forty 0.2.1 → 0.3.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 2dc92f794265aad44394529187b019718c6ea1df
-  data.tar.gz: 3deb3ea465ad648c24b890dfdfa3e7b537049d1c
+  metadata.gz: 3100804368cd3b2645003487a70b7f7b20933482
+  data.tar.gz: ebbc10ef2bc8da5cc56dbc1a10c924765bd39f87
 SHA512:
-  metadata.gz: 8e74a9e2934e0fa3cd229f36a29e3dff7c64947fc91eec48085e5b353a27e855133a01116a82d9a2b1d1336bc3e2134791ea29e103e69c927944ab489b22efdb
-  data.tar.gz: 4a1d220596760596de4d9df3a759ba99291d77c9e2132d23a6b02bf3e4fa856c6e013e0d9ab92c1fd760993d13cbc705e6a16659c0a16f0bfc38e4e955af4e20
+  metadata.gz: 20f03889ad1ea334ec713ecea2f7b24647f351f36ff6012d5877a296f08447bfeaf69f933d799d8b6316ab2b7f639ae0e349acc61a6cff2940f7e75c38443e86
+  data.tar.gz: f8a78479552e2e2b75458d1519a0a552d9f28ee509d77f6935c5a6b172d6eb646ee05ccac655edef68fc45d4a246b79b569bb42d78dba1def1b54a5f59c8e868

data/lib/forty/configuration.rb

@@ -1,4 +1,6 @@
 require 'logger'
+require 'mail'
+require 'erb'
 
 module Forty
   class Configuration
@@ -18,6 +20,7 @@ module Forty
   end
 
   class Database
+    attr_accessor :name
     attr_accessor :host
     attr_accessor :port
     attr_accessor :user
@@ -25,9 +28,55 @@ module Forty
     attr_accessor :database
   end
 
+  class Mailer
+    attr_accessor :smtp_address
+    attr_accessor :smtp_host
+    attr_accessor :smtp_port
+    attr_accessor :smtp_username
+    attr_accessor :smtp_password
+    attr_accessor :smtp_authentication
+    attr_accessor :smtp_encryption
+    attr_accessor :enabled
+    attr_accessor :templates
+
+    def send_welcome(recipient, username, password)
+      mail = ::Mail.new
+      mail.delivery_method :smtp, {
+        smtp_envelope_from: @smtp_address,
+        address: @smtp_host,
+        port: @smtp_port.to_i,
+        user_name: @smtp_username,
+        password: @smtp_password,
+        authentication: @smtp_authentication,
+        encryption: @smtp_encryption,
+      }
+      mail.from @smtp_address
+      mail.to recipient
+      mail.subject "#{Forty.database_configuration.name.to_s.length == 0 ? '' : Forty.database_configuration.name + ' '}DB Credentials (User: #{username})"
+
+      parameters = binding
+      parameters.local_variable_set(:database_name, Forty.database_configuration.name)
+      parameters.local_variable_set(:username, username)
+      parameters.local_variable_set(:password, password)
+      parameters.local_variable_set(:host, Forty.database_configuration.host)
+      parameters.local_variable_set(:port, Forty.database_configuration.port)
+      parameters.local_variable_set(:database, Forty.database_configuration.database)
+
+      if @enabled
+        mail.body ERB.new(File.read(@templates[:user_created])).result(parameters)
+        Forty.configuration.logger.info('Sending \'user_created\' email to ' + recipient)
+        mail.deliver
+        Forty.configuration.logger.info('Sent \'user_created\' email successfully')
+      else
+        Forty.configuration.logger.warn('Mail not enabled, skipped sending welcome email. You will need to regenerate a password for user ' + username + '.')
+      end
+    end
+  end
+
   class << self
     attr_writer :configuration
     attr_writer :database_configuration
+    attr_writer :mailer_configuration
   end
 
   def self.configuration
@@ -45,4 +94,12 @@ module Forty
   def self.database
     yield(database_configuration)
   end
+
+  def self.mailer_configuration
+    @mailer ||= Forty::Mailer.new
+  end
+
+  def self.mailer
+    yield(mailer_configuration)
+  end
 end

