85 lines
1.8 KiB
Go
85 lines
1.8 KiB
Go
package acl
|
|
|
|
import (
|
|
config "github.com/jamesread/OliveTin/internal/config"
|
|
log "github.com/sirupsen/logrus"
|
|
"context"
|
|
)
|
|
|
|
type User struct {
|
|
Username string;
|
|
}
|
|
|
|
func IsAllowedExec(cfg *config.Config, user *User, action *config.ActionButton) bool {
|
|
canExec := cfg.DefaultPermissions.Exec
|
|
|
|
log.WithFields(log.Fields{
|
|
"User": user.Username,
|
|
"Action": action.Title,
|
|
"CanExec": canExec,
|
|
}).Debug("isAllowedExec Permission Default")
|
|
|
|
for _, permissionEntry := range action.Permissions {
|
|
if isUserInGroup(user, permissionEntry.Usergroup) {
|
|
log.WithFields(log.Fields{
|
|
"User": user.Username,
|
|
"Action": action.Title,
|
|
"CanExec": permissionEntry.Exec,
|
|
}).Debug("isAllowedExec Permission Entry")
|
|
|
|
canExec = permissionEntry.Exec
|
|
}
|
|
}
|
|
|
|
log.WithFields(log.Fields{
|
|
"User": user.Username,
|
|
"Action": action.Title,
|
|
"CanExec": canExec,
|
|
}).Debug("isAllowedExec Final Result")
|
|
|
|
return canExec;
|
|
}
|
|
|
|
func IsAllowedView(cfg *config.Config, user *User, action *config.ActionButton) bool {
|
|
canView := cfg.DefaultPermissions.View
|
|
|
|
log.WithFields(log.Fields{
|
|
"User": user.Username,
|
|
"Action": action.Title,
|
|
"CanView": canView,
|
|
}).Debug("isAllowedView Permission Default")
|
|
|
|
for idx, permissionEntry := range action.Permissions {
|
|
if isUserInGroup(user, permissionEntry.Usergroup) {
|
|
log.WithFields(log.Fields{
|
|
"User": user.Username,
|
|
"Action": action.Title,
|
|
"CanView": permissionEntry.View,
|
|
"Index": idx,
|
|
}).Debug("isAllowedView Permission Entry")
|
|
|
|
canView = permissionEntry.View
|
|
}
|
|
}
|
|
|
|
log.WithFields(log.Fields{
|
|
"User": user.Username,
|
|
"Action": action.Title,
|
|
"CanView": canView,
|
|
}).Debug("isAllowedView Final Result")
|
|
|
|
return canView;
|
|
}
|
|
|
|
|
|
|
|
func isUserInGroup(user *User, usergroup string) bool {
|
|
return true;
|
|
}
|
|
|
|
func UserFromContext(ctx context.Context) *User {
|
|
return &User {
|
|
Username: "Guest",
|
|
}
|
|
}
|