oci/zeronet
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Better way to restrict command in multiuser mode

Browse source
This commit is contained in:
shortcutme 2017-02-11 18:23:15 +01:00
parent 27d31b3a1e
commit edfe760227
No known key found for this signature in database
GPG key ID: 5B63BAE6CB9613AE
1 changed files with 16 additions and 35 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

51
plugins/disabled-Multiuser/MultiuserPlugin.py
View file

@ -108,6 +108,17 @@ class UiRequestPlugin(object):
@PluginManager.registerTo("UiWebsocket") @PluginManager.registerTo("UiWebsocket")
class UiWebsocketPlugin(object): class UiWebsocketPlugin(object):
def __init__(self, *args, **kwargs):
self.multiuser_denied_cmds = (
"siteDelete", "configSet", "serverShutdown", "serverUpdate", "siteClone",
"siteSetOwned", "optionalLimitSet", "siteSetAutodownloadoptional", "dbReload", "dbRebuild",
"mergerSiteDelete"
)
if config.multiuser_no_new_sites:
self.multiuser_denied_cmds += ("MergerSiteAdd", )
super(UiWebsocketPlugin, self).__init__(*args, **kwargs)
# Let the page know we running in multiuser mode # Let the page know we running in multiuser mode
def formatServerInfo(self): def formatServerInfo(self):
server_info = super(UiWebsocketPlugin, self).formatServerInfo() server_info = super(UiWebsocketPlugin, self).formatServerInfo()
@ -160,42 +171,12 @@ class UiWebsocketPlugin(object):
self.cmd("notification", ["error", "Error: Invalid master seed"]) self.cmd("notification", ["error", "Error: Invalid master seed"])
self.actionUserLoginForm(0) self.actionUserLoginForm(0)
# Disable not Multiuser safe functions def hasCmdPermission(self, cmd):
def actionSiteDelete(self, to, *args, **kwargs): if not config.multiuser_local and self.user.master_address not in local_master_addresses and cmd in self.multiuser_denied_cmds:
if not config.multiuser_local: self.cmd("notification", ["info", "This function is disabled on this proxy!"])
self.cmd("notification", ["info", "This function is disabled on this proxy"]) return False
else: else:
return super(UiWebsocketPlugin, self).actionSiteDelete(to, *args, **kwargs) return super(UiWebsocketPlugin, self).hasCmdPermission(cmd)
def actionConfigSet(self, to, *args, **kwargs):
if not config.multiuser_local:
self.cmd("notification", ["info", "This function is disabled on this proxy"])
else:
return super(UiWebsocketPlugin, self).actionConfigSet(to, *args, **kwargs)
def actionServerShutdown(self, to, *args, **kwargs):
if not config.multiuser_local:
self.cmd("notification", ["info", "This function is disabled on this proxy"])
else:
return super(UiWebsocketPlugin, self).actionServerShutdown(to, *args, **kwargs)
def actionServerUpdate(self, to, *args, **kwargs):
if not config.multiuser_local:
self.cmd("notification", ["info", "This function is disabled on this proxy"])
else:
return super(UiWebsocketPlugin, self).actionServerUpdate(to, *args, **kwargs)
def actionSiteClone(self, to, *args, **kwargs):
if not config.multiuser_local:
self.cmd("notification", ["info", "This function is disabled on this proxy"])
else:
return super(UiWebsocketPlugin, self).actionSiteClone(to, *args, **kwargs)
def actionOptionalLimitSet(self, to, *args, **kwargs):
if not config.multiuser_local:
self.cmd("notification", ["info", "This function is disabled on this proxy"])
else:
return super(UiWebsocketPlugin, self).actionOptionalLimitSet(to, *args, **kwargs)
@PluginManager.registerTo("ConfigPlugin") @PluginManager.registerTo("ConfigPlugin")