rootasrole 4.0.0

A better alternative to sudo(-rs)/su
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84

use bon::builder;
use log::debug;
use rar_common::Cred;
use serde_json::Value;

use crate::{
    Cli,
    error::SrResult,
    finder::{BestExecSettings, de::DLinkedRole, options::BorrowedOptStack},
};

/// This module is not thread-safe.
use super::{Api, ApiEvent, EventKey};

fn find_in_parents(event: &mut ApiEvent) -> SrResult<()> {
    if let ApiEvent::BestRoleSettingsFound(
        cli,
        cred,
        role,
        opt_stack,
        env_path,
        settings,
        matching,
    ) = event
    {
        return match role.role().extra_values.get("parents") {
            Some(Value::Array(parents)) => {
                let mut parents = parents.iter();
                while let Some(Value::String(parent)) = parents.next() {
                    evaluate_parent_role()
                        .parent(parent.as_ref())
                        .cli(cli)
                        .cred(cred)
                        .role(role)
                        .opt_stack(opt_stack)
                        .settings(settings)
                        .matching(matching)
                        .env_path(env_path)
                        .call()?;
                }
                Ok(())
            }
            Some(Value::String(parent)) => evaluate_parent_role()
                .parent(parent.as_ref())
                .cli(cli)
                .cred(cred)
                .role(role)
                .opt_stack(opt_stack)
                .settings(settings)
                .matching(matching)
                .env_path(env_path)
                .call(),
            Some(v) => {
                debug!("Invalid parent value: {v:?}");
                Err(crate::error::SrError::ConfigurationError)
            }
            None => Ok(()),
        };
    }
    Ok(())
}

#[builder]
fn evaluate_parent_role<'a>(
    parent: &str,
    cli: &Cli,
    cred: &Cred,
    role: &DLinkedRole<'_, 'a>,
    opt_stack: &mut BorrowedOptStack<'a>,
    settings: &mut BestExecSettings,
    matching: &mut bool,
    env_path: &[&str],
) -> SrResult<()> {
    if let Some(role) = role.config().role(parent) {
        for task in role.tasks() {
            *matching |= settings.task_settings(cli, cred, &task, opt_stack, env_path)?;
        }
    }
    Ok(())
}

pub fn register() {
    Api::register(EventKey::BestRoleSettings, find_in_parents);
}