func SetPrivilegeHiddenTag(data map[interface{}]interface{}, tagName string, user *rbac.User, method string, path string) {
if user.HasPermission(componentName, method, path) {
data[tagName] = "<div class='btn-group'>"
} else {
data[tagName] = "<div hidden>"
}
}
func GetDashboardTabMenu(user *rbac.User, activeTab string) string {
if user == nil {
return ""
}
buffer := bytes.Buffer{}
buffer.WriteByte('\n')
if user.HasPermission(componentName, "GET", "/gui/dashboard/topology") {
if activeTab == "topology" {
buffer.WriteString(" <li role='presentation' class='active'><a href='#' role='tab' >Topology</a></li>\n")
} else {
buffer.WriteString(" <li role='presentation'><a href='/gui/dashboard/topology/' role='tab' >Topology</a></li>\n")
}
}
if user.HasPermission(componentName, "GET", "/gui/dashboard/healthcheck") {
if activeTab == "healthcheck" {
buffer.WriteString(" <li role='presentation' class='active'><a href='#' role='tab' >Health Check</a></li>\n")
} else {
buffer.WriteString(" <li role='presentation'><a href='/gui/dashboard/healthcheck/list' role='tab' >Health Check</a></li>\n")
}
}
if user.HasPermission(componentName, "GET", "/gui/dashboard/bluegreen") {
if activeTab == "bluegreen" {
buffer.WriteString(" <li role='presentation' class='active'><a href='#' role='tab' >BlueGreen</a></li>\n")
} else {
buffer.WriteString(" <li role='presentation'><a href='/gui/dashboard/bluegreen/' role='tab' >BlueGreen</a></li>\n")
}
}
if user.HasPermission(componentName, "GET", "/gui/dashboard/appservice") {
if activeTab == "appservice" {
buffer.WriteString(" <li role='presentation' class='active'><a href='#' role='tab' >AppService</a></li>\n")
} else {
buffer.WriteString(" <li role='presentation'><a href='/gui/dashboard/appservice/' role='tab' >AppService</a></li>\n")
}
}
if user.HasPermission(componentName, "GET", "/gui/dashboard/deploy") {
if activeTab == "deploy" {
buffer.WriteString(" <li role='presentation' class='active'><a href='#' role='tab' >Deployment</a></li>\n")
} else {
buffer.WriteString(" <li role='presentation'><a href='/gui/dashboard/deploy/' role='tab' >Deployment</a></li>\n")
}
}
return buffer.String()
}
func (storageEtcd *StorageEtcd) LoadAllUser() ([]rbac.User, error) {
keysAPI, err := etcd.EtcdClient.GetKeysAPI()
if err != nil {
log.Error("Get keysAPI error %s", err)
return nil, err
}
response, err := keysAPI.Get(context.Background(), etcd.EtcdClient.EtcdBasePath+"/user", nil)
if err != nil {
log.Error("Load all user error: %s", err)
log.Error(response)
return nil, err
}
userSlice := make([]rbac.User, 0)
for _, node := range response.Node.Nodes {
user := rbac.User{}
err := json.Unmarshal([]byte(node.Value), &user)
if err != nil {
log.Error("Unmarshal user %v error %s", node.Value, err)
return nil, err
}
// User doesn't have role data but only role name so load role
roleSlice := make([]*rbac.Role, 0)
for _, savedRole := range user.RoleSlice {
role, err := storageEtcd.LoadRole(savedRole.Name)
if err != nil {
log.Error("Fail to load role with name %s error %s", savedRole.Name, err)
} else {
roleSlice = append(roleSlice, role)
}
}
user.RoleSlice = roleSlice
userSlice = append(userSlice, user)
}
return userSlice, nil
}
func (storageEtcd *StorageEtcd) LoadUser(name string) (*rbac.User, error) {
keysAPI, err := etcd.EtcdClient.GetKeysAPI()
if err != nil {
log.Error("Get keysAPI error %s", err)
return nil, err
}
response, err := keysAPI.Get(context.Background(), etcd.EtcdClient.EtcdBasePath+"/user/"+name, nil)
etcdError, _ := err.(client.Error)
if etcdError.Code == client.ErrorCodeKeyNotFound {
return nil, etcdError
}
if err != nil {
log.Error("Load name with name %s error: %s", name, err)
log.Error(response)
return nil, err
}
