icinga2/lib/icinga/usergroup.cpp

129 lines
3.9 KiB
C++
Raw Normal View History

2013-02-27 21:49:03 +01:00
/******************************************************************************
* Icinga 2 *
2016-01-12 08:29:59 +01:00
* Copyright (C) 2012-2016 Icinga Development Team (https://www.icinga.org/) *
2013-02-27 21:49:03 +01:00
* *
* This program is free software; you can redistribute it and/or *
* modify it under the terms of the GNU General Public License *
* as published by the Free Software Foundation; either version 2 *
* of the License, or (at your option) any later version. *
* *
* This program is distributed in the hope that it will be useful, *
* but WITHOUT ANY WARRANTY; without even the implied warranty of *
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
* GNU General Public License for more details. *
* *
* You should have received a copy of the GNU General Public License *
* along with this program; if not, write to the Free Software Foundation *
* Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA. *
******************************************************************************/
2014-05-25 16:23:35 +02:00
#include "icinga/usergroup.hpp"
#include "icinga/usergroup.tcpp"
2014-05-25 16:23:35 +02:00
#include "config/objectrule.hpp"
#include "config/configitem.hpp"
#include "base/configtype.hpp"
2014-05-25 16:23:35 +02:00
#include "base/objectlock.hpp"
2014-10-19 14:21:12 +02:00
#include "base/logger.hpp"
2014-05-25 16:23:35 +02:00
#include "base/context.hpp"
#include "base/workqueue.hpp"
2013-03-16 21:18:53 +01:00
#include <boost/foreach.hpp>
2013-02-27 21:49:03 +01:00
using namespace icinga;
2013-03-01 12:07:52 +01:00
REGISTER_TYPE(UserGroup);
2013-02-27 21:49:03 +01:00
INITIALIZE_ONCE(&UserGroup::RegisterObjectRuleHandler);
void UserGroup::RegisterObjectRuleHandler(void)
{
ObjectRule::RegisterType("UserGroup");
}
bool UserGroup::EvaluateObjectRule(const User::Ptr& user, const ConfigItem::Ptr& group)
{
String group_name = group->GetName();
CONTEXT("Evaluating rule for group '" + group_name + "'");
ScriptFrame frame;
if (group->GetScope())
group->GetScope()->CopyTo(frame.Locals);
frame.Locals->Set("user", user);
if (!group->GetFilter()->Evaluate(frame).GetValue().ToBool())
return false;
2014-10-19 17:52:17 +02:00
Log(LogDebug, "UserGroup")
<< "Assigning membership for group '" << group_name << "' to user '" << user->GetName() << "'";
Array::Ptr groups = user->GetGroups();
groups->Add(group_name);
return true;
}
void UserGroup::EvaluateObjectRules(const User::Ptr& user)
{
CONTEXT("Evaluating group membership for user '" + user->GetName() + "'");
BOOST_FOREACH(const ConfigItem::Ptr& group, ConfigItem::GetItems("UserGroup"))
{
if (!group->GetFilter())
continue;
EvaluateObjectRule(user, group);
}
}
std::set<User::Ptr> UserGroup::GetMembers(void) const
2013-02-27 21:49:03 +01:00
{
boost::mutex::scoped_lock lock(m_UserGroupMutex);
return m_Members;
2013-02-27 21:49:03 +01:00
}
void UserGroup::AddMember(const User::Ptr& user)
2013-02-27 21:49:03 +01:00
{
user->AddGroup(GetName());
boost::mutex::scoped_lock lock(m_UserGroupMutex);
m_Members.insert(user);
2013-02-27 21:49:03 +01:00
}
void UserGroup::RemoveMember(const User::Ptr& user)
2013-02-27 21:49:03 +01:00
{
boost::mutex::scoped_lock lock(m_UserGroupMutex);
m_Members.erase(user);
2013-02-27 21:49:03 +01:00
}
2014-10-28 18:04:51 +01:00
bool UserGroup::ResolveGroupMembership(const User::Ptr& user, bool add, int rstack) {
if (add && rstack > 20) {
2014-10-19 17:52:17 +02:00
Log(LogWarning, "UserGroup")
<< "Too many nested groups for group '" << GetName() << "': User '"
<< user->GetName() << "' membership assignment failed.";
return false;
}
Array::Ptr groups = GetGroups();
if (groups && groups->GetLength() > 0) {
ObjectLock olock(groups);
BOOST_FOREACH(const String& name, groups) {
UserGroup::Ptr group = UserGroup::GetByName(name);
if (group && !group->ResolveGroupMembership(user, add, rstack + 1))
return false;
}
}
if (add)
AddMember(user);
else
RemoveMember(user);
return true;
}