Skip to content

cattle_grid.account

cattle_grid.account.account

account_for_actor async 

account_for_actor(actor: str) -> Account | None

Given an actor_id returns the corresponding account or None

Source code in cattle_grid/account/account.py 
119
120
121
122
123
124
125
126
127
128
async def account_for_actor(actor: str) -> Account | None:
    """Given an actor_id returns the corresponding account or None"""
    actor_for_account = await ActorForAccount.get_or_none(actor=actor).prefetch_related(
        "account"
    )

    if not actor_for_account:
        return None

    return actor_for_account.account

account_with_name_password async 

account_with_name_password(
    name: str, password: str
) -> Account | None

Retrieves account for given name and password

Source code in cattle_grid/account/account.py 
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
async def account_with_name_password(name: str, password: str) -> Account | None:
    """Retrieves account for given name and password"""
    account = await Account.get_or_none(name=name)
    if account is None:
        return None

    try:
        password_hasher.verify(account.password_hash, password)
    except argon2.exceptions.VerifyMismatchError:
        logger.warning("Got wrong password for %s", name)
        return None

    # Implement rehash?
    # https://argon2-cffi.readthedocs.io/en/stable/howto.html

    return account

actor_for_actor_id async 

actor_for_actor_id(actor_id: str) -> ActorForAccount | None

Returns the ActorForAccount for the given actor_id

Source code in cattle_grid/account/account.py 
149
150
151
async def actor_for_actor_id(actor_id: str) -> ActorForAccount | None:
    """Returns the ActorForAccount for the given actor_id"""
    return await ActorForAccount.get_or_none(actor=actor_id)

add_actor_to_account async 

add_actor_to_account(
    account: Account, actor: Actor, name: str = "added"
) -> None

Adds the actor to the account

Source code in cattle_grid/account/account.py 
131
132
133
134
135
async def add_actor_to_account(
    account: Account, actor: Actor, name: str = "added"
) -> None:
    """Adds the actor to the account"""
    await ActorForAccount.create(account=account, actor=actor.actor_id, name=name)

add_actor_to_group async 

add_actor_to_group(
    actor: ActorForAccount, group_name: str
) -> None

Adds the actor to the group

Source code in cattle_grid/account/account.py 
138
139
140
async def add_actor_to_group(actor: ActorForAccount, group_name: str) -> None:
    """Adds the actor to the group"""
    await ActorGroup.create(actor=actor, name=group_name)

add_permission async 

add_permission(account: Account, permission: str) -> None

Adds permission to account

Source code in cattle_grid/account/account.py 
101
102
103
async def add_permission(account: Account, permission: str) -> None:
    """Adds permission to account"""
    await Permission.create(account=account, name=permission)

create_account async 

create_account(
    name: str,
    password: str,
    settings=get_settings(),
    permissions: list[str] = [],
    meta_information: dict[str, str] = {},
) -> Account | None

Creates a new account for name and password

Source code in cattle_grid/account/account.py 
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
async def create_account(
    name: str,
    password: str,
    settings=get_settings(),
    permissions: list[str] = [],
    meta_information: dict[str, str] = {},
) -> Account | None:
    """Creates a new account for name and password"""
    if await Account.get_or_none(name=name):
        raise AccountAlreadyExists("Account already exists")

    if not re.match(settings.account.allowed_name_regex, name):  # type: ignore
        raise InvalidAccountName("Account name does not match allowed format")

    if name in settings.account.forbidden_names:  # type: ignore
        raise InvalidAccountName("Account name is forbidden")

    account = await Account.create(
        name=name,
        password_hash=password_hasher.hash(password),
        meta_information=meta_information,
    )
    for permission in permissions:
        await add_permission(account, permission)
    return account

delete_account async 

delete_account(
    name: str,
    password: str | None = None,
    force: bool = False,
) -> None

Deletes account for given account name and password

If password is wrong or account does not exist, raises a WrongPassword exception

Source code in cattle_grid/account/account.py 
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
async def delete_account(
    name: str, password: str | None = None, force: bool = False
) -> None:
    """Deletes account for given account name and password

    If password is wrong or account does not exist,
    raises a WrongPassword exception"""
    if force:
        account = await Account.get_or_none(name=name)
    else:
        if not password:
            raise ValueError("Password must be provided if not forcing deletion")
        account = await account_with_name_password(name, password)

    if account is None:
        raise WrongPassword(
            "Either the account does not exist or the password is wrong"
        )

    await account.fetch_related("actors")
    active_actors = [a for a in account.actors if a.status == ActorStatus.active]
    if len(active_actors) > 0:
        logger.warning(
            "Deleting account with active actors: %s", [a.actor for a in active_actors]
        )

    await account.delete()

group_names_for_actor async 

group_names_for_actor(actor: ActorForAccount) -> list[str]

Returns the group names for an actor

Source code in cattle_grid/account/account.py 
143
144
145
146
async def group_names_for_actor(actor: ActorForAccount) -> list[str]:
    """Returns the group names for an actor"""
    await actor.fetch_related("groups")
    return [g.name for g in actor.groups]

list_permissions 

list_permissions(account: Account) -> list[str]

Returns list of permissions for account

Source code in cattle_grid/account/account.py 
114
115
116
def list_permissions(account: Account) -> list[str]:
    """Returns list of permissions for account"""
    return [p.name for p in account.permissions]

remove_permission async 

remove_permission(
    account: Account, permission: str
) -> None

Removes permission from account

Source code in cattle_grid/account/account.py 
106
107
108
109
110
111
async def remove_permission(account: Account, permission: str) -> None:
    """Removes permission from account"""
    p = await Permission.get_or_none(account=account, name=permission)

    if p:
        await p.delete()

cattle_grid.account.permissions

allowed_base_urls async 

allowed_base_urls(account: Account) -> list[str]

Returns the set of base_urls the account is allowed to use to create an actor

Source code in cattle_grid/account/permissions.py 
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
async def allowed_base_urls(account: Account) -> list[str]:
    """Returns the set of base_urls the account
    is allowed to use to create an actor"""
    settings = global_container.config
    await account.fetch_related("permissions")

    permissions = list_permissions(account)

    if "admin" in permissions:
        frontend_settings = settings.get("frontend", {})  # type:ignore

        return frontend_settings.get("base_urls", [])

    permission_settings = settings.get("permissions", {})  # type:ignore

    return sum(
        (permission_settings.get(p, {}).get("base_urls", []) for p in permissions),
        [],
    )

can_create_actor_at_base_url async 

can_create_actor_at_base_url(
    account: Account, base_url
) -> bool

Checks if the account is allowed to create an actor at the base url

Source code in cattle_grid/account/permissions.py 
28
29
30
31
32
33
async def can_create_actor_at_base_url(account: Account, base_url) -> bool:
    """Checks if the account is allowed to create an actor
    at the base url"""
    allowed_urls = await allowed_base_urls(account)

    return base_url in allowed_urls