user := new(rbac.User)
err = json.Unmarshal([]byte(response.Node.Value), &user)
if err != nil {
log.Error("Unmarshal user %v error %s", response.Node.Value, err)
return nil, err
}
// User doesn't have role data but only role name so load role
roleSlice := make([]*rbac.Role, 0)
for _, savedRole := range user.RoleSlice {
role, err := storageEtcd.LoadRole(savedRole.Name)
if err != nil {
log.Error("Fail to load role with name %s error %s", savedRole.Name, err)
} else {
roleSlice = append(roleSlice, role)
}
}
user.RoleSlice = roleSlice
return user, nil
}
func GetSystemRBACTabMenu(user *rbac.User, activeTab string) string {
if user == nil {
return ""
}
buffer := bytes.Buffer{}
buffer.WriteByte('\n')
if user.HasPermission(componentName, "GET", "/gui/system/rbac/user/list") {
if activeTab == "user" {
buffer.WriteString(" <li role='presentation' class='active'><a href='#' role='tab' >User</a></li>\n")
} else {
buffer.WriteString(" <li role='presentation'><a href='/gui/system/rbac/user/list' role='tab' >User</a></li>\n")
}
}
if user.HasPermission(componentName, "GET", "/gui/system/rbac/role/list") {
if activeTab == "role" {
buffer.WriteString(" <li role='presentation' class='active'><a href='#' role='tab' >Role</a></li>\n")
} else {
buffer.WriteString(" <li role='presentation'><a href='/gui/system/rbac/role/list' role='tab' >Role</a></li>\n")
}
}
return buffer.String()
}
func GetSystemNotificationTabMenu(user *rbac.User, activeTab string) string {
if user == nil {
return ""
}
buffer := bytes.Buffer{}
buffer.WriteByte('\n')
if user.HasPermission(componentName, "GET", "/gui/system/notification/emailserver/list") {
if activeTab == "emailserver" {
buffer.WriteString(" <li role='presentation' class='active'><a href='#' role='tab' >Email Server</a></li>\n")
} else {
buffer.WriteString(" <li role='presentation'><a href='/gui/system/notification/emailserver/list' role='tab' >Email Server</a></li>\n")
}
}
if user.HasPermission(componentName, "GET", "/gui/system/notification/sms/list") {
if activeTab == "sms" {
buffer.WriteString(" <li role='presentation' class='active'><a href='#' role='tab' >SMS</a></li>\n")
} else {
buffer.WriteString(" <li role='presentation'><a href='/gui/system/notification/sms/list' role='tab' >SMS</a></li>\n")
}
}
return buffer.String()
}
func GetLayoutMenu(user *rbac.User) string {
if user == nil {
return ""
}
buffer := bytes.Buffer{}
buffer.WriteByte('\n')
// Dashboard
if user.HasChildPermission(componentName, "GET", "/gui/dashboard") {
buffer.WriteString(" <li class=''><a href='/gui/dashboard/topology'>Dashboard</a></li>\n")
}
// Repository
// Parent
if user.HasChildPermission(componentName, "GET", "/gui/repository") {
buffer.WriteString(" <li class='dropdown'>\n")
buffer.WriteString(" <a href='#' class='dropdown-toggle' data-toggle='dropdown' role='button' aria-expanded='false'>Repository<span class='caret'></span></a>\n")
buffer.WriteString(" <ul class='dropdown-menu' role='menu'>\n")
}
// Child
if user.HasPermission(componentName, "GET", "/gui/repository/imageinformation/list") {
buffer.WriteString(" <li><a href='/gui/repository/imageinformation/list'>Applications</a></li>\n")
}
if user.HasPermission(componentName, "GET", "/gui/repository/thirdparty/list") {
buffer.WriteString(" <li><a href='/gui/repository/thirdparty/list'>Third-party Services</a></li>\n")
}
if user.HasPermission(componentName, "GET", "/gui/repository/topologytemplate/list") {
buffer.WriteString(" <li><a href='/gui/repository/topologytemplate/list'>Topology template</a></li>\n")
}
// Parent
if user.HasChildPermission(componentName, "GET", "/gui/repository") {
buffer.WriteString(" </ul>\n")
buffer.WriteString(" </li>\n")
}
// Deploy
// Parent
