Added perms PDC to supplement setperms/getperms
- Also added pygitolite.py as a helper library for python PDC apps
This commit is contained in:
Richard Bateman
Sitaram Chamarty
parent
108f8e96a2
commit
00a926bf48
115
contrib/adc/perms
Executable file
115
contrib/adc/perms
Executable file
|
|
@ -0,0 +1,115 @@
|
||||||
|
#!/usr/bin/env python
|
||||||
|
#
|
||||||
|
# Original author: Richard Bateman <taxilian@gmail.com>
|
||||||
|
#
|
||||||
|
# Any questions or concerns about how this works should be addressed to
|
||||||
|
# me, not to sitaram. Please note that neither I nor sitaram make any
|
||||||
|
# guarantees about the security or usefulness of this script. It may
|
||||||
|
# be used without warantee or any guarantee of any kind.
|
||||||
|
#
|
||||||
|
# That said, it works fine for me.
|
||||||
|
#
|
||||||
|
# This script is licensed under the New BSD license
|
||||||
|
# Copyright 2011 Richard Bateman
|
||||||
|
#
|
||||||
|
|
||||||
|
import sys, os
|
||||||
|
from pygitolite import *
|
||||||
|
|
||||||
|
def list(gl, user, repo, filter_var = ""):
|
||||||
|
perms = gl.get_perms(repo, user)
|
||||||
|
for var, ppl in perms.iteritems():
|
||||||
|
if filter_var == "" or filter_var == var:
|
||||||
|
print "%s:" % var
|
||||||
|
for item in ppl:
|
||||||
|
print " %s" % item
|
||||||
|
|
||||||
|
def clear(gl, user, repo, filter_var = ""):
|
||||||
|
try:
|
||||||
|
os.system(r"echo Are you sure? Type YES \(all caps\) to continue: ")
|
||||||
|
bval = raw_input()
|
||||||
|
if bval != "YES":
|
||||||
|
print "Canceling..."
|
||||||
|
|
||||||
|
if filter_var == "":
|
||||||
|
gl.set_perms(repo, user, {})
|
||||||
|
else:
|
||||||
|
perms = gl.get_perms(repo, user)
|
||||||
|
if filter_var in perms:
|
||||||
|
del perms[filter_var]
|
||||||
|
gl.set_perms(repo, user, perms)
|
||||||
|
print "Perms after clear:"
|
||||||
|
list(gl, user, repo)
|
||||||
|
except:
|
||||||
|
print "An error occured"
|
||||||
|
|
||||||
|
def add(gl, user, repo, var, *users):
|
||||||
|
perms = gl.get_perms(repo, user)
|
||||||
|
if var not in perms:
|
||||||
|
perms[var] = []
|
||||||
|
if len(users) == 0:
|
||||||
|
print "Usage: perms add %s %s <username>" % (repo, var)
|
||||||
|
return
|
||||||
|
for cur in users:
|
||||||
|
if cur not in perms[var]:
|
||||||
|
perms[var].append(cur)
|
||||||
|
gl.set_perms(repo, user, perms)
|
||||||
|
list(gl, user, repo, var)
|
||||||
|
|
||||||
|
def set(gl, user, repo, var, *users):
|
||||||
|
perms = gl.get_perms(repo, user)
|
||||||
|
perms[var] = []
|
||||||
|
if len(users) == 0:
|
||||||
|
print "Usage: perms set %s %s <username>" % (repo, var)
|
||||||
|
return
|
||||||
|
for cur in users:
|
||||||
|
if cur not in perms[var]:
|
||||||
|
perms[var].append(cur)
|
||||||
|
gl.set_perms(repo, user, perms)
|
||||||
|
list(gl, user, repo, var)
|
||||||
|
|
||||||
|
def remove(gl, user, repo, var, *users):
|
||||||
|
perms = gl.get_perms(repo, user)
|
||||||
|
if var not in perms:
|
||||||
|
print "%s isn't a valid type" % var
|
||||||
|
return
|
||||||
|
if len(users) == 0:
|
||||||
|
print "No users specified to remove; perhaps you want clear?"
|
||||||
|
return
|
||||||
|
for cur in users:
|
||||||
|
if cur in perms[var]:
|
||||||
|
perms[var].remove(cur)
|
||||||
|
gl.set_perms(repo, user, perms)
|
||||||
|
list(gl, user, repo, var)
|
||||||
|
|
||||||
|
commands = {
|
||||||
|
"list": list,
|
||||||
|
"clear": clear,
|
||||||
|
"add": add,
|
||||||
|
"set": set,
|
||||||
|
"remove": remove,
|
||||||
|
}
|
||||||
|
|
||||||
|
if __name__ == "__main__":
|
||||||
|
if "GL_USER" not in os.environ:
|
||||||
|
raise "No user!"
