508 lines
11 KiB
Perl
508 lines
11 KiB
Perl
|
package SrvMngr::Controller::Groups;
|
||
|
|
|
||
|
|
#----------------------------------------------------------------------
|
||
|
|
# heading : User management
|
||
|
|
# description : GROUPS
|
||
|
|
# navigation : 2000 200
|
||
|
|
#----------------------------------------------------------------------
|
||
|
|
#
|
||
|
|
# routes : end
|
||
|
|
#----------------------------------------------------------------------
|
||
|
|
use strict;
|
||
|
|
use warnings;
|
||
|
|
use Mojo::Base 'Mojolicious::Controller';
|
||
|
|
|
||
|
|
use Locale::gettext;
|
||
|
|
use SrvMngr::I18N;
|
||
|
|
use SrvMngr qw(theme_list init_session);
|
||
|
|
|
||
|
|
#use Data::Dumper;
|
||
|
|
|
||
|
|
#use esmith::FormMagick::Panel::groups;
|
||
|
|
use esmith::AccountsDB;
|
||
|
|
|
||
|
|
our $cdb = esmith::ConfigDB->open || die "Couldn't open configuration db";
|
||
|
|
our $adb = esmith::AccountsDB->open || die "Couldn't open accounts db";
|
||
|
|
|
||
|
|
sub main {
|
||
|
|
|
||
|
|
my $c = shift;
|
||
|
|
$c->app->log->info($c->log_req);
|
||
|
|
|
||
|
|
my %grp_datas = ();
|
||
|
|
my $title = $c->l('grp_FORM_TITLE');
|
||
|
|
|
||
|
|
$grp_datas{trt} = 'LST';
|
||
|
|
|
||
|
|
my @groups;
|
||
|
|
if ($adb) {
|
||
|
|
@groups = $adb->groups();
|
||
|
|
}
|
||
|
|
|
||
|
|
$c->stash( title => $title, grp_datas => \%grp_datas, groups => \@groups );
|
||
|
|
$c->render(template => 'groups');
|
||
|
|
|
||
|
|
};
|
||
|
|
|
||
|
|
|
||
|
|
sub do_display {
|
||
|
|
|
||
|
|
my $c = shift;
|
||
|
|
$c->app->log->info($c->log_req);
|
||
|
|
|
||
|
|
my $rt = $c->current_route;
|
||
|
|
my $trt = ($c->param('trt') || 'LST');
|
||
|
|
my $group = $c->param('group');
|
||
|
|
|
||
|
|
my %grp_datas = ();
|
||
|
|
my $title = $c->l('grp_FORM_TITLE');
|
||
|
|
|
||
|
|
$grp_datas{'trt'} = $trt;
|
||
|
|
|
||
|
|
if ( $trt eq 'ADD' ) {
|
||
|
|
#nothing
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
if ( $trt eq 'UPD' ) {
|
||
|
|
|
||
|
|
my %members = ();
|
||
|
|
my %users = ();
|
||
|
|
|
||
|
|
my $rec = $adb->get($group);
|
||
|
|
if ($rec and $rec->prop('type') eq 'group') {
|
||
|
|
|
||
|
|
$grp_datas{group} = $group;
|
||
|
|
$grp_datas{description} = $rec->prop('Description') || '';
|
||
|
|
|
||
|
|
%members = @{$c->gen_members_list( $group )};
|
||
|
|
}
|
||
|
|
|
||
|
|
$c->stash( members => \%members, users => \%users );
|
||
|
|
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
if ( $trt eq 'DEL' ) {
|
||
|
|
|
||
|
|
my %members = ();
|
||
|
|
my %ibays = ();
|
||
|
|
|
||
|
|
my $rec = $adb->get($group);
|
||
|
|
if ($rec and $rec->prop('type') eq 'group') {
|
||
|
|
|
||
|
|
$grp_datas{group} = $group;
|
||
|
|
