PHPPgAdmin\Database\Traits\PrivilegesTrait::parseACL()

Complexity

Conditions	26
Paths	1924

Size

Total Lines	128
Code Lines	67

Duplication

Lines	0
Ratio	0 %

Importance

Changes	1
Bugs	0	Features	0

<?php
    protected function parseACL($acl)
    {
        // Take off the first and last characters (the braces)
        $acl = \mb_substr($acl, 1, \mb_strlen($acl) - 2);

        // Pick out individual ACE's by carefully parsing.  This is necessary in order
        // to cope with usernames and stuff that contain commas
        $aces = [];
        $i = $j = 0;
        $in_quotes = false;

        while (\mb_strlen($acl) > $i) {
            // If current char is a double quote and it's not escaped, then
            // enter quoted bit
            $char = \mb_substr($acl, $i, 1);

            if ('"' === $char && (0 === $i || '\\' !== \mb_substr($acl, $i - 1, 1))) {
                $in_quotes = !$in_quotes;
            } elseif (',' === $char && !$in_quotes) {
                // Add text so far to the array
                $aces[] = \mb_substr($acl, $j, $i - $j);
                $j = $i + 1;
            }
            ++$i;
        }
        // Add final text to the array
        $aces[] = \mb_substr($acl, $j);

        // Create the array to be returned
        $temp = [];

        // For each ACE, generate an entry in $temp
        foreach ($aces as $v) {
            // If the ACE begins with a double quote, strip them off both ends
            // and unescape backslashes and double quotes
            // $unquote = false;
            if (0 === \mb_strpos($v, '"')) {
                $v = \mb_substr($v, 1, \mb_strlen($v) - 2);
                $v = \str_replace('\\"', '"', $v);
                $v = \str_replace('\\\\', '\\', $v);
            }

            // Figure out type of ACE (public, user or group)
            if (0 === \mb_strpos($v, '=')) {
                $atype = 'public';
            } else {
                if ($this->hasRoles()) {
                    $atype = 'role';
                } else {
                    if (0 === \mb_strpos($v, 'group ')) {
                        $atype = 'group';
                        // Tear off 'group' prefix
                        $v = \mb_substr($v, 6);
                    } else {
                        $atype = 'user';
                    }
                }
            }

            // Break on unquoted equals sign...
            $i = 0;
            $in_quotes = false;
            $entity = null;
            $chars = null;

            while (\mb_strlen($v) > $i) {
                // If current char is a double quote and it's not escaped, then
                // enter quoted bit
                $char = \mb_substr($v, $i, 1);
                $next_char = \mb_substr($v, $i + 1, 1);

                if ('"' === $char && (0 === $i || '"' !== $next_char)) {
                    $in_quotes = !$in_quotes;
                } elseif ('"' === $char && '"' === $next_char) {
                    // Skip over escaped double quotes
                    ++$i;
                } elseif ('=' === $char && !$in_quotes) {
                    // Split on current equals sign
                    $entity = \mb_substr($v, 0, $i);
                    $chars = \mb_substr($v, $i + 1);

                    break;
                }
                ++$i;
            }

            // Check for quoting on entity name, and unescape if necessary
            if (0 === \mb_strpos($entity, '"')) {
                $entity = \mb_substr($entity, 1, \mb_strlen($entity) - 2);
                $entity = \str_replace('""', '"', $entity);
            }

            // New row to be added to $temp
            // (type, grantee, privileges, grantor, grant option?
            $row = [$atype, $entity, [], '', []];

            // Loop over chars and add privs to $row
            for ($i = 0; \mb_strlen($chars) > $i; ++$i) {
                // Append to row's privs list the string representing
                // the privilege
                $char = \mb_substr($chars, $i, 1);

                if ('*' === $char) {
                    $row[4][] = $this->privmap[\mb_substr($chars, $i - 1, 1)];
                } elseif ('/' === $char) {
                    $grantor = \mb_substr($chars, $i + 1);
                    // Check for quoting
                    if (0 === \mb_strpos($grantor, '"')) {
                        $grantor = \mb_substr($grantor, 1, \mb_strlen($grantor) - 2);
                        $grantor = \str_replace('""', '"', $grantor);
                    }
                    $row[3] = $grantor;

                    break;
                } else {
                    if (!isset($this->privmap[$char])) {
                        return -3;
                    }

                    $row[2][] = $this->privmap[$char];
                }
            }

            // Append row to temp
            $temp[] = $row;
        }

        return $temp;
    }