X-Git-Url: http://git.onelab.eu/?a=blobdiff_plain;f=api.py;h=350cb25903e1997c0874c0c356e4b9be1656d84c;hb=3b869bb6f51790344bb1927d827ecd2b9a3dace1;hp=9b09d06ab8e1f463abb61e10a78d91a40cd74235;hpb=658683174ea538f4cacdab54302882005e148b8f;p=nodemanager.git diff --git a/api.py b/api.py index 9b09d06..350cb25 100644 --- a/api.py +++ b/api.py @@ -74,13 +74,19 @@ class APIRequestHandler(SimpleXMLRPCServer.SimpleXMLRPCRequestHandler): # Anyone can call these functions elif method_name not in ('Help', 'Ticket', 'GetXIDs', 'GetSSHKeys'): # Authenticate the caller if not in the above fncts. - target_name = args[0] + if method_name == "GetRecord": + target_name = caller_name + else: + target_name = args[0] + # Gather target slice's object. target_rec = database.db.get(target_name) - # only work on slivers. Sannity check. + + # only work on slivers or self. Sannity check. if not (target_rec and target_rec['type'].startswith('sliver.')): raise xmlrpclib.Fault(102, \ 'Invalid argument: the first argument must be a sliver name.') + # only manipulate slivers who delegate you authority if caller_name in (target_name, target_rec['delegations']): try: result = method(target_rec, *args[1:])