cmem-cmemc 24.2.0rc1__tar.gz → 24.3.0__tar.gz

{cmem_cmemc-24.2.0rc1 → cmem_cmemc-24.3.0}/LICENSE

@@ -199,4 +199,4 @@
    distributed under the License is distributed on an "AS IS" BASIS,
    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
    See the License for the specific language governing permissions and
-   limitations under the License.
+   limitations under the License.

cmem_cmemc-24.3.0/PKG-INFO

@@ -0,0 +1,89 @@
+Metadata-Version: 2.1
+Name: cmem-cmemc
+Version: 24.3.0
+Summary: Command line client for eccenca Corporate Memory
+Home-page: https://eccenca.com/go/cmemc
+License: Apache-2.0
+Author: eccenca
+Author-email: cmempy-developer@eccenca.com
+Requires-Python: >=3.10,<4.0
+Classifier: Development Status :: 5 - Production/Stable
+Classifier: Environment :: Console
+Classifier: Intended Audience :: Customer Service
+Classifier: Intended Audience :: Developers
+Classifier: Intended Audience :: Information Technology
+Classifier: Intended Audience :: Science/Research
+Classifier: Intended Audience :: System Administrators
+Classifier: License :: OSI Approved :: Apache Software License
+Classifier: Natural Language :: English
+Classifier: Operating System :: OS Independent
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3 :: Only
+Classifier: Topic :: Database
+Classifier: Topic :: Software Development :: Testing
+Classifier: Topic :: Utilities
+Requires-Dist: beautifulsoup4 (>=4.12.3,<5.0.0)
+Requires-Dist: certifi (>=2024.2.2)
+Requires-Dist: click (>=8.1.7,<9.0.0)
+Requires-Dist: click-didyoumean (>=0.3.1,<0.4.0)
+Requires-Dist: click-help-colors (>=0.9.4,<0.10.0)
+Requires-Dist: cmem-cmempy (==24.3.0)
+Requires-Dist: configparser (>=6.0.1,<7.0.0)
+Requires-Dist: jinja2 (>=3.1.4,<4.0.0)
+Requires-Dist: junit-xml (>=1.9,<2.0)
+Requires-Dist: natsort (>=8.4.0,<9.0.0)
+Requires-Dist: packaging (>=24.2,<25.0)
+Requires-Dist: pip (>=24.3.1,<25.0.0)
+Requires-Dist: prometheus-client (>=0.21.0,<0.22.0)
+Requires-Dist: pygments (>=2.18.0,<3.0.0)
+Requires-Dist: pyjwt (>=2.9.0,<3.0.0)
+Requires-Dist: python-dateutil (>=2.9.0.post0,<3.0.0)
+Requires-Dist: requests (>=2.32.3,<3.0.0)
+Requires-Dist: rich (>=13.9.1,<14.0.0)
+Requires-Dist: six (>=1.16.0,<2.0.0)
+Requires-Dist: smart-open (>=7.0.5,<8.0.0)
+Requires-Dist: timeago (>=1.0.16,<2.0.0)
+Requires-Dist: treelib (>=1.7.0,<2.0.0)
+Requires-Dist: urllib3 (>=2.2.3,<3.0.0)
+Description-Content-Type: text/markdown
+
+# cmemc
+
+cmemc is the official command line client for [eccenca Corporate Memory](https://documentation.eccenca.com/).
+
+[![version][version-shield]][changelog] [![Python Versions][python-shield]][pypi] [![eccenca Corporate Memory][cmem-shield]][cmem]
+
+[![teaser][teaser-image]][cmemc-docu]
+
+## Installation
+
+In order to install the cmemc, run:
+
+    pipx install cmem-cmemc
+
+Of course you can install cmemc also with pip, but we recommend [pipx](https://pypa.github.io/pipx/) for normal desktop usage.
+
+## Configuration and Usage
+
+cmemc is intended for System Administrators and Linked Data Expert, who wants to automate and remote control activities on eccenca Corporate Memory.
+
+The cmemc manual including basic usage pattern, configuration as well as a command reference is available at:
+
+[https://eccenca.com/go/cmemc](https://eccenca.com/go/cmemc)
+
+cmemc only works with Python 3 and refuses to work with Python 2.x.
+In addition to that, cmemc will warn you in case an untested Python environment is used.
+
+
+[version-shield]: https://badge.fury.io/py/cmem-cmemc.svg
+[changelog]: https://pypi.org/project/cmem-cmemc/#history
+[python-shield]: https://img.shields.io/pypi/pyversions/cmem-cmemc.svg
+[pypi]: https://pypi.org/project/cmem-cmemc/
+[cmem]: https://documentation.eccenca.com
+[cmem-shield]: https://img.shields.io/badge/made%20for-eccenca%20Corporate%20Memory-blue?logo=data:image/svg%2bxml;base64,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
+[teaser-image]: https://documentation.eccenca.com/24.1/automate/cmemc-command-line-interface/configuration/completion-setup/22.1-cmemc-create-dataset.gif
+[cmemc-docu]: https://eccenca.com/go/cmemc
+

