extensions/common/permissions/media_galleries_permission.cc

   1 // Copyright 2014 The Chromium Authors. All rights reserved.
   2 // Use of this source code is governed by a BSD-style license that can be
   3 // found in the LICENSE file.
   4
   5 #include "extensions/common/permissions/media_galleries_permission.h"
   6
   7 #include <set>
   8 #include <string>
   9
  10 #include "base/logging.h"
  11 #include "base/strings/utf_string_conversions.h"
  12 #include "extensions/common/permissions/permissions_info.h"
  13 #include "grit/extensions_strings.h"
  14 #include "ui/base/l10n/l10n_util.h"
  15
  16 namespace extensions {
  17
  18 namespace {
  19
  20 // copyTo permission requires delete permission as a prerequisite.
  21 // delete permission requires read permission as a prerequisite.
  22 bool IsValidPermissionSet(bool has_read, bool has_copy_to, bool has_delete,
  23                           std::string* error) {
  24   if (has_copy_to) {
  25     if (has_read && has_delete)
  26       return true;
  27     if (error)
  28       *error = "copyTo permission requires read and delete permissions";
  29     return false;
  30   }
  31   if (has_delete) {
  32     if (has_read)
  33       return true;
  34     if (error)
  35       *error = "delete permission requires read permission";
  36     return false;
  37   }
  38   return true;
  39 }
  40
  41 // Adds the permissions from the |data_set| to |ids|.
  42 void AddPermissionsToLists(
  43     const std::set<MediaGalleriesPermissionData>& data_set,
  44     PermissionIDSet* ids) {
  45   // TODO(sashab): Once GetMessages() is deprecated, move this logic back into
  46   // GetPermissions().
  47   bool has_all_auto_detected = false;
  48   bool has_read = false;
  49   bool has_copy_to = false;
  50   bool has_delete = false;
  51
  52   for (std::set<MediaGalleriesPermissionData>::const_iterator it =
  53            data_set.begin();
  54        it != data_set.end(); ++it) {
  55     if (it->permission() ==
  56         MediaGalleriesPermission::kAllAutoDetectedPermission)
  57       has_all_auto_detected = true;
  58     else if (it->permission() == MediaGalleriesPermission::kReadPermission)
  59       has_read = true;
  60     else if (it->permission() == MediaGalleriesPermission::kCopyToPermission)
  61       has_copy_to = true;
  62     else if (it->permission() == MediaGalleriesPermission::kDeletePermission)
  63       has_delete = true;
  64   }
  65
  66   if (!IsValidPermissionSet(has_read, has_copy_to, has_delete, NULL)) {
  67     NOTREACHED();
  68     return;
  69   }
  70
  71   // If |has_all_auto_detected| is false, then Chrome will prompt the user at
  72   // runtime when the extension call the getMediaGalleries API.
  73   if (!has_all_auto_detected)
  74     return;
  75   // No access permission case.
  76   if (!has_read)
  77     return;
  78
  79   // Separate PermissionMessage IDs for read, copyTo, and delete. Otherwise an
  80   // extension can silently gain new access capabilities.
  81   ids->insert(APIPermission::kMediaGalleriesAllGalleriesRead);
  82
  83   // For copyTo and delete, the proper combined permission message will be
  84   // derived in ChromePermissionMessageProvider::GetWarningMessages(), such
  85   // that the user get 1 entry for all media galleries access permissions,
  86   // rather than several separate entries.
  87   if (has_copy_to)
  88     ids->insert(APIPermission::kMediaGalleriesAllGalleriesCopyTo);
  89   if (has_delete)
  90     ids->insert(APIPermission::kMediaGalleriesAllGalleriesDelete);
  91 }
  92
  93 }  // namespace
  94
  95 const char MediaGalleriesPermission::kAllAutoDetectedPermission[] =
  96     "allAutoDetected";
  97 const char MediaGalleriesPermission::kScanPermission[] = "scan";
  98 const char MediaGalleriesPermission::kReadPermission[] = "read";
  99 const char MediaGalleriesPermission::kCopyToPermission[] = "copyTo";
 100 const char MediaGalleriesPermission::kDeletePermission[] = "delete";
 101
 102 MediaGalleriesPermission::MediaGalleriesPermission(
 103     const APIPermissionInfo* info)
 104   : SetDisjunctionPermission<MediaGalleriesPermissionData,
 105                              MediaGalleriesPermission>(info) {
 106 }
 107
 108 MediaGalleriesPermission::~MediaGalleriesPermission() {
 109 }
 110
 111 bool MediaGalleriesPermission::FromValue(
 112     const base::Value* value,
 113     std::string* error,
 114     std::vector<std::string>* unhandled_permissions) {
 115   size_t unhandled_permissions_count = 0;
 116   if (unhandled_permissions)
 117     unhandled_permissions_count = unhandled_permissions->size();
 118   bool parsed_ok =
 119       SetDisjunctionPermission<MediaGalleriesPermissionData,
 120                                MediaGalleriesPermission>::FromValue(
 121                                    value, error, unhandled_permissions);
 122   if (unhandled_permissions) {
 123     for (size_t i = unhandled_permissions_count;
 124          i < unhandled_permissions->size();
 125          i++) {
 126       (*unhandled_permissions)[i] =
 127           "{\"mediaGalleries\": [" + (*unhandled_permissions)[i] + "]}";
 128     }
 129   }
 130   if (!parsed_ok)
 131     return false;
 132
 133   bool has_read = false;
 134   bool has_copy_to = false;
 135   bool has_delete = false;
 136   for (std::set<MediaGalleriesPermissionData>::const_iterator it =
 137       data_set_.begin(); it != data_set_.end(); ++it) {
 138     if (it->permission() == kAllAutoDetectedPermission ||
 139         it->permission() == kScanPermission) {
 140       continue;
 141     }
 142     if (it->permission() == kReadPermission) {
 143       has_read = true;
 144       continue;
 145     }
 146     if (it->permission() == kCopyToPermission) {
 147       has_copy_to = true;
 148       continue;
 149     }
 150     if (it->permission() == kDeletePermission) {
 151       has_delete = true;
 152       continue;
 153     }
 154
 155     // No other permissions, so reaching this means
 156     // MediaGalleriesPermissionData is probably out of sync in some way.
 157     // Fail so developers notice this.
 158     NOTREACHED();
 159     return false;
 160   }
 161
 162   return IsValidPermissionSet(has_read, has_copy_to, has_delete, error);
 163 }
 164
 165 PermissionIDSet MediaGalleriesPermission::GetPermissions() const {
 166   PermissionIDSet result;
 167   AddPermissionsToLists(data_set_, &result);
 168   return result;
 169 }
 170
 171 }  // namespace extensions