[apple/security.git] / cdsa / cdsa_client / aclsupport.h

/*
 * Copyright (c) 2000-2001 Apple Computer, Inc. All Rights Reserved.
 * 
 * The contents of this file constitute Original Code as defined in and are
 * subject to the Apple Public Source License Version 1.2 (the 'License').
 * You may not use this file except in compliance with the License. Please obtain
 * a copy of the License at http://www.apple.com/publicsource and read it before
 * using this file.
 * 
 * This Original Code and all software distributed under the License are
 * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS
 * OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES, INCLUDING WITHOUT
 * LIMITATION, ANY WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR
 * PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT. Please see the License for the
 * specific language governing rights and limitations under the License.
 */


//
// aclsupport.h - support for special Keychain style acls
//

#ifndef _ACLSUPPORT_H_
#define _ACLSUPPORT_H_

#include <Security/cssmdata.h>
#include <Security/threading.h>
#include <Security/cssmalloc.h>
#include <Security/refcount.h>
#include <Security/keyclient.h>
#include <vector>


namespace Security
{

namespace CssmClient
{

class TrustedApplicationImpl : public RefCount
{
public:
	TrustedApplicationImpl(const CssmData &signature, const CssmData &comment, bool enabled);
	TrustedApplicationImpl(const char *path, const CssmData &comment, bool enabled);

	const CssmData &signature() const;
	const CssmData &comment() const;
	bool enabled() const;
	void enabled(bool enabled);

	bool sameSignature(const char *path); // return true if object at path has same signature
	CssmAutoData calcSignature(const char *path); // generate a signature

private:
	CssmAutoData mSignature;
	CssmAutoData mComment;
	bool mEnabled;
};

class TrustedApplication : public RefPointer<TrustedApplicationImpl>
{
public:
	TrustedApplication();
	TrustedApplication(const CssmData &signature, const CssmData &comment, bool enabled = true);
	TrustedApplication(const char *path, const CssmData &comment, bool enabled = true);
};

class KeychainACL : public vector<TrustedApplication>
{
public:
	KeychainACL(const Key &key);
	void commit();

	void anyAllow(bool allow);
	bool anyAllow() const;

	void alwaysAskUser(bool allow);
	bool alwaysAskUser() const;
	bool isCustomACL() const;
    void label(const CssmData &label);

private:
	void initialize();
	Key mKey;
	bool mAnyAllow;
	bool mAlwaysAskUser;
	bool mIsCustomACL;
	CssmAutoData mLabel;

	CSSM_ACL_HANDLE mHandle;
};

}; // end namespace CssmClient

} // end namespace Security

#endif // _ACLSUPPORT_H_
Commit	Line	Data
bac41a7b A	1	/*
	2	* Copyright (c) 2000-2001 Apple Computer, Inc. All Rights Reserved.
	3	*
	4	* The contents of this file constitute Original Code as defined in and are
	5	* subject to the Apple Public Source License Version 1.2 (the 'License').
	6	* You may not use this file except in compliance with the License. Please obtain
	7	* a copy of the License at http://www.apple.com/publicsource and read it before
	8	* using this file.
	9	*
	10	* This Original Code and all software distributed under the License are
	11	* distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS
	12	* OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES, INCLUDING WITHOUT
	13	* LIMITATION, ANY WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR
	14	* PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT. Please see the License for the
	15	* specific language governing rights and limitations under the License.
	16	*/
	17
	18
	19	//
	20	// aclsupport.h - support for special Keychain style acls
	21	//
	22
	23	#ifndef _ACLSUPPORT_H_
	24	#define _ACLSUPPORT_H_
	25
	26	#include <Security/cssmdata.h>
	27	#include <Security/threading.h>
	28	#include <Security/cssmalloc.h>
	29	#include <Security/refcount.h>
	30	#include <Security/keyclient.h>
	31	#include <vector>
	32
	33
	34	namespace Security
	35	{
	36
	37	namespace CssmClient
	38	{
	39
	40	class TrustedApplicationImpl : public RefCount
	41	{
	42	public:
	43	TrustedApplicationImpl(const CssmData &signature, const CssmData &comment, bool enabled);
	44	TrustedApplicationImpl(const char *path, const CssmData &comment, bool enabled);
	45
	46	const CssmData &signature() const;
	47	const CssmData &comment() const;
	48	bool enabled() const;
	49	void enabled(bool enabled);
	50
	51	bool sameSignature(const char *path); // return true if object at path has same signature
	52	CssmAutoData calcSignature(const char *path); // generate a signature
	53
	54	private:
	55	CssmAutoData mSignature;
	56	CssmAutoData mComment;
	57	bool mEnabled;
	58	};
	59
	60	class TrustedApplication : public RefPointer<TrustedApplicationImpl>
	61	{
	62	public:
	63	TrustedApplication();
	64	TrustedApplication(const CssmData &signature, const CssmData &comment, bool enabled = true);
65	TrustedApplication(const char *path, const CssmData &comment, bool enabled = true);
66	};
67
68	class KeychainACL : public vector<TrustedApplication>
69	{
70	public:
71	KeychainACL(const Key &key);
72	void commit();
73
74	void anyAllow(bool allow);
75	bool anyAllow() const;
76
77	void alwaysAskUser(bool allow);
78	bool alwaysAskUser() const;
79	bool isCustomACL() const;
80	void label(const CssmData &label);
81
82	private:
83	void initialize();
84	Key mKey;
85	bool mAnyAllow;
86	bool mAlwaysAskUser;
87	bool mIsCustomACL;
88	CssmAutoData mLabel;
89
90	CSSM_ACL_HANDLE mHandle;
91	};
92
93	}; // end namespace CssmClient
94
95	} // end namespace Security
96
97	#endif // _ACLSUPPORT_H_