#include <crm_internal.h>
#include <stdio.h>
#include <sys/types.h>
#include <pwd.h>
#include <string.h>
#include <stdlib.h>
#include <stdarg.h>
#include <libxml/parser.h>
#include <libxml/tree.h>
#include <libxml/xpath.h>
#include <libxslt/transform.h>
#include <libxslt/variables.h>
#include <libxslt/xsltutils.h>
#include <crm/crm.h>
#include <crm/msg_xml.h>
#include <crm/common/xml.h>
#include <crm/common/xml_internal.h>
#include <crm/common/internal.h>
#include <pacemaker-internal.h>

Include dependency graph for pcmk_acl.c:

Macros
#define	ACL_NS_PREFIX "http://clusterlabs.org/ns/pacemaker/access/"

#define	ACL_NS_Q_PREFIX "pcmk-access-"

#define	ACL_NS_Q_WRITABLE (const xmlChar *) ACL_NS_Q_PREFIX "writable"

#define	ACL_NS_Q_READABLE (const xmlChar *) ACL_NS_Q_PREFIX "readable"

#define	ACL_NS_Q_DENIED (const xmlChar *) ACL_NS_Q_PREFIX "denied"

Functions
int	pcmk__acl_annotate_permissions (const char cred, const xmlDoc cib_doc, xmlDoc **acl_evaled_doc)
	Annotate CIB with XML namespaces indicating ACL evaluation results. More...

int	pcmk__acl_evaled_render (xmlDoc annotated_doc, enum pcmk__acl_render_how how, xmlChar *doc_txt_ptr)

Macro Definition Documentation

◆ ACL_NS_PREFIX

#define ACL_NS_PREFIX "http://clusterlabs.org/ns/pacemaker/access/"

Definition at line 34 of file pcmk_acl.c.

◆ ACL_NS_Q_DENIED

#define ACL_NS_Q_DENIED (const xmlChar *) ACL_NS_Q_PREFIX "denied"

Definition at line 38 of file pcmk_acl.c.

◆ ACL_NS_Q_PREFIX

#define ACL_NS_Q_PREFIX "pcmk-access-"

Definition at line 35 of file pcmk_acl.c.

◆ ACL_NS_Q_READABLE

#define ACL_NS_Q_READABLE (const xmlChar *) ACL_NS_Q_PREFIX "readable"

Definition at line 37 of file pcmk_acl.c.

◆ ACL_NS_Q_WRITABLE

#define ACL_NS_Q_WRITABLE (const xmlChar *) ACL_NS_Q_PREFIX "writable"

Definition at line 36 of file pcmk_acl.c.

Function Documentation

◆ pcmk__acl_annotate_permissions()

int pcmk__acl_annotate_permissions	(	const char *	cred,
		const xmlDoc *	cib_doc,
		xmlDoc **	acl_evaled_doc
	)

Annotate CIB with XML namespaces indicating ACL evaluation results.

Parameters

[in]	cred	Credential whose ACL perspective to switch to
[in]	cib_doc	CIB XML to annotate
[out]	acl_evaled_doc	Where to store annotated CIB XML

Returns: A standard Pacemaker return code (pcmk_rc_ok on success, pcmk_rc_already if ACLs were not applicable, pcmk_rc_schema_validation if the validation schema version is unsupported, or EINVAL or ENOMEM when appropriate.

Note: This supports CIBs validated with the pacemaker-2.0 schema or newer.

Definition at line 204 of file pcmk_acl.c.

◆ pcmk__acl_evaled_render()

int pcmk__acl_evaled_render	(	xmlDoc *	annotated_doc,
		enum pcmk__acl_render_how	how,
		xmlChar **	doc_txt_ptr
	)

Definition at line 263 of file pcmk_acl.c.

Macros

Functions