forked from taers232c/GAM-Scripts3
-
Notifications
You must be signed in to change notification settings - Fork 0
/
GetSharedWithListOfDisabledUsersDriveACLs.py
executable file
·88 lines (78 loc) · 3.23 KB
/
GetSharedWithListOfDisabledUsersDriveACLs.py
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
#!/usr/bin/env python3
"""
# Purpose: For a Google Drive User(s), show all drive file ACLs for files shared exclusively with a list of users from a CSV file
# Note: This script can use Basic or Advanced GAM:
# https://github.com/GAM-team/GAM
# https://github.com/taers232c/GAMADV-XTD3
# Customize: Set USER_HEADERS
# Python: Use python or python3 below as appropriate to your system; verify that you have version 3
# $ python -V or python3 -V
# Python 3.x.y
# Usage:
# 1: Prepare a CSV file with a list of user email addresses; set USER_HEADERS to identify the column(s) containing the email addresses
# $ more Users.csv
# email
# ...
# $ more QuadUsers.csv
# email1,email2,email3,email4
# ...
# 2: Get ACLs for all files, if you don't want all users, replace all users with your user selection in the command below
# If you don't want all files, use query/fullquery
# $ Basic: gam all users print filelist id title permissions owners > filelistperms.csv
# $ Advanced: gam config auto_batch_min 1 redirect csv ./filelistperms.csv multiprocess all users print filelist fields id,title,permissions,owners.emailaddress
# 3: From that list of ACLs, output a CSV file with the same headers as the input CSV file
# only including files that are shared exclusively with the users in Users.csv
# $ python3 GetSharedWithListOfDisabledUsersDriveACLs.py filelistperms.csv disabledusersperms.csv Users.csv
# 4: Inspect disabledusersperms.csv, verify that it makes sense and then proceed
"""
import csv
import re
import sys
FILE_NAME = 'name'
ALT_FILE_NAME = 'title'
# The headers in the CSV file that contain the user email addresses
USER_HEADERS = ['email'] # USER_HEADERS = ['email1', 'email2', 'email3', 'email4']
QUOTE_CHAR = '"' # Adjust as needed
LINE_TERMINATOR = '\n' # On Windows, you probably want '\r\n'
PERMISSIONS_N_TYPE = re.compile(r"permissions.(\d+).type")
userSet = set()
inputFile = open(sys.argv[3], 'r', encoding='utf-8')
for row in csv.DictReader(inputFile, quotechar=QUOTE_CHAR):
for header in USER_HEADERS:
user = row[header].lower()
if user:
userSet.add(user)
inputFile.close()
inputFile = open(sys.argv[1], 'r', encoding='utf-8')
inputCSV = csv.DictReader(inputFile, quotechar=QUOTE_CHAR)
outputFile = open(sys.argv[2], 'w', encoding='utf-8', newline='')
outputCSV = csv.DictWriter(outputFile, inputCSV.fieldnames, lineterminator=LINE_TERMINATOR, quotechar=QUOTE_CHAR)
outputCSV.writeheader()
for row in inputCSV:
shared = False
for k, v in iter(row.items()):
mg = PERMISSIONS_N_TYPE.match(k)
if mg:
if v in {'anyone', 'domain', 'group'}:
break
permissions_N = mg.group(1)
if row.get(f'permissions.{permissions_N}.deleted') == 'True':
continue
if row[f'permissions.{permissions_N}.role'] == 'owner':
continue
emailAddress = row[f'permissions.{permissions_N}.emailAddress'].lower()
if not emailAddress:
continue
if emailAddress not in userSet:
break
shared = True
else:
if shared:
outputCSV.writerow(row)
inputFile.close()
outputFile.close()