$grp_datas{description} = $rec->prop('Description') || '';
|
||
|
|
|
||
|
|
%members = @{$c->gen_members_list($group)};
|
||
|
|
|
||
|
|
%ibays = @{$c->gen_ibays_list($group)};
|
||
|
|
|
||
|
|
}
|
||
|
|
|
||
|
|
$c->stash( members => \%members, ibays => \%ibays );
|
||
|
|
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
if ( $trt eq 'LST' ) {
|
||
|
|
my @groups;
|
||
|
|
if ($adb) {
|
||
|
|
@groups = $adb->groups();
|
||
|
|
}
|
||
|
|
|
||
|
|
$c->stash( groups => \@groups );
|
||
|
|
|
||
|
|
}
|
||
|
|
|
||
|
|
$c->stash( title => $title, grp_datas => \%grp_datas );
|
||
|
|
$c->render( template => 'groups' );
|
||
|
|
|
||
|
|
};
|
||
|
|
|
||
|
|
|
||
|
|
sub do_update {
|
||
|
|
|
||
|
|
my $c = shift;
|
||
|
|
$c->app->log->info($c->log_req);
|
||
|
|
|
||
|
|
my $rt = $c->current_route;
|
||
|
|
my $trt = ($c->param('trt') || 'LST');
|
||
|
|
my $groupName = $c->param('groupName') || '';
|
||
|
|
|
||
|
|
my $title = $c->l('grp_FORM_TITLE');
|
||
|
|
my ($res, $result) = '';
|
||
|
|
|
||
|
|
my %grp_datas = ();
|
||
|
|
$grp_datas{'trt'} = $trt;
|
||
|
|
$grp_datas{'group'} = $groupName;
|
||
|
|
my @members = ();
|
||
|
|
|
||
|
|
if ( $trt eq 'ADD' ) {
|
||
|
|
|
||
|
|
my $groupDesc = $c->param('groupDesc');
|
||
|
|
@members = @{$c->every_param('groupMembers')};
|
||
|
|
|
||
|
|
my $members = join ( ",", @members );
|
||
|
|
|
||
|
|
# controls
|
||
|
|
$res = $c->validate_group( $groupName );
|
||
|
|
$result .= $res . '<br>' unless $res eq 'OK';
|
||
|
|
|
||
|
|
$res = $c->validate_group_length( $groupName );
|
||
|
|
$result .= $res . '<br>' unless $res eq 'OK';
|
||
|
|
|
||
|
|
$res = $c->validate_group_naming_conflict( $groupName );
|
||
|
|
$result .= $res . '<br>' unless $res eq 'OK';
|
||
|
|
|
||
|
|
$res = $c->validate_description( $groupDesc );
|
||
|
|
$result .= $res . '<br>' unless $res eq 'OK';
|
||
|
|
|
||
|
|
$res = $c->validate_group_has_members( @members );
|
||
|
|
$result .= $res . '<br>' unless $res eq 'OK';
|
||
|
|
|
||
|
|
my %props = (
|
||
|
|
'type', 'group', 'Description',
|
||
|
|
$groupDesc, 'Members', $members
|
||
|
|
);
|
||
|
|
|
||
|
|
$res = '';
|
||
|
|
if ( ! $result ) {
|
||
|
|
|
||
|
|
$adb->new_record( $groupName, \%props );
|
||
|
|
|
||
|
|
# Untaint groupName before use in system()
|
||
|
|
($groupName) = ($groupName =~ /^([a-z][\-\_\.a-z0-9]*)$/);
|
||
|
|
|
||
|
|
system("/sbin/e-smith/signal-event", "group-create", "$groupName") == 0
|
||
|
|
or $result .= $c->l('qgp_CREATE_ERROR')."\n";
|
||
|
|
}
|
||
|
|
if ( ! $result ) {
|
||
|
|
$result = $c->l('grp_CREATED_GROUP') . ' ' . $groupName;
|
||
|
|
$res = 'OK';
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
if ( $trt eq 'UPD' ) {
|
||
|
|
|
||
|
|
my $groupDesc = $c->param('groupDesc');
