summaryrefslogtreecommitdiff
path: root/parabolaweb-changepassword.real.in
blob: 07499e853523d75caa783fe22db765b087885cd5 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
#!/bin/bash -e

#   Copyright (c) 2014 Luke Shumaker <lukeshu@sbcglobal.net>
#
#   This program is free software; you can redistribute it and/or modify
#   it under the terms of the GNU General Public License as published by
#   the Free Software Foundation; either version 2 of the License, or
#   (at your option) any later version.
#
#   This program is distributed in the hope that it will be useful,
#   but WITHOUT ANY WARRANTY; without even the implied warranty of
#   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
#   GNU General Public License for more details.
#
#   You should have received a copy of the GNU General Public License
#   along with this program.  If not, see <http://www.gnu.org/licenses/>.

export PATH

usage() {
	printf 'Usage: %s [USERNAME]\n' "${0##*/}"
	printf 'A username may only be specified if run as root or WEBUSER.\n'
}

main() {
	. @pkgconffile@
	[[ -e "${WEBDIR}/manage.py" ]]
	[[ -n "${WEBUSER}" ]]

	local REAL_USER=$USER
	if ! { [[ $SUID_USER == root ]] || [[ $SUID_USER == "$WEBUSER" ]]; }; then
		unset SUDO_USER SUDO_UID SUDO_GID SUDO_COMMAND
	fi

	# The use-cases I want to handle:
	#                                  REAL SUID SUDO | NAME_OF others?
	# user$ changepassword             root user -    | user    no
	# user$ sudo changepassword        root root user | user    yes
	# user$ sudo -u web changepassword root web  user | user    yes
	# web$ changepassword              root web  -    | web     yes
	# root# changepassword             root root -    | root    yes
	# user$ /lib/.../changepasswoed    user -    -    | user    no
	local NAME_OF=${SUDO_USER:-${SUID_USER:-$REAL_USER}}
	local PERM_OF=${SUID_USER:-$REAL_USER}

	local username
	if [[ $PERM_OF == root ]] || [[ $PERM_OF == "$WEBUSER" ]]; then
		if [[ $# -gt 1 ]]; then
			usage >&2
			return 1
		fi
		username=${1:-$NAME_OF}
	else
		if [[ $# -gt 0 ]]; then
			usage >&2
			return 1
		fi
		username=$NAME_OF
	fi

	sudo -u "${WEBUSER}" python2 "${WEBDIR}/manage.py" changepassword "${username}"
}

main "$@"