lib/conjur/policy/executor/update.rb in conjur-asset-policy-0.8.3 vs lib/conjur/policy/executor/update.rb in conjur-asset-policy-0.11.0

@@ -1,31 +1,72 @@
 module Conjur::Policy::Executor
   class Update < Base
     include Annotate
     
     def execute
-      statement.record.custom_attribute_names.each do |attr|
-        value = statement.record.send(attr)
-        action({ 
-          'method' => 'put',
-          'path' => update_path,
-          'parameters' => { attr.to_s => value }
-        })
+      attribute_names.each do |attr|
+        value = record.send(attr)
+        if value
+          action({ 
+            'method' => 'put',
+            'path' => update_path,
+            'parameters' => { attr.to_s => value }
+          })
+        end
       end
       
       annotate
     end
 
     def kind_path
-      statement.record.resource_kind.pluralize
+      record.resource_kind.pluralize
     end
     
     def update_path
-      require 'cgi'
-      [ kind_path, CGI.escape(statement.record.id) ].join('/')
+      [ kind_path, fully_escape(statement.record.id) ].join('/')
     end
     
     def annotate_record
+      record
+    end
+    
+    def record
       statement.record
+    end
+
+    def attribute_names
+      record.custom_attribute_names
+    end
+  end
+  
+  class UpdateUser < Update
+    include PublicKeys
+    
+    def execute
+      super
+
+      if record.public_keys
+        (Array(record.public_keys) - user.public_keys).each do |key|
+          action({
+            'method' => 'post',
+            'path' => public_key_path,
+            'parameters' => key
+          })
+        end
+        (user.public_keys - Array(record.public_keys)).each do |key|
+          action({
+            'method' => 'delete',
+            'path' => [ public_key_path, CGI.escape(key_name(key)) ].join('/')
+          })
+        end
+      end
+    end
+    
+    def user
+      api.user record.id
+    end
+
+    def key_name key
+      key.split(' ')[-1]
     end
   end
 end