Changeset 2320 for trunk

Timestamp:

12/09/19 11:46:19 (4 years ago)

Author:

nanardon

Message:

Add LA_ACL_DEBUG env. var.

Location:

trunk/LATMOS-Accounts

Files:

• lib/LATMOS/Accounts.pm (modified) (1 diff)
• lib/LATMOS/Accounts/Acls.pm (modified) (1 diff)
• man/man8/latmos-accounts.pod (modified) (1 diff)

trunk/LATMOS-Accounts/lib/LATMOS/Accounts.pm

@@ -76 +76 @@
     bless($self, $class);
 
-    unless ($options{noacl}) {
+    unless ($options{noacl} || $ENV{LA_USERNAME}) {
         if (-f (my $aclf = join('/', $self->_configdir, 'la-acls.ini'))) {
             $self->{_acls} = LATMOS::Accounts::Acls->new($aclf) or do {

trunk/LATMOS-Accounts/lib/LATMOS/Accounts/Acls.pm

@@ -177 +177 @@
     foreach my $acl (@{$self->{_acls}}, @{$self->{_default_acls}}) {
         my $res = $acl->match($obj, $attr, $perm, $who, $groups);
-        defined($res) and return $res;
-    }
-
+        if ( defined($res) ) {
+            if ( $ENV{LA_ACL_DEBUG} ) {
+                la_log(
+                    LA_DEBUG,
+                    "Acl: %s %s for %s => %s :\n%s",
+                    ref $obj ? $obj->type . '/' . $obj->id : $obj,
+                    $attr,
+                    $perm,
+                    $res,
+                    $acl->dump,
+                );
+            }
+            return $res;
+        }
+    }
+
+    if ( $ENV{LA_ACL_DEBUG} ) {
+        la_log(
+            LA_DEBUG,
+            "Acl: %s %s for %s => No match",
+            ref $obj ? $obj->type . '/' . $obj->id : $obj,
+            $attr,
+            $perm,
+        )
+    }
     return 0;
 }
+
 
 =head2 dump

trunk/LATMOS-Accounts/man/man8/latmos-accounts.pod

@@ -334 +334 @@
 =back
 
+=head1 ENVIRONMENT VARIABLES
+
+=head2 LA_DEBUG
+
+When set print a lot of debug message
+
+=head2 LA_ACL_DEBUG
+
+Print debug message about ACL processing. LA_DEBUG must be set to see
+ACL messages
+
+=head2 LA_USERNAME
+
+The user UID set into this variable will be used as logged user.
+If set ACL will always be used.
+
+=head2 LA_NO_COMMIT
+
+If set no commit will be done in the database.
+
 =head1 BUGS