a4f21dc7e6
disabled env role We were only checking to see if a role was disabled or deleted before raising an error, so I added in a check to see if the user was trying to update the env role before raising an error. The error should only be raised if the role is disabled or deleted AND the user is trying to assign a new role to the env role. I also added in a disabled property to the EnvironmentRole model to make things more readable.
94 lines
2.7 KiB
Python
94 lines
2.7 KiB
Python
from enum import Enum
|
|
from sqlalchemy import Index, ForeignKey, Column, String, TIMESTAMP, Enum as SQLAEnum
|
|
from sqlalchemy.dialects.postgresql import UUID
|
|
from sqlalchemy.orm import relationship
|
|
|
|
from atst.models.base import Base
|
|
import atst.models.mixins as mixins
|
|
import atst.models.types as types
|
|
|
|
|
|
class CSPRole(Enum):
|
|
BASIC_ACCESS = "Basic Access"
|
|
NETWORK_ADMIN = "Network Admin"
|
|
BUSINESS_READ = "Business Read-only"
|
|
TECHNICAL_READ = "Technical Read-only"
|
|
|
|
|
|
class EnvironmentRole(
|
|
Base, mixins.TimestampsMixin, mixins.AuditableMixin, mixins.DeletableMixin
|
|
):
|
|
__tablename__ = "environment_roles"
|
|
|
|
id = types.Id()
|
|
environment_id = Column(
|
|
UUID(as_uuid=True), ForeignKey("environments.id"), nullable=False
|
|
)
|
|
environment = relationship("Environment")
|
|
|
|
role = Column(String())
|
|
|
|
application_role_id = Column(
|
|
UUID(as_uuid=True), ForeignKey("application_roles.id"), nullable=False
|
|
)
|
|
application_role = relationship("ApplicationRole")
|
|
|
|
job_failures = relationship("EnvironmentRoleJobFailure")
|
|
|
|
csp_user_id = Column(String())
|
|
claimed_until = Column(TIMESTAMP(timezone=True))
|
|
|
|
class Status(Enum):
|
|
PENDING = "pending"
|
|
COMPLETED = "completed"
|
|
DISABLED = "disabled"
|
|
|
|
status = Column(SQLAEnum(Status, native_enum=False), default=Status.PENDING)
|
|
|
|
def __repr__(self):
|
|
return "<EnvironmentRole(role='{}', user='{}', environment='{}', id='{}')>".format(
|
|
self.role, self.application_role.user_name, self.environment.name, self.id
|
|
)
|
|
|
|
@property
|
|
def history(self):
|
|
return self.get_changes()
|
|
|
|
@property
|
|
def portfolio_id(self):
|
|
return self.environment.application.portfolio_id
|
|
|
|
@property
|
|
def application_id(self):
|
|
return self.environment.application_id
|
|
|
|
@property
|
|
def displayname(self):
|
|
return self.role
|
|
|
|
@property
|
|
def disabled(self):
|
|
return self.status == EnvironmentRole.Status.DISABLED
|
|
|
|
@property
|
|
def event_details(self):
|
|
return {
|
|
"updated_user_name": self.application_role.user_name,
|
|
"updated_application_role_id": str(self.application_role_id),
|
|
"role": self.role,
|
|
"environment": self.environment.displayname,
|
|
"environment_id": str(self.environment_id),
|
|
"application": self.environment.application.name,
|
|
"application_id": str(self.environment.application_id),
|
|
"portfolio": self.environment.application.portfolio.name,
|
|
"portfolio_id": str(self.environment.application.portfolio.id),
|
|
}
|
|
|
|
|
|
Index(
|
|
"environments_role_user_environment",
|
|
EnvironmentRole.application_role_id,
|
|
EnvironmentRole.environment_id,
|
|
unique=True,
|
|
)
|