mirror of
https://github.com/ansible/awx.git
synced 2026-02-22 05:30:18 -03:30
bad4e630ba
* Add `opa_query_path field` for Inventory, Organization and JobTemplate models (#6850) Add `opa_query_path` model field to Inventory, Organizatio and JobTemplate. Add migration file and expose opa_query_path field in the related API serializers. * Gather and evaluate `opa_query_path` fields and raise violation exceptions (#6864) gather and evaluate all opa query related to a job execution during policy evaluation phase * Add OPA_AUTH_CUSTOM_HEADERS support (#6863) * Extend policy input data serializers (#6890) * Extend policy input data serializers * Update help text for PaC related fields (#6891) * Remove encrypted from OPA_AUTH_CUSTOMER_HEADER Unable to encrypt a dict field --------- Co-authored-by: Jiří Jeřábek (Jiri Jerabek) <Jerabekjirka@email.cz> Co-authored-by: Alexander Saprykin <cutwatercore@gmail.com> Co-authored-by: Tina Tien <98424339+tiyiprh@users.noreply.github.com>
21 lines
747 B
Python
21 lines
747 B
Python
import logging
|
|
|
|
|
|
logger = logging.getLogger('awx.main.migrations')
|
|
|
|
|
|
def migrate_org_admin_to_use(apps, schema_editor):
|
|
logger.info('Initiated migration from Org admin to use role')
|
|
roles_added = 0
|
|
Organization = apps.get_model('main', 'Organization')
|
|
for org in Organization.objects.prefetch_related('admin_role__members').iterator(chunk_size=1000):
|
|
igs = list(org.instance_groups.all())
|
|
if not igs:
|
|
continue
|
|
for admin in org.admin_role.members.filter(is_superuser=False):
|
|
for ig in igs:
|
|
ig.use_role.members.add(admin)
|
|
roles_added += 1
|
|
if roles_added:
|
|
logger.info(f'Migration converted {roles_added} from organization admin to use role')
|