angstwad

export PATH="$HOME/.local/bin:$HOME/Projects/go/bin:$PATH"
export HISTSIZE=25000
export HISTCONTROL=ignoreboth
export CLICOLOR=1
export LSCOLORS=exfxcxdxbxexexabagacad
export PROMPT_COMMAND='history -a'
export GOPATH=$HOME/Projects/go

alias ls='ls -G'
alias ll='ls -lahG'

angstwad

import json

from googleapiclient import discovery

# Fetch most up to date role list and role descriptions from API
iam = discovery.build('iam', 'v1')

raw_role_data = {}

# Build initial request

angstwad

{
  "roles/accessapproval.approver": {
    "name": "roles/accessapproval.approver",
    "title": "Access Approval Approver",
    "description": "Ability to view or act...",
    "includedPermissions": [
      "accessapproval.requests.approve",
      "accessapproval.requests.dismiss",
      "accessapproval.requests.get",
      "Accessapproval.requests.list",

angstwad

import collections

roles_to_perms = collections.defaultdict(set)
perms_to_roles = collections.defaultdict(set)
perms_counts = collections.defaultdict(int)
unique_perms = set()

for role_name, role_data in raw_role_data.items():
    for perm in role_data.get('includedPermissions', tuple()):
        roles_to_perms[role_name].add(perm)

angstwad

roles_sorted_by_perms_asc = sorted(perms_counts.items(),
                                   key=lambda x: x[1])

angstwad

subset_roles = set()
for this_role, _ in roles_sorted_by_perms_asc:
    for other_role, other_perms in roles_to_perms.items():
        if this_role == other_role:
            continue

        this_perms = roles_to_perms[this_role]

        if this_perms.issubset(other_perms):
            subset_roles.add(this_role)

angstwad

role_with_most_perms = roles_sorted_by_perms_asc[-1][0]

angstwad

selected_roles = {role_with_most_perms,}

angstwad

remaining = unique_perms - roles_to_perms['roles/owner']

angstwad

while remaining:
    for perm in remaining:
        # get set of roles which contain permission
        satisfy = perms_to_roles[perm]

        # sort roles by the number of permissions they contain, select role
        # with the most
        sorted_roles = sorted((role, perms_counts[role]) 
                              for role in satisfy)
        selected = sorted_roles[-1][0]