if user.HasChildPermission(componentName, "GET", "/gui/deploy") {
buffer.WriteString(" <li class='dropdown'>\n")
buffer.WriteString(" <a href='#' class='dropdown-toggle' data-toggle='dropdown' role='button' aria-expanded='false'>Deploy<span class='caret'></span></a>\n")
buffer.WriteString(" <ul class='dropdown-menu' role='menu'>\n")
}
// Child
if user.HasPermission(componentName, "GET", "/gui/deploy/deploy/list") {
buffer.WriteString(" <li><a href='/gui/deploy/deploy/list'>Applications</a></li>\n")
}
if user.HasPermission(componentName, "GET", "/gui/deploy/deploybluegreen/list") {
buffer.WriteString(" <li><a href='/gui/deploy/deploybluegreen/list'>Blue Green Deployments</a></li>\n")
}
if user.HasPermission(componentName, "GET", "/gui/deploy/autoscaler/list") {
buffer.WriteString(" <li><a href='/gui/deploy/autoscaler/list'>Autoscalers</a></li>\n")
}
if user.HasPermission(componentName, "GET", "/gui/deploy/deployclusterapplication/list") {
buffer.WriteString(" <li><a href='/gui/deploy/deployclusterapplication/list'>Third-party Services</a></li>\n")
}
if user.HasPermission(componentName, "GET", "/gui/deploy/clone/topology") {
buffer.WriteString(" <li><a href='/gui/deploy/clone/select'>Clone Topology</a></li>\n")
}
// Parent
if user.HasChildPermission(componentName, "GET", "/gui/deploy") {
buffer.WriteString(" </ul>\n")
buffer.WriteString(" </li>\n")
}
// Inventory
// Parent
if user.HasChildPermission(componentName, "GET", "/gui/inventory") {
buffer.WriteString(" <li class='dropdown'>\n")
buffer.WriteString(" <a href='#' class='dropdown-toggle' data-toggle='dropdown' role='button' aria-expanded='false'>Inventory<span class='caret'></span></a>\n")
buffer.WriteString(" <ul class='dropdown-menu' role='menu'>\n")
}
// Child
if user.HasPermission(componentName, "GET", "/gui/inventory/replicationcontroller/list") {
buffer.WriteString(" <li><a href='/gui/inventory/replicationcontroller/list'>Replications</a></li>\n")
}
if user.HasPermission(componentName, "GET", "/gui/inventory/service/list") {
buffer.WriteString(" <li><a href='/gui/inventory/service/list'>Services</a></li>\n")
}
// Parent
if user.HasChildPermission(componentName, "GET", "/gui/inventory") {
buffer.WriteString(" </ul>\n")
buffer.WriteString(" </li>\n")
}
// Filesystem
// Parent
if user.HasChildPermission(componentName, "GET", "/gui/filesystem") {
buffer.WriteString(" <li class='dropdown'>\n")
buffer.WriteString(" <a href='#' class='dropdown-toggle' data-toggle='dropdown' role='button' aria-expanded='false'>Filesystem<span class='caret'></span></a>\n")
buffer.WriteString(" <ul class='dropdown-menu' role='menu'>\n")
}
// Child
if user.HasPermission(componentName, "GET", "/gui/filesystem/glusterfs/cluster/list") {
buffer.WriteString(" <li><a href='/gui/filesystem/glusterfs/cluster/list'>Glusterfs</a></li>\n")
}
// Parent
if user.HasChildPermission(componentName, "GET", "/gui/filesystem") {
buffer.WriteString(" </ul>\n")
buffer.WriteString(" </li>\n")
}
// Monitor
// Parent
if user.HasChildPermission(componentName, "GET", "/gui/monitor") {
buffer.WriteString(" <li class='dropdown'>\n")
buffer.WriteString(" <a href='#' class='dropdown-toggle' data-toggle='dropdown' role='button' aria-expanded='false'>Monitor<span class='caret'></span></a>\n")
buffer.WriteString(" <ul class='dropdown-menu' role='menu'>\n")
}
// Child
if user.HasPermission(componentName, "GET", "/gui/monitor/node/list") {
buffer.WriteString(" <li><a href='/gui/monitor/node'>Nodes</a></li>\n")
}
if user.HasPermission(componentName, "GET", "/gui/monitor/container/list") {
buffer.WriteString(" <li><a href='/gui/monitor/container'>Containers</a></li>\n")
}
//if user.HasPermission(componentName, "GET", "/gui/monitor/historicalcontainer/list") {
