capistrano-secure-permissions 0.5.0 → 0.6.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 3b069c6664b551ed94e521c602a999c7e5f690fc
-  data.tar.gz: 957052ccd4f3d48c96dd5e9037ca7b70b351a8b2
+  metadata.gz: 1d4408c3155757896ba51bac6edb9c08b23dd90b
+  data.tar.gz: 1e39b876bb834e65bbabb086d5182efafa8f1481
 SHA512:
-  metadata.gz: 9239528ae63b367cd6bf0b78b67d1254046dfa7179e86f2c6d8cab1ef53c89ca8f950d08a57a948a99963b9e52ecfa97b392e9c2b12e14225ba12f4cab0dd012
-  data.tar.gz: 4a51f89077bddb0f6e418844644170f77d72f1686003728366b7f6febc22565f838a80f2ba158bb5e831cdac9ed842512b4ca348d196535fa440c967007dbc79
+  metadata.gz: 5787545d4d7c5da4943a15d2f83368502955524f0e15c76c4ada24931573cef885929a6465bd7b508bfb6b858a72ef6461f678436d987fdc7b46b1107fb6d6bc
+  data.tar.gz: 839d0feff3a2cb984fed75ad1a95e08cbfcdc15bdbdeadf4bbc041ac430270f35a365de66bb75cadce0a0baca8e468f466c964c189957d56df342dd38411071b

data/VERSION

@@ -1 +1 @@
-0.5.0
+0.6.0

data/capistrano-secure-permissions.gemspec

@@ -2,16 +2,16 @@
 # DO NOT EDIT THIS FILE DIRECTLY
 # Instead, edit Jeweler::Tasks in Rakefile, and run 'rake gemspec'
 # -*- encoding: utf-8 -*-
-# stub: capistrano-secure-permissions 0.5.0 ruby lib
+# stub: capistrano-secure-permissions 0.6.0 ruby lib
 
 Gem::Specification.new do |s|
   s.name = "capistrano-secure-permissions"
-  s.version = "0.5.0"
+  s.version = "0.6.0"
 
   s.required_rubygems_version = Gem::Requirement.new(">= 0") if s.respond_to? :required_rubygems_version=
   s.require_paths = ["lib"]
   s.authors = ["Rune Schjellerup Philosof"]
-  s.date = "2016-02-23"
+  s.date = "2016-03-29"
   s.description = "This gem makes it easy to run your app with a user that only has write permissions to the public folder"
   s.email = "rune.capistrano-secure-permissions@philosof.dk"
   s.extra_rdoc_files = [

data/lib/capistrano/tasks/secure-permissions.rake

@@ -10,10 +10,6 @@ namespace :deploy do
       execute :setfacl, "-m", "u:#{web_user}:x", "#{release_path}", "#{shared_path}", "#{shared_path}/public"
       # Set all except public, tmp, and log readable by app_user.
       execute :find, release_path, '-regex', '\./\(public\|tmp\|log\)', '-prune', '-o', '-user', deploy_user, '-print0', '|', 'xargs', '-0', '--no-run-if-empty', 'setfacl', '-m', "u:#{app_user}:rX"
-      # Set permissions for files in public, readable på web_user and writable by app_user.
-      execute :find, '-L', "#{release_path}/public", '-user', deploy_user, '-not', '-type', 'l', '-print0', '|', 'xargs', '-0', '--no-run-if-empty', 'setfacl', '-m', "u:#{web_user}:rX,u:#{app_user}:rwX"
-      # Set defaults for directories in public (that is permissions for new files made by the app).
-      execute :find, "#{shared_path}/public", '-user', deploy_user, '-type', 'd', '-print0', '|', 'xargs', '-0', '--no-run-if-empty', 'setfacl', '-m', "d:u:#{web_user}:rX,d:u:#{app_user}:rwX"
       # Set log and tmp writable by app_user.
       execute :find, '-L', "#{release_path}/log", "#{release_path}/tmp", '-user', deploy_user, '-print0', '|', 'xargs', '-0', '--no-run-if-empty', 'setfacl', '-m', "u:#{app_user}:rwX"
     end
@@ -31,6 +27,18 @@ namespace :secure_permissions do
       end
     end
   end
+
+  desc 'Sets permissions on the public folder, only needs to be done once, not on every deploy. And there might be a lot of files, so it might take a while.'
+  task :setup do
+    web_user = fetch(:web_user)
+    app_user = fetch(:app_user)
+    deploy_user = server.user
+
+    # Set permissions for files in public, readable by web_user and writable by app_user.
+    execute :find, '-L', "#{release_path}/public", '-user', deploy_user, '-not', '-type', 'l', '-print0', '|', 'xargs', '-0', '--no-run-if-empty', 'setfacl', '-m', "u:#{web_user}:rX,u:#{app_user}:rwX"
+    # Set defaults for directories in public (that is permissions for new files made by the app).
+    execute :find, "#{shared_path}/public", '-user', deploy_user, '-type', 'd', '-print0', '|', 'xargs', '-0', '--no-run-if-empty', 'setfacl', '-m', "d:u:#{web_user}:rX,d:u:#{app_user}:rwX"
+  end
 end
 
 Capistrano::DSL.stages.each do |stage|

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: capistrano-secure-permissions
 version: !ruby/object:Gem::Version
-  version: 0.5.0
+  version: 0.6.0
 platform: ruby
 authors:
 - Rune Schjellerup Philosof
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2016-02-23 00:00:00.000000000 Z
+date: 2016-03-29 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rdoc