urbackup_backend/urbackupclient/common_tokens.cpp
2021-06-20 20:58:50 +02:00

114 lines
3.0 KiB
C++

/*************************************************************************
* UrBackup - Client/Server backup system
* Copyright (C) 2011-2016 Martin Raiber
*
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU Affero General Public License as published by
* the Free Software Foundation, either version 3 of the License, or
* (at your option) any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU Affero General Public License for more details.
*
* You should have received a copy of the GNU Affero General Public License
* along with this program. If not, see <http://www.gnu.org/licenses/>.
**************************************************************************/
#include "tokens.h"
#include "../Interface/Server.h"
#include "database.h"
#include "../stringtools.h"
#ifndef _WIN32
#include <sys/types.h>
#include <sys/stat.h>
#endif
namespace tokens
{
bool write_tokens()
{
IDatabase* db = Server->getDatabase(Server->getThreadID(), URBACKUPDB_CLIENT);
ClientDAO dao(db);
std::string hostname = get_hostname();
DBScopedWriteTransaction write_transaction(db);
bool has_new_token=false;
std::vector<std::string> users = get_local_users();
os_create_dir(tokens_path);
#ifndef _WIN32
chmod(tokens_path, S_IRWXU|S_IRGRP|S_IXGRP|S_IROTH|S_IXOTH);
#endif
std::vector<SFile> files = getFilesWin(tokens_path, nullptr, false, false);
for(size_t i=0;i<users.size();++i)
{
std::string user_fn="user_"+bytesToHex(accountname_normalize(users[i]));
std::string token_fn = tokens_path + os_file_sep()+user_fn;
bool file_found=false;
for(size_t j=0;j<files.size();++j)
{
if(files[j].name==user_fn)
{
file_found=true;
break;
}
}
if(file_found)
{
continue;
}
has_new_token |= write_token(hostname, true, users[i], token_fn, dao);
std::vector<std::string> user_groups = get_user_groups(users[i]);
for (size_t j=0;j<user_groups.size();++j)
{
std::string group_fn = "group_" + bytesToHex(accountname_normalize(user_groups[j]));
std::string token_fn = tokens_path + os_file_sep() + group_fn;
bool file_found = false;
for (size_t k = 0; k<files.size(); ++k)
{
if (files[k].name == group_fn)
{
file_found = true;
break;
}
}
if (file_found)
{
continue;
}
has_new_token |= write_token(hostname, false, user_groups[j], token_fn, dao);
}
if (has_new_token)
{
ClientDAO::CondInt64 uid = dao.getFileAccessTokenId2Alts(accountname_normalize(users[i]), ClientDAO::c_is_system_user, ClientDAO::c_is_user);
if (uid.exists)
{
dao.removeGroupMembership(uid.value);
for (size_t j = 0; j < user_groups.size(); ++j)
{
dao.updateGroupMembership(uid.value, accountname_normalize(user_groups[j]));
}
}
}
}
return has_new_token;
}
} //namespace tokens