blob: 78da7b2215952d8b3dd3e7e7b571ba3ead3f2f5b [file] [log] [blame]
Sapan Bhatia24836f12013-08-27 10:16:05 -04001import os
2import base64
Tony Mackae7f30c2013-09-25 12:46:50 -04003from django.db.models import F, Q
Sapan Bhatia24836f12013-08-27 10:16:05 -04004from planetstack.config import Config
Sapan Bhatia04c94ad2013-09-02 18:00:28 -04005from observer.openstacksyncstep import OpenStackSyncStep
Sapan Bhatia3d872e52014-11-11 21:41:12 -05006from core.models import User, UserDeployment, SitePrivilege, SiteDeployment
Sapan Bhatia24836f12013-08-27 10:16:05 -04007
8class SyncSitePrivileges(OpenStackSyncStep):
Tony Mackdacfb982013-09-24 21:57:16 -04009 requested_interval=0
10 provides=[SitePrivilege]
Tony Mack66646d52013-09-24 21:47:12 -040011
Sapan Bhatiab83643c2014-07-23 09:59:32 -040012 def fetch_pending(self, deleted):
13 # Deleting site privileges is not supported yet
14 if (deleted):
15 return []
16
Tony Mack31078dd2013-10-02 12:46:21 -040017 return SitePrivilege.objects.filter(Q(enacted__lt=F('updated')) | Q(enacted=None))
Tony Mack66646d52013-09-24 21:47:12 -040018
Tony Mack37146d22013-10-21 11:02:51 -040019 def sync_record(self, site_priv):
Tony Macke4be32f2014-03-11 20:45:25 -040020 # sync site privileges at all site deployments
Sapan Bhatiabfe716a2014-11-11 21:44:35 -050021 site_deployments = SiteDeployment.objects.filter(site=site_priv.site)
Tony Macke4be32f2014-03-11 20:45:25 -040022 for site_deployment in site_deployments:
Sapan Bhatiabfe716a2014-11-11 21:44:35 -050023 user_deployments = UserDeployment.objects.filter(deployment=site_deployment.deployment)
Tony Macke4be32f2014-03-11 20:45:25 -040024 if user_deployments:
25 kuser_id = user_deployments[0].kuser_id
Tony Mackf77f1402014-04-02 07:06:53 -040026 driver = self.driver.admin_driver(deployment=site_deployment.deployment.name)
Tony Macke4be32f2014-03-11 20:45:25 -040027 driver.add_user_role(kuser_id,
28 site_deployment.tenant_id,
Tony Mackf77f1402014-04-02 07:06:53 -040029 site_priv.role.role)