Class: Gitolite::Dtg::GitoliteAdmin

Inherits:
Object
  • Object
show all
Defined in:
lib/gitolite-dtg/gitolite_admin.rb

Constant Summary collapse

CONF = 
"gitolite.conf"
CONFDIR = 
"conf"
BRANCH = 
"master"

Instance Attribute Summary collapse

Class Method Summary collapse

Instance Method Summary collapse

Constructor Details

#initialize(path, options = {}) ⇒ GitoliteAdmin

Intialize with the path to the gitolite-admin repository



14
15
16
17
18
19
20
21
22
23
24
 
# File 'lib/gitolite-dtg/gitolite_admin.rb', line 14

def initialize(path, options = {})
  @path = path
  @gl_admin = Grit::Repo.new(path)

  @conf = options[:conf] || CONF
  @confdir = options[:confdir] || CONFDIR
  @branch  = options[:branch] || BRANCH

  # Load the configuration
  load_data
end

Instance Attribute Details

#config ⇒ Object

Returns the value of attribute config.



6
7
8
 
# File 'lib/gitolite-dtg/gitolite_admin.rb', line 6

def config
  @config
end

#gl_admin ⇒ Object

Returns the value of attribute gl_admin.



6
7
8
 
# File 'lib/gitolite-dtg/gitolite_admin.rb', line 6

def gl_admin
  @gl_admin
end

Class Method Details

.is_gitolite_admin_repo?(dir) ⇒ Boolean

Checks to see if the given path is a gitolite-admin repository A valid repository contains a conf folder, keydir folder, and a configuration file within the conf folder

Returns:

  • (Boolean) 


35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
 
# File 'lib/gitolite-dtg/gitolite_admin.rb', line 35

def self.is_gitolite_admin_repo?(dir)
  # First check if it is a git repository
  begin
  repo = Grit::Repo.new(dir)
  rescue Grit::InvalidGitRepositoryError
  return false
  end

  # If we got here it is a valid git repo,
  # now check directory structure
  cbl = repo.tree / 'conf/gitolite.conf'
  if cbl != nil
  return true
  else
  return false
  end
end

Instance Method Details

#authorize(repo_name, username, resource_path, wanted_access) ⇒ Object

repo_name - the repository name username - the authenticated user name resource_path - the path relative to the repository root that

the user is requesting access to

wanted_access - the type of access the user is requesting. can

be 'R' or 'W'



59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
 
# File 'lib/gitolite-dtg/gitolite_admin.rb', line 59

def authorize(repo_name, username, resource_path, wanted_access)
  if @config == nil
    return false
  end
  repo = @config.repos[repo_name]
  if repo != nil
    repo.permissions.each do |perm_hash|
      perm_hash.each do |perm, list|
        #process a permission line
        list.each do |refex, users|
        
        ul = []
         users.each do |user|
          if user[0,1]=='@'
              gname = user.gsub('@', '')
              if ((@config.special_groups.include? gname) == false)
              grp = @config.flat_groups[gname]
              ul.concat(grp)
            else
              ul.push(user)
              end
          else
            ul.push(user)
          end
         end
         ul.uniq!
         
         user_matches = false
         if ((ul.include? "@all") || ((ul.include? "@raven") && (username != nil)) || (ul.include? username))
          user_matches = true
         end
         
         if user_matches == false
          next
        end
        
        
        refex_applies = false;
        if refex == ''
          refex_applies = true;
        else
          dirs = []
          dirs.push(refex)
          dirs.push(resource_path)

          common_prefix = dirs.abbrev.keys.min_by {|key| key.length}.chop
          common_directory = common_prefix.sub(%r{/[^/]*$}, '')
          
          if common_directory != ''
            refex_applies = true
          end
        end
        if !refex_applies
          next # if rule refex does not refer to the resource the user requested, go to the next rule
        end
        
         
         access_matches = false
         if (perm.include? wanted_access)
          access_matches = true
         end
         
         # authorization cases. at this point, user_matches==true and refex_applies==true:
         if (perm == "-")
          return false
        elsif (user_matches && access_matches)
          #print "Access allowed by matching rule: " + perm + " "
          #print list
          #print "\n"
          return true
        else
          next
         end

        end
      end
    end
  end
  return false
end

#reload! ⇒ Object

This method will destroy the in-memory data structures and reload everything from the file system



28
29
30
 
# File 'lib/gitolite-dtg/gitolite_admin.rb', line 28

def reload!
  load_data
end