view scripts/copy-user.py @ 5212:d4cc71beb102

Added support for SameSite cookie option for CSRF prevention This was an easy addon compared to the complexity of the CSRF nonce support. It only works in chromium browsers (Chrome, Opera...) at the moment. But there is recent activity on implementing it in firefox. Who know when edge/ie will adopt it. So csrf nonce and header analysis will be needed for a while.
author John Rouillard <rouilj@ieee.org>
date Sun, 19 Mar 2017 19:01:41 -0400
parents 6e9b9743de89
children 198b6e810c67
line wrap: on
line source

#!/usr/bin/env python
# Copyright (C) 2003 by Intevation GmbH
# Author:
# Thomas Arendsen Hein <thomas@intevation.de>
#
# This program is free software dual licensed under the GPL (>=v2)
# and the Roundup Licensing (see COPYING.txt in the roundup distribution).

"""
copy-user <instance-home> <instance-home> <userid> [<userid>...]

Copy one or more Roundup users from one tracker instance to another.
Example:
    copy-user /roundup/tracker1 /roundup/tracker2 `seq 3 10` 14 16
    (copies users 3, 4, 5, 6, 7, 8, 9, 10, 14 and 16)
"""

import sys
import roundup.instance


def copy_user(home1, home2, *userids):
    """Copy users which are listed by userids from home1 to home2"""

    copyattribs = ['username', 'password', 'address', 'realname', 'phone',
                   'organisation', 'alternate_addresses', 'roles', 'timezone']

    try:
        instance1 = roundup.instance.open(home1)
        print "Opened source instance: %s" % home1
    except:
        print "Can't open source instance: %s" % home1
        sys.exit(1)

    try:
        instance2 = roundup.instance.open(home2)
        print "Opened target instance: %s" % home2
    except:
        print "Can't open target instance: %s" % home2
        sys.exit(1)

    db1 = instance1.open('admin')
    db2 = instance2.open('admin')

    db1.tx_Source = "cli"
    db2.tx_Source = "cli"

    userlist = db1.user.list()
    for userid in userids:
        try:
            userid = str(int(userid))
        except ValueError, why:
            print "Not a numeric user id: %s  Skipping ..." % (userid,)
            continue
        if userid not in userlist:
            print "User %s not in source instance. Skipping ..." % userid
            continue

        user = {}
        for attrib in copyattribs:
            value = db1.user.get(userid, attrib)
            if value:
                user[attrib] = value
        try:
            db2.user.lookup(user['username'])
            print "User %s: Username '%s' exists in target instance. Skipping ..." % (userid, user['username'])
            continue
        except KeyError, why:
            pass
        print "Copying user %s (%s) ..." % (userid, user['username'])
        db2.user.create(**user)

    db2.commit()
    db2.close()
    print "Closed target instance."
    db1.close()
    print "Closed source instance."


if __name__ == "__main__":
    if len(sys.argv) < 4:
        print __doc__
        sys.exit(1)
    else:
        copy_user(*sys.argv[1:])


Roundup Issue Tracker: http://roundup-tracker.org/