mirror of
https://gitlab.com/crafty-controller/crafty-4.git
synced 2025-02-01 13:26:10 +01:00
101 lines
3.7 KiB
Python
101 lines
3.7 KiB
Python
import logging
|
|
import json
|
|
from jsonschema import validate
|
|
from jsonschema.exceptions import ValidationError
|
|
from app.classes.models.server_permissions import EnumPermissionsServer
|
|
from app.classes.web.base_api_handler import BaseApiHandler
|
|
|
|
logger = logging.getLogger(__name__)
|
|
|
|
backup_patch_schema = {
|
|
"type": "object",
|
|
"properties": {
|
|
"backup_path": {"type": "string", "minLength": 1},
|
|
"max_backups": {"type": "integer"},
|
|
"compress": {"type": "boolean"},
|
|
"shutdown": {"type": "boolean"},
|
|
"backup_before": {"type": "string"},
|
|
"backup_after": {"type": "string"},
|
|
"exclusions": {"type": "array"},
|
|
},
|
|
"additionalProperties": False,
|
|
"minProperties": 1,
|
|
}
|
|
|
|
basic_backup_patch_schema = {
|
|
"type": "object",
|
|
"properties": {
|
|
"max_backups": {"type": "integer"},
|
|
"compress": {"type": "boolean"},
|
|
"shutdown": {"type": "boolean"},
|
|
"backup_before": {"type": "string"},
|
|
"backup_after": {"type": "string"},
|
|
"exclusions": {"type": "array"},
|
|
},
|
|
"additionalProperties": False,
|
|
"minProperties": 1,
|
|
}
|
|
|
|
|
|
class ApiServersServerBackupsIndexHandler(BaseApiHandler):
|
|
def get(self, server_id: str):
|
|
auth_data = self.authenticate_user()
|
|
if not auth_data:
|
|
return
|
|
mask = self.controller.server_perms.get_lowest_api_perm_mask(
|
|
self.controller.server_perms.get_user_permissions_mask(
|
|
auth_data[4]["user_id"], server_id
|
|
),
|
|
auth_data[5],
|
|
)
|
|
server_permissions = self.controller.server_perms.get_permissions(mask)
|
|
if EnumPermissionsServer.BACKUP not in server_permissions:
|
|
# if the user doesn't have Schedule permission, return an error
|
|
return self.finish_json(400, {"status": "error", "error": "NOT_AUTHORIZED"})
|
|
self.finish_json(200, self.controller.management.get_backup_config(server_id))
|
|
|
|
def patch(self, backup_id: str):
|
|
auth_data = self.authenticate_user()
|
|
if not auth_data:
|
|
return
|
|
|
|
try:
|
|
data = json.loads(self.request.body)
|
|
except json.decoder.JSONDecodeError as e:
|
|
return self.finish_json(
|
|
400, {"status": "error", "error": "INVALID_JSON", "error_data": str(e)}
|
|
)
|
|
|
|
try:
|
|
if auth_data[4]["superuser"]:
|
|
validate(data, backup_patch_schema)
|
|
else:
|
|
validate(data, basic_backup_patch_schema)
|
|
except ValidationError as e:
|
|
return self.finish_json(
|
|
400,
|
|
{
|
|
"status": "error",
|
|
"error": "INVALID_JSON_SCHEMA",
|
|
"error_data": str(e),
|
|
},
|
|
)
|
|
backup_conf = self.controller.management.get_backup_config(backup_id)
|
|
server_id = backup_conf["server_id"]
|
|
if server_id not in [str(x["server_id"]) for x in auth_data[0]]:
|
|
# if the user doesn't have access to the server, return an error
|
|
return self.finish_json(400, {"status": "error", "error": "NOT_AUTHORIZED"})
|
|
mask = self.controller.server_perms.get_lowest_api_perm_mask(
|
|
self.controller.server_perms.get_user_permissions_mask(
|
|
auth_data[4]["user_id"], server_id
|
|
),
|
|
auth_data[5],
|
|
)
|
|
server_permissions = self.controller.server_perms.get_permissions(mask)
|
|
if EnumPermissionsServer.BACKUP not in server_permissions:
|
|
# if the user doesn't have Schedule permission, return an error
|
|
return self.finish_json(400, {"status": "error", "error": "NOT_AUTHORIZED"})
|
|
|
|
self.controller.management.update_backup_config(server_id, data)
|
|
return self.finish_json(200, {"status": "ok"})
|