cmem_cmemc-24.3.0/README-public.md

@@ -0,0 +1,36 @@
+# cmemc
+
+cmemc is the official command line client for [eccenca Corporate Memory](https://documentation.eccenca.com/).
+
+[![version][version-shield]][changelog] [![Python Versions][python-shield]][pypi] [![eccenca Corporate Memory][cmem-shield]][cmem]
+
+[![teaser][teaser-image]][cmemc-docu]
+
+## Installation
+
+In order to install the cmemc, run:
+
+    pipx install cmem-cmemc
+
+Of course you can install cmemc also with pip, but we recommend [pipx](https://pypa.github.io/pipx/) for normal desktop usage.
+
+## Configuration and Usage
+
+cmemc is intended for System Administrators and Linked Data Expert, who wants to automate and remote control activities on eccenca Corporate Memory.
+
+The cmemc manual including basic usage pattern, configuration as well as a command reference is available at:
+
+[https://eccenca.com/go/cmemc](https://eccenca.com/go/cmemc)
+
+cmemc only works with Python 3 and refuses to work with Python 2.x.
+In addition to that, cmemc will warn you in case an untested Python environment is used.
+
+
+[version-shield]: https://badge.fury.io/py/cmem-cmemc.svg
+[changelog]: https://pypi.org/project/cmem-cmemc/#history
+[python-shield]: https://img.shields.io/pypi/pyversions/cmem-cmemc.svg
+[pypi]: https://pypi.org/project/cmem-cmemc/
+[cmem]: https://documentation.eccenca.com
+[cmem-shield]: https://img.shields.io/badge/made%20for-eccenca%20Corporate%20Memory-blue?logo=data:image/svg%2bxml;base64,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
+[teaser-image]: https://documentation.eccenca.com/24.1/automate/cmemc-command-line-interface/configuration/completion-setup/22.1-cmemc-create-dataset.gif
+[cmemc-docu]: https://eccenca.com/go/cmemc

{cmem_cmemc-24.2.0rc1 → cmem_cmemc-24.3.0}/cmem_cmemc/__init__.py

@@ -1,4 +1,5 @@
 """The main command line interface."""
+
 import contextlib
 import os
 import sys
@@ -10,8 +11,8 @@ import click
 import requests.exceptions
 
 from cmem_cmemc import completion
+from cmem_cmemc.command_group import CmemcGroup
 from cmem_cmemc.commands import (
-    CmemcGroup,
     admin,
     config,
     dataset,
@@ -26,7 +27,7 @@ from cmem_cmemc.exceptions import InvalidConfigurationError
 from cmem_cmemc.manual_helper.graph import print_manual_graph
 from cmem_cmemc.manual_helper.multi_page import create_multi_page_documentation
 from cmem_cmemc.manual_helper.single_page import print_manual
-from cmem_cmemc.utils import extract_error_message, get_version
+from cmem_cmemc.utils import check_python_version, extract_error_message, get_version
 
 CMEMC_VERSION = get_version()
 
@@ -38,16 +39,10 @@ if os.environ.get("_CMEMC_COMPLETE", "") == "zsh_source":
 
 version = sys.version_info
 PYTHON_VERSION = f"{version.major}.{version.minor}.{version.micro}"
-PYTHON_EXPECTED = "3.11"
-PYTHON_GOT = f"{version.major}.{version.minor}"
-if PYTHON_EXPECTED != PYTHON_GOT and not CONTEXT.is_completing():
-    CONTEXT.echo_warning(
-        "Warning: You are running cmemc under a non-tested python "
-        f"environment (expected {PYTHON_EXPECTED}, got {PYTHON_GOT})"
-    )
+check_python_version(ctx=CONTEXT)
 
