"""Handle privileges""" from dataclasses import dataclass from typing import Iterable from ..db import sqlite3 as db from ..authentication.users import User @dataclass(frozen=True) class Privilege: """Class representing a privilege: creates immutable objects.""" privilege_id: str privilege_description: str def user_privileges(conn: db.DbConnection, user: User) -> Iterable[Privilege]: """Fetch the user's privileges from the database.""" with db.cursor(conn) as cursor: cursor.execute( ("SELECT p.privilege_id, p.privilege_description " "FROM user_roles AS ur " "INNER JOIN role_privileges AS rp ON ur.role_id=rp.role_id " "INNER JOIN privileges AS p ON rp.privilege_id=p.privilege_id " "WHERE ur.user_id=?"), (str(user.user_id),)) results = cursor.fetchall() return (Privilege(row[0], row[1]) for row in results) def privileges_by_ids( conn: db.DbConnection, privileges_ids: tuple[str, ...]) -> tuple[ Privilege, ...]: """Fetch privileges by their ids.""" if len(privileges_ids) == 0: return tuple() with db.cursor(conn) as cursor: clause = ", ".join(["?"] * len(privileges_ids)) cursor.execute( f"SELECT * FROM privileges WHERE privilege_id IN ({clause})", privileges_ids) return tuple( Privilege(row["privilege_id"], row["privilege_description"]) for row in cursor.fetchall())