def save_organisation():
confirm_write_access()
data = current_request.get_json()
_clear_api_keys(data)
cleanse_short_name(data)
data["identifier"] = str(uuid.uuid4())
administrators = data.get("administrators", [])
intended_role = data.get("intended_role", "admin")
message = data.get("message", None)
res = save(Organisation, custom_json=data)
user = User.query.get(current_user_id())
organisation = res[0]
for administrator in administrators:
invitation = OrganisationInvitation(hash=generate_token(), message=message, invitee_email=administrator,
organisation_id=organisation.id, user_id=user.id,
intended_role=intended_role,
expiry_date=default_expiry_date(),
created_by=user.uid)
invitation = db.session.merge(invitation)
mail_organisation_invitation({
"salutation": "Dear",
"invitation": invitation,
"base_url": current_app.app_config.base_url,
"recipient": administrator
}, organisation, [administrator])
mail_platform_admins(organisation)
return res
def save_service():
data = current_request.get_json()
validate_ip_networks(data)
_token_validity_days(data)
data["status"] = STATUS_ACTIVE
cleanse_short_name(data, "abbreviation")
# Before the JSON is cleaned in the save method
administrators = data.get("administrators", [])
message = data.get("message", None)
res = save(Service, custom_json=data, allow_child_cascades=False, allowed_child_collections=["ip_networks"])
service = res[0]
user = User.query.get(current_user_id())
for administrator in administrators:
invitation = ServiceInvitation(hash=generate_token(), message=message, invitee_email=administrator,
service_id=service.id, user=user, intended_role="admin",
expiry_date=default_expiry_date(),
created_by=user.uid)
invitation = db.session.merge(invitation)
mail_service_invitation({
"salutation": "Dear",
"invitation": invitation,
"base_url": current_app.app_config.base_url,
"wiki_link": current_app.app_config.wiki_link,
"recipient": administrator
}, service, [administrator])
mail_platform_admins(service)
service.ip_networks
return res
def organisation_invites():
data = current_request.get_json()
organisation_id = data["organisation_id"]
confirm_organisation_admin(organisation_id)
administrators = data.get("administrators", [])
intended_role = data.get("intended_role")
intended_role = "manager" if intended_role not in ["admin", "manager"] else intended_role
message = data.get("message", None)
organisation = Organisation.query.get(organisation_id)
user = User.query.get(current_user_id())
for administrator in administrators:
invitation = OrganisationInvitation(hash=generate_token(), intended_role=intended_role,
message=message, invitee_email=administrator,
organisation=organisation, user=user,
expiry_date=default_expiry_date(json_dict=data),
created_by=user.uid)
invitation = db.session.merge(invitation)
mail_organisation_invitation({
"salutation": "Dear",
"invitation": invitation,
"base_url": current_app.app_config.base_url,
"recipient": administrator
}, organisation, [administrator])
return None, 201
def service_invites():
data = current_request.get_json()
service_id = data["service_id"]
confirm_service_admin(service_id)
administrators = data.get("administrators", [])
message = data.get("message", None)
intended_role = "admin"
service = Service.query.get(service_id)
user = User.query.get(current_user_id())
for administrator in administrators:
invitation = ServiceInvitation(hash=generate_token(), message=message, invitee_email=administrator,
service=service, user=user, created_by=user.uid,
intended_role=intended_role, expiry_date=default_expiry_date(json_dict=data))
invitation = db.session.merge(invitation)
mail_service_invitation({
"salutation": "Dear",
"invitation": invitation,
"base_url": current_app.app_config.base_url,
"wiki_link": current_app.app_config.wiki_link,
"recipient": administrator
}, service, [administrator])
return None, 201
def do_save_collaboration(data, organisation, user, current_user_admin=True):
_validate_collaboration(data, organisation)
administrators = data.get("administrators", [])
message = data.get("message", None)
data["identifier"] = str(uuid.uuid4())
res = save(Collaboration, custom_json=data, allow_child_cascades=False)
administrators = list(filter(lambda admin: admin != user.email, administrators))
collaboration = res[0]
for administrator in administrators:
invitation = Invitation(hash=generate_token(), message=message, invitee_email=administrator,
