|
|
# -*- coding: utf-8 -*-
|
|
|
"""
|
|
|
rhodecode.lib.db_manage
|
|
|
~~~~~~~~~~~~~~~~~~~~~~~
|
|
|
|
|
|
Database creation, and setup module for RhodeCode. Used for creation
|
|
|
of database as well as for migration operations
|
|
|
|
|
|
:created_on: Apr 10, 2010
|
|
|
:author: marcink
|
|
|
:copyright: (C) 2010-2012 Marcin Kuzminski <marcin@python-works.com>
|
|
|
:license: GPLv3, see COPYING for more details.
|
|
|
"""
|
|
|
# This program is free software: you can redistribute it and/or modify
|
|
|
# it under the terms of the GNU General Public License as published by
|
|
|
# the Free Software Foundation, either version 3 of the License, or
|
|
|
# (at your option) any later version.
|
|
|
#
|
|
|
# This program is distributed in the hope that it will be useful,
|
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
|
# GNU General Public License for more details.
|
|
|
#
|
|
|
# You should have received a copy of the GNU General Public License
|
|
|
# along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
|
|
|
|
import os
|
|
|
import sys
|
|
|
import time
|
|
|
import uuid
|
|
|
import logging
|
|
|
from os.path import dirname as dn, join as jn
|
|
|
import datetime
|
|
|
|
|
|
from rhodecode import __dbversion__, __py_version__
|
|
|
|
|
|
from rhodecode.model.user import UserModel
|
|
|
from rhodecode.lib.utils import ask_ok
|
|
|
from rhodecode.model import init_model
|
|
|
from rhodecode.model.db import User, Permission, RhodeCodeUi, \
|
|
|
RhodeCodeSetting, UserToPerm, DbMigrateVersion, RepoGroup, \
|
|
|
UserRepoGroupToPerm, CacheInvalidation, UserGroup
|
|
|
|
|
|
from sqlalchemy.engine import create_engine
|
|
|
from rhodecode.model.repos_group import ReposGroupModel
|
|
|
#from rhodecode.model import meta
|
|
|
from rhodecode.model.meta import Session, Base
|
|
|
from rhodecode.model.repo import RepoModel
|
|
|
from rhodecode.model.permission import PermissionModel
|
|
|
from rhodecode.model.users_group import UserGroupModel
|
|
|
|
|
|
|
|
|
log = logging.getLogger(__name__)
|
|
|
|
|
|
|
|
|
def notify(msg):
|
|
|
"""
|
|
|
Notification for migrations messages
|
|
|
"""
|
|
|
ml = len(msg) + (4 * 2)
|
|
|
print('\n%s\n*** %s ***\n%s' % ('*' * ml, msg, '*' * ml)).upper()
|
|
|
|
|
|
|
|
|
class UpgradeSteps(object):
|
|
|
"""
|
|
|
Those steps follow schema versions so for example schema
|
|
|
for example schema with seq 002 == step_2 and so on.
