@@ -52,435 +52,435 @@ |
||
| 52 | 52 | |
| 53 | 53 | class Principal implements BackendInterface { |
| 54 | 54 | |
| 55 | - /** @var IUserManager */ |
|
| 56 | - private $userManager; |
|
| 57 | - |
|
| 58 | - /** @var IGroupManager */ |
|
| 59 | - private $groupManager; |
|
| 60 | - |
|
| 61 | - /** @var IShareManager */ |
|
| 62 | - private $shareManager; |
|
| 63 | - |
|
| 64 | - /** @var IUserSession */ |
|
| 65 | - private $userSession; |
|
| 66 | - |
|
| 67 | - /** @var IAppManager */ |
|
| 68 | - private $appManager; |
|
| 69 | - |
|
| 70 | - /** @var string */ |
|
| 71 | - private $principalPrefix; |
|
| 72 | - |
|
| 73 | - /** @var bool */ |
|
| 74 | - private $hasGroups; |
|
| 75 | - |
|
| 76 | - /** @var bool */ |
|
| 77 | - private $hasCircles; |
|
| 78 | - |
|
| 79 | - /** @var ProxyMapper */ |
|
| 80 | - private $proxyMapper; |
|
| 81 | - |
|
| 82 | - /** |
|
| 83 | - * Principal constructor. |
|
| 84 | - * |
|
| 85 | - * @param IUserManager $userManager |
|
| 86 | - * @param IGroupManager $groupManager |
|
| 87 | - * @param IShareManager $shareManager |
|
| 88 | - * @param IUserSession $userSession |
|
| 89 | - * @param IAppManager $appManager |
|
| 90 | - * @param ProxyMapper $proxyMapper |
|
| 91 | - * @param string $principalPrefix |
|
| 92 | - */ |
|
| 93 | - public function __construct(IUserManager $userManager, |
|
| 94 | - IGroupManager $groupManager, |
|
| 95 | - IShareManager $shareManager, |
|
| 96 | - IUserSession $userSession, |
|
| 97 | - IAppManager $appManager, |
|
| 98 | - ProxyMapper $proxyMapper, |
|
| 99 | - string $principalPrefix = 'principals/users/') { |
|
| 100 | - $this->userManager = $userManager; |
|
| 101 | - $this->groupManager = $groupManager; |
|
| 102 | - $this->shareManager = $shareManager; |
|
| 103 | - $this->userSession = $userSession; |
|
| 104 | - $this->appManager = $appManager; |
|
| 105 | - $this->principalPrefix = trim($principalPrefix, '/'); |
|
| 106 | - $this->hasGroups = $this->hasCircles = ($principalPrefix === 'principals/users/'); |
|
| 107 | - $this->proxyMapper = $proxyMapper; |
|
| 108 | - } |
|
| 109 | - |
|
| 110 | - use PrincipalProxyTrait { |
|
| 111 | - getGroupMembership as protected traitGetGroupMembership; |
|
| 112 | - } |
|
| 113 | - |
|
| 114 | - /** |
|
| 115 | - * Returns a list of principals based on a prefix. |
|
| 116 | - * |
|
| 117 | - * This prefix will often contain something like 'principals'. You are only |
|
| 118 | - * expected to return principals that are in this base path. |
|
| 119 | - * |
|
| 120 | - * You are expected to return at least a 'uri' for every user, you can |
|
| 121 | - * return any additional properties if you wish so. Common properties are: |
|
| 122 | - * {DAV:}displayname |
|
| 123 | - * |
|
| 124 | - * @param string $prefixPath |
|
| 125 | - * @return string[] |
|
| 126 | - */ |
|
| 127 | - public function getPrincipalsByPrefix($prefixPath) { |
|
| 128 | - $principals = []; |
|
| 129 | - |
|
| 130 | - if ($prefixPath === $this->principalPrefix) { |
|
| 131 | - foreach($this->userManager->search('') as $user) { |
|
| 132 | - $principals[] = $this->userToPrincipal($user); |
|
| 133 | - } |
|
| 134 | - } |
|
| 135 | - |
|
| 136 | - return $principals; |
|
| 137 | - } |
|
| 138 | - |
|
| 139 | - /** |
|
| 140 | - * Returns a specific principal, specified by it's path. |
|
| 141 | - * The returned structure should be the exact same as from |
|
| 142 | - * getPrincipalsByPrefix. |
|
| 143 | - * |
|
| 144 | - * @param string $path |
|
| 145 | - * @return array |
|
| 146 | - */ |
|
| 147 | - public function getPrincipalByPath($path) { |
|
| 148 | - list($prefix, $name) = \Sabre\Uri\split($path); |
|
| 149 | - |
|
| 150 | - if ($name === 'calendar-proxy-write' || $name === 'calendar-proxy-read') { |
|
| 151 | - list($prefix2, $name2) = \Sabre\Uri\split($prefix); |
|
| 152 | - |
|
| 153 | - if ($prefix2 === $this->principalPrefix) { |
|
| 154 | - $user = $this->userManager->get($name2); |
|
| 155 | - |
|
| 156 | - if ($user !== null) { |
|
| 157 | - return [ |
|
| 158 | - 'uri' => 'principals/users/' . $user->getUID() . '/' . $name, |
|
| 159 | - ]; |
|
| 160 | - } |
|
| 161 | - return null; |
|
| 162 | - } |
|
| 163 | - } |
|
| 164 | - |
|
| 165 | - if ($prefix === $this->principalPrefix) { |
|
| 166 | - $user = $this->userManager->get($name); |
|
| 167 | - |
|
| 168 | - if ($user !== null) { |
|
| 169 | - return $this->userToPrincipal($user); |
|
| 170 | - } |
|
| 171 | - } else if ($prefix === 'principals/circles') { |
|
| 172 | - try { |
|
| 173 | - return $this->circleToPrincipal($name); |
|
| 174 | - } catch (QueryException $e) { |
|
| 175 | - return null; |
|
| 176 | - } |
|
| 177 | - } |
|
| 178 | - return null; |
|
| 179 | - } |
|
| 180 | - |
|
| 181 | - /** |
|
| 182 | - * Returns the list of groups a principal is a member of |
|
| 183 | - * |
|
| 184 | - * @param string $principal |
|
| 185 | - * @param bool $needGroups |
|
| 186 | - * @return array |
|
| 187 | - * @throws Exception |
|
| 188 | - */ |
|
| 189 | - public function getGroupMembership($principal, $needGroups = false) { |
|
| 190 | - list($prefix, $name) = \Sabre\Uri\split($principal); |
|
| 191 | - |
|
| 192 | - if ($prefix !== $this->principalPrefix) { |
|
| 193 | - return []; |
|
| 194 | - } |
|
| 195 | - |
|
| 196 | - $user = $this->userManager->get($name); |
|
| 197 | - if (!$user) { |
|
| 198 | - throw new Exception('Principal not found'); |
|
| 199 | - } |
|
| 200 | - |
|
| 201 | - $groups = []; |
|
| 202 | - |
|
| 203 | - if ($this->hasGroups || $needGroups) { |
|
| 204 | - $userGroups = $this->groupManager->getUserGroups($user); |
|
| 205 | - foreach($userGroups as $userGroup) { |
|
| 206 | - $groups[] = 'principals/groups/' . urlencode($userGroup->getGID()); |
|
| 207 | - } |
|
| 208 | - } |
|
| 209 | - |
|
| 210 | - $groups = array_unique(array_merge( |
|
| 211 | - $groups, |
|
| 212 | - $this->traitGetGroupMembership($principal, $needGroups) |
|
| 213 | - )); |
|
| 214 | - |
|
| 215 | - return $groups; |
|
| 216 | - } |
|
| 217 | - |
|
| 218 | - /** |
|
| 219 | - * @param string $path |
|
| 220 | - * @param PropPatch $propPatch |
|
| 221 | - * @return int |
|
| 222 | - */ |
|
| 223 | - function updatePrincipal($path, PropPatch $propPatch) { |
|
| 224 | - return 0; |
|
| 225 | - } |
|
| 226 | - |
|
| 227 | - /** |
|
| 228 | - * Search user principals |
|
| 229 | - * |
|
| 230 | - * @param array $searchProperties |
|
| 231 | - * @param string $test |
|
| 232 | - * @return array |
|
| 233 | - */ |
|
| 234 | - protected function searchUserPrincipals(array $searchProperties, $test = 'allof') { |
|
| 235 | - $results = []; |
|
| 236 | - |
|
| 237 | - // If sharing is disabled, return the empty array |
|
| 238 | - $shareAPIEnabled = $this->shareManager->shareApiEnabled(); |
|
| 239 | - if (!$shareAPIEnabled) { |
|
| 240 | - return []; |
|
| 241 | - } |
|
| 242 | - |
|
| 243 | - // If sharing is restricted to group members only, |
|
| 244 | - // return only members that have groups in common |
|
| 245 | - $restrictGroups = false; |
|
| 246 | - if ($this->shareManager->shareWithGroupMembersOnly()) { |
|
| 247 | - $user = $this->userSession->getUser(); |
|
| 248 | - if (!$user) { |
|
| 249 | - return []; |
|
| 250 | - } |
|
| 251 | - |
|
| 252 | - $restrictGroups = $this->groupManager->getUserGroupIds($user); |
|
| 253 | - } |
|
| 254 | - |
|
| 255 | - foreach ($searchProperties as $prop => $value) { |
|
| 256 | - switch ($prop) { |
|
| 257 | - case '{http://sabredav.org/ns}email-address': |
|
| 258 | - $users = $this->userManager->getByEmail($value); |
|
| 259 | - |
|
| 260 | - $results[] = array_reduce($users, function(array $carry, IUser $user) use ($restrictGroups) { |
|
| 261 | - // is sharing restricted to groups only? |
|
| 262 | - if ($restrictGroups !== false) { |
|
| 263 | - $userGroups = $this->groupManager->getUserGroupIds($user); |
|
| 264 | - if (count(array_intersect($userGroups, $restrictGroups)) === 0) { |
|
| 265 | - return $carry; |
|
| 266 | - } |
|
| 267 | - } |
|
| 268 | - |
|
| 269 | - $carry[] = $this->principalPrefix . '/' . $user->getUID(); |
|
| 270 | - return $carry; |
|
| 271 | - }, []); |
|
| 272 | - break; |
|
| 273 | - |
|
| 274 | - case '{DAV:}displayname': |
|
| 275 | - $users = $this->userManager->searchDisplayName($value); |
|
| 276 | - |
|
| 277 | - $results[] = array_reduce($users, function(array $carry, IUser $user) use ($restrictGroups) { |
|
| 278 | - // is sharing restricted to groups only? |
|
| 279 | - if ($restrictGroups !== false) { |
|
| 280 | - $userGroups = $this->groupManager->getUserGroupIds($user); |
|
| 281 | - if (count(array_intersect($userGroups, $restrictGroups)) === 0) { |
|
| 282 | - return $carry; |
|
| 283 | - } |
|
| 284 | - } |
|
| 285 | - |
|
| 286 | - $carry[] = $this->principalPrefix . '/' . $user->getUID(); |
|
| 287 | - return $carry; |
|
| 288 | - }, []); |
|
| 289 | - break; |
|
| 290 | - |
|
| 291 | - case '{urn:ietf:params:xml:ns:caldav}calendar-user-address-set': |
|
| 292 | - // If you add support for more search properties that qualify as a user-address, |
|
| 293 | - // please also add them to the array below |
|
| 294 | - $results[] = $this->searchUserPrincipals([ |
|
| 295 | - // In theory this should also search for principal:principals/users/... |
|
| 296 | - // but that's used internally only anyway and i don't know of any client querying that |
|
| 297 | - '{http://sabredav.org/ns}email-address' => $value, |
|
| 298 | - ], 'anyof'); |
|
| 299 | - break; |
|
| 300 | - |
|
| 301 | - default: |
|
| 302 | - $results[] = []; |
|
| 303 | - break; |
|
| 304 | - } |
|
| 305 | - } |
|
| 306 | - |
|
| 307 | - // results is an array of arrays, so this is not the first search result |
|
| 308 | - // but the results of the first searchProperty |
|
| 309 | - if (count($results) === 1) { |
|
| 310 | - return $results[0]; |
|
| 311 | - } |
|
| 312 | - |
|
| 313 | - switch ($test) { |
|
| 314 | - case 'anyof': |
|
| 315 | - return array_values(array_unique(array_merge(...$results))); |
|
| 316 | - |
|
| 317 | - case 'allof': |
|
| 318 | - default: |
|
| 319 | - return array_values(array_intersect(...$results)); |
|
| 320 | - } |
|
| 321 | - } |
|
| 322 | - |
|
| 323 | - /** |
|
| 324 | - * @param string $prefixPath |
|
| 325 | - * @param array $searchProperties |
|
| 326 | - * @param string $test |
|
| 327 | - * @return array |
|
| 328 | - */ |
|
| 329 | - function searchPrincipals($prefixPath, array $searchProperties, $test = 'allof') { |
|
| 330 | - if (count($searchProperties) === 0) { |
|
| 331 | - return []; |
|
| 332 | - } |
|
| 333 | - |
|
| 334 | - switch ($prefixPath) { |
|
| 335 | - case 'principals/users': |
|
| 336 | - return $this->searchUserPrincipals($searchProperties, $test); |
|
| 337 | - |
|
| 338 | - default: |
|
| 339 | - return []; |
|
| 340 | - } |
|
| 341 | - } |
|
| 342 | - |
|
| 343 | - /** |
|
| 344 | - * @param string $uri |
|
| 345 | - * @param string $principalPrefix |
|
| 346 | - * @return string |
|
| 347 | - */ |
|
| 348 | - function findByUri($uri, $principalPrefix) { |
|
| 349 | - // If sharing is disabled, return the empty array |
|
| 350 | - $shareAPIEnabled = $this->shareManager->shareApiEnabled(); |
|
| 351 | - if (!$shareAPIEnabled) { |
|
| 352 | - return null; |
|
| 353 | - } |
|
| 354 | - |
|
| 355 | - // If sharing is restricted to group members only, |
|
| 356 | - // return only members that have groups in common |
|
| 357 | - $restrictGroups = false; |
|
| 358 | - if ($this->shareManager->shareWithGroupMembersOnly()) { |
|
| 359 | - $user = $this->userSession->getUser(); |
|
| 360 | - if (!$user) { |
|
| 361 | - return null; |
|
| 362 | - } |
|
| 363 | - |
|
| 364 | - $restrictGroups = $this->groupManager->getUserGroupIds($user); |
|
| 365 | - } |
|
| 366 | - |
|
| 367 | - if (strpos($uri, 'mailto:') === 0) { |
|
| 368 | - if ($principalPrefix === 'principals/users') { |
|
| 369 | - $users = $this->userManager->getByEmail(substr($uri, 7)); |
|
| 370 | - if (count($users) !== 1) { |
|
| 371 | - return null; |
|
| 372 | - } |
|
| 373 | - $user = $users[0]; |
|
| 374 | - |
|
| 375 | - if ($restrictGroups !== false) { |
|
| 376 | - $userGroups = $this->groupManager->getUserGroupIds($user); |
|
| 377 | - if (count(array_intersect($userGroups, $restrictGroups)) === 0) { |
|
| 378 | - return null; |
|
| 379 | - } |
|
| 380 | - } |
|
| 381 | - |
|
| 382 | - return $this->principalPrefix . '/' . $user->getUID(); |
|
| 383 | - } |
|
| 384 | - } |
|
| 385 | - if (substr($uri, 0, 10) === 'principal:') { |
|
| 386 | - $principal = substr($uri, 10); |
|
| 387 | - $principal = $this->getPrincipalByPath($principal); |
|
| 388 | - if ($principal !== null) { |
|
| 389 | - return $principal['uri']; |
|
| 390 | - } |
|
| 391 | - } |
|
| 392 | - |
|
| 393 | - return null; |
|
| 394 | - } |
|
| 395 | - |
|
| 396 | - /** |
|
| 397 | - * @param IUser $user |
|
| 398 | - * @return array |
|
| 399 | - */ |
|
| 400 | - protected function userToPrincipal($user) { |
|
| 401 | - $userId = $user->getUID(); |
|
| 402 | - $displayName = $user->getDisplayName(); |
|
| 403 | - $principal = [ |
|
| 404 | - 'uri' => $this->principalPrefix . '/' . $userId, |
|
| 405 | - '{DAV:}displayname' => is_null($displayName) ? $userId : $displayName, |
|
| 406 | - '{urn:ietf:params:xml:ns:caldav}calendar-user-type' => 'INDIVIDUAL', |
|
| 407 | - ]; |
|
| 408 | - |
|
| 409 | - $email = $user->getEMailAddress(); |
|
| 410 | - if (!empty($email)) { |
|
| 411 | - $principal['{http://sabredav.org/ns}email-address'] = $email; |
|
| 412 | - } |
|
| 413 | - |
|
| 414 | - return $principal; |
|
| 415 | - } |
|
| 416 | - |
|
| 417 | - public function getPrincipalPrefix() { |
|
| 418 | - return $this->principalPrefix; |
|
| 419 | - } |
|
| 420 | - |
|
| 421 | - /** |
|
| 422 | - * @param string $circleUniqueId |
|
| 423 | - * @return array|null |
|
| 424 | - * @throws \OCP\AppFramework\QueryException |
|
| 425 | - * @suppress PhanUndeclaredClassMethod |
|
| 426 | - * @suppress PhanUndeclaredClassCatch |
|
| 427 | - */ |
|
| 428 | - protected function circleToPrincipal($circleUniqueId) { |
|
| 429 | - if (!$this->appManager->isEnabledForUser('circles') || !class_exists('\OCA\Circles\Api\v1\Circles')) { |
|
| 430 | - return null; |
|
| 431 | - } |
|
| 432 | - |
|
| 433 | - try { |
|
| 434 | - $circle = \OCA\Circles\Api\v1\Circles::detailsCircle($circleUniqueId, true); |
|
| 435 | - } catch(QueryException $ex) { |
|
| 436 | - return null; |
|
| 437 | - } catch(CircleDoesNotExistException $ex) { |
|
| 438 | - return null; |
|
| 439 | - } |
|
| 440 | - |
|
| 441 | - if (!$circle) { |
|
| 442 | - return null; |
|
| 443 | - } |
|
| 444 | - |
|
| 445 | - $principal = [ |
|
| 446 | - 'uri' => 'principals/circles/' . $circleUniqueId, |
|
| 447 | - '{DAV:}displayname' => $circle->getName(), |
|
| 448 | - ]; |
|
| 449 | - |
|
| 450 | - return $principal; |
|
| 451 | - } |
|
| 452 | - |
|
| 453 | - /** |
|
| 454 | - * Returns the list of circles a principal is a member of |
|
| 455 | - * |
|
| 456 | - * @param string $principal |
|
| 457 | - * @return array |
|
| 458 | - * @throws Exception |
|
| 459 | - * @throws \OCP\AppFramework\QueryException |
|
| 460 | - * @suppress PhanUndeclaredClassMethod |
|
| 461 | - */ |
|
| 462 | - public function getCircleMembership($principal):array { |
|
| 463 | - if (!$this->appManager->isEnabledForUser('circles') || !class_exists('\OCA\Circles\Api\v1\Circles')) { |
|
| 464 | - return []; |
|
| 465 | - } |
|
| 466 | - |
|
| 467 | - list($prefix, $name) = \Sabre\Uri\split($principal); |
|
| 468 | - if ($this->hasCircles && $prefix === $this->principalPrefix) { |
|
| 469 | - $user = $this->userManager->get($name); |
|
| 470 | - if (!$user) { |
|
| 471 | - throw new Exception('Principal not found'); |
|
| 472 | - } |
|
| 473 | - |
|
| 474 | - $circles = \OCA\Circles\Api\v1\Circles::joinedCircles($name, true); |
|
| 475 | - |
|
| 476 | - $circles = array_map(function($circle) { |
|
| 477 | - /** @var \OCA\Circles\Model\Circle $circle */ |
|
| 478 | - return 'principals/circles/' . urlencode($circle->getUniqueId()); |
|
| 479 | - }, $circles); |
|
| 480 | - |
|
| 481 | - return $circles; |
|
| 482 | - } |
|
| 483 | - |
|
| 484 | - return []; |
|
| 485 | - } |
|
| 55 | + /** @var IUserManager */ |
|
| 56 | + private $userManager; |
|
| 57 | + |
|
| 58 | + /** @var IGroupManager */ |
|
| 59 | + private $groupManager; |
|
| 60 | + |
|
| 61 | + /** @var IShareManager */ |
|
| 62 | + private $shareManager; |
|
| 63 | + |
|
| 64 | + /** @var IUserSession */ |
|
| 65 | + private $userSession; |
|
| 66 | + |
|
| 67 | + /** @var IAppManager */ |
|
| 68 | + private $appManager; |
|
| 69 | + |
|
| 70 | + /** @var string */ |
|
| 71 | + private $principalPrefix; |
|
| 72 | + |
|
| 73 | + /** @var bool */ |
|
| 74 | + private $hasGroups; |
|
| 75 | + |
|
| 76 | + /** @var bool */ |
|
| 77 | + private $hasCircles; |
|
| 78 | + |
|
| 79 | + /** @var ProxyMapper */ |
|
| 80 | + private $proxyMapper; |
|
| 81 | + |
|
| 82 | + /** |
|
| 83 | + * Principal constructor. |
|
| 84 | + * |
|
| 85 | + * @param IUserManager $userManager |
|
| 86 | + * @param IGroupManager $groupManager |
|
| 87 | + * @param IShareManager $shareManager |
|
| 88 | + * @param IUserSession $userSession |
|
| 89 | + * @param IAppManager $appManager |
|
| 90 | + * @param ProxyMapper $proxyMapper |
|
| 91 | + * @param string $principalPrefix |
|
| 92 | + */ |
|
| 93 | + public function __construct(IUserManager $userManager, |
|
| 94 | + IGroupManager $groupManager, |
|
| 95 | + IShareManager $shareManager, |
|
| 96 | + IUserSession $userSession, |
|
| 97 | + IAppManager $appManager, |
|
| 98 | + ProxyMapper $proxyMapper, |
|
| 99 | + string $principalPrefix = 'principals/users/') { |
|
| 100 | + $this->userManager = $userManager; |
|
| 101 | + $this->groupManager = $groupManager; |
|
| 102 | + $this->shareManager = $shareManager; |
|
| 103 | + $this->userSession = $userSession; |
|
| 104 | + $this->appManager = $appManager; |
|
| 105 | + $this->principalPrefix = trim($principalPrefix, '/'); |
|
| 106 | + $this->hasGroups = $this->hasCircles = ($principalPrefix === 'principals/users/'); |
|
| 107 | + $this->proxyMapper = $proxyMapper; |
