replicator_scripts.go

// Code generated by go generate; DO NOT EDIT.
package main

const CARP_USER_REPLICATION = `import groovy.json.JsonSlurper
import org.sonatype.nexus.security.user.UserNotFoundException
import org.sonatype.nexus.security.role.*
import org.apache.commons.lang.*
import java.security.SecureRandom
import org.sonatype.nexus.security.SecuritySystem

def securitySystem = container.lookup(SecuritySystem.class.name)
def authManager = securitySystem.getAuthorizationManager("default")

// parse json formatted carp user, which is send as argument for the script
def carpUser = new JsonSlurper().parseText(args)

// default role for new users
def defaultRole = ['cesUser']

try {
  log.info('update user ' + carpUser)
  def user = security.securitySystem.getUser(carpUser.Username)
  user.setFirstName(carpUser.FirstName)
  user.setLastName(carpUser.LastName)
  user.setEmailAddress(carpUser.Email)
  // active status and password are not changed
  security.securitySystem.updateUser(user)
} catch (UserNotFoundException ex) {
  log.info('create user ' + carpUser.Username)

  // user not found, create a new one
  // id, firstName, lastName, Email, active, password, arrayOfRoles
  String VALID_PW_CHARS = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789!\"#\$%&'()*+,-./:;<=>?@[\\]^_` + "`" +`{|}~";
  String randomUserPassword = org.apache.commons.lang.RandomStringUtils.random(16, 0, VALID_PW_CHARS.length(), true, true, VALID_PW_CHARS.toCharArray(), new SecureRandom());
  security.addUser(carpUser.Username, carpUser.FirstName, carpUser.LastName, carpUser.Email, true, randomUserPassword, defaultRole)
}

// map groups to nexus roles
// remove user from admin group; will be added again, if still in it
user = security.securitySystem.getUser(carpUser.Username)
user.removeRole(new RoleIdentifier("default", "cesAdminGroup"))
security.securitySystem.updateUser(user)
// add roles to user
for (group in carpUser.Groups){
  Role currentRole
  try{
    currentRole = authManager.getRole(group)
  } catch (NoSuchRoleException noSuchRoleException){
    log.info('creating role ' + group)
    def newRole = new Role(
      roleId: group,
      source: "",
      name: group,
      description: "",
      readOnly: false,
      privileges: [],
      roles: []
    )
    security.addRole(group, group, "", [], [])
    currentRole = newRole
  }
  user = security.securitySystem.getUser(carpUser.Username)
  log.info('Adding role ' + currentRole.getRoleId() + ' to user ' + user.getUserId())
  presentRole = authManager.getRole(currentRole.getRoleId())
  user.addRole(new RoleIdentifier(presentRole.getSource(), presentRole.getRoleId()))
  security.securitySystem.updateUser(user)
}
`