2020-01-14 04:20:18 +01:00
|
|
|
<?php
|
|
|
|
|
|
|
|
namespace Friendica\Repository;
|
|
|
|
|
|
|
|
use Friendica\BaseRepository;
|
|
|
|
use Friendica\Collection;
|
2020-01-19 23:22:30 +01:00
|
|
|
use Friendica\Database\Database;
|
2020-01-14 04:20:18 +01:00
|
|
|
use Friendica\Model;
|
|
|
|
use Friendica\Model\Group;
|
|
|
|
use Friendica\Network\HTTPException;
|
2020-01-19 23:22:30 +01:00
|
|
|
use Friendica\Util\ACLFormatter;
|
|
|
|
use Psr\Log\LoggerInterface;
|
2020-01-14 04:20:18 +01:00
|
|
|
|
|
|
|
class PermissionSet extends BaseRepository
|
|
|
|
{
|
2020-01-23 01:42:14 +01:00
|
|
|
const PUBLIC = 0;
|
|
|
|
|
2020-01-14 04:20:18 +01:00
|
|
|
protected static $table_name = 'permissionset';
|
|
|
|
|
|
|
|
protected static $model_class = Model\PermissionSet::class;
|
|
|
|
|
|
|
|
protected static $collection_class = Collection\PermissionSets::class;
|
|
|
|
|
2020-01-19 23:22:30 +01:00
|
|
|
/** @var ACLFormatter */
|
|
|
|
private $aclFormatter;
|
|
|
|
|
|
|
|
public function __construct(Database $dba, LoggerInterface $logger, ACLFormatter $aclFormatter)
|
|
|
|
{
|
|
|
|
parent::__construct($dba, $logger);
|
|
|
|
|
|
|
|
$this->aclFormatter = $aclFormatter;
|
|
|
|
}
|
|
|
|
|
2020-01-14 04:20:18 +01:00
|
|
|
/**
|
|
|
|
* @param array $data
|
|
|
|
* @return Model\PermissionSet
|
|
|
|
*/
|
|
|
|
protected function create(array $data)
|
|
|
|
{
|
|
|
|
return new Model\PermissionSet($this->dba, $this->logger, $data);
|
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
|
|
* @param array $condition
|
|
|
|
* @return Model\PermissionSet
|
|
|
|
* @throws \Friendica\Network\HTTPException\NotFoundException
|
|
|
|
*/
|
|
|
|
public function selectFirst(array $condition)
|
|
|
|
{
|
|
|
|
if (isset($condition['id']) && !$condition['id']) {
|
|
|
|
return $this->create([
|
2020-01-23 01:42:14 +01:00
|
|
|
'id' => self::PUBLIC,
|
2020-01-14 04:20:18 +01:00
|
|
|
'uid' => $condition['uid'] ?? 0,
|
|
|
|
'allow_cid' => '',
|
|
|
|
'allow_gid' => '',
|
|
|
|
'deny_cid' => '',
|
|
|
|
'deny_gid' => '',
|
|
|
|
]);
|
|
|
|
}
|
|
|
|
|
|
|
|
return parent::selectFirst($condition);
|
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
|
|
* @param array $condition
|
2020-01-22 20:28:56 +01:00
|
|
|
* @param array $params
|
2020-01-14 04:20:18 +01:00
|
|
|
* @return Collection\PermissionSets
|
|
|
|
* @throws \Exception
|
|
|
|
*/
|
2020-01-22 20:28:56 +01:00
|
|
|
public function select(array $condition = [], array $params = [])
|
2020-01-14 04:20:18 +01:00
|
|
|
{
|
2020-01-22 20:28:56 +01:00
|
|
|
return parent::select($condition, $params);
|
2020-01-14 04:20:18 +01:00
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
|
|
* @param array $condition
|
2020-01-22 20:28:56 +01:00
|
|
|
* @param array $params
|
2020-01-14 04:20:18 +01:00
|
|
|
* @param int|null $max_id
|
|
|
|
* @param int|null $since_id
|
2020-01-22 20:28:56 +01:00
|
|
|
* @param int $limit
|
2020-01-14 04:20:18 +01:00
|
|
|
* @return Collection\PermissionSets
|
|
|
|
* @throws \Exception
|
|
|
|
*/
|
2020-01-22 20:28:56 +01:00
|
|
|
public function selectByBoundaries(array $condition = [], array $params = [], int $max_id = null, int $since_id = null, int $limit = self::LIMIT)