 # set the user-agent environment for the http request headers
-os.environ["CMEM_USER_AGENT"] = f"cmemc/{CMEMC_VERSION} " f"(Python {PYTHON_VERSION})"
+os.environ["CMEM_USER_AGENT"] = f"cmemc/{CMEMC_VERSION} (Python {PYTHON_VERSION})"
 
 # https://github.com/pallets/click/blob/master/examples/complex/complex/cli.py
 CONTEXT_SETTINGS = {"auto_envvar_prefix": "CMEMC", "help_option_names": ["-h", "--help"]}
@@ -123,11 +118,11 @@ def cli(
     ctx.obj.set_config_file(config_file)
     try:
         ctx.obj.set_connection(connection)
-    except InvalidConfigurationError as error:
+    except InvalidConfigurationError:
         # if config is broken still allow for "config edit"
         # means: do not forward this exception if "config edit"
         if " ".join(sys.argv).find("config edit") == -1:
-            raise ValueError("Broken config") from error
+            raise
 
 
 cli.add_command(admin.admin)

cmem_cmemc-24.3.0/cmem_cmemc/command.py

@@ -0,0 +1,20 @@
+"""cmemc Click Command"""
+
+from click_help_colors import HelpColorsCommand
+
+
+class CmemcCommand(HelpColorsCommand):
+    """Wrapper click.Command class to have a single extension point.
+
+    Currently, wrapped click extensions and additional group features:#
+    - click-help-colors: https://github.com/click-contrib/click-help-colors
+    """
+
+    color_for_headers = "yellow"
+    color_for_options = "green"
+
+    def __init__(self, *args, **kwargs):  # noqa: ANN002, ANN003
+        """Init a cmemc group command."""
+        kwargs.setdefault("help_headers_color", self.color_for_headers)
+        kwargs.setdefault("help_options_color", self.color_for_options)
+        super().__init__(*args, **kwargs)

cmem_cmemc-24.3.0/cmem_cmemc/command_group.py

@@ -0,0 +1,70 @@
+"""cmemc Click Command Group"""
+
+from click_didyoumean import DYMGroup
+from click_help_colors import HelpColorsGroup
+
+
+class CmemcGroup(HelpColorsGroup, DYMGroup):
+    """Wrapper click.Group class to have a single extension point.
+
+    Currently, wrapped click extensions and additional group features:#
+    - click-help-colors: https://github.com/click-contrib/click-help-colors
+    """
+
+    color_for_command_groups = "white"
+    color_for_writing_commands = "red"
+    color_for_headers = "yellow"
+    color_for_options = "green"
+
+    def __init__(self, *args, **kwargs):  # noqa: ANN002, ANN003
+        """Init a cmemc group command group."""
+        # set default colors
+        kwargs.setdefault("help_headers_color", self.color_for_headers)
+        kwargs.setdefault("help_options_color", self.color_for_options)
+        kwargs.setdefault(
+            "help_options_custom_colors",
+            {
+                "bootstrap": self.color_for_writing_commands,
+                "showcase": self.color_for_writing_commands,
+                "delete": self.color_for_writing_commands,
+                "password": self.color_for_writing_commands,
+                "secret": self.color_for_writing_commands,
+                "upload": self.color_for_writing_commands,
+                "import": self.color_for_writing_commands,
+                "create": self.color_for_writing_commands,
+                "enable": self.color_for_writing_commands,
+                "disable": self.color_for_writing_commands,
+                "execute": self.color_for_writing_commands,
+                "replay": self.color_for_writing_commands,
+                "io": self.color_for_writing_commands,
+                "install": self.color_for_writing_commands,
+                "uninstall": self.color_for_writing_commands,
+                "reload": self.color_for_writing_commands,
+                "update": self.color_for_writing_commands,
+                "eval": self.color_for_writing_commands,
+                "cancel": self.color_for_writing_commands,
+                "admin": self.color_for_command_groups,
+                "user": self.color_for_command_groups,
+                "store": self.color_for_command_groups,
+                "metrics": self.color_for_command_groups,
+                "config": self.color_for_command_groups,
+                "dataset": self.color_for_command_groups,
+                "graph": self.color_for_command_groups,
+                "project": self.color_for_command_groups,
+                "query": self.color_for_command_groups,
+                "scheduler": self.color_for_command_groups,
+                "vocabulary": self.color_for_command_groups,
+                "workflow": self.color_for_command_groups,
+                "workspace": self.color_for_command_groups,
+                "python": self.color_for_command_groups,
+                "cache": self.color_for_command_groups,
+                "resource": self.color_for_command_groups,
+                "acl": self.color_for_command_groups,
+                "client": self.color_for_command_groups,
+                "variable": self.color_for_command_groups,
+                "validation": self.color_for_command_groups,
+                "migrate": self.color_for_writing_commands,
+                "migrations": self.color_for_command_groups,
+            },
+        )
+        super().__init__(*args, **kwargs)

cmem_cmemc-24.3.0/cmem_cmemc/commands/__init__.py

@@ -0,0 +1 @@
+"""cmemc commands."""

