[csw-devel] SF.net SVN: gar:[12082] csw/mgar/gar/v2/lib/sh/db_privileges.sh

[wahwah at users.sourceforge.net]

Revision: 12082
          http://gar.svn.sourceforge.net/gar/?rev=12082&view=rev
Author:   wahwah
Date:     2010-12-27 10:16:14 +0000 (Mon, 27 Dec 2010)

Log Message:
-----------
checkpkg: Database permissions in a shell script

It prints permission grants to screen.  Requires a small configuration
file to set the default host and user names.

Added Paths:
-----------
    csw/mgar/gar/v2/lib/sh/db_privileges.sh

Added: csw/mgar/gar/v2/lib/sh/db_privileges.sh
===================================================================
--- csw/mgar/gar/v2/lib/sh/db_privileges.sh	                        (rev 0)
+++ csw/mgar/gar/v2/lib/sh/db_privileges.sh	2010-12-27 10:16:14 UTC (rev 12082)
@@ -0,0 +1,94 @@
+#!/bin/bash
+
+# Prints privileges grants for the shared database
+# Using MySQL syntax
+
+set -u
+set -e
+
+CONFIG_FILE="site_config.sh"
+
+if [[ -r "${CONFIG_FILE}" ]]
+then
+  source "${CONFIG_FILE}"
+else
+  echo "Please create '$(pwd)/${CONFIG_FILE}'"
+  echo "See $0 for details."
+  exit 1
+fi
+
+# Example site_configh.sh:
+#
+# DEFAULT_HOST="192.168.0.%"
+# DBA_USER=dba_user
+# RELMGR_USER=relmgr_user
+# MAINTAINER_USER=maintainer_user
+
+TABLES_ADMIN=(
+  architecture
+  catalog_release
+  catalog_release_type
+  csw_config
+  data_source
+  host
+  maintainer
+  os_release
+)
+TABLES_REL_MGR=(
+  srv4_file_in_catalog
+  csw_file
+)
+TABLES_REGULAR=(
+  pkginst
+  checkpkg_error_tag
+  checkpkg_override
+  srv4_depends_on
+  srv4_file_stats
+  srv4_file_stats_blob
+)
+
+function print_table_grant {
+  local table=$1
+  local dbname=$2
+  local user=$3
+  local host=$4
+  echo -n "GRANT SELECT, INSERT, UPDATE, DELETE"
+  echo " ON ${dbname}.${tbl} TO '${user}'@'${host}';"
+}
+
+function print_grants {
+  local dbname=$1
+  local admin_user="${DBA_USER}"
+  local relmgr_user="${RELMGR_USER}"
+  local maintainer_user="${MAINTAINER_USER}"
+  local host="${DEFAULT_HOST}"
+  echo "GRANT ALL PRIVILEGES ON ${dbname}.* TO '${admin_user}'@'localhost';"
+  echo "GRANT SELECT ON ${dbname}.* TO '${relmgr_user}'@'${host}';"
+  echo "GRANT SELECT ON ${dbname}.* TO '${maintainer_user}'@'${host}';"
+  for tbl in "${TABLES_REL_MGR[@]}" \
+             "${TABLES_REGULAR[@]}"
+  do
+    print_table_grant "${tbl}" "${dbname}" "${relmgr_user}" "${host}"
+  done
+  for tbl in "${TABLES_REGULAR[@]}"
+  do
+    print_table_grant "${tbl}" "${dbname}" "${maintainer_user}" "${host}"
+  done
+  echo "CREATE USER '${admin_user}'@'localhost' IDENTIFIED BY '<fill-me-in>';"
+  echo "CREATE USER '${admin_user}'@'${host}' IDENTIFIED BY '<fill-me-in>';"
+  echo "CREATE USER '${relmgr_user}'@'${host}' IDENTIFIED BY '<fill-me-in>';"
+  echo "CREATE USER '${maintainer_user}'@'${host}' IDENTIFIED BY '<fill-me-in>';"
+  echo "-- or"
+  echo "SET PASSWORD FOR '${admin_user}'@'localhost' = PASSWORD('<fill-me-in>');"
+  echo "SET PASSWORD FOR '${admin_user}'@'${host}' = PASSWORD('<fill-me-in>');"
+  echo "SET PASSWORD FOR '${relmgr_user}'@'${host}' = PASSWORD('<fill-me-in>');"
+  echo "SET PASSWORD FOR '${maintainer_user}'@'${host}' = PASSWORD('<fill-me-in>');"
+  echo
+  echo "FLUSH PRIVILEGES;"
+}
+
+function main {
+  print_grants "$1"
+}
+
+main "$@"


Property changes on: csw/mgar/gar/v2/lib/sh/db_privileges.sh
___________________________________________________________________
Added: svn:executable
   + *


This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.