本 ArcGIS REST API 示例显示了如何在 ArcGIS Server 的内置安全存储中自动创建用户和角色。如果需要一次创建很多用户并为他们分配不同的角色，此脚本会十分有用。此脚本设计用于演示角色创建；但是，它也可以通过修改来适应已经存在的角色。
脚本需要保存为扩展名为.txt 并以逗号分隔的文本文件，如下所示：
User,Role,RoleType,Password,EMail,FullName,Description
JanieG,Administrators,ADMINISTER,admin123,janie@esritown.com,Janie Garza,Server administrator
BenO,Publishers,PUBLISH,pub123,ben@esritown.com,Ben Osgoode,Publisher from police department
KristyJ,Publishers,PUBLISH,pub123,kristy@esritown.com,Kristy Jones,Publisher from fire department
ClaudeM,Police Users,ACCESS,access123,claude@esritown.com,Claude Miller,Police department member
KimballS,Police Users,ACCESS,access123,kimball@esritown.com,Kimball Scott,Police department member
TomO,Fire Users,ACCESS,access123,tom@esritown.com,Tom O'Quinn,Fire department member上面的文件会创建六名用户和四个角色（Administrators、Publishers、Police Users、Fire Users）。稍后可以由服务器管理员为 Police Users 和 Fire Users 角色开启用于区分服务子集的可见性。
每一行代表一名用户，并依次包含以下项目：用户名、用户角色、授予角色的权限、初始密码、用户电子邮件地址、用户全名和用户描述。这些是您在管理器中创建用户或角色时所能够提供的属性类型。
当运行这样的脚本时，要注意初始密码并不安全，用户应该立刻更改密码。另外，小心地对每行中的角色名称和权限进行正确的匹配。
本示例没有为角色分配描述信息，也没有为一个用户分配多个角色；但是，使用 ArcGIS REST API 就可以执行这些操作。
# This script creates a bank of users and roles given a comma-separated text file
# They should be listed in the following format and saved in a file with a .txt extension:
#
# User,Role,RoleType,Password,EMail,FullName,Description
# John,Admins,ADMINISTER,changeme,johndoe@esri.com,John Doe,Server admin
# Jane,Publishers,PUBLISH,changeme,janedoe@esri.com,Jane Doe,Server publisher
# Etc.
import json, urllib,httplib
# For system tools import sys
# For reading passwords without echoing import getpass
def main(argv=None):
# Ask for admin/publisher user name and password username = raw_input("Enter user name: ") password = getpass.getpass("Enter password: ")
# Ask for server name & port serverName = raw_input("Enter server name: ") serverPort = 6080
# Input File with the Role and user information inFile = raw_input("Path to comma-delimited text file containing users and roles: ")
# InFile = r"C:\testing\agsUsersRoles.txt"
opnFile = open(inFile,'r')
# Dictionaries to store user and role information roles = {}
users = {} addUserRole = {}
# Read the next line ln = opnFile.readline()
# Counter to get through the column header of the input file num = 0 while ln:
if num == 0:
pass # File header else:
# Split the current line into list lnSplt = ln.split(",") # Build the Dictionary to add the roles roles[lnSplt[1]] = {lnSplt[2]:lnSplt[len(lnSplt) -1].rstrip()}
# Add the user information to a dictionary users["user" + str(num)] = {"username":lnSplt[0],"password":lnSplt[3],"fullname":lnSplt[5],"email":lnSplt[4],"description":lnSplt[-1].rstrip()}
# Store the user and role type in a dictionary if addUserRole.has_key(lnSplt[1]):
addUserRole[lnSplt[1]] = addUserRole[lnSplt[1]] + "," + lnSplt[0] else:
addUserRole[lnSplt[1]] = lnSplt[0]
# Prepare to move to the next line ln = opnFile.readline()
num +=1
# Get a token and connect token = getToken(username, password,serverName,serverPort) if token == "":
sys.exit(1)
# Call helper functions to add users and roles addRoles(roles, token,serverName,serverPort) addUsers(users,token,serverName,serverPort) addUserToRoles(addUserRole,token,serverName,serverPort)
def addRoles(roleDict, token, serverName, serverPort):
for item in roleDict.keys():
# Build the dictionary with the role name and description roleToAdd = {"rolename":item}
# Load the response jsRole = json.dumps(roleToAdd) # URL for adding a role addroleURL = "/arcgis/admin/security/roles/add"
params = urllib.urlencode({'token':token,'f':'json','Role':jsRole}) headers = {"Content-type": "application/x-www-form-urlencoded", "Accept": "text/plain"}
# Build the connection to add the roles to the server httpRoleConn = httplib.HTTPConnection(serverName, serverPort) httpRoleConn.request("POST",addroleURL,params,headers)
response = httpRoleConn.getresponse() if (response.status != 200):
httpRoleConn.close() print "Could not add role."
