Lewanczyk, Dawid | 4e49bd4 | 2018-01-25 11:30:19 +0100 | [diff] [blame] | 1 | /* |
| 2 | // Copyright (c) 2018 Intel Corporation |
| 3 | // |
| 4 | // Licensed under the Apache License, Version 2.0 (the "License"); |
| 5 | // you may not use this file except in compliance with the License. |
| 6 | // You may obtain a copy of the License at |
| 7 | // |
| 8 | // http://www.apache.org/licenses/LICENSE-2.0 |
| 9 | // |
| 10 | // Unless required by applicable law or agreed to in writing, software |
| 11 | // distributed under the License is distributed on an "AS IS" BASIS, |
| 12 | // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| 13 | // See the License for the specific language governing permissions and |
| 14 | // limitations under the License. |
| 15 | */ |
| 16 | #pragma once |
| 17 | |
Lewanczyk, Dawid | 4e49bd4 | 2018-01-25 11:30:19 +0100 | [diff] [blame] | 18 | #include "node.hpp" |
| 19 | |
Ed Tanous | abf2add | 2019-01-22 16:40:12 -0800 | [diff] [blame] | 20 | #include <variant> |
| 21 | |
Ed Tanous | 1abe55e | 2018-09-05 08:30:59 -0700 | [diff] [blame] | 22 | namespace redfish |
| 23 | { |
Lewanczyk, Dawid | 4e49bd4 | 2018-01-25 11:30:19 +0100 | [diff] [blame] | 24 | |
AppaRao Puli | 8fcb65b | 2018-12-27 14:11:55 +0530 | [diff] [blame] | 25 | inline std::string getRoleFromPrivileges(std::string_view priv) |
| 26 | { |
| 27 | if (priv == "priv-admin") |
| 28 | { |
| 29 | return "Administrator"; |
| 30 | } |
Ed Tanous | 3174e4d | 2020-10-07 11:41:22 -0700 | [diff] [blame] | 31 | if (priv == "priv-user") |
AppaRao Puli | 8fcb65b | 2018-12-27 14:11:55 +0530 | [diff] [blame] | 32 | { |
AppaRao Puli | c80fee5 | 2019-10-16 14:49:36 +0530 | [diff] [blame] | 33 | return "ReadOnly"; |
AppaRao Puli | 8fcb65b | 2018-12-27 14:11:55 +0530 | [diff] [blame] | 34 | } |
Ed Tanous | 3174e4d | 2020-10-07 11:41:22 -0700 | [diff] [blame] | 35 | if (priv == "priv-operator") |
AppaRao Puli | 8fcb65b | 2018-12-27 14:11:55 +0530 | [diff] [blame] | 36 | { |
| 37 | return "Operator"; |
| 38 | } |
Ed Tanous | 3174e4d | 2020-10-07 11:41:22 -0700 | [diff] [blame] | 39 | if (priv == "priv-noaccess") |
jayaprakash Mutyala | e9e6d24 | 2019-07-29 11:59:08 +0000 | [diff] [blame] | 40 | { |
| 41 | return "NoAccess"; |
| 42 | } |
AppaRao Puli | 8fcb65b | 2018-12-27 14:11:55 +0530 | [diff] [blame] | 43 | return ""; |
| 44 | } |
| 45 | |
| 46 | inline bool getAssignedPrivFromRole(std::string_view role, |
| 47 | nlohmann::json& privArray) |
| 48 | { |
| 49 | if (role == "Administrator") |
| 50 | { |
| 51 | privArray = {"Login", "ConfigureManager", "ConfigureUsers", |
| 52 | "ConfigureSelf", "ConfigureComponents"}; |
| 53 | } |
| 54 | else if (role == "Operator") |
| 55 | { |
| 56 | privArray = {"Login", "ConfigureSelf", "ConfigureComponents"}; |
| 57 | } |
AppaRao Puli | c80fee5 | 2019-10-16 14:49:36 +0530 | [diff] [blame] | 58 | else if (role == "ReadOnly") |
AppaRao Puli | 8fcb65b | 2018-12-27 14:11:55 +0530 | [diff] [blame] | 59 | { |
| 60 | privArray = {"Login", "ConfigureSelf"}; |
| 61 | } |
jayaprakash Mutyala | e9e6d24 | 2019-07-29 11:59:08 +0000 | [diff] [blame] | 62 | else if (role == "NoAccess") |
| 63 | { |
| 64 | privArray = nlohmann::json::array(); |
| 65 | } |
AppaRao Puli | 8fcb65b | 2018-12-27 14:11:55 +0530 | [diff] [blame] | 66 | else |
| 67 | { |
