src/bin/proxmox_backup_manager/acl.rs

   1 use anyhow::{bail, Error};
   2 use serde_json::Value;
   3
   4 use proxmox::api::{api, cli::*, RpcEnvironment, ApiHandler};
   5
   6 use proxmox_backup::config;
   7 use proxmox_backup::api2;
   8
   9 #[api(
  10     input: {
  11         properties: {
  12             "output-format": {
  13                 schema: OUTPUT_FORMAT,
  14                 optional: true,
  15             },
  16         }
  17     }
  18 )]
  19 /// Access Control list.
  20 fn list_acls(param: Value, rpcenv: &mut dyn RpcEnvironment) -> Result<Value, Error> {
  21
  22     let output_format = get_output_format(&param);
  23
  24     let info = &api2::access::acl::API_METHOD_READ_ACL;
  25     let mut data = match info.handler {
  26         ApiHandler::Sync(handler) => (handler)(param, info, rpcenv)?,
  27         _ => unreachable!(),
  28     };
  29
  30     fn render_ugid(value: &Value, record: &Value) -> Result<String, Error> {
  31         if value.is_null() { return Ok(String::new()); }
  32         let ugid = value.as_str().unwrap();
  33         let ugid_type = record["ugid_type"].as_str().unwrap();
  34
  35         if ugid_type == "user" {
  36             Ok(ugid.to_string())
  37         } else if ugid_type == "group" {
  38             Ok(format!("@{}", ugid))
  39         } else {
  40             bail!("render_ugid: got unknown ugid_type");
  41         }
  42     }
  43
  44     let options = default_table_format_options()
  45         .column(ColumnConfig::new("ugid").renderer(render_ugid))
  46         .column(ColumnConfig::new("path"))
  47         .column(ColumnConfig::new("propagate"))
  48         .column(ColumnConfig::new("roleid"));
  49
  50     format_and_print_result_full(&mut data, info.returns, &output_format, &options);
  51
  52     Ok(Value::Null)
  53 }
  54
  55 pub fn acl_commands() -> CommandLineInterface {
  56
  57     let cmd_def = CliCommandMap::new()
  58         .insert("list", CliCommand::new(&&API_METHOD_LIST_ACLS))
  59         .insert(
  60             "update",
  61             CliCommand::new(&api2::access::acl::API_METHOD_UPDATE_ACL)
  62                 .arg_param(&["path", "role"])
  63                 .completion_cb("userid", config::user::complete_user_name)
  64                 .completion_cb("path", config::datastore::complete_acl_path)
  65
  66         );
  67
  68     cmd_def.into()
  69 }