applyauthmodel.py

#!/usr/bin/python
# -*- coding: utf-8 -*-
#
# applyauthmodel.py
# May 2023
#
#
# Change History
#
# 10MAY2023 Initial development
#
# To be used in conjunction with the ViyaAuthModel project (https://gitlab.sas.com/snztst/viyaauthmodel)
# Once an Auth Model Supplement document has been converted to csv files, that that collection of files
# may be applied to a Viya environment using this script.
#
# Usage examples:
# applyauthmodel.py -e <ENV> -d <DIR> 
# applyauthmodel.py -e <ENV> -d <DIR> --dryrun
# applyauthmodel.py -e <ENV> -d <DIR> --dryrun --replacerules
#
# ENV refers to the same ENV value that was used for the extraction from the Supplement doc.
# DIR refers to the directory that contains the csv files extracted.
#
import argparse, os, shutil

# setup command-line arguements
parser = argparse.ArgumentParser(description="Applies the CSV files output by the ViyaAuthModel project (https://gitlab.sas.com/snztst/viyaauthmodel) and applies them to a Viya environment.")
parser.add_argument("-e","--env", help="Name of environment that is to be extracted.",required='True')
parser.add_argument("-d","--directory", help="Directory that contains CSV auth files to be implemented.",required='True')
parser.add_argument("--dryrun", help="Compiles commands for review without running them.",action='store_true')
parser.add_argument("--replacerules", help="Changes the function of toggleviyarules call from \'disable\' to \'replace\' \
                    - creating replacement rules for the Viya service account \'sasapp\'.",action='store_true')
#parser.add_argument("-q","--quiet", help="Suppress the are you sure prompt when creating CASLIBs.", action='store_true')
args = parser.parse_args()
viyaenv=args.env
indir=args.directory
dryrun=args.dryrun
reprules=args.replacerules
#quietmode=args.quiet
viyaglobal="ALL"
cwd=os.getcwd()
caslibdir=os.path.join(indir, 'caslibs')


## Check for presence of dryrun arg
if dryrun:
    print("\n********** DRY-RUN MODE ********** \n")
    dryrunnote="Command preview: "


#### Stage 1 - Prework ####

# Checks for 'caslibs' dir existence and deletes dir if found
if os.path.exists(caslibdir):
    shutil.rmtree(caslibdir)
    pass

## Convert "<env> - CASLIB Auth.csv" to JSON files
## Uses createcaslibjson.py
print("Preparing CASLIB files...")
command=os.path.join(cwd, 'createcaslibjson.py -f "')
csvfile=os.path.join(indir, viyaenv+' - CASLIB Auth.csv"')
if not dryrun:
    os.system(command+csvfile)
else:
    print(dryrunnote+command+csvfile)

## Convert "<env> - CASLIB Auth (Perms).csv" to _authorization_ files
## Uses createcaslibsjsonauth.py
command=os.path.join(cwd, 'createcaslibjsonauth.py -f "')
csvfile=os.path.join(indir, viyaenv+' - CASLIB Auth (Perms).csv"')
if not dryrun:
    os.system(command+csvfile)
else:
    print(dryrunnote+command+csvfile)

# Moves caslibs dir to the directory location input when running applyauthmodel.py
if not dryrun:
    tempcaslibdir=os.path.join(cwd, 'caslibs')
    if os.path.exists(tempcaslibdir):
        shutil.move(tempcaslibdir,indir)
else:
    pass


#### End Stage 1 ###



#### Stage 2 - Setup Custom Groups ####

## Implement Capability Roles
## Uses creategroups.py to read "ALL - Cap. Roles.csv"
print("Implementing Capability Roles...")
command=os.path.join(cwd, 'creategroups.py --skipfirstrow -f "')
csvfile=os.path.join(indir, viyaglobal+' - Cap. Roles.csv"')
if not dryrun:
    os.system(command+csvfile)
else:
    print(dryrunnote+command+csvfile)

