|
25 | 25 | from openstackclient.common import utils |
26 | 26 |
|
27 | 27 |
|
| 28 | +class AddRole(command.Command): |
| 29 | + """Add role command""" |
| 30 | + |
| 31 | + api = 'identity' |
| 32 | + log = logging.getLogger(__name__ + '.AddRole') |
| 33 | + |
| 34 | + def get_parser(self, prog_name): |
| 35 | + parser = super(AddRole, self).get_parser(prog_name) |
| 36 | + parser.add_argument( |
| 37 | + 'role', |
| 38 | + metavar='<role>', |
| 39 | + help='Name or ID of role to add', |
| 40 | + ) |
| 41 | + user_or_group = parser.add_mutually_exclusive_group() |
| 42 | + user_or_group.add_argument( |
| 43 | + '--user', |
| 44 | + metavar='<user>', |
| 45 | + help='Name or ID of user to assign a role', |
| 46 | + ) |
| 47 | + user_or_group.add_argument( |
| 48 | + '--group', |
| 49 | + metavar='<group>', |
| 50 | + help='Name or ID of group to assign a role', |
| 51 | + ) |
| 52 | + domain_or_project = parser.add_mutually_exclusive_group() |
| 53 | + domain_or_project.add_argument( |
| 54 | + '--domain', |
| 55 | + metavar='<domain>', |
| 56 | + help='Name or ID of domain where user or group resides', |
| 57 | + ) |
| 58 | + domain_or_project.add_argument( |
| 59 | + '--project', |
| 60 | + metavar='<project>', |
| 61 | + help='Name or ID of project where user or group resides', |
| 62 | + ) |
| 63 | + return parser |
| 64 | + |
| 65 | + def take_action(self, parsed_args): |
| 66 | + self.log.debug('take_action(%s)' % parsed_args) |
| 67 | + identity_client = self.app.client_manager.identity |
| 68 | + |
| 69 | + if (not parsed_args.user and not parsed_args.domain |
| 70 | + and not parsed_args.group and not parsed_args.project): |
| 71 | + sys.stdout.write("Role not updated, no arguments present \n") |
| 72 | + return |
| 73 | + |
| 74 | + role_id = utils.find_resource(identity_client.roles, |
| 75 | + parsed_args.role).id |
| 76 | + |
| 77 | + if (parsed_args.user and parsed_args.domain): |
| 78 | + user = utils.find_resource(identity_client.users, |
| 79 | + parsed_args.user) |
| 80 | + domain = utils.find_resource(identity_client.domains, |
| 81 | + parsed_args.domain) |
| 82 | + identity_client.roles.grant(role_id, user=user, domain=domain) |
| 83 | + return |
| 84 | + elif (parsed_args.user and parsed_args.project): |
| 85 | + user = utils.find_resource(identity_client.users, |
| 86 | + parsed_args.user) |
| 87 | + project = utils.find_resource(identity_client.projects, |
| 88 | + parsed_args.project) |
| 89 | + identity_client.roles.grant(role_id, user=user, project=project) |
| 90 | + return |
| 91 | + elif (parsed_args.group and parsed_args.project): |
| 92 | + group = utils.find_resource(identity_client.group, |
| 93 | + parsed_args.group) |
| 94 | + project = utils.find_resource(identity_client.projects, |
| 95 | + parsed_args.project) |
| 96 | + identity_client.roles.grant(role_id, group=group, project=project) |
| 97 | + return |
| 98 | + elif (parsed_args.group and parsed_args.domain): |
| 99 | + group = utils.find_resource(identity_client.group, |
| 100 | + parsed_args.group) |
| 101 | + domain = utils.find_resource(identity_client.domains, |
| 102 | + parsed_args.domain) |
| 103 | + identity_client.roles.grant(role_id, group=group, domain=domain) |
| 104 | + return |
| 105 | + else: |
| 106 | + return |
| 107 | + |
| 108 | + |
28 | 109 | class CreateRole(show.ShowOne): |
29 | 110 | """Create new role""" |
30 | 111 |
|
|
0 commit comments