policyweaver

• policyweaver.core
  • policyweaver.core.auth
    • policyweaver.core.auth
      • AzureCLIClient
        • AzureCLIClient.Credential
        • AzureCLIClient.get_token()
        • AzureCLIClient.get_token_header()
        • AzureCLIClient.initialize()
      • ServicePrincipal
        • ServicePrincipal.ClientId
        • ServicePrincipal.ClientSecret
        • ServicePrincipal.Credential
        • ServicePrincipal.TenantId
        • ServicePrincipal.get_token()
        • ServicePrincipal.get_token_header()
        • ServicePrincipal.initialize()
  • policyweaver.core.common
    • policyweaver.core.common
      • PolicyWeaverCore
        • PolicyWeaverCore.map_policy()
      • SnapshotExport
        • SnapshotExport.dbx_export_snapshot()
        • SnapshotExport.fabric_export_snapshot()
        • SnapshotExport.unmapped_snapshot()
      • classproperty
  • policyweaver.core.conf
    • policyweaver.core.conf
      • Configuration
        • Configuration.configure_environment()
        • Configuration.retrieve_key_vault_credentials()
  • policyweaver.core.enum
    • policyweaver.core.enum
      • ColumnMaskType
        • ColumnMaskType.MASK_FOR_GROUP
        • ColumnMaskType.UNMASK_FOR_GROUP
        • ColumnMaskType.UNSUPPORTED
      • CommonBaseEnum
      • FabricMemberObjectType
        • FabricMemberObjectType.GROUP
        • FabricMemberObjectType.MANAGED_IDENTITY
        • FabricMemberObjectType.SERVICE_PRINCIPAL
        • FabricMemberObjectType.USER
      • FabricPolicyAccessType
        • FabricPolicyAccessType.EXECUTE
        • FabricPolicyAccessType.EXPLORE
        • FabricPolicyAccessType.READ
        • FabricPolicyAccessType.READ_ALL
        • FabricPolicyAccessType.RESHARE
        • FabricPolicyAccessType.WRITE
      • IamType
        • IamType.GROUP
        • IamType.MANAGED_IDENTITY
        • IamType.SERVICE_PRINCIPAL
        • IamType.USER
      • PermissionState
        • PermissionState.GRANT
      • PermissionType
        • PermissionType.SELECT
      • PolicyAttributeType
        • PolicyAttributeType.ACTION
        • PolicyAttributeType.PATH
      • PolicyEffectType
        • PolicyEffectType.PERMIT
      • PolicyWeaverConnectorType
        • PolicyWeaverConnectorType.BIGQUERY
        • PolicyWeaverConnectorType.SNOWFLAKE
        • PolicyWeaverConnectorType.UNITY_CATALOG
      • RowFilterType
        • RowFilterType.EXPLICIT_GROUP_MEMBERSHIP
        • RowFilterType.UNSUPPORTED
  • policyweaver.core.exception
    • policyweaver.core.exception
      • PolicyWeaverError
  • policyweaver.core.utility
    • policyweaver.core.utility
      • Utils
        • Utils.is_email()
        • Utils.is_uuid()
• policyweaver.core.api
  • policyweaver.core.api.fabric
    • policyweaver.core.api.fabric
      • FabricAPI
        • FabricAPI.get_workspace_name()
        • FabricAPI.list_data_access_policy()
        • FabricAPI.put_data_access_policy()
  • policyweaver.core.api.microsoftgraph
    • policyweaver.core.api.microsoftgraph
      • MicrosoftGraphClient
        • MicrosoftGraphClient.get_service_principal_by_id()
        • MicrosoftGraphClient.get_user_by_email()
  • policyweaver.core.api.rest
    • policyweaver.core.api.rest
      • RestAPIProxy
        • RestAPIProxy._handle_response()
        • RestAPIProxy.delete()
        • RestAPIProxy.get()
        • RestAPIProxy.post()
        • RestAPIProxy.put()
• policyweaver.models
  • policyweaver.models.common
    • policyweaver.models.common
      • CommonBaseModel
        • CommonBaseModel._abc_impl
        • CommonBaseModel._get_alias()
        • CommonBaseModel.hash_sha256
        • CommonBaseModel.model_config
        • CommonBaseModel.model_dump()
        • CommonBaseModel.model_dump_json()
  • policyweaver.models.config
    • policyweaver.models.config
      • CatalogItem
        • CatalogItem._abc_impl
        • CatalogItem.catalog
        • CatalogItem.catalog_schema
        • CatalogItem.model_config
        • CatalogItem.table
      • ColumnConstraintsConfig
        • ColumnConstraintsConfig._abc_impl
        • ColumnConstraintsConfig.columnlevelsecurity
        • ColumnConstraintsConfig.fallback
        • ColumnConstraintsConfig.model_config
      • ConstraintsConfig
        • ConstraintsConfig._abc_impl
        • ConstraintsConfig.columns
        • ConstraintsConfig.model_config
        • ConstraintsConfig.rows
      • FabricConfig
