vmario/fabaccess-bffh
1
0
Fork 0
mirror of https://gitlab.com/fabinfra/fabaccess/bffh.git synced 2024-11-22 14:57:56 +01:00
Code Issues Packages Projects Releases Wiki Activity

only use internal role db for now

Browse Source
This commit is contained in:
Gregor Reitzenstein 2021-01-20 12:36:02 +00:00
parent cda947a0e9
commit 5295611563
1 changed files with 3 additions and 20 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

23
src/db/access.rs
View File

@ -34,29 +34,16 @@ pub use internal::{init, Internal};
pub struct AccessControl { pub struct AccessControl {
pub internal: Internal, pub internal: Internal,
sources: HashMap<String, Box<dyn RoleDB>>,
} }
impl AccessControl { impl AccessControl {
pub fn new(internal: Internal) -> Self { pub fn new(internal: Internal) -> Self {
Self { Self {
internal: internal, internal: internal,
sources: HashMap::new()
} }
} }
/// Adds an access control source. If a source with the same name already existed it is
/// replaced.
pub fn add_source_unchecked(&mut self, name: String, source: Box<dyn RoleDB>) {
self.sources.insert(name, source);
}
pub async fn check<P: AsRef<Permission>>(&self, user: &UserData, perm: &P) -> Result<bool> { pub async fn check<P: AsRef<Permission>>(&self, user: &UserData, perm: &P) -> Result<bool> {
for v in self.sources.values() {
if v.check(user, perm.as_ref())? {
return Ok(true);
}
}
if self.internal.check(user, perm.as_ref())? { if self.internal.check(user, perm.as_ref())? {
return Ok(true); return Ok(true);
} }
@ -67,10 +54,8 @@ impl AccessControl {
pub async fn check_roles<P: AsRef<Permission>>(&self, roles: &[RoleIdentifier], perm: &P) pub async fn check_roles<P: AsRef<Permission>>(&self, roles: &[RoleIdentifier], perm: &P)
-> Result<bool> -> Result<bool>
{ {
for v in self.sources.values() { if self.internal.check_roles(roles, perm.as_ref())? {
if v.check_roles(roles, perm.as_ref())? { return Ok(true);
return Ok(true);
}
} }
return Ok(false); return Ok(false);
@ -80,9 +65,7 @@ impl AccessControl {
impl fmt::Debug for AccessControl { impl fmt::Debug for AccessControl {
fn fmt(&self, f: &mut fmt::Formatter) -> fmt::Result { fn fmt(&self, f: &mut fmt::Formatter) -> fmt::Result {
let mut b = f.debug_struct("AccessControl"); let mut b = f.debug_struct("AccessControl");
for (name, roledb) in self.sources.iter() { b.field("internal", &self.internal.get_type_name().to_string());
b.field(name, &roledb.get_type_name().to_string());
}
b.finish() b.finish()
} }
} }