blob: 2ed5b7869687aac1a6c9096b755e18a8abdbbe98 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
|
require "ffi_yajl"
require_relative "../rest_base"
require_relative "../chef_data/data_normalizer"
require_relative "../chef_data/acl_path"
module ChefZero
module Endpoints
# /organizations/ORG/THING/NAME/_acl
# Where THING is:
# - clients, data, containers, cookbooks, environments
# groups, roles, nodes, users
# or
# /organizations/ORG/organization/_acl
# /users/NAME/_acl
class AclsEndpoint < RestBase
def get(request)
path = request.rest_path[0..-2] # Strip off _acl
path = path[0..1] if path.size == 3 && path[0] == "organizations" && %w{organization organizations}.include?(path[2])
acl_path = ChefData::AclPath.get_acl_data_path(path)
unless acl_path
raise RestErrorResponse.new(404, "Object not found: #{build_uri(request.base_uri, request.rest_path)}")
end
acls = FFI_Yajl::Parser.parse(get_data(request, acl_path))
acls = ChefData::DataNormalizer.normalize_acls(acls)
if request.query_params["detail"] == "granular"
acls.each do |perm, ace|
acls[perm]["actors"] = []
end
else
acls.each do |perm, ace|
acls[perm].delete("clients")
acls[perm].delete("users")
end
end
json_response(200, acls)
end
end
end
end
|
