YunoHost/yunohost
1
0
Fork 0
mirror of https://github.com/YunoHost/yunohost.git synced 2024-09-03 20:06:10 +02:00
Code Issues Projects Releases Packages Wiki Activity

Fix migration

Browse source
This commit is contained in:
Josué Tille 2019-12-28 22:29:52 +01:00
parent 414fe1926a
commit 97c3a0fb9b
No known key found for this signature in database
GPG key ID: 716A6C99B04194EF
2 changed files with 19 additions and 9 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
data/other/ldap_scheme.yml
View file

@ -73,7 +73,7 @@ depends_children:
- permissionYnh
groupPermission:
- "cn=all_users,ou=groups,dc=yunohost,dc=org"
isProtected: TRUE
isProtected: "TRUE"
cn=xmpp.main,ou=permission:
cn: xmpp.main
gidNumber: "5002"
@ -82,4 +82,4 @@ depends_children:
- permissionYnh
groupPermission:
- "cn=all_users,ou=groups,dc=yunohost,dc=org"
isProtected: TRUE
isProtected: "TRUE"

24
src/yunohost/data_migrations/0015_add_permission_protection.py
View file

@ -24,14 +24,24 @@ class MyMigration(Migration):
def run(self):
from yunohost.utils.ldap import _get_ldap_interface
from yunohost.regenconf import regen_conf, BACKUP_CONF_DIR
# Check if the migration can be processed
ldap_regen_conf_status = regen_conf(names=['slapd'], dry_run=True)
# By this we check if the have been customized
if ldap_regen_conf_status and ldap_regen_conf_status['slapd']['pending']:
logger.warning(m18n.n("migration_0011_slapd_config_will_be_overwritten", conf_backup_folder=BACKUP_CONF_DIR))
regen_conf(names=['slapd'], force=True)
ldap = _get_ldap_interface()
permission_list = user_permission_list(short=True)
permission_list = user_permission_list(short=True)["permissions"]
for permission in permission_list:
if permission in SYSTEM_PERMS:
ldap.update('cn=%s,ou=permission' % permission, 'isProtected': "TRUE"})
elif permission.end_with(".main"):
ldap.update('cn=%s,ou=permission' % permission, 'isProtected': "FALSE"})
if permission.split('.')[0] in SYSTEM_PERMS:
ldap.update('cn=%s,ou=permission' % permission, {'isProtected': "TRUE"})
elif permission.endswith(".main"):
ldap.update('cn=%s,ou=permission' % permission, {'isProtected': "FALSE"})
else:
ldap.update('cn=%s,ou=permission' % permission, 'isProtected': "TRUE"})
ldap.update('cn=%s,ou=permission' % permission, {'isProtected': "TRUE"})