1 /******************************************************************************
3 * Copyright (C) 2012-2017 Icinga Development Team (https://www.icinga.com/) *
5 * This program is free software; you can redistribute it and/or *
6 * modify it under the terms of the GNU General Public License *
7 * as published by the Free Software Foundation; either version 2 *
8 * of the License, or (at your option) any later version. *
10 * This program is distributed in the hope that it will be useful, *
11 * but WITHOUT ANY WARRANTY; without even the implied warranty of *
12 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
13 * GNU General Public License for more details. *
15 * You should have received a copy of the GNU General Public License *
16 * along with this program; if not, write to the Free Software Foundation *
17 * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA. *
18 ******************************************************************************/
20 #include "icinga/usergroup.hpp"
21 #include "icinga/usergroup.tcpp"
22 #include "config/objectrule.hpp"
23 #include "config/configitem.hpp"
24 #include "base/configtype.hpp"
25 #include "base/objectlock.hpp"
26 #include "base/logger.hpp"
27 #include "base/context.hpp"
28 #include "base/workqueue.hpp"
30 using namespace icinga;
32 REGISTER_TYPE(UserGroup);
34 INITIALIZE_ONCE([]() {
35 ObjectRule::RegisterType("UserGroup");
38 bool UserGroup::EvaluateObjectRule(const User::Ptr& user, const ConfigItem::Ptr& group)
40 String group_name = group->GetName();
42 CONTEXT("Evaluating rule for group '" + group_name + "'");
45 if (group->GetScope())
46 group->GetScope()->CopyTo(frame.Locals);
47 frame.Locals->Set("user", user);
49 if (!group->GetFilter()->Evaluate(frame).GetValue().ToBool())
52 Log(LogDebug, "UserGroup")
53 << "Assigning membership for group '" << group_name << "' to user '" << user->GetName() << "'";
55 Array::Ptr groups = user->GetGroups();
56 groups->Add(group_name);
61 void UserGroup::EvaluateObjectRules(const User::Ptr& user)
63 CONTEXT("Evaluating group membership for user '" + user->GetName() + "'");
65 for (const ConfigItem::Ptr& group : ConfigItem::GetItems(UserGroup::TypeInstance))
67 if (!group->GetFilter())
70 EvaluateObjectRule(user, group);
74 std::set<User::Ptr> UserGroup::GetMembers(void) const
76 boost::mutex::scoped_lock lock(m_UserGroupMutex);
80 void UserGroup::AddMember(const User::Ptr& user)
82 user->AddGroup(GetName());
84 boost::mutex::scoped_lock lock(m_UserGroupMutex);
85 m_Members.insert(user);
88 void UserGroup::RemoveMember(const User::Ptr& user)
90 boost::mutex::scoped_lock lock(m_UserGroupMutex);
91 m_Members.erase(user);
94 bool UserGroup::ResolveGroupMembership(const User::Ptr& user, bool add, int rstack) {
96 if (add && rstack > 20) {
97 Log(LogWarning, "UserGroup")
98 << "Too many nested groups for group '" << GetName() << "': User '"
99 << user->GetName() << "' membership assignment failed.";
104 Array::Ptr groups = GetGroups();
106 if (groups && groups->GetLength() > 0) {
107 ObjectLock olock(groups);
109 for (const String& name : groups) {
110 UserGroup::Ptr group = UserGroup::GetByName(name);
112 if (group && !group->ResolveGroupMembership(user, add, rstack + 1))