        • FabricConfig._abc_impl
        • FabricConfig.delete_default_reader_role
        • FabricConfig.fabric_role_suffix
        • FabricConfig.mirror_id
        • FabricConfig.mirror_name
        • FabricConfig.model_config
        • FabricConfig.policy_mapping
        • FabricConfig.tenant_id
        • FabricConfig.workspace_id
        • FabricConfig.workspace_name
      • KeyVaultConfig
        • KeyVaultConfig._abc_impl
        • KeyVaultConfig.authentication_method
        • KeyVaultConfig.model_config
        • KeyVaultConfig.name
        • KeyVaultConfig.use_key_vault
      • RowConstraintsConfig
        • RowConstraintsConfig._abc_impl
        • RowConstraintsConfig.fallback
        • RowConstraintsConfig.model_config
        • RowConstraintsConfig.rowlevelsecurity
      • ServicePrincipalConfig
        • ServicePrincipalConfig._abc_impl
        • ServicePrincipalConfig.client_id
        • ServicePrincipalConfig.client_secret
        • ServicePrincipalConfig.model_config
        • ServicePrincipalConfig.tenant_id
      • Source
        • Source._abc_impl
        • Source.get_schema_list()
        • Source.model_config
        • Source.name
        • Source.schemas
      • SourceMap
        • SourceMap._abc_impl
        • SourceMap.application_name
        • SourceMap.constraints
        • SourceMap.correlation_id
        • SourceMap.fabric
        • SourceMap.from_yaml()
        • SourceMap.keyvault
        • SourceMap.mapped_items
        • SourceMap.model_config
        • SourceMap.model_post_init()
        • SourceMap.service_principal
        • SourceMap.source
        • SourceMap.to_yaml()
        • SourceMap.type
      • SourceMapItem
        • SourceMapItem._abc_impl
        • SourceMapItem.mirror_table_name
        • SourceMapItem.model_config
      • SourceSchema
        • SourceSchema._abc_impl
        • SourceSchema.model_config
        • SourceSchema.name
        • SourceSchema.tables
  • policyweaver.models.export
    • policyweaver.models.export
      • ColumnConstraint
        • ColumnConstraint._abc_impl
        • ColumnConstraint.catalog_name
        • ColumnConstraint.column_actions
        • ColumnConstraint.column_effect
        • ColumnConstraint.column_names
        • ColumnConstraint.model_config
        • ColumnConstraint.schema_name
        • ColumnConstraint.table_name
      • Permission
        • Permission._abc_impl
        • Permission.model_config
        • Permission.name
        • Permission.objects
        • Permission.state
      • PermissionObject
        • PermissionObject._abc_impl
        • PermissionObject.app_id
        • PermissionObject.email
        • PermissionObject.entra_object_id
        • PermissionObject.id
        • PermissionObject.lookup_id
        • PermissionObject.model_config
        • PermissionObject.type
      • PermissionScope
        • PermissionScope._abc_impl
        • PermissionScope.catalog
        • PermissionScope.catalog_schema
        • PermissionScope.model_config
        • PermissionScope.name
        • PermissionScope.state
        • PermissionScope.table
      • Policy
        • Policy._abc_impl
        • Policy.model_config
        • Policy.permissions
      • PolicyExport
        • PolicyExport._abc_impl
        • PolicyExport.model_config
        • PolicyExport.policies
        • PolicyExport.source
        • PolicyExport.type
      • RolePolicy
        • RolePolicy._abc_impl
        • RolePolicy.columnconstraints
        • RolePolicy.model_config
        • RolePolicy.name
        • RolePolicy.permissionobjects
        • RolePolicy.permissionscopes
        • RolePolicy.rowconstraints
      • RolePolicyExport
        • RolePolicyExport._abc_impl
        • RolePolicyExport.model_config
        • RolePolicyExport.policies
        • RolePolicyExport.source
        • RolePolicyExport.type
      • RowConstraint
        • RowConstraint._abc_impl
        • RowConstraint.catalog_name
        • RowConstraint.filter_condition
        • RowConstraint.model_config
        • RowConstraint.schema_name
        • RowConstraint.table_name
  • policyweaver.models.fabric
    • policyweaver.models.fabric
      • ColumnConstraint
        • ColumnConstraint._abc_impl
        • ColumnConstraint.column_action
        • ColumnConstraint.column_effect
        • ColumnConstraint.column_names
        • ColumnConstraint.model_config
        • ColumnConstraint.table_path