// buffer.WriteString(" <li><a href='/gui/monitor/historicalcontainer'>Historical Containers</a></li>\n")
//}
// Parent
if user.HasChildPermission(componentName, "GET", "/gui/monitor") {
buffer.WriteString(" </ul>\n")
buffer.WriteString(" </li>\n")
}
// Event
// Parent
if user.HasChildPermission(componentName, "GET", "/gui/event") {
buffer.WriteString(" <li class='dropdown'>\n")
buffer.WriteString(" <a href='#' class='dropdown-toggle' data-toggle='dropdown' role='button' aria-expanded='false'>Event<span class='caret'></span></a>\n")
buffer.WriteString(" <ul class='dropdown-menu' role='menu'>\n")
}
// Child
if user.HasPermission(componentName, "GET", "/gui/event/audit/list") {
buffer.WriteString(" <li><a href='/gui/event/audit/list'>Audit Logs</a></li>\n")
}
if user.HasPermission(componentName, "GET", "/gui/event/kubernetes/list") {
buffer.WriteString(" <li><a href='/gui/event/kubernetes/list'>Kubernetes Events</a></li>\n")
}
// Parent
if user.HasChildPermission(componentName, "GET", "/gui/event") {
buffer.WriteString(" </ul>\n")
buffer.WriteString(" </li>\n")
}
// Notification
// Parent
if user.HasChildPermission(componentName, "GET", "/gui/notification") {
buffer.WriteString(" <li class='dropdown'>\n")
buffer.WriteString(" <a href='#' class='dropdown-toggle' data-toggle='dropdown' role='button' aria-expanded='false'>Notification<span class='caret'></span></a>\n")
buffer.WriteString(" <ul class='dropdown-menu' role='menu'>\n")
}
// Child
if user.HasPermission(componentName, "GET", "/gui/notification/notifier/list") {
buffer.WriteString(" <li><a href='/gui/notification/notifier/list'>Notifiers</a></li>\n")
}
// Parent
if user.HasChildPermission(componentName, "GET", "/gui/notification") {
buffer.WriteString(" </ul>\n")
buffer.WriteString(" </li>\n")
}
// System
// Parent
if user.HasChildPermission(componentName, "GET", "/gui/system") {
buffer.WriteString(" <li class='dropdown'>\n")
buffer.WriteString(" <a href='#' class='dropdown-toggle' data-toggle='dropdown' role='button' aria-expanded='false'>System<span class='caret'></span></a>\n")
buffer.WriteString(" <ul class='dropdown-menu' role='menu'>\n")
}
// Child
if user.HasPermission(componentName, "GET", "/gui/system/about") {
buffer.WriteString(" <li><a href='/gui/system/about'>About</a></li>\n")
}
if user.HasPermission(componentName, "GET", "/gui/system/namespace/list") {
buffer.WriteString(" <li><a href='/gui/system/namespace/list'>Namepaces</a></li>\n")
}
if user.HasPermission(componentName, "GET", "/gui/system/notification/emailserver/list") {
buffer.WriteString(" <li><a href='/gui/system/notification/emailserver/list'>Notification</a></li>\n")
}
if user.HasPermission(componentName, "GET", "/gui/system/host/credential/list") {
buffer.WriteString(" <li><a href='/gui/system/host/credential/list'>Host Credential</a></li>\n")
}
if user.HasPermission(componentName, "GET", "/gui/system/rbac/user/list") {
buffer.WriteString(" <li><a href='/gui/system/rbac/user/list'>RBAC</a></li>\n")
}
if user.HasPermission(componentName, "GET", "/gui/system/privateregistry/server/list") {
buffer.WriteString(" <li><a href='/gui/system/privateregistry/server/list'>Private Registry</a></li>\n")
}
if user.HasPermission(componentName, "GET", "/gui/system/slb/daemon/list") {
buffer.WriteString(" <li><a href='/gui/system/slb/daemon/list'>SLB Daemon</a></li>\n")
}
if user.HasPermission(componentName, "GET", "/gui/system/upgrade/list") {
buffer.WriteString(" <li><a href='/gui/system/upgrade'>Upgrade</a></li>\n")
}
// Parent
if user.HasChildPermission(componentName, "GET", "/gui/system") {
buffer.WriteString(" </ul>\n")
buffer.WriteString(" </li>\n")
}
return buffer.String()
}