|
|
|
"""
|
|
|
|
|
|
def __init__(self, klass):
|
|
|
self.klass = klass
|
|
|
|
|
|
def step_1(self):
|
|
|
pass
|
|
|
|
|
|
def step_2(self):
|
|
|
notify('Patching repo paths for newer version of RhodeCode')
|
|
|
self.klass.fix_repo_paths()
|
|
|
|
|
|
notify('Patching default user of RhodeCode')
|
|
|
self.klass.fix_default_user()
|
|
|
|
|
|
log.info('Changing ui settings')
|
|
|
self.klass.create_ui_settings()
|
|
|
|
|
|
def step_3(self):
|
|
|
notify('Adding additional settings into RhodeCode db')
|
|
|
self.klass.fix_settings()
|
|
|
notify('Adding ldap defaults')
|
|
|
self.klass.create_ldap_options(skip_existing=True)
|
|
|
|
|
|
def step_4(self):
|
|
|
notify('create permissions and fix groups')
|
|
|
self.klass.create_permissions()
|
|
|
self.klass.fixup_groups()
|
|
|
|
|
|
def step_5(self):
|
|
|
pass
|
|
|
|
|
|
def step_6(self):
|
|
|
|
|
|
notify('re-checking permissions')
|
|
|
self.klass.create_permissions()
|
|
|
|
|
|
notify('installing new UI options')
|
|
|
sett4 = RhodeCodeSetting('show_public_icon', True)
|
|
|
Session().add(sett4)
|
|
|
sett5 = RhodeCodeSetting('show_private_icon', True)
|
|
|
Session().add(sett5)
|
|
|
sett6 = RhodeCodeSetting('stylify_metatags', False)
|
|
|
Session().add(sett6)
|
|
|
|
|
|
notify('fixing old PULL hook')
|
|
|
_pull = RhodeCodeUi.get_by_key('preoutgoing.pull_logger')
|
|
|
if _pull:
|
|
|
_pull.ui_key = RhodeCodeUi.HOOK_PULL
|
|
|
Session().add(_pull)
|
|
|
|
|
|
notify('fixing old PUSH hook')
|
|
|
_push = RhodeCodeUi.get_by_key('pretxnchangegroup.push_logger')
|
|
|
if _push:
|
|
|
_push.ui_key = RhodeCodeUi.HOOK_PUSH
|
|
|
Session().add(_push)
|
|
|
|
|
|
notify('installing new pre-push hook')
|
|
|
hooks4 = RhodeCodeUi()
|
|
|
hooks4.ui_section = 'hooks'
|
|
|
hooks4.ui_key = RhodeCodeUi.HOOK_PRE_PUSH
|
|
|
hooks4.ui_value = 'python:rhodecode.lib.hooks.pre_push'
|
|
|
Session().add(hooks4)
|
|
|
|
|
|
notify('installing new pre-pull hook')
|
|
|
hooks6 = RhodeCodeUi()
|
|
|
hooks6.ui_section = 'hooks'
|
|
|
hooks6.ui_key = RhodeCodeUi.HOOK_PRE_PULL
|
|
|
hooks6.ui_value = 'python:rhodecode.lib.hooks.pre_pull'
|
|
|
Session().add(hooks6)
|
|
|
|
|
|
notify('installing hgsubversion option')
|
|
|
# enable hgsubversion disabled by default
|
|
|
hgsubversion = RhodeCodeUi()
|
|
|
hgsubversion.ui_section = 'extensions'
|
|
|
hgsubversion.ui_key = 'hgsubversion'
|
|
|
hgsubversion.ui_value = ''
|
|
|
hgsubversion.ui_active = False
|
|
|
Session().add(hgsubversion)
|
|
|
|
|
|
notify('installing hg git option')
|
|
|
# enable hggit disabled by default
|
|
|
hggit = RhodeCodeUi()
|
|
|
hggit.ui_section = 'extensions'
|
|
|
hggit.ui_key = 'hggit'
|
|
|
hggit.ui_value = ''
|
|
|
hggit.ui_active = False
|
|
|
Session().add(hggit)
|
|
|
|
|
|
notify('re-check default permissions')
|
|
|
default_user = User.get_by_username(User.DEFAULT_USER)
|
|
|
perm = Permission.get_by_key('hg.fork.repository')
|
|
|
reg_perm = UserToPerm()
|
|
|
reg_perm.user = default_user
|
