Snippets for Blog: Solving a Set Cover Problem in Cloud IAM on GCP

set_cover_9.py

while remaining:
    for perm in remaining:
        # get set of roles which contain permission
        satisfy = perms_to_roles[perm]

        # sort roles by the number of permissions they contain, select role
        # with the most
        sorted_roles = sorted((role, perms_counts[role]) 
                              for role in satisfy)
        selected = sorted_roles[-1][0]

        # add this role to selected roles and recalculate remaining perms
        selected_roles.add(selected)
        remaining = remaining - roles_to_perms[selected]

        # we're recalculating remaining in-place, so we have to break
        break