security-and-privacy/ldapcherry
security-and-privacy/ldapcherry
1
0
Fork 0
mirror of https://github.com/kakwa/ldapcherry synced 2024-11-22 09:24:21 +01:00
Code Releases Activity

list of roles and not a uniq role for get_groups

Browse Source
This commit is contained in:
kakwa 2015-06-18 10:04:20 +02:00
parent af5fd8eeae
commit 01de849204
2 changed files with 11 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
ldapcherry/roles.py
View File

@ -307,11 +307,17 @@ class Roles:
raise MissingRole(role)
return self.flatten[role]['display_name']
def get_groups(self, role):
def get_groups(self, roles):
"""get the list of groups from role"""
if not role in self.flatten:
raise MissingRole(role)
return self.flatten[role]['backends_groups']
ret = {}
for role in roles:
if not role in self.flatten:
raise MissingRole(role)
for b in self.flatten[role]['backends_groups']:
if b not in ret:
ret[b] = []
ret[b] = ret[b] + self.flatten[role]['backends_groups'][b]
return ret
def is_admin(self, roles):
"""determine from a list of roles if is ldapcherry administrator"""

2
tests/test_Roles.py
View File

@ -69,7 +69,7 @@ class TestError(object):
def testGetGroup(self):
inv = Roles('./tests/cfg/roles.yml')
res = inv.get_groups('users')
res = inv.get_groups(['users'])
expected = {
'ad': ['Domain Users'],
'ldap': ['cn=users,ou=group,dc=example,dc=com']