|
|
reg_perm.permission = perm
|
|
|
Session().add(reg_perm)
|
|
|
|
|
|
def step_7(self):
|
|
|
perm_fixes = self.klass.reset_permissions(User.DEFAULT_USER)
|
|
|
Session().commit()
|
|
|
if perm_fixes:
|
|
|
notify('There was an inconsistent state of permissions '
|
|
|
'detected for default user. Permissions are now '
|
|
|
'reset to the default value for default user. '
|
|
|
'Please validate and check default permissions '
|
|
|
'in admin panel')
|
|
|
|
|
|
def step_8(self):
|
|
|
self.klass.create_permissions()
|
|
|
self.klass.populate_default_permissions()
|
|
|
self.klass.create_default_options(skip_existing=True)
|
|
|
Session().commit()
|
|
|
|
|
|
def step_9(self):
|
|
|
pass
|
|
|
|
|
|
def step_10(self):
|
|
|
pass
|
|
|
|
|
|
def step_11(self):
|
|
|
self.klass.update_repo_info()
|
|
|
|
|
|
def step_12(self):
|
|
|
self.klass.create_permissions()
|
|
|
Session().commit()
|
|
|
|
|
|
self.klass.populate_default_permissions()
|
|
|
Session().commit()
|
|
|
|
|
|
#fix all usergroups
|
|
|
ug_model = UserGroupModel()
|
|
|
for ug in UserGroup.get_all():
|
|
|
perm_obj = ug_model._create_default_perms(ug)
|
|
|
Session().add(perm_obj)
|
|
|
Session().commit()
|
|
|
|
|
|
adm = User.get_first_admin()
|
|
|
# fix owners of UserGroup
|
|
|
for ug in Session().query(UserGroup).all():
|
|
|
ug.user_id = adm.user_id
|
|
|
Session().add(ug)
|
|
|
Session().commit()
|
|
|
|
|
|
# fix owners of RepoGroup
|
|
|
for ug in Session().query(RepoGroup).all():
|
|
|
ug.user_id = adm.user_id
|
|
|
Session().add(ug)
|
|
|
Session().commit()
|
|
|
|
|
|
def step_13(self):
|
|
|
pass
|
|
|
|
|
|
def step_14(self):
|
|
|
# fix nullable columns on last_update
|
|
|
for r in RepoModel().get_all():
|
|
|
if r.updated_on is None:
|
|
|
r.updated_on = datetime.datetime.fromtimestamp(0)
|
|
|
Session().add(r)
|
|
|
Session().commit()
|
|
|
|
|
|
class DbManage(object):
|
|
|
def __init__(self, log_sql, dbconf, root, tests=False, cli_args={}):
|
|
|
self.dbname = dbconf.split('/')[-1]
|
|
|
self.tests = tests
|
|
|
self.root = root
|
|
|
self.dburi = dbconf
|
|
|
self.log_sql = log_sql
|
|
|
self.db_exists = False
|
|
|
self.cli_args = cli_args
|
|
|
self.init_db()
|
|
|
|
|
|
force_ask = self.cli_args.get('force_ask')
|
|
|
if force_ask is not None:
|
|
|
global ask_ok
|
|
|
ask_ok = lambda *args, **kwargs: force_ask
|
|
|
|
|
|
def init_db(self):
|
|
|
engine = create_engine(self.dburi, echo=self.log_sql)
|
|
|
init_model(engine)
|
|
|
self.sa = Session()
|
|
|
|
|
|
def create_tables(self, override=False):
|
|
|
"""
|
|
|
Create a auth database
|
|
|
"""
|
|
|
|
|
|
log.info("Any existing database is going to be destroyed")
|
|
|
if self.tests:
|
|
|
destroy = True
|
|
|
else:
|
|
|
destroy = ask_ok('Are you sure to destroy old database ? [y/n]')
|
|
|
if not destroy:
|
|
|
sys.exit('Nothing tables created')
|
|
|
if destroy:
|
|
|
Base.metadata.drop_all()
|
|
|
|
|
|
checkfirst = not override
|
|
|
Base.metadata.create_all(checkfirst=checkfirst)
