Changeset 316

Timestamp:

08/08/09 18:56:00 (15 years ago)

Author:

nanardon

Message:

• implement acls in base

Location:

LATMOS-Accounts/lib/LATMOS/Accounts

Files:

• Bases.pm (modified) (2 diffs)
• Bases/Objects.pm (modified) (2 diffs)

LATMOS-Accounts/lib/LATMOS/Accounts/Bases.pm

@@ -47 +47 @@
     $base->{wexported} = 0;
     $base->{defattr} = $options{defattr};
+    $base->{_acls} = $options{acls};
     la_log(LA_DEBUG, 'Instanciate base %s (%s)', ($options{label} || 'N/A'), $pclass);
     $base
@@ -434 +435 @@
 }
 
+sub check_acl {
+    my ($self, $obj, $attr, $perm) = @_;
+    if ($self->{_acls}) {
+        my $who = $self->{_users} || '';
+        my $groups;
+        return $self->{_acls}->check($obj, $attr, $perm, $who, $groups);
+    } else {
+        # No acls, woot
+        return 1;
+    }
+}
 1;
 

LATMOS-Accounts/lib/LATMOS/Accounts/Bases/Objects.pm

@@ -193 +193 @@
     my ($self, $cfield) = @_;
     my $field = $self->base->get_field_name($self->type, $cfield, 'r') or return;
+    $self->base->check_acl($self, $cfield, 'r') or return;
     $self->get_field($field);
 }
@@ -216 +217 @@
     my ($self, %cdata) = @_;
     my %data;
+    foreach my $cfield (keys %cdata) {
+        $self->base->check_acl($self, $cfield, 'w') or return;
+    }
     foreach my $cfield (keys %cdata) {
         my $field = $self->base->get_field_name($self->type, $cfield) or next;