 'updated_by', 'updated_time', 'rules'
+    ]
     detail_attributes = attributes
     summary_attributes = ['id', 'name', 'description', 'enabled']
 
@@ -33,6 +41,11 @@ class Policy(Base, DictBase):
     description = Column(String(63), server_default=text("''"), nullable=True)
     enabled = Column(TINYINT(4), nullable=False)
 
+    created_by = Column(String(36), nullable=True)
+    created_time = Column(DateTime, nullable=True)
+    updated_by = Column(String(36), nullable=True)
+    updated_time = Column(DateTime, nullable=True)
+
     rules = relationship("Rule", secondary="policy_rule", lazy=False)
 
 
@@ -40,10 +53,13 @@ class Rule(Base, DictBase):
     __tablename__ = 'rule'
     attributes = [
         'id', 'name', 'description', 'level', 'effect_on', 'enabled', 'match_type', 'match_param_id', 'match_value',
-        'match_param'
+        'created_by', 'created_time', 'updated_by', 'updated_time', 'match_param'
     ]
     detail_attributes = attributes
-    summary_attributes = attributes
+    summary_attributes = [
+        'id', 'name', 'description', 'level', 'effect_on', 'enabled', 'match_type', 'match_param_id', 'match_value',
+        'match_param'
+    ]
 
     id = Column(INTEGER(11), primary_key=True)
     name = Column(String(36), nullable=False)
@@ -55,13 +71,20 @@ class Rule(Base, DictBase):
     match_value = Column(String(512), nullable=False)
     enabled = Column(TINYINT(4), nullable=False)
 
+    created_by = Column(String(36), nullable=True)
+    created_time = Column(DateTime, nullable=True)
+    updated_by = Column(String(36), nullable=True)
+    updated_time = Column(DateTime, nullable=True)
+
     match_param = relationship('MatchParam', lazy=False)
     # policies = relationship("Policy", back_populates="policy_rule")
 
 
 class Subject(Base, DictBase):
     __tablename__ = 'subject'
-    attributes = ['id', 'name', 'description', 'enabled', 'targets']
+    attributes = [
+        'id', 'name', 'description', 'enabled', 'created_by', 'created_time', 'updated_by', 'updated_time', 'targets'
+    ]
     detail_attributes = attributes
     summary_attributes = ['id', 'name', 'description', 'enabled']
 
@@ -70,11 +93,22 @@ class Subject(Base, DictBase):
     description = Column(String(63), server_default=text("''"), nullable=True)
     enabled = Column(TINYINT(4), nullable=False)
 
+    created_by = Column(String(36), nullable=True)
+    created_time = Column(DateTime, nullable=True)
+    updated_by = Column(String(36), nullable=True)
+    updated_time = Column(DateTime, nullable=True)
+
     targets = relationship('Target', secondary='subject_target', lazy=False)
 
 
 class Target(Base, DictBase):
     __tablename__ = 'target'
+    attributes = [
+        'id', 'name', 'args_scope', 'entity_scope', 'enabled', 'created_by', 'created_time', 'updated_by',
+        'updated_time'
+    ]
+    detail_attributes = attributes
+    summary_attributes = ['id', 'name', 'args_scope', 'entity_scope', 'enabled']
 
     id = Column(INTEGER(11), primary_key=True)
     name = Column(String(36), nullable=False)
@@ -82,12 +116,20 @@ class Target(Base, DictBase):
     entity_scope = Column(String(512), nullable=True)
     enabled = Column(TINYINT(4), nullable=False)
 
+    created_by = Column(String(36), nullable=True)
+    created_time = Column(DateTime, nullable=True)
+    updated_by = Column(String(36), nullable=True)
+    updated_time = Column(DateTime, nullable=True)
+
     # subjects = relationship('SubjectTarget', back_populates='target')
 
 
 class Box(Base, DictBase):
     __tablename__ = 'box'
-    attributes = ['id', 'name', 'description', 'policy_id', 'subject_id', 'policy', 'subject']
+    attributes = [
+        'id', 'name', 'description', 'policy_id', 'subject_id', 'created_by', 'created_time', 'updated_by',
+        'updated_time', 'policy', 'subject'
+    ]
     detail_attributes = attributes
     summary_attributes = attributes
 
@@ -97,6 +139,11 @@ class Box(Base, DictBase):
     policy_id = Column(ForeignKey('policy.id'), nullable=False, index=True)
     subject_id = Column(ForeignKey('subject.id'), nullable=False, index=True)
 
