summaryrefslogtreecommitdiffstats
path: root/roles/badges/backend/files/revoke-authorization
blob: 5f3bf556361ed46f251419cea01f52dd0959a4f8 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
#!/usr/bin/env python
"""
This is a CLI script for revoking an authorization that a user has on a badge.
"""

import __main__
__main__.__requires__ = __requires__ = ["tahrir-api", "sqlalchemy>=0.7"];
import pkg_resources
pkg_resources.require(__requires__)

import argparse
import transaction
import sys

from tahrir_api.dbapi import TahrirDatabase
import tahrir_api.model

import fedmsg
import fedmsg.config

import fedbadges.utils


def parse_args():
    parser = argparse.ArgumentParser(__doc__)
    parser.add_argument('--user', default=None, help="A FAS username")
    parser.add_argument('--badge', default=None, help="A badge id")
    args = parser.parse_args()
    if not args.user:
        print "You must specify a FAS username."
        sys.exit(1)
    if not args.badge:
        print "You must specify a badge id."
        sys.exit(1)
    return args


def initialize():
    fm_config = fedmsg.config.load_config()
    fm_config['cert_prefix'] = 'fedbadges'
    fm_config['name'] = 'relay_inbound'
    fm_config['active'] = True
    fedmsg.init(**fm_config)
    uri = fm_config['badges_global']['database_uri']
    tahrir = TahrirDatabase(
        uri,
        notification_callback=fedbadges.utils.notification_callback,
    )
    return tahrir


def main(tahrir, nickname, badge_id):
    person = tahrir.get_person(nickname=nickname)
    badge = tahrir.get_badge(badge_id)

    if not person:
        print "No such person %r" % nickname
        sys.exit(1)

    if not badge:
        print "No such badge %r" % badge_id
        sys.exit(1)

    authz = tahrir.session.query(tahrir_api.model.Authorization)\
        .filter(tahrir_api.model.Authorization.badge_id==badge.id)\
        .filter(tahrir_api.model.Authorization.person_id==person.id)\
        .all()

    if not authz:
        print "%r does not have authz on %r badge..." % (nickname, badge_id)
        return

    print "Found these pre-existing entries:  %r" % authz
    print "removing", person.nickname, "from authz on %r." % badge_id
    try:
        transaction.begin()
        for item in authz:
            print "  deleting:", item
            tahrir.session.delete(item)
        tahrir.session.commit()
        transaction.commit()
    except Exception as e:
        transaction.abort()
        print "Failure:", e


if __name__ == '__main__':
    args = parse_args()
    tahrir = initialize()
    main(tahrir, args.user, args.badge)