8e7d7fca27e4f172ef92bf76ae16156e49827d52
[arvados.git] / services / api / lib / current_api_client.rb
1 module CurrentApiClient
2   def current_user
3     Thread.current[:user]
4   end
5
6   def current_api_client
7     Thread.current[:api_client]
8   end
9
10   def current_api_client_authorization
11     Thread.current[:api_client_authorization]
12   end
13
14   def current_api_base
15     Thread.current[:api_url_base]
16   end
17
18   def current_default_owner
19     # owner_uuid for newly created objects
20     ((current_api_client_authorization &&
21       current_api_client_authorization.default_owner_uuid) ||
22      (current_user && current_user.default_owner_uuid) ||
23      (current_user && current_user.uuid) ||
24      nil)
25   end
26
27   # Where is the client connecting from?
28   def current_api_client_ip_address
29     Thread.current[:api_client_ip_address]
30   end
31
32   def system_user_uuid
33     [Server::Application.config.uuid_prefix,
34      User.uuid_prefix,
35      '000000000000000'].join('-')
36   end
37
38   def system_group_uuid
39     [Server::Application.config.uuid_prefix,
40      Group.uuid_prefix,
41      '000000000000000'].join('-')
42   end
43
44   def system_user
45     if not $system_user
46       real_current_user = Thread.current[:user]
47       Thread.current[:user] = User.new(is_admin: true, is_active: true)
48       $system_user = User.where('uuid=?', system_user_uuid).first
49       if !$system_user
50         $system_user = User.new(uuid: system_user_uuid,
51                                 is_active: true,
52                                 is_admin: true,
53                                 email: 'root',
54                                 first_name: 'root',
55                                 last_name: '')
56         $system_user.save!
57         $system_user.reload
58       end
59       Thread.current[:user] = real_current_user
60     end
61     $system_user
62   end
63
64   def system_group
65     if not $system_group
66       act_as_system_user do
67         ActiveRecord::Base.transaction do
68           $system_group = Group.
69             where(uuid: system_group_uuid).first_or_create do |g|
70             g.update_attributes(name: "System group",
71                                 description: "System group")
72             User.all.collect(&:uuid).each do |user_uuid|
73               Link.create(link_class: 'permission',
74                           name: 'can_manage',
75                           tail_kind: 'arvados#group',
76                           tail_uuid: system_group_uuid,
77                           head_kind: 'arvados#user',
78                           head_uuid: user_uuid)
79             end
80           end
81         end
82       end
83     end
84     $system_group
85   end
86
87   def act_as_system_user
88     if block_given?
89       user_was = Thread.current[:user]
90       Thread.current[:user] = system_user
91       begin
92         yield
93       ensure
94         Thread.current[:user] = user_was
95       end
96     else
97       Thread.current[:user] = system_user
98     end
99   end
100 end