+    created_by = Column(String(36), nullable=True)
+    created_time = Column(DateTime, nullable=True)
+    updated_by = Column(String(36), nullable=True)
+    updated_time = Column(DateTime, nullable=True)
+
     policy = relationship('Policy', lazy=False)
     subject = relationship('Subject', lazy=False)
 
@@ -132,3 +179,8 @@ class ServiceScript(Base, DictBase):
     content_type = Column(String(36))
     content_field = Column(String(63))
     endpoint_field = Column(String(63))
+
+    created_by = Column(String(36), nullable=True)
+    created_time = Column(DateTime, nullable=True)
+    updated_by = Column(String(36), nullable=True)
+    updated_time = Column(DateTime, nullable=True)
diff --git a/wecube_plugins_itsdangerous/db/resource.py b/wecube_plugins_itsdangerous/db/resource.py
index 74b12ce..ddb8470 100644
--- a/wecube_plugins_itsdangerous/db/resource.py
+++ b/wecube_plugins_itsdangerous/db/resource.py
@@ -1,12 +1,14 @@
 # coding=utf-8
 
 from __future__ import absolute_import
-from wecube_plugins_itsdangerous.common import exceptions
+import datetime
 
 from talos.core.i18n import _
 from talos.db import crud
 from talos.db import validator
+from talos.utils import scoped_globals
 
+from wecube_plugins_itsdangerous.common import exceptions
 from wecube_plugins_itsdangerous.db import models_box
 from wecube_plugins_itsdangerous.db import models_manage
 from wecube_plugins_itsdangerous.db import validator as my_validator
@@ -22,7 +24,17 @@ def validate(self, value):
         return True
 
 
-class MatchParam(crud.ResourceBase):
+class MetaCRUD(crud.ResourceBase):
+    def _before_create(self, resource, validate):
+        resource['created_by'] = scoped_globals.GLOBALS.request.auth_user or None
+        resource['created_time'] = datetime.datetime.now()
+
+    def _before_update(self, rid, resource, validate):
+        resource['updated_by'] = scoped_globals.GLOBALS.request.auth_user or None
+        resource['updated_time'] = datetime.datetime.now()
+
+
+class MatchParam(MetaCRUD):
     orm_meta = models_manage.MatchParam
     _default_order = ['-id']
     _validate = [
@@ -35,6 +47,10 @@ class MatchParam(crud.ResourceBase):
                              nullable=True),
         crud.ColumnValidator(field='type', rule_type='in', rule=['regex', 'cli'], validate_on=('create:M', 'update:O')),
         crud.ColumnValidator(field='params', rule=validator.TypeValidator(dict), validate_on=('create:M', 'update:O')),
+        crud.ColumnValidator(field='created_by', validate_on=('create:O', 'update:O'), nullable=True),
+        crud.ColumnValidator(field='created_time', validate_on=('create:O', 'update:O'), nullable=True),
+        crud.ColumnValidator(field='updated_by', validate_on=('create:O', 'update:O'), nullable=True),
+        crud.ColumnValidator(field='updated_time', validate_on=('create:O', 'update:O'), nullable=True)
     ]
 
     def delete(self, rid, filters=None, detail=True):
@@ -45,7 +61,7 @@ def delete(self, rid, filters=None, detail=True):
         return super().delete(rid, filters, detail)
 
