Last change
on this file since 266 was
263,
checked in by ecprice, 17 years ago
|
Modularize cache_acls.py yet more
|
File size:
1.7 KB
|
Rev | Line | |
---|
[249] | 1 | #!/usr/bin/python |
---|
| 2 | from sipb_xen_database import * |
---|
| 3 | import sys |
---|
| 4 | import getafsgroups |
---|
| 5 | import subprocess |
---|
| 6 | |
---|
| 7 | def expandLocker(name): |
---|
| 8 | groups = getafsgroups.getLockerAcl(name) |
---|
| 9 | cell = getafsgroups.getCell(name) |
---|
| 10 | ans = set() |
---|
| 11 | for group in groups: |
---|
| 12 | if ':' in group: |
---|
| 13 | ans.update(getafsgroups.getAfsGroupMembers(group, cell)) |
---|
| 14 | else: |
---|
| 15 | ans.add(group) |
---|
| 16 | return ans |
---|
| 17 | |
---|
| 18 | def isUser(name): |
---|
| 19 | p = subprocess.Popen(['vos', 'examine', 'user.'+name], |
---|
| 20 | stdout=subprocess.PIPE, stderr=subprocess.PIPE) |
---|
| 21 | if p.wait(): |
---|
| 22 | return False |
---|
| 23 | return True |
---|
| 24 | |
---|
| 25 | |
---|
| 26 | def expandName(name): |
---|
| 27 | if ':' not in name: |
---|
| 28 | if isUser(name): |
---|
| 29 | return [name] |
---|
| 30 | name = 'system:'+name |
---|
| 31 | return getafsgroups.getAfsGroupMembers(name, 'athena.mit.edu') |
---|
| 32 | |
---|
[263] | 33 | def refreshMachine(m): |
---|
| 34 | people = set() |
---|
| 35 | people.update(expandLocker(m.owner)) |
---|
| 36 | people.update(expandName(m.administrator)) |
---|
| 37 | old_people = set(a.user for a in m.acl) |
---|
| 38 | for removed in old_people - people: |
---|
| 39 | ma = [x for x in m.acl if x.user == removed][0] |
---|
| 40 | ctx.current.delete(ma) |
---|
| 41 | for p in people - old_people: |
---|
| 42 | ma = MachineAccess(machine_id=m.machine_id, user=p) |
---|
| 43 | ctx.current.save(ma) |
---|
| 44 | |
---|
[262] | 45 | def refreshCache(): |
---|
[257] | 46 | transaction = ctx.current.create_transaction() |
---|
| 47 | |
---|
| 48 | try: |
---|
| 49 | machines = Machine.select() |
---|
| 50 | for m in machines: |
---|
[263] | 51 | refreshMachine(m) |
---|
| 52 | ctx.current.flush() |
---|
[257] | 53 | |
---|
| 54 | # Atomically execute our changes |
---|
[249] | 55 | transaction.commit() |
---|
[257] | 56 | except: |
---|
| 57 | # Failed! Rollback all the changes. |
---|
| 58 | transaction.rollback() |
---|
| 59 | raise |
---|
[262] | 60 | |
---|
| 61 | if __name__ == '__main__': |
---|
| 62 | connect('postgres://sipb-xen@sipb-xen-dev/sipb_xen') |
---|
| 63 | refreshCache() |
---|
Note: See
TracBrowser
for help on using the repository browser.