collaboration_id=collaboration.id, user=user, intended_role="admin",
expiry_date=default_expiry_date(), status="open", created_by=user.uid)
invitation = db.session.merge(invitation)
mail_collaboration_invitation({
"salutation": "Dear",
"invitation": invitation,
"base_url": current_app.app_config.base_url,
"wiki_link": current_app.app_config.wiki_link,
"recipient": administrator
}, collaboration, [administrator])
if current_user_admin:
admin_collaboration_membership = CollaborationMembership(role="admin", user_id=user.id,
collaboration_id=collaboration.id,
created_by=user.uid, updated_by=user.uid)
db.session.merge(admin_collaboration_membership)
return res
def collaboration_invites_preview():
data = current_request.get_json()
message = data.get("message", None)
intended_role = data.get("intended_role", "member")
collaboration = Collaboration.query.get(int(data["collaboration_id"]))
confirm_collaboration_admin(collaboration.id)
user = User.query.get(current_user_id())
invitation = munchify({
"user": user,
"collaboration": collaboration,
"intended_role": intended_role,
"message": message,
"hash": generate_token(),
"expiry_date": default_expiry_date(data)
})
html = mail_collaboration_invitation({
"salutation": "Dear",
"invitation": invitation,
"base_url": current_app.app_config.base_url,
"wiki_link": current_app.app_config.wiki_link,
}, collaboration, [], preview=True)
return {"html": html}, 201
def _create_sent_email_verification(email, user):
ctx = {"salutation": f"Dear {user.attributes['names'][0]}"}
code = token_urlsafe(6)
db.session.merge(
EmailVerification(code=code,
user=user,
email=email,
expires_at=default_expiry_date()))
ctx["code"] = code
ctx["email"] = email
mail_verify_mail(ctx, [email])
def do_resend(service_invitation_id):
service_invitation = _service_invitation_query() \
.filter(ServiceInvitation.id == service_invitation_id) \
.one()
confirm_service_admin(service_invitation.service_id)
service_invitation.expiry_date = default_expiry_date()
service_invitation.created_at = datetime.date.today(),
service_invitation = db.session.merge(service_invitation)
mail_service_invitation({
"salutation": "Dear",
"invitation": service_invitation,
"base_url": current_app.app_config.base_url,
"recipient": service_invitation.invitee_email
}, service_invitation.service, [service_invitation.invitee_email])
def do_resend(organisation_invitation_id):
organisation_invitation = _organisation_invitation_query() \
.filter(OrganisationInvitation.id == organisation_invitation_id) \
.one()
confirm_organisation_admin(organisation_invitation.organisation_id)
organisation_invitation.expiry_date = default_expiry_date()
organisation_invitation.created_at = datetime.date.today(),
organisation_invitation = db.session.merge(organisation_invitation)
mail_organisation_invitation({
"salutation": "Dear",
"invitation": organisation_invitation,
"base_url": current_app.app_config.base_url,
"recipient": organisation_invitation.invitee_email
}, organisation_invitation.organisation, [organisation_invitation.invitee_email])
def collaboration_invites_api():
confirm_external_api_call()
organisation = request_context.external_api_organisation
data = current_request.get_json()
coll_short_name = data["short_name"]
collaborations = list(filter(lambda coll: coll.short_name == coll_short_name, organisation.collaborations))
if not collaborations:
raise Forbidden(f"Collaboration {coll_short_name} is not part of organisation {organisation.name}")
collaboration = collaborations[0]
collaboration_admins = list(filter(lambda cm: cm.role == "admin", collaboration.collaboration_memberships))
if len(collaboration_admins) > 0:
user = collaboration_admins[0].user
elif len(organisation.organisation_memberships) > 0:
user = organisation.organisation_memberships[0].user
else:
user = User.query.filter(User.uid == current_app.app_config.admin_users[0].uid).one()
message = data.get("message")
intended_role = data.get("intended_role", "member")
expiry_date = parse_date(data.get("invitation_expiry_date"), default_expiry_date())
membership_expiry_date = parse_date(data.get("membership_expiry_date"))
invites = list(filter(lambda recipient: bool(email_re.match(recipient)), data["invites"]))
invites_results = []
for email in invites:
invitation = Invitation(hash=generate_token(), message=message, invitee_email=email,