|
| 108 | + } |
|
| 109 | + |
|
| 110 | + use PrincipalProxyTrait { |
|
| 111 | + getGroupMembership as protected traitGetGroupMembership; |
|
| 112 | + } |
|
| 113 | + |
|
| 114 | + /** |
|
| 115 | + * Returns a list of principals based on a prefix. |
|
| 116 | + * |
|
| 117 | + * This prefix will often contain something like 'principals'. You are only |
|
| 118 | + * expected to return principals that are in this base path. |
|
| 119 | + * |
|
| 120 | + * You are expected to return at least a 'uri' for every user, you can |
|
| 121 | + * return any additional properties if you wish so. Common properties are: |
|
| 122 | + * {DAV:}displayname |
|
| 123 | + * |
|
| 124 | + * @param string $prefixPath |
|
| 125 | + * @return string[] |
|
| 126 | + */ |
|
| 127 | + public function getPrincipalsByPrefix($prefixPath) { |
|
| 128 | + $principals = []; |
|
| 129 | + |
|
| 130 | + if ($prefixPath === $this->principalPrefix) { |
|
| 131 | + foreach($this->userManager->search('') as $user) { |
|
| 132 | + $principals[] = $this->userToPrincipal($user); |
|
| 133 | + } |
|
| 134 | + } |
|
| 135 | + |
|
| 136 | + return $principals; |
|
| 137 | + } |
|
| 138 | + |
|
| 139 | + /** |
|
| 140 | + * Returns a specific principal, specified by it's path. |
|
| 141 | + * The returned structure should be the exact same as from |
|
| 142 | + * getPrincipalsByPrefix. |
|
| 143 | + * |
|
| 144 | + * @param string $path |
|
| 145 | + * @return array |
|
| 146 | + */ |
|
| 147 | + public function getPrincipalByPath($path) { |
|
| 148 | + list($prefix, $name) = \Sabre\Uri\split($path); |
|
| 149 | + |
|
| 150 | + if ($name === 'calendar-proxy-write' || $name === 'calendar-proxy-read') { |
|
| 151 | + list($prefix2, $name2) = \Sabre\Uri\split($prefix); |
|
| 152 | + |
|
| 153 | + if ($prefix2 === $this->principalPrefix) { |
|
| 154 | + $user = $this->userManager->get($name2); |
|
| 155 | + |
|
| 156 | + if ($user !== null) { |
|
| 157 | + return [ |
|
| 158 | + 'uri' => 'principals/users/' . $user->getUID() . '/' . $name, |
|
| 159 | + ]; |
|
| 160 | + } |
|
| 161 | + return null; |
|
| 162 | + } |
|
| 163 | + } |
|
| 164 | + |
|
| 165 | + if ($prefix === $this->principalPrefix) { |
|
| 166 | + $user = $this->userManager->get($name); |
|
| 167 | + |
|
| 168 | + if ($user !== null) { |
|
| 169 | + return $this->userToPrincipal($user); |
|
| 170 | + } |
|
| 171 | + } else if ($prefix === 'principals/circles') { |
|
| 172 | + try { |
|
| 173 | + return $this->circleToPrincipal($name); |
|
| 174 | + } catch (QueryException $e) { |
|
| 175 | + return null; |
|
| 176 | + } |
|
| 177 | + } |
|
| 178 | + return null; |
|
| 179 | + } |
|
| 180 | + |
|
| 181 | + /** |
|
| 182 | + * Returns the list of groups a principal is a member of |
|
| 183 | + * |
|
| 184 | + * @param string $principal |
|
| 185 | + * @param bool $needGroups |
|
| 186 | + * @return array |
|
| 187 | + * @throws Exception |
|
| 188 | + */ |
|
| 189 | + public function getGroupMembership($principal, $needGroups = false) { |
|
| 190 | + list($prefix, $name) = \Sabre\Uri\split($principal); |
|
| 191 | + |
|
| 192 | + if ($prefix !== $this->principalPrefix) { |
|
| 193 | + return []; |
|
| 194 | + } |
|
| 195 | + |
|
| 196 | + $user = $this->userManager->get($name); |
|
| 197 | + if (!$user) { |
|
| 198 | + throw new Exception('Principal not found'); |
|
| 199 | + } |
|
| 200 | + |
|
| 201 | + $groups = []; |
|
| 202 | + |
|
| 203 | + if ($this->hasGroups || $needGroups) { |
|
| 204 | + $userGroups = $this->groupManager->getUserGroups($user); |
|
| 205 | + foreach($userGroups as $userGroup) { |
|
| 206 | + $groups[] = 'principals/groups/' . urlencode($userGroup->getGID()); |
|
| 207 | + } |
|
| 208 | + } |
|
| 209 | + |
|
| 210 | + $groups = array_unique(array_merge( |
|
| 211 | + $groups, |
|
| 212 | + $this->traitGetGroupMembership($principal, $needGroups) |
|
| 213 | + )); |
|
| 214 | + |
|
| 215 | + return $groups; |
|
| 216 | + } |
|
| 217 | + |
|
| 218 | + /** |
|
| 219 | + * @param string $path |
|
| 220 | + * @param PropPatch $propPatch |
|
| 221 | + * @return int |
|
| 222 | + */ |
|
| 223 | + function updatePrincipal($path, PropPatch $propPatch) { |
|
| 224 | + return 0; |
|
| 225 | + } |
|
| 226 | + |
|
| 227 | + /** |
|
| 228 | + * Search user principals |
|
| 229 | + * |
|
| 230 | + * @param array $searchProperties |
|
| 231 | + * @param string $test |
|
| 232 | + * @return array |
|
| 233 | + */ |
|
| 234 | + protected function searchUserPrincipals(array $searchProperties, $test = 'allof') { |
|
| 235 | + $results = []; |
|
| 236 | + |
|
| 237 | + // If sharing is disabled, return the empty array |
|
| 238 | + $shareAPIEnabled = $this->shareManager->shareApiEnabled(); |
|
| 239 | + if (!$shareAPIEnabled) { |
|
| 240 | + return []; |
|
| 241 | + } |
|
| 242 | + |
|
| 243 | + // If sharing is restricted to group members only, |
|
| 244 | + // return only members that have groups in common |
|
| 245 | + $restrictGroups = false; |
|
| 246 | + if ($this->shareManager->shareWithGroupMembersOnly()) { |
|
| 247 | + $user = $this->userSession->getUser(); |
|
| 248 | + if (!$user) { |
|
| 249 | + return []; |
|
| 250 | + } |
|
| 251 | + |
|
| 252 | + $restrictGroups = $this->groupManager->getUserGroupIds($user); |
|
| 253 | + } |
|
| 254 | + |
|
| 255 | + foreach ($searchProperties as $prop => $value) { |
|
| 256 | + switch ($prop) { |
|
| 257 | + case '{http://sabredav.org/ns}email-address': |
|
| 258 | + $users = $this->userManager->getByEmail($value); |
|
| 259 | + |
|
| 260 | + $results[] = array_reduce($users, function(array $carry, IUser $user) use ($restrictGroups) { |
|
| 261 | + // is sharing restricted to groups only? |
|
| 262 | + if ($restrictGroups !== false) { |
|
| 263 | + $userGroups = $this->groupManager->getUserGroupIds($user); |
|
| 264 | + if (count(array_intersect($userGroups, $restrictGroups)) === 0) { |
|
| 265 | + return $carry; |
|
| 266 | + } |
|
| 267 | + } |
|
| 268 | + |
|
| 269 | + $carry[] = $this->principalPrefix . '/' . $user->getUID(); |
|
| 270 | + return $carry; |
|
| 271 | + }, []); |
|
| 272 | + break; |
|
| 273 | + |
|
| 274 | + case '{DAV:}displayname': |
|
| 275 | + $users = $this->userManager->searchDisplayName($value); |
|
| 276 | + |
|
| 277 | + $results[] = array_reduce($users, function(array $carry, IUser $user) use ($restrictGroups) { |
|
| 278 | + // is sharing restricted to groups only? |
|
| 279 | + if ($restrictGroups !== false) { |
|
| 280 | + $userGroups = $this->groupManager->getUserGroupIds($user); |
|
| 281 | + if (count(array_intersect($userGroups, $restrictGroups)) === 0) { |
|
| 282 | + return $carry; |
|
| 283 | + } |
|
| 284 | + } |
|
| 285 | + |
|
| 286 | + $carry[] = $this->principalPrefix . '/' . $user->getUID(); |
|
| 287 | + return $carry; |
|
| 288 | + }, []); |
|
| 289 | + break; |
|
| 290 | + |
|
| 291 | + case '{urn:ietf:params:xml:ns:caldav}calendar-user-address-set': |
|
| 292 | + // If you add support for more search properties that qualify as a user-address, |
|
| 293 | + // please also add them to the array below |
|
| 294 | + $results[] = $this->searchUserPrincipals([ |
|
| 295 | + // In theory this should also search for principal:principals/users/... |
|
| 296 | + // but that's used internally only anyway and i don't know of any client querying that |
|
| 297 | + '{http://sabredav.org/ns}email-address' => $value, |
|
| 298 | + ], 'anyof'); |
|
| 299 | + break; |
|
| 300 | + |
|
| 301 | + default: |
|
| 302 | + $results[] = []; |
|
| 303 | + break; |
|
| 304 | + } |
|
| 305 | + } |
|
| 306 | + |
|
| 307 | + // results is an array of arrays, so this is not the first search result |
|
| 308 | + // but the results of the first searchProperty |
|
| 309 | + if (count($results) === 1) { |
|
| 310 | + return $results[0]; |
|
| 311 | + } |
|
| 312 | + |
|
| 313 | + switch ($test) { |
|
| 314 | + case 'anyof': |
|
| 315 | + return array_values(array_unique(array_merge(...$results))); |
|
| 316 | + |
|
| 317 | + case 'allof': |
|
| 318 | + default: |
|
| 319 | + return array_values(array_intersect(...$results)); |
|
| 320 | + } |
|
| 321 | + } |
|
| 322 | + |
|
| 323 | + /** |
|
| 324 | + * @param string $prefixPath |
|
| 325 | + * @param array $searchProperties |
|
| 326 | + * @param string $test |
|
| 327 | + * @return array |
|
| 328 | + */ |
|
| 329 | + function searchPrincipals($prefixPath, array $searchProperties, $test = 'allof') { |
|
| 330 | + if (count($searchProperties) === 0) { |
|
| 331 | + return []; |
|
| 332 | + } |
|
| 333 | + |
|
| 334 | + switch ($prefixPath) { |
|
| 335 | + case 'principals/users': |
|
| 336 | + return $this->searchUserPrincipals($searchProperties, $test); |
|
| 337 | + |
|
| 338 | + default: |
|
| 339 | + return []; |
|
| 340 | + } |
|
| 341 | + } |
|
| 342 | + |
|
| 343 | + /** |
|
| 344 | + * @param string $uri |
|
| 345 | + * @param string $principalPrefix |
|
| 346 | + * @return string |
|
| 347 | + */ |
|
| 348 | + function findByUri($uri, $principalPrefix) { |
|
| 349 | + // If sharing is disabled, return the empty array |
|
| 350 | + $shareAPIEnabled = $this->shareManager->shareApiEnabled(); |
|
| 351 | + if (!$shareAPIEnabled) { |
|
| 352 | + return null; |
|
| 353 | + } |
|
| 354 | + |
|
| 355 | + // If sharing is restricted to group members only, |
|
| 356 | + // return only members that have groups in common |
|
| 357 | + $restrictGroups = false; |
|
| 358 | + if ($this->shareManager->shareWithGroupMembersOnly()) { |
|
| 359 | + $user = $this->userSession->getUser(); |
|
| 360 | + if (!$user) { |
|
| 361 | + return null; |
|
| 362 | + } |
|
| 363 | + |
|
| 364 | + $restrictGroups = $this->groupManager->getUserGroupIds($user); |
|
| 365 | + } |
|
| 366 | + |
|
| 367 | + if (strpos($uri, 'mailto:') === 0) { |
|
| 368 | + if ($principalPrefix === 'principals/users') { |
|
| 369 | + $users = $this->userManager->getByEmail(substr($uri, 7)); |
|
| 370 | + if (count($users) !== 1) { |
|
| 371 | + return null; |
|
| 372 | + } |
|
| 373 | + $user = $users[0]; |
|
| 374 | + |
|
| 375 | + if ($restrictGroups !== false) { |
|
| 376 | + $userGroups = $this->groupManager->getUserGroupIds($user); |
|
| 377 | + if (count(array_intersect($userGroups, $restrictGroups)) === 0) { |
|
| 378 | + return null; |
|
| 379 | + } |
|
| 380 | + } |
|
| 381 | + |
|
| 382 | + return $this->principalPrefix . '/' . $user->getUID(); |
|
| 383 | + } |
|
| 384 | + } |
|
| 385 | + if (substr($uri, 0, 10) === 'principal:') { |
|
| 386 | + $principal = substr($uri, 10); |
|
| 387 | + $principal = $this->getPrincipalByPath($principal); |
|
| 388 | + if ($principal !== null) { |
|
| 389 | + return $principal['uri']; |
|
| 390 | + } |
|
| 391 | + } |
|
| 392 | + |
|
| 393 | + return null; |
|
| 394 | + } |
|
| 395 | + |
|
| 396 | + /** |
|
| 397 | + * @param IUser $user |
|
| 398 | + * @return array |
|
| 399 | + */ |
|
| 400 | + protected function userToPrincipal($user) { |
|
| 401 | + $userId = $user->getUID(); |
|
| 402 | + $displayName = $user->getDisplayName(); |
|
| 403 | + $principal = [ |
|
| 404 | + 'uri' => $this->principalPrefix . '/' . $userId, |
|
| 405 | + '{DAV:}displayname' => is_null($displayName) ? $userId : $displayName, |
|
| 406 | + '{urn:ietf:params:xml:ns:caldav}calendar-user-type' => 'INDIVIDUAL', |
|
| 407 | + ]; |
|
| 408 | + |
|
| 409 | + $email = $user->getEMailAddress(); |
|
| 410 | + if (!empty($email)) { |
|
| 411 | + $principal['{http://sabredav.org/ns}email-address'] = $email; |
|
| 412 | + } |
|
| 413 | + |
|
| 414 | + return $principal; |
|
| 415 | + } |
|
| 416 | + |
|
| 417 | + public function getPrincipalPrefix() { |
|
| 418 | + return $this->principalPrefix; |
|
| 419 | + } |
|
| 420 | + |
|
| 421 | + /** |
|
| 422 | + * @param string $circleUniqueId |
|
| 423 | + * @return array|null |
|
| 424 | + * @throws \OCP\AppFramework\QueryException |
|
| 425 | + * @suppress PhanUndeclaredClassMethod |
|
| 426 | + * @suppress PhanUndeclaredClassCatch |
|
| 427 | + */ |
|
| 428 | + protected function circleToPrincipal($circleUniqueId) { |
|
| 429 | + if (!$this->appManager->isEnabledForUser('circles') || !class_exists('\OCA\Circles\Api\v1\Circles')) { |
|
| 430 | + return null; |
|
| 431 | + } |
|
| 432 | + |
|
| 433 | + try { |
|
| 434 | + $circle = \OCA\Circles\Api\v1\Circles::detailsCircle($circleUniqueId, true); |
|
| 435 | + } catch(QueryException $ex) { |
|
| 436 | + return null; |
|
| 437 | + } catch(CircleDoesNotExistException $ex) { |
|
| 438 | + return null; |
|
| 439 | + } |
|
| 440 | + |
|
| 441 | + if (!$circle) { |
|
| 442 | + return null; |
|
| 443 | + } |
|
| 444 | + |
|
| 445 | + $principal = [ |
|
| 446 | + 'uri' => 'principals/circles/' . $circleUniqueId, |
|
| 447 | + '{DAV:}displayname' => $circle->getName(), |
|
| 448 | + ]; |
|
| 449 | + |
|
| 450 | + return $principal; |
|
| 451 | + } |
|
| 452 | + |
|
| 453 | + /** |
|
| 454 | + * Returns the list of circles a principal is a member of |
|
| 455 | + * |
|
| 456 | + * @param string $principal |
|
| 457 | + * @return array |
|
| 458 | + * @throws Exception |
|
| 459 | + * @throws \OCP\AppFramework\QueryException |
|
| 460 | + * @suppress PhanUndeclaredClassMethod |
|
| 461 | + */ |
|
| 462 | + public function getCircleMembership($principal):array { |
|
| 463 | + if (!$this->appManager->isEnabledForUser('circles') || !class_exists('\OCA\Circles\Api\v1\Circles')) { |
|
| 464 | + return []; |
|
| 465 | + } |
|
| 466 | + |
|
| 467 | + list($prefix, $name) = \Sabre\Uri\split($principal); |
|
| 468 | + if ($this->hasCircles && $prefix === $this->principalPrefix) { |
|
| 469 | + $user = $this->userManager->get($name); |
|
| 470 | + if (!$user) { |
|
| 471 | + throw new Exception('Principal not found'); |
|
| 472 | + } |
|
| 473 | + |
|
| 474 | + $circles = \OCA\Circles\Api\v1\Circles::joinedCircles($name, true); |
|
| 475 | + |
|
| 476 | + $circles = array_map(function($circle) { |
|
| 477 | + /** @var \OCA\Circles\Model\Circle $circle */ |
|
| 478 | + return 'principals/circles/' . urlencode($circle->getUniqueId()); |
|
| 479 | + }, $circles); |
|
| 480 | + |
|
| 481 | + return $circles; |
|
| 482 | + } |
|
| 483 | + |
|
| 484 | + return []; |
|
| 485 | + } |
|
| 486 | 486 | } |
@@ -128,7 +128,7 @@ discard block |
||
| 128 | 128 | $principals = []; |
| 129 | 129 | |
| 130 | 130 | if ($prefixPath === $this->principalPrefix) { |
| 131 | - foreach($this->userManager->search('') as $user) { |
|
| 131 | + foreach ($this->userManager->search('') as $user) { |
|
| 132 | 132 | $principals[] = $this->userToPrincipal($user); |
| 133 | 133 | } |
| 134 | 134 | } |
@@ -155,7 +155,7 @@ discard block |
||
| 155 | 155 | |
| 156 | 156 | if ($user !== null) { |
| 157 | 157 | return [ |
| 158 | - 'uri' => 'principals/users/' . $user->getUID() . '/' . $name, |
|
| 158 | + 'uri' => 'principals/users/'.$user->getUID().'/'.$name, |
|
| 159 | 159 | ]; |
| 160 | 160 | } |
| 161 | 161 | return null; |
@@ -202,8 +202,8 @@ discard block |
||
| 202 | 202 | |
| 203 | 203 | if ($this->hasGroups || $needGroups) { |
| 204 | 204 | $userGroups = $this->groupManager->getUserGroups($user); |
| 205 | - foreach($userGroups as $userGroup) { |
|
| 206 | - $groups[] = 'principals/groups/' . urlencode($userGroup->getGID()); |
|
| 205 | + foreach ($userGroups as $userGroup) { |
|
| 206 | + $groups[] = 'principals/groups/'.urlencode($userGroup->getGID()); |
|
| 207 | 207 | } |
| 208 | 208 | } |
| 209 | 209 | |
@@ -266,7 +266,7 @@ discard block |
||
| 266 | 266 | } |
| 267 | 267 | } |
| 268 | 268 | |
| 269 | - $carry[] = $this->principalPrefix . '/' . $user->getUID(); |
|
| 269 | + $carry[] = $this->principalPrefix.'/'.$user->getUID(); |
|
| 270 | 270 | return $carry; |
| 271 | 271 | }, []); |
| 272 | 272 | break; |
@@ -283,7 +283,7 @@ discard block |
||
| 283 | 283 | } |
| 284 | 284 | } |
| 285 | 285 | |
| 286 | - $carry[] = $this->principalPrefix . '/' . $user->getUID(); |
|
| 286 | + $carry[] = $this->principalPrefix.'/'.$user->getUID(); |
|
| 287 | 287 | return $carry; |
| 288 | 288 | }, []); |
| 289 | 289 | break; |
@@ -379,7 +379,7 @@ discard block |
||
| 379 | 379 | } |
| 380 | 380 | } |
| 381 | 381 | |
| 382 | - return $this->principalPrefix . '/' . $user->getUID(); |
|
| 382 | + return $this->principalPrefix.'/'.$user->getUID(); |
|
| 383 | 383 | } |
| 384 | 384 | } |
| 385 | 385 | if (substr($uri, 0, 10) === 'principal:') { |
@@ -401,7 +401,7 @@ discard block |
||
| 401 | 401 | $userId = $user->getUID(); |
| 402 | 402 | $displayName = $user->getDisplayName(); |
| 403 | 403 | $principal = [ |
| 404 | - 'uri' => $this->principalPrefix . '/' . $userId, |
|
| 404 | + 'uri' => $this->principalPrefix.'/'.$userId, |
|
| 405 | 405 | '{DAV:}displayname' => is_null($displayName) ? $userId : $displayName, |
| 406 | 406 | '{urn:ietf:params:xml:ns:caldav}calendar-user-type' => 'INDIVIDUAL', |
| 407 | 407 | ]; |
@@ -432,9 +432,9 @@ discard block |
||
| 432 | 432 | |
| 433 | 433 | try { |
| 434 | 434 | $circle = \OCA\Circles\Api\v1\Circles::detailsCircle($circleUniqueId, true); |
| 435 | - } catch(QueryException $ex) { |
|
| 435 | + } catch (QueryException $ex) { |
|
| 436 | 436 | return null; |
| 437 | - } catch(CircleDoesNotExistException $ex) { |
|
| 437 | + } catch (CircleDoesNotExistException $ex) { |
|
| 438 | 438 | return null; |
| 439 | 439 | } |
| 440 | 440 | |
@@ -443,7 +443,7 @@ discard block |
||
| 443 | 443 | } |
| 444 | 444 | |
| 445 | 445 | $principal = [ |
| 446 | - 'uri' => 'principals/circles/' . $circleUniqueId, |
|
| 446 | + 'uri' => 'principals/circles/'.$circleUniqueId, |
|
| 447 | 447 | '{DAV:}displayname' => $circle->getName(), |
| 448 | 448 | ]; |
| 449 | 449 | |
@@ -475,7 +475,7 @@ discard block |
||
| 475 | 475 | |
| 476 | 476 | $circles = array_map(function($circle) { |
| 477 | 477 | /** @var \OCA\Circles\Model\Circle $circle */ |
| 478 | - return 'principals/circles/' . urlencode($circle->getUniqueId()); |
|
| 478 | + return 'principals/circles/'.urlencode($circle->getUniqueId()); |
|
| 479 | 479 | }, $circles); |
| 480 | 480 | |
| 481 | 481 | return $circles; |
@@ -44,356 +44,356 @@ |
||
| 44 | 44 | */ |
| 45 | 45 | class Calendar extends \Sabre\CalDAV\Calendar implements IShareable { |
| 46 | 46 | |
| 47 | - /** @var IConfig */ |
|
