X-Git-Url: https://git.arvados.org/arvados.git/blobdiff_plain/a2107d5fc7982769c2d667e51656a6e2529d9bc9..4f552c0187f8c31d94ff74485c57ef7f9888597e:/services/api/app/models/arvados_model.rb diff --git a/services/api/app/models/arvados_model.rb b/services/api/app/models/arvados_model.rb index c89efdf404..493cf828d1 100644 --- a/services/api/app/models/arvados_model.rb +++ b/services/api/app/models/arvados_model.rb @@ -11,10 +11,11 @@ class ArvadosModel < ActiveRecord::Base before_create :ensure_permission_to_create before_update :ensure_permission_to_update before_destroy :ensure_permission_to_destroy - before_create :update_modified_by_fields - before_update :maybe_update_modified_by_fields + + before_validation :maybe_update_modified_by_fields validate :ensure_serialized_attribute_type validate :normalize_collection_uuids + validate :ensure_valid_uuids has_many :permissions, :foreign_key => :head_uuid, :class_name => 'Link', :primary_key => :uuid, :conditions => "link_class = 'permission'" @@ -31,34 +32,43 @@ class ArvadosModel < ActiveRecord::Base end def self.kind_class(kind) - kind.match(/^arvados\#(.+?)(_list|List)?$/)[1].pluralize.classify.constantize rescue nil + kind.match(/^arvados\#(.+)$/)[1].classify.safe_constantize rescue nil end def href "#{current_api_base}/#{self.class.to_s.pluralize.underscore}/#{self.uuid}" end - def self.searchable_columns + def self.searchable_columns operator + textonly_operator = !operator.match(/[<=>]/) self.columns.collect do |col| - if [:string, :text].index(col.type) && col.name != 'owner_uuid' + if col.name == 'owner_uuid' + nil + elsif [:string, :text].index(col.type) + col.name + elsif !textonly_operator and [:datetime, :integer].index(col.type) col.name end end.compact end - def eager_load_associations - self.class.columns.each do |col| - re = col.name.match /^(.*)_kind$/ - if (re and - self.respond_to? re[1].to_sym and - (auuid = self.send((re[1] + '_uuid').to_sym)) and - (aclass = self.class.kind_class(self.send(col.name.to_sym))) and - (aobject = aclass.where('uuid=?', auuid).first)) - self.instance_variable_set('@'+re[1], aobject) - end - end + def self.attribute_column attr + self.columns.select { |col| col.name == attr.to_s }.first end + # def eager_load_associations + # self.class.columns.each do |col| + # re = col.name.match /^(.*)_kind$/ + # if (re and + # self.respond_to? re[1].to_sym and + # (auuid = self.send((re[1] + '_uuid').to_sym)) and + # (aclass = self.class.kind_class(self.send(col.name.to_sym))) and + # (aobject = aclass.where('uuid=?', auuid).first)) + # self.instance_variable_set('@'+re[1], aobject) + # end + # end + # end + def self.readable_by user uuid_list = [user.uuid, *user.groups_i_can(:read)] sanitized_uuid_list = uuid_list. @@ -131,7 +141,7 @@ class ArvadosModel < ActiveRecord::Base end def maybe_update_modified_by_fields - update_modified_by_fields if self.changed? + update_modified_by_fields if self.changed? or self.new_record? end def update_modified_by_fields @@ -162,6 +172,10 @@ class ArvadosModel < ActiveRecord::Base attributes.keys.select { |a| a.match /_uuid$/ } end + def skip_uuid_read_permission_check + %w(modified_by_client_uuid) + end + def normalize_collection_uuids foreign_key_attributes.each do |attr| attr_value = send attr @@ -176,6 +190,45 @@ class ArvadosModel < ActiveRecord::Base end end + @@UUID_REGEX = /^[0-9a-z]{5}-([0-9a-z]{5})-[0-9a-z]{15}$/ + + @@prefixes_hash = nil + def self.uuid_prefixes + unless @@prefixes_hash + @@prefixes_hash = {} + ActiveRecord::Base.descendants.reject(&:abstract_class?).each do |k| + if k.respond_to?(:uuid_prefix) + @@prefixes_hash[k.uuid_prefix] = k + end + end + end + @@prefixes_hash + end + + def self.uuid_like_pattern + "_____-#{uuid_prefix}-_______________" + end + + def ensure_valid_uuids + specials = [system_user_uuid, 'd41d8cd98f00b204e9800998ecf8427e+0'] + + foreign_key_attributes.each do |attr| + begin + if new_record? or send (attr + "_changed?") + attr_value = send attr + r = ArvadosModel::resource_class_for_uuid attr_value if attr_value + r = r.readable_by(current_user) if r and not skip_uuid_read_permission_check.include? attr + if r and r.where(uuid: attr_value).count == 0 and not specials.include? attr_value + errors.add(attr, "'#{attr_value}' not found") + end + end + rescue Exception => e + bt = e.backtrace.join("\n") + errors.add(attr, "'#{attr_value}' error '#{e}'\n#{bt}\n") + end + end + end + def self.resource_class_for_uuid(uuid) if uuid.is_a? ArvadosModel return uuid.class @@ -189,14 +242,8 @@ class ArvadosModel < ActiveRecord::Base resource_class = nil Rails.application.eager_load! - uuid.match /^[0-9a-z]{5}-([0-9a-z]{5})-[0-9a-z]{15}$/ do |re| - ActiveRecord::Base.descendants.reject(&:abstract_class?).each do |k| - if k.respond_to?(:uuid_prefix) - if k.uuid_prefix == re[1] - return k - end - end - end + uuid.match @@UUID_REGEX do |re| + return uuid_prefixes[re[1]] if uuid_prefixes[re[1]] end nil end