feat: add DV_CAN_RELEASE variable (#171)

* feat: add DV_CAN_RELEASE variable

* Allow publishing of packages via DV_CAN_RELEASE

Author: puehringer

.github/actions/check-actor/action.yml

@@ -3,6 +3,10 @@ description: checks if actor is allowed to call the workflow
 author: datavisyn
 
 inputs:
+  allowed_users:
+    description: "allowed users (seperated with ,)"
+    required: false
+    default: ""
   dv_devops:
     description: "devops of datavisyn (seperated with ,)"
     required: true
@@ -22,14 +26,23 @@ runs:
   steps:
     - name: Check actor
       run: |
+        allowed_users=$ALLOWED_USERS
         devops=$DV_DEVOPS
-        qms=$_DV_QMS
+        qms=$DV_QMS
         actor=$GITHUB_ACTOR
+        # Start with the DEVOPS users
         mapfile -t array1 < <(echo "${devops}" | tr ',' "\n")
-        if [[ -n $qms ]]  && [[ $QMS_ALLOWED == "true" ]]  ; then
+        # Add the QMs
+        if [[ -n $qms ]] && [[ $QMS_ALLOWED == "true" ]] ; then
           mapfile -t array2 < <(echo "${qms}" | tr ',' "\n")
           array1+=("${array2[@]}")
         fi
+        # And all the allowed users
+        if [[ -n $allowed_users ]]; then
+          mapfile -t array3 < <(echo "${allowed_users}" | tr ',' "\n")
+          array1+=("${array3[@]}")
+        fi
+        # And finally check for access
         for e in "${array1[@]}"; do
           if [[ "$e" == "$actor" ]] ; then
             exit 0
@@ -38,6 +51,7 @@ runs:
         echo "you are not allowed to run this job!"
         exit 1
       env:
+        ALLOWED_USERS: ${{ inputs.allowed_users }}
         DV_DEVOPS: ${{ inputs.dv_devops }}
         DV_QMS: ${{ inputs.dv_qms }}
         GITHUB_ACTOR: ${{ inputs.actor }}

.github/workflows/publish-node-python.yml

@@ -56,6 +56,7 @@ jobs:
       - uses: ./tmp/github-workflows/.github/actions/check-actor
         with:
           dv_devops: ${{ vars.DV_DEVOPS }}
+          allowed_users: ${{ vars.DV_CAN_RELEASE }}
           actor: ${{ github.actor }}
           qms_are_allowed: "false"
       - uses: ./tmp/github-workflows/.github/actions/build-node-python
@@ -88,6 +89,7 @@ jobs:
       - uses: ./tmp/github-workflows/.github/actions/check-actor
         with:
           dv_devops: ${{ vars.DV_DEVOPS }}
+          allowed_users: ${{ vars.DV_CAN_RELEASE }}
           actor: ${{ github.actor }}
           qms_are_allowed: "false"
       - uses: ./tmp/github-workflows/.github/actions/build-node-python

.github/workflows/publish-node.yml

@@ -47,6 +47,7 @@ jobs:
       - uses: ./tmp/github-workflows/.github/actions/check-actor
         with:
           dv_devops: ${{ vars.DV_DEVOPS }}
+          allowed_users: ${{ vars.DV_CAN_RELEASE }}
           actor: ${{ github.actor }}
           qms_are_allowed: "false"
       - uses: ./tmp/github-workflows/.github/actions/build-node-python

.github/workflows/publish-python.yml

@@ -44,6 +44,7 @@ jobs:
       - uses: ./tmp/github-workflows/.github/actions/check-actor
         with:
           dv_devops: ${{ vars.DV_DEVOPS }}
+          allowed_users: ${{ vars.DV_CAN_RELEASE }}
           actor: ${{ github.actor }}
           qms_are_allowed: "false"
       - uses: ./tmp/github-workflows/.github/actions/build-node-python

.github/workflows/release-source.yml

@@ -77,6 +77,7 @@ jobs:
         uses: ./tmp/github-workflows/.github/actions/check-actor
         with:
           dv_devops: ${{ vars.DV_DEVOPS }}
+          allowed_users: ${{ vars.DV_CAN_RELEASE }}
           actor: ${{ github.actor }}
           qms_are_allowed: "false"