SecurityContext.cpp

Go to the documentation of this file.

/*
    Copyright (C) 2014-2016 Leosac
 
    This file is part of Leosac.
 
    Leosac is free software: you can redistribute it and/or modify
    it under the terms of the GNU Affero General Public License as published by
    the Free Software Foundation, either version 3 of the License, or
    (at your option) any later version.
 
    Leosac is distributed in the hope that it will be useful,
    but WITHOUT ANY WARRANTY; without even the implied warranty of
    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
    GNU Affero General Public License for more details.
 
    You should have received a copy of the GNU Affero General Public License
    along with this program. If not, see <http://www.gnu.org/licenses/>.
*/
 
#include "core/SecurityContext.hpp"
#include "exception/PermissionDenied.hpp"
 
using namespace Leosac;
 
SecurityContext::SecurityContext(DBServicePtr dbsrv)
    : dbsrv_(dbsrv)
{
}
 
bool SecurityContext::check_permission(SecurityContext::Action a,
                                       const ActionParam &ap) const
{
    return check_permission_impl(a, ap);
}
 
void SecurityContext::enforce_permission(
    SecurityContext::Action a, const SecurityContext::ActionParam &ap) const
{
    if (!check_permission(a, ap))
        throw PermissionDenied();
}
 
bool SecurityContext::check_permission(SecurityContext::Action a) const
{
    return check_permission(a, {});
}
 
void SecurityContext::enforce_permission(SecurityContext::Action a) const
{
    return enforce_permission(a, {});
}
 
SystemSecurityContext::SystemSecurityContext(DBServicePtr dbsrv)
    : SecurityContext(dbsrv)
{
}
 
bool SystemSecurityContext::check_permission_impl(
    SecurityContext::Action, const SecurityContext::ActionParam &) const
{
    return true;
}
 
SecurityContext &SystemSecurityContext::instance()
{
    static SystemSecurityContext ssc(nullptr);
    return ssc;
}
 
SecurityContext::GroupActionParam::operator ActionParam()
{
    SecurityContext::ActionParam result{};
    result.group = *this;
    return result;
}
 
SecurityContext::UserActionParam::operator ActionParam()
{
    SecurityContext::ActionParam result{};
    result.user = *this;
    return result;
}
 
SecurityContext::MembershipActionParam::operator ActionParam()
{
    SecurityContext::ActionParam result{};
    result.membership = *this;
    return result;
}
 
SecurityContext::CredentialActionParam::operator ActionParam()
{
    SecurityContext::ActionParam result{};
    result.cred = *this;
    return result;
}
 
SecurityContext::ScheduleActionParam::operator ActionParam()
{
    SecurityContext::ActionParam result{};
    result.sched = *this;
    return result;
}
 
SecurityContext::DoorActionParam::operator ActionParam()
{
    SecurityContext::ActionParam result{};
    result.door = *this;
    return result;
}
 
SecurityContext::AccessPointActionParam::operator ActionParam()
{
    SecurityContext::ActionParam result{};
    result.access_point = *this;
    return result;
}
 
SecurityContext::ZoneActionParam::operator ActionParam()
{
    SecurityContext::ActionParam result{};
    result.zone = *this;
    return result;
}
 
SecurityContext::HardwareDeviceActionParam::operator ActionParam()
{
    SecurityContext::ActionParam result{};
    result.device = *this;
    return result;
}
 
ExecutionContext::ExecutionContext(SecurityContext &sc)
    : sec(sc)
{
}
 
ExecutionContext::ExecutionContext(SecurityContext &sc,
                                   const Audit::IAuditEntryPtr &audit)
    : sec(sc)
    , audit(audit)
{
}
 
SystemExecutionContext::SystemExecutionContext()
    : ExecutionContext(SystemSecurityContext::instance())
{
}