class FilterModule:
    def users_having_access(self, users, host):
        def user_has_access(user):
            # indiviual assignment in hosts definition
            if 'ssh_allow_user_access' in host:
                if user[0] in host['ssh_allow_user_access']:
                    return True

#            # in deployment for perfact we have:
#            # new parameter for hosts: individual_service_accounts: true
#            if 'individual_service_accounts' in host and host['individual_service_accounts']:
#                # do not add user by department if host has seperate user
#                # accounts instaed of all users loggin in as perfact
#                return False

            # filter users by department
            if 'departments' in host and 'departments' in user[1]:
                for department in host['departments']:
                    if department in user[1]['departments']:
                        return True

            return False


        return dict(filter(user_has_access, users.items()))


    def filters(self):
        return {
            'users_having_access': self.users_having_access,
        }