data/lib/forty/sync.rb

@@ -1,5 +1,3 @@
-# require_relative 'configuration'
-
 module Forty
 
   def self.sync(dry_run=true)
@@ -9,6 +7,7 @@ module Forty
       Forty.configuration.schemas,
       Forty::ACL.new(Forty.configuration.acl_file),
       Forty.instance_variable_get(:@database),
+      Forty.instance_variable_get(:@mailer),
       dry_run
     ).run
   end
@@ -16,7 +15,7 @@ module Forty
   class Sync
     class Error < StandardError; end
 
-    def initialize(logger, master_username, production_schemas, acl_config, executor, dry_run=true)
+    def initialize(logger, master_username, production_schemas, acl_config, executor, mailer, dry_run=true)
       @logger = logger or raise Error, 'No logger provided'
       @master_username = master_username or raise Error, 'No master username provided'
       @production_schemas = production_schemas or raise Error, 'No production schemas provided'
@@ -26,7 +25,8 @@ module Forty
       @acl_config['users'] ||= {}
       @acl_config['groups'] ||= {}
 
-      @executor   = executor   or raise Error, 'No dwh executor provided'
+      @executor = executor or raise Error, 'No database executor provided'
+      @mailer = mailer or raise Error, 'No mailer provided'
       @dry_run = dry_run
 
       @logger.warn('Dry mode disabled, executing on production') unless @dry_run
@@ -49,7 +49,7 @@ Starting sync...
   / /_/ __ \\/ ___/ __/ / / /
  / __/ /_/ / /  / /_/ /_/ /
 /_/  \\____/_/   \\__/\\__, /  Database ACL Sync
-                   /____/   v0.2.1
+                   /____/   v0.3.0
 
 ===============================================================================
 
@@ -80,8 +80,9 @@ BANNER
         roles = @acl_config['users'][user]['roles'] || []
         password = @acl_config['users'][user]['password']
         search_path = @production_schemas.join(',')
+        owner = @acl_config['users'][user]['email']
 
-        _create_user(user, password, roles, search_path)
+        _create_user(user, password, roles, search_path, owner)
       end
 
       @logger.info('All users are in sync') if (undefined_users.count + missing_users.count) == 0
@@ -308,9 +309,19 @@ BANNER
       _execute_statement("drop group #{group};")
     end
 
-    def _create_user(user, password, roles=[], search_path=nil)
+    def _create_user(user, password, roles=[], search_path=nil, owner='')
+      if password.to_s.length == 0
+        password = _generate_password()
+      end
+
       _execute_statement("create user #{user} with password '#{password}' #{roles.join(' ')};")
 
+      if owner.to_s.length > 0 and owner.include?('@')
+        @mailer.send_welcome(owner, user, password)
+      else
+        @logger.warn("Email address of user '#{user}' is empty or malformed: '#{owner}'")
+      end
+
       unless search_path.nil? or search_path.empty?
         _execute_statement("alter user #{user} set search_path to #{search_path};")
       end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: forty
 version: !ruby/object:Gem::Version
-  version: 0.2.1
+  version: 0.3.0
 platform: ruby
 authors:
 - Stefanie Grunwald
@@ -70,6 +70,26 @@ dependencies:
     - - "<"
       - !ruby/object:Gem::Version
         version: '12.0'
+- !ruby/object:Gem::Dependency
+  name: mail
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 2.6.0
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '3.0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: 2.6.0
+    - - "<"
+      - !ruby/object:Gem::Version
+        version: '3.0'
 - !ruby/object:Gem::Dependency
   name: rspec
   requirement: !ruby/object:Gem::Requirement
@@ -146,5 +166,5 @@ rubyforge_project:
 rubygems_version: 2.4.5
 signing_key: 
 specification_version: 3
-summary: Manage users, groups and ACL (access control lists) for AWS Redshift databases
+summary: Manage users, groups and ACL (access control lists) for Postgres databases
 test_files: []