def revoke(ctx, **args):
"""revoke access grant or denial"""
revoke_levels = args.pop('revoke_levels', ['granted'])
for priv_level in access_levels.keys():
if access_levels[priv_level] in revoke_levels:
for access_object in args.get('services'):
access_group = get_access_group(access_object.lower(), priv_level)
for uid in args.get('uid'):
access_group.del_triple(make_triple(None, uid, None))
access_group.commit_changes()
def revoke_access(args):
access_type = granted
revoke_type = args.pop('revoke_type')
if revoke_type == 'deny':
access_type = denied
for access_object in util.flatten_list(args.get('host', []) + args.get('service', [])):
access_group = get_access_group(access_object.lower(), access_type)
for uid in util.flatten_list(args.get('uid')):
access_group.del_triple(make_triple(None, uid, None))
access_group.commit_changes()
def manage_access(args, priv_level):
for access_object in args.get('services'):
access_group = get_access_group(access_object.lower(), priv_level)
for uid in args.get('uid'):
access_group.add_triple([make_triple(None, uid, None)])
access_group.commit_changes()
def deny_access(args):
for access_object in util.flatten_list(args.get('host', []) + args.get('service', [])):
access_group = get_access_group(access_object.lower(), access_type=denied)
for uid in util.flatten_list(args.get('uid')):
access_group.add_triple(make_triple(None, uid, None))
access_group.commit_changes()
def grant_access(args):
for access_object in util.flatten_list(args.get('host', []) + args.get('service', [])):
access_group = get_access_group(access_object.lower())
for uid in util.flatten_list(args.get('uid')):
access_group.add_triple([make_triple(None, uid, None)])
access_group.commit_changes()
