Merge pull request #197 from glyptodon/schema-changes

GUAC-1220: Fix MySQL guacadmin creation script
This commit is contained in:
James Muehlner
2015-06-09 11:59:47 -07:00

View File

@@ -1,5 +1,5 @@
-- --
-- Copyright (C) 2013 Glyptodon LLC -- Copyright (C) 2015 Glyptodon LLC
-- --
-- Permission is hereby granted, free of charge, to any person obtaining a copy -- Permission is hereby granted, free of charge, to any person obtaining a copy
-- of this software and associated documentation files (the "Software"), to deal -- of this software and associated documentation files (the "Software"), to deal
@@ -21,18 +21,30 @@
-- --
-- Create default user "guacadmin" with password "guacadmin" -- Create default user "guacadmin" with password "guacadmin"
insert into guacamole_user values(1, 'guacadmin', INSERT INTO guacamole_user (username, password_hash, password_salt)
VALUES ('guacadmin',
x'CA458A7D494E3BE824F5E1E175A1556C0F8EEF2C2D7DF3633BEC4A29C4411960', -- 'guacadmin' x'CA458A7D494E3BE824F5E1E175A1556C0F8EEF2C2D7DF3633BEC4A29C4411960', -- 'guacadmin'
x'FE24ADC5E11E2B25288D1704ABE67A79E342ECC26064CE69C5B3177795A82264'); x'FE24ADC5E11E2B25288D1704ABE67A79E342ECC26064CE69C5B3177795A82264');
-- Grant this user create permissions -- Grant this user all system permissions
insert into guacamole_system_permission values(1, 'CREATE_CONNECTION'); INSERT INTO guacamole_system_permission
insert into guacamole_system_permission values(1, 'CREATE_CONNECTION_GROUP'); SELECT user_id, permission
insert into guacamole_system_permission values(1, 'CREATE_USER'); FROM (
insert into guacamole_system_permission values(1, 'ADMINISTER'); SELECT 'guacadmin' AS username, 'CREATE_CONNECTION' AS permission
UNION SELECT 'guacadmin' AS username, 'CREATE_CONNECTION_GROUP' AS permission
UNION SELECT 'guacadmin' AS username, 'CREATE_USER' AS permission
UNION SELECT 'guacadmin' AS username, 'ADMINISTER' AS permission
) permissions
JOIN guacamole_user ON permissions.username = guacamole_user.username;
-- Grant admin permission to read/update/administer self -- Grant admin permission to read/update/administer self
insert into guacamole_user_permission values(1, 1, 'READ'); INSERT INTO guacamole_user_permission
insert into guacamole_user_permission values(1, 1, 'UPDATE'); SELECT guacamole_user.user_id, affected.user_id, permission
insert into guacamole_user_permission values(1, 1, 'ADMINISTER'); FROM (
SELECT 'guacadmin' AS username, 'guacadmin' AS affected_username, 'READ' AS permission
UNION SELECT 'guacadmin' AS username, 'guacadmin' AS affected_username, 'UPDATE' AS permission
UNION SELECT 'guacadmin' AS username, 'guacadmin' AS affected_username, 'ADMINISTER' AS permission
) permissions
JOIN guacamole_user ON permissions.username = guacamole_user.username
JOIN guacamole_user affected ON permissions.affected_username = affected.username;