|
| 1 | +from pymilvus import connections, Role, utility |
| 2 | +from tabulate import tabulate |
| 3 | + |
| 4 | + |
| 5 | +class MilvusRole(object): |
| 6 | + def createRole(self, roleName): |
| 7 | + try: |
| 8 | + role = Role(name=roleName) |
| 9 | + role.create() |
| 10 | + except Exception as e: |
| 11 | + raise Exception(f"Create role error!{str(e)}") |
| 12 | + else: |
| 13 | + return f"Create role successfully!" |
| 14 | + |
| 15 | + def listRoles(self): |
| 16 | + try: |
| 17 | + res = utility.list_roles(include_user_info=True) |
| 18 | + data = [[role.role_name, role.users] for role in res.groups] |
| 19 | + print(tabulate(data, headers=["roleName", "users"], tablefmt="pretty")) |
| 20 | + except Exception as e: |
| 21 | + raise Exception(f"List role error!{str(e)}") |
| 22 | + else: |
| 23 | + return res.groups |
| 24 | + |
| 25 | + def dropRole(self, roleName): |
| 26 | + try: |
| 27 | + role = Role(name=roleName) |
| 28 | + role.drop() |
| 29 | + except Exception as e: |
| 30 | + raise Exception(f"Drop role error!{str(e)}") |
| 31 | + else: |
| 32 | + return f"Drop role successfully!" |
| 33 | + |
| 34 | + def grantRole(self, roleName, username): |
| 35 | + try: |
| 36 | + role = Role(name=roleName) |
| 37 | + role.add_user(username=username) |
| 38 | + users = role.get_users() |
| 39 | + print(tabulate([users], headers=["users"], tablefmt="pretty")) |
| 40 | + except Exception as e: |
| 41 | + raise Exception(f"Grant role error!{str(e)}") |
| 42 | + else: |
| 43 | + return users |
| 44 | + |
| 45 | + def revokeRole(self, roleName, username): |
| 46 | + try: |
| 47 | + role = Role(name=roleName) |
| 48 | + role.remove_user(username=username) |
| 49 | + users = role.get_users() |
| 50 | + print(tabulate([users], headers=["users"], tablefmt="pretty")) |
| 51 | + except Exception as e: |
| 52 | + raise Exception(f"Revoke role error!{str(e)}") |
| 53 | + else: |
| 54 | + return users |
| 55 | + |
| 56 | + def grantPrivilege( |
| 57 | + self, roleName, objectName, objectType, privilege, dbName="default" |
| 58 | + ): |
| 59 | + try: |
| 60 | + role = Role(name=roleName) |
| 61 | + role.grant( |
| 62 | + object=objectType, |
| 63 | + privilege=privilege, |
| 64 | + object_name=objectName, |
| 65 | + db_name=dbName, |
| 66 | + ) |
| 67 | + except Exception as e: |
| 68 | + raise Exception(f"Grant privilege error!{str(e)}") |
| 69 | + else: |
| 70 | + return f"Grant privilege successfully!" |
| 71 | + |
| 72 | + def revokePrivilege( |
| 73 | + self, roleName, objectName, objectType, privilege, dbName="default" |
| 74 | + ): |
| 75 | + try: |
| 76 | + role = Role(name=roleName) |
| 77 | + role.revoke( |
| 78 | + object=objectType, |
| 79 | + privilege=privilege, |
| 80 | + object_name=objectName, |
| 81 | + db_name=dbName, |
| 82 | + ) |
| 83 | + except Exception as e: |
| 84 | + raise Exception(f"Revoke privilege error!{str(e)}") |
| 85 | + else: |
| 86 | + return f"Revoke privilege successfully!" |
| 87 | + |
| 88 | + def listGrants(self, roleName, objectName, objectType): |
| 89 | + try: |
| 90 | + role = Role(name=roleName) |
| 91 | + grants = role.list_grant(object=objectType, object_name=objectName) |
| 92 | + headers = [ |
| 93 | + "Object", |
| 94 | + "Object Name", |
| 95 | + "DB Name", |
| 96 | + "Role Name", |
| 97 | + "Grantor Name", |
| 98 | + "Privilege", |
| 99 | + ] |
| 100 | + data = [ |
| 101 | + [ |
| 102 | + grant.object, |
| 103 | + grant.object_name, |
| 104 | + grant.db_name, |
| 105 | + grant.role_name, |
| 106 | + grant.grantor_name, |
| 107 | + grant.privilege, |
| 108 | + ] |
| 109 | + for grant in grants.groups |
| 110 | + ] |
| 111 | + |
| 112 | + print(tabulate(data, headers=headers, tablefmt="pretty")) |
| 113 | + except Exception as e: |
| 114 | + raise Exception(f"List grants error!{str(e)}") |
| 115 | + else: |
| 116 | + return data |
0 commit comments