mirror of
https://github.com/gravitl/netmaker.git
synced 2025-02-27 17:42:57 +08:00
61 lines
1.8 KiB
Go
61 lines
1.8 KiB
Go
|
package nodeacls
|
||
|
|
||
|
import (
|
||
|
"encoding/json"
|
||
|
|
||
|
"github.com/gravitl/netmaker/database"
|
||
|
)
|
||
|
|
||
|
// AreNodesAllowed - checks if nodes are allowed to communicate in their network ACL
|
||
|
func AreNodesAllowed(networkID NetworkID, node1, node2 NodeID) bool {
|
||
|
var currentNetworkACL, err = FetchCurrentACL(networkID)
|
||
|
if err != nil {
|
||
|
return false
|
||
|
}
|
||
|
return currentNetworkACL[node1][node2] == Allowed && currentNetworkACL[node2][node1] == Allowed
|
||
|
}
|
||
|
|
||
|
// FetchNodeACL - fetches a specific node's ACL in a given network
|
||
|
func FetchNodeACL(networkID NetworkID, nodeID NodeID) (NodeACL, error) {
|
||
|
currentNetACL, err := FetchCurrentACL(networkID)
|
||
|
if err != nil {
|
||
|
return nil, err
|
||
|
}
|
||
|
return currentNetACL[nodeID], nil
|
||
|
}
|
||
|
|
||
|
// FetchNodeACLJson - fetches a node's acl in given network except returns the json string
|
||
|
func FetchNodeACLJson(networkID NetworkID, nodeID NodeID) (ACLJson, error) {
|
||
|
currentNodeACL, err := FetchNodeACL(networkID, nodeID)
|
||
|
if err != nil {
|
||
|
return "", err
|
||
|
}
|
||
|
jsonData, err := json.Marshal(¤tNodeACL)
|
||
|
if err != nil {
|
||
|
return "", err
|
||
|
}
|
||
|
return ACLJson(jsonData), nil
|
||
|
}
|
||
|
|
||
|
// FetchCurrentACL - fetches all current node rules in given network ACL
|
||
|
func FetchCurrentACL(networkID NetworkID) (NetworkACL, error) {
|
||
|
aclJson, err := FetchCurrentACLJson(NetworkID(networkID))
|
||
|
if err != nil {
|
||
|
return nil, err
|
||
|
}
|
||
|
var currentNetworkACL NetworkACL
|
||
|
if err := json.Unmarshal([]byte(aclJson), ¤tNetworkACL); err != nil {
|
||
|
return nil, err
|
||
|
}
|
||
|
return currentNetworkACL, nil
|
||
|
}
|
||
|
|
||
|
// FetchCurrentACLJson - fetch the current ACL of given network except in json string
|
||
|
func FetchCurrentACLJson(networkID NetworkID) (ACLJson, error) {
|
||
|
currentACLs, err := database.FetchRecord(database.NODE_ACLS_TABLE_NAME, string(networkID))
|
||
|
if err != nil {
|
||
|
return ACLJson(""), err
|
||
|
}
|
||
|
return ACLJson(currentACLs), nil
|
||
|
}
|