-
Notifications
You must be signed in to change notification settings - Fork 14
Expand file tree
/
Copy pathGetUserNonOwnerDomainDriveACLs.py
More file actions
executable file
·54 lines (48 loc) · 2.5 KB
/
GetUserNonOwnerDomainDriveACLs.py
File metadata and controls
executable file
·54 lines (48 loc) · 2.5 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
#!/usr/bin/env python
"""
# Purpose: For a Google Drive User, get all drive file ACls for files shared with a list of specified domains
# except those indicating the user as owner
# 1: Use print filelist to get selected ACLS
# gam user testuser@domain.com print filelist id title permissions > filelistperms.csv
# 2: From that list of ACLs, output a CSV file with headers "Owner,driveFileId,driveFileTitle,permissionId,role,type,emailAddress,domain"
# that lists the driveFileIds and permissionIds for all ACLs from the specified domains except those indicating the user as owner
# $ python GetUserNonOwnerDomainDriveACLs.py filelistperms.csv localperms.csv
"""
import csv
import re
import sys
id_n_address = re.compile(r"permissions.(\d+).id")
# Substitute your domain(s) in the list below, e.g., domainList = ['domain.com',] domainList = ['domain1.com', 'domain2.com',]
domainList = []
if (len(sys.argv) > 2) and (sys.argv[2] != '-'):
outputFile = open(sys.argv[2], 'wb')
else:
outputFile = sys.stdout
outputCSV = csv.DictWriter(outputFile, ['Owner', 'driveFileId', 'driveFileTitle', 'permissionId', 'role', 'type', 'emailAddress', 'domain'], lineterminator='\n')
outputCSV.writeheader()
if (len(sys.argv) > 1) and (sys.argv[1] != '-'):
inputFile = open(sys.argv[1], 'rb')
else:
inputFile = sys.stdin
for row in csv.DictReader(inputFile):
for k, v in row.iteritems():
mg = id_n_address.match(k)
if mg and v:
perm_group = mg.group(1)
domain = row['permissions.{0}.domain'.format(perm_group)]
emailAddress = row['permissions.{0}.emailAddress'.format(perm_group)]
if (domain in domainList) and (row['permissions.{0}.type'.format(perm_group)] != 'user'
or row['permissions.{0}.role'.format(perm_group)] != 'owner'
or emailAddress != row['Owner']):
outputCSV.writerow({'Owner': row['Owner'],
'driveFileId': row['id'],
'driveFileTitle': row['title'],
'permissionId': 'id:{0}'.format(v),
'role': row['permissions.{0}.role'.format(perm_group)],
'type': row['permissions.{0}.type'.format(perm_group)],
'emailAddress': row['permissions.{0}.emailAddress'.format(perm_group)],
'domain': row['permissions.{0}.domain'.format(perm_group)]})
if inputFile != sys.stdin:
inputFile.close()
if outputFile != sys.stdout:
outputFile.close()