This file is indexed.

/usr/share/chef-server-webui/app/controllers/clients.rb is in chef-server-webui 10.12.0+dfsg-1.

This file is owned by root:root, with mode 0o644.

The actual contents of the file can be viewed below.

  1
  2
  3
  4
  5
  6
  7
  8
  9
 10
 11
 12
 13
 14
 15
 16
 17
 18
 19
 20
 21
 22
 23
 24
 25
 26
 27
 28
 29
 30
 31
 32
 33
 34
 35
 36
 37
 38
 39
 40
 41
 42
 43
 44
 45
 46
 47
 48
 49
 50
 51
 52
 53
 54
 55
 56
 57
 58
 59
 60
 61
 62
 63
 64
 65
 66
 67
 68
 69
 70
 71
 72
 73
 74
 75
 76
 77
 78
 79
 80
 81
 82
 83
 84
 85
 86
 87
 88
 89
 90
 91
 92
 93
 94
 95
 96
 97
 98
 99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
#
# Author:: Nuo Yan (<nuo@opscode.com>)
# Copyright:: Copyright (c) 2008 Opscode, Inc.
# License:: Apache License, Version 2.0
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
# 
#     http://www.apache.org/licenses/LICENSE-2.0
# 
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#

require 'chef/api_client'

class Clients < Application
  provides :json
  provides :html
  before :login_required
  before :require_admin, :exclude => [:index, :show]
  
  # GET /clients
  def index
    begin
      @clients_list = Chef::ApiClient.list().keys.sort
    rescue => e
      Chef::Log.error("#{e}\n#{e.backtrace.join("\n")}")
      @_message = {:error => "Could not list clients"}
      @clients_list = []
    end
    render
  end

  # GET /clients/:id
  def show
    @client = begin
                @client = Chef::ApiClient.load(params[:id])
              rescue => e
                Chef::Log.error("#{e}\n#{e.backtrace.join("\n")}")
                @_message = { :error => "Could not load client #{params[:id]}"}
                Chef::ApiClient.new
              end 
    render
  end

  # GET /clients/:id/edit
  def edit
    @client = begin
                Chef::ApiClient.load(params[:id])
              rescue => e
                Chef::Log.error("#{e}\n#{e.backtrace.join("\n")}")
                @_message = { :error => "Could not load client #{params[:id]}"}
                Chef::ApiClient.new
              end  
    render
  end

  # GET /clients/new
  def new
    raise AdminAccessRequired unless params[:user_id] == session[:user] unless session[:level] == :admin
    @client = Chef::ApiClient.new
    render
  end
  
  # POST /clients
  def create
    begin  
      @client = Chef::ApiClient.new
      @client.name(params[:name])
      @client.admin(str_to_bool(params[:admin])) if params[:admin]
      response = @client.create
      @private_key = OpenSSL::PKey::RSA.new(response["private_key"])
      @_message = { :notice => "Created Client #{@client.name}. Please copy the following private key as the client's validation key." }
      @client = Chef::ApiClient.load(params[:name])
      render :show    
    rescue => e
      Chef::Log.error("#{e}\n#{e.backtrace.join("\n")}")
      @_message = { :error => "Could not create client" }
      render :new
    end 
  end

  # PUT /clients/:id
  def update
    begin
      @client = Chef::ApiClient.load(params[:id])
      if params[:regen_private_key]
        @client.create_keys
        @private_key = @client.private_key
      end 
      params[:admin] ? @client.admin(true) : @client.admin(false)
      @client.save
      @_message = @private_key.nil? ? { :notice => "Updated Client" } : { :notice => "Created Client #{@client.name}. Please copy the following private key as the client's validation key." }
      render :show
    rescue => e
      Chef::Log.error("#{e}\n#{e.backtrace.join("\n")}")
      @_message = { :error => "Could not update client" }
      render :edit
    end
  end

  # DELETE /clients/:id
  def destroy
    begin
      @client = Chef::ApiClient.load(params[:id])
      @client.destroy
      redirect(absolute_url(:clients), {:message => { :notice => "Client #{params[:id]} deleted successfully" }, :permanent => true})
    rescue => e
      Chef::Log.error("#{e}\n#{e.backtrace.join("\n")}")
      @_message = {:error => "Could not delete client #{params[:id]}" }
      @clients_list = Chef::ApiClient.list()
      render :index
    end 
  end

end