Merge lp:~dbarth/ubuntuone-credentials/acl-updater-script into lp:ubuntuone-credentials/rtm-14.09

[David Barth]

Upgrades the ACL of U1 accounts registered in the Online Accounts database.
Add dependencies on sqlite3 and account-plugin-tools for migration script.

Upgrades the ACL of U1 accounts registered in the Online Accounts database.
Add dependencies on sqlite3 and account-plugin-tools for migration script.

[lp:~dbarth/ubuntuone-credentials/acl-updater-script]

168. By David Barth on 2015-03-09

resync with mardy's branch

[dobey (dobey)]

review: Approve

=== added directory 'acl-updater'
=== added file 'acl-updater/acl-updater'
--- acl-updater/acl-updater	1970-01-01 00:00:00 +0000
+++ acl-updater/acl-updater	2015-03-09 18:02:36 +0000
@@ -0,0 +1,29 @@
+#!/bin/sh
+#
+
+export LC_ALL=C
+SIGNON_DB="$HOME/.config/signond/signon.db"
+
+ACCOUNT_ID=`account-console list | grep -i ubuntuone | grep -o '[0-9]\+'`
+if [ -z $ACCOUNT_ID ]; then
+	echo "no U1 account found; exiting"
+	exit 1
+fi
+CREDS_ID=`account-console show $ACCOUNT_ID | grep CredentialsId | grep -o '[0-9]\+'`
+if [ -z $CREDS_ID ]; then
+	echo "no U1 account found; exiting"
+	exit 1
+fi
+
+echo "Upgrading ACL for U1 account (id:$CREDS_ID)"
+
+# ensure the 'unconfined' element exists in the table
+UNCONFINED=`sqlite3 $SIGNON_DB 'select id from TOKENS where token="unconfined"'`
+if [ -z $UNCONFINED ]; then
+	sqlite3 $SIGNON_DB 'insert or ignore into TOKENS(token) values ("unconfined")'
+fi
+
+# add the ACL to protect the U1 account
+sqlite3 $SIGNON_DB "insert or ignore into ACL (identity_id, token_id) values ($CREDS_ID, (select id from TOKENS where token='unconfined'))"
+
+echo "done"

=== modified file 'debian/control'
--- debian/control	2014-08-20 14:33:41 +0000
+++ debian/control	2015-03-09 18:02:36 +0000
@@ -4,6 +4,7 @@
 Build-Depends:
  cmake,
  debhelper (>= 9),
+ dh-migrations,
  libaccounts-qt5-dev,
  liboauth-dev,
  libsignon-qt5-dev,
@@ -70,7 +71,9 @@
  multiarch-support,
  ${misc:Pre-Depends},
 Depends:
+ account-plugin-tools,
  signon-plugin-password,
+ sqlite3,
  ubuntuone-credentials-common (= ${source:Version}),
  ${misc:Depends},
  ${shlibs:Depends},

=== added file 'debian/libubuntuoneauth-2.0-0.migrations'
--- debian/libubuntuoneauth-2.0-0.migrations	1970-01-01 00:00:00 +0000
+++ debian/libubuntuoneauth-2.0-0.migrations	2015-03-09 18:02:36 +0000
@@ -0,0 +1,1 @@
+acl-updater/acl-updater

=== modified file 'debian/rules'
--- debian/rules	2014-07-24 14:12:32 +0000
+++ debian/rules	2015-03-09 18:02:36 +0000
@@ -7,7 +7,7 @@
 
 
 %:
-	dh $@ --buildsystem cmake --fail-missing
+	dh $@ --buildsystem cmake --fail-missing --with migrations
 
 override_dh_auto_configure:
 	dh_auto_configure -- -DLIB_SUFFIX=/$(DEB_HOST_MULTIARCH)