| 48 | - private $config; |
|
| 49 | - |
|
| 50 | - /** |
|
| 51 | - * Calendar constructor. |
|
| 52 | - * |
|
| 53 | - * @param BackendInterface $caldavBackend |
|
| 54 | - * @param $calendarInfo |
|
| 55 | - * @param IL10N $l10n |
|
| 56 | - * @param IConfig $config |
|
| 57 | - */ |
|
| 58 | - public function __construct(BackendInterface $caldavBackend, $calendarInfo, IL10N $l10n, IConfig $config) { |
|
| 59 | - parent::__construct($caldavBackend, $calendarInfo); |
|
| 60 | - |
|
| 61 | - if ($this->getName() === BirthdayService::BIRTHDAY_CALENDAR_URI) { |
|
| 62 | - $this->calendarInfo['{DAV:}displayname'] = $l10n->t('Contact birthdays'); |
|
| 63 | - } |
|
| 64 | - if ($this->getName() === CalDavBackend::PERSONAL_CALENDAR_URI && |
|
| 65 | - $this->calendarInfo['{DAV:}displayname'] === CalDavBackend::PERSONAL_CALENDAR_NAME) { |
|
| 66 | - $this->calendarInfo['{DAV:}displayname'] = $l10n->t('Personal'); |
|
| 67 | - } |
|
| 68 | - |
|
| 69 | - $this->config = $config; |
|
| 70 | - } |
|
| 71 | - |
|
| 72 | - /** |
|
| 73 | - * Updates the list of shares. |
|
| 74 | - * |
|
| 75 | - * The first array is a list of people that are to be added to the |
|
| 76 | - * resource. |
|
| 77 | - * |
|
| 78 | - * Every element in the add array has the following properties: |
|
| 79 | - * * href - A url. Usually a mailto: address |
|
| 80 | - * * commonName - Usually a first and last name, or false |
|
| 81 | - * * summary - A description of the share, can also be false |
|
| 82 | - * * readOnly - A boolean value |
|
| 83 | - * |
|
| 84 | - * Every element in the remove array is just the address string. |
|
| 85 | - * |
|
| 86 | - * @param array $add |
|
| 87 | - * @param array $remove |
|
| 88 | - * @return void |
|
| 89 | - * @throws Forbidden |
|
| 90 | - */ |
|
| 91 | - public function updateShares(array $add, array $remove) { |
|
| 92 | - if ($this->isShared()) { |
|
| 93 | - throw new Forbidden(); |
|
| 94 | - } |
|
| 95 | - $this->caldavBackend->updateShares($this, $add, $remove); |
|
| 96 | - } |
|
| 97 | - |
|
| 98 | - /** |
|
| 99 | - * Returns the list of people whom this resource is shared with. |
|
| 100 | - * |
|
| 101 | - * Every element in this array should have the following properties: |
|
| 102 | - * * href - Often a mailto: address |
|
| 103 | - * * commonName - Optional, for example a first + last name |
|
| 104 | - * * status - See the Sabre\CalDAV\SharingPlugin::STATUS_ constants. |
|
| 105 | - * * readOnly - boolean |
|
| 106 | - * * summary - Optional, a description for the share |
|
| 107 | - * |
|
| 108 | - * @return array |
|
| 109 | - */ |
|
| 110 | - public function getShares() { |
|
| 111 | - if ($this->isShared()) { |
|
| 112 | - return []; |
|
| 113 | - } |
|
| 114 | - return $this->caldavBackend->getShares($this->getResourceId()); |
|
| 115 | - } |
|
| 116 | - |
|
| 117 | - /** |
|
| 118 | - * @return int |
|
| 119 | - */ |
|
| 120 | - public function getResourceId() { |
|
| 121 | - return $this->calendarInfo['id']; |
|
| 122 | - } |
|
| 123 | - |
|
| 124 | - /** |
|
| 125 | - * @return string |
|
| 126 | - */ |
|
| 127 | - public function getPrincipalURI() { |
|
| 128 | - return $this->calendarInfo['principaluri']; |
|
| 129 | - } |
|
| 130 | - |
|
| 131 | - /** |
|
| 132 | - * @return array |
|
| 133 | - */ |
|
| 134 | - public function getACL() { |
|
| 135 | - $acl = [ |
|
| 136 | - [ |
|
| 137 | - 'privilege' => '{DAV:}read', |
|
| 138 | - 'principal' => $this->getOwner(), |
|
| 139 | - 'protected' => true, |
|
| 140 | - ], |
|
| 141 | - [ |
|
| 142 | - 'privilege' => '{DAV:}read', |
|
| 143 | - 'principal' => $this->getOwner() . '/calendar-proxy-write', |
|
| 144 | - 'protected' => true, |
|
| 145 | - ], |
|
| 146 | - [ |
|
| 147 | - 'privilege' => '{DAV:}read', |
|
| 148 | - 'principal' => $this->getOwner() . '/calendar-proxy-read', |
|
| 149 | - 'protected' => true, |
|
| 150 | - ], |
|
| 151 | - ]; |
|
| 152 | - |
|
| 153 | - if ($this->getName() !== BirthdayService::BIRTHDAY_CALENDAR_URI) { |
|
| 154 | - $acl[] = [ |
|
| 155 | - 'privilege' => '{DAV:}write', |
|
| 156 | - 'principal' => $this->getOwner(), |
|
| 157 | - 'protected' => true, |
|
| 158 | - ]; |
|
| 159 | - $acl[] = [ |
|
| 160 | - 'privilege' => '{DAV:}write', |
|
| 161 | - 'principal' => $this->getOwner() . '/calendar-proxy-write', |
|
| 162 | - 'protected' => true, |
|
| 163 | - ]; |
|
| 164 | - } else { |
|
| 165 | - $acl[] = [ |
|
| 166 | - 'privilege' => '{DAV:}write-properties', |
|
| 167 | - 'principal' => $this->getOwner(), |
|
| 168 | - 'protected' => true, |
|
| 169 | - ]; |
|
| 170 | - $acl[] = [ |
|
| 171 | - 'privilege' => '{DAV:}write-properties', |
|
| 172 | - 'principal' => $this->getOwner() . '/calendar-proxy-write', |
|
| 173 | - 'protected' => true, |
|
| 174 | - ]; |
|
| 175 | - } |
|
| 176 | - |
|
| 177 | - $acl[] = [ |
|
| 178 | - 'privilege' => '{DAV:}write-properties', |
|
| 179 | - 'principal' => $this->getOwner() . '/calendar-proxy-read', |
|
| 180 | - 'protected' => true, |
|
| 181 | - ]; |
|
| 182 | - |
|
| 183 | - if (!$this->isShared()) { |
|
| 184 | - return $acl; |
|
| 185 | - } |
|
| 186 | - |
|
| 187 | - if ($this->getOwner() !== parent::getOwner()) { |
|
| 188 | - $acl[] = [ |
|
| 189 | - 'privilege' => '{DAV:}read', |
|
| 190 | - 'principal' => parent::getOwner(), |
|
| 191 | - 'protected' => true, |
|
| 192 | - ]; |
|
| 193 | - if ($this->canWrite()) { |
|
| 194 | - $acl[] = [ |
|
| 195 | - 'privilege' => '{DAV:}write', |
|
| 196 | - 'principal' => parent::getOwner(), |
|
| 197 | - 'protected' => true, |
|
| 198 | - ]; |
|
| 199 | - } else { |
|
| 200 | - $acl[] = [ |
|
| 201 | - 'privilege' => '{DAV:}write-properties', |
|
| 202 | - 'principal' => parent::getOwner(), |
|
| 203 | - 'protected' => true, |
|
| 204 | - ]; |
|
| 205 | - } |
|
| 206 | - } |
|
| 207 | - if ($this->isPublic()) { |
|
| 208 | - $acl[] = [ |
|
| 209 | - 'privilege' => '{DAV:}read', |
|
| 210 | - 'principal' => 'principals/system/public', |
|
| 211 | - 'protected' => true, |
|
| 212 | - ]; |
|
| 213 | - } |
|
| 214 | - |
|
| 215 | - $acl = $this->caldavBackend->applyShareAcl($this->getResourceId(), $acl); |
|
| 216 | - $allowedPrincipals = [ |
|
| 217 | - $this->getOwner(), |
|
| 218 | - $this->getOwner(). '/calendar-proxy-read', |
|
| 219 | - $this->getOwner(). '/calendar-proxy-write', |
|
| 220 | - parent::getOwner(), |
|
| 221 | - 'principals/system/public' |
|
| 222 | - ]; |
|
| 223 | - return array_filter($acl, function($rule) use ($allowedPrincipals) { |
|
| 224 | - return \in_array($rule['principal'], $allowedPrincipals, true); |
|
| 225 | - }); |
|
| 226 | - } |
|
| 227 | - |
|
| 228 | - public function getChildACL() { |
|
| 229 | - return $this->getACL(); |
|
| 230 | - } |
|
| 231 | - |
|
| 232 | - public function getOwner() { |
|
| 233 | - if (isset($this->calendarInfo['{http://owncloud.org/ns}owner-principal'])) { |
|
| 234 | - return $this->calendarInfo['{http://owncloud.org/ns}owner-principal']; |
|
| 235 | - } |
|
| 236 | - return parent::getOwner(); |
|
| 237 | - } |
|
| 238 | - |
|
| 239 | - public function delete() { |
|
| 240 | - if (isset($this->calendarInfo['{http://owncloud.org/ns}owner-principal']) && |
|
| 241 | - $this->calendarInfo['{http://owncloud.org/ns}owner-principal'] !== $this->calendarInfo['principaluri']) { |
|
| 242 | - $principal = 'principal:' . parent::getOwner(); |
|
| 243 | - $shares = $this->caldavBackend->getShares($this->getResourceId()); |
|
| 244 | - $shares = array_filter($shares, function($share) use ($principal){ |
|
| 245 | - return $share['href'] === $principal; |
|
| 246 | - }); |
|
| 247 | - if (empty($shares)) { |
|
| 248 | - throw new Forbidden(); |
|
| 249 | - } |
|
| 250 | - |
|
| 251 | - $this->caldavBackend->updateShares($this, [], [ |
|
| 252 | - $principal |
|
| 253 | - ]); |
|
| 254 | - return; |
|
| 255 | - } |
|
| 256 | - |
|
| 257 | - // Remember when a user deleted their birthday calendar |
|
| 258 | - // in order to not regenerate it on the next contacts change |
|
| 259 | - if ($this->getName() === BirthdayService::BIRTHDAY_CALENDAR_URI) { |
|
| 260 | - $principalURI = $this->getPrincipalURI(); |
|
| 261 | - $userId = substr($principalURI, 17); |
|
| 262 | - |
|
| 263 | - $this->config->setUserValue($userId, 'dav', 'generateBirthdayCalendar', 'no'); |
|
| 264 | - } |
|
| 265 | - |
|
| 266 | - parent::delete(); |
|
| 267 | - } |
|
| 268 | - |
|
| 269 | - public function propPatch(PropPatch $propPatch) { |
|
| 270 | - // parent::propPatch will only update calendars table |
|
| 271 | - // if calendar is shared, changes have to be made to the properties table |
|
| 272 | - if (!$this->isShared()) { |
|
| 273 | - parent::propPatch($propPatch); |
|
| 274 | - } |
|
| 275 | - } |
|
| 276 | - |
|
| 277 | - public function getChild($name) { |
|
| 278 | - |
|
| 279 | - $obj = $this->caldavBackend->getCalendarObject($this->calendarInfo['id'], $name); |
|
| 280 | - |
|
| 281 | - if (!$obj) { |
|
| 282 | - throw new NotFound('Calendar object not found'); |
|
| 283 | - } |
|
| 284 | - |
|
| 285 | - if ($obj['classification'] === CalDavBackend::CLASSIFICATION_PRIVATE && $this->isShared()) { |
|
| 286 | - throw new NotFound('Calendar object not found'); |
|
| 287 | - } |
|
| 288 | - |
|
| 289 | - $obj['acl'] = $this->getChildACL(); |
|
| 290 | - |
|
| 291 | - return new CalendarObject($this->caldavBackend, $this->calendarInfo, $obj); |
|
| 292 | - |
|
| 293 | - } |
|
| 294 | - |
|
| 295 | - public function getChildren() { |
|
| 296 | - |
|
| 297 | - $objs = $this->caldavBackend->getCalendarObjects($this->calendarInfo['id']); |
|
| 298 | - $children = []; |
|
| 299 | - foreach ($objs as $obj) { |
|
| 300 | - if ($obj['classification'] === CalDavBackend::CLASSIFICATION_PRIVATE && $this->isShared()) { |
|
| 301 | - continue; |
|
| 302 | - } |
|
| 303 | - $obj['acl'] = $this->getChildACL(); |
|
| 304 | - $children[] = new CalendarObject($this->caldavBackend, $this->calendarInfo, $obj); |
|
| 305 | - } |
|
| 306 | - return $children; |
|
| 307 | - |
|
| 308 | - } |
|
| 309 | - |
|
| 310 | - public function getMultipleChildren(array $paths) { |
|
| 311 | - |
|
| 312 | - $objs = $this->caldavBackend->getMultipleCalendarObjects($this->calendarInfo['id'], $paths); |
|
| 313 | - $children = []; |
|
| 314 | - foreach ($objs as $obj) { |
|
| 315 | - if ($obj['classification'] === CalDavBackend::CLASSIFICATION_PRIVATE && $this->isShared()) { |
|
| 316 | - continue; |
|
| 317 | - } |
|
| 318 | - $obj['acl'] = $this->getChildACL(); |
|
| 319 | - $children[] = new CalendarObject($this->caldavBackend, $this->calendarInfo, $obj); |
|
| 320 | - } |
|
| 321 | - return $children; |
|
| 322 | - |
|
| 323 | - } |
|
| 324 | - |
|
| 325 | - public function childExists($name) { |
|
| 326 | - $obj = $this->caldavBackend->getCalendarObject($this->calendarInfo['id'], $name); |
|
| 327 | - if (!$obj) { |
|
| 328 | - return false; |
|
| 329 | - } |
|
| 330 | - if ($obj['classification'] === CalDavBackend::CLASSIFICATION_PRIVATE && $this->isShared()) { |
|
| 331 | - return false; |
|
| 332 | - } |
|
| 333 | - |
|
| 334 | - return true; |
|
| 335 | - } |
|
| 336 | - |
|
| 337 | - public function calendarQuery(array $filters) { |
|
| 338 | - |
|
| 339 | - $uris = $this->caldavBackend->calendarQuery($this->calendarInfo['id'], $filters); |
|
| 340 | - if ($this->isShared()) { |
|
| 341 | - return array_filter($uris, function ($uri) { |
|
| 342 | - return $this->childExists($uri); |
|
| 343 | - }); |
|
| 344 | - } |
|
| 345 | - |
|
| 346 | - return $uris; |
|
| 347 | - } |
|
| 348 | - |
|
| 349 | - /** |
|
| 350 | - * @param boolean $value |
|
| 351 | - * @return string|null |
|
| 352 | - */ |
|
| 353 | - public function setPublishStatus($value) { |
|
| 354 | - $publicUri = $this->caldavBackend->setPublishStatus($value, $this); |
|
| 355 | - $this->calendarInfo['publicuri'] = $publicUri; |
|
| 356 | - return $publicUri; |
|
| 357 | - } |
|
| 358 | - |
|
| 359 | - /** |
|
| 360 | - * @return mixed $value |
|
| 361 | - */ |
|
| 362 | - public function getPublishStatus() { |
|
| 363 | - return $this->caldavBackend->getPublishStatus($this); |
|
| 364 | - } |
|
| 365 | - |
|
| 366 | - private function canWrite() { |
|
| 367 | - if (isset($this->calendarInfo['{http://owncloud.org/ns}read-only'])) { |
|
| 368 | - return !$this->calendarInfo['{http://owncloud.org/ns}read-only']; |
|
| 369 | - } |
|
| 370 | - return true; |
|
| 371 | - } |
|
| 372 | - |
|
| 373 | - private function isPublic() { |
|
| 374 | - return isset($this->calendarInfo['{http://owncloud.org/ns}public']); |
|
| 375 | - } |
|
| 376 | - |
|
| 377 | - protected function isShared() { |
|
| 378 | - if (!isset($this->calendarInfo['{http://owncloud.org/ns}owner-principal'])) { |
|
| 379 | - return false; |
|
| 380 | - } |
|
| 381 | - |
|
| 382 | - return $this->calendarInfo['{http://owncloud.org/ns}owner-principal'] !== $this->calendarInfo['principaluri']; |
|
| 383 | - } |
|
| 384 | - |
|
| 385 | - public function isSubscription() { |
|
| 386 | - return isset($this->calendarInfo['{http://calendarserver.org/ns/}source']); |
|
| 387 | - } |
|
| 388 | - |
|
| 389 | - /** |
|
| 390 | - * @inheritDoc |
|
| 391 | - */ |
|
| 392 | - public function getChanges($syncToken, $syncLevel, $limit = null) { |
|
| 393 | - if (!$syncToken && $limit) { |
|
| 394 | - throw new UnsupportedLimitOnInitialSyncException(); |
|
| 395 | - } |
|
| 396 | - |
|
| 397 | - return parent::getChanges($syncToken, $syncLevel, $limit); |
|
| 398 | - } |
|
| 47 | + /** @var IConfig */ |
|
| 48 | + private $config; |
|
| 49 | + |
|
| 50 | + /** |
|
| 51 | + * Calendar constructor. |
|
| 52 | + * |
|
| 53 | + * @param BackendInterface $caldavBackend |
|
| 54 | + * @param $calendarInfo |
|
| 55 | + * @param IL10N $l10n |
|
| 56 | + * @param IConfig $config |
|
| 57 | + */ |
|
| 58 | + public function __construct(BackendInterface $caldavBackend, $calendarInfo, IL10N $l10n, IConfig $config) { |
|
| 59 | + parent::__construct($caldavBackend, $calendarInfo); |
|
| 60 | + |
|
| 61 | + if ($this->getName() === BirthdayService::BIRTHDAY_CALENDAR_URI) { |
|
| 62 | + $this->calendarInfo['{DAV:}displayname'] = $l10n->t('Contact birthdays'); |
|
| 63 | + } |
|
| 64 | + if ($this->getName() === CalDavBackend::PERSONAL_CALENDAR_URI && |
|
| 65 | + $this->calendarInfo['{DAV:}displayname'] === CalDavBackend::PERSONAL_CALENDAR_NAME) { |
|
| 66 | + $this->calendarInfo['{DAV:}displayname'] = $l10n->t('Personal'); |
|
| 67 | + } |
|
| 68 | + |
|
| 69 | + $this->config = $config; |
|
| 70 | + } |
|
| 71 | + |
|
| 72 | + /** |
|
| 73 | + * Updates the list of shares. |
|
| 74 | + * |
|
| 75 | + * The first array is a list of people that are to be added to the |
|
| 76 | + * resource. |
|
| 77 | + * |
|
| 78 | + * Every element in the add array has the following properties: |
|
| 79 | + * * href - A url. Usually a mailto: address |
|
| 80 | + * * commonName - Usually a first and last name, or false |
|
| 81 | + * * summary - A description of the share, can also be false |
|
| 82 | + * * readOnly - A boolean value |
|
| 83 | + * |
|
| 84 | + * Every element in the remove array is just the address string. |
|
| 85 | + * |
|
| 86 | + * @param array $add |
|
| 87 | + * @param array $remove |
|
| 88 | + * @return void |
|
| 89 | + * @throws Forbidden |
|
| 90 | + */ |
|
| 91 | + public function updateShares(array $add, array $remove) { |
|
| 92 | + if ($this->isShared()) { |
|
| 93 | + throw new Forbidden(); |
|
| 94 | + } |
|
| 95 | + $this->caldavBackend->updateShares($this, $add, $remove); |
|
| 96 | + } |
|
| 97 | + |
|
| 98 | + /** |
|
| 99 | + * Returns the list of people whom this resource is shared with. |
|
| 100 | + * |
|
| 101 | + * Every element in this array should have the following properties: |
|
| 102 | + * * href - Often a mailto: address |
|
| 103 | + * * commonName - Optional, for example a first + last name |
|
| 104 | + * * status - See the Sabre\CalDAV\SharingPlugin::STATUS_ constants. |
|
| 105 | + * * readOnly - boolean |
|
| 106 | + * * summary - Optional, a description for the share |
|
| 107 | + * |
|
| 108 | + * @return array |
|
| 109 | + */ |
|
| 110 | + public function getShares() { |
|
| 111 | + if ($this->isShared()) { |
|
| 112 | + return []; |
|
| 113 | + } |
|
| 114 | + return $this->caldavBackend->getShares($this->getResourceId()); |
|
| 115 | + } |
|
| 116 | + |
|
| 117 | + /** |
|
| 118 | + * @return int |
|
| 119 | + */ |
|
| 120 | + public function getResourceId() { |
|
| 121 | + return $this->calendarInfo['id']; |
|
| 122 | + } |
|
| 123 | + |
|
| 124 | + /** |
|
| 125 | + * @return string |
|
| 126 | + */ |
|
| 127 | + public function getPrincipalURI() { |
|
| 128 | + return $this->calendarInfo['principaluri']; |
|
| 129 | + } |
|
| 130 | + |
|
| 131 | + /** |
|
| 132 | + * @return array |
|
| 133 | + */ |
|
| 134 | + public function getACL() { |
|
| 135 | + $acl = [ |
|
| 136 | + [ |
|
| 137 | + 'privilege' => '{DAV:}read', |
|
| 138 | + 'principal' => $this->getOwner(), |
|
| 139 | + 'protected' => true, |
|
| 140 | + ], |
|
| 141 | + [ |
|
| 142 | + 'privilege' => '{DAV:}read', |
|
| 143 | + 'principal' => $this->getOwner() . '/calendar-proxy-write', |
|
| 144 | + 'protected' => true, |
|
| 145 | + ], |
|
| 146 | + [ |
|
| 147 | + 'privilege' => '{DAV:}read', |
|
| 148 | + 'principal' => $this->getOwner() . '/calendar-proxy-read', |
|
| 149 | + 'protected' => true, |
|
| 150 | + ], |
|
| 151 | + ]; |
|
| 152 | + |
|
| 153 | + if ($this->getName() !== BirthdayService::BIRTHDAY_CALENDAR_URI) { |
|
| 154 | + $acl[] = [ |
|
| 155 | + 'privilege' => '{DAV:}write', |
|
| 156 | + 'principal' => $this->getOwner(), |
|
| 157 | + 'protected' => true, |
|
| 158 | + ]; |
|
| 159 | + $acl[] = [ |
|
| 160 | + 'privilege' => '{DAV:}write', |
|
| 161 | + 'principal' => $this->getOwner() . '/calendar-proxy-write', |
|
| 162 | + 'protected' => true, |
|
| 163 | + ]; |
|
| 164 | + } else { |
|
| 165 | + $acl[] = [ |
|
| 166 | + 'privilege' => '{DAV:}write-properties', |
|
| 167 | + 'principal' => $this->getOwner(), |
|
| 168 | + 'protected' => true, |
|
| 169 | + ]; |
|
| 170 | + $acl[] = [ |
|
| 171 | + 'privilege' => '{DAV:}write-properties', |
|
| 172 | + 'principal' => $this->getOwner() . '/calendar-proxy-write', |
