def revoke(ctx, **args): """revoke access grant or denial""" revoke_levels = args.pop('revoke_levels', ['granted']) for priv_level in access_levels.keys(): if access_levels[priv_level] in revoke_levels: for access_object in args.get('services'): access_group = get_access_group(access_object.lower(), priv_level) for uid in args.get('uid'): access_group.del_triple(make_triple(None, uid, None)) access_group.commit_changes()
def revoke_access(args): access_type = granted revoke_type = args.pop('revoke_type') if revoke_type == 'deny': access_type = denied for access_object in util.flatten_list(args.get('host', []) + args.get('service', [])): access_group = get_access_group(access_object.lower(), access_type) for uid in util.flatten_list(args.get('uid')): access_group.del_triple(make_triple(None, uid, None)) access_group.commit_changes()
def manage_access(args, priv_level): for access_object in args.get('services'): access_group = get_access_group(access_object.lower(), priv_level) for uid in args.get('uid'): access_group.add_triple([make_triple(None, uid, None)]) access_group.commit_changes()
def deny_access(args): for access_object in util.flatten_list(args.get('host', []) + args.get('service', [])): access_group = get_access_group(access_object.lower(), access_type=denied) for uid in util.flatten_list(args.get('uid')): access_group.add_triple(make_triple(None, uid, None)) access_group.commit_changes()
def grant_access(args): for access_object in util.flatten_list(args.get('host', []) + args.get('service', [])): access_group = get_access_group(access_object.lower()) for uid in util.flatten_list(args.get('uid')): access_group.add_triple([make_triple(None, uid, None)]) access_group.commit_changes()