{cmem_cmemc-24.2.0rc1 → cmem_cmemc-24.3.0}/cmem_cmemc/commands/acl.py

@@ -2,7 +2,7 @@
 
 import click
 import requests.exceptions
-from click import Option, UsageError
+from click import Option
 from cmem.cmempy.dp.authorization.conditions import (
     create_access_condition,
     delete_access_condition,
@@ -14,25 +14,36 @@ from cmem.cmempy.dp.authorization.conditions import (
 from cmem.cmempy.keycloak.user import get_user_by_username, user_groups
 
 from cmem_cmemc import completion
-from cmem_cmemc.commands import CmemcCommand, CmemcGroup
-from cmem_cmemc.constants import NS_ACL, NS_GROUP, NS_USER
+from cmem_cmemc.command import CmemcCommand
+from cmem_cmemc.command_group import CmemcGroup
+from cmem_cmemc.constants import NS_ACL, NS_ACTION, NS_GROUP, NS_USER
 from cmem_cmemc.context import ApplicationContext
-from cmem_cmemc.utils import convert_iri_to_qname, convert_qname_to_iri, struct_to_table
+from cmem_cmemc.utils import (
+    convert_iri_to_qname,
+    convert_qname_to_iri,
+    get_query_text,
+    struct_to_table,
+)
 
 # option descriptions
 HELP_TEXTS = {
-    "name": "A short name or label.",
+    "name": "A optional name.",
     "id": "An optional ID (will be an UUID otherwise).",
     "description": "An optional description.",
     "user": "A specific user account required by the access condition.",
-    "group": "A membership in a user group required by the access condition",
+    "group": "A membership in a user group required by the access condition.",
     "read_graph": "Grants read access to a graph.",
     "write_graph": "Grants write access to a graph (includes read access).",
     "action": "Grants usage permissions to an action / functionality.",
+    "query": "Dynamic access condition query (file or the query catalog IRI).",
 }
 
-PUBLIC_USER_URI = "urn:elds-backend-anonymous-user"
-PUBLIC_GROUP_URI = "urn:elds-backend-public-group"
+WARNING_UNKNOWN_USER = "Unknown User or no access to get user info."
+WARNING_NO_GROUP_ACCESS = "You do not have the permission to retrieve user groups"
+WARNING_USE_GROUP = "Use the --group option to assign groups manually (what-if-scenario)."
+
+PUBLIC_USER_URI = "https://vocab.eccenca.com/auth/AnonymousUser"
+PUBLIC_GROUP_URI = "https://vocab.eccenca.com/auth/PublicGroup"
 
 KNOWN_ACCESS_CONDITION_URLS = [PUBLIC_USER_URI, PUBLIC_GROUP_URI]
 
@@ -55,12 +66,10 @@ def _value_to_acl_url(
 
     or not, if it is already a known URI .... or None
     """
-    if value in KNOWN_ACCESS_CONDITION_URLS:
+    if value == "" or value is None:
+        return value
+    if value.startswith(("http://", "https://")):
         return value
-    if value == "":
-        return ""
-    if value is None:
-        return None
     match param.name:
         case "groups":
             return f"{NS_GROUP}{value}"
@@ -69,8 +78,10 @@ def _value_to_acl_url(
     return f"{NS_ACL}{value}"
 
