[bxrabbitmq] +permissions

Author: jhommet

examples/management/ex1.cxx

@@ -16,7 +16,7 @@ int main ()
    bool                     ok;
    rabbitmq::error_response error;
    rabbitmq::vhost::list    vhosts;
-   rabbitmq::rabbit_mgr     mgr ("localhost", 15672, "guest", "guest");
+   rabbitmq::rabbit_mgr     mgr ("localhost", 15671, "admin", "what");
 
    ok = mgr.list_vhosts (vhosts, error);
    if (ok) {

examples/tutorials/t1_receive.cxx

@@ -32,6 +32,10 @@ void receive ()
 {
    std::clog << "\nTUTORIAL 1 : 'Hello World' - receive\n\n" ;
    rabbitmq::connection_parameters c_par;
+   c_par.host   = "caerabbitmq.in2p3.fr";
+   c_par.port   = 5671;
+   c_par.login  = "guest;
+   c_par.passwd = "guest";
    rabbitmq::connection            con (c_par);
    if (con.is_ok ()) {
       std::string                routing_key;

examples/tutorials/t1_send.cxx

@@ -28,6 +28,10 @@ void send ()
 {
    std::clog << "\nTUTORIAL 1 : 'Hello World' - send\n\n" ;
    rabbitmq::connection_parameters c_par;
+   c_par.host   = "caerabbitmq.in2p3.fr";
+   c_par.port   = 5671;
+   c_par.login  = "guest";
+   c_par.passwd = "guest";
    rabbitmq::connection            con (c_par);
    if (con.is_ok ()) {
       rabbitmq::channel &        chan = con.grab_channel ();

src/rabbitmq/management.cc

@@ -100,7 +100,7 @@ namespace rabbitmq {
   }
 
 
-  /***  PERMISSION  **********************************************************/
+  /***  PERMISSIONS  **********************************************************/
 
   void permissions::jsonize (jsontools::node &   node_,
                              const unsigned long int /* version_ */)
@@ -113,5 +113,100 @@ namespace rabbitmq {
     return;
   }
 
+  void permissions::clear () {
+     user      = "";
+     vhost     = "";
+     configure = "";
+     write     = "";
+     read      = "";
+  }
+
+  void permissions::vire_add_exchange_request_perms (const std::string exchange_name) {
+     add_amqgen_to   (configure);
+     add_exchange_to (write, exchange_name);
+     add_amqgen_to   (read);
+  }
+
+  void permissions::vire_add_exchange_service_perms (const std::string exchange_name) {
+     add_amqgen_to   (configure);
+     add_amqdef_to   (write);
+     add_amqgen_to   (write);
+     add_exchange_to (read, exchange_name);
+     add_amqgen_to   (read);
+  }
+
+  void permissions::vire_add_exchange_event_producer_perms (const std::string exchange_name) {
+     add_exchange_to (write, exchange_name);
+  }
+
+  void permissions::vire_add_exchange_event_listener_perms (const std::string exchange_name) {
+     add_amqgen_to   (configure);
+     add_amqgen_to   (write);
+     add_exchange_to (read, exchange_name);
+     add_amqgen_to   (read);
+  }
+
+  void permissions::vire_add_direct_request_perms () {
+     add_amqgen_to   (configure);
+     add_amqdef_to   (write);
+     add_amqgen_to   (read);
+  }
+
+  void permissions::vire_add_direct_service_perms (const std::string queue_name) {
+     add_amqdef_to   (write);
+     add_queue_to    (read, queue_name);
+  }
+
+  void permissions::vire_add_direct_event_producer_perms () {
+     add_amqdef_to (write);
+  }
+
+  void permissions::vire_add_direct_event_listener_perms (const std::string queue_name) {
+     add_queue_to  (read, queue_name);
+  }
+
+  void permissions::add_amqgen_to (std::string & single_perm) {
+     const std::string AMQGEN_PERM ("^amq\\.gen*");
+     add_regexp_to (single_perm, AMQGEN_PERM);
+  }
+
+  void permissions::add_amqdef_to (std::string & single_perm) {
+     const std::string AMQDEF_PERM ("^amq\\.default$");
+     add_regexp_to (single_perm, AMQDEF_PERM);
+  }
+
+  void permissions::add_queue_to (std::string & single_perm, const std::string queue_name) {
+     add_mbox_to (single_perm, queue_name);
+  }
+
+  void permissions::add_exchange_to (std::string & single_perm, const std::string exchange_name) {
+     add_mbox_to (single_perm, exchange_name);
+  }
+
+  void permissions::add_mbox_to (std::string & single_perm, const std::string mbox) {
+     const std::string mbox_perm = mbox_to_regexp (mbox);
+     add_regexp_to (single_perm, mbox_perm);
+  }
+
+  void permissions::add_regexp_to (std::string & single_perm, const std::string regexp) {
+     if (single_perm == "") {
+        single_perm = regexp;
+     } else if (single_perm.find (regexp) == std::string::npos) {
+        single_perm = single_perm + "|" + regexp;
+     }
+  }
+
+  std::string permissions::mbox_to_regexp (const std::string & mbox) {
+     size_t pos = 0;
+     std::string reg_mbox (mbox);
+     while ((pos = reg_mbox.find (".", pos)) != std::string::npos) {
+        reg_mbox.replace (pos, 1, "\\.");
+        pos = pos + 2;
+     }
+     reg_mbox = "^" + reg_mbox;
+     reg_mbox = reg_mbox + "$";
+     return reg_mbox;
+  }
+
 
