Module: Cbac::CbacPristine

Defined in:
lib/cbac/cbac_pristine/pristine.rb,
lib/cbac/cbac_pristine/pristine_file.rb,
lib/cbac/cbac_pristine/pristine_role.rb,
lib/cbac/cbac_pristine/pristine_permission.rb

Defined Under Namespace

Classes: AbstractPristineFile, GenericPristineFile, PristineFile, PristinePermission, PristineRole

Instance Method Summary collapse

Instance Method Details

#clear_cbac_tables ⇒ Object 



73
74
75
76
77
78
79
80
81
 
# File 'lib/cbac/cbac_pristine/pristine.rb', line 73

def clear_cbac_tables
  Cbac::GenericRole.delete_all
  Cbac::Membership.delete_all
  Cbac::Permission.delete_all
  Cbac::KnownPermission.delete_all
  Cbac::CbacPristine::PristineFile.delete_all
  Cbac::CbacPristine::PristinePermission.delete_all
  Cbac::CbacPristine::PristineRole.delete_all
end

#create_fixtures_file(fixtures, fixtures_file_name) ⇒ Object

turns the fixtures into yml and writes them to a file with specified name.



41
42
43
44
45
46
47
48
49
 
# File 'lib/cbac/cbac_pristine/pristine.rb', line 41

def create_fixtures_file(fixtures, fixtures_file_name)
  File.delete(fixtures_file_name) if File.exists?(fixtures_file_name)
  f = File.new(fixtures_file_name, "w")
  flock(f, File::LOCK_EX) do |f|
    fixtures.each_with_index do |fixture, index|
      f.write(fixture.to_yml_fixture(index + 1))
    end
  end
end

#create_generic_role_fixtures_file(pristine_files, fixtures_file_name) ⇒ Object

creates a yml file containing all generic roles from the specified pristine file objects



7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
 
# File 'lib/cbac/cbac_pristine/pristine.rb', line 7

def create_generic_role_fixtures_file(pristine_files, fixtures_file_name)
  roles = []

  pristine_files.each do |pristine_file|
    #if the pristine file wasn't parsed yet, we'll do it here
    pristine_file.parse(false) if pristine_file.permissions.nil? || pristine_file.permissions.empty?
    pristine_file.generic_roles.each do |generic_role|
      # we only want the unique generic roles, because the yml file cannot have duplicates
      has_role = false
      roles.each do |role|
        if role.name == generic_role.name
          has_role = true
        end
      end
      roles.push(generic_role) unless has_role
    end
  end
  create_fixtures_file(roles, fixtures_file_name)
end

#create_permissions_fixtures_file(pristine_files, fixtures_file_name) ⇒ Object

creates a yml file containing all cbac_permissions from the specified pristine file objects



28
29
30
31
32
33
34
35
36
37
38
 
# File 'lib/cbac/cbac_pristine/pristine.rb', line 28

def create_permissions_fixtures_file(pristine_files, fixtures_file_name)
  permissions = []

  pristine_files.each do |pristine_file|
    pristine_file.parse(false) if pristine_file.permissions.nil? || pristine_file.permissions.empty?
    pristine_file.permission_set.each do |line|
      permissions.push(line)
    end
  end
  create_fixtures_file(permissions, fixtures_file_name)
end

#database_contains_cbac_data? ⇒ Boolean

Returns:

  • (Boolean) 


103
104
105
 
# File 'lib/cbac/cbac_pristine/pristine.rb', line 103

def database_contains_cbac_data?
  (Cbac::GenericRole.count != 0 or Cbac::Membership.count != 0 or Cbac::Permission.count != 0 or Cbac::KnownPermission.count != 0 or Cbac::CbacPristine::PristinePermission.count != 0 or Cbac::CbacPristine::PristineRole.count != 0)
end

