blob: 09439ad5a3680b3a28698e7213a1875c8c25b9ba (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
|
"""Handle privileges"""
from uuid import UUID
from typing import Iterable, NamedTuple
from gn3.auth import db
class Privilege(NamedTuple):
"""Class representing a privilege: creates immutable objects."""
privilege_id: UUID
privilege_name: str
def user_privileges(conn: db.DbConnection, user_id: UUID) -> Iterable[Privilege]:
"""Fetch the user's privileges from the database."""
with db.cursor(conn) as cursor:
cursor.execute(
("SELECT p.privilege_id, p.privilege_name "
"FROM user_roles AS ur "
"INNER JOIN role_privileges AS rp ON ur.role_id=rp.role_id "
"INNER JOIN privileges AS p ON rp.privilege_id=p.privilege_id "
"WHERE ur.user_id=?"),
(str(user_id),))
results = cursor.fetchall()
return (Privilege(UUID(row[0]), row[1]) for row in results)
|
