source: trunk/packages/invirt-web/code/cache_acls.py @ 1715

Last change on this file since 1715 was 1709, checked in by broder, 16 years ago

Default to a NULL administrator, instead of the same as the owner

File size: 2.0 KB
Line 
1#!/usr/bin/python
2from invirt.database import *
3from invirt.config import structs as config
4import sys
5import getafsgroups
6import subprocess
7
8def expandLocker(name):
9    try:
10        groups = getafsgroups.getLockerAcl(name)
11    except getafsgroups.AfsProcessError, e:
12        if e.message.startswith("fs: You don't have the required access rights on"):
13            groups = []
14        raise
15    cell = getafsgroups.getCell(name)
16    ans = set()
17    for group in groups:
18        if ':' in group:
19            ans.update(getafsgroups.getAfsGroupMembers(group, cell))
20        else:
21            ans.add(group)
22    return ans
23
24def isUser(name):
25    p = subprocess.Popen(['vos', 'examine', 'user.'+name],
26                         stdout=subprocess.PIPE, stderr=subprocess.PIPE)
27    if p.wait():
28        return False
29    return True
30   
31
32def expandName(name):
33    if ':' not in name:
34        if isUser(name):
35            return [name]
36        return []
37    try:
38        return getafsgroups.getAfsGroupMembers(name, config.authz[0].cell)
39    except getafsgroups.AfsProcessError:
40        return []
41
42def accessList(m):
43    people = set()
44    people.update(expandLocker(m.owner))
45    if m.administrator is not None:
46        people.update(expandName(m.administrator))
47    return people
48
49def refreshMachine(m):
50    people = accessList(m)
51    old_people = set(a.user for a in m.acl)
52    for removed in old_people - people:
53        ma = [x for x in m.acl if x.user == removed][0]
54        session.delete(ma)
55    for p in people - old_people:
56        ma = MachineAccess(user=p)
57        m.acl.append(ma)
58        session.save_or_update(ma)
59   
60def refreshCache():
61    session.begin()
62
63    try:
64        machines = Machine.query().all()
65        for m in machines:
66            refreshMachine(m)
67        session.flush()
68           
69        # Atomically execute our changes
70        session.commit()
71    except:
72        # Failed! Rollback all the changes.
73        session.rollback()
74        raise
75
76if __name__ == '__main__':
77    connect()
78    refreshCache()
Note: See TracBrowser for help on using the repository browser.