Update atst to atat

atat/models/portfolio_role.py

@@ -0,0 +1,148 @@
+from enum import Enum
+from sqlalchemy import Index, ForeignKey, Column, Enum as SQLAEnum, Table
+from sqlalchemy.dialects.postgresql import UUID
+from sqlalchemy.orm import relationship
+from sqlalchemy.event import listen
+
+from atat.models.base import Base
+import atat.models.types as types
+import atat.models.mixins as mixins
+
+from atat.utils import first_or_none
+from atat.models.mixins.auditable import record_permission_sets_updates
+
+
+class Status(Enum):
+    ACTIVE = "active"
+    DISABLED = "disabled"
+    PENDING = "pending"
+
+
+portfolio_roles_permission_sets = Table(
+    "portfolio_roles_permission_sets",
+    Base.metadata,
+    Column("portfolio_role_id", UUID(as_uuid=True), ForeignKey("portfolio_roles.id")),
+    Column("permission_set_id", UUID(as_uuid=True), ForeignKey("permission_sets.id")),
+)
+
+
+class PortfolioRole(
+    Base, mixins.TimestampsMixin, mixins.AuditableMixin, mixins.PermissionsMixin
+):
+    __tablename__ = "portfolio_roles"
+
+    id = types.Id()
+    portfolio_id = Column(
+        UUID(as_uuid=True), ForeignKey("portfolios.id"), index=True, nullable=False
+    )
+    portfolio = relationship("Portfolio", back_populates="roles")
+
+    user_id = Column(
+        UUID(as_uuid=True), ForeignKey("users.id"), index=True, nullable=True
+    )
+
+    status = Column(
+        SQLAEnum(Status, native_enum=False), default=Status.PENDING, nullable=False
+    )
+
+    permission_sets = relationship(
+        "PermissionSet", secondary=portfolio_roles_permission_sets
+    )
+
+    def __repr__(self):
+        return "<PortfolioRole(portfolio='{}', user_id='{}', id='{}', permissions={})>".format(
+            self.portfolio.name, self.user_id, self.id, self.permissions
+        )
+
+    @property
+    def history(self):
+        previous_state = self.get_changes()
+        change_set = {}
+        if "status" in previous_state:
+            from_status = previous_state["status"][0].value
+            to_status = self.status.value
+            change_set["status"] = [from_status, to_status]
+        return change_set
+
+    @property
+    def event_details(self):
+        return {
+            "updated_user_name": self.user_name,
+            "updated_user_id": str(self.user_id),
+        }
+
+    @property
+    def latest_invitation(self):
+        if self.invitations:
+            return self.invitations[-1]
+
+    @property
+    def display_status(self):
+        if self.status == Status.ACTIVE:
+            return "active"
+        elif self.status == Status.DISABLED:
+            return "disabled"
+        elif self.latest_invitation:
+            if self.latest_invitation.is_revoked:
+                return "invite_revoked"
+            elif self.latest_invitation.is_rejected_wrong_user:
+                return "invite_error"
+            elif (
+                self.latest_invitation.is_rejected_expired
+                or self.latest_invitation.is_expired
+            ):
+                return "invite_expired"
+            else:
+                return "invite_pending"
+        else:
+            return "unknown"
+
+    def has_permission_set(self, perm_set_name):
+        return first_or_none(
+            lambda prms: prms.name == perm_set_name, self.permission_sets
+        )
+
+    @property
+    def has_dod_id_error(self):
+        return self.latest_invitation and self.latest_invitation.is_rejected_wrong_user
+
+    @property
+    def user_name(self):
+        if self.user:
+            return self.user.full_name
+        else:
+            return self.latest_invitation.user_name
+
+    @property
+    def full_name(self):
+        return self.user_name
+
+    @property
+    def is_active(self):
+        return self.status == Status.ACTIVE
+
+    @property
+    def can_resend_invitation(self):
+        return not self.is_active and (
+            self.latest_invitation and self.latest_invitation.is_inactive
+        )
+
+    @property
+    def application_id(self):
+        return None
+
+
+Index(
+    "portfolio_role_user_portfolio",
+    PortfolioRole.user_id,
+    PortfolioRole.portfolio_id,
+    unique=True,
+)
+
+
+listen(
+    PortfolioRole.permission_sets,
+    "bulk_replace",
+    record_permission_sets_updates,
+    raw=True,
+)