From d3479ab65baa54fd6829139928693d47a4b26ae9 Mon Sep 17 00:00:00 2001
From: Usman Nasir <usman@cyberpersons.com>
Date: Sun, 14 Mar 2021 10:54:12 +0500
Subject: [PATCH] add default acls during installation

---
 plogical/acl.py       | 33 +++++++++++++++++++++++++++++++--
 plogical/adminPass.py |  1 +
 2 files changed, 32 insertions(+), 2 deletions(-)

diff --git a/plogical/acl.py b/plogical/acl.py
index 36dd7a3a9..a3f0b8869 100644
--- a/plogical/acl.py
+++ b/plogical/acl.py
@@ -16,6 +16,34 @@ from dockerManager.models import Containers
 from re import compile
 class ACLManager:
 
+
+    AdminACL = '{"adminStatus":1, "versionManagement": 1, "createNewUser": 1, "listUsers": 1, "deleteUser":1 , "resellerCenter": 1, ' \
+               '"changeUserACL": 1, "createWebsite": 1, "modifyWebsite": 1, "suspendWebsite": 1, "deleteWebsite": 1, ' \
+               '"createPackage": 1, "listPackages": 1, "deletePackage": 1, "modifyPackage": 1, "createDatabase": 1, "deleteDatabase": 1, ' \
+               '"listDatabases": 1, "createNameServer": 1, "createDNSZone": 1, "deleteZone": 1, "addDeleteRecords": 1, ' \
+               '"createEmail": 1, "listEmails": 1, "deleteEmail": 1, "emailForwarding": 1, "changeEmailPassword": 1, ' \
+               '"dkimManager": 1, "createFTPAccount": 1, "deleteFTPAccount": 1, "listFTPAccounts": 1, "createBackup": 1,' \
+               ' "restoreBackup": 1, "addDeleteDestinations": 1, "scheDuleBackups": 1, "remoteBackups": 1, "googleDriveBackups": 1, "manageSSL": 1, ' \
+               '"hostnameSSL": 1, "mailServerSSL": 1 }'
+
+    ResellerACL = '{"adminStatus":0, "versionManagement": 1, "createNewUser": 1, "listUsers": 1, "deleteUser": 1 , "resellerCenter": 1, ' \
+                  '"changeUserACL": 0, "createWebsite": 1, "modifyWebsite": 1, "suspendWebsite": 1, "deleteWebsite": 1, ' \
+                  '"createPackage": 1, "listPackages": 1, "deletePackage": 1, "modifyPackage": 1, "createDatabase": 1, "deleteDatabase": 1, ' \
+                  '"listDatabases": 1, "createNameServer": 1, "createDNSZone": 1, "deleteZone": 1, "addDeleteRecords": 1, ' \
+                  '"createEmail": 1, "listEmails": 1, "deleteEmail": 1, "emailForwarding": 1, "changeEmailPassword": 1, ' \
+                  '"dkimManager": 1, "createFTPAccount": 1, "deleteFTPAccount": 1, "listFTPAccounts": 1, "createBackup": 1,' \
+                  ' "restoreBackup": 1, "addDeleteDestinations": 0, "scheDuleBackups": 0, "remoteBackups": 0, "googleDriveBackups": 1, "manageSSL": 1, ' \
+                  '"hostnameSSL": 0, "mailServerSSL": 0 }'
+
+    UserACL = '{"adminStatus":0, "versionManagement": 1, "createNewUser": 0, "listUsers": 0, "deleteUser": 0 , "resellerCenter": 0, ' \
+              '"changeUserACL": 0, "createWebsite": 0, "modifyWebsite": 0, "suspendWebsite": 0, "deleteWebsite": 0, ' \
+              '"createPackage": 0, "listPackages": 0, "deletePackage": 0, "modifyPackage": 0, "createDatabase": 1, "deleteDatabase": 1, ' \
+              '"listDatabases": 1, "createNameServer": 0, "createDNSZone": 1, "deleteZone": 1, "addDeleteRecords": 1, ' \
+              '"createEmail": 1, "listEmails": 1, "deleteEmail": 1, "emailForwarding": 1, "changeEmailPassword": 1, ' \
+              '"dkimManager": 1, "createFTPAccount": 1, "deleteFTPAccount": 1, "listFTPAccounts": 1, "createBackup": 1,' \
+              ' "restoreBackup": 0, "addDeleteDestinations": 0, "scheDuleBackups": 0, "remoteBackups": 0, "googleDriveBackups": 1, "manageSSL": 1, ' \
+              '"hostnameSSL": 0, "mailServerSSL": 0 }'
+
     @staticmethod
     def fetchIP():
         try:
@@ -176,7 +204,7 @@ class ACLManager:
 
             ## Admin ACL
 
-            newACL = ACL(name='admin', adminStatus=1)
+            newACL = ACL(name='admin', adminStatus=1, config=ACLManager.AdminACL)
             newACL.save()
 
             ## Reseller ACL
@@ -194,11 +222,12 @@ class ACLManager:
                          modifyPackage=1,
                          createNameServer=1,
                          restoreBackup=1,
+                         config=ACLManager.ResellerACL
                          )
             newACL.save()
 
             ## User ACL
-            newACL = ACL(name='user')
+            newACL = ACL(name='user', config=ACLManager.UserACL)
             newACL.save()
         except:
             pass
diff --git a/plogical/adminPass.py b/plogical/adminPass.py
index 1cd46ebc4..38d5951d4 100755
--- a/plogical/adminPass.py
+++ b/plogical/adminPass.py
@@ -59,6 +59,7 @@ def main():
                               emailAccounts=1000, allowedDomains=20)
             package.save()
 
+
             print("Admin password successfully changed!")
             return 1