/usr/include/GNUstep/NGObjWeb/SoClassSecurityInfo.h is in libsope-dev 2.2.17-1build2.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 | /*
Copyright (C) 2000-2005 SKYRIX Software AG
This file is part of SOPE.
SOPE is free software; you can redistribute it and/or modify it under
the terms of the GNU Lesser General Public License as published by the
Free Software Foundation; either version 2, or (at your option) any
later version.
SOPE is distributed in the hope that it will be useful, but WITHOUT ANY
WARRANTY; without even the implied warranty of MERCHANTABILITY or
FITNESS FOR A PARTICULAR PURPOSE. See the GNU Lesser General Public
License for more details.
You should have received a copy of the GNU Lesser General Public
License along with SOPE; see the file COPYING. If not, write to the
Free Software Foundation, 59 Temple Place - Suite 330, Boston, MA
02111-1307, USA.
*/
#ifndef __SoObjects_SoClassSecurityInfo_H__
#define __SoObjects_SoClassSecurityInfo_H__
#import <Foundation/NSObject.h>
@class NSString, NSMutableSet, NSMutableDictionary, NSArray;
/*
SoClassSecurityInfo
Storing security info for a SoClass.
Declaring Roles: mapping permissions to roles is the task of the system
administrator. Programmers should only declare default roles for:
- Anonymous
- Manager
- Owner
TODO: default access (this is done in the meantime ?)
Adding security information to a class
======================================
Per default classes are protected from outside access. Defining incorrect
protections is one of the most common problems when writing SOPE applications
since "security is hard" (Jim Fulton) ;-)
Because of that, we provide some user-defaults to control logging of
security:
SoSecurityManagerDebugEnabled (bool) - debugging access
SoLogSecurityDeclarations (bool) - track information
To declare security information on an Objective-C class which you are using
as a SoClass, it's based to implemented the +initialize method:
+ (void)initialize {
// to mark the object public (not restricted to a user/role)
[[self soClassSecurityInfo] declareObjectPublic];
// to allow public access to all contained objects (subkeys)
[[self soClassSecurityInfo] setDefaultAccess:@"allow"];
// to protect a specific object
[[self soClassSecurityInfo]
declareProtected:SoPerm_View:@"test.html",nil];
}
For products it's much easier to declare the products' SoClasses and
their protections in the "product.plist" file.
*/
@class SoClass;
@interface SoClassSecurityInfo : NSObject
{
NSMutableSet *publicNames;
NSMutableSet *privateNames;
NSMutableDictionary *nameToPerm;
NSMutableDictionary *defRoles;
NSString *defaultAccess;
NSString *objectPermission;
BOOL isObjectPublic;
BOOL isObjectPrivate;
NSString *className;
}
- (id)initWithSoClass:(SoClass *)_class;
/* attribute security */
- (BOOL)hasProtectionsForKey:(NSString *)_key;
- (BOOL)isKeyPrivate:(NSString *)_key;
- (BOOL)isKeyPublic:(NSString *)_key;
- (NSString *)permissionRequiredForKey:(NSString *)_key;
- (void)setDefaultAccess:(NSString *)_access;
- (NSString *)defaultAccess;
- (BOOL)hasDefaultAccessDeclaration;
- (void)declarePublic:(NSString *)_firstName, ...;
- (void)declarePrivate:(NSString *)_firstName, ...;
- (void)declareProtected:(NSString *)_perm:(NSString *)_firstName, ...;
/* object security */
- (BOOL)hasObjectProtections;
- (BOOL)isObjectPublic;
- (BOOL)isObjectPrivate;
- (NSString *)permissionRequiredForObject;
- (void)declareObjectPublic;
- (void)declareObjectPrivate;
- (void)declareObjectProtected:(NSString *)_perm;
/* default role mappings */
- (BOOL)hasDefaultRoleForPermission:(NSString *)_p;
- (void)declareRole:(NSString *)_role asDefaultForPermission:(NSString *)_p;
- (void)declareRoles:(NSArray *)_roles asDefaultForPermission:(NSString *)_p;
- (NSArray *)defaultRolesForPermission:(NSString *)_p;
- (void)declareRole:(NSString *)_role
asDefaultForPermissions:(NSString *)_firstPerm,...;
@end
@interface NSObject(ObjCClassSecurityInfo)
+ (SoClassSecurityInfo *)soClassSecurityInfo;
@end
#endif /* __SoObjects_SoClassSecurityInfo_H__ */
|