bump version to 8.1.4

[pve-access-control.git] / PVE / API2 / Role.pm

diff --git a/PVE/API2/Role.pm b/PVE/API2/Role.pm
deleted file mode 100644 (file)
index 509938c..0000000
--- a/PVE/API2/Role.pm
+++ /dev/null
@@ -1,208 +0,0 @@
-package PVE::API2::Role;
-
-use strict;
-use warnings;
-use PVE::Cluster qw (cfs_read_file cfs_write_file);
-use PVE::AccessControl;
-
-use PVE::SafeSyslog;
-
-use Data::Dumper; # fixme: remove
-
-use PVE::RESTHandler;
-
-use base qw(PVE::RESTHandler);
-
-__PACKAGE__->register_method ({
-    name => 'index', 
-    path => '', 
-    method => 'GET',
-    description => "Role index.",
-    permissions => { 
-       check => ['perm', '/access', ['Sys.Audit']],
-    },
-    parameters => {
-       additionalProperties => 0,
-       properties => {},
-    },
-    returns => {
-       type => 'array',
-       items => {
-           type => "object",
-           properties => {
-               roleid => { type => 'string' },
-           },
-       },
-       links => [ { rel => 'child', href => "{roleid}" } ],
-    },
-    code => sub {
-       my ($param) = @_;
-    
-       my $res = [];
-
-       my $usercfg = cfs_read_file("user.cfg");
- 
-       foreach my $role (keys %{$usercfg->{roles}}) {
-           my $privs = join(',', sort keys %{$usercfg->{roles}->{$role}});
-           push @$res, { roleid => $role, privs => $privs };
-       }
-
-       return $res;
-    }});
-
-__PACKAGE__->register_method ({
-    name => 'create_role', 
-    protected => 1,
-    path => '', 
-    method => 'POST',
-    permissions => { 
-       check => ['perm', '/access', ['Sys.Modify']],
-    },
-    description => "Create new role.",
-    parameters => {
-       additionalProperties => 0,
-       properties => {
-           roleid => { type => 'string', format => 'pve-roleid' },
-           privs => { type => 'string' , format => 'pve-priv-list', optional => 1 },
-       },
-    },
-    returns => { type => 'null' },
-    code => sub {
-       my ($param) = @_;
-
-       PVE::AccessControl::lock_user_config(
-           sub {
-                       
-               my $usercfg = cfs_read_file("user.cfg");
-
-               my $role = $param->{roleid};
-
-               die "role '$role' already exists\n" 
-                   if $usercfg->{roles}->{$role};
-
-               $usercfg->{roles}->{$role} = {};
-
-               PVE::AccessControl::add_role_privs($role, $usercfg, $param->{privs});
-
-               cfs_write_file("user.cfg", $usercfg);
-           }, "create role failed");
-
-       return undef;
-    }});
-
-__PACKAGE__->register_method ({
-    name => 'update_role', 
-    protected => 1,
-    path => '{roleid}', 
-    method => 'PUT',
-    permissions => { 
-       check => ['perm', '/access', ['Sys.Modify']],
-    },
-    description => "Create new role.",
-    parameters => {
-       additionalProperties => 0,
-       properties => {
-           roleid => { type => 'string', format => 'pve-roleid' },
-           privs => { type => 'string' , format => 'pve-priv-list' },
-           append => { 
-               type => 'boolean', 
-               optional => 1,
-               requires => 'privs',
-           },
-       },
-    },
-    returns => { type => 'null' },
-    code => sub {
-       my ($param) = @_;
-
-       PVE::AccessControl::lock_user_config(
-           sub {
-                       
-               my $role = $param->{roleid};
-
-               my $usercfg = cfs_read_file("user.cfg");
-       
-               die "role '$role' does not exist\n" 
-                   if !$usercfg->{roles}->{$role};
-
-               $usercfg->{roles}->{$role} = {} if !$param->{append};
-
-               PVE::AccessControl::add_role_privs($role, $usercfg, $param->{privs});
-
-               cfs_write_file("user.cfg", $usercfg);
-           }, "update role failed");
-
-       return undef;
-    }});
-
-# fixme: return format!
-__PACKAGE__->register_method ({
-    name => 'read_role', 
-    path => '{roleid}', 
-    method => 'GET',
-    permissions => { 
-       check => ['perm', '/access', ['Sys.Audit']],
-    },
-    description => "Get role configuration.",
-    parameters => {
-       additionalProperties => 0,
-       properties => {
-           roleid => { type => 'string' , format => 'pve-roleid' },
-       },
-    },
-    returns => {},
-    code => sub {
-       my ($param) = @_;
-
-       my $usercfg = cfs_read_file("user.cfg");
-
-       my $role = $param->{roleid};
-
-       my $data = $usercfg->{roles}->{$role};
-
-       die "role '$role' does not exist\n" if !$data;
-
-       return $data;
-    }});
-
-
-__PACKAGE__->register_method ({
-    name => 'delete_role', 
-    protected => 1,
-    path => '{roleid}', 
-    method => 'DELETE',
-    permissions => { 
-       check => ['perm', '/access', ['Sys.Modify']],
-    },
-    description => "Delete role.",
-    parameters => {
-       additionalProperties => 0,
-       properties => {
-           roleid => { type => 'string', format => 'pve-roleid' },
-       }
-    },
-    returns => { type => 'null' },
-    code => sub {
-       my ($param) = @_;
-
-       PVE::AccessControl::lock_user_config(
-           sub {
-
-               my $role = $param->{roleid};
-
-               my $usercfg = cfs_read_file("user.cfg");
-
-               die "role '$role' does not exist\n"
-                   if !$usercfg->{roles}->{$role};
-       
-               delete ($usercfg->{roles}->{$role});
-
-               # fixme: delete role from acl?
-
-               cfs_write_file("user.cfg", $usercfg);
-           }, "delete role failed");
-       
-       return undef;
-    }});
-
-1;