Endi S. Dewata
5fc064f13e
The IPA.get_entity() has been modified to accept either entity name or entity object. If it receives an entity object it will return the object itself. Otherwise, it will resolve the name in the entity registry. The other_entity variables have been modified to store a reference to the entity object instead of its name. The test cases have been modified to use real entity objects instead of just the names. Ticket #2042
773 lines
21 KiB
JavaScript
773 lines
21 KiB
JavaScript
/*jsl:import ipa.js */
|
|
|
|
/* Authors:
|
|
* Adam Young <ayoung@redhat.com>
|
|
* Endi S. Dewata <edewata@redhat.com>
|
|
*
|
|
* Copyright (C) 2010 Red Hat
|
|
* see file 'COPYING' for use and warranty information
|
|
*
|
|
* This program is free software; you can redistribute it and/or
|
|
* modify it under the terms of the GNU General Public License as
|
|
* published by the Free Software Foundation; version 2 only
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program; if not, write to the Free Software
|
|
* Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
|
|
*/
|
|
|
|
/* REQUIRES: ipa.js, details.js, search.js, add.js, facet.js, entity.js */
|
|
|
|
IPA.aci = {};
|
|
|
|
IPA.aci.permission_entity = function(spec) {
|
|
|
|
var that = IPA.entity(spec);
|
|
|
|
that.init = function() {
|
|
that.entity_init();
|
|
|
|
that.builder.facet_groups(['settings', 'privilege']).
|
|
search_facet({
|
|
columns: [ 'cn' ]
|
|
}).
|
|
details_facet({
|
|
factory: IPA.aci.permission_details_facet,
|
|
fields: [
|
|
{
|
|
name:'cn',
|
|
widget: 'identity.cn'
|
|
},
|
|
{
|
|
type: 'rights',
|
|
name: 'permissions',
|
|
join: true,
|
|
widget: 'rights.permissions'
|
|
},
|
|
{
|
|
type: 'select',
|
|
name: 'target',
|
|
widget: 'target.target'
|
|
},
|
|
{
|
|
name: 'filter',
|
|
widget: 'target.filter',
|
|
enabled: false
|
|
},
|
|
{
|
|
name: 'subtree',
|
|
widget: 'target.subtree',
|
|
enabled: false
|
|
},
|
|
{
|
|
type: 'entity_select',
|
|
name: 'targetgroup',
|
|
widget: 'target.targetgroup',
|
|
enabled: false
|
|
},
|
|
{
|
|
type: 'select',
|
|
name: 'type',
|
|
widget: 'target.type',
|
|
enabled: false
|
|
},
|
|
{
|
|
name: 'attrs',
|
|
widget: 'target.attrs',
|
|
enabled: false
|
|
}
|
|
],
|
|
widgets: [
|
|
{
|
|
type: 'details_table_section',
|
|
name: 'identity',
|
|
label: IPA.messages.objects.permission.identity,
|
|
widgets: ['cn']
|
|
},
|
|
{
|
|
type: 'details_table_section',
|
|
name: 'rights',
|
|
label: IPA.messages.objects.permission.rights,
|
|
widgets: [
|
|
{
|
|
type: 'rights',
|
|
name: 'permissions'
|
|
}
|
|
]
|
|
},
|
|
{
|
|
type: 'permission_target',
|
|
container_factory: IPA.details_table_section,
|
|
label: IPA.messages.objects.permission.rights,
|
|
name: 'target',
|
|
show_target: false
|
|
}
|
|
],
|
|
policies: [
|
|
IPA.permission_target_policy('target')
|
|
]
|
|
}).
|
|
association_facet({
|
|
name: 'member_privilege',
|
|
facet_group: 'privilege'
|
|
}).
