models.py

from sqlalchemy import Column, String, Integer, Text, ForeignKey
from sqlalchemy.orm import relationship
from sqlalchemy.ext.declarative import declared_attr

from uffd.database import db
from uffd.user.models import User, Group

class Role(db.Model):
	__tablename__ = 'role'
	id = Column(Integer(), primary_key=True, autoincrement=True)
	name = Column(String(32), unique=True)
	description = Column(Text())
	members = relationship("RoleUser", backref="role")
	groups = relationship("RoleGroup", backref="role")

	def __init__(self, name='', description=''):
		self.name = name
		self.description = description

class LdapMapping():
	id = Column(Integer(), primary_key=True, autoincrement=True)
	dn = Column(String(128))
	@declared_attr
	def role_id(cls):
		return Column(ForeignKey('role.id'))
	ldapclass = None

	def get_ldap(self):
		return self.ldapclass.from_ldap_dn(dn)

	def set_ldap(self, value):
		self.dn = value['dn']

class RoleGroup(LdapMapping, db.Model):
	__tablename__ = 'role-group'
	ldapclass = User

class RoleUser(LdapMapping, db.Model):
	__tablename__ = 'role-user'
	ldapclass = Group