// Add the given permission to the given resource for the given user
func (a *Acl) AddPermissionToResource(el *en.EntityManager, userName string, permission Permission) error {
lock.Lock()
defer lock.Unlock()
if el == nil {
return fmt.Errorf("Error: entityManager is nil")
}
err := en.IsEntityNameValid(userName)
if err != nil {
return err
}
if el.IsEntityInList(userName) == false {
return fmt.Errorf("Error: Can't add permission to entity '%v', it is not in the resource entity list", userName)
}
e, exist := a.Permissions[userName]
if exist == false {
e, _ = NewEntry(userName)
}
logger.Trace.Println("Add permission:", permission, "to:", userName)
_, err = e.AddPermission(permission)
a.Permissions[userName] = e
return err
}
// Get all the permissions of a given user to a given resource-
// return the user's list of permissions to the given resource
// The permissions may be listed as the user's permissions, permissions to groups
// in which the user is a member or permissions that are given to 'all'
func GetUserPermissions(el *en.EntityManager, userName string, resourceName string) (PermissionsMap, error) {
lock.Lock()
defer lock.Unlock()
if el == nil {
return nil, fmt.Errorf("Error: EntityManager is nil")
}
err := en.IsEntityNameValid(userName)
if err != nil {
return nil, err
}
err = en.IsEntityNameValid(resourceName)
if err != nil {
return nil, err
}
if el.IsEntityInList(userName) == false {
return nil, fmt.Errorf("Error: Entity %q is not in the entity manager", userName)
}
permissions := make(PermissionsMap)
data, err := el.GetPropertyAttachedToEntity(resourceName, stc.AclPropertyName)
if err != nil {
return nil, fmt.Errorf("Resource '%v' dose not have an ACL property", resourceName)
}
acl, ok := data.(*Acl)
if ok == false {
return nil, fmt.Errorf("Resource '%v' ACL property is in the wrong type", resourceName)
}
for name, p := range acl.Permissions {
if name == userName || name == stc.AclAllEntryName || el.IsUserPartOfAGroup(name, userName) {
for permission, _ := range p.Permissions {
permissions[permission] = ""
}
}
}
logger.Trace.Println("The permissions of:", userName, "are:", permissions)
return permissions, nil
}