|
|
adder_dialog({
|
|
height: 450,
|
|
fields: [
|
|
{
|
|
name:'cn',
|
|
widget: 'general.cn'
|
|
},
|
|
{
|
|
type: 'rights',
|
|
name: 'permissions',
|
|
join: true,
|
|
widget: 'general.permissions'
|
|
},
|
|
{
|
|
type: 'select',
|
|
name: 'target',
|
|
widget: 'target.target'
|
|
},
|
|
{
|
|
name: 'filter',
|
|
widget: 'target.filter',
|
|
enabled: false
|
|
},
|
|
{
|
|
name: 'subtree',
|
|
widget: 'target.subtree',
|
|
enabled: false
|
|
},
|
|
{
|
|
type: 'entity_select',
|
|
name: 'targetgroup',
|
|
widget: 'target.targetgroup',
|
|
enabled: false
|
|
},
|
|
{
|
|
type: 'select',
|
|
name: 'type',
|
|
widget: 'target.type',
|
|
enabled: false
|
|
},
|
|
{
|
|
name: 'attrs',
|
|
widget: 'target.attrs',
|
|
enabled: false
|
|
}
|
|
],
|
|
widgets: [
|
|
{
|
|
type: 'details_table_section_nc',
|
|
name: 'general',
|
|
widgets: [
|
|
'cn',
|
|
{
|
|
type: 'rights',
|
|
name: 'permissions'
|
|
}
|
|
]
|
|
},
|
|
{
|
|
type: 'permission_target',
|
|
name:'target',
|
|
show_target: true
|
|
}
|
|
],
|
|
policies: [
|
|
IPA.permission_target_policy('target')
|
|
]
|
|
});
|
|
};
|
|
|
|
return that;
|
|
};
|
|
|
|
IPA.aci.permission_details_facet = function(spec) {
|
|
|
|
var that = IPA.details_facet(spec);
|
|
|
|
that.get_refresh_command_name = function() {
|
|
return that.entity.name+'_show_'+that.pkey;
|
|
};
|
|
|
|
return that;
|
|
};
|
|
|
|
IPA.aci.privilege_entity = function(spec) {
|
|
|
|
var that = IPA.entity(spec);
|
|
|
|
that.init = function() {
|
|
that.entity_init();
|
|
|
|
that.builder.facet_groups(['permission', 'settings', 'role']).
|
|
search_facet({
|
|
columns: [
|
|
'cn',
|
|
'description'
|
|
]
|
|
}).
|
|
details_facet({
|
|
sections: [
|
|
{
|
|
name: 'identity',
|
|
label: IPA.messages.details.identity,
|
|
fields: [
|
|
'cn',
|
|
{
|
|
type: 'textarea',
|
|
name: 'description'
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}).
|
|
association_facet({
|
|
name: 'member_role',
|
|
facet_group: 'role',
|
|
add_method: 'add_privilege',
|
|
remove_method: 'remove_privilege',
|
|
associator: IPA.serial_associator
|
|
}).
|
|
association_facet({
|
|
name: 'memberof_permission',
|
|
facet_group: 'permission',
|
|
add_method: 'add_permission',
|
|
remove_method: 'remove_permission'
|
|
}).
|
|
standard_association_facets().
|
|
adder_dialog({
|
|
fields: [
|
|
'cn',
|
|
{
|
|
type: 'textarea',
|
|
name: 'description'
|
|
}
|
|
]
|
|
});
|
|
};
|
|
|
|
return that;
|
|
};
|
|
|
|
IPA.aci.role_entity = function(spec) {
|
|
|
|
var that = IPA.entity(spec);
|
|
|
|
that.init = function() {
|
|
that.entity_init();
|
|
|
|
that.builder.facet_groups(['member', 'privilege', 'settings']).
|
|
search_facet({
|
|
columns: [
|
|
'cn',
|
|
'description'
|
|
]
|
|
}).
|
|
details_facet({
|
|
sections: [
|
|
{
|
|
name: 'identity',
|
|
label: IPA.messages.objects.role.identity,
|
|
fields: [
|
|
'cn',
|
|
{
|
|
type: 'textarea',
|
|
name: 'description'
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}).
|
|
association_facet({
|
|
name: 'memberof_privilege',
|
|
facet_group: 'privilege',
|
|
add_method: 'add_privilege',
|
|
remove_method: 'remove_privilege'
|
|
}).
|
|
standard_association_facets().
|
|
adder_dialog({
|
|
fields: [
|
|
'cn',
|
|
{
|
|
type: 'textarea',
|
|
name: 'description'
|
|
}
|
|
]
|
|
});
|
|
};
|
|
|
|
return that;
|
|
};
|
|
|
|
IPA.aci.selfservice_entity = function(spec) {
|
|
|
|
var that = IPA.entity(spec);
|
|
|
|
that.init = function() {
|
|
that.entity_init();
|
|
|
|
that.builder.search_facet({
|
|
pagination: false,
|
|
columns: [ 'aciname' ]
|
|
}).
|
|
details_facet({
|
|
sections: [
|
|
{
|
|
name: 'general',
|
|
label: IPA.messages.details.general,
|
|
fields: [
|
|
'aciname',
|
|
{
|
|
type: 'attributes',
|
|
object_type: 'user',
|
|
name: 'attrs'
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}).
