100 lines
2.8 KiB
Python
100 lines
2.8 KiB
Python
from enum import Enum
|
|
from sqlalchemy import Index, ForeignKey, Column, String, TIMESTAMP, Enum as SQLAEnum
|
|
from sqlalchemy.dialects.postgresql import UUID
|
|
from sqlalchemy.orm import relationship
|
|
|
|
from atst.models.base import Base
|
|
import atst.models.mixins as mixins
|
|
import atst.models.types as types
|
|
|
|
|
|
class CSPRole(Enum):
|
|
BASIC_ACCESS = "Basic Access"
|
|
NETWORK_ADMIN = "Network Admin"
|
|
BUSINESS_READ = "Business Read-only"
|
|
TECHNICAL_READ = "Technical Read-only"
|
|
|
|
|
|
class EnvironmentRole(
|
|
Base, mixins.TimestampsMixin, mixins.AuditableMixin, mixins.DeletableMixin
|
|
):
|
|
__tablename__ = "environment_roles"
|
|
|
|
id = types.Id()
|
|
environment_id = Column(
|
|
UUID(as_uuid=True), ForeignKey("environments.id"), nullable=False
|
|
)
|
|
environment = relationship("Environment")
|
|
|
|
role = Column(String())
|
|
|
|
application_role_id = Column(
|
|
UUID(as_uuid=True), ForeignKey("application_roles.id"), nullable=False
|
|
)
|
|
application_role = relationship("ApplicationRole")
|
|
|
|
job_failures = relationship("EnvironmentRoleJobFailure")
|
|
|
|
csp_user_id = Column(String())
|
|
claimed_until = Column(TIMESTAMP(timezone=True))
|
|
|
|
class Status(Enum):
|
|
PENDING = "pending"
|
|
COMPLETED = "completed"
|
|
DISABLED = "disabled"
|
|
|
|
status = Column(
|
|
SQLAEnum(Status, native_enum=False), default=Status.PENDING, nullable=False
|
|
)
|
|
|
|
def __repr__(self):
|
|
return "<EnvironmentRole(role='{}', user='{}', environment='{}', id='{}')>".format(
|
|
self.role, self.application_role.user_name, self.environment.name, self.id
|
|
)
|
|
|
|
@property
|
|
def history(self):
|
|
return self.get_changes()
|
|
|
|
@property
|
|
def portfolio_id(self):
|
|
return self.environment.application.portfolio_id
|
|
|
|
@property
|
|
def application_id(self):
|
|
return self.environment.application_id
|
|
|
|
@property
|
|
def displayname(self):
|
|
return self.role
|
|
|
|
@property
|
|
def disabled(self):
|
|
return self.status == EnvironmentRole.Status.DISABLED
|
|
|
|
@property
|
|
def is_pending(self):
|
|
return self.status == EnvironmentRole.Status.PENDING
|
|
|
|
@property
|
|
def event_details(self):
|
|
return {
|
|
"updated_user_name": self.application_role.user_name,
|
|
"updated_application_role_id": str(self.application_role_id),
|
|
"role": self.role,
|
|
"environment": self.environment.displayname,
|
|
"environment_id": str(self.environment_id),
|
|
"application": self.environment.application.name,
|
|
"application_id": str(self.environment.application_id),
|
|
"portfolio": self.environment.application.portfolio.name,
|
|
"portfolio_id": str(self.environment.application.portfolio.id),
|
|
}
|
|
|
|
|
|
Index(
|
|
"environments_role_user_environment",
|
|
EnvironmentRole.application_role_id,
|
|
EnvironmentRole.environment_id,
|
|
unique=True,
|
|
)
|