Skip to content

Commit 954d75a

Browse files
authored
Merge pull request #3521 from gravitl/v0.99_fixes
v0.99: create default user policy on CE
2 parents 251bc3a + e606401 commit 954d75a

File tree

1 file changed

+35
-1
lines changed

1 file changed

+35
-1
lines changed

logic/user_mgmt.go

Lines changed: 35 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,8 @@ package logic
22

33
import (
44
"encoding/json"
5+
"fmt"
6+
"time"
57

68
"github.com/gravitl/netmaker/database"
79
"github.com/gravitl/netmaker/models"
@@ -60,7 +62,39 @@ var InitialiseRoles = userRolesInit
6062
var IntialiseGroups = func() {}
6163
var DeleteNetworkRoles = func(netID string) {}
6264
var CreateDefaultNetworkRolesAndGroups = func(netID models.NetworkID) {}
63-
var CreateDefaultUserPolicies = func(netID models.NetworkID) {}
65+
var CreateDefaultUserPolicies = func(netID models.NetworkID) {
66+
if netID.String() == "" {
67+
return
68+
}
69+
if !IsAclExists(fmt.Sprintf("%s.%s", netID, "all-users")) {
70+
defaultUserAcl := models.Acl{
71+
ID: fmt.Sprintf("%s.%s", netID, "all-users"),
72+
Default: true,
73+
Name: "All Users",
74+
MetaData: "This policy gives access to everything in the network for an user",
75+
NetworkID: netID,
76+
Proto: models.ALL,
77+
ServiceType: models.Any,
78+
Port: []string{},
79+
RuleType: models.UserPolicy,
80+
Src: []models.AclPolicyTag{
81+
{
82+
ID: models.UserAclID,
83+
Value: "*",
84+
},
85+
},
86+
Dst: []models.AclPolicyTag{{
87+
ID: models.NodeTagID,
88+
Value: "*",
89+
}},
90+
AllowedDirection: models.TrafficDirectionUni,
91+
Enabled: true,
92+
CreatedBy: "auto",
93+
CreatedAt: time.Now().UTC(),
94+
}
95+
InsertAcl(defaultUserAcl)
96+
}
97+
}
6498
var GetUserGroupsInNetwork = func(netID models.NetworkID) (networkGrps map[models.UserGroupID]models.UserGroup) { return }
6599
var GetUserGroup = func(groupId models.UserGroupID) (userGrps models.UserGroup, err error) { return }
66100
var AddGlobalNetRolesToAdmins = func(u *models.User) {}

0 commit comments

Comments
 (0)