collaboration_id=collaboration.id, user=user, intended_role=intended_role,
expiry_date=expiry_date, membership_expiry_date=membership_expiry_date,
created_by="system", external_identifier=str(uuid.uuid4()), status="open")
invitation = db.session.merge(invitation)
invites_results.append({
"email": email,
"invitation_expiry_date": expiry_date,
"status": "open",
"invitation_id": invitation.external_identifier
})
mail_collaboration_invitation({
"salutation": "Dear",
"invitation": invitation,
"base_url": current_app.app_config.base_url,
"wiki_link": current_app.app_config.wiki_link,
"recipient": email
}, collaboration, [email])
return invites_results, 201
def do_resend(invitation_id):
invitation = _invitation_query() \
.filter(Invitation.id == invitation_id) \
.one()
confirm_collaboration_admin(invitation.collaboration_id)
invitation.expiry_date = default_expiry_date()
invitation.created_at = datetime.date.today(),
db.session.merge(invitation)
mail_collaboration_invitation({
"salutation": "Dear",
"invitation": invitation,
"base_url": current_app.app_config.base_url,
"wiki_link": current_app.app_config.wiki_link,
"recipient": invitation.invitee_email
}, invitation.collaboration, [invitation.invitee_email])
def collaboration_invites():
data = current_request.get_json()
collaboration_id = data["collaboration_id"]
confirm_collaboration_admin(collaboration_id)
administrators = data.get("administrators", [])
message = data.get("message", None)
intended_role = data.get("intended_role")
intended_role = "member" if intended_role not in ["admin", "member"] else intended_role
group_ids = data.get("groups", [])
groups = Group.query \
.filter(Group.collaboration_id == collaboration_id) \
.filter(Group.id.in_(group_ids)) \
.all()
collaboration = Collaboration.query.get(collaboration_id)
user = User.query.get(current_user_id())
membership_expiry_date = data.get("membership_expiry_date")
if membership_expiry_date:
membership_expiry_date = datetime.fromtimestamp(data.get("membership_expiry_date"))
for administrator in administrators:
invitation = Invitation(hash=generate_token(), message=message, invitee_email=administrator,
collaboration=collaboration, user=user, status="open",
intended_role=intended_role, expiry_date=default_expiry_date(json_dict=data),
membership_expiry_date=membership_expiry_date, created_by=user.uid)
invitation = db.session.merge(invitation)
invitation.groups.extend(groups)
db.session.commit()
mail_collaboration_invitation({
"salutation": "Dear",
"invitation": invitation,
"base_url": current_app.app_config.base_url,
"wiki_link": current_app.app_config.wiki_link,
"recipient": administrator
}, collaboration, [administrator])
return None, 201
def organisation_invites_preview():
data = current_request.get_json()
message = data.get("message", None)
intended_role = data.get("intended_role", "manager")
organisation = Organisation.query.get(data["organisation_id"])
confirm_organisation_admin(organisation.id)
user = User.query.get(current_user_id())
invitation = munchify({
"user": user,
"organisation": organisation,
"intended_role": intended_role,
"message": message,
"hash": generate_token(),
"expiry_date": default_expiry_date(data)
})
html = mail_organisation_invitation({
"salutation": "Dear",
"invitation": invitation,
"base_url": current_app.app_config.base_url
}, organisation, [], preview=True)
return {"html": html}, 201
def test_default_expiry_date(self):
default_date = default_expiry_date()
res = default_date - datetime.datetime.today()
self.assertEqual(14, res.days)
def test_expiry_date(self):
date = default_expiry_date({"expires_at": time.time()})
res = date - datetime.datetime.today()
self.assertEqual(-1, res.days)
def seed(db, app_config, skip_seed=False, perf_test=False):
tables = reversed(metadata.sorted_tables)
for table in tables:
db.session.execute(table.delete())
db.session.execute(text("DELETE FROM audit_logs"))
db.session.commit()
if skip_seed:
return
john = User(uid="urn:john", name=john_name, email="*****@*****.**", username="******",
address="Postal 1234AA", confirmed_super_user=True)
unconfirmed_super_user_mike = User(uid="urn:mike", name=mike_name, email="*****@*****.**", username="******",
confirmed_super_user=False, application_uid="mike_application_uid",
schac_home_organisation="surfnet.nl")
peter = User(uid="urn:peter", name="Peter Doe", email="*****@*****.**", username="******")