 
-def generate_acl_name(user: str | None, groups: list[str]) -> str:
+def generate_acl_name(user: str | None, groups: list[str], query: str | None) -> str:
     """Create an access condition name based on user and group assignments."""
+    if query is not None:
+        return "Query based Dynamic Access Condition"
     if len(groups) > 0:
         group_term = "groups" if len(groups) > 1 else "group"
         groups_labels = ", ".join(
@@ -113,7 +124,13 @@ def list_command(app: ApplicationContext, raw: bool, id_only: bool) -> None:
         (convert_iri_to_qname(iri=_.get("iri"), default_ns=NS_ACL), _.get("name", "-"))
         for _ in acls
     ]
-    app.echo_info_table(table, headers=["URI", "Name"], sort_column=0)
+    app.echo_info_table(
+        table,
+        headers=["URI", "Name"],
+        sort_column=0,
+        empty_table_message="No access conditions found. "
+        "Use the `admin acl create` command to create a new access condition.",
+    )
 
 
 @click.command(cls=CmemcCommand, name="inspect")
@@ -137,24 +154,6 @@ def inspect_command(app: ApplicationContext, access_condition_id: str, raw: bool
 
 
 @click.command(cls=CmemcCommand, name="create")
-@click.option(
-    "--name",
-    "name",
-    type=click.STRING,
-    help=HELP_TEXTS["name"],
-)
-@click.option(
-    "--id",
-    "id_",
-    type=click.STRING,
-    help=HELP_TEXTS["id"],
-)
-@click.option(
-    "--description",
-    "description",
-    type=click.STRING,
-    help=HELP_TEXTS["description"],
-)
 @click.option(
     "--user",
     type=click.STRING,
@@ -195,6 +194,31 @@ def inspect_command(app: ApplicationContext, access_condition_id: str, raw: bool
     shell_complete=completion.acl_actions,
     help=HELP_TEXTS["action"],
 )
+@click.option(
+    "--query",
+    "query",
+    type=click.STRING,
+    shell_complete=completion.remote_queries_and_sparql_files,
+    help=HELP_TEXTS["query"],
+)
+@click.option(
+    "--id",
+    "id_",
+    type=click.STRING,
+    help=HELP_TEXTS["id"],
+)
+@click.option(
+    "--name",
+    "name",
+    type=click.STRING,
+    help=HELP_TEXTS["name"],
+)
+@click.option(
+    "--description",
+    "description",
+    type=click.STRING,
+    help=HELP_TEXTS["description"],
+)
 @click.pass_obj
 # pylint: disable-msg=too-many-arguments
 def create_command(  # noqa: PLR0913
@@ -207,20 +231,43 @@ def create_command(  # noqa: PLR0913
     read_graphs: tuple[str],
     write_graphs: tuple[str],
     actions: tuple[str],
+    query: str,
 ) -> None:
-    """Create an access condition."""
-    if not read_graphs and not write_graphs and not actions:
+    """Create an access condition.
+
+    With this command, new access conditions can be created.
+
+    An access condition captures information about WHO gets access to WHAT.
+    In order to specify WHO gets access, use the `--user` and / or `--group` options.
+    In order to specify WHAT an account get access to, use the `--read-graph`,
+    `--write-graph` and `--action` options.`
+
+    In addition to that, you can specify a name, a description and an ID (all optional).
+
+    A special case are dynamic access conditions, based on a SPARQL query: Here you
+    have to provide a query with the projection variables `user`, `group` `readGraph`
+    and `writeGraph` to create multiple grants at once. You can either provide a query file
+    or a query URL from the query catalog.
+
+    Note: Queries for dynamic access conditions are copied into the ACL, so changing the
+    query in the query catalog does not change it in the access condition.
+
+    Example: cmemc admin acl create --group local-users --write-graph https://example.org/
+    """
+    if not read_graphs and not write_graphs and not actions and not query:
         raise click.UsageError(
             "Missing access / usage grant. Use at least one of the following options: "
-            "--read-graph, --write-graph or --action."
-        )
-    if not user and not groups:
-        app.echo_warning(
-            "Access conditions without a user and without a group assignment " "affect ALL users."
+            "--read-graph, --write-graph, --action or --query."
         )
+    query_str = None
+    if query:
+        query_str = get_query_text(query, {"user", "group", "readGraph", "writeGraph"})
+
+    if not user and not groups and not query:
+        app.echo_warning("Access conditions without a user or group assignment affect ALL users.")
 
     if not name:
-        name = generate_acl_name(user=user, groups=groups)
+        name = generate_acl_name(user=user, groups=groups, query=query)
 
     if not description:
         description = "This access condition was created with cmemc."
@@ -229,6 +276,7 @@ def create_command(  # noqa: PLR0913
         f"Creating access condition '{name}' ... ",
         nl=False,
     )
+
     create_access_condition(
         name=name,
         static_id=id_,
@@ -237,7 +285,8 @@ def create_command(  # noqa: PLR0913
         groups=groups,
         read_graphs=list(read_graphs),
         write_graphs=list(write_graphs),
-        actions=list(actions),
+        actions=[convert_qname_to_iri(qname=_, default_ns=NS_ACTION) for _ in actions],
+        query=query_str,
     )
     app.echo_success("done")
 
