3
0
Tomaž Jerman 2358d418ba Add a check to skip base resource provisioning
Before it would overwrite some RBAC rules with the pre-defined ones.
2023-02-07 13:49:05 +01:00

74 lines
2.0 KiB
Go

package provision
import (
"context"
"github.com/cortezaproject/corteza/server/pkg/filter"
"github.com/cortezaproject/corteza/server/pkg/rbac"
"github.com/cortezaproject/corteza/server/store"
"github.com/cortezaproject/corteza/server/system/types"
"go.uber.org/zap"
)
type (
uConfigFn func(context.Context, store.Storer, *zap.Logger) bool
uConfig struct {
dir string
fn uConfigFn
}
)
// provisionPartialBase check for roles and permissions
//
// It checks if there are any roles and any RBAC rules. If there are, we assume
// the provision for the base dir was already done.
func provisionPartialBase(ctx context.Context, s store.Storer, log *zap.Logger) bool {
rr, _, err := store.SearchRoles(ctx, s, types.RoleFilter{Deleted: filter.StateInclusive})
if err != nil {
log.Warn("could not make a partial import of base: roles", zap.Error(err))
return false
}
if len(rr) == 0 {
return true
}
pp, _, err := store.SearchRbacRules(ctx, s, rbac.RuleFilter{})
if err != nil {
log.Warn("could not make a partial import of base: permissions", zap.Error(err))
return false
}
if len(pp) == 0 {
return true
}
return false
}
// provisionPartialAuthClients checks for a specific set of auth client rbac rules
func provisionPartialAuthClients(ctx context.Context, s store.Storer, log *zap.Logger) bool {
set, _, err := store.SearchRbacRules(ctx, s, rbac.RuleFilter{})
if err != nil {
log.Warn("could not make a partial import of templates", zap.Error(err))
return false
}
for _, r := range set {
if rbac.ResourceType(r.Resource) == types.AuthClientResourceType {
return false
}
}
return true
}
// provisionPartialTemplates checks if any templates are in the store at all
func provisionPartialTemplates(ctx context.Context, s store.Storer, log *zap.Logger) bool {
set, _, err := store.SearchTemplates(ctx, s, types.TemplateFilter{Deleted: filter.StateInclusive})
if err != nil {
log.Warn("could not make a partial import of templates", zap.Error(err))
}
return err != nil || len(set) == 0
}