diff -r 4d39adda7a38 -r b28cf69f42e8 src/server/config/acl.h --- /dev/null Thu Jan 01 00:00:00 1970 +0000 +++ b/src/server/config/acl.h Thu Feb 28 20:00:05 2013 +0100 @@ -0,0 +1,133 @@ +/* + * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER. + * + * Copyright 2013 Olaf Wintermann. All rights reserved. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that the following conditions are met: + * + * 1. Redistributions of source code must retain the above copyright + * notice, this list of conditions and the following disclaimer. + * + * 2. Redistributions in binary form must reproduce the above copyright + * notice, this list of conditions and the following disclaimer in the + * documentation and/or other materials provided with the distribution. + * + * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" + * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE + * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE + * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE + * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR + * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF + * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS + * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN + * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) + * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE + * POSSIBILITY OF SUCH DAMAGE. + */ + +#ifndef _CONFIG_ACL_H +#define _CONFIG_ACL_H + +#include "conf.h" +#include + +#ifdef __cplusplus +extern "C" { +#endif + +typedef struct _acl_conf ACLConfig; + +typedef struct _acl_file { + ConfigParser parser; + char *file; + UcxList *namedACLs; // ACLConfig list + UcxList *uriACLs; // ACLConfig list + UcxList *pathACLs; // ACLConfig list + + // temp data + ACLConfig *cur; +} ACLFile; + +struct _acl_conf { + sstr_t id; // name, uri or path + sstr_t type; // webserver ACL or file system ACL + UcxList *authparam; // authentication parameters + UcxList *entries; // ACEConfig list +}; + +typedef struct _ace_conf { + sstr_t who; + uint32_t access_mask; + uint16_t flags; + uint16_t type; +} ACEConfig; + + +/* + * the flags are a duplicate of the webserver's acl flags + */ + +/* + * access permissions + */ +#define ACLCFG_READ_DATA 0x0001 +#define ACLCFG_WRITE_DATA 0x0002 +#define ACLCFG_APPEND 0x0002 +#define ACLCFG_ADD_FILE 0x0004 +#define ACLCFG_ADD_SUBDIRECTORY 0x0004 +#define ACLCFG_READ_XATTR 0x0008 +#define ACLCFG_WRITE_XATTR 0x0010 +#define ACLCFG_EXECUTE 0x0020 +#define ACLCFG_DELETE_CHILD 0x0040 +#define ACLCFG_DELETE 0x0040 +#define ACLCFG_READ_ATTRIBUTES 0x0080 +#define ACLCFG_WRITE_ATTRIBUTES 0x0100 +#define ACLCFG_LIST 0x0200 +#define ACLCFG_READ_ACL 0x0400 +#define ACLCFG_WRITE_ACL 0x0800 +#define ACLCFG_WRITE_OWNER 0x1000 +#define ACLCFG_SYNCHRONIZE 0x2000 + +#define ACLCFG_READ \ + (ACLCFG_READ_DATA|ACLCFG_READ_XATTR|ACLCFG_READ_ATTRIBUTES) +#define ACLCFG_WRITE \ + (ACLCFG_WRITE_DATA|ACLCFG_WRITE_XATTR|ACLCFG_WRITE_ATTRIBUTES) + +/* + * ace flags + */ +#define ACLCFG_FILE_INHERIT 0x0001 +#define ACLCFG_DIR_INHERIT 0x0002 +#define ACLCFG_NO_PROPAGATE 0x0004 +#define ACLCFG_INHERIT_ONLY 0x0008 +#define ACLCFG_SUCCESSFUL_ACCESS_FLAG 0x0010 +#define ACLCFG_FAILED_ACCESS_ACE_FLAG 0x0020 +#define ACLCFG_IDENTIFIER_GROUP 0x0040 +#define ACLCFG_OWNER 0x1000 +#define ACLCFG_GROUP 0x2000 +#define ACLCFG_EVERYONE 0x4000 + +/* + * ace type + */ +#define ACLCFG_TYPE_ALLOWED 0x01 +#define ACLCFG_TYPE_DENIED 0x02 +#define ACLCFG_TYPE_AUDIT 0x03 +#define ACLCFG_TYPE_ALARM 0x04 + + +ACLFile* load_acl_file(char *file); + +void free_acl_file(ACLFile *aclfile); + + +int acl_parse(void *p, ConfigLine *begin, ConfigLine *end, sstr_t line); +int parse_ace(ACLFile *f, sstr_t line); + +#ifdef __cplusplus +} +#endif + +#endif /* _CONFIG_ACL_H */ +