X-Git-Url: https://git.arvados.org/arvados.git/blobdiff_plain/e87cfcde836ef572a722d645655c7a05fb3f473d..403d9f6b700f38cd3caf067445233b5ead99466c:/services/api/lib/current_api_client.rb diff --git a/services/api/lib/current_api_client.rb b/services/api/lib/current_api_client.rb index 8e7d7fca27..4c26010d2a 100644 --- a/services/api/lib/current_api_client.rb +++ b/services/api/lib/current_api_client.rb @@ -41,10 +41,24 @@ module CurrentApiClient '000000000000000'].join('-') end + def anonymous_group_uuid + [Server::Application.config.uuid_prefix, + Group.uuid_prefix, + 'anonymouspublic'].join('-') + end + + def anonymous_user_uuid + [Server::Application.config.uuid_prefix, + User.uuid_prefix, + 'anonymouspublic'].join('-') + end + def system_user if not $system_user real_current_user = Thread.current[:user] - Thread.current[:user] = User.new(is_admin: true, is_active: true) + Thread.current[:user] = User.new(is_admin: true, + is_active: true, + uuid: system_user_uuid) $system_user = User.where('uuid=?', system_user_uuid).first if !$system_user $system_user = User.new(uuid: system_user_uuid, @@ -86,15 +100,84 @@ module CurrentApiClient def act_as_system_user if block_given? - user_was = Thread.current[:user] - Thread.current[:user] = system_user - begin + act_as_user system_user do yield - ensure - Thread.current[:user] = user_was end else Thread.current[:user] = system_user end end + + def act_as_user user + user_was = Thread.current[:user] + Thread.current[:user] = user + begin + yield + ensure + Thread.current[:user] = user_was + end + end + + def anonymous_group + if not $anonymous_group + act_as_system_user do + ActiveRecord::Base.transaction do + $anonymous_group = Group. + where(uuid: anonymous_group_uuid).first_or_create do |g| + g.update_attributes(name: "Anonymous group", + description: "Anonymous group") + end + end + end + end + $anonymous_group + end + + def anonymous_user + if not $anonymous_user + act_as_system_user do + $anonymous_user = User.where('uuid=?', anonymous_user_uuid).first + if !$anonymous_user + $anonymous_user = User.new(uuid: anonymous_user_uuid, + is_active: false, + is_admin: false, + email: 'anonymouspublic', + first_name: 'anonymouspublic', + last_name: 'anonymouspublic') + $anonymous_user.save! + $anonymous_user.reload + end + + group_perms = Link.where(tail_uuid: anonymous_user_uuid, + head_uuid: anonymous_group_uuid, + link_class: 'permission', + name: 'can_read') + + if !group_perms.any? + group_perm = Link.create!(tail_uuid: anonymous_user_uuid, + head_uuid: anonymous_group_uuid, + link_class: 'permission', + name: 'can_read') + end + end + end + $anonymous_user + end + + def empty_collection_uuid + 'd41d8cd98f00b204e9800998ecf8427e+0' + end + + def empty_collection + if not $empty_collection + act_as_system_user do + ActiveRecord::Base.transaction do + $empty_collection = Collection. + where(portable_data_hash: empty_collection_uuid). + first_or_create!(manifest_text: '', owner_uuid: anonymous_group.uuid) + end + end + end + $empty_collection + end end