Class: Lockdown::Database

Inherits:
Object
  • Object
show all
Defined in:
lib/lockdown/database.rb

Class Method Summary collapse

Class Method Details

.add_valid_permissions(ug, key) ⇒ Object 



86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
 
# File 'lib/lockdown/database.rb', line 86

def add_valid_permissions(ug, key)
  Lockdown::System.permissions_for_user_group(key).each do |perm|
    perm_string = Lockdown.get_string(perm)
    found = false
    # see if permission exists
    ug.permissions.each do |p|
      found = true if Lockdown.get_string(p) == perm_string 
    end
    # if not found, add it
    unless found
      puts ">> Lockdown: Permission: #{perm_string} not found for User Group: #{ug.name}, adding it."
      p = ::Permission.find(:first, :conditions => ["name = ?", perm_string])
      ug.permissions << p
    end
  end
end

.create_new_permissions ⇒ Object

Create permissions not found in the database



23
24
25
26
27
28
29
30
31
32
33
 
# File 'lib/lockdown/database.rb', line 23

def create_new_permissions
  @permissions.each do |key|
    next if Lockdown::System.permission_assigned_automatically?(key)
    str = Lockdown.get_string(key)
    p = ::Permission.find(:first, :conditions => ["name = ?", str])
    unless p
      puts ">> Lockdown: Permission not found in db: #{str}, creating."
      ::Permission.create(:name => str)
    end
  end
end

.create_user_group(name_str, key) ⇒ Object 



63
64
65
66
67
68
69
70
71
72
73
 
# File 'lib/lockdown/database.rb', line 63

def create_user_group(name_str, key)
  puts ">> Lockdown: UserGroup not in the db: #{name_str}, creating."
  ug = ::UserGroup.create(:name => name_str)
  #Inefficient, definitely, but shouldn't have any issues across orms.
  Lockdown::System.permissions_for_user_group(key).each do |perm|
    p = ::Permission.find(:first, :conditions => ["name = ?", 
                          Lockdown.get_string(perm)])

    Lockdown.database_execute "insert into permissions_user_groups(permission_id, user_group_id) values(#{p.id}, #{ug.id})"
  end
end

.delete_extinct_permissions ⇒ Object

Delete the permissions not found in init.rb



36
37
38
39
40
41
42
43
44
45
 
# File 'lib/lockdown/database.rb', line 36

def delete_extinct_permissions
  db_perms = ::Permission.find(:all).dup
  db_perms.each do |dbp|
    unless @permissions.include?(Lockdown.get_symbol(dbp.name))
      puts ">> Lockdown: Permission no longer in init.rb: #{dbp.name}, deleting."
      Lockdown.database_execute("delete from permissions_user_groups where permission_id = #{dbp.id}")
      dbp.destroy
    end
  end
end

.maintain_user_groups ⇒ Object 



47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
 
# File 'lib/lockdown/database.rb', line 47

def maintain_user_groups
  # Create user groups not found in the database
  @user_groups.each do |key|
    str = Lockdown.get_string(key)
    unless ug = ::UserGroup.find(:first, :conditions => ["name = ?", str])
      create_user_group(str, key)
    else
      # Remove permissions from user group not found in init.rb
      remove_invalid_permissions(ug, key)

      # Add in permissions from init.rb not found in database
      add_valid_permissions(ug, key)
    end
  end
end

.remove_invalid_permissions(ug, key) ⇒ Object 



75
76
77
78
79
80
81
82
83
84
 
# File 'lib/lockdown/database.rb', line 75

def remove_invalid_permissions(ug, key)
  ug.permissions.each do |perm|
    perm_sym = Lockdown.get_symbol(perm)
    perm_string = Lockdown.get_string(perm)
    unless Lockdown::System.permissions_for_user_group(key).include?(perm_sym)
      puts ">> Lockdown: Permission: #{perm_string} no longer associated to User Group: #{ug.name}, deleting."
      ug.permissions.delete(perm)
    end
  end
end

.sync_with_db ⇒ Object

This is very basic and could be handled better using orm specific functionality, but I wanted to keep it generic to avoid creating an interface for each the different orm implementations. We’ll see how it works…



8
9
10
11
12
13
14
15
16
17
18
19
20
 
# File 'lib/lockdown/database.rb', line 8

def sync_with_db

  @permissions = Lockdown::System.get_permissions
  @user_groups = Lockdown::System.get_user_groups

  create_new_permissions

  delete_extinct_permissions

  maintain_user_groups
rescue Exception => e
  puts ">> Lockdown sync failed: #{e}" 
end