return else:
data = response.read() # Check that data returned is not an error object if not assertJsonSuccess(data): print "Error when adding role. " + str(data)
return else:
print "Added role successfully"
httpRoleConn.close()
# Assign a privilege to the recently added role assignAdminUrl = "/arcgis/admin/security/roles/assignPrivilege"
params = urllib.urlencode({'token':token,'f':'json',"rolename":item, "privilege":roleDict[item].keys()[0]}) headers = {"Content-type": "application/x-www-form-urlencoded", "Accept": "text/plain"}
# Build the connection to assign the privilege httpRoleAdminConn = httplib.HTTPConnection(serverName, serverPort) httpRoleAdminConn.request("POST",assignAdminUrl,params,headers)
response = httpRoleAdminConn.getresponse() if (response.status != 200):
httpRoleAdminConn.close() print "Could not assign privilege to role."
return else:
data = response.read() # Check that data returned is not an error object if not assertJsonSuccess(data): print "Error when assigning privileges to role. " + str(data)
return else:
print "Assigned privileges to role successfully"
httpRoleAdminConn.close()
def addUsers(userDict,token, serverName, serverPort):
for userAdd in userDict:
jsUser = json.dumps(userDict[userAdd]) # URL for adding a user addUserURL = "/arcgis/admin/security/users/add"
params = urllib.urlencode({'token':token,'f':'json','user':jsUser}) headers = {"Content-type": "application/x-www-form-urlencoded", "Accept": "text/plain"}
# Build the connection to add the users httpRoleConn = httplib.HTTPConnection(serverName, serverPort) httpRoleConn.request("POST",addUserURL,params,headers)
httpRoleConn.close()
def addUserToRoles(userRoleDict,token, serverName, serverPort):
for userRole in userRoleDict.keys():
# Using the current role build the URL to assign the right users to the role addUserURL = "/arcgis/admin/security/roles/addUsersToRole"
params = urllib.urlencode({'token':token,'f':'json',"rolename":userRole,"users":userRoleDict[userRole]}) headers = {"Content-type": "application/x-www-form-urlencoded", "Accept": "text/plain"}
# Build the connection httpRoleConn = httplib.HTTPConnection(serverName, serverPort) httpRoleConn.request("POST",addUserURL,params,headers)
response = httpRoleConn.getresponse() if (response.status != 200):
httpRoleConn.close() print "Could not add user to role."
return else:
data = response.read() # Check that data returned is not an error object if not assertJsonSuccess(data): print "Error when adding user to role. " + str(data)
return else:
print "Added user to role successfully"
httpRoleConn.close()
def getToken(username, password, serverName, serverPort):
# Token URL is typically http://server[:port]/arcgis/admin/generateToken tokenURL = "/arcgis/admin/generateToken"
params = urllib.urlencode({'username': username, 'password': password,'client': 'requestip', 'f': 'json'})
headers = {"Content-type": "application/x-www-form-urlencoded", "Accept": "text/plain"}
# Connect to URL and post parameters httpConn = httplib.HTTPConnection(serverName, serverPort) httpConn.request("POST", tokenURL, params, headers) # Read response response = httpConn.getresponse() if (response.status != 200):
httpConn.close() print "Error while fetching tokens from admin URL. Please check the URL and try again."
return else:
data = response.read() httpConn.close() # Check that data returned is not an error object if not assertJsonSuccess(data): return # Extract the token from it token = json.loads(data) return token['token']
# A function that checks that the input JSON object
# is not an error object. def assertJsonSuccess(data):
obj = json.loads(data) if 'status' in obj and obj['status'] == "error":
print "Error: JSON object returns an error. " + str(obj) return False else:
return True
# Script start if __name__ == "__main__":
sys.exit(main(sys.argv[1:]))