X-Git-Url: http://xvm.mit.edu/gitweb/invirt/packages/invirt-web.git/blobdiff_plain/e11cdd5476f7f1a456ece94862c211a1b83b093c..880cccfcec2b9d02c9f1021aff834ca7b2af0b39:/code/cache_acls.py?ds=sidebyside diff --git a/code/cache_acls.py b/code/cache_acls.py index 130f359..7634b7e 100644 --- a/code/cache_acls.py +++ b/code/cache_acls.py @@ -1,11 +1,17 @@ #!/usr/bin/python from invirt.database import * +from invirt.config import structs as config import sys import getafsgroups import subprocess def expandLocker(name): - groups = getafsgroups.getLockerAcl(name) + try: + groups = getafsgroups.getLockerAcl(name) + except getafsgroups.AfsProcessError, e: + if e.message.startswith("fs: You don't have the required access rights on"): + groups = [] + raise cell = getafsgroups.getCell(name) ans = set() for group in groups: @@ -29,14 +35,15 @@ def expandName(name): return [name] return [] try: - return getafsgroups.getAfsGroupMembers(name, 'athena.mit.edu') + return getafsgroups.getAfsGroupMembers(name, config.authz[0].cell) except getafsgroups.AfsProcessError: return [] def accessList(m): people = set() people.update(expandLocker(m.owner)) - people.update(expandName(m.administrator)) + if m.administrator is not None: + people.update(expandName(m.administrator)) return people def refreshMachine(m): @@ -44,26 +51,26 @@ def refreshMachine(m): old_people = set(a.user for a in m.acl) for removed in old_people - people: ma = [x for x in m.acl if x.user == removed][0] - ctx.current.delete(ma) + session.delete(ma) for p in people - old_people: ma = MachineAccess(user=p) m.acl.append(ma) - ctx.current.save(ma) + session.save_or_update(ma) def refreshCache(): - transaction = ctx.current.create_transaction() + session.begin() try: - machines = Machine.select() + machines = Machine.query().all() for m in machines: refreshMachine(m) - ctx.current.flush() + session.flush() # Atomically execute our changes - transaction.commit() + session.commit() except: # Failed! Rollback all the changes. - transaction.rollback() + session.rollback() raise if __name__ == '__main__':