Initial commit

jira_access_problem.py

@@ -0,0 +1,45 @@
+"""Handle a JIRA access problem ticket."""
+
+# This automation ONLY fires when the ticket is created. It does NOT
+# respond to comments. The purpose of the automation is to see if there
+# are any obvious reasons why access isn't possible and either advise
+# on the steps to take or take them automatically.
+
+import shared.globals
+from shared import custom_fields, shared_ldap, shared_sd
+
+def create(ticket_data):
+    """ React to the ticket being created """
+    # Is this for the reporter or someone else?
+    cf_email_address = custom_fields.get("Email Address")
+    person = shared_sd.get_field(ticket_data, cf_email_address)
+    if person is None:
+        person = shared.globals.REPORTER
+    if person is not None:
+        person = person.strip().lower().encode('utf-8')
+    # Do they have an account in LDAP?
+    person_dn = shared_ldap.find_single_object_from_email(person)
+    if person_dn is None:
+        shared_sd.post_comment(
+            f"There isn't an account in Linaro Login with {person} as the email address.\r\n"
+            "Please go to https://servicedesk.linaro.org/servicedesk/customer/portal/3/create/120 "
+            "and create an *external account* for this person.\r\n"
+            "It will then be necessary to go to "
+            "https://servicedesk.linaro.org/servicedesk/customer/portal/3/create/142 to request "
+            "access to JIRA once the account has been created.", True)
+        shared_sd.resolve_ticket()
+        return
+    if "ou=mailing" in person_dn:
+        shared_sd.post_comment(
+            f"The email address {person} belongs to a group. "
+            "Please submit a new ticket with a person's email address.", True)
+        shared_sd.resolve_ticket()
+    # Does this account have access to JIRA?
+    jira_access = shared_ldap.get_group_membership(
+        "cn=jira-users,ou=mailing,ou=groups,dc=linaro,dc=org")
+    if person_dn not in jira_access:
+        shared_sd.post_comment(
+            f"{person} hasn't been granted access to JIRA.\r\n"
+            "Please go to https://servicedesk.linaro.org/servicedesk/customer/portal/3/create/142 "
+            "to request access for them.", True)
+        shared_sd.resolve_ticket()