1 /******************************************************************************
3 * Copyright (C) 2012-2016 Icinga Development Team (https://www.icinga.org/) *
5 * This program is free software; you can redistribute it and/or *
6 * modify it under the terms of the GNU General Public License *
7 * as published by the Free Software Foundation; either version 2 *
8 * of the License, or (at your option) any later version. *
10 * This program is distributed in the hope that it will be useful, *
11 * but WITHOUT ANY WARRANTY; without even the implied warranty of *
12 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
13 * GNU General Public License for more details. *
15 * You should have received a copy of the GNU General Public License *
16 * along with this program; if not, write to the Free Software Foundation *
17 * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA. *
18 ******************************************************************************/
20 #include "icinga/usergroup.hpp"
21 #include "icinga/usergroup.tcpp"
22 #include "config/objectrule.hpp"
23 #include "config/configitem.hpp"
24 #include "base/configtype.hpp"
25 #include "base/objectlock.hpp"
26 #include "base/logger.hpp"
27 #include "base/context.hpp"
28 #include "base/workqueue.hpp"
29 #include <boost/foreach.hpp>
31 using namespace icinga;
33 REGISTER_TYPE(UserGroup);
35 INITIALIZE_ONCE(&UserGroup::RegisterObjectRuleHandler);
37 void UserGroup::RegisterObjectRuleHandler(void)
39 ObjectRule::RegisterType("UserGroup");
42 bool UserGroup::EvaluateObjectRule(const User::Ptr& user, const ConfigItem::Ptr& group)
44 String group_name = group->GetName();
46 CONTEXT("Evaluating rule for group '" + group_name + "'");
49 if (group->GetScope())
50 group->GetScope()->CopyTo(frame.Locals);
51 frame.Locals->Set("user", user);
53 if (!group->GetFilter()->Evaluate(frame).GetValue().ToBool())
56 Log(LogDebug, "UserGroup")
57 << "Assigning membership for group '" << group_name << "' to user '" << user->GetName() << "'";
59 Array::Ptr groups = user->GetGroups();
60 groups->Add(group_name);
65 void UserGroup::EvaluateObjectRules(const User::Ptr& user)
67 CONTEXT("Evaluating group membership for user '" + user->GetName() + "'");
69 BOOST_FOREACH(const ConfigItem::Ptr& group, ConfigItem::GetItems("UserGroup"))
71 if (!group->GetFilter())
74 EvaluateObjectRule(user, group);
78 std::set<User::Ptr> UserGroup::GetMembers(void) const
80 boost::mutex::scoped_lock lock(m_UserGroupMutex);
84 void UserGroup::AddMember(const User::Ptr& user)
86 user->AddGroup(GetName());
88 boost::mutex::scoped_lock lock(m_UserGroupMutex);
89 m_Members.insert(user);
92 void UserGroup::RemoveMember(const User::Ptr& user)
94 boost::mutex::scoped_lock lock(m_UserGroupMutex);
95 m_Members.erase(user);
98 bool UserGroup::ResolveGroupMembership(const User::Ptr& user, bool add, int rstack) {
100 if (add && rstack > 20) {
101 Log(LogWarning, "UserGroup")
102 << "Too many nested groups for group '" << GetName() << "': User '"
103 << user->GetName() << "' membership assignment failed.";
108 Array::Ptr groups = GetGroups();
110 if (groups && groups->GetLength() > 0) {
111 ObjectLock olock(groups);
113 BOOST_FOREACH(const String& name, groups) {
114 UserGroup::Ptr group = UserGroup::GetByName(name);
116 if (group && !group->ResolveGroupMembership(user, add, rstack + 1))