mirror of https://github.com/databricks/cli.git
52 lines
2.0 KiB
Go
52 lines
2.0 KiB
Go
|
package permissions
|
||
|
|
|
||
|
|
import (
|
||
|
|
"context"
|
||
|
|
"fmt"
|
||
|
|
|
||
|
|
"github.com/databricks/cli/bundle"
|
||
|
|
"github.com/databricks/cli/libs/auth"
|
||
|
|
"github.com/databricks/cli/libs/diag"
|
||
|
|
"github.com/databricks/cli/libs/log"
|
||
|
|
)
|
||
|
|
|
||
|
|
// ReportPossiblePermissionDenied generates a diagnostic message when a permission denied error is encountered.
|
||
|
|
//
|
||
|
|
// Note that since the workspace API doesn't always distinguish between permission denied and path errors,
|
||
|
|
// we must treat this as a "possible permission error". See acquire.go for more about this.
|
||
|
|
func ReportPossiblePermissionDenied(ctx context.Context, b *bundle.Bundle, path string) diag.Diagnostics {
|
||
|
|
log.Errorf(ctx, "Failed to update, encountered possible permission error: %v", path)
|
||
|
|
|
||
|
|
user := b.Config.Workspace.CurrentUser.UserName
|
||
|
|
if auth.IsServicePrincipal(user) {
|
||
|
|
user = b.Config.Workspace.CurrentUser.DisplayName
|
||
|
|
}
|
||
|
|
canManageBundle, assistance := analyzeBundlePermissions(b)
|
||
|
|
|
||
|
|
if !canManageBundle {
|
||
|
|
return diag.Diagnostics{{
|
||
|
|
Summary: fmt.Sprintf("unable to deploy to %s as %s.\n"+
|
||
|
|
"Please make sure the current user or one of their groups is listed under the permissions of this bundle.\n"+
|
||
|
|
"%s\n"+
|
||
|
|
"They may need to redeploy the bundle to apply the new permissions.\n"+
|
||
|
|
"Please refer to https://docs.databricks.com/dev-tools/bundles/permissions.html for more on managing permissions.",
|
||
|
|
path, user, assistance),
|
||
|
|
Severity: diag.Error,
|
||
|
|
ID: diag.PathPermissionDenied,
|
||
|
|
}}
|
||
|
|
}
|
||
|
|
|
||
|
|
// According databricks.yml, the current user has the right permissions.
|
||
|
|
// But we're still seeing permission errors. So someone else will need
|
||
|
|
// to redeploy the bundle with the right set of permissions.
|
||
|
|
return diag.Diagnostics{{
|
||
|
|
Summary: fmt.Sprintf("unable to deploy to %s as %s. Cannot apply local deployment permissions.\n"+
|
||
|
|
"%s\n"+
|
||
|
|
"They can redeploy the project to apply the latest set of permissions.\n"+
|
||
|
|
"Please refer to https://docs.databricks.com/dev-tools/bundles/permissions.html for more on managing permissions.",
|
||
|
|
path, user, assistance),
|
||
|
|
Severity: diag.Error,
|
||
|
|
ID: diag.CannotChangePathPermissions,
|
||
|
|
}}
|
||
|
|
}
|