| 68 | return false; |
| 69 | } |
| 70 | return true; |
| 71 | } |
| 72 | |
Ed Tanous | 1abe55e | 2018-09-05 08:30:59 -0700 | [diff] [blame] | 73 | class Roles : public Node |
| 74 | { |
| 75 | public: |
Ed Tanous | 52cc112 | 2020-07-18 13:51:21 -0700 | [diff] [blame] | 76 | Roles(App& app) : |
AppaRao Puli | 8fcb65b | 2018-12-27 14:11:55 +0530 | [diff] [blame] | 77 | Node(app, "/redfish/v1/AccountService/Roles/<str>/", std::string()) |
Ed Tanous | 1abe55e | 2018-09-05 08:30:59 -0700 | [diff] [blame] | 78 | { |
Ed Tanous | 1abe55e | 2018-09-05 08:30:59 -0700 | [diff] [blame] | 79 | entityPrivileges = { |
| 80 | {boost::beast::http::verb::get, {{"Login"}}}, |
| 81 | {boost::beast::http::verb::head, {{"Login"}}}, |
| 82 | {boost::beast::http::verb::patch, {{"ConfigureManager"}}}, |
| 83 | {boost::beast::http::verb::put, {{"ConfigureManager"}}}, |
| 84 | {boost::beast::http::verb::delete_, {{"ConfigureManager"}}}, |
| 85 | {boost::beast::http::verb::post, {{"ConfigureManager"}}}}; |
| 86 | } |
Lewanczyk, Dawid | 4e49bd4 | 2018-01-25 11:30:19 +0100 | [diff] [blame] | 87 | |
Ed Tanous | 1abe55e | 2018-09-05 08:30:59 -0700 | [diff] [blame] | 88 | private: |
Ed Tanous | cb13a39 | 2020-07-25 19:02:03 +0000 | [diff] [blame] | 89 | void doGet(crow::Response& res, const crow::Request&, |
Ed Tanous | 1abe55e | 2018-09-05 08:30:59 -0700 | [diff] [blame] | 90 | const std::vector<std::string>& params) override |
| 91 | { |
AppaRao Puli | 8fcb65b | 2018-12-27 14:11:55 +0530 | [diff] [blame] | 92 | if (params.size() != 1) |
| 93 | { |
| 94 | messages::internalError(res); |
| 95 | res.end(); |
| 96 | return; |
| 97 | } |
| 98 | const std::string& roleId = params[0]; |
| 99 | nlohmann::json privArray = nlohmann::json::array(); |
| 100 | if (false == getAssignedPrivFromRole(roleId, privArray)) |
| 101 | { |
| 102 | messages::resourceNotFound(res, "Role", roleId); |
| 103 | res.end(); |
| 104 | return; |
| 105 | } |
| 106 | |
| 107 | res.jsonValue = { |
Zbigniew Kurzynski | ec8abe6 | 2019-05-31 16:59:52 +0200 | [diff] [blame] | 108 | {"@odata.type", "#Role.v1_2_2.Role"}, |
AppaRao Puli | 8fcb65b | 2018-12-27 14:11:55 +0530 | [diff] [blame] | 109 | {"Name", "User Role"}, |
Ed Tanous | 0f26153 | 2019-02-08 11:13:29 -0800 | [diff] [blame] | 110 | {"Description", roleId + " User Role"}, |
AppaRao Puli | 8fcb65b | 2018-12-27 14:11:55 +0530 | [diff] [blame] | 111 | {"OemPrivileges", nlohmann::json::array()}, |
| 112 | {"IsPredefined", true}, |
| 113 | {"Id", roleId}, |
Zbigniew Kurzynski | ec8abe6 | 2019-05-31 16:59:52 +0200 | [diff] [blame] | 114 | {"RoleId", roleId}, |
AppaRao Puli | 8fcb65b | 2018-12-27 14:11:55 +0530 | [diff] [blame] | 115 | {"@odata.id", "/redfish/v1/AccountService/Roles/" + roleId}, |
| 116 | {"AssignedPrivileges", std::move(privArray)}}; |
Ed Tanous | 1abe55e | 2018-09-05 08:30:59 -0700 | [diff] [blame] | 117 | res.end(); |
| 118 | } |
Lewanczyk, Dawid | 4e49bd4 | 2018-01-25 11:30:19 +0100 | [diff] [blame] | 119 | }; |
| 120 | |
Ed Tanous | 1abe55e | 2018-09-05 08:30:59 -0700 | [diff] [blame] | 121 | class RoleCollection : public Node |
| 122 | { |
| 123 | public: |
Ed Tanous | 52cc112 | 2020-07-18 13:51:21 -0700 | [diff] [blame] | 124 | RoleCollection(App& app) : Node(app, "/redfish/v1/AccountService/Roles/") |
Ed Tanous | 1abe55e | 2018-09-05 08:30:59 -0700 | [diff] [blame] | 125 | { |
