capistrano-secure-permissions 0.1.2 → 0.2.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: ecf3d7904a7c40c45f9235e717fe7f040758c648
-  data.tar.gz: 508c90cd3f517e89758850198fb3abbf432c33b1
+  metadata.gz: a72dd975dda4940f8660d7c4c5d4114cdd695879
+  data.tar.gz: 3b58c140bed4d7ad4e582e7b0e0f93abfd2eb39c
 SHA512:
-  metadata.gz: cec8f59732fb5a5afd9846253e3a6c03df61c92e37a5541b878cbe1fa490cdd0cf079f30ef6d70aa575e3f2e095972e49f48288fe301ead956da87b848f487f8
-  data.tar.gz: 12be6cdd57f735efcee97ccb32916f95af6c9e4a0d80123f63fbbb101f917265d99b692926e9753173cdaf25c8e808b4d4b080842e80c277834504cdb34e8446
+  metadata.gz: 29e2b786f3ef694708d2d625ddd1aa359d03c248e415078bd415b65603654c5e7249713cc839a6470df676996aaafb0ff4ad7308d2b21cec2b00c9be882dae5d
+  data.tar.gz: 8d705d45d4f397d4cdb518085b07619c319f5033a3852c0a864493786b8a8e28fd67b9ac98cbfb438f1c318c1ec5551e6b7979487908626d8a09dd2cfa89a8cd

data/VERSION

@@ -1 +1 @@
-0.1.2
+0.2.0

data/capistrano-secure-permissions.gemspec

@@ -2,16 +2,16 @@
 # DO NOT EDIT THIS FILE DIRECTLY
 # Instead, edit Jeweler::Tasks in Rakefile, and run 'rake gemspec'
 # -*- encoding: utf-8 -*-
-# stub: capistrano-secure-permissions 0.1.2 ruby lib
+# stub: capistrano-secure-permissions 0.2.0 ruby lib
 
 Gem::Specification.new do |s|
   s.name = "capistrano-secure-permissions"
-  s.version = "0.1.2"
+  s.version = "0.2.0"
 
   s.required_rubygems_version = Gem::Requirement.new(">= 0") if s.respond_to? :required_rubygems_version=
   s.require_paths = ["lib"]
   s.authors = ["Rune Schjellerup Philosof"]
-  s.date = "2015-03-19"
+  s.date = "2015-03-20"
   s.description = "This gem makes it easy to run your app with a user that only has write permissions to the public folder"
   s.email = "rune.capistrano-secure-permissions@philosof.dk"
   s.extra_rdoc_files = [

data/lib/capistrano/tasks/secure-permissions.rake

@@ -4,10 +4,11 @@ namespace :deploy do
     on roles(:all) do
       web_user = fetch(:web_user)
       app_user = fetch(:app_user)
+
       execute :setfacl, "-m", "u:www-data:x", "#{release_path}", "#{shared_path}", "#{shared_path}/public"
-      execute :setfacl, '--logical', '--recursive', '-m', "u:#{web_user}:rX,d:u:#{web_user}:rX,u:#{app_user}:rwX,d:u:#{app_user}:rwX", "#{release_path}/public"
-      execute :setfacl, '--logical', '--recursive', '-m', "d:u:#{app_user}:rX,u:#{app_user}:rX", "#{release_path}", "#{shared_path}"
-      execute :setfacl, '--logical', '--recursive', '-m', "d:u:#{app_user}:rwX,u:#{app_user}:rwX", "#{release_path}/log", "#{release_path}/tmp"
+      execute :find, release_path, '-regex', '\./\(public\|tmp\|log\)', '-prune', '-o', '-user', '$USER', '-print0', '|', 'xargs', '-0', 'setfacl', '-m', "d:u:#{app_user}:rX,u:#{app_user}:rX"
+      execute :find, "#{release_path}/public", '-user', '$USER', '-print0', '|', 'xargs', '-0', 'setfacl', '-m', "u:#{web_user}:rX,d:u:#{web_user}:rX,u:#{app_user}:rwX,d:u:#{app_user}:rwX"
+      execute :find, '-L', "#{release_path}/log", "#{release_path}/tmp", '-user', '$USER', '-print0', '|', 'xargs', '-0', 'setfacl', '-m', "d:u:#{app_user}:rwX,u:#{app_user}:rwX"
     end
   end
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: capistrano-secure-permissions
 version: !ruby/object:Gem::Version
-  version: 0.1.2
+  version: 0.2.0
 platform: ruby
 authors:
 - Rune Schjellerup Philosof
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2015-03-19 00:00:00.000000000 Z
+date: 2015-03-20 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rdoc