Class: Conjur::Role

Inherits:
RestClient::Resource
  • Object
show all
Includes:
Exists, PathBased
Defined in:
lib/conjur/role.rb

Instance Method Summary collapse

Methods included from PathBased

#account, #kind

Methods included from Exists

#exists?

Instance Method Details

#all(options = {}) ⇒ Object 



28
29
30
31
32
33
 
# File 'lib/conjur/role.rb', line 28

def all(options = {})
  JSON.parse(self["?all"].get(options)).collect do |id|
    id = [ id['account'], id['id'] ].join(':')
    Role.new(Conjur::Authz::API.host, self.options)[Conjur::API.parse_role_id(id).join('/')]
  end
end

#create(options = {}) ⇒ Object 



18
19
20
21
22
23
24
25
26
 
# File 'lib/conjur/role.rb', line 18

def create(options = {})
  log do |logger|
    logger << "Creating role #{kind}:#{identifier}"
    unless options.empty?
      logger << " with options #{options.to_json}"
    end
  end
  self.put(options)
end

#grant_to(member, admin_option = false, options = {}) ⇒ Object 



35
36
37
38
39
40
41
42
43
44
45
46
 
# File 'lib/conjur/role.rb', line 35

def grant_to(member, admin_option = false, options = {})
  log do |logger|
    logger << "Granting role #{identifier} to #{member}"
    if admin_option
      logger << " with admin option"
    end
    unless options.empty?
      logger << " and extended options #{options.to_json}"
    end
  end
  self["?members&member=#{query_escape member}&admin_option=#{query_escape admin_option}"].put(options)
end

#identifier ⇒ Object Also known as: id 



8
9
10
 
# File 'lib/conjur/role.rb', line 8

def identifier
  match_path(3..-1)
end

#members ⇒ Object 



65
66
67
68
69
 
# File 'lib/conjur/role.rb', line 65

def members
  JSON.parse(self["?members"].get(options)).collect do |json|
    RoleGrant.parse_from_json(json, self.options)
  end
end

#permitted?(resource_kind, resource_id, privilege, options = {}) ⇒ Boolean

Returns:

  • (Boolean) 


58
59
60
61
62
63
 
# File 'lib/conjur/role.rb', line 58

def permitted?(resource_kind, resource_id, privilege, options = {})
  self["?check&resource_kind=#{query_escape resource_kind}&resource_id=#{query_escape resource_id}&privilege=#{query_escape privilege}"].get(options)
  true
rescue RestClient::ResourceNotFound
  false
end

#revoke_from(member, options = {}) ⇒ Object 



48
49
50
51
52
53
54
55
56
 
# File 'lib/conjur/role.rb', line 48

def revoke_from(member, options = {})
  log do |logger|
    logger << "Revoking role #{identifier} from #{member}"
    unless options.empty?
      logger << " with options #{options.to_json}"
    end
  end
  self["?members&member=#{query_escape member}"].delete(options)
end

#roleid ⇒ Object 



14
15
16
 
# File 'lib/conjur/role.rb', line 14

def roleid
  [ , kind, identifier ].join(':')
end