mirror of
https://github.com/webmin/webmin.git
synced 2025-07-23 00:30:33 +00:00
108 lines
2.8 KiB
Perl
Executable File
108 lines
2.8 KiB
Perl
Executable File
#!/usr/local/bin/perl
|
|
# save_acl.cgi
|
|
# Save access control options for some module
|
|
|
|
use strict;
|
|
use warnings;
|
|
require './acl-lib.pl';
|
|
our (%in, %text, %config, %access, $base_remote_user, %gconfig,
|
|
$config_directory);
|
|
&ReadParse();
|
|
|
|
my $who;
|
|
if ($in{'_acl_group'}) {
|
|
$access{'groups'} || &error($text{'acl_egroup'});
|
|
$who = $in{'_acl_group'};
|
|
}
|
|
else {
|
|
my $me = &get_user($base_remote_user);
|
|
my @mcan = $access{'mode'} == 1 ? @{$me->{'modules'}} :
|
|
$access{'mode'} == 2 ? split(/\s+/, $access{'mods'}) :
|
|
( &list_modules(), "" );
|
|
&indexof($in{'_acl_mod'}, @mcan) >= 0 || &error($text{'acl_emod'});
|
|
&can_edit_user($in{'_acl_user'}) || &error($text{'acl_euser'});
|
|
$who = $in{'_acl_user'};
|
|
}
|
|
|
|
my $aclfile = $in{'_acl_group'} ? "$config_directory/$in{'_acl_mod'}/$who.gacl"
|
|
: "$config_directory/$in{'_acl_mod'}/$who.acl";
|
|
my %minfo = $in{'_acl_mod'} ? &get_module_info($in{'_acl_mod'})
|
|
: ( 'desc' => $text{'index_global'} );
|
|
if ($in{'reset'}) {
|
|
# Just remove the .acl file
|
|
&lock_file($aclfile);
|
|
if ($in{'_acl_group'}) {
|
|
# For a group
|
|
&save_group_module_acl(undef, $in{'_acl_group'},
|
|
$in{'_acl_mod'}, 1);
|
|
}
|
|
else {
|
|
# For a user
|
|
&save_module_acl(undef, $in{'_acl_user'},
|
|
$in{'_acl_mod'},1);
|
|
}
|
|
&unlock_file($aclfile);
|
|
$in{'moddesc'} = $minfo{'desc'};
|
|
&webmin_log("reset", undef, $who, \%in);
|
|
}
|
|
else {
|
|
# Validate and store ACL settings
|
|
&error_setup($text{'acl_err'});
|
|
my %maccess;
|
|
if (defined($in{'noconfig'})) {
|
|
$maccess{'noconfig'} = $in{'noconfig'};
|
|
}
|
|
if ($in{'rbac'}) {
|
|
# RBAC overrides everything
|
|
$maccess{'rbac'} = 1;
|
|
}
|
|
elsif (-r "../$in{'_acl_mod'}/acl_security.pl") {
|
|
# Use user inputs
|
|
$maccess{'rbac'} = 0 if (defined($in{'rbac'}));
|
|
&foreign_require($in{'_acl_mod'}, "acl_security.pl");
|
|
&foreign_call($in{'_acl_mod'}, "acl_security_save",
|
|
\%maccess, \%in);
|
|
}
|
|
|
|
# Write out the ACL
|
|
&lock_file($aclfile);
|
|
if ($in{'_acl_group'}) {
|
|
# For a group
|
|
&save_group_module_acl(\%maccess, $in{'_acl_group'},
|
|
$in{'_acl_mod'}, 1);
|
|
}
|
|
else {
|
|
# For a user
|
|
&save_module_acl(\%maccess, $in{'_acl_user'},
|
|
$in{'_acl_mod'},1);
|
|
}
|
|
&set_ownership_permissions(undef, undef, 0640, $aclfile);
|
|
&unlock_file($aclfile);
|
|
|
|
if ($in{'_acl_group'}) {
|
|
# Recursively update the ACL for all member users and groups
|
|
# XXX ACL in DB?
|
|
my @ulist = &list_users();
|
|
my @glist = &list_groups();
|
|
my ($group) = grep { $_->{'name'} eq $in{'_acl_group'} } @glist;
|
|
&set_acl_files(\@ulist, \@glist, $in{'_acl_mod'},
|
|
$group->{'members'}, \%maccess);
|
|
}
|
|
|
|
$in{'moddesc'} = $minfo{'desc'};
|
|
&webmin_log("acl", undef, $who, \%in);
|
|
}
|
|
if ($config{'display'}) {
|
|
if ($in{'_acl_group'}) {
|
|
&redirect("edit_group.cgi?group=$in{'_acl_group'}");
|
|
}
|
|
else {
|
|
&redirect("edit_user.cgi?user=$in{'_acl_user'}&readwrite=1");
|
|
}
|
|
}
|
|
else {
|
|
&redirect("");
|
|
}
|
|
|
|
|