## Implement OAGs
## Uses creategroups.py to read "ALL - Org Access Groups (OAGs).csv"
print("Implementing OAGs...")
command=os.path.join(cwd, 'creategroups.py --skipfirstrow -f "')
csvfile=os.path.join(indir, viyaglobal+' - Org Access Groups (OAGs).csv"')
if not dryrun:
    os.system(command+csvfile)
else:
    print(dryrunnote+command+csvfile)

## Implement Personas
## Uses creategroups.py to read "<env> - Personas.csv"
print("Implementing Personas...")
command=os.path.join(cwd, 'creategroups.py --skipfirstrow -f "')
csvfile=os.path.join(indir, viyaenv+' - Personas.csv"')
if not dryrun:
    os.system(command+csvfile)
else:
    print(dryrunnote+command+csvfile)

## Implement Inheritance (Custom Group nesting)
## Uses creategroups.py to read "<env> - Inheritance Model.csv"
print("Implementing inheritance...")
command=os.path.join(cwd, 'creategroups.py --skipfirstrow -f "')
csvfile=os.path.join(indir, viyaenv+' - Inheritance Model.csv"')
if not dryrun:
    os.system(command+csvfile)
else:
    print(dryrunnote+command+csvfile)


#### End Stage 2 ####



#### Stage 3 - Setup Folders ####

## Implement folders
## Uses "createfolders.py" to read "<env> - Folder Security.csv"
print("Creating Viya folders...")
command=os.path.join(cwd, 'createfolders.py --skipfirstrow -f "')
csvfile=os.path.join(indir, viyaenv+' - Folder Security.csv"')
if not dryrun:
    os.system(command+csvfile)
else:
    print(dryrunnote+command+csvfile)

## Apply security to folders
## Uses "applyfolderauthorization.py" to read "<env> - Folder Security (Perms).csv"
print("Implementing security to Viya folders...")
command=os.path.join(cwd, 'applyfolderauthorization.py -f "')
csvfile=os.path.join(indir, viyaenv+' - Folder Security (Perms).csv"')
if not dryrun:
    os.system(command+csvfile)
else:
    print(dryrunnote+command+csvfile)


#### End Stage 3 ####



#### Stage 4 - Setup CASLIBs ####

## Implement CASLIBs and their authorisation
## Uses "importcaslibs.py" to read the contents of a "caslibs" directory
print("Implementing CASLIBs...")
command=os.path.join(cwd, 'importcaslibs.py -su -q -d '+indir+'/caslibs')
#if quietmode:
#    command=os.path.join(cwd, 'importcaslibs.py -su -q -d "')
#else:
#    command=os.path.join(cwd, 'importcaslibs.py -su -d "')
if not dryrun:
    os.system(command)
else:
    print(dryrunnote+command)


#### End Stage 4 ####



#### Stage 5 - Setup Rules ####

## Implement rules
## Uses "applyviyarules.py" to read "ALL - Rules2Json.csv"
print("Applying new rules...")
command=os.path.join(cwd, 'applyviyarules.py -f "')
csvfile=os.path.join(indir, viyaglobal+' - Rules2Json.csv"')
if not dryrun:
    os.system(command+csvfile)
else:
    print(dryrunnote+command+csvfile)

## Disable OOTB rules
## Uses "toggleviyarules.py" to read "ALL - Rules2Disable.csv"
print("Disabling old rules...")
if not reprules:
    command=os.path.join(cwd, 'toggleviyarules.py --skipfirstrow -o disable -f "')
else:
    command=os.path.join(cwd, 'toggleviyarules.py --skipfirstrow -o replace -p sasapp -ptype group -f "')
csvfile=os.path.join(indir, viyaglobal+' - Rules2Disable.csv"')
if not dryrun:
    os.system(command+csvfile)
else:
    print(dryrunnote+command+csvfile)


### End Stage 5 ####

if not dryrun:
    print("Auth Model implementation successfully completed.")
else:
    print("\n********** DRY-RUN COMPLETE ********** \n")