X-Git-Url: https://git.arvados.org/arvados.git/blobdiff_plain/9126da70d57cdd32938c4b3814fedf2bd1f1db93..e31b4ee6fa3da212239dfb5a2e4761ff51ed0928:/services/api/app/models/arvados_model.rb diff --git a/services/api/app/models/arvados_model.rb b/services/api/app/models/arvados_model.rb index 4ef62c99c7..9442a6f0ee 100644 --- a/services/api/app/models/arvados_model.rb +++ b/services/api/app/models/arvados_model.rb @@ -36,6 +36,12 @@ class ArvadosModel < ActiveRecord::Base end end + class AlreadyLockedError < StandardError + def http_status + 403 + end + end + class UnauthorizedError < StandardError def http_status 401 @@ -101,10 +107,12 @@ class ArvadosModel < ActiveRecord::Base # If current user cannot write this object, just return # [self.owner_uuid]. def writable_by + return [owner_uuid] if not current_user unless (owner_uuid == current_user.uuid or current_user.is_admin or (current_user.groups_i_can(:manage) & [uuid, owner_uuid]).any?) - if current_user.groups_i_can(:write).index(uuid) + if ((current_user.groups_i_can(:write) + [current_user.uuid]) & + [uuid, owner_uuid]).any? return [owner_uuid, current_user.uuid] else return [owner_uuid] @@ -198,19 +206,6 @@ class ArvadosModel < ActiveRecord::Base attributes end - def has_permission? perm_type, target_uuid - Link.where(link_class: "permission", - name: perm_type, - tail_uuid: uuid, - head_uuid: target_uuid).any? - end - - # can this class of object go into a project? - # default to false, override to true on individual model classes - def self.goes_in_projects? - false - end - protected def ensure_ownership_path_leads_to_user @@ -438,6 +433,7 @@ class ArvadosModel < ActiveRecord::Base def self.uuid_prefixes unless @@prefixes_hash @@prefixes_hash = {} + Rails.application.eager_load! ActiveRecord::Base.descendants.reject(&:abstract_class?).each do |k| if k.respond_to?(:uuid_prefix) @@prefixes_hash[k.uuid_prefix] = k @@ -451,6 +447,10 @@ class ArvadosModel < ActiveRecord::Base "_____-#{uuid_prefix}-_______________" end + def self.uuid_regex + %r/[a-z0-9]{5}-#{uuid_prefix}-[a-z0-9]{15}/ + end + def ensure_valid_uuids specials = [system_user_uuid] @@ -500,7 +500,6 @@ class ArvadosModel < ActiveRecord::Base end resource_class = nil - Rails.application.eager_load! uuid.match HasUuid::UUID_REGEX do |re| return uuid_prefixes[re[1]] if uuid_prefixes[re[1]] end @@ -525,15 +524,14 @@ class ArvadosModel < ActiveRecord::Base end def log_start_state - @old_etag = etag - @old_attributes = logged_attributes + @old_attributes = Marshal.load(Marshal.dump(attributes)) + @old_logged_attributes = Marshal.load(Marshal.dump(logged_attributes)) end def log_change(event_type) log = Log.new(event_type: event_type).fill_object(self) yield log log.save! - connection.execute "NOTIFY logs, '#{log.id}'" log_start_state end @@ -546,14 +544,14 @@ class ArvadosModel < ActiveRecord::Base def log_update log_change('update') do |log| - log.fill_properties('old', @old_etag, @old_attributes) + log.fill_properties('old', etag(@old_attributes), @old_logged_attributes) log.update_to self end end def log_destroy log_change('destroy') do |log| - log.fill_properties('old', @old_etag, @old_attributes) + log.fill_properties('old', etag(@old_attributes), @old_logged_attributes) log.update_to nil end end