1 package PVE
::API2
::Group
;
5 use PVE
::Cluster qw
(cfs_read_file cfs_write_file
);
6 use PVE
::AccessControl
;
10 use Data
::Dumper
; # fixme: remove
14 use base
qw(PVE::RESTHandler);
16 my $extract_group_data = sub {
17 my ($data, $full) = @_;
21 $res->{comment
} = $data->{comment
} if defined($data->{comment
});
23 return $res if !$full;
25 $res->{users
} = $data->{users
} ?
[ keys %{$data->{users
}} ] : [];
30 # fixme: index should return more/all attributes?
31 __PACKAGE__-
>register_method ({
35 description
=> "Group index.",
37 additionalProperties
=> 0,
45 groupid
=> { type
=> 'string' },
48 links
=> [ { rel
=> 'child', href
=> "{groupid}" } ],
55 my $usercfg = cfs_read_file
("user.cfg");
57 foreach my $group (keys %{$usercfg->{groups
}}) {
58 my $entry = &$extract_group_data($usercfg->{groups
}->{$group});
59 $entry->{groupid
} = $group;
66 __PACKAGE__-
>register_method ({
67 name
=> 'create_group',
71 description
=> "Create new group.",
73 additionalProperties
=> 0,
75 groupid
=> { type
=> 'string', format
=> 'pve-groupid' },
76 comment
=> { type
=> 'string', optional
=> 1 },
79 returns
=> { type
=> 'null' },
83 PVE
::AccessControl
::lock_user_config
(
86 my $usercfg = cfs_read_file
("user.cfg");
88 my $group = $param->{groupid
};
90 die "group '$group' already exists\n"
91 if $usercfg->{groups
}->{$group};
93 $usercfg->{groups
}->{$group} = { users
=> {} };
95 $usercfg->{groups
}->{$group}->{comment
} = $param->{comment
} if $param->{comment
};
98 cfs_write_file
("user.cfg", $usercfg);
99 }, "create group failed");
104 __PACKAGE__-
>register_method ({
105 name
=> 'update_group',
109 description
=> "Update group data.",
111 additionalProperties
=> 0,
113 # fixme: set/delete members
114 groupid
=> { type
=> 'string', format
=> 'pve-groupid' },
115 comment
=> { type
=> 'string', optional
=> 1 },
118 returns
=> { type
=> 'null' },
122 PVE
::AccessControl
::lock_user_config
(
125 my $usercfg = cfs_read_file
("user.cfg");
127 my $group = $param->{groupid
};
129 my $data = $usercfg->{groups
}->{$group};
131 die "group '$group' does not exist\n"
134 $data->{comment
} = $param->{comment
} if $param->{comment
};
136 cfs_write_file
("user.cfg", $usercfg);
137 }, "create group failed");
142 # fixme: return format!
143 __PACKAGE__-
>register_method ({
144 name
=> 'read_group',
147 description
=> "Get group configuration.",
149 additionalProperties
=> 0,
151 groupid
=> { type
=> 'string', format
=> 'pve-groupid' },
158 my $group = $param->{groupid
};
160 my $usercfg = cfs_read_file
("user.cfg");
162 my $data = $usercfg->{groups
}->{$group};
164 die "group '$group' does not exist\n" if !$data;
166 return &$extract_group_data($data, 1);
170 __PACKAGE__-
>register_method ({
171 name
=> 'delete_group',
175 description
=> "Delete group.",
177 additionalProperties
=> 0,
179 groupid
=> { type
=> 'string' , format
=> 'pve-groupid' },
182 returns
=> { type
=> 'null' },
186 PVE
::AccessControl
::lock_user_config
(
189 my $usercfg = cfs_read_file
("user.cfg");
191 my $group = $param->{groupid
};
193 die "group '$group' does not exist\n"
194 if !$usercfg->{groups
}->{$group};
196 delete ($usercfg->{groups
}->{$group});
198 PVE
::AccessControl
::delete_group_acl
($group, $usercfg);
200 cfs_write_file
("user.cfg", $usercfg);
201 }, "delete group failed");