      • Constraints
        • Constraints._abc_impl
        • Constraints.columns
        • Constraints.model_config
        • Constraints.rows
      • DataAccessPolicy
        • DataAccessPolicy._abc_impl
        • DataAccessPolicy.decision_rules
        • DataAccessPolicy.id
        • DataAccessPolicy.members
        • DataAccessPolicy.model_config
        • DataAccessPolicy.name
      • EntraMember
        • EntraMember._abc_impl
        • EntraMember.model_config
        • EntraMember.object_id
        • EntraMember.object_type
        • EntraMember.tenant_id
      • PolicyDecisionRule
        • PolicyDecisionRule._abc_impl
        • PolicyDecisionRule.constraints
        • PolicyDecisionRule.effect
        • PolicyDecisionRule.model_config
        • PolicyDecisionRule.permission
      • PolicyMember
        • PolicyMember._abc_impl
        • PolicyMember.item_access
        • PolicyMember.model_config
        • PolicyMember.source_path
      • PolicyMembers
        • PolicyMembers._abc_impl
        • PolicyMembers.entra_members
        • PolicyMembers.fabric_members
        • PolicyMembers.model_config
      • PolicyPermissionScope
        • PolicyPermissionScope._abc_impl
        • PolicyPermissionScope.attribute_name
        • PolicyPermissionScope.attribute_value_included_in
        • PolicyPermissionScope.model_config
      • RowConstraint
        • RowConstraint._abc_impl
        • RowConstraint.model_config
        • RowConstraint.table_path
        • RowConstraint.value
• policyweaver.plugins
  • policyweaver.plugins.databricks
    • policyweaver.plugins.databricks.api
      • DatabricksAPIClient
        • DatabricksAPIClient.__get_account()
        • DatabricksAPIClient.get_members()
        • DatabricksAPIClient.get_workspace_policy_map()
    • policyweaver.plugins.databricks.client
      • DatabricksPolicyWeaver
        • DatabricksPolicyWeaver.__build_role_policy()
        • DatabricksPolicyWeaver.__config_validation()
        • DatabricksPolicyWeaver.__init_environment()
        • DatabricksPolicyWeaver.dbx_account_users_group
        • DatabricksPolicyWeaver.dbx_all_permissions
        • DatabricksPolicyWeaver.dbx_catalog_read_prereqs
        • DatabricksPolicyWeaver.dbx_read_permissions
        • DatabricksPolicyWeaver.dbx_schema_read_prereqs
        • DatabricksPolicyWeaver.map_policy()
    • policyweaver.plugins.databricks.model
      • Account
        • Account._abc_impl
        • Account.acount_id
        • Account.groups
        • Account.lookup_group_by_name()
        • Account.lookup_service_principal_by_id()
        • Account.lookup_user_by_email()
        • Account.model_config
        • Account.service_principals
        • Account.users
      • BaseObject
        • BaseObject._abc_impl
        • BaseObject.id
        • BaseObject.model_config
        • BaseObject.name
      • Catalog
        • Catalog._abc_impl
        • Catalog.column_masks
        • Catalog.model_config
        • Catalog.row_filters
        • Catalog.schemas
        • Catalog.tables_with_masks
        • Catalog.tables_with_rls
      • ColumnMaskExtraction
        • ColumnMaskExtraction._abc_impl
        • ColumnMaskExtraction.column_mask_type
        • ColumnMaskExtraction.group_name
        • ColumnMaskExtraction.mask_pattern
        • ColumnMaskExtraction.model_config
      • DatabricksColumnMask
        • DatabricksColumnMask._abc_impl
        • DatabricksColumnMask.catalog_name
        • DatabricksColumnMask.column_name
        • DatabricksColumnMask.group_name
        • DatabricksColumnMask.mask_pattern
        • DatabricksColumnMask.mask_type
        • DatabricksColumnMask.model_config
        • DatabricksColumnMask.name
        • DatabricksColumnMask.routine_definition
        • DatabricksColumnMask.schema_name
        • DatabricksColumnMask.table_name
      • DatabricksGroup
        • DatabricksGroup._abc_impl
        • DatabricksGroup.external_id
        • DatabricksGroup.members
        • DatabricksGroup.model_config
      • DatabricksGroupMember
        • DatabricksGroupMember._abc_impl
        • DatabricksGroupMember.external_id
        • DatabricksGroupMember.model_config
        • DatabricksGroupMember.type
      • DatabricksRowFilter
        • DatabricksRowFilter._abc_impl
        • DatabricksRowFilter.catalog_name
        • DatabricksRowFilter.details
        • DatabricksRowFilter.model_config