mary = User(uid="urn:mary", name="Mary Doe", email="*****@*****.**", username="******",
schac_home_organisation=schac_home_organisation)
admin = User(uid="urn:admin", name=the_boss_name, email="*****@*****.**", username="******")
roger = User(uid="urn:roger", name=roger_name, email="*****@*****.**",
schac_home_organisation=schac_home_organisation, username="******")
harry = User(uid="urn:harry", name="Harry Doe", email="*****@*****.**", username="******")
james = User(uid="urn:james", name=james_name, email="*****@*****.**", username="******",
schac_home_organisation=schac_home_organisation_uuc, given_name="James")
sarah = User(uid="urn:sarah", name=sarah_name, email="*****@*****.**", application_uid="sarah_application_uid",
username="******")
betty = User(uid="urn:betty", name="betty", email="*****@*****.**", username="******")
jane = User(uid="urn:jane", name=jane_name, email="*****@*****.**", username="******",
entitlement="urn:mace:surf.nl:sram:allow-create-co")
paul = User(uid="urn:paul", name="Paul Doe", email="*****@*****.**", username="******",
schac_home_organisation="example.com")
service_admin = User(uid="urn:service_admin", name="Service Admin", email="*****@*****.**",
username="******", schac_home_organisation="service_admin.com")
# User seed for suspend testing
retention = app_config.retention
current_time = datetime.datetime.utcnow()
retention_date = current_time - datetime.timedelta(days=retention.allowed_inactive_period_days + 1)
user_inactive = User(uid="urn:inactive", name="inactive", email="*****@*****.**", username="******",
last_login_date=retention_date, last_accessed_date=retention_date,
schac_home_organisation="not.exists")
user_one_suspend = User(uid="urn:one_suspend", name="one_suspend", email="*****@*****.**",
username="******",
last_login_date=retention_date, last_accessed_date=retention_date)
user_two_suspend = User(uid="urn:two_suspend", name="two_suspend", email="*****@*****.**",
username="******",
last_login_date=retention_date, last_accessed_date=retention_date)
last_login_date = current_time - datetime.timedelta(days=retention.allowed_inactive_period_days + 30)
user_suspended = User(uid="urn:suspended", name="suspended", email="*****@*****.**", username="******",
last_login_date=last_login_date, last_accessed_date=last_login_date,
suspended=True)
deletion_date = current_time - datetime.timedelta(days=retention.remove_suspended_users_period_days + 30)
user_to_be_deleted = User(uid="urn:to_be_deleted", name="to_be_deleted", email="*****@*****.**",
last_login_date=deletion_date, last_accessed_date=deletion_date, username="******",
suspended=True)
_persist(db, john, unconfirmed_super_user_mike, mary, peter, admin, roger, harry, james, sarah, betty, jane,
user_inactive, user_one_suspend, user_two_suspend, user_suspended, user_to_be_deleted, paul,
service_admin)
ssh_key_john = SshKey(user=john, ssh_value="ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/nvjea1zJJNCnyUfT6HLcHD"
"hwCMp7uqr4BzxhDAjBnjWcgW4hZJvtLTqCLspS6mogCq2d0/31DU4DnGb2MO28"
"gk74MiVBtAQWI5+TsO5QHupO3V6aLrKhmn8xn1PKc9JycgjOa4BMQ1meomn3Z"
"mph6oo87MCtF2w75cxYEBJ9dJgHzZsn9mw+w8Z3H1vYnkcBT/i2MIK+qfsue/t"
"vEe8ybi+26bGQIZIPDcd+OmDUBxDLWyBwCbVOyRL5M6ywnWJINLdpIwfqCUk24"
"J1q1qiJ5eZu0m0uDcG5KRzgZ+grnSSYBwCx1xCunoGjMg7iwxEMgScD02nKtii"
"jxEpu8soL [email protected]")
ssh_key_james = SshKey(user=james, ssh_value="ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC/nvjea1zJJNCnyUfT6HLcHD"
"hwCMp7uqr4BzxhDAjBnjWcgW4hZJvtLTqCLspS6mogCq2d0/31DU4DnGb2MO28"
"gk74MiVBtAQWI5+TsO5QHupO3V6aLrKhmn8xn1PKc9JycgjOa4BMQ1meomn3Z"
"mph6oo87MCtF2w75cxYEBJ9dJgHzZsn9mw+w8Z3H1vYnkcBT/i2MIK+qfsue/t"
"vEe8ybi+26bGQIZIPDcd+OmDUBxDLWyBwCbVOyRL5M6ywnWJINLdpIwfqCUk24"
"J1q1qiJ5eZu0m0uDcG5KRzgZ+grnSSYBwCx1xCunoGjMg7iwxEMgScD02nKtii"
"jxEpu8soL [email protected]")
ssh_key_sarah = SshKey(user=sarah, ssh_value="some-lame-key")
_persist(db, ssh_key_john, ssh_key_james, ssh_key_sarah)
sarah_user_ip_network = UserIpNetwork(network_value="255.0.0.1/32", user=sarah)
sarah_other_user_ip_network = UserIpNetwork(network_value="255.0.0.9/24", user=sarah)
_persist(db, sarah_user_ip_network, sarah_other_user_ip_network)
resend_suspension_date = current_time - datetime.timedelta(retention.reminder_resent_period_days + 1)
user_one_suspend_notification1 = SuspendNotification(user=user_one_suspend, sent_at=resend_suspension_date,