 
-class Policy(crud.ResourceBase):
+class Policy(MetaCRUD):
     orm_meta = models_manage.Policy
     _default_order = ['-id']
     _validate = [
@@ -57,6 +73,10 @@ class Policy(crud.ResourceBase):
                              validate_on=('create:O', 'update:O'),
                              nullable=True),
         crud.ColumnValidator(field='enabled', rule_type='in', rule=[0, 1], validate_on=('create:M', 'update:O')),
+        crud.ColumnValidator(field='created_by', validate_on=('create:O', 'update:O'), nullable=True),
+        crud.ColumnValidator(field='created_time', validate_on=('create:O', 'update:O'), nullable=True),
+        crud.ColumnValidator(field='updated_by', validate_on=('create:O', 'update:O'), nullable=True),
+        crud.ColumnValidator(field='updated_time', validate_on=('create:O', 'update:O'), nullable=True),
         crud.ColumnValidator(field='rules',
                              rule=validator.TypeValidator(list),
                              validate_on=('create:O', 'update:O'),
@@ -66,7 +86,9 @@ class Policy(crud.ResourceBase):
     def _addtional_create(self, session, resource, created):
         if 'rules' in resource:
             refs = resource['rules']
-            for ref in refs:
+            reduce_refs = list(set(refs))
+            reduce_refs.sort(key=refs.index)
+            for ref in reduce_refs:
                 new_ref = {}
                 new_ref['policy_id'] = created['id']
                 new_ref['rule_id'] = ref
@@ -75,8 +97,21 @@ def _addtional_create(self, session, resource, created):
     def _addtional_update(self, session, rid, resource, before_updated, after_updated):
         if 'rules' in resource:
             refs = resource['rules']
-            PolicyRule(transaction=session).delete_all(filters={'policy_id': before_updated['id']})
-            for ref in refs:
+            old_refs = [
+                result['rule_id']
+                for result in PolicyRule(session=session).list(filters={'policy_id': before_updated['id']})
+            ]
+            create_refs = list(set(refs) - set(old_refs))
+            create_refs.sort(key=refs.index)
+            delete_refs = set(old_refs) - set(refs)
+            if delete_refs:
+                PolicyRule(transaction=session).delete_all(filters={
+                    'policy_id': before_updated['id'],
+                    'rule_id': {
+                        'in': list(delete_refs)
+                    }
+                })
+            for ref in create_refs:
                 new_ref = {}
                 new_ref['policy_id'] = before_updated['id']
                 new_ref['rule_id'] = ref
@@ -92,7 +127,7 @@ def delete(self, rid, filters=None, detail=True):
             return super().delete(rid, filters, detail)
 
 
-class Rule(crud.ResourceBase):
+class Rule(MetaCRUD):
     orm_meta = models_manage.Rule
     _default_order = ['-id']
     _validate = [
@@ -122,10 +157,14 @@ class Rule(crud.ResourceBase):
         crud.ColumnValidator(field='match_value',
                              rule=my_validator.LengthValidator(1, 512),
                              validate_on=('create:M', 'update:O')),
+        crud.ColumnValidator(field='created_by', validate_on=('create:O', 'update:O'), nullable=True),
+        crud.ColumnValidator(field='created_time', validate_on=('create:O', 'update:O'), nullable=True),
+        crud.ColumnValidator(field='updated_by', validate_on=('create:O', 'update:O'), nullable=True),
+        crud.ColumnValidator(field='updated_time', validate_on=('create:O', 'update:O'), nullable=True),
     ]
 
 
-class Subject(crud.ResourceBase):
+class Subject(MetaCRUD):
     orm_meta = models_manage.Subject
     _default_order = ['-id']
     _validate = [
@@ -137,6 +176,10 @@ class Subject(crud.ResourceBase):
                              validate_on=('create:O', 'update:O'),
                              nullable=True),
         crud.ColumnValidator(field='enabled', rule_type='in', rule=[0, 1], validate_on=('create:M', 'update:O')),
+        crud.ColumnValidator(field='created_by', validate_on=('create:O', 'update:O'), nullable=True),
+        crud.ColumnValidator(field='created_time', validate_on=('create:O', 'update:O'), nullable=True),
+        crud.ColumnValidator(field='updated_by', validate_on=('create:O', 'update:O'), nullable=True),
+        crud.ColumnValidator(field='updated_time', validate_on=('create:O', 'update:O'), nullable=True),
         crud.ColumnValidator(field='targets',
                              rule=validator.TypeValidator(list),
                              validate_on=('create:O', 'update:O'),
@@ -146,7 +189,9 @@ class Subject(crud.ResourceBase):
     def _addtional_create(self, session, resource, created):
         if 'targets' in resource:
             refs = resource['targets']
-            for ref in refs:
+            reduce_refs = list(set(refs))
+            reduce_refs.sort(key=refs.index)
+            for ref in reduce_refs:
                 new_ref = {}
                 new_ref['subject_id'] = created['id']
                 new_ref['target_id'] = ref
@@ -155,8 +200,21 @@ def _addtional_create(self, session, resource, created):
     def _addtional_update(self, session, rid, resource, before_updated, after_updated):
         if 'targets' in resource:
             refs = resource['targets']
-            SubjectTarget(transaction=session).delete_all(filters={'subject_id': before_updated['id']})
-            for ref in refs:
+            old_refs = [
+                result['target_id']
+                for result in SubjectTarget(session=session).list(filters={'subject_id': before_updated['id']})
+            ]
+            create_refs = list(set(refs) - set(old_refs))
+            create_refs.sort(key=refs.index)
+            delete_refs = set(old_refs) - set(refs)
+            if delete_refs:
+                SubjectTarget(transaction=session).delete_all(filters={
+                    'subject_id': before_updated['id'],
+                    'target_id': {
+                        'in': list(delete_refs)
+                    }
+                })
+            for ref in create_refs:
                 new_ref = {}
                 new_ref['subject_id'] = before_updated['id']
                 new_ref['target_id'] = ref
@@ -172,7 +230,7 @@ def delete(self, rid, filters=None, detail=True):
             return super().delete(rid, filters, detail)
 