|
|
|
log.info('Created tables for %s' % self.dbname)
|
|
|
|
|
|
def set_db_version(self):
|
|
|
ver = DbMigrateVersion()
|
|
|
ver.version = __dbversion__
|
|
|
ver.repository_id = 'rhodecode_db_migrations'
|
|
|
ver.repository_path = 'versions'
|
|
|
self.sa.add(ver)
|
|
|
log.info('db version set to: %s' % __dbversion__)
|
|
|
|
|
|
def upgrade(self):
|
|
|
"""
|
|
|
Upgrades given database schema to given revision following
|
|
|
all needed steps, to perform the upgrade
|
|
|
|
|
|
"""
|
|
|
|
|
|
from rhodecode.lib.dbmigrate.migrate.versioning import api
|
|
|
from rhodecode.lib.dbmigrate.migrate.exceptions import \
|
|
|
DatabaseNotControlledError
|
|
|
|
|
|
if 'sqlite' in self.dburi:
|
|
|
print (
|
|
|
'********************** WARNING **********************\n'
|
|
|
'Make sure your version of sqlite is at least 3.7.X. \n'
|
|
|
'Earlier versions are known to fail on some migrations\n'
|
|
|
'*****************************************************\n'
|
|
|
)
|
|
|
upgrade = ask_ok('You are about to perform database upgrade, make '
|
|
|
'sure You backed up your database before. '
|
|
|
'Continue ? [y/n]')
|
|
|
if not upgrade:
|
|
|
sys.exit('No upgrade performed')
|
|
|
|
|
|
repository_path = jn(dn(dn(dn(os.path.realpath(__file__)))),
|
|
|
'rhodecode/lib/dbmigrate')
|
|
|
db_uri = self.dburi
|
|
|
|
|
|
try:
|
|
|
curr_version = api.db_version(db_uri, repository_path)
|
|
|
msg = ('Found current database under version'
|
|
|
' control with version %s' % curr_version)
|
|
|
|
|
|
except (RuntimeError, DatabaseNotControlledError):
|
|
|
curr_version = 1
|
|
|
msg = ('Current database is not under version control. Setting'
|
|
|
' as version %s' % curr_version)
|
|
|
api.version_control(db_uri, repository_path, curr_version)
|
|
|
|
|
|
notify(msg)
|
|
|
|
|
|
if curr_version == __dbversion__:
|
|
|
sys.exit('This database is already at the newest version')
|
|
|
|
|
|
# clear cache keys
|
|
|
log.info("Clearing cache keys now...")
|
|
|
CacheInvalidation.clear_cache()
|
|
|
|
|
|
upgrade_steps = range(curr_version + 1, __dbversion__ + 1)
|
|
|
notify('attempting to do database upgrade from '
|
|
|
'version %s to version %s' % (curr_version, __dbversion__))
|
|
|
|
|
|
# CALL THE PROPER ORDER OF STEPS TO PERFORM FULL UPGRADE
|
|
|
_step = None
|
|
|
for step in upgrade_steps:
|
|
|
notify('performing upgrade step %s' % step)
|
|
|
time.sleep(2)
|
|
|
|
|
|
api.upgrade(db_uri, repository_path, step)
|
|
|
notify('schema upgrade for step %s completed' % (step,))
|
|
|
|
|
|
fixture = 'step_%s' % step
|
|
|
notify('performing fixture step %s' % fixture)
|
|
|
getattr(UpgradeSteps(self), fixture)()
|
|
|
self.sa.commit()
|
|
|
notify('fixture %s completed' % (fixture,))
|
|
|
_step = step
|
|
|
|
|
|
notify('upgrade to version %s successful' % _step)
|
|
|
|
|
|
def fix_repo_paths(self):
|
|
|
"""
|
|
|
Fixes a old rhodecode version path into new one without a '*'
|
|
|
"""
|
|
|
|
|
|