|
||
|
|
@members = @{$c->every_param('groupMembers')};
|
||
|
|
my $members = join ( ",", @members );
|
||
|
|
|
||
|
|
# controls
|
||
|
|
$res = '';
|
||
|
|
$res = validate_description( $c, $groupDesc );
|
||
|
|
$result .= $res . '<br>' unless $res eq 'OK';
|
||
|
|
|
||
|
|
$res = validate_group_has_members( $c, @members );
|
||
|
|
$result .= $res . '<br>' unless $res eq 'OK';
|
||
|
|
|
||
|
|
$res = '';
|
||
|
|
if ( ! $result ) {
|
||
|
|
|
||
|
|
$adb->get($groupName)->set_prop( 'Members', $members );
|
||
|
|
$adb->get($groupName)->set_prop( 'Description', $groupDesc );
|
||
|
|
|
||
|
|
# Untaint groupName before use in system()
|
||
|
|
($groupName) = ($groupName =~ /^([a-z][\-\_\.a-z0-9]*)$/);
|
||
|
|
|
||
|
|
system("/sbin/e-smith/signal-event", "group-modify", "$groupName") ==0
|
||
|
|
or $result .= $c->l('qgp_MODIFY_ERROR')."\n";
|
||
|
|
}
|
||
|
|
|
||
|
|
if ( ! $result ) {
|
||
|
|
$result = $c->l('grp_MODIFIED_GROUP') . ' ' . $groupName;
|
||
|
|
$res = 'OK';
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
if ( $trt eq 'DEL' ) {
|
||
|
|
|
||
|
|
if ($groupName =~ /^([a-z][\-\_\.a-z0-9]*)$/) {
|
||
|
|
$groupName = $1;
|
||
|
|
} else {
|
||
|
|
$result .= $c->l('grp_ERR_INTERNAL_FAILURE') . ':' . $groupName;
|
||
|
|
}
|
||
|
|
|
||
|
|
my $rec = $adb->get($groupName);
|
||
|
|
$result .= $c->l('grp_ERR_INTERNAL_FAILURE') . ':' . $groupName unless ($rec);
|
||
|
|
|
||
|
|
$res = '';
|
||
|
|
if ( ! $result ) {
|
||
|
|
$res = delete_group( $c, $groupName );
|
||
|
|
$result .= $res unless $res eq 'OK';
|
||
|
|
if ( ! $result ) {
|
||
|
|
$result = $c->l('grp_DELETED_GROUP') . ' ' . $groupName;
|
||
|
|
$res = 'OK';
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
# common parts
|
||
|
|
|
||
|
|
if ($res ne 'OK') {
|
||
|
|
$c->stash( error => $result );
|
||
|
|
my %members = @{$c->gen_members_list($groupName)};
|
||
|
|
$c->stash( title => $title, members => \%members, grp_datas => \%grp_datas );
|
||
|
|
return $c->render('groups');
|
||
|
|
}
|
||
|
|
|
||
|
|
my $message = "'Groups' updates ($trt) DONE";
|
||
|
|
$c->app->log->info($message);
|
||
|
|
$c->flash( success => $result );
|
||
|
|
|
||
|
|
$c->redirect_to('/groups');
|
||
|
|
};
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
sub delete_group {
|
||
|
|
|
||
|
|
my ( $c, $groupName ) = @_;
|
||
|
|
|
||
|
|
# Update the db account (1)
|
||
|
|
$adb->get($groupName)->set_prop('type', 'group-deleted');
|
||
|
|
|
||
|
|
# Untaint groupName before use in system()
|
||
|
|
($groupName) = ($groupName =~ /^([a-z][\-\_\.a-z0-9]*)$/);
|
||
|
|
|
||
|
|
return (system ("/sbin/e-smith/signal-event", "group-delete", "$groupName") ||
|
||
|
|
! $adb->get($groupName)->delete()) ?
