1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
|
#
# Author:: Adam Jacob (<adam@hjksolutions.com>)
# Copyright:: Copyright (c) 2008 HJK Solutions, LLC
# License:: Apache License, Version 2.0
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#
require "chef" / "mixin" / "checksum"
class Application < Merb::Controller
def fix_up_node_id
if params.has_key?(:id)
params[:id].gsub!(/_/, '.')
end
end
def escape_node_id
if params.has_key?(:id)
params[:id].gsub(/_/, '.')
end
end
def login_required
if session[:openid]
return session[:openid]
else
self.store_location
throw(:halt, :access_denied)
end
end
def authorized_node
if session[:level] == :admin
Chef::Log.debug("Authorized as Administrator")
true
elsif session[:level] == :node
Chef::Log.debug("Authorized as node")
if session[:node_name] == params[:id].gsub(/\./, '_')
true
else
raise(
Unauthorized,
"You are not the correct node for this action: #{session[:node_name]} instead of #{params[:id]}"
)
end
else
Chef::Log.debug("Unauthorized")
raise Unauthorized, "You are not allowed to take this action."
end
end
# Store the URI of the current request in the session.
#
# We can return to this location by calling #redirect_back_or_default.
def store_location
session[:return_to] = request.uri
end
# Redirect to the URI stored by the most recent store_location call or
# to the passed default.
def redirect_back_or_default(default)
loc = session[:return_to] || default
session[:return_to] = nil
redirect loc
end
def access_denied
case content_type
when :html
store_location
redirect url(:openid_consumer)
else
raise Unauthorized, "You must authenticate first!"
end
end
# Load a cookbook and return a hash with a list of all the files of a
# given segment (attributes, recipes, definitions, libraries)
#
# === Parameters
# cookbook_id<String>:: The cookbook to load
# segment<Symbol>:: :attributes, :recipes, :definitions, :libraries
#
# === Returns
# <Hash>:: A hash consisting of the short name of the file in :name, and the full path
# to the file in :file.
def load_cookbook_segment(cookbook_id, segment)
cl = Chef::CookbookLoader.new
cookbook = cl[cookbook_id]
raise NotFound unless cookbook
files_list = segment_files(segment, cookbook)
files = Hash.new
files_list.each do |f|
full = File.expand_path(f)
name = File.basename(full)
files[name] = {
:name => name,
:file => full,
}
end
files
end
def segment_files(segment, cookbook)
files_list = nil
case segment
when :attributes
files_list = cookbook.attribute_files
when :recipes
files_list = cookbook.recipe_files
when :definitions
files_list = cookbook.definition_files
when :libraries
files_list = cookbook.library_files
else
raise ArgumentError, "segment must be one of :attributes, :recipes, :definitions or :libraries"
end
files_list
end
def load_all_files(segment)
cl = Chef::CookbookLoader.new
files = Array.new
cl.each do |cookbook|
segment_files(segment, cookbook).each do |sf|
files << {
:cookbook => cookbook.name,
:name => File.basename(sf)
}
end
end
files
end
end
|
