def _get_databases(self):
"""Return all non-system Postgres databases on the instance."""
results = self.query(query.DatabaseQuery.list(ignore=self.ignore_dbs))
return [
models.PostgreSQLSchema(row[0].strip(),
character_set=row[1],
collate=row[2]) for row in results
]
def _build_user(self, context, username, acl=None):
"""Build a model representation of a Postgres user.
Include all databases it has access to.
"""
user = models.PostgreSQLUser(username)
if acl:
dbs = [
models.PostgreSQLSchema(row[1].strip(),
character_set=row[2],
collate=row[3]) for row in acl
if row[0] == username and row[1] is not None
]
for d in dbs:
user.databases.append(d.serialize())
return user
def secure(self, context):
"""Create an administrative user for Trove.
Force password encryption.
Also disable the built-in superuser
"""
password = utils.generate_random_password()
os_admin_db = models.PostgreSQLSchema(self.ADMIN_USER)
os_admin = models.PostgreSQLUser(self.ADMIN_USER, password)
os_admin.databases.append(os_admin_db.serialize())
postgres = models.PostgreSQLUser(self.default_superuser_name)
admin = PgSqlAdmin(postgres)
admin._create_database(context, os_admin_db)
admin._create_admin_user(context, os_admin, encrypt_password=True)
PgSqlAdmin(os_admin).alter_user(context, postgres, None, 'NOSUPERUSER',
'NOLOGIN')
self.set_current_admin_user(os_admin)