|
| 173 | + 'protected' => true, |
|
| 174 | + ]; |
|
| 175 | + } |
|
| 176 | + |
|
| 177 | + $acl[] = [ |
|
| 178 | + 'privilege' => '{DAV:}write-properties', |
|
| 179 | + 'principal' => $this->getOwner() . '/calendar-proxy-read', |
|
| 180 | + 'protected' => true, |
|
| 181 | + ]; |
|
| 182 | + |
|
| 183 | + if (!$this->isShared()) { |
|
| 184 | + return $acl; |
|
| 185 | + } |
|
| 186 | + |
|
| 187 | + if ($this->getOwner() !== parent::getOwner()) { |
|
| 188 | + $acl[] = [ |
|
| 189 | + 'privilege' => '{DAV:}read', |
|
| 190 | + 'principal' => parent::getOwner(), |
|
| 191 | + 'protected' => true, |
|
| 192 | + ]; |
|
| 193 | + if ($this->canWrite()) { |
|
| 194 | + $acl[] = [ |
|
| 195 | + 'privilege' => '{DAV:}write', |
|
| 196 | + 'principal' => parent::getOwner(), |
|
| 197 | + 'protected' => true, |
|
| 198 | + ]; |
|
| 199 | + } else { |
|
| 200 | + $acl[] = [ |
|
| 201 | + 'privilege' => '{DAV:}write-properties', |
|
| 202 | + 'principal' => parent::getOwner(), |
|
| 203 | + 'protected' => true, |
|
| 204 | + ]; |
|
| 205 | + } |
|
| 206 | + } |
|
| 207 | + if ($this->isPublic()) { |
|
| 208 | + $acl[] = [ |
|
| 209 | + 'privilege' => '{DAV:}read', |
|
| 210 | + 'principal' => 'principals/system/public', |
|
| 211 | + 'protected' => true, |
|
| 212 | + ]; |
|
| 213 | + } |
|
| 214 | + |
|
| 215 | + $acl = $this->caldavBackend->applyShareAcl($this->getResourceId(), $acl); |
|
| 216 | + $allowedPrincipals = [ |
|
| 217 | + $this->getOwner(), |
|
| 218 | + $this->getOwner(). '/calendar-proxy-read', |
|
| 219 | + $this->getOwner(). '/calendar-proxy-write', |
|
| 220 | + parent::getOwner(), |
|
| 221 | + 'principals/system/public' |
|
| 222 | + ]; |
|
| 223 | + return array_filter($acl, function($rule) use ($allowedPrincipals) { |
|
| 224 | + return \in_array($rule['principal'], $allowedPrincipals, true); |
|
| 225 | + }); |
|
| 226 | + } |
|
| 227 | + |
|
| 228 | + public function getChildACL() { |
|
| 229 | + return $this->getACL(); |
|
| 230 | + } |
|
| 231 | + |
|
| 232 | + public function getOwner() { |
|
| 233 | + if (isset($this->calendarInfo['{http://owncloud.org/ns}owner-principal'])) { |
|
| 234 | + return $this->calendarInfo['{http://owncloud.org/ns}owner-principal']; |
|
| 235 | + } |
|
| 236 | + return parent::getOwner(); |
|
| 237 | + } |
|
| 238 | + |
|
| 239 | + public function delete() { |
|
| 240 | + if (isset($this->calendarInfo['{http://owncloud.org/ns}owner-principal']) && |
|
| 241 | + $this->calendarInfo['{http://owncloud.org/ns}owner-principal'] !== $this->calendarInfo['principaluri']) { |
|
| 242 | + $principal = 'principal:' . parent::getOwner(); |
|
| 243 | + $shares = $this->caldavBackend->getShares($this->getResourceId()); |
|
| 244 | + $shares = array_filter($shares, function($share) use ($principal){ |
|
| 245 | + return $share['href'] === $principal; |
|
| 246 | + }); |
|
| 247 | + if (empty($shares)) { |
|
| 248 | + throw new Forbidden(); |
|
| 249 | + } |
|
| 250 | + |
|
| 251 | + $this->caldavBackend->updateShares($this, [], [ |
|
| 252 | + $principal |
|
| 253 | + ]); |
|
| 254 | + return; |
|
| 255 | + } |
|
| 256 | + |
|
| 257 | + // Remember when a user deleted their birthday calendar |
|
| 258 | + // in order to not regenerate it on the next contacts change |
|
| 259 | + if ($this->getName() === BirthdayService::BIRTHDAY_CALENDAR_URI) { |
|
| 260 | + $principalURI = $this->getPrincipalURI(); |
|
| 261 | + $userId = substr($principalURI, 17); |
|
| 262 | + |
|
| 263 | + $this->config->setUserValue($userId, 'dav', 'generateBirthdayCalendar', 'no'); |
|
| 264 | + } |
|
| 265 | + |
|
| 266 | + parent::delete(); |
|
| 267 | + } |
|
| 268 | + |
|
| 269 | + public function propPatch(PropPatch $propPatch) { |
|
| 270 | + // parent::propPatch will only update calendars table |
|
| 271 | + // if calendar is shared, changes have to be made to the properties table |
|
| 272 | + if (!$this->isShared()) { |
|
| 273 | + parent::propPatch($propPatch); |
|
| 274 | + } |
|
| 275 | + } |
|
| 276 | + |
|
| 277 | + public function getChild($name) { |
|
| 278 | + |
|
| 279 | + $obj = $this->caldavBackend->getCalendarObject($this->calendarInfo['id'], $name); |
|
| 280 | + |
|
| 281 | + if (!$obj) { |
|
| 282 | + throw new NotFound('Calendar object not found'); |
|
| 283 | + } |
|
| 284 | + |
|
| 285 | + if ($obj['classification'] === CalDavBackend::CLASSIFICATION_PRIVATE && $this->isShared()) { |
|
| 286 | + throw new NotFound('Calendar object not found'); |
|
| 287 | + } |
|
| 288 | + |
|
| 289 | + $obj['acl'] = $this->getChildACL(); |
|
| 290 | + |
|
| 291 | + return new CalendarObject($this->caldavBackend, $this->calendarInfo, $obj); |
|
| 292 | + |
|
| 293 | + } |
|
| 294 | + |
|
| 295 | + public function getChildren() { |
|
| 296 | + |
|
| 297 | + $objs = $this->caldavBackend->getCalendarObjects($this->calendarInfo['id']); |
|
| 298 | + $children = []; |
|
| 299 | + foreach ($objs as $obj) { |
|
| 300 | + if ($obj['classification'] === CalDavBackend::CLASSIFICATION_PRIVATE && $this->isShared()) { |
|
| 301 | + continue; |
|
| 302 | + } |
|
| 303 | + $obj['acl'] = $this->getChildACL(); |
|
| 304 | + $children[] = new CalendarObject($this->caldavBackend, $this->calendarInfo, $obj); |
|
| 305 | + } |
|
| 306 | + return $children; |
|
| 307 | + |
|
| 308 | + } |
|
| 309 | + |
|
| 310 | + public function getMultipleChildren(array $paths) { |
|
| 311 | + |
|
| 312 | + $objs = $this->caldavBackend->getMultipleCalendarObjects($this->calendarInfo['id'], $paths); |
|
| 313 | + $children = []; |
|
| 314 | + foreach ($objs as $obj) { |
|
| 315 | + if ($obj['classification'] === CalDavBackend::CLASSIFICATION_PRIVATE && $this->isShared()) { |
|
| 316 | + continue; |
|
| 317 | + } |
|
| 318 | + $obj['acl'] = $this->getChildACL(); |
|
| 319 | + $children[] = new CalendarObject($this->caldavBackend, $this->calendarInfo, $obj); |
|
| 320 | + } |
|
| 321 | + return $children; |
|
| 322 | + |
|
| 323 | + } |
|
| 324 | + |
|
| 325 | + public function childExists($name) { |
|
| 326 | + $obj = $this->caldavBackend->getCalendarObject($this->calendarInfo['id'], $name); |
|
| 327 | + if (!$obj) { |
|
| 328 | + return false; |
|
| 329 | + } |
|
| 330 | + if ($obj['classification'] === CalDavBackend::CLASSIFICATION_PRIVATE && $this->isShared()) { |
|
| 331 | + return false; |
|
| 332 | + } |
|
| 333 | + |
|
| 334 | + return true; |
|
| 335 | + } |
|
| 336 | + |
|
| 337 | + public function calendarQuery(array $filters) { |
|
| 338 | + |
|
| 339 | + $uris = $this->caldavBackend->calendarQuery($this->calendarInfo['id'], $filters); |
|
| 340 | + if ($this->isShared()) { |
|
| 341 | + return array_filter($uris, function ($uri) { |
|
| 342 | + return $this->childExists($uri); |
|
| 343 | + }); |
|
| 344 | + } |
|
| 345 | + |
|
| 346 | + return $uris; |
|
| 347 | + } |
|
| 348 | + |
|
| 349 | + /** |
|
| 350 | + * @param boolean $value |
|
| 351 | + * @return string|null |
|
| 352 | + */ |
|
| 353 | + public function setPublishStatus($value) { |
|
| 354 | + $publicUri = $this->caldavBackend->setPublishStatus($value, $this); |
|
| 355 | + $this->calendarInfo['publicuri'] = $publicUri; |
|
| 356 | + return $publicUri; |
|
| 357 | + } |
|
| 358 | + |
|
| 359 | + /** |
|
| 360 | + * @return mixed $value |
|
| 361 | + */ |
|
| 362 | + public function getPublishStatus() { |
|
| 363 | + return $this->caldavBackend->getPublishStatus($this); |
|
| 364 | + } |
|
| 365 | + |
|
| 366 | + private function canWrite() { |
|
| 367 | + if (isset($this->calendarInfo['{http://owncloud.org/ns}read-only'])) { |
|
| 368 | + return !$this->calendarInfo['{http://owncloud.org/ns}read-only']; |
|
| 369 | + } |
|
| 370 | + return true; |
|
| 371 | + } |
|
| 372 | + |
|
| 373 | + private function isPublic() { |
|
| 374 | + return isset($this->calendarInfo['{http://owncloud.org/ns}public']); |
|
| 375 | + } |
|
| 376 | + |
|
| 377 | + protected function isShared() { |
|
| 378 | + if (!isset($this->calendarInfo['{http://owncloud.org/ns}owner-principal'])) { |
|
| 379 | + return false; |
|
| 380 | + } |
|
| 381 | + |
|
| 382 | + return $this->calendarInfo['{http://owncloud.org/ns}owner-principal'] !== $this->calendarInfo['principaluri']; |
|
| 383 | + } |
|
| 384 | + |
|
| 385 | + public function isSubscription() { |
|
| 386 | + return isset($this->calendarInfo['{http://calendarserver.org/ns/}source']); |
|
| 387 | + } |
|
| 388 | + |
|
| 389 | + /** |
|
| 390 | + * @inheritDoc |
|
| 391 | + */ |
|
| 392 | + public function getChanges($syncToken, $syncLevel, $limit = null) { |
|
| 393 | + if (!$syncToken && $limit) { |
|
| 394 | + throw new UnsupportedLimitOnInitialSyncException(); |
|
| 395 | + } |
|
| 396 | + |
|
| 397 | + return parent::getChanges($syncToken, $syncLevel, $limit); |
|
| 398 | + } |
|
| 399 | 399 | } |
@@ -132,7 +132,7 @@ discard block |
||
| 132 | 132 | * @return array |
| 133 | 133 | */ |
| 134 | 134 | public function getACL() { |
| 135 | - $acl = [ |
|
| 135 | + $acl = [ |
|
| 136 | 136 | [ |
| 137 | 137 | 'privilege' => '{DAV:}read', |
| 138 | 138 | 'principal' => $this->getOwner(), |
@@ -140,12 +140,12 @@ discard block |
||
| 140 | 140 | ], |
| 141 | 141 | [ |
| 142 | 142 | 'privilege' => '{DAV:}read', |
| 143 | - 'principal' => $this->getOwner() . '/calendar-proxy-write', |
|
| 143 | + 'principal' => $this->getOwner().'/calendar-proxy-write', |
|
| 144 | 144 | 'protected' => true, |
| 145 | 145 | ], |
| 146 | 146 | [ |
| 147 | 147 | 'privilege' => '{DAV:}read', |
| 148 | - 'principal' => $this->getOwner() . '/calendar-proxy-read', |
|
| 148 | + 'principal' => $this->getOwner().'/calendar-proxy-read', |
|
| 149 | 149 | 'protected' => true, |
| 150 | 150 | ], |
| 151 | 151 | ]; |
@@ -158,7 +158,7 @@ discard block |
||
| 158 | 158 | ]; |
| 159 | 159 | $acl[] = [ |
| 160 | 160 | 'privilege' => '{DAV:}write', |
| 161 | - 'principal' => $this->getOwner() . '/calendar-proxy-write', |
|
| 161 | + 'principal' => $this->getOwner().'/calendar-proxy-write', |
|
| 162 | 162 | 'protected' => true, |
| 163 | 163 | ]; |
| 164 | 164 | } else { |
@@ -169,14 +169,14 @@ discard block |
||
| 169 | 169 | ]; |
| 170 | 170 | $acl[] = [ |
| 171 | 171 | 'privilege' => '{DAV:}write-properties', |
| 172 | - 'principal' => $this->getOwner() . '/calendar-proxy-write', |
|
| 172 | + 'principal' => $this->getOwner().'/calendar-proxy-write', |
|
| 173 | 173 | 'protected' => true, |
| 174 | 174 | ]; |
| 175 | 175 | } |
| 176 | 176 | |
| 177 | 177 | $acl[] = [ |
| 178 | 178 | 'privilege' => '{DAV:}write-properties', |
| 179 | - 'principal' => $this->getOwner() . '/calendar-proxy-read', |
|
| 179 | + 'principal' => $this->getOwner().'/calendar-proxy-read', |
|
| 180 | 180 | 'protected' => true, |
| 181 | 181 | ]; |
| 182 | 182 | |
@@ -185,7 +185,7 @@ discard block |
||
| 185 | 185 | } |
| 186 | 186 | |
| 187 | 187 | if ($this->getOwner() !== parent::getOwner()) { |
| 188 | - $acl[] = [ |
|
| 188 | + $acl[] = [ |
|
| 189 | 189 | 'privilege' => '{DAV:}read', |
| 190 | 190 | 'principal' => parent::getOwner(), |
| 191 | 191 | 'protected' => true, |
@@ -215,8 +215,8 @@ discard block |
||
| 215 | 215 | $acl = $this->caldavBackend->applyShareAcl($this->getResourceId(), $acl); |
| 216 | 216 | $allowedPrincipals = [ |
| 217 | 217 | $this->getOwner(), |
| 218 | - $this->getOwner(). '/calendar-proxy-read', |
|
| 219 | - $this->getOwner(). '/calendar-proxy-write', |
|
| 218 | + $this->getOwner().'/calendar-proxy-read', |
|
| 219 | + $this->getOwner().'/calendar-proxy-write', |
|
| 220 | 220 | parent::getOwner(), |
| 221 | 221 | 'principals/system/public' |
| 222 | 222 | ]; |
@@ -239,7 +239,7 @@ discard block |
||
| 239 | 239 | public function delete() { |
| 240 | 240 | if (isset($this->calendarInfo['{http://owncloud.org/ns}owner-principal']) && |
| 241 | 241 | $this->calendarInfo['{http://owncloud.org/ns}owner-principal'] !== $this->calendarInfo['principaluri']) { |
| 242 | - $principal = 'principal:' . parent::getOwner(); |
|
| 242 | + $principal = 'principal:'.parent::getOwner(); |
|
| 243 | 243 | $shares = $this->caldavBackend->getShares($this->getResourceId()); |
| 244 | 244 | $shares = array_filter($shares, function($share) use ($principal){ |
| 245 | 245 | return $share['href'] === $principal; |
@@ -338,7 +338,7 @@ discard block |
||
| 338 | 338 | |
| 339 | 339 | $uris = $this->caldavBackend->calendarQuery($this->calendarInfo['id'], $filters); |
| 340 | 340 | if ($this->isShared()) { |
| 341 | - return array_filter($uris, function ($uri) { |
|
| 341 | + return array_filter($uris, function($uri) { |
|
| 342 | 342 | return $this->childExists($uri); |
| 343 | 343 | }); |
| 344 | 344 | } |
@@ -36,16 +36,16 @@ |
||
| 36 | 36 | */ |
| 37 | 37 | class Proxy extends Entity { |
| 38 | 38 | |
| 39 | - /** @var string */ |
|
| 40 | - protected $ownerId; |
|
| 41 | - /** @var string */ |
|
| 42 | - protected $proxyId; |
|
| 43 | - /** @var int */ |
|
| 44 | - protected $permissions; |
|
| 39 | + /** @var string */ |
|
| 40 | + protected $ownerId; |
|
| 41 | + /** @var string */ |
|
| 42 | + protected $proxyId; |
|
| 43 | + /** @var int */ |
|
| 44 | + protected $permissions; |
|
| 45 | 45 | |
| 46 | - public function __construct() { |
|
| 47 | - $this->addType('ownerId', 'string'); |
|
| 48 | - $this->addType('proxyId', 'string'); |
|
| 49 | - $this->addType('permissions', 'int'); |
|
| 50 | - } |
|
| 46 | + public function __construct() { |
|
| 47 | + $this->addType('ownerId', 'string'); |
|
| 48 | + $this->addType('proxyId', 'string'); |
|
| 49 | + $this->addType('permissions', 'int'); |
|
| 50 | + } |
|
| 51 | 51 | } |
@@ -34,45 +34,45 @@ |
||
| 34 | 34 | */ |
| 35 | 35 | class ProxyMapper extends QBMapper { |
| 36 | 36 | |
| 37 | - const PERMISSION_READ = 1; |
|
| 38 | - const PERMISSION_WRITE = 2; |
|
| 37 | + const PERMISSION_READ = 1; |
|
| 38 | + const PERMISSION_WRITE = 2; |
|
| 39 | 39 | |
| 40 | - /** |
|
| 41 | - * ProxyMapper constructor. |
|
| 42 | - * |
|
| 43 | - * @param IDBConnection $db |
|
| 44 | - */ |
|
| 45 | - public function __construct(IDBConnection $db) { |
|
| 46 | - parent::__construct($db, 'dav_cal_proxy', Proxy::class); |
|
| 47 | - } |
|
| 40 | + /** |
|
| 41 | + * ProxyMapper constructor. |
|
| 42 | + * |
|
| 43 | + * @param IDBConnection $db |
|
| 44 | + */ |
|
| 45 | + public function __construct(IDBConnection $db) { |
|
| 46 | + parent::__construct($db, 'dav_cal_proxy', Proxy::class); |
|
| 47 | + } |
|
| 48 | 48 | |
| 49 | - /** |
|
| 50 | - * @param string $proxyId The principal uri that can act as a proxy for the resulting calendars |
|
| 51 | - * |
|
| 52 | - * @return Proxy[] |
|
| 53 | - */ |
|
| 54 | - public function getProxiesFor(string $proxyId): array { |
|
| 55 | - $qb = $this->db->getQueryBuilder(); |
|
| 49 | + /** |
|
| 50 | + * @param string $proxyId The principal uri that can act as a proxy for the resulting calendars |
|
| 51 | + * |
|
| 52 | + * @return Proxy[] |
|
| 53 | + */ |
|
| 54 | + public function getProxiesFor(string $proxyId): array { |
|
| 55 | + $qb = $this->db->getQueryBuilder(); |
|
| 56 | 56 | |
| 57 | - $qb->select('*') |
|
| 58 | - ->from($this->getTableName()) |
|
| 59 | - ->where($qb->expr()->eq('proxy_id', $qb->createNamedParameter($proxyId))); |
|
| 57 | + $qb->select('*') |
|
| 58 | + ->from($this->getTableName()) |
|
| 59 | + ->where($qb->expr()->eq('proxy_id', $qb->createNamedParameter($proxyId))); |
|
| 60 | 60 | |
| 61 | - return $this->findEntities($qb); |
|
| 62 | - } |
|
| 61 | + return $this->findEntities($qb); |
|
| 62 | + } |
|
| 63 | 63 | |
| 64 | - /** |
|
| 65 | - * @param string $ownerId The principal uri that has the resulting proxies for their calendars |
|
| 66 | - * |
|
| 67 | - * @return Proxy[] |
|
| 68 | - */ |
|
| 69 | - public function getProxiesOf(string $ownerId): array { |
|
| 70 | - $qb = $this->db->getQueryBuilder(); |
|
| 64 | + /** |
|
| 65 | + * @param string $ownerId The principal uri that has the resulting proxies for their calendars |
|
| 66 | + * |
|
| 67 | + * @return Proxy[] |
|
| 68 | + */ |
|
| 69 | + public function getProxiesOf(string $ownerId): array { |
|
| 70 | + $qb = $this->db->getQueryBuilder(); |
|
| 71 | 71 | |
| 72 | - $qb->select('*') |
|
| 73 | - ->from($this->getTableName()) |
|
| 74 | - ->where($qb->expr()->eq('owner_id', $qb->createNamedParameter($ownerId))); |
|
| 72 | + $qb->select('*') |
|
| 73 | + ->from($this->getTableName()) |
|
| 74 | + ->where($qb->expr()->eq('owner_id', $qb->createNamedParameter($ownerId))); |
|
| 75 | 75 | |
| 76 | - return $this->findEntities($qb); |
|
| 77 | - } |
|
| 76 | + return $this->findEntities($qb); |
|
| 77 | + } |
|
| 78 | 78 | } |
@@ -35,21 +35,21 @@ |
||
| 35 | 35 | */ |
| 36 | 36 | class ResourcePrincipalBackend extends AbstractPrincipalBackend { |
| 37 | 37 | |
| 38 | - /** |
|
| 39 | - * ResourcePrincipalBackend constructor. |
|
| 40 | - * |
|
| 41 | - * @param IDBConnection $dbConnection |
|
| 42 | - * @param IUserSession $userSession |
|
| 43 | - * @param IGroupManager $groupManager |
|
| 44 | - * @param ILogger $logger |
|
| 45 | - * @param ProxyMapper $proxyMapper |
|
| 46 | - */ |
|
| 47 | - public function __construct(IDBConnection $dbConnection, |
|
| 48 | - IUserSession $userSession, |
|
| 49 | - IGroupManager $groupManager, |
|
| 50 | - ILogger $logger, |
|
| 51 | - ProxyMapper $proxyMapper) { |
|
| 52 | - parent::__construct($dbConnection, $userSession, $groupManager, $logger, |
|
| 53 | - $proxyMapper, 'principals/calendar-resources', 'resource', 'RESOURCE'); |
|
| 54 | - } |
|
| 38 | + /** |
|
| 39 | + * ResourcePrincipalBackend constructor. |
|
| 40 | + * |
|
| 41 | + * @param IDBConnection $dbConnection |
|
| 42 | + * @param IUserSession $userSession |
|
| 43 | + * @param IGroupManager $groupManager |
|
| 44 | + * @param ILogger $logger |
|
| 45 | + * @param ProxyMapper $proxyMapper |
|
| 46 | + */ |
|
| 47 | + public function __construct(IDBConnection $dbConnection, |
|
| 48 | + IUserSession $userSession, |
|
| 49 | + IGroupManager $groupManager, |
|
| 50 | + ILogger $logger, |
|
| 51 | + ProxyMapper $proxyMapper) { |
|
| 52 | + parent::__construct($dbConnection, $userSession, $groupManager, $logger, |
|
| 53 | + $proxyMapper, 'principals/calendar-resources', 'resource', 'RESOURCE'); |
