source: trunk/packages/invirt-web/code/cache_acls.py @ 1737

Last change on this file since 1737 was 1709, checked in by broder, 16 years ago

Default to a NULL administrator, instead of the same as the owner

File size: 2.0 KB
RevLine 
[249]1#!/usr/bin/python
[863]2from invirt.database import *
[879]3from invirt.config import structs as config
[249]4import sys
5import getafsgroups
6import subprocess
7
8def expandLocker(name):
[1155]9    try:
10        groups = getafsgroups.getLockerAcl(name)
11    except getafsgroups.AfsProcessError, e:
12        if e.message.startswith("fs: You don't have the required access rights on"):
13            groups = []
14        raise
[249]15    cell = getafsgroups.getCell(name)
16    ans = set()
17    for group in groups:
18        if ':' in group:
19            ans.update(getafsgroups.getAfsGroupMembers(group, cell))
20        else:
21            ans.add(group)
22    return ans
23
24def isUser(name):
25    p = subprocess.Popen(['vos', 'examine', 'user.'+name],
26                         stdout=subprocess.PIPE, stderr=subprocess.PIPE)
27    if p.wait():
28        return False
29    return True
30   
31
32def expandName(name):
33    if ':' not in name:
34        if isUser(name):
35            return [name]
[434]36        return []
[413]37    try:
[879]38        return getafsgroups.getAfsGroupMembers(name, config.authz[0].cell)
[413]39    except getafsgroups.AfsProcessError:
40        return []
[249]41
[410]42def accessList(m):
[263]43    people = set()
44    people.update(expandLocker(m.owner))
[1709]45    if m.administrator is not None:
46        people.update(expandName(m.administrator))
[410]47    return people
48
49def refreshMachine(m):
50    people = accessList(m)
[263]51    old_people = set(a.user for a in m.acl)
52    for removed in old_people - people:
53        ma = [x for x in m.acl if x.user == removed][0]
[1013]54        session.delete(ma)
[263]55    for p in people - old_people:
[589]56        ma = MachineAccess(user=p)
57        m.acl.append(ma)
[1013]58        session.save_or_update(ma)
[263]59   
[262]60def refreshCache():
[1013]61    session.begin()
[257]62
63    try:
[1095]64        machines = Machine.query().all()
[257]65        for m in machines:
[263]66            refreshMachine(m)
[1013]67        session.flush()
[257]68           
69        # Atomically execute our changes
[1013]70        session.commit()
[257]71    except:
72        # Failed! Rollback all the changes.
[1013]73        session.rollback()
[257]74        raise
[262]75
76if __name__ == '__main__':
[863]77    connect()
[262]78    refreshCache()
Note: See TracBrowser for help on using the repository browser.