|
|
adder_dialog({
|
|
fields: [
|
|
'aciname',
|
|
{
|
|
type: 'attributes',
|
|
object_type: 'user',
|
|
name: 'attrs'
|
|
}
|
|
]
|
|
});
|
|
};
|
|
|
|
return that;
|
|
};
|
|
|
|
IPA.aci.delegation_entity = function(spec) {
|
|
|
|
var that = IPA.entity(spec);
|
|
|
|
that.group_entity = IPA.get_entity(spec.group_entity || 'group');
|
|
|
|
that.init = function() {
|
|
that.entity_init();
|
|
|
|
that.builder.search_facet({
|
|
pagination: false,
|
|
columns: [ 'aciname' ]
|
|
}).
|
|
details_facet({
|
|
sections: [
|
|
{
|
|
name: 'general',
|
|
label: IPA.messages.details.general,
|
|
fields: [
|
|
'aciname',
|
|
{
|
|
type: 'entity_select',
|
|
name: 'group',
|
|
other_entity: that.group_entity,
|
|
other_field: 'cn'
|
|
},
|
|
{
|
|
type: 'entity_select',
|
|
name: 'memberof',
|
|
other_entity: that.group_entity,
|
|
other_field: 'cn',
|
|
join: true
|
|
},
|
|
{
|
|
type: 'attributes',
|
|
name: 'attrs',
|
|
object_type: 'user',
|
|
join: true
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}).
|
|
standard_association_facets().
|
|
adder_dialog({
|
|
fields: [
|
|
'aciname',
|
|
{
|
|
type: 'entity_select',
|
|
name: 'group',
|
|
other_entity: that.group_entity,
|
|
other_field: 'cn'
|
|
},
|
|
{
|
|
type: 'entity_select',
|
|
name: 'memberof',
|
|
other_entity: that.group_entity,
|
|
other_field: 'cn',
|
|
join: true
|
|
},
|
|
{
|
|
type: 'attributes',
|
|
name: 'attrs',
|
|
object_type: 'user',
|
|
join: true
|
|
}
|
|
]
|
|
});
|
|
};
|
|
|
|
return that;
|
|
};
|
|
|
|
|
|
IPA.attributes_widget = function(spec) {
|
|
|
|
spec = spec || {};
|
|
|
|
var that = IPA.checkboxes_widget(spec);
|
|
|
|
that.object_type = spec.object_type;
|
|
|
|
var id = spec.name;
|
|
|
|
that.create = function(container) {
|
|
that.container = container;
|
|
|
|
that.table = $('<table/>', {
|
|
id:id,
|
|
'class':'search-table aci-attribute-table scrollable'
|
|
}).
|
|
append('<thead/>').
|
|
append('<tbody/>').
|
|
appendTo(container);
|
|
|
|
var tr = $('<tr></tr>').appendTo($('thead', that.table));
|
|
|
|
tr.append($('<th/>', {
|
|
html: $('<input/>', {
|
|
type: "checkbox",
|
|
click: function() {
|
|
$('.aci-attribute', that.table).
|
|
attr('checked', $(this).attr('checked'));
|
|
that.value_changed.notify([], that);
|
|
}
|
|
})
|
|
})).append($('<th/>', {
|
|
'class': 'aci-attribute-column',
|
|
html: IPA.messages.objects.aci.attribute
|
|
}));
|
|
|
|
if (that.undo) {
|
|
that.create_undo(container);
|
|
}
|
|
|
|
if (that.object_type) {
|
|
that.populate(that.object_type);
|
|
}
|
|
|
|
that.create_error_link(container);
|
|
};
|
|
|
|
that.update = function(values) {
|
|
|
|
that.values = [];
|
|
|
|
values = values || [];
|
|
for (var i=0; i<values.length; i++) {
|
|
var value = values[i].toLowerCase();
|
|
that.values.push(value);
|
|
}
|
|
|
|
that.populate(that.object_type);
|
|
that.append();
|
|
that.checkboxes_update(values);
|
|
};
|
|
|
|
that.populate = function(object_type) {
|
|
|
|
$('tbody tr', that.table).remove();
|
|
|
|
if (!object_type || object_type === '') return;
|
|
|
|
var metadata = IPA.metadata.objects[object_type];
|
|
if (!metadata) return;
|
|
|
|
var aciattrs = metadata.aciattrs;
|
|
|
|
var tbody = $('tbody', that.table);
|
|
|
|
for (var i=0; i<aciattrs.length ; i++){
|
|
var value = aciattrs[i].toLowerCase();
|
|
var aci_tr = $('<tr/>').appendTo(tbody);
|
|
|
|