|
| 54 | + } |
|
| 55 | 55 | } |
@@ -34,439 +34,439 @@ |
||
| 34 | 34 | |
| 35 | 35 | abstract class AbstractPrincipalBackend implements BackendInterface { |
| 36 | 36 | |
| 37 | - /** @var IDBConnection */ |
|
| 38 | - private $db; |
|
| 39 | - |
|
| 40 | - /** @var IUserSession */ |
|
| 41 | - private $userSession; |
|
| 42 | - |
|
| 43 | - /** @var IGroupManager */ |
|
| 44 | - private $groupManager; |
|
| 45 | - |
|
| 46 | - /** @var ILogger */ |
|
| 47 | - private $logger; |
|
| 48 | - |
|
| 49 | - /** @var ProxyMapper */ |
|
| 50 | - private $proxyMapper; |
|
| 51 | - |
|
| 52 | - /** @var string */ |
|
| 53 | - private $principalPrefix; |
|
| 54 | - |
|
| 55 | - /** @var string */ |
|
| 56 | - private $dbTableName; |
|
| 57 | - |
|
| 58 | - /** @var string */ |
|
| 59 | - private $dbMetaDataTableName; |
|
| 60 | - |
|
| 61 | - /** @var string */ |
|
| 62 | - private $dbForeignKeyName; |
|
| 63 | - |
|
| 64 | - /** @var string */ |
|
| 65 | - private $cuType; |
|
| 66 | - |
|
| 67 | - /** |
|
| 68 | - * @param IDBConnection $dbConnection |
|
| 69 | - * @param IUserSession $userSession |
|
| 70 | - * @param IGroupManager $groupManager |
|
| 71 | - * @param ILogger $logger |
|
| 72 | - * @param string $principalPrefix |
|
| 73 | - * @param string $dbPrefix |
|
| 74 | - * @param string $cuType |
|
| 75 | - */ |
|
| 76 | - public function __construct(IDBConnection $dbConnection, |
|
| 77 | - IUserSession $userSession, |
|
| 78 | - IGroupManager $groupManager, |
|
| 79 | - ILogger $logger, |
|
| 80 | - ProxyMapper $proxyMapper, |
|
| 81 | - string $principalPrefix, |
|
| 82 | - string $dbPrefix, |
|
| 83 | - string $cuType) { |
|
| 84 | - $this->db = $dbConnection; |
|
| 85 | - $this->userSession = $userSession; |
|
| 86 | - $this->groupManager = $groupManager; |
|
| 87 | - $this->logger = $logger; |
|
| 88 | - $this->proxyMapper = $proxyMapper; |
|
| 89 | - $this->principalPrefix = $principalPrefix; |
|
| 90 | - $this->dbTableName = 'calendar_' . $dbPrefix . 's'; |
|
| 91 | - $this->dbMetaDataTableName = $this->dbTableName . '_md'; |
|
| 92 | - $this->dbForeignKeyName = $dbPrefix . '_id'; |
|
| 93 | - $this->cuType = $cuType; |
|
| 94 | - } |
|
| 95 | - |
|
| 96 | - use PrincipalProxyTrait; |
|
| 97 | - |
|
| 98 | - /** |
|
| 99 | - * Returns a list of principals based on a prefix. |
|
| 100 | - * |
|
| 101 | - * This prefix will often contain something like 'principals'. You are only |
|
| 102 | - * expected to return principals that are in this base path. |
|
| 103 | - * |
|
| 104 | - * You are expected to return at least a 'uri' for every user, you can |
|
| 105 | - * return any additional properties if you wish so. Common properties are: |
|
| 106 | - * {DAV:}displayname |
|
| 107 | - * |
|
| 108 | - * @param string $prefixPath |
|
| 109 | - * @return string[] |
|
| 110 | - */ |
|
| 111 | - public function getPrincipalsByPrefix($prefixPath) { |
|
| 112 | - $principals = []; |
|
| 113 | - |
|
| 114 | - if ($prefixPath === $this->principalPrefix) { |
|
| 115 | - $query = $this->db->getQueryBuilder(); |
|
| 116 | - $query->select(['id', 'backend_id', 'resource_id', 'email', 'displayname']) |
|
| 117 | - ->from($this->dbTableName); |
|
| 118 | - $stmt = $query->execute(); |
|
| 119 | - |
|
| 120 | - $metaDataQuery = $this->db->getQueryBuilder(); |
|
| 121 | - $metaDataQuery->select([$this->dbForeignKeyName, 'key', 'value']) |
|
| 122 | - ->from($this->dbMetaDataTableName); |
|
| 123 | - $metaDataStmt = $metaDataQuery->execute(); |
|
| 124 | - $metaDataRows = $metaDataStmt->fetchAll(\PDO::FETCH_ASSOC); |
|
| 125 | - |
|
| 126 | - $metaDataById = []; |
|
| 127 | - foreach($metaDataRows as $metaDataRow) { |
|
| 128 | - if (!isset($metaDataById[$metaDataRow[$this->dbForeignKeyName]])) { |
|
| 129 | - $metaDataById[$metaDataRow[$this->dbForeignKeyName]] = []; |
|
| 130 | - } |
|
| 131 | - |
|
| 132 | - $metaDataById[$metaDataRow[$this->dbForeignKeyName]][$metaDataRow['key']] = |
|
| 133 | - $metaDataRow['value']; |
|
| 134 | - } |
|
| 135 | - |
|
| 136 | - while($row = $stmt->fetch(\PDO::FETCH_ASSOC)) { |
|
| 137 | - $id = $row['id']; |
|
| 138 | - |
|
| 139 | - if (isset($metaDataById[$id])) { |
|
| 140 | - $principals[] = $this->rowToPrincipal($row, $metaDataById[$id]); |
|
| 141 | - } else { |
|
| 142 | - $principals[] = $this->rowToPrincipal($row); |
|
| 143 | - } |
|
| 144 | - |
|
| 145 | - } |
|
| 146 | - |
|
| 147 | - $stmt->closeCursor(); |
|
| 148 | - } |
|
| 149 | - |
|
| 150 | - return $principals; |
|
| 151 | - } |
|
| 152 | - |
|
| 153 | - /** |
|
| 154 | - * Returns a specific principal, specified by it's path. |
|
| 155 | - * The returned structure should be the exact same as from |
|
| 156 | - * getPrincipalsByPrefix. |
|
| 157 | - * |
|
| 158 | - * @param string $path |
|
| 159 | - * @return array |
|
| 160 | - */ |
|
| 161 | - public function getPrincipalByPath($path) { |
|
| 162 | - if (strpos($path, $this->principalPrefix) !== 0) { |
|
| 163 | - return null; |
|
| 164 | - } |
|
| 165 | - list(, $name) = \Sabre\Uri\split($path); |
|
| 166 | - |
|
| 167 | - list($backendId, $resourceId) = explode('-', $name, 2); |
|
| 168 | - |
|
| 169 | - $query = $this->db->getQueryBuilder(); |
|
| 170 | - $query->select(['id', 'backend_id', 'resource_id', 'email', 'displayname']) |
|
| 171 | - ->from($this->dbTableName) |
|
| 172 | - ->where($query->expr()->eq('backend_id', $query->createNamedParameter($backendId))) |
|
| 173 | - ->andWhere($query->expr()->eq('resource_id', $query->createNamedParameter($resourceId))); |
|
| 174 | - $stmt = $query->execute(); |
|
| 175 | - $row = $stmt->fetch(\PDO::FETCH_ASSOC); |
|
| 176 | - |
|
| 177 | - if(!$row) { |
|
| 178 | - return null; |
|
| 179 | - } |
|
| 180 | - |
|
| 181 | - $metaDataQuery = $this->db->getQueryBuilder(); |
|
| 182 | - $metaDataQuery->select(['key', 'value']) |
|
| 183 | - ->from($this->dbMetaDataTableName) |
|
| 184 | - ->where($metaDataQuery->expr()->eq($this->dbForeignKeyName, $metaDataQuery->createNamedParameter($row['id']))); |
|
| 185 | - $metaDataStmt = $metaDataQuery->execute(); |
|
| 186 | - $metaDataRows = $metaDataStmt->fetchAll(\PDO::FETCH_ASSOC); |
|
| 187 | - $metadata = []; |
|
| 188 | - |
|
| 189 | - foreach($metaDataRows as $metaDataRow) { |
|
| 190 | - $metadata[$metaDataRow['key']] = $metaDataRow['value']; |
|
| 191 | - } |
|
| 192 | - |
|
| 193 | - return $this->rowToPrincipal($row, $metadata); |
|
| 194 | - } |
|
| 195 | - |
|
| 196 | - /** |
|
| 197 | - * @param int $id |
|
| 198 | - * @return array|null |
|
| 199 | - */ |
|
| 200 | - public function getPrincipalById($id):?array { |
|
| 201 | - $query = $this->db->getQueryBuilder(); |
|
| 202 | - $query->select(['id', 'backend_id', 'resource_id', 'email', 'displayname']) |
|
| 203 | - ->from($this->dbTableName) |
|
| 204 | - ->where($query->expr()->eq('id', $query->createNamedParameter($id))); |
|
| 205 | - $stmt = $query->execute(); |
|
| 206 | - $row = $stmt->fetch(\PDO::FETCH_ASSOC); |
|
| 207 | - |
|
| 208 | - if(!$row) { |
|
| 209 | - return null; |
|
| 210 | - } |
|
| 211 | - |
|
| 212 | - $metaDataQuery = $this->db->getQueryBuilder(); |
|
| 213 | - $metaDataQuery->select(['key', 'value']) |
|
| 214 | - ->from($this->dbMetaDataTableName) |
|
| 215 | - ->where($metaDataQuery->expr()->eq($this->dbForeignKeyName, $metaDataQuery->createNamedParameter($row['id']))); |
|
| 216 | - $metaDataStmt = $metaDataQuery->execute(); |
|
| 217 | - $metaDataRows = $metaDataStmt->fetchAll(\PDO::FETCH_ASSOC); |
|
| 218 | - $metadata = []; |
|
| 219 | - |
|
| 220 | - foreach($metaDataRows as $metaDataRow) { |
|
| 221 | - $metadata[$metaDataRow['key']] = $metaDataRow['value']; |
|
| 222 | - } |
|
| 223 | - |
|
| 224 | - return $this->rowToPrincipal($row, $metadata); |
|
| 225 | - } |
|
| 226 | - |
|
| 227 | - /** |
|
| 228 | - * @param string $path |
|
| 229 | - * @param PropPatch $propPatch |
|
| 230 | - * @return int |
|
| 231 | - */ |
|
| 232 | - function updatePrincipal($path, PropPatch $propPatch) { |
|
| 233 | - return 0; |
|
| 234 | - } |
|
| 235 | - |
|
| 236 | - /** |
|
| 237 | - * @param string $prefixPath |
|
| 238 | - * @param array $searchProperties |
|
| 239 | - * @param string $test |
|
| 240 | - * @return array |
|
| 241 | - */ |
|
| 242 | - function searchPrincipals($prefixPath, array $searchProperties, $test = 'allof') { |
|
| 243 | - $results = []; |
|
| 244 | - if (\count($searchProperties) === 0) { |
|
| 245 | - return []; |
|
| 246 | - } |
|
| 247 | - if ($prefixPath !== $this->principalPrefix) { |
|
| 248 | - return []; |
|
| 249 | - } |
|
| 250 | - |
|
| 251 | - $user = $this->userSession->getUser(); |
|
| 252 | - if (!$user) { |
|
| 253 | - return []; |
|
| 254 | - } |
|
| 255 | - $usersGroups = $this->groupManager->getUserGroupIds($user); |
|
| 256 | - |
|
| 257 | - foreach ($searchProperties as $prop => $value) { |
|
| 258 | - switch ($prop) { |
|
| 259 | - case '{http://sabredav.org/ns}email-address': |
|
| 260 | - $query = $this->db->getQueryBuilder(); |
|
| 261 | - $query->select(['id', 'backend_id', 'resource_id', 'email', 'displayname', 'group_restrictions']) |
|
| 262 | - ->from($this->dbTableName) |
|
| 263 | - ->where($query->expr()->iLike('email', $query->createNamedParameter('%' . $this->db->escapeLikeParameter($value) . '%'))); |
|
| 264 | - |
|
| 265 | - $stmt = $query->execute(); |
|
| 266 | - $principals = []; |
|
| 267 | - while($row = $stmt->fetch(\PDO::FETCH_ASSOC)) { |
|
| 268 | - if (!$this->isAllowedToAccessResource($row, $usersGroups)) { |
|
| 269 | - continue; |
|
| 270 | - } |
|
| 271 | - $principals[] = $this->rowToPrincipal($row)['uri']; |
|
| 272 | - } |
|
| 273 | - $results[] = $principals; |
|
| 274 | - |
|
| 275 | - $stmt->closeCursor(); |
|
| 276 | - break; |
|
| 277 | - |
|
| 278 | - case '{DAV:}displayname': |
|
| 279 | - $query = $this->db->getQueryBuilder(); |
|
| 280 | - $query->select(['id', 'backend_id', 'resource_id', 'email', 'displayname', 'group_restrictions']) |
|
| 281 | - ->from($this->dbTableName) |
|
| 282 | - ->where($query->expr()->iLike('displayname', $query->createNamedParameter('%' . $this->db->escapeLikeParameter($value) . '%'))); |
|
| 283 | - |
|
| 284 | - $stmt = $query->execute(); |
|
| 285 | - $principals = []; |
|
| 286 | - while($row = $stmt->fetch(\PDO::FETCH_ASSOC)) { |
|
| 287 | - if (!$this->isAllowedToAccessResource($row, $usersGroups)) { |
|
| 288 | - continue; |
|
| 289 | - } |
|
| 290 | - $principals[] = $this->rowToPrincipal($row)['uri']; |
|
| 291 | - } |
|
| 292 | - $results[] = $principals; |
|
| 293 | - |
|
| 294 | - $stmt->closeCursor(); |
|
| 295 | - break; |
|
| 296 | - |
|
| 297 | - case '{urn:ietf:params:xml:ns:caldav}calendar-user-address-set': |
|
| 298 | - // If you add support for more search properties that qualify as a user-address, |
|
| 299 | - // please also add them to the array below |
|
| 300 | - $results[] = $this->searchPrincipals($this->principalPrefix, [ |
|
| 301 | - '{http://sabredav.org/ns}email-address' => $value, |
|
| 302 | - ], 'anyof'); |
|
| 303 | - break; |
|
| 304 | - |
|
| 305 | - default: |
|
| 306 | - $rowsByMetadata = $this->searchPrincipalsByMetadataKey($prop, $value); |
|
| 307 | - $filteredRows = array_filter($rowsByMetadata, function($row) use ($usersGroups) { |
|
| 308 | - return $this->isAllowedToAccessResource($row, $usersGroups); |
|
| 309 | - }); |
|
| 310 | - |
|
| 311 | - $results[] = array_map(function($row) { |
|
| 312 | - return $row['uri']; |
|
| 313 | - }, $filteredRows); |
|
| 314 | - |
|
| 315 | - break; |
|
| 316 | - } |
|
| 317 | - } |
|
| 318 | - |
|
| 319 | - // results is an array of arrays, so this is not the first search result |
|
| 320 | - // but the results of the first searchProperty |
|
| 321 | - if (count($results) === 1) { |
|
| 322 | - return $results[0]; |
|
| 323 | - } |
|
| 324 | - |
|
| 325 | - switch ($test) { |
|
| 326 | - case 'anyof': |
|
| 327 | - return array_values(array_unique(array_merge(...$results))); |
|
| 328 | - |
|
| 329 | - case 'allof': |
|
| 330 | - default: |
|
| 331 | - return array_values(array_intersect(...$results)); |
|
| 332 | - } |
|
| 333 | - } |
|
| 334 | - |
|
| 335 | - /** |
|
| 336 | - * Searches principals based on their metadata keys. |
|
| 337 | - * This allows to search for all principals with a specific key. |
|
| 338 | - * e.g.: |
|
| 339 | - * '{http://nextcloud.com/ns}room-building-address' => 'ABC Street 123, ...' |
|
| 340 | - * |
|
| 341 | - * @param $key |
|
| 342 | - * @param $value |
|
| 343 | - * @return array |
|
| 344 | - */ |
|
| 345 | - private function searchPrincipalsByMetadataKey($key, $value):array { |
|
| 346 | - $query = $this->db->getQueryBuilder(); |
|
| 347 | - $query->select([$this->dbForeignKeyName]) |
|
| 348 | - ->from($this->dbMetaDataTableName) |
|
| 349 | - ->where($query->expr()->eq('key', $query->createNamedParameter($key))) |
|
| 350 | - ->andWhere($query->expr()->iLike('value', $query->createNamedParameter('%' . $this->db->escapeLikeParameter($value) . '%'))); |
|
| 351 | - $stmt = $query->execute(); |
|
| 352 | - |
|
| 353 | - $rows = []; |
|
| 354 | - while($row = $stmt->fetch(\PDO::FETCH_ASSOC)) { |
|
| 355 | - $id = $row[$this->dbForeignKeyName]; |
|
| 356 | - |
|
| 357 | - $principalRow = $this->getPrincipalById($id); |
|
| 358 | - if (!$principalRow) { |
|
| 359 | - continue; |
|
| 360 | - } |
|
| 361 | - |
|
| 362 | - $rows[] = $principalRow; |
|
| 363 | - } |
|
| 364 | - |
|
| 365 | - return $rows; |
|
| 366 | - } |
|
| 367 | - |
|
| 368 | - /** |
|
| 369 | - * @param string $uri |
|
| 370 | - * @param string $principalPrefix |
|
| 371 | - * @return null|string |
|
| 372 | - */ |
|
| 373 | - function findByUri($uri, $principalPrefix) { |
|
| 374 | - $user = $this->userSession->getUser(); |
|
| 375 | - if (!$user) { |
|
| 376 | - return null; |
|
| 377 | - } |
|
| 378 | - $usersGroups = $this->groupManager->getUserGroupIds($user); |
|
| 379 | - |
|
| 380 | - if (strpos($uri, 'mailto:') === 0) { |
|
| 381 | - $email = substr($uri, 7); |
|
| 382 | - $query = $this->db->getQueryBuilder(); |
|
| 383 | - $query->select(['id', 'backend_id', 'resource_id', 'email', 'displayname', 'group_restrictions']) |
|
| 384 | - ->from($this->dbTableName) |
|
| 385 | - ->where($query->expr()->eq('email', $query->createNamedParameter($email))); |
|
| 386 | - |
|
| 387 | - $stmt = $query->execute(); |
|
| 388 | - $row = $stmt->fetch(\PDO::FETCH_ASSOC); |
|
| 389 | - |
|
| 390 | - if(!$row) { |
|
| 391 | - return null; |
|
| 392 | - } |
|
| 393 | - if (!$this->isAllowedToAccessResource($row, $usersGroups)) { |
|
| 394 | - return null; |
|
| 395 | - } |
|
| 396 | - |
|
| 397 | - return $this->rowToPrincipal($row)['uri']; |
|
| 398 | - } |
|
| 399 | - |
|
| 400 | - if (strpos($uri, 'principal:') === 0) { |
|
| 401 | - $path = substr($uri, 10); |
|
| 402 | - if (strpos($path, $this->principalPrefix) !== 0) { |
|
| 403 | - return null; |
|
| 404 | - } |
|
| 405 | - |
|
| 406 | - list(, $name) = \Sabre\Uri\split($path); |
|
| 407 | - list($backendId, $resourceId) = explode('-', $name, 2); |
|
| 408 | - |
|
| 409 | - $query = $this->db->getQueryBuilder(); |
|
| 410 | - $query->select(['id', 'backend_id', 'resource_id', 'email', 'displayname', 'group_restrictions']) |
|
| 411 | - ->from($this->dbTableName) |
|
| 412 | - ->where($query->expr()->eq('backend_id', $query->createNamedParameter($backendId))) |
|
| 413 | - ->andWhere($query->expr()->eq('resource_id', $query->createNamedParameter($resourceId))); |
|
| 414 | - $stmt = $query->execute(); |
|
| 415 | - $row = $stmt->fetch(\PDO::FETCH_ASSOC); |
|
| 416 | - |
|
| 417 | - if(!$row) { |
|
| 418 | - return null; |
|
| 419 | - } |
|
| 420 | - if (!$this->isAllowedToAccessResource($row, $usersGroups)) { |
|
| 421 | - return null; |
|
| 422 | - } |
|
| 423 | - |
|
| 424 | - return $this->rowToPrincipal($row)['uri']; |
|
| 425 | - } |
|
| 426 | - |
|
| 427 | - return null; |
|
| 428 | - } |
|
| 429 | - |
|
| 430 | - /** |
|
| 431 | - * convert database row to principal |
|
| 432 | - * |
|
| 433 | - * @param String[] $row |
|
| 434 | - * @param String[] $metadata |
|
| 435 | - * @return Array |
|
| 436 | - */ |
|
| 437 | - private function rowToPrincipal(array $row, array $metadata=[]):array { |
|
| 438 | - return array_merge([ |
|
| 439 | - 'uri' => $this->principalPrefix . '/' . $row['backend_id'] . '-' . $row['resource_id'], |
|
| 440 | - '{DAV:}displayname' => $row['displayname'], |
|
| 441 | - '{http://sabredav.org/ns}email-address' => $row['email'], |
|
| 442 | - '{urn:ietf:params:xml:ns:caldav}calendar-user-type' => $this->cuType, |
|
| 443 | - ], $metadata); |
|
| 444 | - } |
|
| 445 | - |
|
| 446 | - /** |
|
| 447 | - * @param $row |
|
| 448 | - * @param $userGroups |
|
| 449 | - * @return bool |
|
| 450 | - */ |
|
| 451 | - private function isAllowedToAccessResource(array $row, array $userGroups):bool { |
|
| 452 | - if (!isset($row['group_restrictions']) || |
|
| 453 | - $row['group_restrictions'] === null || |
|
| 454 | - $row['group_restrictions'] === '') { |
|
| 455 | - return true; |
|
| 456 | - } |
|
| 457 | - |
|
| 458 | - // group restrictions contains something, but not parsable, deny access and log warning |
|
| 459 | - $json = json_decode($row['group_restrictions']); |
|
| 460 | - if (!\is_array($json)) { |
|
| 461 | - $this->logger->info('group_restrictions field could not be parsed for ' . $this->dbTableName . '::' . $row['id'] . ', denying access to resource'); |
|
| 462 | - return false; |
|
| 463 | - } |
|
| 464 | - |
|
| 465 | - // empty array => no group restrictions |
|
| 466 | - if (empty($json)) { |
|
| 467 | - return true; |
|
| 468 | - } |
|
| 469 | - |
|
| 470 | - return !empty(array_intersect($json, $userGroups)); |
|
| 471 | - } |
|
| 37 | + /** @var IDBConnection */ |
|
| 38 | + private $db; |
|
| 39 | + |
|
| 40 | + /** @var IUserSession */ |
|
| 41 | + private $userSession; |
|
| 42 | + |
|
| 43 | + /** @var IGroupManager */ |
|
| 44 | + private $groupManager; |
|
| 45 | + |
|
| 46 | + /** @var ILogger */ |
|
| 47 | + private $logger; |
|
| 48 | + |
|
| 49 | + /** @var ProxyMapper */ |
|
| 50 | + private $proxyMapper; |
|
| 51 | + |
|
| 52 | + /** @var string */ |
|
| 53 | + private $principalPrefix; |
