path: root/chef-server-webui/app/controllers/application.rb

#
# Author:: Adam Jacob (<adam@opscode.com>)
# Author:: Christopher Brown (<cb@opscode.com>)
# Author:: Nuo Yan (<nuo@opscode.com>)
# Copyright:: Copyright (c) 2008 Opscode, Inc.
# License:: Apache License, Version 2.0
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#

require "chef" / "mixin" / "checksum"
require "chef" / "cookbook_loader"

class Application < Merb::Controller

  include Chef::Mixin::Checksum

  before :load_environments

  # Check if the user is logged in and if the user still exists
  def login_required
   if session[:user]
     begin
       load_session_user
     rescue
       logout_and_redirect_to_login
     else
       return session[:user]
     end
   else
     self.store_location
     throw(:halt, :access_denied)
   end
  end

  def load_session_user
    Chef::WebUIUser.load(session[:user])
  rescue
    raise NotFound, "Cannot find User #{session[:user]}, maybe it got deleted by an Administrator."
  end

  def cleanup_session
    [:user,:level, :environment].each { |n| session.delete(n) }
  end

  def logout_and_redirect_to_login
    cleanup_session
    @user = Chef::WebUIUser.new
    redirect(url(:users_login), {:message => { :error => $! }, :permanent => true})
  end

  def require_admin
    raise AdminAccessRequired unless is_admin?
  end

  def is_admin?
    user = Chef::WebUIUser.load(session[:user])
    user.admin?
  end

  #return true if there is only one admin left, false otherwise
  def is_last_admin?
    count = 0
    users = Chef::WebUIUser.list
    users.each do |u, url|
      user = Chef::WebUIUser.load(u)
      if user.admin
        count = count + 1
        return false if count == 2
      end
    end
    true
  end

  #whether or not the user should be able to edit a user's admin status
  def can_edit_admin?
    return false unless is_admin? && !is_last_admin?
    true
  end

  # Store the URI of the current request in the session.
  #
  # We can return to this location by calling #redirect_back_or_default.
  def store_location
    session[:return_to] = request.uri
  end

  # Redirect to the URI stored by the most recent store_location call or
  # to the passed default.
  def redirect_back_or_default(default)
    loc = session[:return_to] || default
    session[:return_to] = nil
    redirect loc
  end

  def access_denied
    case content_type
    when :html
      store_location
      redirect url(:users_login), :message => { :error => "You don't have access to that, please login."}
    else
      raise Unauthorized, "You must authenticate first!"
    end
  end

  def load_environments
    @org_environments = Chef::Environment.list.keys.sort
  end

  # Load a cookbook and return a hash with a list of all the files of a
  # given segment (attributes, recipes, definitions, libraries)
  #
  # === Parameters
  # cookbook_id<String>:: The cookbook to load
  # segment<Symbol>:: :attributes, :recipes, :definitions, :libraries
  #
  # === Returns
  # <Hash>:: A hash consisting of the short name of the file in :name, and the full path
  #   to the file in :file.
  def load_cookbook_segment(cookbook_id, segment)
    r = Chef::REST.new(Chef::Config[:chef_server_url])
    cookbook = r.get_rest("cookbooks/#{cookbook_id}")

    raise NotFound unless cookbook

    files_list = segment_files(segment, cookbook)

    files = Hash.new
    files_list.each do |f|
      files[f['name']] = {
        :name => f["name"],
        :file => f["uri"],
      }
    end
    files
  end

  def segment_files(segment, cookbook)
    files_list = nil
    case segment
    when :attributes
      files_list = cookbook["attributes"]
    when :recipes
      files_list = cookbook["recipes"]
    when :definitions
      files_list = cookbook["definitions"]
    when :libraries
      files_list = cookbook["libraries"]
    else
      raise ArgumentError, "segment must be one of :attributes, :recipes, :definitions or :libraries"
    end
    files_list
  end

  def build_tree(name, node)
    html = "<table id='#{name}' class='tree table'>"
    html << "<tr><th class='first'>Attribute</th><th class='last'>Value</th></tr>"
    count = 0
    parent = 0
    append_tree(name, html, node, count, parent)
    html << "</table>"
    html
  end

  def append_tree(name, html, node, count, parent)
    to_do = node
    #to_do = node.kind_of?(Chef::Node) ? node.attribute : node
    Chef::Log.error("I have #{to_do.inspect}")
    to_do.sort{ |a,b| a[0] <=> b[0] }.each do |key, value|
      Chef::Log.error("I am #{key.inspect} #{value.inspect}")
      to_send = Array.new
      count += 1
      is_parent = false
      local_html = ""
      local_html << "<tr id='#{name}-#{count}' class='collapsed #{name}"
      if parent != 0
        local_html << " child-of-#{name}-#{parent}' style='display: none;'>"
      else
        local_html << "'>"
      end
      local_html << "<td class='table-key'><span toggle='#{name}-#{count}'/>#{key}</td>"
      case value
      when Hash
        is_parent = true
        local_html << "<td></td>"
        p = count
        to_send << Proc.new { append_tree(name, html, value, count, p) }
      when Array
        is_parent = true
        local_html << "<td></td>"
        as_hash = {}
        value.each_index { |i| as_hash[i] = value[i] }
        p = count
        to_send << Proc.new { append_tree(name, html, as_hash, count, p) }
      else
        local_html << "<td><div class='json-attr'>#{value}</div></td>"
      end
      local_html << "</tr>"
      local_html.sub!(/class='collapsed/, 'class=\'collapsed parent') if is_parent
      local_html.sub!(/<span/, "<span class='expander'") if is_parent
      html << local_html
      to_send.each { |s| count = s.call }
      count += to_send.length
    end
    count
  end

  def syntax_highlight(file_url)
    Chef::Log.debug("fetching file from '#{file_url}' for highlighting")
    r = Chef::REST.new(Chef::Config[:chef_server_url])
    highlighted_file = nil
    r.fetch(file_url) do |tempfile|
      tokens = CodeRay.scan_file(tempfile.path, :ruby)
      highlighted_file = CodeRay.encode_tokens(tokens, :span)
    end
    highlighted_file
  end

  def show_plain_file(file_url)
    Chef::Log.debug("fetching file from '#{file_url}' for highlighting")
    r = Chef::REST.new(Chef::Config[:chef_server_url])
    r.fetch(file_url) do |tempfile|
      if binary?(tempfile.path)
        return "Binary file not shown"
      elsif ((File.size(tempfile.path) / (1048576)) > 5)
        return "File too large to display"
      else
        return IO.read(tempfile.path)
      end
    end
  end

  def binary?(file)
    s = (File.read(file, File.stat(file).blksize) || "")
    s.empty? || ( s.count( "^ -~", "^\r\n" ).fdiv(s.size) > 0.3 || s.index( "\x00" ))
  end

  def str_to_bool(str)
    str =~ /true/ ? true : false
  end

  #for showing search result
  def determine_name(type, object)
    case type
    when :node, :role, :client
      object.name
    else
      params[:id]
    end
  end

  def get_available_recipes
    r = Chef::REST.new(Chef::Config[:chef_server_url])
    all_recipes = Array.new
    r.get_rest('cookbooks/_recipes').keys.each do |cb|
      all_recipes << all[cb].sort{|x,y| y <=> x }.map do |ver, recipes|
        recipes.map{ |rn| rn == "default" ? "#{cb} #{ver}" : "#{cb}::#{rn} #{ver}" }
      end
    end
    all_recipes.flatten.uniq
  end

  def convert_newline_to_br(string)
    string.to_s.gsub(/\n/, '<br />') unless string.nil?
  end

end