def create_awg_user(users, db_session):
s = db_session
for username in list(users.keys()):
user = query_for_user(session=s, username=username)
if not user:
user = User(username=username)
s.add(user)
projects = {}
for project_data in users[username]["projects"]:
auth_id = project_data["auth_id"]
p_name = project_data.get("name", auth_id)
project = s.query(Project).filter(Project.auth_id == auth_id).first()
if not project:
project = Project(name=p_name, auth_id=auth_id)
s.add(project)
projects[p_name] = project
groups = users[username].get("groups", [])
for group in groups:
group_name = group["name"]
group_desc = group["description"]
grp = s.query(Group).filter(Group.name == group_name).first()
if not grp:
grp = Group()
grp.name = group_name
grp.description = group_desc
s.add(grp)
s.flush()
UserToGroup(group=grp, user=user)
for projectname in group["projects"]:
gap = (
s.query(AccessPrivilege)
.join(AccessPrivilege.project)
.join(AccessPrivilege.group)
.filter(Project.name == projectname, Group.name == group_name)
.first()
)
if not gap:
project = projects[projectname]
gap = AccessPrivilege(project_id=project.id, group_id=grp.id)
s.add(gap)
s.flush()
ap = (
s.query(AccessPrivilege)
.join(AccessPrivilege.project)
.join(AccessPrivilege.user)
.filter(Project.name == projectname, User.username == user.username)
.first()
)
privilege = {"read"}
if not ap:
project = projects[projectname]
ap = AccessPrivilege(
project=project, user=user, privilege=privilege
)
s.add(ap)
s.flush()
return user.id, user.username
def load_non_google_user_data(db_session, test_user_d):
"""Add general, non-Google user data to Fence db."""
client = Client(
client_id=userd_dict["client_id"],
user_id=userd_dict["user_id"],
issued_at=420,
expires_at=42020,
redirect_uri="dclient.com",
grant_type="dgrant",
response_type="dresponse",
scope="dscope",
name="dclientname",
_allowed_scopes="dallscopes",
)
grp = Group(id=userd_dict["group_id"])
usr_grp = UserToGroup(user_id=userd_dict["user_id"],
group_id=userd_dict["group_id"])
db_session.add_all([client, grp, usr_grp])
db_session.commit()
def get_user_to_group():
return UserToGroup()