|
| 54 | + |
|
| 55 | + /** @var string */ |
|
| 56 | + private $dbTableName; |
|
| 57 | + |
|
| 58 | + /** @var string */ |
|
| 59 | + private $dbMetaDataTableName; |
|
| 60 | + |
|
| 61 | + /** @var string */ |
|
| 62 | + private $dbForeignKeyName; |
|
| 63 | + |
|
| 64 | + /** @var string */ |
|
| 65 | + private $cuType; |
|
| 66 | + |
|
| 67 | + /** |
|
| 68 | + * @param IDBConnection $dbConnection |
|
| 69 | + * @param IUserSession $userSession |
|
| 70 | + * @param IGroupManager $groupManager |
|
| 71 | + * @param ILogger $logger |
|
| 72 | + * @param string $principalPrefix |
|
| 73 | + * @param string $dbPrefix |
|
| 74 | + * @param string $cuType |
|
| 75 | + */ |
|
| 76 | + public function __construct(IDBConnection $dbConnection, |
|
| 77 | + IUserSession $userSession, |
|
| 78 | + IGroupManager $groupManager, |
|
| 79 | + ILogger $logger, |
|
| 80 | + ProxyMapper $proxyMapper, |
|
| 81 | + string $principalPrefix, |
|
| 82 | + string $dbPrefix, |
|
| 83 | + string $cuType) { |
|
| 84 | + $this->db = $dbConnection; |
|
| 85 | + $this->userSession = $userSession; |
|
| 86 | + $this->groupManager = $groupManager; |
|
| 87 | + $this->logger = $logger; |
|
| 88 | + $this->proxyMapper = $proxyMapper; |
|
| 89 | + $this->principalPrefix = $principalPrefix; |
|
| 90 | + $this->dbTableName = 'calendar_' . $dbPrefix . 's'; |
|
| 91 | + $this->dbMetaDataTableName = $this->dbTableName . '_md'; |
|
| 92 | + $this->dbForeignKeyName = $dbPrefix . '_id'; |
|
| 93 | + $this->cuType = $cuType; |
|
| 94 | + } |
|
| 95 | + |
|
| 96 | + use PrincipalProxyTrait; |
|
| 97 | + |
|
| 98 | + /** |
|
| 99 | + * Returns a list of principals based on a prefix. |
|
| 100 | + * |
|
| 101 | + * This prefix will often contain something like 'principals'. You are only |
|
| 102 | + * expected to return principals that are in this base path. |
|
| 103 | + * |
|
| 104 | + * You are expected to return at least a 'uri' for every user, you can |
|
| 105 | + * return any additional properties if you wish so. Common properties are: |
|
| 106 | + * {DAV:}displayname |
|
| 107 | + * |
|
| 108 | + * @param string $prefixPath |
|
| 109 | + * @return string[] |
|
| 110 | + */ |
|
| 111 | + public function getPrincipalsByPrefix($prefixPath) { |
|
| 112 | + $principals = []; |
|
| 113 | + |
|
| 114 | + if ($prefixPath === $this->principalPrefix) { |
|
| 115 | + $query = $this->db->getQueryBuilder(); |
|
| 116 | + $query->select(['id', 'backend_id', 'resource_id', 'email', 'displayname']) |
|
| 117 | + ->from($this->dbTableName); |
|
| 118 | + $stmt = $query->execute(); |
|
| 119 | + |
|
| 120 | + $metaDataQuery = $this->db->getQueryBuilder(); |
|
| 121 | + $metaDataQuery->select([$this->dbForeignKeyName, 'key', 'value']) |
|
| 122 | + ->from($this->dbMetaDataTableName); |
|
| 123 | + $metaDataStmt = $metaDataQuery->execute(); |
|
| 124 | + $metaDataRows = $metaDataStmt->fetchAll(\PDO::FETCH_ASSOC); |
|
| 125 | + |
|
| 126 | + $metaDataById = []; |
|
| 127 | + foreach($metaDataRows as $metaDataRow) { |
|
| 128 | + if (!isset($metaDataById[$metaDataRow[$this->dbForeignKeyName]])) { |
|
| 129 | + $metaDataById[$metaDataRow[$this->dbForeignKeyName]] = []; |
|
| 130 | + } |
|
| 131 | + |
|
| 132 | + $metaDataById[$metaDataRow[$this->dbForeignKeyName]][$metaDataRow['key']] = |
|
| 133 | + $metaDataRow['value']; |
|
| 134 | + } |
|
| 135 | + |
|
| 136 | + while($row = $stmt->fetch(\PDO::FETCH_ASSOC)) { |
|
| 137 | + $id = $row['id']; |
|
| 138 | + |
|
| 139 | + if (isset($metaDataById[$id])) { |
|
| 140 | + $principals[] = $this->rowToPrincipal($row, $metaDataById[$id]); |
|
| 141 | + } else { |
|
| 142 | + $principals[] = $this->rowToPrincipal($row); |
|
| 143 | + } |
|
| 144 | + |
|
| 145 | + } |
|
| 146 | + |
|
| 147 | + $stmt->closeCursor(); |
|
| 148 | + } |
|
| 149 | + |
|
| 150 | + return $principals; |
|
| 151 | + } |
|
| 152 | + |
|
| 153 | + /** |
|
| 154 | + * Returns a specific principal, specified by it's path. |
|
| 155 | + * The returned structure should be the exact same as from |
|
| 156 | + * getPrincipalsByPrefix. |
|
| 157 | + * |
|
| 158 | + * @param string $path |
|
| 159 | + * @return array |
|
| 160 | + */ |
|
| 161 | + public function getPrincipalByPath($path) { |
|
| 162 | + if (strpos($path, $this->principalPrefix) !== 0) { |
|
| 163 | + return null; |
|
| 164 | + } |
|
| 165 | + list(, $name) = \Sabre\Uri\split($path); |
|
| 166 | + |
|
| 167 | + list($backendId, $resourceId) = explode('-', $name, 2); |
|
| 168 | + |
|
| 169 | + $query = $this->db->getQueryBuilder(); |
|
| 170 | + $query->select(['id', 'backend_id', 'resource_id', 'email', 'displayname']) |
|
| 171 | + ->from($this->dbTableName) |
|
| 172 | + ->where($query->expr()->eq('backend_id', $query->createNamedParameter($backendId))) |
|
| 173 | + ->andWhere($query->expr()->eq('resource_id', $query->createNamedParameter($resourceId))); |
|
| 174 | + $stmt = $query->execute(); |
|
| 175 | + $row = $stmt->fetch(\PDO::FETCH_ASSOC); |
|
| 176 | + |
|
| 177 | + if(!$row) { |
|
| 178 | + return null; |
|
| 179 | + } |
|
| 180 | + |
|
| 181 | + $metaDataQuery = $this->db->getQueryBuilder(); |
|
| 182 | + $metaDataQuery->select(['key', 'value']) |
|
| 183 | + ->from($this->dbMetaDataTableName) |
|
| 184 | + ->where($metaDataQuery->expr()->eq($this->dbForeignKeyName, $metaDataQuery->createNamedParameter($row['id']))); |
|
| 185 | + $metaDataStmt = $metaDataQuery->execute(); |
|
| 186 | + $metaDataRows = $metaDataStmt->fetchAll(\PDO::FETCH_ASSOC); |
|
| 187 | + $metadata = []; |
|
| 188 | + |
|
| 189 | + foreach($metaDataRows as $metaDataRow) { |
|
| 190 | + $metadata[$metaDataRow['key']] = $metaDataRow['value']; |
|
| 191 | + } |
|
| 192 | + |
|
| 193 | + return $this->rowToPrincipal($row, $metadata); |
|
| 194 | + } |
|
| 195 | + |
|
| 196 | + /** |
|
| 197 | + * @param int $id |
|
| 198 | + * @return array|null |
|
| 199 | + */ |
|
| 200 | + public function getPrincipalById($id):?array { |
|
| 201 | + $query = $this->db->getQueryBuilder(); |
|
| 202 | + $query->select(['id', 'backend_id', 'resource_id', 'email', 'displayname']) |
|
| 203 | + ->from($this->dbTableName) |
|
| 204 | + ->where($query->expr()->eq('id', $query->createNamedParameter($id))); |
|
| 205 | + $stmt = $query->execute(); |
|
| 206 | + $row = $stmt->fetch(\PDO::FETCH_ASSOC); |
|
| 207 | + |
|
| 208 | + if(!$row) { |
|
| 209 | + return null; |
|
| 210 | + } |
|
| 211 | + |
|
| 212 | + $metaDataQuery = $this->db->getQueryBuilder(); |
|
| 213 | + $metaDataQuery->select(['key', 'value']) |
|
| 214 | + ->from($this->dbMetaDataTableName) |
|
| 215 | + ->where($metaDataQuery->expr()->eq($this->dbForeignKeyName, $metaDataQuery->createNamedParameter($row['id']))); |
|
| 216 | + $metaDataStmt = $metaDataQuery->execute(); |
|
| 217 | + $metaDataRows = $metaDataStmt->fetchAll(\PDO::FETCH_ASSOC); |
|
| 218 | + $metadata = []; |
|
| 219 | + |
|
| 220 | + foreach($metaDataRows as $metaDataRow) { |
|
| 221 | + $metadata[$metaDataRow['key']] = $metaDataRow['value']; |
|
| 222 | + } |
|
| 223 | + |
|
| 224 | + return $this->rowToPrincipal($row, $metadata); |
|
| 225 | + } |
|
| 226 | + |
|
| 227 | + /** |
|
| 228 | + * @param string $path |
|
| 229 | + * @param PropPatch $propPatch |
|
| 230 | + * @return int |
|
| 231 | + */ |
|
| 232 | + function updatePrincipal($path, PropPatch $propPatch) { |
|
| 233 | + return 0; |
|
| 234 | + } |
|
| 235 | + |
|
| 236 | + /** |
|
| 237 | + * @param string $prefixPath |
|
| 238 | + * @param array $searchProperties |
|
| 239 | + * @param string $test |
|
| 240 | + * @return array |
|
| 241 | + */ |
|
| 242 | + function searchPrincipals($prefixPath, array $searchProperties, $test = 'allof') { |
|
| 243 | + $results = []; |
|
| 244 | + if (\count($searchProperties) === 0) { |
|
| 245 | + return []; |
|
| 246 | + } |
|
| 247 | + if ($prefixPath !== $this->principalPrefix) { |
|
| 248 | + return []; |
|
| 249 | + } |
|
| 250 | + |
|
| 251 | + $user = $this->userSession->getUser(); |
|
| 252 | + if (!$user) { |
|
| 253 | + return []; |
|
| 254 | + } |
|
| 255 | + $usersGroups = $this->groupManager->getUserGroupIds($user); |
|
| 256 | + |
|
| 257 | + foreach ($searchProperties as $prop => $value) { |
|
| 258 | + switch ($prop) { |
|
| 259 | + case '{http://sabredav.org/ns}email-address': |
|
| 260 | + $query = $this->db->getQueryBuilder(); |
|
| 261 | + $query->select(['id', 'backend_id', 'resource_id', 'email', 'displayname', 'group_restrictions']) |
|
| 262 | + ->from($this->dbTableName) |
|
| 263 | + ->where($query->expr()->iLike('email', $query->createNamedParameter('%' . $this->db->escapeLikeParameter($value) . '%'))); |
|
| 264 | + |
|
| 265 | + $stmt = $query->execute(); |
|
| 266 | + $principals = []; |
|
| 267 | + while($row = $stmt->fetch(\PDO::FETCH_ASSOC)) { |
|
| 268 | + if (!$this->isAllowedToAccessResource($row, $usersGroups)) { |
|
| 269 | + continue; |
|
| 270 | + } |
|
| 271 | + $principals[] = $this->rowToPrincipal($row)['uri']; |
|
| 272 | + } |
|
| 273 | + $results[] = $principals; |
|
| 274 | + |
|
| 275 | + $stmt->closeCursor(); |
|
| 276 | + break; |
|
| 277 | + |
|
| 278 | + case '{DAV:}displayname': |
|
| 279 | + $query = $this->db->getQueryBuilder(); |
|
| 280 | + $query->select(['id', 'backend_id', 'resource_id', 'email', 'displayname', 'group_restrictions']) |
|
| 281 | + ->from($this->dbTableName) |
|
| 282 | + ->where($query->expr()->iLike('displayname', $query->createNamedParameter('%' . $this->db->escapeLikeParameter($value) . '%'))); |
|
| 283 | + |
|
| 284 | + $stmt = $query->execute(); |
|
| 285 | + $principals = []; |
|
| 286 | + while($row = $stmt->fetch(\PDO::FETCH_ASSOC)) { |
|
| 287 | + if (!$this->isAllowedToAccessResource($row, $usersGroups)) { |
|
| 288 | + continue; |
|
| 289 | + } |
|
| 290 | + $principals[] = $this->rowToPrincipal($row)['uri']; |
|
| 291 | + } |
|
| 292 | + $results[] = $principals; |
|
| 293 | + |
|
| 294 | + $stmt->closeCursor(); |
|
| 295 | + break; |
|
| 296 | + |
|
| 297 | + case '{urn:ietf:params:xml:ns:caldav}calendar-user-address-set': |
|
| 298 | + // If you add support for more search properties that qualify as a user-address, |
|
| 299 | + // please also add them to the array below |
|
| 300 | + $results[] = $this->searchPrincipals($this->principalPrefix, [ |
|
| 301 | + '{http://sabredav.org/ns}email-address' => $value, |
|
| 302 | + ], 'anyof'); |
|
| 303 | + break; |
|
| 304 | + |
|
| 305 | + default: |
|
| 306 | + $rowsByMetadata = $this->searchPrincipalsByMetadataKey($prop, $value); |
|
| 307 | + $filteredRows = array_filter($rowsByMetadata, function($row) use ($usersGroups) { |
|
| 308 | + return $this->isAllowedToAccessResource($row, $usersGroups); |
|
| 309 | + }); |
|
| 310 | + |
|
| 311 | + $results[] = array_map(function($row) { |
|
| 312 | + return $row['uri']; |
|
| 313 | + }, $filteredRows); |
|
| 314 | + |
|
| 315 | + break; |
|
| 316 | + } |
|
| 317 | + } |
|
| 318 | + |
|
| 319 | + // results is an array of arrays, so this is not the first search result |
|
| 320 | + // but the results of the first searchProperty |
|
| 321 | + if (count($results) === 1) { |
|
| 322 | + return $results[0]; |
|
| 323 | + } |
|
| 324 | + |
|
| 325 | + switch ($test) { |
|
| 326 | + case 'anyof': |
|
| 327 | + return array_values(array_unique(array_merge(...$results))); |
|
| 328 | + |
|
| 329 | + case 'allof': |
|
| 330 | + default: |
|
| 331 | + return array_values(array_intersect(...$results)); |
|
| 332 | + } |
|
| 333 | + } |
|
| 334 | + |
|
| 335 | + /** |
|
| 336 | + * Searches principals based on their metadata keys. |
|
| 337 | + * This allows to search for all principals with a specific key. |
|
| 338 | + * e.g.: |
|
| 339 | + * '{http://nextcloud.com/ns}room-building-address' => 'ABC Street 123, ...' |
|
| 340 | + * |
|
| 341 | + * @param $key |
|
| 342 | + * @param $value |
|
| 343 | + * @return array |
|
| 344 | + */ |
|
| 345 | + private function searchPrincipalsByMetadataKey($key, $value):array { |
|
| 346 | + $query = $this->db->getQueryBuilder(); |
|
| 347 | + $query->select([$this->dbForeignKeyName]) |
|
| 348 | + ->from($this->dbMetaDataTableName) |
|
| 349 | + ->where($query->expr()->eq('key', $query->createNamedParameter($key))) |
|
| 350 | + ->andWhere($query->expr()->iLike('value', $query->createNamedParameter('%' . $this->db->escapeLikeParameter($value) . '%'))); |
|
| 351 | + $stmt = $query->execute(); |
|
| 352 | + |
|
| 353 | + $rows = []; |
|
| 354 | + while($row = $stmt->fetch(\PDO::FETCH_ASSOC)) { |
|
| 355 | + $id = $row[$this->dbForeignKeyName]; |
|
| 356 | + |
|
| 357 | + $principalRow = $this->getPrincipalById($id); |
|
| 358 | + if (!$principalRow) { |
|
| 359 | + continue; |
|
| 360 | + } |
|
| 361 | + |
|
| 362 | + $rows[] = $principalRow; |
|
| 363 | + } |
|
| 364 | + |
|
| 365 | + return $rows; |
|
| 366 | + } |
|
| 367 | + |
|
| 368 | + /** |
|
| 369 | + * @param string $uri |
|
| 370 | + * @param string $principalPrefix |
|
| 371 | + * @return null|string |
|
| 372 | + */ |
|
| 373 | + function findByUri($uri, $principalPrefix) { |
|
| 374 | + $user = $this->userSession->getUser(); |
|
| 375 | + if (!$user) { |
|
| 376 | + return null; |
|
| 377 | + } |
|
| 378 | + $usersGroups = $this->groupManager->getUserGroupIds($user); |
|
| 379 | + |
|
| 380 | + if (strpos($uri, 'mailto:') === 0) { |
|
| 381 | + $email = substr($uri, 7); |
|
| 382 | + $query = $this->db->getQueryBuilder(); |
|
| 383 | + $query->select(['id', 'backend_id', 'resource_id', 'email', 'displayname', 'group_restrictions']) |
|
| 384 | + ->from($this->dbTableName) |
|
| 385 | + ->where($query->expr()->eq('email', $query->createNamedParameter($email))); |
|
| 386 | + |
|
| 387 | + $stmt = $query->execute(); |
|
| 388 | + $row = $stmt->fetch(\PDO::FETCH_ASSOC); |
|
| 389 | + |
|
| 390 | + if(!$row) { |
|
| 391 | + return null; |
|
| 392 | + } |
|
| 393 | + if (!$this->isAllowedToAccessResource($row, $usersGroups)) { |
|
| 394 | + return null; |
|
| 395 | + } |
|
| 396 | + |
|
| 397 | + return $this->rowToPrincipal($row)['uri']; |
|
| 398 | + } |
|
| 399 | + |
|
| 400 | + if (strpos($uri, 'principal:') === 0) { |
|
| 401 | + $path = substr($uri, 10); |
|
| 402 | + if (strpos($path, $this->principalPrefix) !== 0) { |
|
| 403 | + return null; |
|
| 404 | + } |
|
| 405 | + |
|
| 406 | + list(, $name) = \Sabre\Uri\split($path); |
|
| 407 | + list($backendId, $resourceId) = explode('-', $name, 2); |
|
| 408 | + |
|
| 409 | + $query = $this->db->getQueryBuilder(); |
|
| 410 | + $query->select(['id', 'backend_id', 'resource_id', 'email', 'displayname', 'group_restrictions']) |
|
| 411 | + ->from($this->dbTableName) |
|
| 412 | + ->where($query->expr()->eq('backend_id', $query->createNamedParameter($backendId))) |
|
| 413 | + ->andWhere($query->expr()->eq('resource_id', $query->createNamedParameter($resourceId))); |
|
| 414 | + $stmt = $query->execute(); |
|
| 415 | + $row = $stmt->fetch(\PDO::FETCH_ASSOC); |
|
| 416 | + |
|
| 417 | + if(!$row) { |
|
| 418 | + return null; |
|
| 419 | + } |
|
| 420 | + if (!$this->isAllowedToAccessResource($row, $usersGroups)) { |
|
| 421 | + return null; |
|
| 422 | + } |
|
| 423 | + |
|
| 424 | + return $this->rowToPrincipal($row)['uri']; |
|
| 425 | + } |
|
| 426 | + |
|
| 427 | + return null; |
|
| 428 | + } |
|
| 429 | + |
|
| 430 | + /** |
|
| 431 | + * convert database row to principal |
|
| 432 | + * |
|
| 433 | + * @param String[] $row |
|
| 434 | + * @param String[] $metadata |
|
| 435 | + * @return Array |
|
| 436 | + */ |
|
| 437 | + private function rowToPrincipal(array $row, array $metadata=[]):array { |
|
| 438 | + return array_merge([ |
|
| 439 | + 'uri' => $this->principalPrefix . '/' . $row['backend_id'] . '-' . $row['resource_id'], |
|
| 440 | + '{DAV:}displayname' => $row['displayname'], |
|
| 441 | + '{http://sabredav.org/ns}email-address' => $row['email'], |
|
| 442 | + '{urn:ietf:params:xml:ns:caldav}calendar-user-type' => $this->cuType, |
|
| 443 | + ], $metadata); |
|
| 444 | + } |
|
| 445 | + |
|
| 446 | + /** |
|
| 447 | + * @param $row |
|
| 448 | + * @param $userGroups |
|
| 449 | + * @return bool |
|
| 450 | + */ |
|
| 451 | + private function isAllowedToAccessResource(array $row, array $userGroups):bool { |
|
| 452 | + if (!isset($row['group_restrictions']) || |
|
| 453 | + $row['group_restrictions'] === null || |
|
| 454 | + $row['group_restrictions'] === '') { |
|
| 455 | + return true; |
|
| 456 | + } |
|
| 457 | + |
|
| 458 | + // group restrictions contains something, but not parsable, deny access and log warning |
|
| 459 | + $json = json_decode($row['group_restrictions']); |
|
| 460 | + if (!\is_array($json)) { |
|
| 461 | + $this->logger->info('group_restrictions field could not be parsed for ' . $this->dbTableName . '::' . $row['id'] . ', denying access to resource'); |
|
| 462 | + return false; |
|
| 463 | + } |
|
| 464 | + |
|
| 465 | + // empty array => no group restrictions |
|
| 466 | + if (empty($json)) { |
|
| 467 | + return true; |
|
| 468 | + } |
|
| 469 | + |
|
| 470 | + return !empty(array_intersect($json, $userGroups)); |
|
| 471 | + } |
|
| 472 | 472 | } |
@@ -87,9 +87,9 @@ discard block |
||
| 87 | 87 | $this->logger = $logger; |
| 88 | 88 | $this->proxyMapper = $proxyMapper; |
| 89 | 89 | $this->principalPrefix = $principalPrefix; |
| 90 | - $this->dbTableName = 'calendar_' . $dbPrefix . 's'; |
|
| 91 | - $this->dbMetaDataTableName = $this->dbTableName . '_md'; |
|
| 92 | - $this->dbForeignKeyName = $dbPrefix . '_id'; |
|
| 90 | + $this->dbTableName = 'calendar_'.$dbPrefix.'s'; |
|
| 91 | + $this->dbMetaDataTableName = $this->dbTableName.'_md'; |
|
| 92 | + $this->dbForeignKeyName = $dbPrefix.'_id'; |
|
| 93 | 93 | $this->cuType = $cuType; |
| 94 | 94 | } |
| 95 | 95 | |
@@ -124,7 +124,7 @@ discard block |
||
| 124 | 124 | $metaDataRows = $metaDataStmt->fetchAll(\PDO::FETCH_ASSOC); |
| 125 | 125 | |
| 126 | 126 | $metaDataById = []; |
| 127 | - foreach($metaDataRows as $metaDataRow) { |
|
| 127 | + foreach ($metaDataRows as $metaDataRow) { |
|
| 128 | 128 | if (!isset($metaDataById[$metaDataRow[$this->dbForeignKeyName]])) { |
| 129 | 129 | $metaDataById[$metaDataRow[$this->dbForeignKeyName]] = []; |
| 130 | 130 | } |
@@ -133,7 +133,7 @@ discard block |