is_primary=True)
resend_suspension_date = current_time - datetime.timedelta(retention.reminder_resent_period_days + 1)
user_two_suspend_notification1 = SuspendNotification(user=user_two_suspend, sent_at=resend_suspension_date,
is_primary=True)
resend_suspension_date = current_time - datetime.timedelta(retention.reminder_expiry_period_days + 1)
user_two_suspend_notification2 = SuspendNotification(user=user_two_suspend, sent_at=resend_suspension_date,
is_primary=False)
user_suspended_notification1 = SuspendNotification(user=user_suspended, sent_at=resend_suspension_date,
is_primary=True)
user_suspended_notification2 = SuspendNotification(user=user_suspended, sent_at=resend_suspension_date,
is_primary=False)
_persist(db, user_one_suspend_notification1, user_two_suspend_notification1, user_two_suspend_notification2,
user_suspended_notification1, user_suspended_notification2)
uuc = Organisation(name=uuc_name, short_name="uuc", identifier=str(uuid.uuid4()),
description="Unincorporated Urban Community", logo=read_image("uuc.jpeg"),
created_by="urn:admin", updated_by="urnadmin", category="Research",
on_boarding_msg="We are using **SRAM** to provide access to the following research tools:"
"\n- Wiki\n- Cloud\n- Awesome things...\n\nIf you want to join one of our "
"collaborations, please send a mail to [[email protected]](mailto:[email protected])."
"\n<br/><br/>\nHappy researching,\n\n*UUC support*",
collaboration_creation_allowed=True)
uva = Organisation(name=amsterdam_uva_name, description="University of Amsterdam", identifier=str(uuid.uuid4()),
created_by="urn:admin", updated_by="urn:admin", short_name="uva", logo=read_image("uva.jpg"),
category="University")
tue = Organisation(name="TUE", description="University of Eindhoven", identifier=str(uuid.uuid4()),
created_by="urn:admin", updated_by="urn:admin", short_name="tue", logo=read_image("tue.jpeg"),
category="University")
_persist(db, uuc, uva, tue)
shouuc = SchacHomeOrganisation(name=schac_home_organisation_uuc, organisation=uuc, created_by="urn:admin",
updated_by="urn:admin")
shouva = SchacHomeOrganisation(name=schac_home_organisation, organisation=uva, created_by="urn:admin",
updated_by="urn:admin")
_persist(db, shouuc, shouva)
api_key = ApiKey(hashed_secret=uuc_hashed_secret, organisation=uuc, description="API access",
created_by="urn:admin", updated_by="urn:admin")
_persist(db, api_key)
organisation_invitation_roger = OrganisationInvitation(message="Please join", hash=organisation_invitation_hash,
expiry_date=datetime.date.today() + datetime.timedelta(
days=14),
invitee_email="*****@*****.**", organisation=uuc,
intended_role="admin",
user=john)
organisation_invitation_pass = OrganisationInvitation(message="Let me please join as I "
"really, really, really \n really, "
"really, really \n want to...",
hash=organisation_invitation_expired_hash,
expiry_date=datetime.date.today() - datetime.timedelta(
days=21),
intended_role="admin",
invitee_email="*****@*****.**", organisation=uuc, user=john)
_persist(db, organisation_invitation_roger, organisation_invitation_pass)
organisation_membership_john = OrganisationMembership(role="admin", user=john, organisation=uuc)
organisation_membership_mary = OrganisationMembership(role="admin", user=mary, organisation=uuc)
organisation_membership_harry = OrganisationMembership(role="manager", user=harry, organisation=uuc)
organisation_membership_jane = OrganisationMembership(role="admin", user=jane, organisation=uva)
organisation_membership_paul_uuc = OrganisationMembership(role="manager", user=paul, organisation=uuc)
organisation_membership_paul_uva = OrganisationMembership(role="manager", user=paul, organisation=uva)
_persist(db, organisation_membership_john, organisation_membership_mary, organisation_membership_harry,
organisation_membership_jane, organisation_membership_paul_uuc, organisation_membership_paul_uva)
mail = Service(entity_id=service_mail_entity_id, name=service_mail_name, contact_email=john.email,
public_visible=True, automatic_connection_allowed=True, logo=read_image("email.jpeg"),
accepted_user_policy="https://google.nl", allowed_organisations=[uuc, uva], abbreviation="mail",
privacy_policy="https://privacy.org")
wireless = Service(entity_id="https://wireless", name=service_wireless_name, description="Network Wireless Service",