        • DatabricksRowFilter.name
        • DatabricksRowFilter.routine_definition
        • DatabricksRowFilter.schema_name
        • DatabricksRowFilter.table_name
      • DatabricksServicePrincipal
        • DatabricksServicePrincipal._abc_impl
        • DatabricksServicePrincipal.application_id
        • DatabricksServicePrincipal.external_id
        • DatabricksServicePrincipal.model_config
      • DatabricksSourceConfig
        • DatabricksSourceConfig._abc_impl
        • DatabricksSourceConfig.account_api_token
        • DatabricksSourceConfig.account_id
        • DatabricksSourceConfig.model_config
        • DatabricksSourceConfig.workspace_url
      • DatabricksSourceMap
        • DatabricksSourceMap._abc_impl
        • DatabricksSourceMap.databricks
        • DatabricksSourceMap.model_config
        • DatabricksSourceMap.model_post_init()
      • DatabricksUser
        • DatabricksUser._abc_impl
        • DatabricksUser.email
        • DatabricksUser.external_id
        • DatabricksUser.model_config
      • DependencyMap
        • DependencyMap._abc_impl
        • DependencyMap.catalog
        • DependencyMap.catalog_all_cascade
        • DependencyMap.catalog_prerequisites
        • DependencyMap.catalog_schema
        • DependencyMap.key
        • DependencyMap.model_config
        • DependencyMap.privileges
        • DependencyMap.read_permissions
        • DependencyMap.schema_all_cascade
        • DependencyMap.schema_prerequisites
        • DependencyMap.table
      • Function
        • Function._abc_impl
        • Function.function_type
        • Function.model_config
        • Function.sql
      • FunctionMap
        • FunctionMap._abc_impl
        • FunctionMap.columns
        • FunctionMap.model_config
      • Privilege
        • Privilege._abc_impl
        • Privilege.get_principal_type()
        • Privilege.model_config
        • Privilege.principal
        • Privilege.privileges
      • PrivilegeItem
        • PrivilegeItem._abc_impl
        • PrivilegeItem.catalog
        • PrivilegeItem.catalog_schema
        • PrivilegeItem.grant
        • PrivilegeItem.model_config
        • PrivilegeItem.permission
        • PrivilegeItem.role
        • PrivilegeItem.table
        • PrivilegeItem.type
      • PrivilegeSnapshot
        • PrivilegeSnapshot._abc_impl
        • PrivilegeSnapshot.group_membership
        • PrivilegeSnapshot.maps
        • PrivilegeSnapshot.members
        • PrivilegeSnapshot.model_config
        • PrivilegeSnapshot.principal
        • PrivilegeSnapshot.type
      • PrivilegedObject
        • PrivilegedObject._abc_impl
        • PrivilegedObject.model_config
        • PrivilegedObject.privileges
      • RowFilterDetailGroup
        • RowFilterDetailGroup._abc_impl
        • RowFilterDetailGroup.group_name
        • RowFilterDetailGroup.model_config
        • RowFilterDetailGroup.return_value
      • RowFilterDetails
        • RowFilterDetails._abc_impl
        • RowFilterDetails.default_value
        • RowFilterDetails.groups
        • RowFilterDetails.model_config
        • RowFilterDetails.row_filter_type
      • RowFilterFunctionInfo
        • RowFilterFunctionInfo._abc_impl
        • RowFilterFunctionInfo.full_data_type
        • RowFilterFunctionInfo.fullname
        • RowFilterFunctionInfo.model_config
        • RowFilterFunctionInfo.name
        • RowFilterFunctionInfo.routine_definition
      • Schema
        • Schema._abc_impl
        • Schema.mask_functions
        • Schema.model_config
        • Schema.tables
      • Table
        • Table._abc_impl
        • Table.column_masks
        • Table.model_config
        • Table.row_filter
      • TableObject
        • TableObject._abc_impl
        • TableObject.catalog_name
        • TableObject.columns
        • TableObject.model_config
        • TableObject.privileges
        • TableObject.schema_name
        • TableObject.table_name
      • Workspace
        • Workspace._abc_impl
        • Workspace.catalog
        • Workspace.get_user_groups()
        • Workspace.get_workspace_identities()
        • Workspace.groups
        • Workspace.lookup_group_by_name()
        • Workspace.lookup_object_id()
        • Workspace.lookup_service_principal_by_id()
        • Workspace.lookup_user_by_email()
        • Workspace.lookup_user_by_id()
        • Workspace.model_config
        • Workspace.service_principals
        • Workspace.users