||
| 133 | 133 | $metaDataRow['value']; |
| 134 | 134 | } |
| 135 | 135 | |
| 136 | - while($row = $stmt->fetch(\PDO::FETCH_ASSOC)) { |
|
| 136 | + while ($row = $stmt->fetch(\PDO::FETCH_ASSOC)) { |
|
| 137 | 137 | $id = $row['id']; |
| 138 | 138 | |
| 139 | 139 | if (isset($metaDataById[$id])) { |
@@ -164,7 +164,7 @@ discard block |
||
| 164 | 164 | } |
| 165 | 165 | list(, $name) = \Sabre\Uri\split($path); |
| 166 | 166 | |
| 167 | - list($backendId, $resourceId) = explode('-', $name, 2); |
|
| 167 | + list($backendId, $resourceId) = explode('-', $name, 2); |
|
| 168 | 168 | |
| 169 | 169 | $query = $this->db->getQueryBuilder(); |
| 170 | 170 | $query->select(['id', 'backend_id', 'resource_id', 'email', 'displayname']) |
@@ -174,7 +174,7 @@ discard block |
||
| 174 | 174 | $stmt = $query->execute(); |
| 175 | 175 | $row = $stmt->fetch(\PDO::FETCH_ASSOC); |
| 176 | 176 | |
| 177 | - if(!$row) { |
|
| 177 | + if (!$row) { |
|
| 178 | 178 | return null; |
| 179 | 179 | } |
| 180 | 180 | |
@@ -186,7 +186,7 @@ discard block |
||
| 186 | 186 | $metaDataRows = $metaDataStmt->fetchAll(\PDO::FETCH_ASSOC); |
| 187 | 187 | $metadata = []; |
| 188 | 188 | |
| 189 | - foreach($metaDataRows as $metaDataRow) { |
|
| 189 | + foreach ($metaDataRows as $metaDataRow) { |
|
| 190 | 190 | $metadata[$metaDataRow['key']] = $metaDataRow['value']; |
| 191 | 191 | } |
| 192 | 192 | |
@@ -197,7 +197,7 @@ discard block |
||
| 197 | 197 | * @param int $id |
| 198 | 198 | * @return array|null |
| 199 | 199 | */ |
| 200 | - public function getPrincipalById($id):?array { |
|
| 200 | + public function getPrincipalById($id): ?array { |
|
| 201 | 201 | $query = $this->db->getQueryBuilder(); |
| 202 | 202 | $query->select(['id', 'backend_id', 'resource_id', 'email', 'displayname']) |
| 203 | 203 | ->from($this->dbTableName) |
@@ -205,7 +205,7 @@ discard block |
||
| 205 | 205 | $stmt = $query->execute(); |
| 206 | 206 | $row = $stmt->fetch(\PDO::FETCH_ASSOC); |
| 207 | 207 | |
| 208 | - if(!$row) { |
|
| 208 | + if (!$row) { |
|
| 209 | 209 | return null; |
| 210 | 210 | } |
| 211 | 211 | |
@@ -217,7 +217,7 @@ discard block |
||
| 217 | 217 | $metaDataRows = $metaDataStmt->fetchAll(\PDO::FETCH_ASSOC); |
| 218 | 218 | $metadata = []; |
| 219 | 219 | |
| 220 | - foreach($metaDataRows as $metaDataRow) { |
|
| 220 | + foreach ($metaDataRows as $metaDataRow) { |
|
| 221 | 221 | $metadata[$metaDataRow['key']] = $metaDataRow['value']; |
| 222 | 222 | } |
| 223 | 223 | |
@@ -260,11 +260,11 @@ discard block |
||
| 260 | 260 | $query = $this->db->getQueryBuilder(); |
| 261 | 261 | $query->select(['id', 'backend_id', 'resource_id', 'email', 'displayname', 'group_restrictions']) |
| 262 | 262 | ->from($this->dbTableName) |
| 263 | - ->where($query->expr()->iLike('email', $query->createNamedParameter('%' . $this->db->escapeLikeParameter($value) . '%'))); |
|
| 263 | + ->where($query->expr()->iLike('email', $query->createNamedParameter('%'.$this->db->escapeLikeParameter($value).'%'))); |
|
| 264 | 264 | |
| 265 | 265 | $stmt = $query->execute(); |
| 266 | 266 | $principals = []; |
| 267 | - while($row = $stmt->fetch(\PDO::FETCH_ASSOC)) { |
|
| 267 | + while ($row = $stmt->fetch(\PDO::FETCH_ASSOC)) { |
|
| 268 | 268 | if (!$this->isAllowedToAccessResource($row, $usersGroups)) { |
| 269 | 269 | continue; |
| 270 | 270 | } |
@@ -279,11 +279,11 @@ discard block |
||
| 279 | 279 | $query = $this->db->getQueryBuilder(); |
| 280 | 280 | $query->select(['id', 'backend_id', 'resource_id', 'email', 'displayname', 'group_restrictions']) |
| 281 | 281 | ->from($this->dbTableName) |
| 282 | - ->where($query->expr()->iLike('displayname', $query->createNamedParameter('%' . $this->db->escapeLikeParameter($value) . '%'))); |
|
| 282 | + ->where($query->expr()->iLike('displayname', $query->createNamedParameter('%'.$this->db->escapeLikeParameter($value).'%'))); |
|
| 283 | 283 | |
| 284 | 284 | $stmt = $query->execute(); |
| 285 | 285 | $principals = []; |
| 286 | - while($row = $stmt->fetch(\PDO::FETCH_ASSOC)) { |
|
| 286 | + while ($row = $stmt->fetch(\PDO::FETCH_ASSOC)) { |
|
| 287 | 287 | if (!$this->isAllowedToAccessResource($row, $usersGroups)) { |
| 288 | 288 | continue; |
| 289 | 289 | } |
@@ -347,11 +347,11 @@ discard block |
||
| 347 | 347 | $query->select([$this->dbForeignKeyName]) |
| 348 | 348 | ->from($this->dbMetaDataTableName) |
| 349 | 349 | ->where($query->expr()->eq('key', $query->createNamedParameter($key))) |
| 350 | - ->andWhere($query->expr()->iLike('value', $query->createNamedParameter('%' . $this->db->escapeLikeParameter($value) . '%'))); |
|
| 350 | + ->andWhere($query->expr()->iLike('value', $query->createNamedParameter('%'.$this->db->escapeLikeParameter($value).'%'))); |
|
| 351 | 351 | $stmt = $query->execute(); |
| 352 | 352 | |
| 353 | 353 | $rows = []; |
| 354 | - while($row = $stmt->fetch(\PDO::FETCH_ASSOC)) { |
|
| 354 | + while ($row = $stmt->fetch(\PDO::FETCH_ASSOC)) { |
|
| 355 | 355 | $id = $row[$this->dbForeignKeyName]; |
| 356 | 356 | |
| 357 | 357 | $principalRow = $this->getPrincipalById($id); |
@@ -387,7 +387,7 @@ discard block |
||
| 387 | 387 | $stmt = $query->execute(); |
| 388 | 388 | $row = $stmt->fetch(\PDO::FETCH_ASSOC); |
| 389 | 389 | |
| 390 | - if(!$row) { |
|
| 390 | + if (!$row) { |
|
| 391 | 391 | return null; |
| 392 | 392 | } |
| 393 | 393 | if (!$this->isAllowedToAccessResource($row, $usersGroups)) { |
@@ -404,7 +404,7 @@ discard block |
||
| 404 | 404 | } |
| 405 | 405 | |
| 406 | 406 | list(, $name) = \Sabre\Uri\split($path); |
| 407 | - list($backendId, $resourceId) = explode('-', $name, 2); |
|
| 407 | + list($backendId, $resourceId) = explode('-', $name, 2); |
|
| 408 | 408 | |
| 409 | 409 | $query = $this->db->getQueryBuilder(); |
| 410 | 410 | $query->select(['id', 'backend_id', 'resource_id', 'email', 'displayname', 'group_restrictions']) |
@@ -414,7 +414,7 @@ discard block |
||
| 414 | 414 | $stmt = $query->execute(); |
| 415 | 415 | $row = $stmt->fetch(\PDO::FETCH_ASSOC); |
| 416 | 416 | |
| 417 | - if(!$row) { |
|
| 417 | + if (!$row) { |
|
| 418 | 418 | return null; |
| 419 | 419 | } |
| 420 | 420 | if (!$this->isAllowedToAccessResource($row, $usersGroups)) { |
@@ -434,9 +434,9 @@ discard block |
||
| 434 | 434 | * @param String[] $metadata |
| 435 | 435 | * @return Array |
| 436 | 436 | */ |
| 437 | - private function rowToPrincipal(array $row, array $metadata=[]):array { |
|
| 437 | + private function rowToPrincipal(array $row, array $metadata = []):array { |
|
| 438 | 438 | return array_merge([ |
| 439 | - 'uri' => $this->principalPrefix . '/' . $row['backend_id'] . '-' . $row['resource_id'], |
|
| 439 | + 'uri' => $this->principalPrefix.'/'.$row['backend_id'].'-'.$row['resource_id'], |
|
| 440 | 440 | '{DAV:}displayname' => $row['displayname'], |
| 441 | 441 | '{http://sabredav.org/ns}email-address' => $row['email'], |
| 442 | 442 | '{urn:ietf:params:xml:ns:caldav}calendar-user-type' => $this->cuType, |
@@ -458,7 +458,7 @@ discard block |
||
| 458 | 458 | // group restrictions contains something, but not parsable, deny access and log warning |
| 459 | 459 | $json = json_decode($row['group_restrictions']); |
| 460 | 460 | if (!\is_array($json)) { |
| 461 | - $this->logger->info('group_restrictions field could not be parsed for ' . $this->dbTableName . '::' . $row['id'] . ', denying access to resource'); |
|
| 461 | + $this->logger->info('group_restrictions field could not be parsed for '.$this->dbTableName.'::'.$row['id'].', denying access to resource'); |
|
| 462 | 462 | return false; |
| 463 | 463 | } |
| 464 | 464 | |
@@ -35,21 +35,21 @@ |
||
| 35 | 35 | */ |
| 36 | 36 | class RoomPrincipalBackend extends AbstractPrincipalBackend { |
| 37 | 37 | |
| 38 | - /** |
|
| 39 | - * RoomPrincipalBackend constructor. |
|
| 40 | - * |
|
| 41 | - * @param IDBConnection $dbConnection |
|
| 42 | - * @param IUserSession $userSession |
|
| 43 | - * @param IGroupManager $groupManager |
|
| 44 | - * @param ILogger $logger |
|
| 45 | - * @param ProxyMapper $proxyMapper |
|
| 46 | - */ |
|
| 47 | - public function __construct(IDBConnection $dbConnection, |
|
| 48 | - IUserSession $userSession, |
|
| 49 | - IGroupManager $groupManager, |
|
| 50 | - ILogger $logger, |
|
| 51 | - ProxyMapper $proxyMapper) { |
|
| 52 | - parent::__construct($dbConnection, $userSession, $groupManager, $logger, |
|
| 53 | - $proxyMapper, 'principals/calendar-rooms', 'room', 'ROOM'); |
|
| 54 | - } |
|
| 38 | + /** |
|
| 39 | + * RoomPrincipalBackend constructor. |
|
| 40 | + * |
|
| 41 | + * @param IDBConnection $dbConnection |
|
| 42 | + * @param IUserSession $userSession |
|
| 43 | + * @param IGroupManager $groupManager |
|
| 44 | + * @param ILogger $logger |
|
| 45 | + * @param ProxyMapper $proxyMapper |
|
| 46 | + */ |
|
| 47 | + public function __construct(IDBConnection $dbConnection, |
|
| 48 | + IUserSession $userSession, |
|
| 49 | + IGroupManager $groupManager, |
|
| 50 | + ILogger $logger, |
|
| 51 | + ProxyMapper $proxyMapper) { |
|
| 52 | + parent::__construct($dbConnection, $userSession, $groupManager, $logger, |
|
| 53 | + $proxyMapper, 'principals/calendar-rooms', 'room', 'ROOM'); |
|
| 54 | + } |
|
| 55 | 55 | } |
@@ -70,260 +70,260 @@ |
||
| 70 | 70 | |
| 71 | 71 | class Server { |
| 72 | 72 | |
| 73 | - /** @var IRequest */ |
|
| 74 | - private $request; |
|
| 75 | - |
|
| 76 | - /** @var string */ |
|
| 77 | - private $baseUri; |
|
| 78 | - |
|
| 79 | - /** @var Connector\Sabre\Server */ |
|
| 80 | - public $server; |
|
| 81 | - |
|
| 82 | - public function __construct(IRequest $request, $baseUri) { |
|
| 83 | - $this->request = $request; |
|
| 84 | - $this->baseUri = $baseUri; |
|
| 85 | - $logger = \OC::$server->getLogger(); |
|
| 86 | - $dispatcher = \OC::$server->getEventDispatcher(); |
|
| 87 | - |
|
| 88 | - $root = new RootCollection(); |
|
| 89 | - $this->server = new \OCA\DAV\Connector\Sabre\Server(new CachingTree($root)); |
|
| 90 | - |
|
| 91 | - // Add maintenance plugin |
|
| 92 | - $this->server->addPlugin(new \OCA\DAV\Connector\Sabre\MaintenancePlugin(\OC::$server->getConfig())); |
|
| 93 | - |
|
| 94 | - // Backends |
|
| 95 | - $authBackend = new Auth( |
|
| 96 | - \OC::$server->getSession(), |
|
| 97 | - \OC::$server->getUserSession(), |
|
| 98 | - \OC::$server->getRequest(), |
|
| 99 | - \OC::$server->getTwoFactorAuthManager(), |
|
| 100 | - \OC::$server->getBruteForceThrottler() |
|
| 101 | - ); |
|
| 102 | - |
|
| 103 | - // Set URL explicitly due to reverse-proxy situations |
|
| 104 | - $this->server->httpRequest->setUrl($this->request->getRequestUri()); |
|
| 105 | - $this->server->setBaseUri($this->baseUri); |
|
| 106 | - |
|
| 107 | - $this->server->addPlugin(new BlockLegacyClientPlugin(\OC::$server->getConfig())); |
|
| 108 | - $this->server->addPlugin(new AnonymousOptionsPlugin()); |
|
| 109 | - $authPlugin = new Plugin(); |
|
| 110 | - $authPlugin->addBackend(new PublicAuth()); |
|
| 111 | - $this->server->addPlugin($authPlugin); |
|
| 112 | - |
|
| 113 | - // allow setup of additional auth backends |
|
| 114 | - $event = new SabrePluginEvent($this->server); |
|
| 115 | - $dispatcher->dispatch('OCA\DAV\Connector\Sabre::authInit', $event); |
|
| 116 | - |
|
| 117 | - $bearerAuthBackend = new BearerAuth( |
|
| 118 | - \OC::$server->getUserSession(), |
|
| 119 | - \OC::$server->getSession(), |
|
| 120 | - \OC::$server->getRequest() |
|
| 121 | - ); |
|
| 122 | - $authPlugin->addBackend($bearerAuthBackend); |
|
| 123 | - // because we are throwing exceptions this plugin has to be the last one |
|
| 124 | - $authPlugin->addBackend($authBackend); |
|
| 125 | - |
|
| 126 | - // debugging |
|
| 127 | - if(\OC::$server->getConfig()->getSystemValue('debug', false)) { |
|
| 128 | - $this->server->addPlugin(new \Sabre\DAV\Browser\Plugin()); |
|
| 129 | - } else { |
|
| 130 | - $this->server->addPlugin(new DummyGetResponsePlugin()); |
|
| 131 | - } |
|
| 132 | - |
|
| 133 | - $this->server->addPlugin(new \OCA\DAV\Connector\Sabre\ExceptionLoggerPlugin('webdav', $logger)); |
|
| 134 | - $this->server->addPlugin(new \OCA\DAV\Connector\Sabre\LockPlugin()); |
|
| 135 | - $this->server->addPlugin(new \Sabre\DAV\Sync\Plugin()); |
|
| 136 | - |
|
| 137 | - // acl |
|
| 138 | - $acl = new DavAclPlugin(); |
|
| 139 | - $acl->principalCollectionSet = [ |
|
| 140 | - 'principals/users', |
|
| 141 | - 'principals/groups', |
|
| 142 | - 'principals/calendar-resources', |
|
| 143 | - 'principals/calendar-rooms', |
|
| 144 | - ]; |
|
| 145 | - $acl->defaultUsernamePath = 'principals/users'; |
|
| 146 | - $this->server->addPlugin($acl); |
|
| 147 | - |
|
| 148 | - // calendar plugins |
|
| 149 | - if ($this->requestIsForSubtree(['calendars', 'public-calendars', 'system-calendars', 'principals'])) { |
|
| 150 | - $this->server->addPlugin(new \OCA\DAV\CalDAV\Plugin()); |
|
| 151 | - $this->server->addPlugin(new \Sabre\CalDAV\ICSExportPlugin()); |
|
| 152 | - $this->server->addPlugin(new \OCA\DAV\CalDAV\Schedule\Plugin()); |
|
| 153 | - if (\OC::$server->getConfig()->getAppValue('dav', 'sendInvitations', 'yes') === 'yes') { |
|
| 154 | - $this->server->addPlugin(\OC::$server->query(\OCA\DAV\CalDAV\Schedule\IMipPlugin::class)); |
|
| 155 | - } |
|
| 156 | - |
|
| 157 | - $this->server->addPlugin(new CalDAV\WebcalCaching\Plugin($request)); |
|
| 158 | - $this->server->addPlugin(new \Sabre\CalDAV\Subscriptions\Plugin()); |
|
| 159 | - |
|
| 160 | - $this->server->addPlugin(new \Sabre\CalDAV\Notifications\Plugin()); |
|
| 161 | - $this->server->addPlugin(new DAV\Sharing\Plugin($authBackend, \OC::$server->getRequest())); |
|
| 162 | - $this->server->addPlugin(new \OCA\DAV\CalDAV\Publishing\PublishPlugin( |
|
| 163 | - \OC::$server->getConfig(), |
|
| 164 | - \OC::$server->getURLGenerator() |
|
| 165 | - )); |
|
| 166 | - } |
|
| 167 | - |
|
| 168 | - // addressbook plugins |
|
| 169 | - if ($this->requestIsForSubtree(['addressbooks', 'principals'])) { |
|
| 170 | - $this->server->addPlugin(new DAV\Sharing\Plugin($authBackend, \OC::$server->getRequest())); |
|
| 171 | - $this->server->addPlugin(new \OCA\DAV\CardDAV\Plugin()); |
|
| 172 | - $this->server->addPlugin(new VCFExportPlugin()); |
|
| 173 | - $this->server->addPlugin(new MultiGetExportPlugin()); |
|
| 174 | - $this->server->addPlugin(new HasPhotoPlugin()); |
|
| 175 | - $this->server->addPlugin(new ImageExportPlugin(new PhotoCache( |
|
| 176 | - \OC::$server->getAppDataDir('dav-photocache'), |
|
| 177 | - \OC::$server->getLogger()) |
|
| 178 | - )); |
|
| 179 | - } |
|
| 180 | - |
|
| 181 | - // system tags plugins |
|
| 182 | - $this->server->addPlugin(new SystemTagPlugin( |
|
| 183 | - \OC::$server->getSystemTagManager(), |
|
| 184 | - \OC::$server->getGroupManager(), |
|
| 185 | - \OC::$server->getUserSession() |
|
| 186 | - )); |
|
| 187 | - |
|
| 188 | - // comments plugin |
|
| 189 | - $this->server->addPlugin(new CommentsPlugin( |
|
| 190 | - \OC::$server->getCommentsManager(), |
|
| 191 | - \OC::$server->getUserSession() |
|
| 192 | - )); |
|
| 193 | - |
|
| 194 | - $this->server->addPlugin(new CopyEtagHeaderPlugin()); |
|
| 195 | - $this->server->addPlugin(new ChunkingPlugin()); |
|
| 196 | - |
|
| 197 | - // allow setup of additional plugins |
|
| 198 | - $dispatcher->dispatch('OCA\DAV\Connector\Sabre::addPlugin', $event); |
|
| 199 | - |
|
| 200 | - // Some WebDAV clients do require Class 2 WebDAV support (locking), since |
|
| 201 | - // we do not provide locking we emulate it using a fake locking plugin. |
|
| 202 | - if($request->isUserAgent([ |
|
| 203 | - '/WebDAVFS/', |
|
| 204 | - '/OneNote/', |
|
| 205 | - '/^Microsoft-WebDAV/',// Microsoft-WebDAV-MiniRedir/6.1.7601 |
|
| 206 | - ])) { |
|
| 207 | - $this->server->addPlugin(new FakeLockerPlugin()); |
|
| 208 | - } |
|
| 209 | - |
|
| 210 | - if (BrowserErrorPagePlugin::isBrowserRequest($request)) { |
|
| 211 | - $this->server->addPlugin(new BrowserErrorPagePlugin()); |
|
| 212 | - } |
|
| 213 | - |
|
| 214 | - $lazySearchBackend = new LazySearchBackend(); |
|
| 215 | - $this->server->addPlugin(new SearchPlugin($lazySearchBackend)); |
|
| 216 | - |
|
| 217 | - // wait with registering these until auth is handled and the filesystem is setup |
|
| 218 | - $this->server->on('beforeMethod', function () use ($root, $lazySearchBackend) { |
|
| 219 | - // custom properties plugin must be the last one |
|
| 220 | - $userSession = \OC::$server->getUserSession(); |
|
| 221 | - $user = $userSession->getUser(); |
|
| 222 | - if ($user !== null) { |
|
| 223 | - $view = \OC\Files\Filesystem::getView(); |
|
| 224 | - $this->server->addPlugin( |
|
| 225 | - new FilesPlugin( |
|
| 226 | - $this->server->tree, |
|
| 227 | - \OC::$server->getConfig(), |
|
| 228 | - $this->request, |
|
| 229 | - \OC::$server->getPreviewManager(), |
|
| 230 | - false, |
|
| 231 | - !\OC::$server->getConfig()->getSystemValue('debug', false) |
|
| 232 | - ) |
|
| 233 | - ); |
|
| 234 | - |
|
| 235 | - $this->server->addPlugin( |
|
| 236 | - new \Sabre\DAV\PropertyStorage\Plugin( |
|
| 237 | - new CustomPropertiesBackend( |
|
| 238 | - $this->server->tree, |
|
| 239 | - \OC::$server->getDatabaseConnection(), |
|
| 240 | - \OC::$server->getUserSession()->getUser() |
|
| 241 | - ) |
|
| 242 | - ) |
|
| 243 | - ); |
|
| 244 | - if ($view !== null) { |
|
| 245 | - $this->server->addPlugin( |
|
| 246 | - new QuotaPlugin($view, false)); |
|
| 247 | - } |
|
| 248 | - $this->server->addPlugin( |
|
| 249 | - new TagsPlugin( |
|
| 250 | - $this->server->tree, \OC::$server->getTagManager() |
|
| 251 | - ) |
|
| 252 | - ); |
|
| 253 | - // TODO: switch to LazyUserFolder |
|
| 254 | - $userFolder = \OC::$server->getUserFolder(); |
|
| 255 | - $this->server->addPlugin(new SharesPlugin( |
|
| 256 | - $this->server->tree, |
|
| 257 | - $userSession, |
|
| 258 | - $userFolder, |
|
| 259 | - \OC::$server->getShareManager() |
|
| 260 | - )); |
|
| 261 | - $this->server->addPlugin(new CommentPropertiesPlugin( |
|
| 262 | - \OC::$server->getCommentsManager(), |
|
| 263 | - $userSession |
|
| 264 | - )); |
|
| 265 | - $this->server->addPlugin(new \OCA\DAV\CalDAV\Search\SearchPlugin()); |
|
| 266 | - if ($view !== null) { |
|
| 267 | - $this->server->addPlugin(new FilesReportPlugin( |