public_visible=True, automatic_connection_allowed=True, contact_email=john.email,
logo=read_image("wireless.png"), accepted_user_policy="https://google.nl", abbreviation="wire",
allowed_organisations=[uuc, uva], uri="https://wireless", non_member_users_access_allowed=True,
privacy_policy="https://privacy.org")
cloud = Service(entity_id=service_cloud_entity_id, name=service_cloud_name, description="SARA Cloud Service",
public_visible=True, automatic_connection_allowed=True, logo=read_image("cloud.jpg"),
allowed_organisations=[uuc, uva], abbreviation="cloud", privacy_policy="https://privacy.org",
token_enabled=True, hashed_token=secure_hash(service_cloud_token), token_validity_days=1)
storage = Service(entity_id=service_storage_entity_id, name=service_storage_name, allowed_organisations=[uuc, uva],
description="SURF Storage Service", logo=read_image("storage.jpeg"), abbreviation="storage",
public_visible=True, automatic_connection_allowed=True, white_listed=True,
accepted_user_policy="https://google.nl", privacy_policy="https://privacy.org")
wiki = Service(entity_id=service_wiki_entity_id, name=service_wiki_name, description="No more wiki's please",
uri="https://wiki.surfnet.nl/display/SCZ/Collaboration+Management+System+%28Dutch%3A+"
"SamenwerkingBeheerSysteem%29+-+SBS#CollaborationManagementSystem"
"(Dutch:SamenwerkingBeheerSysteem)-SBS-DevelopmentofnewopensourceCollaborationManagementSystem",
public_visible=True, automatic_connection_allowed=False, logo=read_image("wiki.jpeg"),
allowed_organisations=[uuc, uva], contact_email="*****@*****.**", abbreviation="wiki",
accepted_user_policy="https://google.nl", privacy_policy="https://privacy.org",
ldap_password="******"
"IddqWdPB.AEH2MBb1sggk8pDlrW/Xb00f8xa67cC0nfkuX.",
token_enabled=True, hashed_token=secure_hash(wiki_cloud_token), token_validity_days=365)
network = Service(entity_id=service_network_entity_id, name=service_network_name,
description="Network enabling service SSH access", address="Some address",
uri="https://uri", identity_type="SSH KEY", accepted_user_policy="https://aup",
contact_email="*****@*****.**", logo=read_image("network.jpeg"),
public_visible=False, automatic_connection_allowed=True, abbreviation="network",
allowed_organisations=[uuc], privacy_policy="https://privacy.org",
token_enabled=True, hashed_token=secure_hash(network_cloud_token), token_validity_days=365)
service_ssh_uva = Service(entity_id="service_ssh_uva", name=service_ssh_uva_name,
description="Uva SSH access",
uri="https://uri/ssh", identity_type="SSH KEY", accepted_user_policy="https://ssh",
contact_email="*****@*****.**", logo=read_image("ssh_uva.png"),
public_visible=False, automatic_connection_allowed=False, abbreviation="service_ssh",
allowed_organisations=[uva], research_scholarship_compliant=True,
code_of_conduct_compliant=True, sirtfi_compliant=True,
privacy_policy="https://privacy.org")
uuc_scheduler = Service(entity_id=uuc_scheduler_entity_id, name=uuc_scheduler_name,
accepted_user_policy="https://google.nl", abbreviation="uuc_scheduler",
description="UUC Scheduler Service", logo=read_image("scheduler_uuc.jpeg"),
public_visible=True, automatic_connection_allowed=False, allowed_organisations=[uuc],
privacy_policy="https://privacy.org")
_persist(db, mail, wireless, cloud, storage, wiki, network, service_ssh_uva, uuc_scheduler)
service_invitation_cloud = ServiceInvitation(message="Please join", hash=service_invitation_hash,
expiry_date=datetime.date.today() + datetime.timedelta(days=14),
invitee_email="*****@*****.**", service=cloud,
intended_role="admin",
user=john)
service_invitation_wiki_expired = ServiceInvitation(message="Please join",
hash=service_invitation_expired_hash,
expiry_date=datetime.date.today() - datetime.timedelta(
days=21),
intended_role="admin",
invitee_email="*****@*****.**", service=wiki, user=john)
_persist(db, service_invitation_cloud, service_invitation_wiki_expired)
service_membership_james = ServiceMembership(role="admin", user=james, service=cloud)
service_membership_service_admin_1 = ServiceMembership(role="admin", user=service_admin, service=storage)
service_membership_service_admin_2 = ServiceMembership(role="admin", user=service_admin, service=network)
_persist(db, service_membership_james, service_membership_service_admin_1, service_membership_service_admin_2)
service_group_mail = ServiceGroup(name=service_group_mail_name,