paths = self.sa.query(RhodeCodeUi)\
|
|
|
.filter(RhodeCodeUi.ui_key == '/')\
|
|
|
.scalar()
|
|
|
|
|
|
paths.ui_value = paths.ui_value.replace('*', '')
|
|
|
|
|
|
try:
|
|
|
self.sa.add(paths)
|
|
|
self.sa.commit()
|
|
|
except Exception:
|
|
|
self.sa.rollback()
|
|
|
raise
|
|
|
|
|
|
def fix_default_user(self):
|
|
|
"""
|
|
|
Fixes a old default user with some 'nicer' default values,
|
|
|
used mostly for anonymous access
|
|
|
"""
|
|
|
def_user = self.sa.query(User)\
|
|
|
.filter(User.username == 'default')\
|
|
|
.one()
|
|
|
|
|
|
def_user.name = 'Anonymous'
|
|
|
def_user.lastname = 'User'
|
|
|
def_user.email = 'anonymous@rhodecode.org'
|
|
|
|
|
|
try:
|
|
|
self.sa.add(def_user)
|
|
|
self.sa.commit()
|
|
|
except Exception:
|
|
|
self.sa.rollback()
|
|
|
raise
|
|
|
|
|
|
def fix_settings(self):
|
|
|
"""
|
|
|
Fixes rhodecode settings adds ga_code key for google analytics
|
|
|
"""
|
|
|
|
|
|
hgsettings3 = RhodeCodeSetting('ga_code', '')
|
|
|
|
|
|
try:
|
|
|
self.sa.add(hgsettings3)
|
|
|
self.sa.commit()
|
|
|
except Exception:
|
|
|
self.sa.rollback()
|
|
|
raise
|
|
|
|
|
|
def admin_prompt(self, second=False):
|
|
|
if not self.tests:
|
|
|
import getpass
|
|
|
|
|
|
# defaults
|
|
|
defaults = self.cli_args
|
|
|
username = defaults.get('username')
|
|
|
password = defaults.get('password')
|
|
|
email = defaults.get('email')
|
|
|
|
|
|
def get_password():
|
|
|
password = getpass.getpass('Specify admin password '
|
|
|
'(min 6 chars):')
|
|
|
confirm = getpass.getpass('Confirm password:')
|
|
|
|
|
|
if password != confirm:
|
|
|
log.error('passwords mismatch')
|
|
|
return False
|
|
|
if len(password) < 6:
|
|
|
log.error('password is to short use at least 6 characters')
|
|
|
return False
|
|
|
|
|
|
return password
|
|
|
if username is None:
|
|
|
username = raw_input('Specify admin username:')
|
|
|
if password is None:
|
|
|
password = get_password()
|
|
|
if not password:
|
|
|
#second try
|
|
|
password = get_password()
|
|
|
if not password:
|
|
|
sys.exit()
|
|
|
if email is None:
|
|
|
email = raw_input('Specify admin email:')
|
|
|
self.create_user(username, password, email, True)
|
|
|
else:
|
|
|
log.info('creating admin and regular test users')
|
|
|
from rhodecode.tests import TEST_USER_ADMIN_LOGIN, \
|
|
|
TEST_USER_ADMIN_PASS, TEST_USER_ADMIN_EMAIL, \
|
|
|
TEST_USER_REGULAR_LOGIN, TEST_USER_REGULAR_PASS, \
|
|
|
TEST_USER_REGULAR_EMAIL, TEST_USER_REGULAR2_LOGIN, \
|
|
|
TEST_USER_REGULAR2_PASS, TEST_USER_REGULAR2_EMAIL
|
|
|
|
|
|
self.create_user(TEST_USER_ADMIN_LOGIN, TEST_USER_ADMIN_PASS,
|
|
|
TEST_USER_ADMIN_EMAIL, True)
|
|
|
|
|
|
self.create_user(TEST_USER_REGULAR_LOGIN, TEST_USER_REGULAR_PASS,
|
|
|
TEST_USER_REGULAR_EMAIL, False)
|
|
|
|
|
|
self.create_user(TEST_USER_REGULAR2_LOGIN, TEST_USER_REGULAR2_PASS,
|
|
|
TEST_USER_REGULAR2_EMAIL, False)
|
|
|
|
|
|
def create_ui_settings(self):
|
|
|
"""
|
|
|
Creates ui settings, fills out hooks
|
|
|
and disables dotencode
|
|
|