var td = $('<td/>').appendTo(aci_tr);
|
|
td.append($('<input/>',{
|
|
type: 'checkbox',
|
|
name: that.name,
|
|
value: value,
|
|
'class': 'aci-attribute',
|
|
click: function() {
|
|
that.value_changed.notify([], that);
|
|
}
|
|
}));
|
|
td = $('<td/>').appendTo(aci_tr);
|
|
td.append($('<label/>',{
|
|
text:value}));
|
|
}
|
|
};
|
|
|
|
that.append = function() {
|
|
|
|
if (!that.values) return;
|
|
|
|
var unmatched = [];
|
|
|
|
for (var i=0; i<that.values.length; i++) {
|
|
var input = $('input[name="'+that.name+'"]'+
|
|
'[value="'+that.values[i]+'"]', that.container);
|
|
if (!input.length) {
|
|
unmatched.push(that.values[i]);
|
|
}
|
|
}
|
|
|
|
if (unmatched.length > 0) {
|
|
var tbody = $('tbody', that.table);
|
|
|
|
for (var j=0; j<unmatched.length; j++) {
|
|
var value = unmatched[j].toLowerCase();
|
|
var tr = $('<tr/>').appendTo(tbody);
|
|
|
|
var td = $('<td/>').appendTo(tr);
|
|
td.append($('<input/>', {
|
|
type: 'checkbox',
|
|
name: that.name,
|
|
value: value,
|
|
'class': 'aci-attribute',
|
|
change: function() {
|
|
that.value_changed.notify([], that);
|
|
}
|
|
}));
|
|
|
|
td = $('<td/>').appendTo(tr);
|
|
td.append($('<label/>', {
|
|
text: value
|
|
}));
|
|
}
|
|
}
|
|
};
|
|
|
|
that.show_undo = function() {
|
|
$(that.undo_span).css('display', 'inline-block');
|
|
};
|
|
|
|
return that;
|
|
};
|
|
|
|
IPA.widget_factories['attributes'] = IPA.attributes_widget;
|
|
IPA.field_factories['attributes'] = IPA.checkboxes_field;
|
|
|
|
IPA.rights_widget = function(spec) {
|
|
|
|
var that = IPA.checkboxes_widget(spec);
|
|
|
|
that.rights = ['write', 'add', 'delete'];
|
|
for (var i=0; i<that.rights.length; i++) {
|
|
var right = that.rights[i];
|
|
that.add_option({label: right, value: right});
|
|
}
|
|
|
|
return that;
|
|
};
|
|
|
|
IPA.widget_factories['rights'] = IPA.rights_widget;
|
|
IPA.field_factories['rights'] = IPA.checkboxes_field;
|
|
|
|
IPA.permission_target_widget = function(spec) {
|
|
|
|
spec = spec || {};
|
|
|
|
var factory = spec.container_factory || IPA.details_table_section_nc;
|
|
|
|
var that = factory(spec);
|
|
|
|
that.group_entity = IPA.get_entity(spec.group_entity || 'group');
|
|
|
|
that.targets = [ 'filter', 'subtree', 'targetgroup', 'type' ];
|
|
that.target = that.targets[0];
|
|
that.show_target = spec.show_target;
|
|
|
|
var init = function() {
|
|
|
|
that.target_select = IPA.select_widget({
|
|
entity: that.entity,
|
|
name: 'target',
|
|
label: IPA.messages.objects.permission.target,
|
|
hidden: !that.show_target
|
|
});
|
|
|
|
for (var i=0; i<that.targets.length; i++) {
|
|
var target = that.targets[i];
|
|
var target_param = IPA.get_entity_param('permission', target);
|
|
|
|
that.target_select.options.push({
|
|
label: target_param.label,
|
|
value: target
|
|
});
|
|
}
|
|
|
|
that.widgets.add_widget(that.target_select);
|
|
|
|
|
|
that.filter_text = IPA.text_widget({
|
|
entity: that.entity,
|
|
name: 'filter',
|
|
hidden: true
|
|
});
|
|
|
|
that.widgets.add_widget(that.filter_text);
|
|
|
|
that.subtree_textarea = IPA.textarea_widget({
|
|
entity: that.entity,
|
|
name: 'subtree',
|
|
cols: 30,
|
|
rows: 1,
|
|
hidden: true
|
|
});
|
|
|
|
that.widgets.add_widget(that.subtree_textarea);
|
|
|
|
that.group_select = IPA.entity_select_widget({
|
|
entity: that.entity,
|
|
name: 'targetgroup',
|
|
other_entity: that.group_entity,
|
|
other_field: 'cn',
|
|
