From 9a443988b73b53238e1ad82a2d0330c72bc869f2 Mon Sep 17 00:00:00 2001
From: John Keiser <jkeiser@opscode.com>
Date: Thu, 24 Jul 2014 06:42:06 -0600
Subject: Both organization/_acl and organizations/_acl exist

---
 lib/chef_zero/data_store/default_facade.rb | 20 +++++++++++++++-----
 1 file changed, 15 insertions(+), 5 deletions(-)

(limited to 'lib/chef_zero/data_store/default_facade.rb')

diff --git a/lib/chef_zero/data_store/default_facade.rb b/lib/chef_zero/data_store/default_facade.rb
index fd5e7b7..a44e3e0 100644
--- a/lib/chef_zero/data_store/default_facade.rb
+++ b/lib/chef_zero/data_store/default_facade.rb
@@ -3,14 +3,16 @@ require 'chef_zero/data_store/interface_v2'
 module ChefZero
   module DataStore
     class DefaultFacade < ChefZero::DataStore::InterfaceV2
-      def initialize(real_store, osc_compat)
+      def initialize(real_store, osc_compat, superusers = [ 'pivotal' ])
         @real_store = real_store
         @osc_compat = osc_compat
+        @superusers = superusers
         clear
       end
 
       attr_reader :real_store
       attr_reader :osc_compat
+      attr_reader :superusers
 
       def default(path, name=nil)
         value = @defaults
@@ -73,9 +75,10 @@ module ChefZero
           'acls' => {}
         }
         unless osc_compat
-          @defaults['users'] = {
-            'pivotal' => '{}'
-          }
+          @defaults['users'] = {}
+          superusers.each do |superuser|
+            @defaults['users'][superuser] = '{}'
+          end
         end
       end
 
@@ -310,8 +313,15 @@ module ChefZero
             },
             'nodes' => {},
             'roles' => {},
+            'organization' => %'{
+              "create": { "actors": #{superusers.inspect} },
+              "read": { "actors": #{superusers.inspect}, "groups": [ "admins", "users" ] },
+              "update": { "actors": #{superusers.inspect} },
+              "delete": { "actors": #{superusers.inspect} },
+              "grant": { "actors": #{superusers.inspect} }
+            }',
             'organizations' => '{
-              "read": { "groups": [ "admins", "users" ] }
+              "read": { "groups": [ "admins", "users" ]}
             }',
             'sandboxes' => {}
           },
-- 
cgit v1.2.1