"""
|
|
|
|
|
|
#HOOKS
|
|
|
hooks1_key = RhodeCodeUi.HOOK_UPDATE
|
|
|
hooks1_ = self.sa.query(RhodeCodeUi)\
|
|
|
.filter(RhodeCodeUi.ui_key == hooks1_key).scalar()
|
|
|
|
|
|
hooks1 = RhodeCodeUi() if hooks1_ is None else hooks1_
|
|
|
hooks1.ui_section = 'hooks'
|
|
|
hooks1.ui_key = hooks1_key
|
|
|
hooks1.ui_value = 'hg update >&2'
|
|
|
hooks1.ui_active = False
|
|
|
self.sa.add(hooks1)
|
|
|
|
|
|
hooks2_key = RhodeCodeUi.HOOK_REPO_SIZE
|
|
|
hooks2_ = self.sa.query(RhodeCodeUi)\
|
|
|
.filter(RhodeCodeUi.ui_key == hooks2_key).scalar()
|
|
|
hooks2 = RhodeCodeUi() if hooks2_ is None else hooks2_
|
|
|
hooks2.ui_section = 'hooks'
|
|
|
hooks2.ui_key = hooks2_key
|
|
|
hooks2.ui_value = 'python:rhodecode.lib.hooks.repo_size'
|
|
|
self.sa.add(hooks2)
|
|
|
|
|
|
hooks3 = RhodeCodeUi()
|
|
|
hooks3.ui_section = 'hooks'
|
|
|
hooks3.ui_key = RhodeCodeUi.HOOK_PUSH
|
|
|
hooks3.ui_value = 'python:rhodecode.lib.hooks.log_push_action'
|
|
|
self.sa.add(hooks3)
|
|
|
|
|
|
hooks4 = RhodeCodeUi()
|
|
|
hooks4.ui_section = 'hooks'
|
|
|
hooks4.ui_key = RhodeCodeUi.HOOK_PRE_PUSH
|
|
|
hooks4.ui_value = 'python:rhodecode.lib.hooks.pre_push'
|
|
|
self.sa.add(hooks4)
|
|
|
|
|
|
hooks5 = RhodeCodeUi()
|
|
|
hooks5.ui_section = 'hooks'
|
|
|
hooks5.ui_key = RhodeCodeUi.HOOK_PULL
|
|
|
hooks5.ui_value = 'python:rhodecode.lib.hooks.log_pull_action'
|
|
|
self.sa.add(hooks5)
|
|
|
|
|
|
hooks6 = RhodeCodeUi()
|
|
|
hooks6.ui_section = 'hooks'
|
|
|
hooks6.ui_key = RhodeCodeUi.HOOK_PRE_PULL
|
|
|
hooks6.ui_value = 'python:rhodecode.lib.hooks.pre_pull'
|
|
|
self.sa.add(hooks6)
|
|
|
|
|
|
# enable largefiles
|
|
|
largefiles = RhodeCodeUi()
|
|
|
largefiles.ui_section = 'extensions'
|
|
|
largefiles.ui_key = 'largefiles'
|
|
|
largefiles.ui_value = ''
|
|
|
self.sa.add(largefiles)
|
|
|
|
|
|
# enable hgsubversion disabled by default
|
|
|
hgsubversion = RhodeCodeUi()
|
|
|
hgsubversion.ui_section = 'extensions'
|
|
|
hgsubversion.ui_key = 'hgsubversion'
|
|
|
hgsubversion.ui_value = ''
|
|
|
hgsubversion.ui_active = False
|
|
|
self.sa.add(hgsubversion)
|
|
|
|
|
|
# enable hggit disabled by default
|
|
|
hggit = RhodeCodeUi()
|
|
|
hggit.ui_section = 'extensions'
|
|
|
hggit.ui_key = 'hggit'
|
|
|
hggit.ui_value = ''
|
|
|
hggit.ui_active = False
|
|
|
self.sa.add(hggit)
|
|
|
|
|
|
def create_ldap_options(self, skip_existing=False):
|
|
|
"""Creates ldap settings"""
|
|
|
|
|
|
for k, v in [('ldap_active', 'false'), ('ldap_host', ''),
|
|
|
('ldap_port', '389'), ('ldap_tls_kind', 'PLAIN'),
|
|
|
('ldap_tls_reqcert', ''), ('ldap_dn_user', ''),
|
|
|
('ldap_dn_pass', ''), ('ldap_base_dn', ''),
|
|
|
('ldap_filter', ''), ('ldap_search_scope', ''),
|
|
|
('ldap_attr_login', ''), ('ldap_attr_firstname', ''),
|
|
|
('ldap_attr_lastname', ''), ('ldap_attr_email', '')]:
|
|
|
|
|
|
if skip_existing and RhodeCodeSetting.get_by_name(k) is not None:
|
|
|
log.debug('Skipping option %s' % k)
|
|
|
continue
|
|
|
setting = RhodeCodeSetting(k, v)
