#!/usr/bin/python
-from sipb_xen_database import *
+from invirt.database import *
+from invirt.config import structs as config
import sys
import getafsgroups
import subprocess
def expandLocker(name):
- groups = getafsgroups.getLockerAcl(name)
+ try:
+ groups = getafsgroups.getLockerAcl(name)
+ except getafsgroups.AfsProcessError, e:
+ if e.message.startswith("fs: You don't have the required access rights on"):
+ groups = []
+ else:
+ raise
cell = getafsgroups.getCell(name)
ans = set()
for group in groups:
return [name]
return []
try:
- return getafsgroups.getAfsGroupMembers(name, 'athena.mit.edu')
+ return getafsgroups.getAfsGroupMembers(name, config.authz[0].cell)
except getafsgroups.AfsProcessError:
return []
def accessList(m):
people = set()
people.update(expandLocker(m.owner))
- people.update(expandName(m.administrator))
+ if m.administrator is not None:
+ people.update(expandName(m.administrator))
return people
def refreshMachine(m):
old_people = set(a.user for a in m.acl)
for removed in old_people - people:
ma = [x for x in m.acl if x.user == removed][0]
- ctx.current.delete(ma)
+ session.delete(ma)
for p in people - old_people:
- ma = MachineAccess(machine_id=m.machine_id, user=p)
- ctx.current.save(ma)
+ ma = MachineAccess(user=p)
+ m.acl.append(ma)
+ session.save_or_update(ma)
def refreshCache():
- transaction = ctx.current.create_transaction()
+ session.begin()
try:
- machines = Machine.select()
+ machines = Machine.query().all()
for m in machines:
refreshMachine(m)
- ctx.current.flush()
+ session.flush()
# Atomically execute our changes
- transaction.commit()
+ session.commit()
except:
# Failed! Rollback all the changes.
- transaction.rollback()
+ session.rollback()
raise
if __name__ == '__main__':
- connect('postgres://sipb-xen@sipb-xen-dev/sipb_xen')
+ connect()
refreshCache()