mirror of
https://github.com/pelican-dev/panel.git
synced 2025-05-20 00:34:44 +02:00

* use RESOURCE_NAME for requests * use RESOURCE_NAME for transformers * add permissions field to api key * add migration for new permissions field * update tests * remove debug log * set column type to "json" * remove default attribute to fix tests * fix default value for permissions * fix after merge * fix after merge * allow to "register" custom permissions * add "role" to default resource names * fix after merge * fix phpstan * fix migrations
159 lines
4.4 KiB
PHP
159 lines
4.4 KiB
PHP
<?php
|
|
|
|
namespace App\Models;
|
|
|
|
use Illuminate\Database\Eloquent\Relations\BelongsTo;
|
|
use Illuminate\Support\Facades\DB;
|
|
|
|
/**
|
|
* @property int $id
|
|
* @property int $server_id
|
|
* @property int $database_host_id
|
|
* @property string $database
|
|
* @property string $username
|
|
* @property string $remote
|
|
* @property string $password
|
|
* @property int $max_connections
|
|
* @property \Carbon\Carbon $created_at
|
|
* @property \Carbon\Carbon $updated_at
|
|
* @property \App\Models\Server $server
|
|
* @property \App\Models\DatabaseHost $host
|
|
*/
|
|
class Database extends Model
|
|
{
|
|
/**
|
|
* The resource name for this model when it is transformed into an
|
|
* API representation using fractal. Also used as name for api key permissions.
|
|
*/
|
|
public const RESOURCE_NAME = 'server_database';
|
|
|
|
public const DEFAULT_CONNECTION_NAME = 'dynamic';
|
|
|
|
/**
|
|
* The table associated with the model.
|
|
*/
|
|
protected $table = 'databases';
|
|
|
|
/**
|
|
* The attributes excluded from the model's JSON form.
|
|
*/
|
|
protected $hidden = ['password'];
|
|
|
|
/**
|
|
* Fields that are mass assignable.
|
|
*/
|
|
protected $fillable = [
|
|
'server_id', 'database_host_id', 'database', 'username', 'password', 'remote', 'max_connections',
|
|
];
|
|
|
|
public static array $validationRules = [
|
|
'server_id' => 'required|numeric|exists:servers,id',
|
|
'database_host_id' => 'required|exists:database_hosts,id',
|
|
'database' => 'required|string|alpha_dash|between:3,48',
|
|
'username' => 'string|alpha_dash|between:3,100',
|
|
'max_connections' => 'nullable|integer',
|
|
'remote' => 'required|string|regex:/^[\w\-\/.%:]+$/',
|
|
'password' => 'string',
|
|
];
|
|
|
|
protected function casts(): array
|
|
{
|
|
return [
|
|
'server_id' => 'integer',
|
|
'database_host_id' => 'integer',
|
|
'max_connections' => 'integer',
|
|
'password' => 'encrypted',
|
|
];
|
|
}
|
|
|
|
public function getRouteKeyName(): string
|
|
{
|
|
return $this->getKeyName();
|
|
}
|
|
|
|
/**
|
|
* Gets the host database server associated with a database.
|
|
*/
|
|
public function host(): BelongsTo
|
|
{
|
|
return $this->belongsTo(DatabaseHost::class, 'database_host_id');
|
|
}
|
|
|
|
/**
|
|
* Gets the server associated with a database.
|
|
*/
|
|
public function server(): BelongsTo
|
|
{
|
|
return $this->belongsTo(Server::class);
|
|
}
|
|
|
|
/**
|
|
* Run the provided statement against the database on a given connection.
|
|
*/
|
|
private function run(string $statement): bool
|
|
{
|
|
return DB::connection(self::DEFAULT_CONNECTION_NAME)->statement($statement);
|
|
}
|
|
|
|
/**
|
|
* Create a new database on a given connection.
|
|
*/
|
|
public function createDatabase(string $database): bool
|
|
{
|
|
return $this->run(sprintf('CREATE DATABASE IF NOT EXISTS `%s`', $database));
|
|
}
|
|
|
|
/**
|
|
* Create a new database user on a given connection.
|
|
*/
|
|
public function createUser(string $username, string $remote, string $password, ?int $max_connections): bool
|
|
{
|
|
$args = [$username, $remote, $password];
|
|
$command = 'CREATE USER `%s`@`%s` IDENTIFIED BY \'%s\'';
|
|
|
|
if (!empty($max_connections)) {
|
|
$args[] = $max_connections;
|
|
$command .= ' WITH MAX_USER_CONNECTIONS %s';
|
|
}
|
|
|
|
return $this->run(sprintf($command, ...$args));
|
|
}
|
|
|
|
/**
|
|
* Give a specific user access to a given database.
|
|
*/
|
|
public function assignUserToDatabase(string $database, string $username, string $remote): bool
|
|
{
|
|
return $this->run(sprintf(
|
|
'GRANT SELECT, INSERT, UPDATE, DELETE, CREATE, DROP, ALTER, REFERENCES, INDEX, LOCK TABLES, CREATE ROUTINE, ALTER ROUTINE, EXECUTE, CREATE TEMPORARY TABLES, CREATE VIEW, SHOW VIEW, EVENT, TRIGGER ON `%s`.* TO `%s`@`%s`',
|
|
$database,
|
|
$username,
|
|
$remote
|
|
));
|
|
}
|
|
|
|
/**
|
|
* Flush the privileges for a given connection.
|
|
*/
|
|
public function flush(): bool
|
|
{
|
|
return $this->run('FLUSH PRIVILEGES');
|
|
}
|
|
|
|
/**
|
|
* Drop a given database on a specific connection.
|
|
*/
|
|
public function dropDatabase(string $database): bool
|
|
{
|
|
return $this->run(sprintf('DROP DATABASE IF EXISTS `%s`', $database));
|
|
}
|
|
|
|
/**
|
|
* Drop a given user on a specific connection.
|
|
*/
|
|
public function dropUser(string $username, string $remote): bool
|
|
{
|
|
return $this->run(sprintf('DROP USER IF EXISTS `%s`@`%s`', $username, $remote));
|
|
}
|
|
}
|