Method handlePutDbConfig

rest/admin_api.go:645–831

handlePutDbConfig Upserts a new database config

()

// handlePutDbConfig Upserts a new database config
func (h *handler) handlePutDbConfig() (err error) {
	h.assertAdminOnly()
	contextNoCancel := base.NewNonCancelCtx()

	var dbConfig *DbConfig

	auditFields := base.AuditFields{}
	if h.permissionsResults[PermUpdateDb.PermissionName] {
		// user authorized to change all fields
		var err error
		var rawBytes []byte
		rawBytes, dbConfig, err = h.readSanitizeDbConfigJSON()
		if err != nil {
			return err
		}
		configStr, err := redactConfigAsStr(h.ctx(), string(rawBytes))
		if err != nil {
			base.WarnfCtx(h.ctx(), "Error redacting config for audit logging: %v", err)
		}
		auditFields[base.AuditFieldPayload] = configStr
	} else {
		hasAuthPerm := h.permissionsResults[PermConfigureAuth.PermissionName]
		hasSyncPerm := h.permissionsResults[PermConfigureSyncFn.PermissionName]
		var rawBytes []byte
		rawBytes, err := io.ReadAll(h.requestBody)
		if err != nil {
			return err
		}
		configStr, err := redactConfigAsStr(h.ctx(), string(rawBytes))
		if err != nil {
			base.WarnfCtx(h.ctx(), "Error redacting config for audit logging: %v", err)
		}
		auditFields[base.AuditFieldPayload] = configStr

		var mapDbConfig map[string]interface{}
		err = ReadJSONFromMIMERawErr(h.rq.Header, io.NopCloser(bytes.NewReader(rawBytes)), &mapDbConfig)
		if err != nil {
			return err
		}

		unknownFileKeys := make([]string, 0)
		for key, _ := range mapDbConfig {
			if key == "sync" && hasSyncPerm || key == "guest" && hasAuthPerm {
				continue
			}
			unknownFileKeys = append(unknownFileKeys, key)
		}

		if len(unknownFileKeys) > 0 {
			return base.HTTPErrorf(http.StatusForbidden, "not authorized to update field: %s", strings.Join(unknownFileKeys, ","))
		}

		err = ReadJSONFromMIMERawErr(h.rq.Header, io.NopCloser(bytes.NewReader(rawBytes)), &dbConfig)
		if err != nil {
			return err
		}
	}