|
2020-01-14 04:20:18 +01:00
|
|
|
{
|
2020-01-22 20:28:56 +01:00
|
|
|
return parent::selectByBoundaries($condition, $params, $max_id, $since_id, $limit);
|
2020-01-14 04:20:18 +01:00
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
|
|
* Fetch the id of a given permission set. Generate a new one when needed
|
|
|
|
*
|
|
|
|
* @param int $uid
|
|
|
|
* @param string|null $allow_cid Allowed contact IDs - empty = everyone
|
|
|
|
* @param string|null $allow_gid Allowed group IDs - empty = everyone
|
|
|
|
* @param string|null $deny_cid Disallowed contact IDs - empty = no one
|
|
|
|
* @param string|null $deny_gid Disallowed group IDs - empty = no one
|
|
|
|
* @return int id
|
|
|
|
* @throws \Exception
|
|
|
|
*/
|
|
|
|
public function getIdFromACL(
|
|
|
|
int $uid,
|
|
|
|
string $allow_cid = null,
|
|
|
|
string $allow_gid = null,
|
|
|
|
string $deny_cid = null,
|
|
|
|
string $deny_gid = null
|
|
|
|
) {
|
2020-01-19 23:22:30 +01:00
|
|
|
$allow_cid = $this->aclFormatter->sanitize($allow_cid);
|
|
|
|
$allow_gid = $this->aclFormatter->sanitize($allow_gid);
|
|
|
|
$deny_cid = $this->aclFormatter->sanitize($deny_cid);
|
|
|
|
$deny_gid = $this->aclFormatter->sanitize($deny_gid);
|
2020-01-14 04:20:18 +01:00
|
|
|
|
|
|
|
// Public permission
|
|
|
|
if (!$allow_cid && !$allow_gid && !$deny_cid && !$deny_gid) {
|
2020-01-23 01:42:14 +01:00
|
|
|
return self::PUBLIC;
|
2020-01-14 04:20:18 +01:00
|
|
|
}
|
|
|
|
|
|
|
|
$condition = [
|
|
|
|
'uid' => $uid,
|
|
|
|
'allow_cid' => $allow_cid,
|
|
|
|
'allow_gid' => $allow_gid,
|
|
|
|
'deny_cid' => $deny_cid,
|
|
|
|
'deny_gid' => $deny_gid
|
|
|
|
];
|
|
|
|
|
|
|
|
try {
|
|
|
|
$permissionset = $this->selectFirst($condition);
|
|
|
|
} catch(HTTPException\NotFoundException $exception) {
|
|
|
|
$permissionset = $this->insert($condition);
|
|
|
|
}
|
|
|
|
|
|
|
|
return $permissionset->id;
|
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
|
|
* Returns a permission set collection for a given contact
|
|
|
|
*
|
|
|
|
* @param integer $contact_id Contact id of the visitor
|
|
|
|
* @param integer $uid User id whom the items belong, used for ownership check.
|
|
|
|
*
|
|
|
|
* @return Collection\PermissionSets
|
|
|
|
* @throws \Exception
|
|
|
|
*/
|
|
|
|
public function selectByContactId($contact_id, $uid)
|
|
|
|
{
|
|
|
|
$groups = [];
|
2020-01-19 23:22:30 +01:00
|
|
|
if ($this->dba->exists('contact', ['id' => $contact_id, 'uid' => $uid, 'blocked' => false])) {
|
2020-01-14 04:20:18 +01:00
|
|
|
$groups = Group::getIdsByContactId($contact_id);
|
|
|
|
}
|
|
|
|
|
|
|
|
$group_str = '<<>>'; // should be impossible to match
|
|
|
|
foreach ($groups as $group_id) {
|
|
|
|
$group_str .= '|<' . preg_quote($group_id) . '>';
|
|
|
|
}
|
|
|
|
|
|
|
|
$contact_str = '<' . $contact_id . '>';
|
|
|
|
|
|
|
|
$condition = ["`uid` = ? AND (NOT (`deny_cid` REGEXP ? OR deny_gid REGEXP ?)
|
|
|
|
AND (allow_cid REGEXP ? OR allow_gid REGEXP ? OR (allow_cid = '' AND allow_gid = '')))",
|
|
|
|
$uid, $contact_str, $group_str, $contact_str, $group_str];
|
|
|
|
|
|
|
|
return $this->select($condition);
|
|
|
|
}
|
|
|
|
}
|