feat: Add django admin cmd for adding explicit plugin access (#22172)

Author: tiina303

posthog/management/commands/change_plugin_private_access.py

@@ -0,0 +1,67 @@
+import logging
+import uuid
+
+import structlog
+from django.core.management import CommandError
+from django.core.management.base import BaseCommand
+
+from posthog.models import Organization
+from posthog.models.plugin import Plugin
+
+logger = structlog.get_logger(__name__)
+logger.setLevel(logging.INFO)
+
+
+class Command(BaseCommand):
+    help = "Change Plugin private access (either add or remove depending on state)."
+
+    def add_arguments(self, parser):
+        parser.add_argument("--organization-id", default=None, type=uuid.UUID, help="Specify the organization.")
+        parser.add_argument("--plugin-id", default=None, type=int, help="Specify the plugin.")
+        parser.add_argument("--live-run", action="store_true", help="Run changes, default is dry-run")
+
+    def handle(self, *args, **options):
+        run(options)
+
+
+def run(options):
+    live_run = options["live_run"]
+
+    if options["plugin_id"] is None:
+        raise CommandError("You must specify --plugin-id to run this script")
+
+    if options["organization_id"] is None:
+        raise CommandError("You must specify --organization-id to run this script")
+
+    plugin_id = options["plugin_id"]
+    organization_id = options["organization_id"]
+
+    plugin = Plugin.objects.get(pk=plugin_id)
+    current_organizations = plugin.has_private_access.all()
+    logger.info(
+        f"Plugin {plugin.name} is currently explicitly allowed for organizations: [{', '.join([str(org.name) for org in current_organizations])}]"
+    )
+
+    org = Organization.objects.get(pk=organization_id)
+    org_current_plugins = org.plugin_set.all()
+    logger.info(
+        f"Organization {org.name} currently has explicit access to plugins: [{', '.join([str(plugin.name) for plugin in org_current_plugins])}]"
+    )
+
+    has_access = org in current_organizations
+    logger.info(
+        f"Target organization {organization_id} is named {org.name} currently {'has access' if has_access else 'does not have access'}"
+    )
+
+    if has_access:
+        if live_run:
+            plugin.has_private_access.remove(org)
+            logger.info("Removed access")
+        else:
+            logger.info("Skipping the access removal, pass --live-run to run it")
+    else:
+        if live_run:
+            plugin.has_private_access.add(org)
+            logger.info("Added access")
+        else:
+            logger.info("Skipping the access addition, pass --live-run to run it")