1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
|
## This Source Code Form is subject to the terms of the Mozilla Public
## License, v. 2.0. If a copy of the MPL was not distributed with this
## file, You can obtain one at https://mozilla.org/MPL/2.0/.
##
## Copyright (c) 2007-2023 Broadcom. All Rights Reserved. The term “Broadcom” refers to Broadcom Inc. and/or its subsidiaries. All rights reserved.
defmodule RabbitMQ.CLI.Ctl.Commands.SetPermissionsCommand do
alias RabbitMQ.CLI.Core.{DocGuide, ExitCodes, Helpers}
@behaviour RabbitMQ.CLI.CommandBehaviour
def merge_defaults(args, opts) do
{args, Map.merge(%{vhost: "/"}, opts)}
end
def validate([], _) do
{:validation_failure, :not_enough_args}
end
def validate([_ | _] = args, _) when length(args) < 4 do
{:validation_failure, :not_enough_args}
end
def validate([_ | _] = args, _) when length(args) > 4 do
{:validation_failure, :too_many_args}
end
def validate(_, _), do: :ok
use RabbitMQ.CLI.Core.RequiresRabbitAppRunning
def run([user, conf, write, read], %{node: node_name, vhost: vhost}) do
:rabbit_misc.rpc_call(
node_name,
:rabbit_auth_backend_internal,
:set_permissions,
[user, vhost, conf, write, read, Helpers.cli_acting_user()]
)
end
def output({:error, {:no_such_user, username}}, %{node: node_name, formatter: "json"}) do
{:error,
%{"result" => "error", "node" => node_name, "message" => "User #{username} does not exist"}}
end
def output({:error, {:no_such_vhost, vhost}}, %{node: node_name, formatter: "json"}) do
{:error,
%{
"result" => "error",
"node" => node_name,
"message" => "Virtual host #{vhost} does not exist"
}}
end
def output({:error, {:no_such_user, username}}, _) do
{:error, ExitCodes.exit_nouser(), "User #{username} does not exist"}
end
def output({:error, {:no_such_vhost, vhost}}, _) do
{:error, "Virtual host #{vhost} does not exist"}
end
use RabbitMQ.CLI.DefaultOutput
def usage, do: "set_permissions [--vhost <vhost>] <username> <conf> <write> <read>"
def usage_additional() do
[
["<username>", "Self-explanatory"],
["<conf>", "Configuration permission pattern"],
["<write>", "Write permission pattern"],
["<read>", "Read permission pattern"]
]
end
def usage_doc_guides() do
[
DocGuide.access_control(),
DocGuide.virtual_hosts()
]
end
def help_section(), do: :access_control
def description(), do: "Sets user permissions for a vhost"
def banner([user | _], %{vhost: vhost}),
do: "Setting permissions for user \"#{user}\" in vhost \"#{vhost}\" ..."
end
|