Ed Tanous | 1abe55e | 2018-09-05 08:30:59 -0700 | [diff] [blame] | 126 | entityPrivileges = { |
| 127 | {boost::beast::http::verb::get, {{"Login"}}}, |
| 128 | {boost::beast::http::verb::head, {{"Login"}}}, |
| 129 | {boost::beast::http::verb::patch, {{"ConfigureManager"}}}, |
| 130 | {boost::beast::http::verb::put, {{"ConfigureManager"}}}, |
| 131 | {boost::beast::http::verb::delete_, {{"ConfigureManager"}}}, |
| 132 | {boost::beast::http::verb::post, {{"ConfigureManager"}}}}; |
| 133 | } |
Lewanczyk, Dawid | 4e49bd4 | 2018-01-25 11:30:19 +0100 | [diff] [blame] | 134 | |
Ed Tanous | 1abe55e | 2018-09-05 08:30:59 -0700 | [diff] [blame] | 135 | private: |
Ed Tanous | cb13a39 | 2020-07-25 19:02:03 +0000 | [diff] [blame] | 136 | void doGet(crow::Response& res, const crow::Request&, |
| 137 | const std::vector<std::string>&) override |
Ed Tanous | 1abe55e | 2018-09-05 08:30:59 -0700 | [diff] [blame] | 138 | { |
AppaRao Puli | 8fcb65b | 2018-12-27 14:11:55 +0530 | [diff] [blame] | 139 | auto asyncResp = std::make_shared<AsyncResp>(res); |
Gunnar Mills | 2475db8 | 2020-02-19 16:20:14 -0600 | [diff] [blame] | 140 | res.jsonValue = {{"@odata.id", "/redfish/v1/AccountService/Roles"}, |
AppaRao Puli | 8fcb65b | 2018-12-27 14:11:55 +0530 | [diff] [blame] | 141 | {"@odata.type", "#RoleCollection.RoleCollection"}, |
| 142 | {"Name", "Roles Collection"}, |
| 143 | {"Description", "BMC User Roles"}}; |
| 144 | |
| 145 | crow::connections::systemBus->async_method_call( |
Ed Tanous | abf2add | 2019-01-22 16:40:12 -0800 | [diff] [blame] | 146 | [asyncResp](const boost::system::error_code ec, |
| 147 | const std::variant<std::vector<std::string>>& resp) { |
AppaRao Puli | 8fcb65b | 2018-12-27 14:11:55 +0530 | [diff] [blame] | 148 | if (ec) |
| 149 | { |
| 150 | messages::internalError(asyncResp->res); |
| 151 | return; |
| 152 | } |
| 153 | nlohmann::json& memberArray = |
| 154 | asyncResp->res.jsonValue["Members"]; |
| 155 | memberArray = nlohmann::json::array(); |
| 156 | const std::vector<std::string>* privList = |
Ed Tanous | abf2add | 2019-01-22 16:40:12 -0800 | [diff] [blame] | 157 | std::get_if<std::vector<std::string>>(&resp); |
Ed Tanous | 66664f2 | 2019-10-11 13:05:49 -0700 | [diff] [blame] | 158 | if (privList == nullptr) |
| 159 | { |
| 160 | messages::internalError(asyncResp->res); |
| 161 | return; |
| 162 | } |
AppaRao Puli | 8fcb65b | 2018-12-27 14:11:55 +0530 | [diff] [blame] | 163 | for (const std::string& priv : *privList) |
| 164 | { |
| 165 | std::string role = getRoleFromPrivileges(priv); |
| 166 | if (!role.empty()) |
| 167 | { |
| 168 | memberArray.push_back( |
| 169 | {{"@odata.id", |
| 170 | "/redfish/v1/AccountService/Roles/" + role}}); |
| 171 | } |
| 172 | } |
| 173 | asyncResp->res.jsonValue["Members@odata.count"] = |
| 174 | memberArray.size(); |
| 175 | }, |
| 176 | "xyz.openbmc_project.User.Manager", "/xyz/openbmc_project/user", |
| 177 | "org.freedesktop.DBus.Properties", "Get", |
| 178 | "xyz.openbmc_project.User.Manager", "AllPrivileges"); |
Ed Tanous | 1abe55e | 2018-09-05 08:30:59 -0700 | [diff] [blame] | 179 | } |
Lewanczyk, Dawid | 4e49bd4 | 2018-01-25 11:30:19 +0100 | [diff] [blame] | 180 | }; |
| 181 | |
Ed Tanous | 1abe55e | 2018-09-05 08:30:59 -0700 | [diff] [blame] | 182 | } // namespace redfish |