|
| 268 | - $this->server->tree, |
|
| 269 | - $view, |
|
| 270 | - \OC::$server->getSystemTagManager(), |
|
| 271 | - \OC::$server->getSystemTagObjectMapper(), |
|
| 272 | - \OC::$server->getTagManager(), |
|
| 273 | - $userSession, |
|
| 274 | - \OC::$server->getGroupManager(), |
|
| 275 | - $userFolder, |
|
| 276 | - \OC::$server->getAppManager() |
|
| 277 | - )); |
|
| 278 | - $lazySearchBackend->setBackend(new \OCA\DAV\Files\FileSearchBackend( |
|
| 279 | - $this->server->tree, |
|
| 280 | - $user, |
|
| 281 | - \OC::$server->getRootFolder(), |
|
| 282 | - \OC::$server->getShareManager(), |
|
| 283 | - $view |
|
| 284 | - )); |
|
| 285 | - } |
|
| 286 | - $this->server->addPlugin(new \OCA\DAV\CalDAV\BirthdayCalendar\EnablePlugin( |
|
| 287 | - \OC::$server->getConfig(), |
|
| 288 | - \OC::$server->query(BirthdayService::class) |
|
| 289 | - )); |
|
| 290 | - $this->server->addPlugin(new AppleProvisioningPlugin( |
|
| 291 | - \OC::$server->getUserSession(), |
|
| 292 | - \OC::$server->getURLGenerator(), |
|
| 293 | - \OC::$server->getThemingDefaults(), |
|
| 294 | - \OC::$server->getRequest(), |
|
| 295 | - \OC::$server->getL10N('dav'), |
|
| 296 | - function() { |
|
| 297 | - return UUIDUtil::getUUID(); |
|
| 298 | - } |
|
| 299 | - )); |
|
| 300 | - } |
|
| 301 | - |
|
| 302 | - // register plugins from apps |
|
| 303 | - $pluginManager = new PluginManager( |
|
| 304 | - \OC::$server, |
|
| 305 | - \OC::$server->getAppManager() |
|
| 306 | - ); |
|
| 307 | - foreach ($pluginManager->getAppPlugins() as $appPlugin) { |
|
| 308 | - $this->server->addPlugin($appPlugin); |
|
| 309 | - } |
|
| 310 | - foreach ($pluginManager->getAppCollections() as $appCollection) { |
|
| 311 | - $root->addChild($appCollection); |
|
| 312 | - } |
|
| 313 | - }); |
|
| 314 | - } |
|
| 315 | - |
|
| 316 | - public function exec() { |
|
| 317 | - $this->server->exec(); |
|
| 318 | - } |
|
| 319 | - |
|
| 320 | - private function requestIsForSubtree(array $subTrees): bool { |
|
| 321 | - foreach ($subTrees as $subTree) { |
|
| 322 | - $subTree = trim($subTree, ' /'); |
|
| 323 | - if (strpos($this->server->getRequestUri(), $subTree.'/') === 0) { |
|
| 324 | - return true; |
|
| 325 | - } |
|
| 326 | - } |
|
| 327 | - return false; |
|
| 328 | - } |
|
| 73 | + /** @var IRequest */ |
|
| 74 | + private $request; |
|
| 75 | + |
|
| 76 | + /** @var string */ |
|
| 77 | + private $baseUri; |
|
| 78 | + |
|
| 79 | + /** @var Connector\Sabre\Server */ |
|
| 80 | + public $server; |
|
| 81 | + |
|
| 82 | + public function __construct(IRequest $request, $baseUri) { |
|
| 83 | + $this->request = $request; |
|
| 84 | + $this->baseUri = $baseUri; |
|
| 85 | + $logger = \OC::$server->getLogger(); |
|
| 86 | + $dispatcher = \OC::$server->getEventDispatcher(); |
|
| 87 | + |
|
| 88 | + $root = new RootCollection(); |
|
| 89 | + $this->server = new \OCA\DAV\Connector\Sabre\Server(new CachingTree($root)); |
|
| 90 | + |
|
| 91 | + // Add maintenance plugin |
|
| 92 | + $this->server->addPlugin(new \OCA\DAV\Connector\Sabre\MaintenancePlugin(\OC::$server->getConfig())); |
|
| 93 | + |
|
| 94 | + // Backends |
|
| 95 | + $authBackend = new Auth( |
|
| 96 | + \OC::$server->getSession(), |
|
| 97 | + \OC::$server->getUserSession(), |
|
| 98 | + \OC::$server->getRequest(), |
|
| 99 | + \OC::$server->getTwoFactorAuthManager(), |
|
| 100 | + \OC::$server->getBruteForceThrottler() |
|
| 101 | + ); |
|
| 102 | + |
|
| 103 | + // Set URL explicitly due to reverse-proxy situations |
|
| 104 | + $this->server->httpRequest->setUrl($this->request->getRequestUri()); |
|
| 105 | + $this->server->setBaseUri($this->baseUri); |
|
| 106 | + |
|
| 107 | + $this->server->addPlugin(new BlockLegacyClientPlugin(\OC::$server->getConfig())); |
|
| 108 | + $this->server->addPlugin(new AnonymousOptionsPlugin()); |
|
| 109 | + $authPlugin = new Plugin(); |
|
| 110 | + $authPlugin->addBackend(new PublicAuth()); |
|
| 111 | + $this->server->addPlugin($authPlugin); |
|
| 112 | + |
|
| 113 | + // allow setup of additional auth backends |
|
| 114 | + $event = new SabrePluginEvent($this->server); |
|
| 115 | + $dispatcher->dispatch('OCA\DAV\Connector\Sabre::authInit', $event); |
|
| 116 | + |
|
| 117 | + $bearerAuthBackend = new BearerAuth( |
|
| 118 | + \OC::$server->getUserSession(), |
|
| 119 | + \OC::$server->getSession(), |
|
| 120 | + \OC::$server->getRequest() |
|
| 121 | + ); |
|
| 122 | + $authPlugin->addBackend($bearerAuthBackend); |
|
| 123 | + // because we are throwing exceptions this plugin has to be the last one |
|
| 124 | + $authPlugin->addBackend($authBackend); |
|
| 125 | + |
|
| 126 | + // debugging |
|
| 127 | + if(\OC::$server->getConfig()->getSystemValue('debug', false)) { |
|
| 128 | + $this->server->addPlugin(new \Sabre\DAV\Browser\Plugin()); |
|
| 129 | + } else { |
|
| 130 | + $this->server->addPlugin(new DummyGetResponsePlugin()); |
|
| 131 | + } |
|
| 132 | + |
|
| 133 | + $this->server->addPlugin(new \OCA\DAV\Connector\Sabre\ExceptionLoggerPlugin('webdav', $logger)); |
|
| 134 | + $this->server->addPlugin(new \OCA\DAV\Connector\Sabre\LockPlugin()); |
|
| 135 | + $this->server->addPlugin(new \Sabre\DAV\Sync\Plugin()); |
|
| 136 | + |
|
| 137 | + // acl |
|
| 138 | + $acl = new DavAclPlugin(); |
|
| 139 | + $acl->principalCollectionSet = [ |
|
| 140 | + 'principals/users', |
|
| 141 | + 'principals/groups', |
|
| 142 | + 'principals/calendar-resources', |
|
| 143 | + 'principals/calendar-rooms', |
|
| 144 | + ]; |
|
| 145 | + $acl->defaultUsernamePath = 'principals/users'; |
|
| 146 | + $this->server->addPlugin($acl); |
|
| 147 | + |
|
| 148 | + // calendar plugins |
|
| 149 | + if ($this->requestIsForSubtree(['calendars', 'public-calendars', 'system-calendars', 'principals'])) { |
|
| 150 | + $this->server->addPlugin(new \OCA\DAV\CalDAV\Plugin()); |
|
| 151 | + $this->server->addPlugin(new \Sabre\CalDAV\ICSExportPlugin()); |
|
| 152 | + $this->server->addPlugin(new \OCA\DAV\CalDAV\Schedule\Plugin()); |
|
| 153 | + if (\OC::$server->getConfig()->getAppValue('dav', 'sendInvitations', 'yes') === 'yes') { |
|
| 154 | + $this->server->addPlugin(\OC::$server->query(\OCA\DAV\CalDAV\Schedule\IMipPlugin::class)); |
|
| 155 | + } |
|
| 156 | + |
|
| 157 | + $this->server->addPlugin(new CalDAV\WebcalCaching\Plugin($request)); |
|
| 158 | + $this->server->addPlugin(new \Sabre\CalDAV\Subscriptions\Plugin()); |
|
| 159 | + |
|
| 160 | + $this->server->addPlugin(new \Sabre\CalDAV\Notifications\Plugin()); |
|
| 161 | + $this->server->addPlugin(new DAV\Sharing\Plugin($authBackend, \OC::$server->getRequest())); |
|
| 162 | + $this->server->addPlugin(new \OCA\DAV\CalDAV\Publishing\PublishPlugin( |
|
| 163 | + \OC::$server->getConfig(), |
|
| 164 | + \OC::$server->getURLGenerator() |
|
| 165 | + )); |
|
| 166 | + } |
|
| 167 | + |
|
| 168 | + // addressbook plugins |
|
| 169 | + if ($this->requestIsForSubtree(['addressbooks', 'principals'])) { |
|
| 170 | + $this->server->addPlugin(new DAV\Sharing\Plugin($authBackend, \OC::$server->getRequest())); |
|
| 171 | + $this->server->addPlugin(new \OCA\DAV\CardDAV\Plugin()); |
|
| 172 | + $this->server->addPlugin(new VCFExportPlugin()); |
|
| 173 | + $this->server->addPlugin(new MultiGetExportPlugin()); |
|
| 174 | + $this->server->addPlugin(new HasPhotoPlugin()); |
|
| 175 | + $this->server->addPlugin(new ImageExportPlugin(new PhotoCache( |
|
| 176 | + \OC::$server->getAppDataDir('dav-photocache'), |
|
| 177 | + \OC::$server->getLogger()) |
|
| 178 | + )); |
|
| 179 | + } |
|
| 180 | + |
|
| 181 | + // system tags plugins |
|
| 182 | + $this->server->addPlugin(new SystemTagPlugin( |
|
| 183 | + \OC::$server->getSystemTagManager(), |
|
| 184 | + \OC::$server->getGroupManager(), |
|
| 185 | + \OC::$server->getUserSession() |
|
| 186 | + )); |
|
| 187 | + |
|
| 188 | + // comments plugin |
|
| 189 | + $this->server->addPlugin(new CommentsPlugin( |
|
| 190 | + \OC::$server->getCommentsManager(), |
|
| 191 | + \OC::$server->getUserSession() |
|
| 192 | + )); |
|
| 193 | + |
|
| 194 | + $this->server->addPlugin(new CopyEtagHeaderPlugin()); |
|
| 195 | + $this->server->addPlugin(new ChunkingPlugin()); |
|
| 196 | + |
|
| 197 | + // allow setup of additional plugins |
|
| 198 | + $dispatcher->dispatch('OCA\DAV\Connector\Sabre::addPlugin', $event); |
|
| 199 | + |
|
| 200 | + // Some WebDAV clients do require Class 2 WebDAV support (locking), since |
|
| 201 | + // we do not provide locking we emulate it using a fake locking plugin. |
|
| 202 | + if($request->isUserAgent([ |
|
| 203 | + '/WebDAVFS/', |
|
| 204 | + '/OneNote/', |
|
| 205 | + '/^Microsoft-WebDAV/',// Microsoft-WebDAV-MiniRedir/6.1.7601 |
|
| 206 | + ])) { |
|
| 207 | + $this->server->addPlugin(new FakeLockerPlugin()); |
|
| 208 | + } |
|
| 209 | + |
|
| 210 | + if (BrowserErrorPagePlugin::isBrowserRequest($request)) { |
|
| 211 | + $this->server->addPlugin(new BrowserErrorPagePlugin()); |
|
| 212 | + } |
|
| 213 | + |
|
| 214 | + $lazySearchBackend = new LazySearchBackend(); |
|
| 215 | + $this->server->addPlugin(new SearchPlugin($lazySearchBackend)); |
|
| 216 | + |
|
| 217 | + // wait with registering these until auth is handled and the filesystem is setup |
|
| 218 | + $this->server->on('beforeMethod', function () use ($root, $lazySearchBackend) { |
|
| 219 | + // custom properties plugin must be the last one |
|
| 220 | + $userSession = \OC::$server->getUserSession(); |
|
| 221 | + $user = $userSession->getUser(); |
|
| 222 | + if ($user !== null) { |
|
| 223 | + $view = \OC\Files\Filesystem::getView(); |
|
| 224 | + $this->server->addPlugin( |
|
| 225 | + new FilesPlugin( |
|
| 226 | + $this->server->tree, |
|
| 227 | + \OC::$server->getConfig(), |
|
| 228 | + $this->request, |
|
| 229 | + \OC::$server->getPreviewManager(), |
|
| 230 | + false, |
|
| 231 | + !\OC::$server->getConfig()->getSystemValue('debug', false) |
|
| 232 | + ) |
|
| 233 | + ); |
|
| 234 | + |
|
| 235 | + $this->server->addPlugin( |
|
| 236 | + new \Sabre\DAV\PropertyStorage\Plugin( |
|
| 237 | + new CustomPropertiesBackend( |
|
| 238 | + $this->server->tree, |
|
| 239 | + \OC::$server->getDatabaseConnection(), |
|
| 240 | + \OC::$server->getUserSession()->getUser() |
|
| 241 | + ) |
|
| 242 | + ) |
|
| 243 | + ); |
|
| 244 | + if ($view !== null) { |
|
| 245 | + $this->server->addPlugin( |
|
| 246 | + new QuotaPlugin($view, false)); |
|
| 247 | + } |
|
| 248 | + $this->server->addPlugin( |
|
| 249 | + new TagsPlugin( |
|
| 250 | + $this->server->tree, \OC::$server->getTagManager() |
|
| 251 | + ) |
|
| 252 | + ); |
|
| 253 | + // TODO: switch to LazyUserFolder |
|
| 254 | + $userFolder = \OC::$server->getUserFolder(); |
|
| 255 | + $this->server->addPlugin(new SharesPlugin( |
|
| 256 | + $this->server->tree, |
|
| 257 | + $userSession, |
|
| 258 | + $userFolder, |
|
| 259 | + \OC::$server->getShareManager() |
|
| 260 | + )); |
|
| 261 | + $this->server->addPlugin(new CommentPropertiesPlugin( |
|
| 262 | + \OC::$server->getCommentsManager(), |
|
| 263 | + $userSession |
|
| 264 | + )); |
|
| 265 | + $this->server->addPlugin(new \OCA\DAV\CalDAV\Search\SearchPlugin()); |
|
| 266 | + if ($view !== null) { |
|
| 267 | + $this->server->addPlugin(new FilesReportPlugin( |
|
| 268 | + $this->server->tree, |
|
| 269 | + $view, |
|
| 270 | + \OC::$server->getSystemTagManager(), |
|
| 271 | + \OC::$server->getSystemTagObjectMapper(), |
|
| 272 | + \OC::$server->getTagManager(), |
|
| 273 | + $userSession, |
|
| 274 | + \OC::$server->getGroupManager(), |
|
| 275 | + $userFolder, |
|
| 276 | + \OC::$server->getAppManager() |
|
| 277 | + )); |
|
| 278 | + $lazySearchBackend->setBackend(new \OCA\DAV\Files\FileSearchBackend( |
|
| 279 | + $this->server->tree, |
|
| 280 | + $user, |
|
| 281 | + \OC::$server->getRootFolder(), |
|
| 282 | + \OC::$server->getShareManager(), |
|
| 283 | + $view |
|
| 284 | + )); |
|
| 285 | + } |
|
| 286 | + $this->server->addPlugin(new \OCA\DAV\CalDAV\BirthdayCalendar\EnablePlugin( |
|
| 287 | + \OC::$server->getConfig(), |
|
| 288 | + \OC::$server->query(BirthdayService::class) |
|
| 289 | + )); |
|
| 290 | + $this->server->addPlugin(new AppleProvisioningPlugin( |
|
| 291 | + \OC::$server->getUserSession(), |
|
| 292 | + \OC::$server->getURLGenerator(), |
|
| 293 | + \OC::$server->getThemingDefaults(), |
|
| 294 | + \OC::$server->getRequest(), |
|
| 295 | + \OC::$server->getL10N('dav'), |
|
| 296 | + function() { |
|
| 297 | + return UUIDUtil::getUUID(); |
|
| 298 | + } |
|
| 299 | + )); |
|
| 300 | + } |
|
| 301 | + |
|
| 302 | + // register plugins from apps |
|
| 303 | + $pluginManager = new PluginManager( |
|
| 304 | + \OC::$server, |
|
| 305 | + \OC::$server->getAppManager() |
|
| 306 | + ); |
|
| 307 | + foreach ($pluginManager->getAppPlugins() as $appPlugin) { |
|
| 308 | + $this->server->addPlugin($appPlugin); |
|
| 309 | + } |
|
| 310 | + foreach ($pluginManager->getAppCollections() as $appCollection) { |
|
| 311 | + $root->addChild($appCollection); |
|
| 312 | + } |
|
| 313 | + }); |
|
| 314 | + } |
|
| 315 | + |
|
| 316 | + public function exec() { |
|
| 317 | + $this->server->exec(); |
|
| 318 | + } |
|
| 319 | + |
|
| 320 | + private function requestIsForSubtree(array $subTrees): bool { |
|
| 321 | + foreach ($subTrees as $subTree) { |
|
| 322 | + $subTree = trim($subTree, ' /'); |
|
| 323 | + if (strpos($this->server->getRequestUri(), $subTree.'/') === 0) { |
|
| 324 | + return true; |
|
| 325 | + } |
|
| 326 | + } |
|
| 327 | + return false; |
|
| 328 | + } |
|
| 329 | 329 | } |
@@ -36,58 +36,58 @@ |
||
| 36 | 36 | |
| 37 | 37 | class CreateCalendar extends Command { |
| 38 | 38 | |
| 39 | - /** @var IUserManager */ |
|
| 40 | - protected $userManager; |
|
| 39 | + /** @var IUserManager */ |
|
| 40 | + protected $userManager; |
|
| 41 | 41 | |
| 42 | - /** @var IGroupManager $groupManager */ |
|
| 43 | - private $groupManager; |
|
| 42 | + /** @var IGroupManager $groupManager */ |
|
| 43 | + private $groupManager; |
|
| 44 | 44 | |
| 45 | - /** @var \OCP\IDBConnection */ |
|
| 46 | - protected $dbConnection; |
|
| 45 | + /** @var \OCP\IDBConnection */ |
|
| 46 | + protected $dbConnection; |
|
| 47 | 47 | |
| 48 | - /** |
|
| 49 | - * @param IUserManager $userManager |
|
| 50 | - * @param IGroupManager $groupManager |
|
| 51 | - * @param IDBConnection $dbConnection |
|
| 52 | - */ |
|
| 53 | - function __construct(IUserManager $userManager, IGroupManager $groupManager, IDBConnection $dbConnection) { |
|
| 54 | - parent::__construct(); |
|
| 55 | - $this->userManager = $userManager; |
|
| 56 | - $this->groupManager = $groupManager; |
|
| 57 | - $this->dbConnection = $dbConnection; |
|
| 58 | - } |
|
| 48 | + /** |
|
| 49 | + * @param IUserManager $userManager |
|
| 50 | + * @param IGroupManager $groupManager |
|
| 51 | + * @param IDBConnection $dbConnection |
|
| 52 | + */ |
|
| 53 | + function __construct(IUserManager $userManager, IGroupManager $groupManager, IDBConnection $dbConnection) { |
|
| 54 | + parent::__construct(); |
|
| 55 | + $this->userManager = $userManager; |
|
| 56 | + $this->groupManager = $groupManager; |
|
| 57 | + $this->dbConnection = $dbConnection; |
|
| 58 | + } |
|
| 59 | 59 | |
| 60 | - protected function configure() { |
|
| 61 | - $this |
|
| 62 | - ->setName('dav:create-calendar') |
|
| 63 | - ->setDescription('Create a dav calendar') |
|
| 64 | - ->addArgument('user', |
|
| 65 | - InputArgument::REQUIRED, |
|
| 66 | - 'User for whom the calendar will be created') |
|
| 67 | - ->addArgument('name', |
|
| 68 | - InputArgument::REQUIRED, |
|
| 69 | - 'Name of the calendar'); |
|
| 70 | - } |
|
| 60 | + protected function configure() { |
|
| 61 | + $this |
|
| 62 | + ->setName('dav:create-calendar') |
|
| 63 | + ->setDescription('Create a dav calendar') |
|
| 64 | + ->addArgument('user', |
|
| 65 | + InputArgument::REQUIRED, |
|
| 66 | + 'User for whom the calendar will be created') |
|
| 67 | + ->addArgument('name', |
|
| 68 | + InputArgument::REQUIRED, |
|
| 69 | + 'Name of the calendar'); |
|
| 70 | + } |
|
| 71 | 71 | |
| 72 | - protected function execute(InputInterface $input, OutputInterface $output) { |
|
| 73 | - $user = $input->getArgument('user'); |
|
| 74 | - if (!$this->userManager->userExists($user)) { |
|
| 75 | - throw new \InvalidArgumentException("User <$user> in unknown."); |
|
| 76 | - } |
|
| 77 | - $principalBackend = new Principal( |
|
| 78 | - $this->userManager, |
|
| 79 | - $this->groupManager, |
|
| 80 | - \OC::$server->getShareManager(), |
|
| 81 | - \OC::$server->getUserSession(), |
|
| 82 | - \OC::$server->getAppManager(), |
|
| 83 | - \OC::$server->query(ProxyMapper::class) |
|
| 84 | - ); |
|
| 85 | - $random = \OC::$server->getSecureRandom(); |
|
| 86 | - $logger = \OC::$server->getLogger(); |
|
| 87 | - $dispatcher = \OC::$server->getEventDispatcher(); |
|
| 72 | + protected function execute(InputInterface $input, OutputInterface $output) { |
|
| 73 | + $user = $input->getArgument('user'); |
|
| 74 | + if (!$this->userManager->userExists($user)) { |
|
| 75 | + throw new \InvalidArgumentException("User <$user> in unknown."); |
|
| 76 | + } |
|
| 77 | + $principalBackend = new Principal( |
|
| 78 | + $this->userManager, |
|
| 79 | + $this->groupManager, |
|
| 80 | + \OC::$server->getShareManager(), |
|
| 81 | + \OC::$server->getUserSession(), |
|
| 82 | + \OC::$server->getAppManager(), |
|
| 83 | + \OC::$server->query(ProxyMapper::class) |
|
| 84 | + ); |
|
| 85 | + $random = \OC::$server->getSecureRandom(); |
|
| 86 | + $logger = \OC::$server->getLogger(); |
|
| 87 | + $dispatcher = \OC::$server->getEventDispatcher(); |
|
| 88 | 88 | |
| 89 | - $name = $input->getArgument('name'); |
|
| 90 | - $caldav = new CalDavBackend($this->dbConnection, $principalBackend, $this->userManager, $this->groupManager, $random, $logger, $dispatcher); |
|
| 91 | - $caldav->createCalendar("principals/users/$user", $name, []); |
|
| 92 | - } |
|
| 89 | + $name = $input->getArgument('name'); |
|
| 90 | + $caldav = new CalDavBackend($this->dbConnection, $principalBackend, $this->userManager, $this->groupManager, $random, $logger, $dispatcher); |
|
| 91 | + $caldav->createCalendar("principals/users/$user", $name, []); |
|
| 92 | + } |
|
| 93 | 93 | } |