154 lines
4.1 KiB
Python
154 lines
4.1 KiB
Python
from enum import Enum
|
|
from sqlalchemy import Index, ForeignKey, Column, Enum as SQLAEnum, Table, String
|
|
from sqlalchemy.dialects.postgresql import UUID
|
|
from sqlalchemy.orm import relationship
|
|
from sqlalchemy.event import listen
|
|
|
|
from atat.utils import first_or_none
|
|
from atat.models.base import Base
|
|
import atat.models.mixins as mixins
|
|
import atat.models.types as types
|
|
from atat.models.mixins.auditable import record_permission_sets_updates
|
|
|
|
|
|
class Status(Enum):
|
|
ACTIVE = "active"
|
|
DISABLED = "disabled"
|
|
PENDING = "pending"
|
|
|
|
|
|
application_roles_permission_sets = Table(
|
|
"application_roles_permission_sets",
|
|
Base.metadata,
|
|
Column(
|
|
"application_role_id", UUID(as_uuid=True), ForeignKey("application_roles.id")
|
|
),
|
|
Column("permission_set_id", UUID(as_uuid=True), ForeignKey("permission_sets.id")),
|
|
)
|
|
|
|
|
|
class ApplicationRole(
|
|
Base,
|
|
mixins.TimestampsMixin,
|
|
mixins.AuditableMixin,
|
|
mixins.PermissionsMixin,
|
|
mixins.DeletableMixin,
|
|
mixins.ClaimableMixin,
|
|
):
|
|
__tablename__ = "application_roles"
|
|
|
|
id = types.Id()
|
|
application_id = Column(
|
|
UUID(as_uuid=True), ForeignKey("applications.id"), index=True, nullable=False
|
|
)
|
|
application = relationship("Application", back_populates="roles")
|
|
|
|
user_id = Column(
|
|
UUID(as_uuid=True), ForeignKey("users.id"), index=True, nullable=True
|
|
)
|
|
|
|
status = Column(
|
|
SQLAEnum(Status, native_enum=False), default=Status.PENDING, nullable=False
|
|
)
|
|
|
|
permission_sets = relationship(
|
|
"PermissionSet", secondary=application_roles_permission_sets
|
|
)
|
|
|
|
environment_roles = relationship(
|
|
"EnvironmentRole",
|
|
primaryjoin="and_(EnvironmentRole.application_role_id == ApplicationRole.id, EnvironmentRole.deleted == False)",
|
|
)
|
|
|
|
cloud_id = Column(String)
|
|
|
|
@property
|
|
def latest_invitation(self):
|
|
if self.invitations:
|
|
return self.invitations[-1]
|
|
|
|
@property
|
|
def user_name(self):
|
|
if self.user:
|
|
return self.user.full_name
|
|
elif self.latest_invitation:
|
|
return self.latest_invitation.user_name
|
|
|
|
def __repr__(self):
|
|
return "<ApplicationRole(application='{}', user_id='{}', id='{}', permissions={})>".format(
|
|
self.application.name, self.user_id, self.id, self.permissions
|
|
)
|
|
|
|
@property
|
|
def history(self):
|
|
previous_state = self.get_changes()
|
|
change_set = {}
|
|
if "status" in previous_state:
|
|
from_status = previous_state["status"][0].value
|
|
to_status = self.status.value
|
|
change_set["status"] = [from_status, to_status]
|
|
return change_set
|
|
|
|
def has_permission_set(self, perm_set_name):
|
|
return first_or_none(
|
|
lambda prms: prms.name == perm_set_name, self.permission_sets
|
|
)
|
|
|
|
@property
|
|
def portfolio_id(self):
|
|
return self.application.portfolio_id
|
|
|
|
@property
|
|
def event_details(self):
|
|
return {
|
|
"updated_user_name": self.user_name,
|
|
"updated_user_id": str(self.user_id),
|
|
"application": self.application.name,
|
|
"portfolio": self.application.portfolio.name,
|
|
}
|
|
|
|
@property
|
|
def is_pending(self):
|
|
return self.status == Status.PENDING
|
|
|
|
@property
|
|
def is_active(self):
|
|
return self.status == Status.ACTIVE
|
|
|
|
@property
|
|
def display_status(self):
|
|
if (
|
|
self.is_pending
|
|
and self.latest_invitation
|
|
and self.latest_invitation.is_expired
|
|
):
|
|
return "invite_expired"
|
|
elif (
|
|
self.is_pending
|
|
and self.latest_invitation
|
|
and self.latest_invitation.is_pending
|
|
):
|
|
return "invite_pending"
|
|
elif self.is_active and any(
|
|
env_role.is_pending for env_role in self.environment_roles
|
|
):
|
|
return "changes_pending"
|
|
|
|
return None
|
|
|
|
|
|
Index(
|
|
"application_role_user_application",
|
|
ApplicationRole.user_id,
|
|
ApplicationRole.application_id,
|
|
unique=True,
|
|
)
|
|
|
|
|
|
listen(
|
|
ApplicationRole.permission_sets,
|
|
"bulk_replace",
|
|
record_permission_sets_updates,
|
|
raw=True,
|
|
)
|