-
Notifications
You must be signed in to change notification settings - Fork 52
/
GetTeamDriveGuestMembers.py
executable file
·129 lines (120 loc) · 6.33 KB
/
GetTeamDriveGuestMembers.py
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
#!/usr/bin/env python3
"""
# Purpose: Show guest members for files on Team Drives.
# Note: This script can use GAM7 or Advanced GAM:
# https://github.com/GAM-team/GAM
# https://github.com/taers232c/GAMADV-XTD3
# Python: Use python or python3 below as appropriate to your system; verify that you have version 3
# $ python -V or python3 -V
# Python 3.x.y
# Note: This script requires Advanced GAM:
# https://github.com/taers232c/GAMADV-XTD3
# Python: Use python or python3 below as appropriate to your system; verify that you have version 3
# $ python -V or python3 -V
# Python 3.x.y
# Usage:
# For all Team Drives, start at step 1; For Team Drives selected by user/group/OU, start at step 7
# All Team Drives
# 1: Get all Team Drives.
# $ gam redirect csv ./TeamDrives.csv print teamdrives fields id,name
# 2: Get ACLs for all Team Drives
# $ gam redirect csv ./TeamDriveACLs.csv multiprocess csv ./TeamDrives.csv gam print drivefileacls "~id" fields domain,emailaddress,role,type
# 3: Customize GetTeamDriveOrganizers.py for this task:
# Set DOMAIN_LIST as required
# Set ONE_ORGANIZER = True
# Set SHOW_GROUP_ORGANIZERS = False
# Set SHOW_USER_ORGANIZERS = True
# 4: From that list of ACLs, output a CSV file with headers "id,name,organizers"
# that shows the organizers for each Team Drive
# $ python3 GetTeamDriveOrganizers.py TeamDriveACLs.csv TeamDrives.csv TeamDriveOrganizers.csv
# 5: Get ACLs for all team drive files
# $ gam config csv_input_row_filter "organizers:regex:^.+$" redirect csv ./TeamDriveFileACLs.csv multiprocess csv ./TeamDriveOrganizers.csv gam user "~organizers" print filelist select teamdriveid "~id" fields teamdriveid,id,name,permissions
# You can add: config csv_output_row_filter "permissions.*.permissionDetails.0.permissionType:regex:file" between gam and redirect to have gam do some pre-filtering.
# 6: Go to step 11
# Selected Team Drives
# 7: If you want Team Drives for a specific set of organizers, replace <UserTypeEntity> with your user selection in the command below
# $ gam redirect csv ./AllTeamDrives.csv <UserTypeEntity> print teamdrives role organizer fields id,name
# 8: Customize DeleteDuplicateRows.py for this task:
# Set ID_FIELD = 'id'
# 9: Delete duplicate Team Drives (some may have multiple organizers).
# $ python3 DeleteDuplicateRows.py ./AllTeamDrives.csv ./TeamDrives.csv
# 10: Get ACLs for all team drive files
# $ gam redirect csv ./TeamDriveFileACLs.csv multiprocess csv ./TeamDrives.csv gam user "~User" print filelist select teamdriveid "~id" fields teamdriveid,id,name,permissions
# You can add: config csv_output_row_filter "permissions.*.permissionDetails.0.permissionType:regex:file" between gam and redirect to have gam do some pre-filtering.
# Common code
# 11: From that list of ACLs, output a CSV file with headers "Owner,teamDriveId,teamDriveName,driveFileId,driveFileName,permissionId,role,type,emailAddress,domain"
# that lists the driveFileIds and permissionIds for all ACLs referencing domains/groups/users that are not members of the Team Drive
# $ python3 GetTeamDriveGuestMembers.py TeamDriveACLs.csv TeamDrives.csv TeamDriveFileACLs.csv TeamDriveGuestMembers.csv
"""
import csv
import re
import sys
FILE_NAME = 'name'
ALT_FILE_NAME = 'title'
QUOTE_CHAR = '"' # Adjust as needed
LINE_TERMINATOR = '\n' # On Windows, you probably want '\r\n'
PERMISSIONS_N_TYPE = re.compile(r"permissions.(\d+).type")
# TeamDriveGuestMembers.csv
outputFile = open(sys.argv[4], 'w', encoding='utf-8', newline='')
outputCSV = csv.DictWriter(outputFile, ['teamDriveId', 'teamDriveName', 'driveFileId', 'driveFileName',
'permissionId', 'role', 'type', 'emailAddress', 'domain'],
lineterminator=LINE_TERMINATOR, quotechar=QUOTE_CHAR)
outputCSV.writeheader()
# TeamDrives.csv
teamDrives = {}
inputFile = open(sys.argv[2], 'r', encoding='utf-8')
for row in csv.DictReader(inputFile, quotechar=QUOTE_CHAR):
teamDrives[row['id']] = {'name': row['name'], 'user': set(), 'group': set(), 'domain': set()}
inputFile.close()
# TeamDriveACLs.csv
inputFile = open(sys.argv[1], 'r', encoding='utf-8')
for row in csv.DictReader(inputFile, quotechar=QUOTE_CHAR):
driveId = row['id']
if driveId not in teamDrives:
teamDrives[driveId] = {'name': driveId, 'user': set(), 'group': set(), 'domain': set()}
teamDrive = teamDrives[driveId]
for k, v in iter(row.items()):
mg = PERMISSIONS_N_TYPE.match(k)
if mg and v:
permissions_N = mg.group(1)
if v == 'domain':
teamDrive[v].add(row[f'permissions.{permissions_N}.domain'].lower())
elif v in ['user', 'group']:
teamDrive[v].add(row[f'permissions.{permissions_N}.emailAddress'].lower())
inputFile.close()
# TeamDriveFileACLs.csv
inputFile = open(sys.argv[3], 'r', encoding='utf-8')
for row in csv.DictReader(inputFile, quotechar=QUOTE_CHAR):
driveId = row['driveId']
if driveId not in teamDrives:
teamDrives[driveId] = {'name': driveId, 'user': set(), 'group': set(), 'domain': set()}
teamDrive = teamDrives[driveId]
for k, v in iter(row.items()):
mg = PERMISSIONS_N_TYPE.match(k)
if mg and v:
permissions_N = mg.group(1)
if v == 'domain':
domain = row[f'permissions.{permissions_N}.domain'].lower()
if domain in teamDrive[v]:
continue
emailAddress = ''
elif v in ['user', 'group']:
if row.get(f'permissions.{permissions_N}.deleted') == 'True':
continue
emailAddress = row[f'permissions.{permissions_N}.emailAddress'].lower()
if emailAddress in teamDrive[v]:
continue
domain = emailAddress[emailAddress.find('@')+1:]
else: #anyone
continue
outputCSV.writerow({'teamDriveId': driveId,
'teamDriveName': teamDrive['name'],
'driveFileId': row['id'],
'driveFileName': row.get(FILE_NAME, row.get(ALT_FILE_NAME, 'Unknown')),
'permissionId': f'id:{row[f"permissions.{permissions_N}.id"]}',
'role': row[f'permissions.{permissions_N}.role'],
'type': v,
'emailAddress': emailAddress,
'domain': domain})
inputFile.close()
outputFile.close()