From 7d6275514cd4e0ab2903f8c0891c85f3b0e66539 Mon Sep 17 00:00:00 2001
From: Simon Rettberg
Date: Sat, 7 Dec 2019 15:28:30 +0100
Subject: [rebootcontrol] Implement assigning subnets to jump host

Also fix removing all jump hosts from a subnet.
Update translations.
---
 .../rebootcontrol/pages/jumphost.inc.php           | 57 ++++++++++++++++++++--
 1 file changed, 52 insertions(+), 5 deletions(-)

(limited to 'modules-available/rebootcontrol/pages/jumphost.inc.php')

diff --git a/modules-available/rebootcontrol/pages/jumphost.inc.php b/modules-available/rebootcontrol/pages/jumphost.inc.php
index 7dcdd52c..da5badb5 100644
--- a/modules-available/rebootcontrol/pages/jumphost.inc.php
+++ b/modules-available/rebootcontrol/pages/jumphost.inc.php
@@ -8,6 +8,8 @@ class SubPage
 		$action = Request::post('action', false, 'string');
 		if ($action === 'save') {
 			self::saveJumpHost();
+		} elseif ($action === 'assign') {
+			self::saveSubnetAssignment();
 		} elseif ($action === 'list') {
 			self::listAction();
 		}
@@ -22,6 +24,7 @@ class SubPage
 		$id = Request::post('checkid', false, 'int');
 		if ($id !== false) {
 			// Check connectivity
+			User::assertPermission('jumphost.edit');
 			self::execCheckConnection($id);
 			return;
 		}
@@ -65,22 +68,44 @@ class SubPage
 			}
 		}
 		if ($ret > 0) {
-			Message::addSuccess('jumphost-saved', $id);
+			Message::addSuccess('jumphost-saved', $host);
 			self::execCheckConnection($id);
 		} else {
 			Message::addError('no-such-jumphost', $id);
 		}
 	}
 
+	private static function saveSubnetAssignment()
+	{
+		User::assertPermission('jumphost.edit');
+		$id = Request::post('hostid', Request::REQUIRED, 'string');
+		$host = self::getJumpHost($id);
+		$nets = Request::post('subnet', [], 'array');
+		if (empty($nets)) {
+			Database::exec('DELETE FROM reboot_jumphost_x_subnet WHERE hostid = :id', ['id' => $id]);
+		} else {
+			$nets = array_keys($nets);
+			Database::exec('DELETE FROM reboot_jumphost_x_subnet WHERE hostid = :id AND subnetid NOT IN (:nets)',
+				['id' => $id, 'nets' => $nets]);
+			$nets = array_map(function($item) use ($id) {
+				return [$id, $item];
+			}, $nets);
+			Database::exec('INSERT IGNORE INTO reboot_jumphost_x_subnet (hostid, subnetid) VALUES :nets', ['nets' => $nets]);
+		}
+		Message::addSuccess('jumphost-saved', $host['host']);
+	}
+
 	/*
 	 * Render
 	 */
 
 	public static function doRender()
 	{
-		$id = Request::get('id', false, 'string');
-		if ($id !== false) {
-			self::showJumpHost($id);
+		$what = Request::get('what', 'list', 'string');
+		if ($what === 'edit') {
+			self::showJumpHost();
+		} elseif ($what === 'assign') {
+			self::showAssignSubnets();
 		} else {
 			self::showJumpHosts();
 		}
@@ -105,9 +130,10 @@ class SubPage
 		Render::addTemplate('jumphost-list', $data);
 	}
 
-	private static function showJumpHost($id)
+	private static function showJumpHost()
 	{
 		User::assertPermission('jumphost.edit');
+		$id = Request::get('id', Request::REQUIRED, 'string');
 		if ($id === 'new') {
 			$host = ['hostid' => 'new', 'port' => 22, 'script' => "# Assume bash\n"
 				. "MACS='%MACS%'\n"
@@ -137,6 +163,27 @@ class SubPage
 		Render::addTemplate('jumphost-edit', $host);
 	}
 
+	private static function showAssignSubnets()
+	{
+		User::assertPermission('jumphost.assign-subnet');
+		$id = Request::get('id', Request::REQUIRED, 'int');
+		$host = self::getJumpHost($id);
+		$res = Database::simpleQuery('SELECT s.subnetid, s.start, s.end, jxs.hostid FROM reboot_subnet s
+				LEFT JOIN reboot_jumphost_x_subnet jxs ON (s.subnetid = jxs.subnetid AND jxs.hostid = :id)
+				ORDER BY start ASC',
+			['id' => $id]);
+		$list = [];
+		while ($row = $res->fetch(PDO::FETCH_ASSOC)) {
+			$row['cidr'] = IpUtil::rangeToCidr($row['start'], $row['end']);
+			if ($row['hostid'] !== null) {
+				$row['checked'] = 'checked';
+			}
+			$list[] = $row;
+		}
+		$host['list'] = $list;
+		Render::addTemplate('jumphost-subnets', $host);
+	}
+
 	public static function doAjax()
 	{
 
-- 
cgit v1.2.3-55-g7522