|
||
|
|
$c->l('DELETE_ERROR') : 'OK';
|
||
|
|
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
sub gen_members_list {
|
||
|
|
|
||
|
|
my ( $c, $group ) = @_;
|
||
|
|
|
||
|
|
my @members = ();
|
||
|
|
my $rec = $adb->get($group);
|
||
|
|
@members = split ( /,/, $rec->prop('Members') ) if ( $rec );
|
||
|
|
|
||
|
|
my %names;
|
||
|
|
foreach my $m (@members) {
|
||
|
|
my $name;
|
||
|
|
if ( $m eq 'admin' ) {
|
||
|
|
$name = "Administrator";
|
||
|
|
}
|
||
|
|
else {
|
||
|
|
$name = $adb->get($m)->prop('FirstName') . " "
|
||
|
|
. $adb->get($m)->prop('LastName');
|
||
|
|
}
|
||
|
|
$names{$m} = $name;
|
||
|
|
}
|
||
|
|
@members = %names;
|
||
|
|
|
||
|
|
return \@members;
|
||
|
|
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
sub gen_ibays_list {
|
||
|
|
|
||
|
|
my ( $c, $group ) = @_;
|
||
|
|
|
||
|
|
my %names;
|
||
|
|
foreach my $ibay ( $adb->ibays ) {
|
||
|
|
if ( $ibay->prop('Group') eq $group ) {
|
||
|
|
$names{$ibay->key} = $ibay->prop('Name');
|
||
|
|
}
|
||
|
|
}
|
||
|
|
my @ibays = %names;
|
||
|
|
|
||
|
|
return \@ibays;
|
||
|
|
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
sub gen_users_list {
|
||
|
|
|
||
|
|
my $c = shift;
|
||
|
|
|
||
|
|
my @users = sort { $a->key() cmp $b->key() } $adb->users();
|
||
|
|
my %names;
|
||
|
|
|
||
|
|
foreach my $user ( @users ) {
|
||
|
|
$names{$user->key} = $user->prop('FirstName') . " "
|
||
|
|
. $user->prop('LastName');
|
||
|
|
}
|
||
|
|
|
||
|
|
return \%names;
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
=head1 VALIDATION
|
||
|
|
|
||
|
|
=head2 validate_is_group FM GROUP
|
||
|
|
|
||
|
|
returns OK if GROUP is a current group. otherwisee returns "NOT_A_GROUP"
|
||
|
|
|
||
|
|
=begin testing
|
||
|
|
|
||
|
|
#ok($panel->validate_is_group('root') eq 'OK', "Root is a group");
|
||
|
|
ok($panel->validate_is_group('ro2ot') eq 'NOT_A_GROUP', "Ro2ot is not a group");
|
||
|
|
|
||
|
|
=end testing
|
||
|
|
|
||
|
|
=cut
|
||
|
|
|
||
|
|
|
||
|
|
sub validate_is_group () {
|
||
|
|
my $c = shift;
|
||
|
|
my $group = shift;
|
||
|
|
|
||
|
|
my @groups = $adb->groups();
|
||
|
|
my %groups = map { $_->key => 1 } @groups;
|
||
|
|
|
||
|
|
unless ( exists $groups{$group} ) {
|
||
|
|
return ($c->l('grp_NOT_A_GROUP'));
|
||
|
|
}
|
||
|
|
return ("OK");
|
||
|
|
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
=head2 validate_group_naming_conflict FM GROUPNAME
|
||
|
|
|
||
|
|
Returns "OK" if this group's name doesn't conflict with anything
|
||
|
|
Returns "PSEUDONYM_CONFLICT" if this name conflicts with a pseudonym
|
||
|
|
Returns "NAME_CONFLICT" if this group name conflicts with anything else
|
||
|
|
|
||
|
|
ok (undef, 'need testing for validate_naming_Conflicts');
|
||
|
|
=cut
|
||
|
|
|
||
|
|
|
||
|
|
sub validate_group_naming_conflict
|
||
|
|
{
|
||
|
|
my $c = shift;
|
||
|
|
my $groupName = shift;
|
||
|
|
|
||
|
|
my $account = $adb->get($groupName);
|
||
|
|
my $type;
|
||
|
|
|
||
|
|
if (defined $account)
|
||
|
|
{
|
||
|
|
$type = $account->prop('type');
|
||
|
|
}
|
||
|
|
elsif (defined getpwnam($groupName) || defined getgrnam($groupName))
|
||
|
|
{
|
||
|
|
$type = "system";
|
||
|
|
}
|
||
|
|
else
|
||
|
|
{
|
||
|
|
