Viewing file:  save_grant.cgi (1.74 KB) -rwxr-xr-x
Select action/file-type:
 (+) |  (+) |  (+) | Code (+) | Session (+) |  (+) | SDB (+) |  (+) |  (+) |  (+) |  (+) |  (+) |
#!/usr/bin/perl
# save_grant.cgi
# Update privilege grants on some table/view/index
require './postgresql-lib.pl';
&ReadParse();
$access{'users'} || &error($text{'grant_ecannot'});
# Remove old privileges on object
if (&supports_schemas($in{'db'})) {
$s = &execute_sql($in{'db'}, 'select relname, relacl, nspname from pg_class, pg_namespace where relnamespace = pg_namespace.oid and (relkind = \'r\' OR relkind = \'S\') and relname !~ \'^pg_\' order by relname');
$ss = 1;
}
else {
$s = &execute_sql($in{'db'}, 'select relname, relacl, \'public\' from pg_class where (relkind = \'r\' OR relkind = \'S\') and relname !~ \'^pg_\' order by relname');
$ss = 0;
}
foreach $g (@{$s->{'data'}}) {
if ($g->[0] eq $in{'table'} &&
$g->[2] eq $in{'ns'}) {
$g->[1] =~ s/^\{//; $g->[1] =~ s/\}$//;
@grant = map { /^"(.*)=(.*)"$/ || /^(.*)=(.*)$/; [ $1, $2 ] }
split(/,/, $g->[1]);
}
}
$qt = $ss ? "e_table($in{'ns'}.".".$in{'table'})
: "e_table($in{'table'});
foreach $g (@grant) {
next if (!$g->[1]);
if ($g->[0] eq '') {
$who = "public";
}
elsif ($g->[0] =~ /group\s+(\S+)/) {
$who = "group \"$1\"";
}
else {
$who = "\"$g->[0]\"";
}
&execute_sql_logged($in{'db'}, "revoke all on $qt from $who");
}
# Grant new privileges
for($i=0; defined($in{"user_$i"}); $i++) {
@what = split(/\0/, $in{"what_$i"});
next if (!$in{"user_$i"} || !@what);
if ($in{"user_$i"} eq "public") {
$who = "public";
}
elsif ($in{"user_$i"} =~ /^group\s+(\S+)$/) {
$who = "group \"$1\"";
}
else {
$who = "\"".$in{"user_$i"}."\"";
}
&execute_sql_logged($in{'db'}, "grant ".join(",", @what)." on ".
"$qt to $who");
}
&webmin_log("grant", undef, $in{'table'}, \%in);
&redirect("list_grants.cgi?search=".&urlize($in{'search'}));
|