short_name="mail",
auto_provision_members=True,
description="Mail group",
service=mail)
service_group_wiki = ServiceGroup(name=service_group_wiki_name,
short_name="wiki",
auto_provision_members=False,
description="Wiki group",
service=wiki)
_persist(db, service_group_mail, service_group_wiki)
uuc.services.append(uuc_scheduler)
uuc.services.append(wiki)
ai_computing = Collaboration(name=ai_computing_name,
identifier=collaboration_ai_computing_uuid,
global_urn=f"ucc:{ai_computing_short_name}",
description="Artifical Intelligence computing for the Unincorporated Urban Community",
logo=read_image("computing.jpeg"),
organisation=uuc, services=[mail, network],
join_requests=[], invitations=[],
short_name=ai_computing_short_name,
website_url="https://www.google.nl",
accepted_user_policy="https://www.google.nl",
disclose_email_information=True,
disclose_member_information=True)
uva_research = Collaboration(name=uva_research_name,
short_name="research",
global_urn="uva:research",
identifier=collaboration_uva_researcher_uuid,
website_url="https://www.google.nl",
description="University of Amsterdam Research - Urban Crowd Control",
logo=read_image("research.jpeg"),
organisation=uva, services=[cloud, storage, wiki],
join_requests=[], invitations=[],
disclose_member_information=True)
uuc_teachers = Collaboration(name=uuc_teachers_name,
identifier=str(uuid.uuid4()),
global_urn=f"ucc:{uuc_teachers_name}",
website_url="https://www.google.nl",
description="UUC Teachers",
logo=read_image("teachers.jpeg"),
organisation=uuc, services=[],
join_requests=[], invitations=[],
short_name="uuc_teachers_short_name",
accepted_user_policy="https://www.uuc.nl/teachers")
uu_disabled_join_request = Collaboration(name=uu_disabled_join_request_name,
short_name="uu_short",
global_urn="uva:uu_short",
website_url="https://www.google.nl",
logo=read_image("uu.png"),
identifier=str(uuid.uuid4()),
description="UU", disable_join_requests=True, organisation=uva,
services=[],
join_requests=[], invitations=[])
_persist(db, ai_computing, uva_research, uu_disabled_join_request, uuc_teachers)
john_ai_computing = CollaborationMembership(role="member", user=john, collaboration=ai_computing)
admin_ai_computing = CollaborationMembership(role="admin", user=admin, collaboration=ai_computing)
jane_ai_computing = CollaborationMembership(role="member", user=jane, collaboration=ai_computing)
sarah_ai_computing = CollaborationMembership(role="member", user=sarah, collaboration=ai_computing)
betty_uuc_teachers = CollaborationMembership(role="member", user=betty, collaboration=uuc_teachers)
roger_uva_research = CollaborationMembership(role="member", user=roger, collaboration=uva_research)
peter_uva_research = CollaborationMembership(role="member", user=peter, collaboration=uva_research)
sarah_uva_research = CollaborationMembership(role="admin", user=sarah, collaboration=uva_research)
user_two_suspend_uva_research = CollaborationMembership(role="member", user=user_two_suspend,
collaboration=uva_research)
_persist(db, john_ai_computing, admin_ai_computing, roger_uva_research, peter_uva_research, sarah_uva_research,
jane_ai_computing, sarah_ai_computing, user_two_suspend_uva_research, betty_uuc_teachers)
admin_service_aups = [ServiceAup(user=admin, service=service, aup_url=service.accepted_user_policy) for service in
ai_computing.services]
_persist(db, *admin_service_aups)
group_researchers = Group(name=ai_researchers_group,
short_name=ai_researchers_group_short_name,
global_urn="uuc:ai_computing:ai_res",
identifier=str(uuid.uuid4()),
auto_provision_members=False,
description="Artifical computing researchers",
collaboration=ai_computing,
collaboration_memberships=[john_ai_computing,
jane_ai_computing])
group_developers = Group(name="AI developers",
short_name="ai_dev",
global_urn="uuc:ai_computing:ai_dev",
identifier=str(uuid.uuid4()),
auto_provision_members=False,
description="Artifical computing developers",
collaboration=ai_computing,
collaboration_memberships=[john_ai_computing])
group_science = Group(name=group_science_name,
short_name="science",
global_urn="uva:research:science",
identifier=str(uuid.uuid4()),
auto_provision_members=True,
description="Science",
collaboration=uva_research,
collaboration_memberships=[roger_uva_research])
_persist(db, group_researchers, group_developers, group_science)
