Overhaul sim component for permission management.

src/primaite/simulator/domain/__init__.py

@@ -1,3 +1,3 @@
-from primaite.simulator.domain.account import Account
+from primaite.simulator.domain.account import Account, AccountGroup, AccountType
 
-__all__ = ["Account"]
+__all__ = ["Account", "AccountGroup", "AccountType"]

src/primaite/simulator/domain/account.py

@@ -1,6 +1,6 @@
 """User account simulation."""
 from enum import Enum
-from typing import Dict, List, Set, TypeAlias
+from typing import Callable, Dict, List, TypeAlias
 
 from primaite import getLogger
 from primaite.simulator.core import SimComponent
@@ -40,6 +40,14 @@ class AccountStatus(Enum):
     disabled = 2
 
 
+class PasswordPolicyLevel(Enum):
+    """Complexity requirements for account passwords."""
+
+    low = 1
+    medium = 2
+    high = 3
+
+
 class Account(SimComponent):
     """User accounts."""
 
@@ -55,38 +63,18 @@ class Account(SimComponent):
     "Account password."
     account_type: AccountType
     "Account Type, currently this can be service account (used by apps) or user account."
-    domain_groups: Set[AccountGroup] = []
-    "Domain-wide groups that this account belongs to."
-    local_groups: Dict[__temp_node, List[AccountGroup]]
-    "For each node, whether this account has local/admin privileges on that node."
     status: AccountStatus = AccountStatus.disabled
 
-    def add_to_domain_group(self, group: AccountGroup) -> None:
-        """
-        Add this account to a domain group.
-
-        If the account is already a member of this group, nothing happens.
-
-        :param group: The group to which to add this account.
-        :type group: AccountGroup
-        """
-        self.domain_groups.add(group)
-
-    def remove_from_domain_group(self, group: AccountGroup) -> None:
-        """
-        Remove this account from a domain group.
-
-        If the account is already not a member of that group, nothing happens.
-
-        :param group: The group from which this account should be removed.
-        :type group: AccountGroup
-        """
-        self.domain_groups.discard(group)
-
-    def enable_account(self):
+    def enable(self):
         """Set the status to enabled."""
         self.status = AccountStatus.enabled
 
-    def disable_account(self):
+    def disable(self):
         """Set the status to disabled."""
         self.status = AccountStatus.disabled
+
+    def _possible_actions(self) -> Dict[str, Callable[[List[str]], None]]:
+        return {
+            "enable": self.enable,
+            "disable": self.disable,
+        }

src/primaite/simulator/domain/controller.py

@@ -1,13 +1,54 @@
-from typing import Set, TypeAlias
+from typing import Dict, Final, List, TypeAlias
 
 from primaite.simulator.core import SimComponent
-from primaite.simulator.domain import Account
+from primaite.simulator.domain import Account, AccountGroup, AccountType
 
-__temp_node = TypeAlias()  # placeholder while nodes don't exist
+# placeholder while these objects don't yet exist
+__temp_node = TypeAlias()
+__temp_application = TypeAlias()
+__temp_folder = TypeAlias()
+__temp_file = TypeAlias()
 
 
 class DomainController(SimComponent):
     """Main object for controlling the domain."""
 
-    nodes: Set(__temp_node) = set()
-    accounts: Set(Account) = set()
+    # owned objects
+    accounts: List(Account) = []
+    groups: Final[List[AccountGroup]] = list(AccountGroup)
+
+    group_membership: Dict[AccountGroup, List[Account]]
+
+    # references to non-owned objects
+    nodes: List(__temp_node) = []
+    applications: List(__temp_application) = []
+    folders: List(__temp_folder) = []
+    files: List(__temp_file) = []
+
+    def register_account(self, account: Account) -> None:
+        """TODO."""
+        ...
+
+    def deregister_account(self, account: Account) -> None:
+        """TODO."""
+        ...
+
+    def create_account(self, username: str, password: str, account_type: AccountType) -> Account:
+        """TODO."""
+        ...
+
+    def rotate_all_credentials(self) -> None:
+        """TODO."""
+        ...
+
+    def rotate_account_credentials(self, account: Account) -> None:
+        """TODO."""
+        ...
+
+    def add_account_to_group(self, account: Account, group: AccountGroup) -> None:
+        """TODO."""
+        ...
+
+    def remove_account_from_group(self, account: Account, group: AccountGroup) -> None:
+        """TODO."""
+        ...