YunoHost/yunohost
1
0
Fork 0
mirror of https://github.com/YunoHost/yunohost.git synced 2024-09-03 20:06:10 +02:00
Code Issues Projects Releases Packages Wiki Activity

[fix] Migrations

Browse source
This commit is contained in:
ljf 2021-05-23 22:46:28 +02:00
parent d241db4c33
commit 99247e3d08
1 changed files with 20 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

27
src/yunohost/data_migrations/0020_ssh_sftp_permissions.py
View file

@ -3,7 +3,6 @@ import os
from moulinette import m18n from moulinette import m18n
from moulinette.utils.log import getActionLogger from moulinette.utils.log import getActionLogger
from moulinette.utils.filesystem import read_yaml
from yunohost.tools import Migration from yunohost.tools import Migration
from yunohost.permission import user_permission_update, permission_sync_to_user from yunohost.permission import user_permission_update, permission_sync_to_user
@ -37,20 +36,34 @@ class MyMigration(Migration):
existing_perms = [perm["cn"][0] for perm in existing_perms_raw] existing_perms = [perm["cn"][0] for perm in existing_perms_raw]
# Add SSH and SFTP permissions # Add SSH and SFTP permissions
ldap_map = read_yaml(
"/usr/share/yunohost/yunohost-config/moulinette/ldap_scheme.yml"
)
if "sftp.main" not in existing_perms: if "sftp.main" not in existing_perms:
ldap.add( ldap.add(
"cn=sftp.main,ou=permission", "cn=sftp.main,ou=permission",
ldap_map["depends_children"]["cn=sftp.main,ou=permission"], {
"cn": "sftp.main",
"gidNumber": "5004",
"objectClass": ["posixGroup", "permissionYnh"],
"groupPermission": [],
"authHeader": "FALSE",
"label": "SFTP",
"showTile": "FALSE",
"isProtected": "TRUE",
}
) )
if "ssh.main" not in existing_perms: if "ssh.main" not in existing_perms:
ldap.add( ldap.add(
"cn=ssh.main,ou=permission", "cn=ssh.main,ou=permission",
ldap_map["depends_children"]["cn=ssh.main,ou=permission"], {
"cn": "ssh.main",
"gidNumber": "5003",
"objectClass": ["posixGroup", "permissionYnh"],
"groupPermission": [],
"authHeader": "FALSE",
"label": "SSH",
"showTile": "FALSE",
"isProtected": "TRUE",
}
) )
# Add a bash terminal to each users # Add a bash terminal to each users