@@ -302,6 +351,13 @@ def create_command(  # noqa: PLR0913
     shell_complete=completion.acl_actions,
     help=HELP_TEXTS["action"],
 )
+@click.option(
+    "--query",
+    "query",
+    type=click.STRING,
+    shell_complete=completion.remote_queries_and_sparql_files,
+    help=HELP_TEXTS["query"],
+)
 @click.pass_obj
 # pylint: disable-msg=too-many-arguments
 def update_command(  # noqa: PLR0913
@@ -314,6 +370,7 @@ def update_command(  # noqa: PLR0913
     read_graphs: tuple[str],
     write_graphs: tuple[str],
     actions: tuple[str],
+    query: str,
 ) -> None:
     """Update an access condition.
 
@@ -326,6 +383,9 @@ def update_command(  # noqa: PLR0913
         f"Updating access condition {payload['name']} ... ",
         nl=False,
     )
+    query_str = None
+    if query:
+        query_str = get_query_text(query, {"user", "group", "readGraph", "writeGraph"})
 
     update_access_condition(
         iri=iri,
@@ -335,7 +395,8 @@ def update_command(  # noqa: PLR0913
         groups=groups,
         read_graphs=read_graphs,
         write_graphs=write_graphs,
-        actions=actions,
+        actions=[convert_qname_to_iri(qname=_, default_ns=NS_ACTION) for _ in actions],
+        query=query_str,
     )
     app.echo_success("done")
 
@@ -394,10 +455,9 @@ def review_command(app: ApplicationContext, raw: bool, user: str, groups: list[s
     """Review grants for a given account.
 
     This command has two working modes: (1) You can review the access conditions
-    of an actual account - this needs access to keycloak and the access condition API,
+    of an actual account,
     (2) You can review the access conditions of an imaginary account with a set of
-    freely added groups (what-if-scenario) - this only needs access to the access
-    condition API.
+    freely added groups (what-if-scenario).
 
     The output of the command is a list of grants the account has based on your input
     and all access conditions loaded in the store. In addition to that, some metadata
@@ -407,23 +467,19 @@ def review_command(app: ApplicationContext, raw: bool, user: str, groups: list[s
         app.echo_debug("Trying to fetch groups from keycloak.")
         keycloak_user = get_user_by_username(username=user)
         if not keycloak_user:
-            raise UsageError(
-                "Unknown User or no access to get user info.\n"
-                "Use the --group option to assign groups manually (what-if-scenario)."
-            )
-        try:
-            keycloak_user_groups = user_groups(user_id=keycloak_user[0]["id"])
-            groups = [f"{NS_GROUP}{_['name']}" for _ in keycloak_user_groups]
-        except requests.exceptions.HTTPError as error:
-            raise UsageError(
-                f"You do not have the permission to retrieve the groups for user {user}"
-                " from Keycloak.\n"
-                "Use the --group option to assign groups manually (what-if-scenario)."
-            ) from error
+            if user != PUBLIC_USER_URI:
+                app.echo_warning(WARNING_UNKNOWN_USER)
+                app.echo_warning(WARNING_USE_GROUP)
+        else:
+            try:
+                keycloak_user_groups = user_groups(user_id=keycloak_user[0]["id"])
+                groups = [f"{NS_GROUP}{_['name']}" for _ in keycloak_user_groups]
+            except (requests.exceptions.HTTPError, IndexError):
+                app.echo_warning(WARNING_NO_GROUP_ACCESS)
+                app.echo_warning(WARNING_USE_GROUP)
     app.echo_debug(f"Got groups: {groups}")
-    review_info: dict = review_graph_rights(
-        account_iri=f"{NS_USER}{user}", group_iris=groups
-    ).json()
+    account_iri = f"{NS_USER}{user}" if user != PUBLIC_USER_URI else PUBLIC_USER_URI
+    review_info: dict = review_graph_rights(account_iri=account_iri, group_iris=groups).json()
     review_info["groupIri"] = groups
     if raw:
         app.echo_info_json(review_info)