7e385fc126
Some checks failed
SonarQube / SonarQube (push) Failing after 5m28s
E2e test on main branch push / server and client test (map[name:admin port:8080]) (push) Failing after 3m33s
Server and lib tests / Library test (js) (push) Failing after 1m36s
Server and lib tests / Library test (vue) (push) Successful in 2m24s
Server and lib tests / Web client test (admin) (push) Successful in 2m52s
Server and lib tests / Web client test (compose) (push) Successful in 3m23s
Server and lib tests / Web client test (discovery) (push) Successful in 2m49s
Server and lib tests / Web client test (one) (push) Successful in 2m52s
Server and lib tests / Web client test (privacy) (push) Successful in 2m44s
Server and lib tests / Web client test (reporter) (push) Successful in 2m56s
Server and lib tests / Web client test (workflow) (push) Successful in 3m0s
Server and lib tests / Server tests (push) Failing after 4m55s
E2e test on main branch push / notify-failure (push) Failing after 9s
Server and lib tests / Send matrix testing notification (push) Successful in 2s
Mark stale issues and pull requests / stale (push) Successful in 40s
74 lines
2.0 KiB
Go
74 lines
2.0 KiB
Go
package provision
|
|
|
|
import (
|
|
"context"
|
|
|
|
"github.com/cortezaproject/corteza/server/pkg/filter"
|
|
"github.com/cortezaproject/corteza/server/pkg/rbac"
|
|
"github.com/cortezaproject/corteza/server/store"
|
|
"github.com/cortezaproject/corteza/server/system/types"
|
|
"go.uber.org/zap"
|
|
)
|
|
|
|
type (
|
|
uConfigFn func(context.Context, store.Storer, *zap.Logger) bool
|
|
uConfig struct {
|
|
dir string
|
|
fn uConfigFn
|
|
}
|
|
)
|
|
|
|
// provisionPartialBase check for roles and permissions
|
|
//
|
|
// It checks if there are any roles and any RBAC rules. If there are, we assume
|
|
// the provision for the base dir was already done.
|
|
func provisionPartialBase(ctx context.Context, s store.Storer, log *zap.Logger) bool {
|
|
rr, _, err := store.SearchRoles(ctx, s, types.RoleFilter{Deleted: filter.StateInclusive})
|
|
if err != nil {
|
|
log.Warn("could not make a partial import of base: roles", zap.Error(err))
|
|
return false
|
|
}
|
|
if len(rr) == 0 {
|
|
return true
|
|
}
|
|
|
|
pp, _, err := store.SearchRbacRules(ctx, s, rbac.RuleFilter{})
|
|
if err != nil {
|
|
log.Warn("could not make a partial import of base: permissions", zap.Error(err))
|
|
return false
|
|
}
|
|
if len(pp) == 0 {
|
|
return true
|
|
}
|
|
|
|
return false
|
|
}
|
|
|
|
// provisionPartialAuthClients checks for a specific set of auth client rbac rules
|
|
func provisionPartialAuthClients(ctx context.Context, s store.Storer, log *zap.Logger) bool {
|
|
set, _, err := store.SearchRbacRules(ctx, s, rbac.RuleFilter{})
|
|
|
|
if err != nil {
|
|
log.Warn("could not make a partial import of templates", zap.Error(err))
|
|
return false
|
|
}
|
|
|
|
for _, r := range set {
|
|
if rbac.ResourceType(r.Resource) == types.AuthClientResourceType {
|
|
return false
|
|
}
|
|
}
|
|
|
|
return true
|
|
}
|
|
|
|
// provisionPartialTemplates checks if any templates are in the store at all
|
|
func provisionPartialTemplates(ctx context.Context, s store.Storer, log *zap.Logger) bool {
|
|
set, _, err := store.SearchTemplates(ctx, s, types.TemplateFilter{Deleted: filter.StateInclusive})
|
|
if err != nil {
|
|
log.Warn("could not make a partial import of templates", zap.Error(err))
|
|
}
|
|
|
|
return err != nil || len(set) == 0
|
|
}
|