1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
|
import logging
import shelve
import sys
class User_DB(object):
"""
Simple user database:
- caller is responsible for calling init() & shutdown()
- users identified by string uid
- unique user email_address constraint enforced
"""
def __init__(self, db_path):
self.user_db_path = db_path
def dump_to_file__str(self, output_file_path=None):
"""
Dump record string representation to file
@param output_file_path: if not specified stdout is used
"""
def _write_record(f_out, uid, u):
f_out.write('uid: %s: %s\n' % (uid, str(u)))
if output_file_path:
with open(output_file_path, 'w') as f_out:
for uid, u in self.persistent_data_store.items():
_write_record(f_out, uid, u)
else:
for uid, u in self.persistent_data_store.items():
_write_record(sys.stdout, uid, u)
def init(self, mode='r'):
"""
@param mode: see anydbm.open()
"""
self.persistent_data_store = shelve.open(self.user_db_path, flag=mode, writeback=False) # local handling of writeback
def __process_return_value(self, uid, u):
"""
common lookup function return value processing:
- return dict copies
- sanitize sensitive data
"""
u_ret = u.copy()
del u_ret['hpasswd']
return uid, u_ret
def lookup_user__by_uid(self, uid):
assert str == type(uid)
u = self.persistent_data_store.get(uid)
if None == u:
raise Exception('no user found with uid=%s' % (uid))
return self.__process_return_value(uid, u)
def lookup_user__by_email_address(self, email_address):
for uid, u in self.persistent_data_store.items():
if u['email_address'] == email_address:
return self.__process_return_value(uid, u)
raise Exception('no user found with email_address=%s' % (email_address))
def user_add(self, user_name, email_address):
"""
@return: the string uid of the newly added user
"""
# apply unique email constraint
for uid, u in self.persistent_data_store.items():
if u['email_address'] == email_address:
raise Exception('existing user with identical email address: uid: %s ' % (uid))
uid = str(len(self.persistent_data_store) + 1)
u = {'user_name': user_name,
'email_address': email_address,
'hpasswd': None,
'role_set': []
}
self.persistent_data_store[uid] = u
return uid
def user_rm(self, uid):
del self.persistent_data_store[uid]
def user_add_role(self, uid, role):
u = self.persistent_data_store[uid]
u['role_set'].append(role)
self.persistent_data_store[uid] = u
def user_has_role(self, uid, role):
"""
@return: True if user roles contain passed role
"""
u = self.persistent_data_store[uid]
return role in u['role_set']
def shutdown(self):
self.persistent_data_store.close()
|