 } // end of namespace rabbitmq

src/rabbitmq/management.h

@@ -7,8 +7,7 @@
 #include <string>
 #include <list>
 
-// Third party:
-// - Bayeux/jsontools:
+// Bayeux/jsontools:
 #include "jsontools/i_jsonizable.h"
 
 namespace rabbitmq {
@@ -101,6 +100,31 @@ namespace rabbitmq {
       std::string configure;
       std::string write;
       std::string read;
+
+      void clear ();
+
+      //  VIRE Permissions setup (TODO move this to a better place)
+      void vire_add_exchange_request_perms        (const std::string exchange_name);
+      void vire_add_exchange_service_perms        (const std::string exchange_name);
+      void vire_add_exchange_event_producer_perms (const std::string exchange_name);
+      void vire_add_exchange_event_listener_perms (const std::string exchange_name);
+      void vire_add_direct_request_perms          ();
+      void vire_add_direct_service_perms          (const std::string queue_name);
+      void vire_add_direct_event_producer_perms   ();
+      void vire_add_direct_event_listener_perms   (const std::string queue_name);
+
+      //  Single permission modifiers  (single perm is conf, writ or read)
+      static void add_amqgen_to   (std::string & single_perm);
+      static void add_amqdef_to   (std::string & single_perm);
+      static void add_queue_to    (std::string & single_perm, const std::string queue_name);
+      static void add_exchange_to (std::string & single_perm, const std::string exchange_name);
+
+      private :
+         //  Mailbox name and single perm tools
+         static void        add_mbox_to    (std::string & single_perm, const std::string mbox_name);
+         static void        add_regexp_to  (std::string & single_perm, const std::string regexp);
+         static std::string mbox_to_regexp (const std::string & mbox);  //  mbox is a queue or an exchange
+
    };
 
 

src/rabbitmq/rabbit_mgr.cc

@@ -277,6 +277,12 @@ namespace rabbitmq {
       return _request_perform_ (request, error_);
    }
 
+   bool rabbit_mgr::set_permissions (const permissions & perms_,
+                                     error_response    & error_)
+   {
+      return set_permissions (perms_.user, perms_.vhost, perms_.configure, perms_.write, perms_.read, error_);
+   }
+
 
    /***  private  ************************************************************************/
 

src/rabbitmq/rabbit_mgr.h

@@ -3,11 +3,8 @@
 #ifndef BXRABBITMQ_RABBIT_MGR_H
 #define BXRABBITMQ_RABBIT_MGR_H
 
-// Third party:
-// - cURLpp:
 #include <curlpp/Easy.hpp>
 
-// This project:
 #include "rabbitmq/management.h"
 
 namespace rabbitmq {
@@ -20,19 +17,17 @@ namespace rabbitmq {
         static const uint16_t SSL_PORT = 15671;
 
      public:
-        // Constructor & co
+        /// Constructor & co
         rabbit_mgr  (const std::string & server_host_,
                      const uint16_t      server_port_,
                      const std::string & user_login_,
                      const std::string & user_passwd_);
-
-        //  Dtor & co : forbidden
+        //  Ctor & co : forbidden
+        ~rabbit_mgr ();
         rabbit_mgr  ()                                     = delete;
         rabbit_mgr  (const rabbit_mgr & mgr_)              = delete;
         rabbit_mgr & operator =  (const rabbit_mgr & mgr_) = delete;
-
-        //  Dtor
-        ~rabbit_mgr ();
+        //
 
         //  TEST
         bool test (std::string & response_);
@@ -107,6 +102,9 @@ namespace rabbitmq {
                                const std::string & read_,
                                error_response    & error_);
 
+        bool set_permissions  (const permissions & perms_,
+                               error_response    & error_);
+
         // TODO set_perm & bindings
 
      private: