This file is indexed.

/usr/lib/ruby/vendor_ruby/chef_zero/endpoints/organization_user_endpoint.rb is in chef-zero 3.1.3-1.

This file is owned by root:root, with mode 0o644.

The actual contents of the file can be viewed below.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
require 'json'
require 'chef_zero/rest_base'

module ChefZero
  module Endpoints
    # /organizations/ORG/users/NAME
    class OrganizationUserEndpoint < RestBase
      def get(request)
        username = request.rest_path[3]
        get_data(request) # 404 if user is not in org
        user = get_data(request, [ 'users', username ])
        user = JSON.parse(user, :create_additions => false)
        json_response(200, ChefData::DataNormalizer.normalize_user(user, username, ['username'], server.options[:osc_compat], request.method))
      end

      def delete(request)
        user = get_data(request)
        delete_data(request)
        user = JSON.parse(user, :create_additions => false)
        json_response(200, ChefData::DataNormalizer.normalize_user(user, request.rest_path[3], ['username'], server.options[:osc_compat]))
      end

      def post(request)
        orgname = request.rest_path[1]
        username = request.rest_path[3]

        users = get_data(request, [ 'organizations', orgname, 'groups', 'users' ])
        users = JSON.parse(users, :create_additions => false)

        create_data(request, [ 'organizations', orgname, 'users' ], username, '{}')

        # /organizations/ORG/association_requests/USERNAME-ORG
        begin
          delete_data(request, [ 'organizations', orgname, 'association_requests', username], :data_store_exceptions)
        rescue DataStore::DataNotFoundError
        end

        # Add the user to the users group if it isn't already there
        if !users['users'] || !users['users'].include?(username)
          users['users'] ||= []
          users['users'] |= [ username ]
          set_data(request, [ 'organizations', orgname, 'groups', 'users' ], JSON.pretty_generate(users))
        end
        json_response(200, {})
      end
    end
  end
end