hidden: true
|
|
});
|
|
|
|
that.widgets.add_widget(that.group_select);
|
|
|
|
that.type_select = IPA.select_widget({
|
|
entity: that.entity,
|
|
name: 'type',
|
|
hidden: true
|
|
});
|
|
|
|
var type_param = IPA.get_entity_param('permission', 'type');
|
|
|
|
for (var j=0; j<type_param.values.length; j++) {
|
|
var type_name = type_param.values[j];
|
|
var type_label = IPA.metadata.objects[type_name].label_singular;
|
|
|
|
that.type_select.options.push({
|
|
label: type_label,
|
|
value: type_name
|
|
});
|
|
}
|
|
|
|
that.widgets.add_widget(that.type_select);
|
|
|
|
that.attribute_table = IPA.attributes_widget({
|
|
entity: that.entity,
|
|
name: 'attrs',
|
|
object_type: type_param.values[0],
|
|
hidden: true
|
|
});
|
|
|
|
that.widgets.add_widget(that.attribute_table);
|
|
};
|
|
|
|
init();
|
|
|
|
return that;
|
|
};
|
|
|
|
IPA.permission_target_policy = function (widget_name) {
|
|
|
|
var that = IPA.facet_policy();
|
|
|
|
that.init = function() {
|
|
|
|
that.permission_target = that.container.widgets.get_widget(widget_name);
|
|
var widgets = that.permission_target.widgets;
|
|
|
|
var target_select = widgets.get_widget('target');
|
|
target_select.value_changed.attach(function() {
|
|
var target = target_select.save()[0];
|
|
that.select_target(target);
|
|
});
|
|
|
|
var type_select = widgets.get_widget('type');
|
|
var attribute_table = widgets.get_widget('attrs');
|
|
var attribute_field = that.container.fields.get_field('attrs');
|
|
type_select.value_changed.attach(function() {
|
|
var type = type_select.save()[0];
|
|
attribute_table.object_type = type;
|
|
attribute_field.reset();
|
|
});
|
|
};
|
|
|
|
that.post_create = function() {
|
|
that.select_target(that.permission_target.targets[0]);
|
|
};
|
|
|
|
that.post_load = function(data) {
|
|
|
|
var targets = that.permission_target.targets;
|
|
|
|
for (var i=0; i<targets.length; i++) {
|
|
var target = targets[i];
|
|
|
|
if(data.result.result[target]) {
|
|
that.select_target(target);
|
|
} else {
|
|
that.set_target_visible(target, false);
|
|
}
|
|
}
|
|
};
|
|
|
|
that.select_target = function(target) {
|
|
that.set_target_visible(that.permission_target.target, false);
|
|
that.permission_target.target = target;
|
|
that.set_target_visible(that.permission_target.target, true);
|
|
};
|
|
|
|
that.set_target_visible = function(target, visible) {
|
|
|
|
var widgets = that.permission_target.widgets;
|
|
var fields = that.container.fields;
|
|
|
|
var widget = widgets.get_widget(target);
|
|
widget.hidden = !visible;
|
|
that.permission_target.set_row_visible(target, visible);
|
|
|
|
var field = fields.get_field(target);
|
|
field.enabled = visible;
|
|
|
|
if (target === 'type') {
|
|
widget = widgets.get_widget('attrs');
|
|
widget.hidden = !visible;
|
|
that.permission_target.set_row_visible('attrs', visible);
|
|
|
|
field = fields.get_field('attrs');
|
|
field.enabled = visible;
|
|
} else {
|
|
field.set_required(visible);
|
|
}
|
|
};
|
|
|
|
|
|
return that;
|
|
};
|
|
|
|
IPA.widget_factories['permission_target'] = IPA.permission_target_widget;
|
|
|
|
|
|
IPA.register('permission', IPA.aci.permission_entity);
|
|
IPA.register('privilege', IPA.aci.privilege_entity);
|
|
IPA.register('role', IPA.aci.role_entity);
|
|
IPA.register('selfservice', IPA.aci.selfservice_entity);
|
|
IPA.register('delegation', IPA.aci.delegation_entity);
|