Add a command `hydra-create-user' for managing user accounts

[?]

Nov 6, 2013, 12:28 PM

XHOZT4WTBN3Y7Q2MBANFS65X4HYL6SGPA7JNB7T7OD726SU2ACWAC

Dependencies

[2] UGA45FNC Add a plugin for backing up builds in s3
[3] AMFMXR52 Provide a command ‘hydra-init’ to initialise/upgrade the database
[4] GYPHTT4M Manual: Remove tabs, indent consistently
[5] HN7JDKV3 doc: Mention SQLite.
[6] KBW3FDZ2 Merge remote branch 'remotes/origin/master'
[*] FV2M6MOT hydra: use autoconf/-make
[*] Y6H7Y3OT Capture the path to `guile', when available.
[*] D5QIOJGP * Move everything up one directory.

Change contents

replacement in doc/manual/installation.xml at line 166

[3.2194]→[3.4259:4379](∅→∅),[3.4259]→[3.4259:4379](∅→∅),[3.4379]→[3.2183:2341](∅→∅),[3.2183]→[3.2183:2341](∅→∅),[3.2341]→[3.4380:4472](∅→∅)

To add a user <emphasis>root</emphasis> with
<emphasis>admin</emphasis> privileges, execute:
<screen>
echo "INSERT INTO Users(userName, emailAddress, password) VALUES ('root', 'some@email.adress.com', '$(echo -n foobar | sha1sum | cut -c1-40)');" | psql hydra
echo "INSERT INTO UserRoles(userName, role) values('root', 'admin');" | psql hydra</screen>

[3.2194]

[3.4472]

To create projects, you need to create a user with
<emphasis>admin</emphasis> privileges. This can be done using
the command <command>hydra-create-user</command>:

<screen>
$ hydra-create-user alice --full-name 'Alice Q. User' \
--email-address 'alice@example.org' --password foobar --role admin
</screen>
replacement in doc/manual/installation.xml at line 175

[3.4473]→[3.4473:4630](∅→∅)

For SQLite the same commands can be used, with <command>psql
hydra</command> replaced by <command>sqlite3
/path/to/hydra.sqlite</command>.

[3.4473]

[3.4630]

Additional users can be created through the web interface.
edit in src/script/Makefile.am at line 13

[2.7577]

[9.541]

hydra-create-user \
file addition: hydra-create-user (---r------)

[10.2543]

#! /var/run/current-system/sw/bin/perl -w

use strict;
use Hydra::Schema;
use Hydra::Helper::Nix;
use Hydra::Model::DB;
use Getopt::Long qw(:config gnu_getopt);
use Digest::SHA1 qw(sha1_hex);

sub showHelp {
print <<EOF;
Usage: $0 NAME
[--rename-from NAME]
[--type hydra|persona]
[--full-name FULLNAME]
[--email-address EMAIL-ADDRESS]
[--password PASSWORD]
[--wipe-roles]
[--role ROLE]...

Create a new Hydra user account, or update or an existing one. The
--role flag can be given multiple times. If the account already
exists, roles are added to the existing roles unless --wipe-roles is
specified. If --rename-from is given, the specified account is
renamed.

Example:
\$ hydra-create-user alice --password foobar --role admin
EOF
exit 0;
}

my ($renameFrom, $type, $fullName, $emailAddress, $password);
my $wipeRoles = 0;
my @roles;

GetOptions("rename-from=s" => \$renameFrom,
"type=s" => \$type,
"full-name=s" => \$fullName,
"email-address=s" => \$emailAddress,
"password=s" => \$password,
"wipe-roles" => \$wipeRoles,
"role=s" => \@roles,
"help" => sub { showHelp() }
) or exit 1;

die "$0: one user name required\n" if scalar @ARGV != 1;
my $userName = $ARGV[0];

die "$0: type must be `hydra' or `persona'\n"
if defined $type && $type ne "hydra" && $type ne "persona";

my $db = Hydra::Model::DB->new();

txn_do($db, sub {
my $user = $db->resultset('Users')->find({ username => $renameFrom // $userName });
if ($renameFrom) {
die "$0: user `$renameFrom' does not exist\n" unless $user;
$user->update({ username => $userName });
} elsif ($user) {
print STDERR "updating existing user `$userName'\n";
} else {
print STDERR "creating new user `$userName'\n";
$user = $db->resultset('Users')->create(
{ username => $userName, type => "hydra", emailaddress => "", password => "!" });
}

die "$0: Persona user names must be email addresses\n"
if $user->type eq "persona" && $userName !~ /\@/;

$user->update({ type => $type }) if defined $type;

$user->update({ fullname => $fullName eq "" ? undef : $fullName }) if defined $fullName;

if ($user->type eq "persona") {
die "$0: Persona accounts do not have an explicitly set email address.\n"
if defined $emailAddress;
die "$0: Persona accounts do not have a password.\n"
if defined $password;
$user->update({ emailaddress => $userName, password => "!" });
} else {
$user->update({ emailaddress => $emailAddress }) if defined $emailAddress;
$user->update({ password => sha1_hex($password) }) if defined $password;
}

$user->userroles->delete if $wipeRoles;
$user->userroles->update_or_create({ role => $_ }) foreach @roles;
});