Girocco/ProjPerm.pm

   1 package Girocco::ProjPerm;
   2
   3 # This is base class for various permission models; these control updating
   4 # permissions of appropriate files in push-enabled repositories.
   5 # The /etc/group file is maintained by Girocco::Project itself.
   6
   7 # The chosen subclass of this class is used as base class of Girocco::Project.
   8
   9 use strict;
  10 use warnings;
  11
  12 use Girocco::Config;
  13
  14 BEGIN {
  15         our @interesting = qw(refs info objects);
  16 }
  17
  18 sub perm_initialize {
  19         my ($proj) = @_;
  20         die "unimplemented";
  21 }
  22
  23 sub perm_user_add {
  24         my ($proj, $username, $uid) = @_;
  25         die "unimplemented";
  26 }
  27
  28 sub perm_user_del {
  29         my ($proj, $username, $uid) = @_;
  30         die "unimplemented";
  31 }
  32
  33 sub shared_mode {
  34         my ($proj) = @_;
  35         # The --shared= argument for git init
  36         die "unimplemented";
  37 }
  38
  39 1;
  40
  41
  42 package Girocco::ProjPerm::Group;
  43
  44 # This is the naive permission model: on init, we just chgrp the relevant
  45 # pieces to our group and make them group-writable. But oh, we cannot do that
  46 # since we are not root; so we just sit happily and do nothing else.
  47 # Then, we can just sit happily and do nothing else either.
  48
  49 use strict;
  50 use warnings;
  51
  52 BEGIN {
  53         use base qw(Girocco::ProjPerm);
  54 }
  55
  56 sub perm_initialize {
  57         my ($proj) = @_;
  58         1;
  59 }
  60
  61 sub perm_user_add {
  62         my ($proj, $username, $uid) = @_;
  63         1;
  64 }
  65
  66 sub perm_user_del {
  67         my ($proj, $username, $uid) = @_;
  68         1;
  69 }
  70
  71 sub shared_mode {
  72         my ($proj) = @_;
  73         "group";
  74 }
  75
  76 1;
  77
  78
  79 package Girocco::ProjPerm::Hooks;
  80
  81 # This is the "soft-security" permission model: we keep the repository
  82 # world-writable and check if the user is allowed to push only within
  83 # the update hook that will call our can_user_push() method.
  84
  85 use strict;
  86 use warnings;
  87
  88 BEGIN {
  89         use base qw(Girocco::ProjPerm);
  90 }
  91
  92 sub perm_initialize {
  93         my ($proj) = @_;
  94         1;
  95 }
  96
  97 sub perm_user_add {
  98         my ($proj, $username, $uid) = @_;
  99         1;
 100 }
 101
 102 sub perm_user_del {
 103         my ($proj, $username, $uid) = @_;
 104         1;
 105 }
 106
 107 sub shared_mode {
 108         my ($proj) = @_;
 109         "0777";
 110 }
 111
 112 sub can_user_push {
 113         my ($proj, $username) = @_;
 114         grep { $_ eq $username } @{$proj->{users}};
 115 }
 116
 117 1;