2a4054c9bc
Remove rule reset from roles cli command Add generic "provision" command for each binary and (re)set perm. rules Permission rules are now separated and part of AccessControl service Facility for watchers was added.
27 lines
523 B
Go
27 lines
523 B
Go
package service
|
|
|
|
import (
|
|
"context"
|
|
|
|
"github.com/crusttech/crust/compose/internal/service"
|
|
)
|
|
|
|
// Provision orchestrates various tasks after deployment
|
|
//
|
|
func Provision(ctx context.Context) (err error) {
|
|
if err = resetDefaultPermissionRules(ctx); err != nil {
|
|
return
|
|
}
|
|
|
|
// @todo move migration here
|
|
|
|
return
|
|
}
|
|
|
|
// Resets default permission rules for compose resources
|
|
func resetDefaultPermissionRules(ctx context.Context) error {
|
|
var ac = service.DefaultAccessControl
|
|
|
|
return ac.Grant(ctx, ac.DefaultRules()...)
|
|
}
|