Security-54.tar.gz

[apple/security.git] / Keychain / SecAccess.cpp

diff --git a/Keychain/SecAccess.cpp b/Keychain/SecAccess.cpp
new file mode 100644 (file)
index 0000000..e4a4665
--- /dev/null
+++ b/Keychain/SecAccess.cpp
@@ -0,0 +1,110 @@
+/*
+ * Copyright (c) 2002 Apple Computer, Inc. All Rights Reserved.
+ * 
+ * The contents of this file constitute Original Code as defined in and are
+ * subject to the Apple Public Source License Version 1.2 (the 'License').
+ * You may not use this file except in compliance with the License. Please obtain
+ * a copy of the License at http://www.apple.com/publicsource and read it before
+ * using this file.
+ * 
+ * This Original Code and all software distributed under the License are
+ * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS
+ * OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES, INCLUDING WITHOUT
+ * LIMITATION, ANY WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR
+ * PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT. Please see the License for the
+ * specific language governing rights and limitations under the License.
+ */
+
+#include <Security/SecAccess.h>
+#include <Security/Access.h>
+#include "SecBridge.h"
+
+
+//
+// CF boilerplate
+//
+CFTypeID SecAccessGetTypeID(void)
+{
+       BEGIN_SECAPI
+       return gTypes().access.typeId;
+       END_SECAPI1(_kCFRuntimeNotATypeID)
+}
+
+
+//
+// API bridge calls
+//
+/*!
+ *     Create a new SecAccessRef that is set to the default configuration
+ *     of a (newly created) security object.
+ */
+OSStatus SecAccessCreate(CFStringRef descriptor, CFArrayRef trustedList, SecAccessRef *accessRef)
+{
+       BEGIN_SECAPI
+       Required(descriptor);
+       RefPointer<Access> access;
+       if (trustedList) {
+               CFIndex length = CFArrayGetCount(trustedList);
+               ACL::ApplicationList trusted;
+               for (CFIndex n = 0; n < length; n++)
+                       trusted.push_back(gTypes().trustedApplication.required(
+                               SecTrustedApplicationRef(CFArrayGetValueAtIndex(trustedList, n))));
+               access = new Access(cfString(descriptor), trusted);
+       } else {
+               access = new Access(cfString(descriptor));
+       }
+       Required(accessRef) = gTypes().access.handle(*access);
+       END_SECAPI
+}
+
+
+/*!
+ */
+OSStatus SecAccessCreateFromOwnerAndACL(const CSSM_ACL_OWNER_PROTOTYPE *owner,
+       uint32 aclCount, const CSSM_ACL_ENTRY_INFO *acls,
+       SecAccessRef *accessRef)
+{
+       BEGIN_SECAPI
+       Required(accessRef);    // preflight
+       RefPointer<Access> access = new Access(Required(owner), aclCount, &Required(acls));
+       *accessRef = gTypes().access.handle(*access);
+       END_SECAPI
+}
+
+
+/*!
+ */
+OSStatus SecAccessGetOwnerAndACL(SecAccessRef accessRef,
+       CSSM_ACL_OWNER_PROTOTYPE_PTR *owner,
+       uint32 *aclCount, CSSM_ACL_ENTRY_INFO_PTR *acls)
+{
+       BEGIN_SECAPI
+#if 0
+       gTypes().access.required(accessRef)->copyOwnerAndAcl(
+               Required(owner), Required(aclCount), Required(acls));
+#endif
+       END_SECAPI
+}
+
+
+/*!
+ */
+OSStatus SecAccessCopyACLList(SecAccessRef accessRef,
+       CFArrayRef *aclList)
+{
+       BEGIN_SECAPI
+       Required(aclList) = gTypes().access.required(accessRef)->copySecACLs();
+       END_SECAPI
+}
+
+
+/*!
+ */
+OSStatus SecAccessCopySelectedACLList(SecAccessRef accessRef,
+       CSSM_ACL_AUTHORIZATION_TAG action,
+       CFArrayRef *aclList)
+{
+       BEGIN_SECAPI
+       Required(aclList) = gTypes().access.required(accessRef)->copySecACLs(action);
+       END_SECAPI
+}