 
-class Target(crud.ResourceBase):
+class Target(MetaCRUD):
     orm_meta = models_manage.Target
     _default_order = ['-id']
     _validate = [
@@ -188,17 +246,21 @@ class Target(crud.ResourceBase):
                              rule=my_validator.LengthValidator(0, 512),
                              validate_on=('create:O', 'update:O'),
                              nullable=True),
+        crud.ColumnValidator(field='created_by', validate_on=('create:O', 'update:O'), nullable=True),
+        crud.ColumnValidator(field='created_time', validate_on=('create:O', 'update:O'), nullable=True),
+        crud.ColumnValidator(field='updated_by', validate_on=('create:O', 'update:O'), nullable=True),
+        crud.ColumnValidator(field='updated_time', validate_on=('create:O', 'update:O'), nullable=True),
     ]
 
 
-class Box(crud.ResourceBase):
+class Box(MetaCRUD):
     # optimize for box query
     orm_meta = models_box.Box
     _default_order = ['-id']
     _dynamic_relationship = False
 
 
-class BoxManage(crud.ResourceBase):
+class BoxManage(MetaCRUD):
     orm_meta = models_manage.Box
     _default_order = ['-id']
     _validate = [
@@ -211,10 +273,14 @@ class BoxManage(crud.ResourceBase):
                              nullable=True),
         crud.ColumnValidator(field='policy_id', rule=BackRefValidator(Policy), validate_on=('create:M', 'update:O')),
         crud.ColumnValidator(field='subject_id', rule=BackRefValidator(Subject), validate_on=('create:M', 'update:O')),
+        crud.ColumnValidator(field='created_by', validate_on=('create:O', 'update:O'), nullable=True),
+        crud.ColumnValidator(field='created_time', validate_on=('create:O', 'update:O'), nullable=True),
+        crud.ColumnValidator(field='updated_by', validate_on=('create:O', 'update:O'), nullable=True),
+        crud.ColumnValidator(field='updated_time', validate_on=('create:O', 'update:O'), nullable=True),
     ]
 
 
-class PolicyRule(crud.ResourceBase):
+class PolicyRule(MetaCRUD):
     orm_meta = models_manage.PolicyRule
     _validate = [
         crud.ColumnValidator(field='policy_id', validate_on=('create:M', 'update:M')),
@@ -222,7 +288,7 @@ class PolicyRule(crud.ResourceBase):
     ]
 
 
-class SubjectTarget(crud.ResourceBase):
+class SubjectTarget(MetaCRUD):
     orm_meta = models_manage.SubjectTarget
     _validate = [
         crud.ColumnValidator(field='subject_id', validate_on=('create:M', 'update:M')),
@@ -230,7 +296,7 @@ class SubjectTarget(crud.ResourceBase):
     ]
 
 
-class ServiceScript(crud.ResourceBase):
+class ServiceScript(MetaCRUD):
     orm_meta = models_manage.ServiceScript
     _default_order = ['-id']
     _validate = [
@@ -250,4 +316,8 @@ class ServiceScript(crud.ResourceBase):
                              rule=my_validator.LengthValidator(1, 63),
                              validate_on=['create:O', 'update:O'],
                              nullable=True),
+        crud.ColumnValidator(field='created_by', validate_on=('create:O', 'update:O'), nullable=True),
+        crud.ColumnValidator(field='created_time', validate_on=('create:O', 'update:O'), nullable=True),
+        crud.ColumnValidator(field='updated_by', validate_on=('create:O', 'update:O'), nullable=True),
+        crud.ColumnValidator(field='updated_time', validate_on=('create:O', 'update:O'), nullable=True),
     ]