misc-fred/authentic/import-users.py

62 lines
2.1 KiB
Python

import json
import sys
from django.contrib.auth import get_user_model
from django.contrib.contenttypes.models import ContentType
from django_rbac.utils import get_role_model, get_ou_model
from authentic2.models import Attribute, AttributeValue
User = get_user_model()
Role = get_role_model()
Ou = get_ou_model()
export = json.load(open(sys.argv[1]))
def get_role(role_dict):
kwargs = {'slug': role_dict['slug']}
if role_dict['is_service']:
kwargs['service__slug'] = role_dict['service_slug']
else:
kwargs['service__isnull'] = True
if role_dict['ou__slug']:
kwargs['ou__slug'] = role_dict['ou__slug']
else:
kwargs['ou__isnull'] = True
return Role.objects.get(**kwargs)
for user_dict in export['users']:
if user_dict.get('external_id'):
# don't create external users, hopefully they've already been
# synchronized.
try:
user = User.objects.get(
userexternalid__external_id=user_dict['external_id']['id'],
userexternalid__source=user_dict['external_id']['source']
)
except User.DoesNotExist:
print 'missing external:', user_dict['external_id']
continue
else:
user, created = User.objects.get_or_create(
uuid=user_dict['uuid'],
username=user_dict['username'],
ou=Ou.objects.get(slug=user_dict['ou__slug']) if user_dict['ou__slug'] else None)
if created:
user.password = user_dict['password']
for attribute in ('email', 'first_name', 'last_name', 'is_superuser', 'email_verified'):
setattr(user, attribute, user_dict.get(attribute))
user.save()
content_type = ContentType.objects.get_for_model(User)
for attribute_name, attribute_value in user_dict['attributes'].items():
Attribute.objects.get(name=attribute_name).set_value(user, attribute_value)
for role_dict in user_dict['roles']:
try:
user.roles.add(get_role(role_dict))
except Role.DoesNotExist:
print 'failed to add role "%s" to user "%s"' % (role_dict['name'], user)