From ca393054f39f03950f1632c69be92e7ca6c4cad3 Mon Sep 17 00:00:00 2001
From: pollutri <pollutri@afasystems.it>
Date: Tue, 5 May 2026 15:41:08 +0200
Subject: [PATCH] API per ottenere i gruppi natural se presenti dei utenti

---
 models/mnuser.py   |  6 +++++
 routes/majornet.py | 66 ++++++++++++++++++++++++++++++++++++++++++++--
 2 files changed, 70 insertions(+), 2 deletions(-)

diff --git a/models/mnuser.py b/models/mnuser.py
index 88fc88d..fa767af 100644
--- a/models/mnuser.py
+++ b/models/mnuser.py
@@ -21,3 +21,9 @@ class post_mnuser(BaseModel):
     
     return_code: int
     return_str: str
+
+
+class mnuser_groups(BaseModel):
+
+    uid: str
+    usergroups: List[str]
diff --git a/routes/majornet.py b/routes/majornet.py
index fcd7e07..1988d24 100644
--- a/routes/majornet.py
+++ b/routes/majornet.py
@@ -1,4 +1,4 @@
-from fastapi import APIRouter
+from fastapi import APIRouter, HTTPException
 from fastapi.param_functions import Depends
 from fastapi.security import OAuth2PasswordRequestForm
 from fastapi_login.exceptions import InvalidCredentialsException
@@ -6,6 +6,7 @@ from fastapi_login.exceptions import InvalidCredentialsException
 
 
 import xml.dom.minidom
+import xml.etree.ElementTree as ET
 from binascii import unhexlify
 from ldap3.protocol.formatters.formatters import format_sid
 import argparse
@@ -19,19 +20,26 @@ import hashlib
 import binascii
 from datetime import datetime, timedelta
 import subprocess
+from typing import List
 
 #from db import get_session
 from core.actions import get_user_by_name
 from core.security import manager
 from core.ldap import LDAPConsole
+from security import get_current_user
 
 from models.httpresponse import httpResponse400, httpResponse200, httpResponse500
-from models.mnuser import mnuser, post_mnuser
+from models.mnuser import mnuser, post_mnuser, mnuser_groups
 
 router = APIRouter(
     prefix="/majornet"
 )
 
+MNUSERS_XML_PATH = os.getenv(
+    "MNUSERS_XML_PATH",
+    os.getenv("MNUSERS_XML", "/conf/etc/useradmin/mnusers.xml"),
+)
+
 def cast_to_dict(cid):
     out = {}
     for key, value in cid.items():
@@ -89,6 +97,43 @@ def dict_path_access(d, path):
     return d
 
 
+def _element_text(element, tag_name):
+    child = element.find(tag_name)
+    if child is None or child.text is None:
+        return ""
+    return child.text.strip()
+
+
+def _split_usergroups(value):
+    if not value:
+        return []
+    return [group.strip() for group in value.split(",") if group.strip()]
+
+
+def _iter_mnuser_nodes(root):
+    user_nodes = root.findall(".//useradmin")
+    if user_nodes:
+        return user_nodes
+    return [node for node in root.iter() if node.find("uid") is not None]
+
+
+def read_mnusers_groups(file_path=MNUSERS_XML_PATH):
+    tree = ET.parse(file_path)
+    root = tree.getroot()
+    users = []
+
+    for node in _iter_mnuser_nodes(root):
+        uid = _element_text(node, "uid")
+        if not uid:
+            continue
+        users.append({
+            "uid": uid,
+            "usergroups": _split_usergroups(_element_text(node, "usergroups")),
+        })
+
+    return users
+
+
 
 
 
@@ -110,6 +155,23 @@ lc = LDAPConsole(debug=True) if (USE_LDAP and LDAPConsole) else None
 
 
 
+@router.get(
+    "/getUsersGroups",
+    response_model=List[mnuser_groups],
+    tags=["MajorNet"],
+    dependencies=[Depends(get_current_user)],
+)
+async def get_users_groups():
+    try:
+        return read_mnusers_groups()
+    except FileNotFoundError:
+        raise HTTPException(status_code=404, detail="mnusers.xml not found")
+    except ET.ParseError:
+        raise HTTPException(status_code=500, detail="Invalid mnusers.xml")
+    except OSError:
+        raise HTTPException(status_code=500, detail="Unable to read mnusers.xml")
+
+
 @router.get("/users/",tags=["MajorNet"], responses={200: {"model": httpResponse200}, 400: {"model": httpResponse400}, 500: {"model": httpResponse500}})
 async def get_majornet_users(current_user= Depends(manager)):