crowbar/crowbar-openstack

#
# Author:: Seth Chisamore (<schisamo@opscode.com>)
# Author:: Lamont Granquist (<lamont@opscode.com>)
# Author:: Marco Betti (<m.betti@gmail.com>)
# Copyright:: Copyright (c) 2011 Opscode, Inc.
# License:: Apache License, Version 2.0
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#

require File.join(File.dirname(__FILE__), "provider_database_postgresql")

class Chef
  class Provider
    class Database
      class PostgresqlUser < Chef::Provider::Database::Postgresql
        include Chef::Mixin::ShellOut

        def load_current_resource
          Gem.clear_paths
          require "pg"
          @current_resource = Chef::Resource::DatabaseUser.new(@new_resource.name)
          @current_resource.username(@new_resource.name)
          @current_resource
        end

        def action_create
          unless exists?
            begin
              statement = "CREATE USER \"#{@new_resource.username}\""
              statement += " WITH PASSWORD '#{@new_resource.password}'" if @new_resource.password
              db("template1").query(statement)
              @new_resource.updated_by_last_action(true)
            ensure
              close
            end
          else
            # check if password needs to be updated
            begin
              conn = PGconn.connect(host: @new_resource.connection[:host],
                                    port: @new_resource.connection[:port] || 5432,
                                    dbname: "template1",
                                    user: @new_resource.username,
                                    password: @new_resource.password )
              conn.close
            rescue
              Chef::Log.info("User #{@new_resource.username} already exists. Updating password.")
              db("template1").query("ALTER USER #{@new_resource.username} PASSWORD '#{@new_resource.password}'")
              @new_resource.updated_by_last_action(true)
            end
          end
        end

        def action_drop
          if exists?
            begin
              db("template1").query("DROP USER \"#{@new_resource.username}\"")
              @new_resource.updated_by_last_action(true)
            ensure
              close
            end
          end
        end

        def action_grant
          begin
            # FIXME: grants on individual tables
            grant_statement = "GRANT #{@new_resource.privileges.join(', ')} ON DATABASE \"#{@new_resource.database_name}\" TO \"#{@new_resource.username}\""
            Chef::Log.info("#{@new_resource}: granting access with statement [#{grant_statement}]")
            db(@new_resource.database_name).query(grant_statement)
            @new_resource.updated_by_last_action(true)
          ensure
            close
          end
        end

        def action_grant_schema
          begin
            grant_statement = "GRANT #{@new_resource.privileges.join(', ')} ON SCHEMA \"#{@new_resource.schema_name}\" TO \"#{@new_resource.username}\""
            Chef::Log.info("#{@new_resource}: granting access with statement [#{grant_statement}]")
            db(@new_resource.database_name).query(grant_statement)
            @new_resource.updated_by_last_action(true)
          ensure
            close
          end
        end

        private
        def exists?
          begin
            exists = db("template1").query("SELECT * FROM pg_user WHERE usename='#{@new_resource.username}'").num_tuples != 0
          ensure
            close
          end
          exists
        end
      end
    end
  end
end