|
||||||
|
user = os.environ["GL_USER"]
|
||||||
|
command = sys.argv[1] if len(sys.argv) > 2 else ""
|
||||||
|
if len(sys.argv) < 3 or command not in commands:
|
||||||
|
print "Usage: perms <command> <repository> <args>"
|
||||||
|
print " list <repository> [TYPE]"
|
||||||
|
print " clear <repository>"
|
||||||
|
print " add <repository> <TYPE> [user and group list]"
|
||||||
|
print " set <repository> <TYPE> [user and group list]"
|
||||||
|
print " remove <repository> <TYPE> [user and group list]"
|
||||||
|
sys.exit(1)
|
||||||
|
repo = sys.argv[2]
|
||||||
|
|
||||||
|
gl = gitolite()
|
||||||
|
rights, owner = gl.get_rights_and_owner(repo, user)
|
||||||
|
|
||||||
|
if owner != user:
|
||||||
|
print "Either %s does not exist or you are not the owner." % repo
|
||||||
|
sys.exit(1)
|
||||||
|
|
||||||
|
commands[command](gl, user, repo, *sys.argv[3:])
|
||||||
77
contrib/adc/pygitolite.py
Normal file
77
contrib/adc/pygitolite.py
Normal file
|
|
@ -0,0 +1,77 @@
|
||||||
|
#!/usr/bin/env python
|
||||||
|
#
|
||||||
|
# Original author: Richard Bateman <taxilian@gmail.com>
|
||||||
|
#
|
||||||
|
# Any questions or concerns about how this works should be addressed to
|
||||||
|
# me, not to sitaram. Please note that neither I nor sitaram make any
|
||||||
|
# guarantees about the security or usefulness of this script. It may
|
||||||
|
# be used without warantee or any guarantee of any kind.
|
||||||
|
#
|
||||||
|
# This script is licensed under the New BSD license
|
||||||
|
# Copyright 2011 Richard Bateman
|
||||||
|
#
|
||||||
|
|
||||||
|
import sys, os, subprocess
|
||||||
|
|
||||||
|
class gitolite(object):
|
||||||
|
def __init__(self, **kvargs):
|
||||||
|
self.GL_BINDIR = kvargs["GL_BINDIR"] if "GL_BINDIR" in kvargs else os.environ["GL_BINDIR"]
|
||||||
|
self.user = kvargs["GL_USER"] if "GL_USER" in kvargs else os.environ["GL_USER"]
|
||||||
|
pass
|
||||||
|
|
||||||
|
def gitolite_execute(self, command, std_inputdata = None):
|
||||||
|
cmd = "perl -I%s -Mgitolite -e '%s'" % (self.GL_BINDIR,command)
|
||||||
|
p = subprocess.Popen(cmd, shell = True, stdout = subprocess.PIPE, stderr = subprocess.PIPE, stdin = subprocess.PIPE)
|
||||||
|
stdout, stderr = p.communicate(std_inputdata)
|
||||||
|
if p.returncode is not 0:
|
||||||
|
raise Exception(stderr)
|
||||||
|
return stdout.strip()
|
||||||
|
|
||||||
|
def run_custom_command(self, repo, user, command, extra = None):
|
||||||
|
os.environ["SSH_ORIGINAL_COMMAND"] = "%s %s" % (command, repo)
|
||||||
|
return self.gitolite_execute('run_custom_command("%s")' % user, extra)
|
||||||
|
|
||||||
|
def get_perms(self, repo, user):
|
||||||
|
full = self.run_custom_command(repo, user, "getperms")
|
||||||
|
plist = full.split("\n")
|
||||||
|
perms = {}
|
||||||
|
for line in plist:
|
||||||
|
if line == "":
|
||||||
|
continue
|
||||||
|
var, strlist = line.split(" ", 1)
|
||||||
|
perms[var] = strlist.split(" ")
|
||||||
|
|
||||||
|
return perms
|
||||||
|
|
||||||
|
def set_perms(self, repo, user, perms):
|
||||||
|
permstr = ""
|
||||||
|
for var, curlist in perms.iteritems():
|
||||||
|
if len(curlist) == 0:
|
||||||
|
continue;
|
||||||
|
varstr = var
|
||||||
|
for cur in curlist:
|
||||||
|
varstr += " %s" % cur
|
||||||
|
permstr = permstr + "\n" + varstr
|
||||||
|
resp = self.run_custom_command(repo, user, "setperms", permstr.strip())
|
||||||
|
|
||||||
|
def valid_owned_repo(self, repo, user):
|
||||||
|
rights, user = self.get_rights_and_owner(repo, user)
|
||||||
|
return owner == user
|
||||||
|
|
||||||
|
def get_rights_and_owner(self, repo, user):
|
||||||
|
if not repo.endswith(".git"):
|
||||||
|
repo = "%s.git" % repo
|
||||||
|
ans = self.gitolite_execute('cli_repo_rights("%s")' % repo)
|
||||||
|
perms, owner = ans.split(" ")
|
||||||
|
rights = {"Read": "R" in perms, "Write": "W" in perms, "Create": "C" in perms}
|
||||||
|
return rights, owner
|
||||||
|
|
||||||
|
if __name__ == "__main__":
|
||||||
|
if "GL_USER" not in os.environ:
|
||||||
|
raise "No user!"
|
||||||
|
user = os.environ["GL_USER"]
|
||||||
|
repo = sys.argv[1]
|
||||||
|
|
||||||
|
gl = gitolite()
|
||||||
|
print gl.get_rights_and_owner(repo, user)
|
||||||
|
print gl.get_perms(repo, user)
|
||||||
Loading…
Reference in a new issue