|
|
|
self.sa.add(setting)
|
|
|
|
|
|
def create_default_options(self, skip_existing=False):
|
|
|
"""Creates default settings"""
|
|
|
|
|
|
for k, v in [
|
|
|
('default_repo_enable_locking', False),
|
|
|
('default_repo_enable_downloads', False),
|
|
|
('default_repo_enable_statistics', False),
|
|
|
('default_repo_private', False),
|
|
|
('default_repo_type', 'hg')]:
|
|
|
|
|
|
if skip_existing and RhodeCodeSetting.get_by_name(k) is not None:
|
|
|
log.debug('Skipping option %s' % k)
|
|
|
continue
|
|
|
setting = RhodeCodeSetting(k, v)
|
|
|
self.sa.add(setting)
|
|
|
|
|
|
def fixup_groups(self):
|
|
|
def_usr = User.get_default_user()
|
|
|
for g in RepoGroup.query().all():
|
|
|
g.group_name = g.get_new_name(g.name)
|
|
|
self.sa.add(g)
|
|
|
# get default perm
|
|
|
default = UserRepoGroupToPerm.query()\
|
|
|
.filter(UserRepoGroupToPerm.group == g)\
|
|
|
.filter(UserRepoGroupToPerm.user == def_usr)\
|
|
|
.scalar()
|
|
|
|
|
|
if default is None:
|
|
|
log.debug('missing default permission for group %s adding' % g)
|
|
|
perm_obj = ReposGroupModel()._create_default_perms(g)
|
|
|
self.sa.add(perm_obj)
|
|
|
|
|
|
def reset_permissions(self, username):
|
|
|
"""
|
|
|
Resets permissions to default state, usefull when old systems had
|
|
|
bad permissions, we must clean them up
|
|
|
|
|
|
:param username:
|
|
|
"""
|
|
|
default_user = User.get_by_username(username)
|
|
|
if not default_user:
|
|
|
return
|
|
|
|
|
|
u2p = UserToPerm.query()\
|
|
|
.filter(UserToPerm.user == default_user).all()
|
|
|
fixed = False
|
|
|
if len(u2p) != len(Permission.DEFAULT_USER_PERMISSIONS):
|
|
|
for p in u2p:
|
|
|
Session().delete(p)
|
|
|
fixed = True
|
|
|
self.populate_default_permissions()
|
|
|
return fixed
|
|
|
|
|
|
def update_repo_info(self):
|
|
|
RepoModel.update_repoinfo()
|
|
|
|
|
|
def config_prompt(self, test_repo_path='', retries=3):
|
|
|
defaults = self.cli_args
|
|
|
_path = defaults.get('repos_location')
|
|
|
if retries == 3:
|
|
|
log.info('Setting up repositories config')
|
|
|
|
|
|
if _path is not None:
|
|
|
path = _path
|
|
|
elif not self.tests and not test_repo_path:
|
|
|
path = raw_input(
|
|
|
'Enter a valid absolute path to store repositories. '
|
|
|
'All repositories in that path will be added automatically:'
|
|
|
)
|
|
|
else:
|
|
|
path = test_repo_path
|
|
|
path_ok = True
|
|
|
|
|
|
# check proper dir
|
|
|
if not os.path.isdir(path):
|
|
|
path_ok = False
|
|
|
log.error('Given path %s is not a valid directory' % path)
|
|
|
|
|
|
elif not os.path.isabs(path):
|
|
|
path_ok = False
|
|
|
log.error('Given path %s is not an absolute path' % path)
|
|
|
|
|
|
# check write access
|
|
|
elif not os.access(path, os.W_OK) and path_ok:
|
|
|
path_ok = False
|
|
|
log.error('No write permission to given path %s' % path)
|
|
|
|
|
|
if retries == 0:
|
|
|
sys.exit('max retries reached')
|
|
|
if not path_ok:
|
|
|
retries -= 1
|
|
|
return self.config_prompt(test_repo_path, retries)
