extensions/common/permissions/media_galleries_permission.cc

   1 // Copyright 2014 The Chromium Authors. All rights reserved.
   2 // Use of this source code is governed by a BSD-style license that can be
   3 // found in the LICENSE file.
   4
   5 #include "extensions/common/permissions/media_galleries_permission.h"
   6
   7 #include <set>
   8 #include <string>
   9
  10 #include "base/logging.h"
  11 #include "base/strings/utf_string_conversions.h"
  12 #include "extensions/common/permissions/permissions_info.h"
  13 #include "grit/extensions_strings.h"
  14 #include "ui/base/l10n/l10n_util.h"
  15
  16 namespace {
  17
  18 // copyTo permission requires delete permission as a prerequisite.
  19 // delete permission requires read permission as a prerequisite.
  20 bool IsValidPermissionSet(bool has_read, bool has_copy_to, bool has_delete,
  21                           std::string* error) {
  22   if (has_copy_to) {
  23     if (has_read && has_delete)
  24       return true;
  25     if (error)
  26       *error = "copyTo permission requires read and delete permissions";
  27     return false;
  28   }
  29   if (has_delete) {
  30     if (has_read)
  31       return true;
  32     if (error)
  33       *error = "delete permission requires read permission";
  34     return false;
  35   }
  36   return true;
  37 }
  38
  39 }  // namespace
  40
  41 namespace extensions {
  42
  43 const char MediaGalleriesPermission::kAllAutoDetectedPermission[] =
  44     "allAutoDetected";
  45 const char MediaGalleriesPermission::kScanPermission[] = "scan";
  46 const char MediaGalleriesPermission::kReadPermission[] = "read";
  47 const char MediaGalleriesPermission::kCopyToPermission[] = "copyTo";
  48 const char MediaGalleriesPermission::kDeletePermission[] = "delete";
  49
  50 MediaGalleriesPermission::MediaGalleriesPermission(
  51     const APIPermissionInfo* info)
  52   : SetDisjunctionPermission<MediaGalleriesPermissionData,
  53                              MediaGalleriesPermission>(info) {
  54 }
  55
  56 MediaGalleriesPermission::~MediaGalleriesPermission() {
  57 }
  58
  59 bool MediaGalleriesPermission::FromValue(
  60     const base::Value* value,
  61     std::string* error,
  62     std::vector<std::string>* unhandled_permissions) {
  63   size_t unhandled_permissions_count = 0;
  64   if (unhandled_permissions)
  65     unhandled_permissions_count = unhandled_permissions->size();
  66   bool parsed_ok =
  67       SetDisjunctionPermission<MediaGalleriesPermissionData,
  68                                MediaGalleriesPermission>::FromValue(
  69                                    value, error, unhandled_permissions);
  70   if (unhandled_permissions) {
  71     for (size_t i = unhandled_permissions_count;
  72          i < unhandled_permissions->size();
  73          i++) {
  74       (*unhandled_permissions)[i] =
  75           "{\"mediaGalleries\": [" + (*unhandled_permissions)[i] + "]}";
  76     }
  77   }
  78   if (!parsed_ok)
  79     return false;
  80
  81   bool has_read = false;
  82   bool has_copy_to = false;
  83   bool has_delete = false;
  84   for (std::set<MediaGalleriesPermissionData>::const_iterator it =
  85       data_set_.begin(); it != data_set_.end(); ++it) {
  86     if (it->permission() == kAllAutoDetectedPermission ||
  87         it->permission() == kScanPermission) {
  88       continue;
  89     }
  90     if (it->permission() == kReadPermission) {
  91       has_read = true;
  92       continue;
  93     }
  94     if (it->permission() == kCopyToPermission) {
  95       has_copy_to = true;
  96       continue;
  97     }
  98     if (it->permission() == kDeletePermission) {
  99       has_delete = true;
 100       continue;
 101     }
 102
 103     // No other permissions, so reaching this means
 104     // MediaGalleriesPermissionData is probably out of sync in some way.
 105     // Fail so developers notice this.
 106     NOTREACHED();
 107     return false;
 108   }
 109
 110   return IsValidPermissionSet(has_read, has_copy_to, has_delete, error);
 111 }
 112
 113 PermissionMessages MediaGalleriesPermission::GetMessages() const {
 114   DCHECK(HasMessages());
 115   PermissionMessages result;
 116
 117   bool has_all_auto_detected = false;
 118   bool has_read = false;
 119   bool has_copy_to = false;
 120   bool has_delete = false;
 121
 122   for (std::set<MediaGalleriesPermissionData>::const_iterator it =
 123       data_set_.begin(); it != data_set_.end(); ++it) {
 124     if (it->permission() == kAllAutoDetectedPermission)
 125       has_all_auto_detected = true;
 126     else if (it->permission() == kReadPermission)
 127       has_read = true;
 128     else if (it->permission() == kCopyToPermission)
 129       has_copy_to = true;
 130     else if (it->permission() == kDeletePermission)
 131       has_delete = true;
 132   }
 133
 134   if (!IsValidPermissionSet(has_read, has_copy_to, has_delete, NULL)) {
 135     NOTREACHED();
 136     return result;
 137   }
 138
 139   // If |has_all_auto_detected| is false, then Chrome will prompt the user at
 140   // runtime when the extension call the getMediaGalleries API.
 141   if (!has_all_auto_detected)
 142     return result;
 143   // No access permission case.
 144   if (!has_read)
 145     return result;
 146
 147   // Separate PermissionMessage IDs for read, copyTo, and delete. Otherwise an
 148   // extension can silently gain new access capabilities.
 149   result.push_back(PermissionMessage(
 150       PermissionMessage::kMediaGalleriesAllGalleriesRead,
 151       l10n_util::GetStringUTF16(
 152           IDS_EXTENSION_PROMPT_WARNING_MEDIA_GALLERIES_READ)));
 153
 154   // For copyTo and delete, the proper combined permission message will be
 155   // derived in ChromePermissionMessageProvider::GetWarningMessages(), such
 156   // that the user get 1 entry for all media galleries access permissions,
 157   // rather than several separate entries.
 158   if (has_copy_to) {
 159     result.push_back(PermissionMessage(
 160         PermissionMessage::kMediaGalleriesAllGalleriesCopyTo,
 161         base::string16()));
 162   }
 163   if (has_delete) {
 164     result.push_back(PermissionMessage(
 165         PermissionMessage::kMediaGalleriesAllGalleriesDelete,
 166         base::string16()));
 167   }
 168   return result;
 169 }
 170
 171 }  // namespace extensions