#delete_generic_known_permissions ⇒ Object 



83
84
85
86
 
# File 'lib/cbac/cbac_pristine/pristine.rb', line 83

def delete_generic_known_permissions
  known_permissions = Cbac::KnownPermission.where(permission_type: Cbac::KnownPermission.PERMISSION_TYPES[:generic])
  known_permissions.each { |p| p.destroy }
end

#delete_generic_permissions ⇒ Object 



88
89
90
91
92
93
 
# File 'lib/cbac/cbac_pristine/pristine.rb', line 88

def delete_generic_permissions
  permissions = Cbac::Permission.find(context_role: nil)
  # for backwards compatibility, generic_role name was administrators instead of administrator
  # SMELL: administrator role *only* identified by name
  (permissions.select { |perm| perm.generic_role.name != "administrator" and perm.generic_role.name != "administrators" }).each { |p| p.destroy }
end

#delete_generic_staged_permissions ⇒ Object 



99
100
101
 
# File 'lib/cbac/cbac_pristine/pristine.rb', line 99

def delete_generic_staged_permissions
  PristinePermission.delete_generic_permissions
end

#delete_non_generic_staged_permissions ⇒ Object 



95
96
97
 
# File 'lib/cbac/cbac_pristine/pristine.rb', line 95

def delete_non_generic_staged_permissions
  PristinePermission.delete_non_generic_permissions
end

#find_or_create_generic_pristine_file(file_name) ⇒ Object 



107
108
109
110
 
# File 'lib/cbac/cbac_pristine/pristine.rb', line 107

def find_or_create_generic_pristine_file(file_name)
  pristine_file = GenericPristineFile.find_by_file_name(file_name)
  pristine_file.present? ? pristine_file : GenericPristineFile.create(:file_name => file_name)
end

#find_or_create_pristine_file(file_name) ⇒ Object 



112
113
114
115
 
# File 'lib/cbac/cbac_pristine/pristine.rb', line 112

def find_or_create_pristine_file(file_name)
  pristine_file = PristineFile.find_by_file_name(file_name)
  pristine_file.present? ? pristine_file : PristineFile.create(:file_name => file_name)
end

#flock(file, mode) ⇒ Object 



125
126
127
128
129
130
131
132
133
134
135
 
# File 'lib/cbac/cbac_pristine/pristine.rb', line 125

def flock(file, mode)
  success = file.flock(mode)
  if success
    begin
      yield file
    ensure
      file.flock(File::LOCK_UN)
    end
  end
  return success
end

#number_of_generic_staged_permissions ⇒ Object 



117
118
119
 
# File 'lib/cbac/cbac_pristine/pristine.rb', line 117

def number_of_generic_staged_permissions
  PristinePermission.count_generic_permissions
end

#number_of_non_generic_staged_permissions ⇒ Object 



121
122
123
 
# File 'lib/cbac/cbac_pristine/pristine.rb', line 121

def number_of_non_generic_staged_permissions
  PristinePermission.count_non_generic_permissions
end

#set_pristine_state(pristine_files, clear_tables) ⇒ Object

set all cbac permissions and generic roles to the state in the specified pristine file objects



52
53
54
55
56
57
58
59
60
 
# File 'lib/cbac/cbac_pristine/pristine.rb', line 52

def set_pristine_state(pristine_files, clear_tables)
  clear_cbac_tables if clear_tables
  pristine_files.each do |pristine_file|
    pristine_file.parse if pristine_file.permissions.nil? || pristine_file.permissions.empty?
    pristine_file.permissions.each do |permission|
      permission.accept
    end
  end
end

#stage_permissions(pristine_files) ⇒ Object

stage all unknown cbac_permissions



63
64
65
66
67
68
69
70
71
 
# File 'lib/cbac/cbac_pristine/pristine.rb', line 63

def stage_permissions(pristine_files)

  pristine_files.each do |pristine_file|
    pristine_file.parse(true) if pristine_file.permissions.nil? || pristine_file.permissions.empty?
    pristine_file.permissions.each do |permission|
      permission.stage
    end
  end
end