1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
|
"""
Create system-admin role
"""
import uuid
from contextlib import closing
from yoyo import step
__depends__ = {'20230210_01_8xMa1-system-admin-privileges-for-data-distribution'}
def create_sys_admin_role(conn):
with closing(conn.cursor()) as cursor:
role_id = uuid.uuid4()
cursor.execute(
"INSERT INTO roles VALUES (?, 'system-administrator', '0')",
(str(role_id),))
cursor.executemany(
"INSERT INTO role_privileges VALUES (:role_id, :privilege_id)",
({"role_id": f"{role_id}", "privilege_id": priv}
for priv in (
"system:data:link-to-group",
"system:group:create-group",
"system:group:delete-group",
"system:group:edit-group",
"system:group:transfer-group-leader",
"system:group:view-group",
"system:user:assign-group-leader",
"system:user:delete-user",
"system:user:masquerade",
"system:user:reset-password")))
def drop_sys_admin_role(conn):
pass
steps = [
step(create_sys_admin_role, drop_sys_admin_role)
]
|