join_request_john = JoinRequest(message="Please...", reference=join_request_reference, user=john,
collaboration=ai_computing, hash=generate_token(), status="open")
join_request_peter = JoinRequest(message="Please...", user=peter, collaboration=ai_computing,
hash=join_request_peter_hash, status="open")
join_request_mary = JoinRequest(message="Please...", user=mary, collaboration=ai_computing, hash=generate_token(),
status="open")
join_request_uva_research = JoinRequest(message="Please...", user=james, collaboration=uva_research,
hash=generate_token(), status="open")
_persist(db, join_request_john, join_request_peter, join_request_mary, join_request_uva_research)
invitation = Invitation(hash=invitation_hash_curious, invitee_email="*****@*****.**", collaboration=ai_computing,
expiry_date=default_expiry_date(), user=admin, message="Please join...",
intended_role="admin", status="open")
invitation_accepted = Invitation(hash=generate_token(), invitee_email="*****@*****.**", collaboration=ai_computing,
expiry_date=default_expiry_date(), user=admin, message="Please join...",
status="accepted", intended_role="admin")
invitation_uva = Invitation(hash=invitation_hash_uva, invitee_email="*****@*****.**", collaboration=uva_research,
expiry_date=default_expiry_date(), user=admin, message="Please join...",
intended_role="member", groups=[group_science], status="open")
invitation_noway = Invitation(hash=invitation_hash_no_way, invitee_email="*****@*****.**", collaboration=ai_computing,
expiry_date=datetime.date.today() - datetime.timedelta(days=21), user=admin,
intended_role="member", status="expired",
message="Let me please join as I really, really, really \n really, "
"really, really \n want to...")
_persist(db, invitation, invitation_accepted, invitation_uva, invitation_noway)
collaboration_request_1 = CollaborationRequest(name=collaboration_request_name, short_name="new_collaboration",
website_url="https://google.com", logo=read_image("request.jpg"),
status=STATUS_OPEN, message="For research", organisation=uuc,
requester=peter)
collaboration_request_2 = CollaborationRequest(name="Polse", short_name="polse",
website_url="https://www.pols.me/", logo=read_image("pols.jpg"),
status=STATUS_OPEN, message="For research", organisation=uuc,
requester=peter)
_persist(db, collaboration_request_1, collaboration_request_2)
service_connection_request_network = ServiceConnectionRequest(message="AI computing needs storage",
hash=network_service_connection_request_hash,
requester=admin, collaboration=ai_computing,
service=storage)
service_connection_request_wiki = ServiceConnectionRequest(message="UVA research needs ssh",
hash=ssh_service_connection_request_hash,
requester=sarah, collaboration=uva_research,
service=service_ssh_uva)
service_connection_request_wireless = ServiceConnectionRequest(message="AI computing needs wireless",
hash=wireless_service_connection_request_hash,
requester=jane, collaboration=ai_computing,
service=wireless, is_member_request=True)
_persist(db, service_connection_request_network, service_connection_request_wiki,
service_connection_request_wireless)
user_token_sarah = UserToken(name="token", description="some", hashed_token=secure_hash(sarah_user_token),
user=sarah, service=network)
_persist(db, user_token_sarah)
if perf_test:
users = []
for i in range(1, 84):
user = User(uid=f"urn:persoon:numero{i:03d}",
name=f"Piet Doe de {i}de",
email=f"pietdoe{i}@example.org",
username=f"pietdoe{i}",
schac_home_organisation="harderwijk.edu")
users.append(user)
_persist(db, *users)
for i in range(1, 40):
co = Collaboration(name=f"Samenwerking Numero {i}",
identifier=str(uuid.uuid4()),
short_name=f"co_nr_{i:03d}",
global_urn=f"ucc:co_nr_{i:03d}",
description="Een van vele COs",
logo=read_image("computing.jpeg"),
organisation=uuc,
services=[mail, network],
join_requests=[],
invitations=[],
website_url="https://www.google.nl",
accepted_user_policy="https://www.google.nl",
disclose_email_information=True,
disclose_member_information=True)
_persist(db, co)
_persist(db, CollaborationMembership(role="admin", user=users[2 * i + 0], collaboration=co))
_persist(db, CollaborationMembership(role="member", user=users[2 * i + 1], collaboration=co))
_persist(db, CollaborationMembership(role="member", user=users[2 * i + 2], collaboration=co))
_persist(db, CollaborationMembership(role="member", user=users[2 * i + 3], collaboration=co))
db.session.commit()
