Sapan Bhatia | 26d40bc | 2014-05-12 15:28:02 -0400 | [diff] [blame] | 1 | import os |
| 2 | import base64 |
| 3 | from django.db.models import F, Q |
| 4 | from planetstack.config import Config |
| 5 | from observer.openstacksyncstep import OpenStackSyncStep |
| 6 | from core.models.slice import * |
| 7 | from core.models.user import UserDeployments |
| 8 | |
| 9 | class SyncSliceMemberships(OpenStackSyncStep): |
| 10 | requested_interval=0 |
| 11 | provides=[SlicePrivilege] |
| 12 | |
| 13 | def fetch_pending(self): |
| 14 | return SlicePrivilege.objects.filter(Q(enacted__lt=F('updated')) | Q(enacted=None)) |
| 15 | |
| 16 | def sync_record(self, slice_memb): |
| 17 | # sync slice memberships at all slice deployments |
| 18 | slice_deployments = SliceDeployments.objects.filter(slice=slice_memb.slice) |
| 19 | for slice_deployment in slice_deployments: |
| 20 | if not slice_deployment.tenant_id: |
| 21 | continue |
| 22 | user_deployments = UserDeployments.objects.filter(deployment=slice_deployment.deployment, |
| 23 | user=slice_memb.user) |
| 24 | if user_deployments: |
| 25 | kuser_id = user_deployments[0].kuser_id |
| 26 | driver = self.driver.admin_driver(deployment=slice_deployment.deployment.name) |
| 27 | driver.add_user_role(kuser_id, |
| 28 | slice_deployment.tenant_id, |
| 29 | slice_memb.role.role) |