return('OK');
|
||
|
|
}
|
||
|
|
return ($c->l('grp_ACCOUNT_CONFLICT', $groupName, $type));
|
||
|
|
}
|
||
|
|
|
||
|
|
=head2 validate_group FM groupname
|
||
|
|
|
||
|
|
Returns OK if the group name contains only valid characters
|
||
|
|
Returns GROUP_NAMING otherwise
|
||
|
|
|
||
|
|
=being testing
|
||
|
|
|
||
|
|
ok(validate_group('','foo') eq 'OK', 'foo is a valid group);
|
||
|
|
ok(validate_group('','f&oo') eq 'GROUP_CONTAINS_INVALD', 'f&oo is not a valid group);
|
||
|
|
|
||
|
|
=end testing
|
||
|
|
|
||
|
|
=cut
|
||
|
|
|
||
|
|
sub validate_group {
|
||
|
|
my $c = shift;
|
||
|
|
my $groupName = shift;
|
||
|
|
unless ( $groupName =~ /^([a-z][\-\_\.a-z0-9]*)$/ ) {
|
||
|
|
return $c->l('grp_GROUP_NAMING');
|
||
|
|
}
|
||
|
|
return ('OK');
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
=head2 validate_group_length FM GROUPNAME
|
||
|
|
|
||
|
|
returns 'OK' if the group name is shorter than the maximum group name length
|
||
|
|
returns 'GROUP_TOO_LONG' otherwise
|
||
|
|
|
||
|
|
=begin testing
|
||
|
|
|
||
|
|
ok(($panel->validate_group_length('foo') eq 'OK'), "a short groupname passes");
|
||
|
|
ok(($panel->validate_group_length('fooooooooooooooooo') eq 'GROUP_TOO_LONG'), "a long groupname fails");
|
||
|
|
|
||
|
|
=end testing
|
||
|
|
|
||
|
|
=cut
|
||
|
|
|
||
|
|
sub validate_group_length {
|
||
|
|
my $c = shift;
|
||
|
|
my $groupName = shift;
|
||
|
|
|
||
|
|
|
||
|
|
my $maxGroupNameLength = ($cdb->get('maxGroupNameLength')
|
||
|
|
? $cdb->get('maxGroupNameLength')->prop('type')
|
||
|
|
: "") || 12;
|
||
|
|
|
||
|
|
if ( length $groupName > $maxGroupNameLength ) {
|
||
|
|
return $c->l('grp_GROUP_TOO_LONG', $maxGroupNameLength);
|
||
|
|
}
|
||
|
|
else {
|
||
|
|
return ('OK');
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
=head2 validate_group_has_members FM MEMBERS
|
||
|
|
|
||
|
|
Validates that the cgi parameter MEMBERS is an array with at least one entry
|
||
|
|
Returns OK if true. Otherwise, returns NO_MEMBERS
|
||
|
|
|
||
|
|
|
||
|
|
=begin testing
|
||
|
|
|
||
|
|
ok(validate_group_has_members('',qw(foo bar)) eq 'OK', "We do ok with a group with two members");
|
||
|
|
|
||
|
|
ok(validate_group_has_members('',qw()) eq 'NO_MEMBERS', "We do ok with a group with no members");
|
||
|
|
ok(validate_group_has_members('') eq 'NO_MEMBERS', "We do ok with a group with undef members");
|
||
|
|
|
||
|
|
=end testing
|
||
|
|
|
||
|
|
=cut
|
||
|
|
|
||
|
|
sub validate_group_has_members {
|
||
|
|
my $c = shift;
|
||
|
|
my @members = (@_);
|
||
|
|
my $count = @members;
|
||
|
|
if ( $count == 0 ) {
|
||
|
|
return ($c->l('grp_NO_MEMBERS'));
|
||
|
|
}
|
||
|
|
else {
|
||
|
|
return ('OK');
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
=pod
|
||
|
|
|
||
|
|
=head2 validate_description ($description).
|
||
|
|
Checks the supplied description. Period is allowed in description
|
||
|
|
|
||
|
|
=cut
|
||
|
|
|
||
|
|
sub validate_description
|
||
|
|
{
|
||
|
|
my ($c, $description) = @_;
|
||
|
|
if ( $description =~ /^([\-\'\w][\-\'\w\s\.]*)$/ ) {
|
||
|
|
return ('OK');
|
||
|
|
}
|
||
|
|
else {
|
||
|
|
return ($c->l('FM_ERR_UNEXPECTED_DESC'));
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
1
|