|
|
|
|
|
|
real_path = os.path.normpath(os.path.realpath(path))
|
|
|
|
|
|
if real_path != os.path.normpath(path):
|
|
|
if not ask_ok(('Path looks like a symlink, Rhodecode will store '
|
|
|
'given path as %s ? [y/n]') % (real_path)):
|
|
|
log.error('Canceled by user')
|
|
|
sys.exit(-1)
|
|
|
|
|
|
return real_path
|
|
|
|
|
|
def create_settings(self, path):
|
|
|
|
|
|
self.create_ui_settings()
|
|
|
|
|
|
ui_config = [
|
|
|
('web', 'push_ssl', 'false'),
|
|
|
('web', 'allow_archive', 'gz zip bz2'),
|
|
|
('web', 'allow_push', '*'),
|
|
|
('web', 'baseurl', '/'),
|
|
|
('paths', '/', path),
|
|
|
#('phases', 'publish', 'false')
|
|
|
]
|
|
|
for section, key, value in ui_config:
|
|
|
ui_conf = RhodeCodeUi()
|
|
|
setattr(ui_conf, 'ui_section', section)
|
|
|
setattr(ui_conf, 'ui_key', key)
|
|
|
setattr(ui_conf, 'ui_value', value)
|
|
|
self.sa.add(ui_conf)
|
|
|
|
|
|
settings = [
|
|
|
('realm', 'RhodeCode authentication', unicode),
|
|
|
('title', 'RhodeCode', unicode),
|
|
|
('ga_code', '', unicode),
|
|
|
('show_public_icon', True, bool),
|
|
|
('show_private_icon', True, bool),
|
|
|
('stylify_metatags', False, bool),
|
|
|
('dashboard_items', 100, int),
|
|
|
('show_version', True, bool)
|
|
|
]
|
|
|
for key, val, type_ in settings:
|
|
|
sett = RhodeCodeSetting(key, val)
|
|
|
self.sa.add(sett)
|
|
|
|
|
|
self.create_ldap_options()
|
|
|
self.create_default_options()
|
|
|
|
|
|
log.info('created ui config')
|
|
|
|
|
|
def create_user(self, username, password, email='', admin=False):
|
|
|
log.info('creating user %s' % username)
|
|
|
UserModel().create_or_update(username, password, email,
|
|
|
firstname='RhodeCode', lastname='Admin',
|
|
|
active=True, admin=admin)
|
|
|
|
|
|
def create_default_user(self):
|
|
|
log.info('creating default user')
|
|
|
# create default user for handling default permissions.
|
|
|
UserModel().create_or_update(username='default',
|
|
|
password=str(uuid.uuid1())[:8],
|
|
|
email='anonymous@rhodecode.org',
|
|
|
firstname='Anonymous', lastname='User')
|
|
|
|
|
|
def create_permissions(self):
|
|
|
"""
|
|
|
Creates all permissions defined in the system
|
|
|
"""
|
|
|
# module.(access|create|change|delete)_[name]
|
|
|
# module.(none|read|write|admin)
|
|
|
log.info('creating permissions')
|
|
|
PermissionModel(self.sa).create_permissions()
|
|
|
|
|
|
def populate_default_permissions(self):
|
|
|
"""
|
|
|
Populate default permissions. It will create only the default
|
|
|
permissions that are missing, and not alter already defined ones
|
|
|
"""
|
|
|
log.info('creating default user permissions')
|
|
|
PermissionModel(self.sa).create_default_permissions(user=User.DEFAULT_USER)
|
|
|
|
|
|
@staticmethod
|
|
|
def check_waitress():
|
|
|
"""
|
|
|
Function executed at the end of setup
|
|
|
"""
|
|
|
if not __py_version__ >= (2, 6):
|
|
|
notify('Python2.5 detected, please switch '
|
|
|
'egg:waitress#main -> egg:Paste#http '
|
|
|
'in your .ini file')
|
|
|
|
