grim/hgkeeper

auto reload the access model and policy if the admin repo is accessed. This does both push and pulls right now.

2019-09-12, Gary Kramlich
e2f2ff46f491
auto reload the access model and policy if the admin repo is accessed. This does both push and pulls right now.
package access
import (
"path/filepath"
"sync"
)
const (
modelFilename = "model.conf"
policyFilename = "policy.csv"
)
var (
accessLock sync.Mutex
adminRepoPath string
adminRepoName string
)
func Setup(reposPath, adminRepo string) error {
adminRepoName = adminRepo
adminRepoPath = filepath.Join(reposPath, adminRepo)
return Refresh()
}
func AdminRepo() string {
return adminRepoName
}
func AdminRepoPath() string {
return adminRepoPath
}
// Refresh will try to reload the casbin model and policies followed by SSH
// keys. If there is an error it's possible that the casbin model and polcies
// could have been updated but the ssh keys were not.
func Refresh() error {
accessLock.Lock()
defer accessLock.Unlock()
if err := refreshEnforcer(adminRepoPath); err != nil {
return err
}
if err := refreshKeys(adminRepoPath); err != nil {
return err
}
return nil
}
func check(user, repo, action string) bool {
return enforcer.Enforce(user, repo, action)
}
func CanRead(user, repo string) bool {
return check(user, repo, "read")
}
func CanWrite(user, repo string) bool {
return check(user, repo, "write")
}
func CanInit(user, repo string) bool {
return check(user, repo, "init")
}