src/Repository/PermissionSet.php

   1 <?php
   2
   3 namespace Friendica\Repository;
   4
   5 use Friendica\BaseModel;
   6 use Friendica\BaseRepository;
   7 use Friendica\Collection;
   8 use Friendica\Core\L10n;
   9 use Friendica\Database\DBA;
  10 use Friendica\DI;
  11 use Friendica\Model;
  12 use Friendica\Model\Group;
  13 use Friendica\Network\HTTPException;
  14
  15 class PermissionSet extends BaseRepository
  16 {
  17         protected static $table_name = 'permissionset';
  18
  19         protected static $model_class = Model\PermissionSet::class;
  20
  21         protected static $collection_class = Collection\PermissionSets::class;
  22
  23         /**
  24          * @param array $data
  25          * @return Model\PermissionSet
  26          */
  27         protected function create(array $data)
  28         {
  29                 return new Model\PermissionSet($this->dba, $this->logger, $data);
  30         }
  31
  32         /**
  33          * @param array $condition
  34          * @return Model\PermissionSet
  35          * @throws \Friendica\Network\HTTPException\NotFoundException
  36          */
  37         public function selectFirst(array $condition)
  38         {
  39                 if (isset($condition['id']) && !$condition['id']) {
  40                         return $this->create([
  41                                 'id' => 0,
  42                                 'uid' => $condition['uid'] ?? 0,
  43                                 'allow_cid' => '',
  44                                 'allow_gid' => '',
  45                                 'deny_cid' => '',
  46                                 'deny_gid' => '',
  47                         ]);
  48                 }
  49
  50                 return parent::selectFirst($condition);
  51         }
  52
  53         /**
  54          * @param array $condition
  55          * @param array $params
  56          * @return Collection\PermissionSets
  57          * @throws \Exception
  58          */
  59         public function select(array $condition = [], array $params = [])
  60         {
  61                 return parent::select($condition, $params);
  62         }
  63
  64         /**
  65          * @param array $condition
  66          * @param array $params
  67          * @param int|null $max_id
  68          * @param int|null $since_id
  69          * @param int $limit
  70          * @return Collection\PermissionSets
  71          * @throws \Exception
  72          */
  73         public function selectByBoundaries(array $condition = [], array $params = [], int $max_id = null, int $since_id = null, int $limit = self::LIMIT)
  74         {
  75                 return parent::selectByBoundaries($condition, $params, $max_id, $since_id, $limit);
  76         }
  77
  78         /**
  79          * Fetch the id of a given permission set. Generate a new one when needed
  80          *
  81          * @param int         $uid
  82          * @param string|null $allow_cid Allowed contact IDs    - empty = everyone
  83          * @param string|null $allow_gid Allowed group IDs      - empty = everyone
  84          * @param string|null $deny_cid  Disallowed contact IDs - empty = no one
  85          * @param string|null $deny_gid  Disallowed group IDs   - empty = no one
  86          * @return int id
  87          * @throws \Exception
  88          */
  89         public function getIdFromACL(
  90                 int $uid,
  91                 string $allow_cid = null,
  92                 string $allow_gid = null,
  93                 string $deny_cid = null,
  94                 string $deny_gid = null
  95         ) {
  96                 $ACLFormatter = DI::aclFormatter();
  97
  98                 $allow_cid = $ACLFormatter->sanitize($allow_cid);
  99                 $allow_gid = $ACLFormatter->sanitize($allow_gid);
 100                 $deny_cid = $ACLFormatter->sanitize($deny_cid);
 101                 $deny_gid = $ACLFormatter->sanitize($deny_gid);
 102
 103                 // Public permission
 104                 if (!$allow_cid && !$allow_gid && !$deny_cid && !$deny_gid) {
 105                         return 0;
 106                 }
 107
 108                 $condition = [
 109                         'uid' => $uid,
 110                         'allow_cid' => $allow_cid,
 111                         'allow_gid' => $allow_gid,
 112                         'deny_cid'  => $deny_cid,
 113                         'deny_gid'  => $deny_gid
 114                 ];
 115
 116                 try {
 117                         $permissionset = $this->selectFirst($condition);
 118                 } catch(HTTPException\NotFoundException $exception) {
 119                         $permissionset = $this->insert($condition);
 120                 }
 121
 122                 return $permissionset->id;
 123         }
 124
 125         /**
 126          * Returns a permission set collection for a given contact
 127          *
 128          * @param integer $contact_id Contact id of the visitor
 129          * @param integer $uid        User id whom the items belong, used for ownership check.
 130          *
 131          * @return Collection\PermissionSets
 132          * @throws \Exception
 133          */
 134         public function selectByContactId($contact_id, $uid)
 135         {
 136                 $groups = [];
 137                 if (DBA::exists('contact', ['id' => $contact_id, 'uid' => $uid, 'blocked' => false])) {
 138                         $groups = Group::getIdsByContactId($contact_id);
 139                 }
 140
 141                 $group_str = '<<>>'; // should be impossible to match
 142                 foreach ($groups as $group_id) {
 143                         $group_str .= '|<' . preg_quote($group_id) . '>';
 144                 }
 145
 146                 $contact_str = '<' . $contact_id . '>';
 147
 148                 $condition = ["`uid` = ? AND (NOT (`deny_cid` REGEXP ? OR deny_gid REGEXP ?)
 149                         AND (allow_cid REGEXP ? OR allow_gid REGEXP ? OR (allow_cid = '' AND allow_gid = '')))",
 150                         $uid, $contact_str, $group_str, $contact_str, $group_str];
 151
 152                 return $this->select($condition);
 153         }
 154 }