1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
|
"""Base functions and utilities for system resources."""
from uuid import UUID
from functools import reduce
from typing import Sequence
from gn_auth.auth.db import sqlite3 as db
from gn_auth.auth.errors import NotFoundError
from gn_auth.auth.authentication.users import User
from gn_auth.auth.authorisation.roles import Role
from gn_auth.auth.authorisation.privileges import Privilege
from gn_auth.auth.authorisation.resources.base import (
Resource,
resource_from_dbrow)
def __organise_privileges__(acc, row):
role_id = UUID(row["role_id"])
role = acc.get(role_id, Role(
role_id, row["role_name"], bool(int(row["user_editable"])), tuple()))
return {
**acc,
role_id: Role(
role.role_id,
role.role_name,
role.user_editable,
(role.privileges +
(Privilege(row["privilege_id"], row["privilege_description"]),)))
}
def user_roles_on_system(conn: db.DbConnection, user: User) -> Sequence[Role]:
"""
Retrieve all roles assigned to the `user` that act on `system` resources.
"""
with db.cursor(conn) as cursor:
role_ids_query = (
"SELECT ur.role_id FROM user_roles AS ur INNER JOIN resources AS r "
"ON ur.resource_id=r.resource_id "
"INNER JOIN resource_categories AS rc "
"ON r.resource_category_id=rc.resource_category_id "
"WHERE user_id=? AND rc.resource_category_key='system'")
cursor.execute(
"SELECT r.*, p.* FROM roles AS r "
"INNER JOIN role_privileges AS rp ON r.role_id=rp.role_id "
"INNER JOIN privileges AS p ON rp.privilege_id=p.privilege_id "
f"WHERE r.role_id IN ({role_ids_query})",
(str(user.user_id),))
return tuple(reduce(
__organise_privileges__, cursor.fetchall(), {}).values())
return tuple()
def system_resource(conn: db.DbConnection) -> Resource:
"""Retrieve the system resource."""
with db.cursor(conn) as cursor:
cursor.execute(
"SELECT resource_categories.*, resources.resource_id, "
"resources.resource_name, resources.public "
"FROM resource_categories INNER JOIN resources "
"ON resource_categories.resource_category_id=resources.resource_category_id "
"WHERE resource_categories.resource_category_key='system'")
row = cursor.fetchone()
if row:
return resource_from_dbrow(row)
raise NotFoundError("Could not find a system resource!")
|
