721df386c5
Session token and signature isn't presented in `Container` and `EACLTable` messages of NeoFS API V2 protocol. These entities are needed for access control and doesn't carry payload of these messages. Remove `SetSessionToken` / `SessionToken` methods of `container.Container` and `eacl.Table` types. Provide methods to specify these components in corresponding `Client` operations. Signed-off-by: Leonard Lyubich <leonard@nspcc.ru>
238 lines
4.5 KiB
Go
238 lines
4.5 KiB
Go
package eacl
|
|
|
|
import (
|
|
"crypto/sha256"
|
|
"fmt"
|
|
|
|
v2acl "github.com/nspcc-dev/neofs-api-go/v2/acl"
|
|
"github.com/nspcc-dev/neofs-api-go/v2/refs"
|
|
cid "github.com/nspcc-dev/neofs-sdk-go/container/id"
|
|
"github.com/nspcc-dev/neofs-sdk-go/version"
|
|
)
|
|
|
|
// Table is a group of ContainerEACL records for single container.
|
|
//
|
|
// Table is compatible with v2 acl.EACLTable message.
|
|
type Table struct {
|
|
version version.Version
|
|
cid *cid.ID
|
|
records []Record
|
|
}
|
|
|
|
// CID returns identifier of the container that should use given access control rules.
|
|
func (t Table) CID() (cID cid.ID, isSet bool) {
|
|
if t.cid != nil {
|
|
cID = *t.cid
|
|
isSet = true
|
|
}
|
|
|
|
return
|
|
}
|
|
|
|
// SetCID sets identifier of the container that should use given access control rules.
|
|
func (t *Table) SetCID(cid cid.ID) {
|
|
t.cid = &cid
|
|
}
|
|
|
|
// Version returns version of eACL format.
|
|
func (t Table) Version() version.Version {
|
|
return t.version
|
|
}
|
|
|
|
// SetVersion sets version of eACL format.
|
|
func (t *Table) SetVersion(version version.Version) {
|
|
t.version = version
|
|
}
|
|
|
|
// Records returns list of extended ACL rules.
|
|
func (t Table) Records() []Record {
|
|
return t.records
|
|
}
|
|
|
|
// AddRecord adds single eACL rule.
|
|
func (t *Table) AddRecord(r *Record) {
|
|
if r != nil {
|
|
t.records = append(t.records, *r)
|
|
}
|
|
}
|
|
|
|
// ToV2 converts Table to v2 acl.EACLTable message.
|
|
//
|
|
// Nil Table converts to nil.
|
|
func (t *Table) ToV2() *v2acl.Table {
|
|
if t == nil {
|
|
return nil
|
|
}
|
|
|
|
v2 := new(v2acl.Table)
|
|
var cidV2 refs.ContainerID
|
|
|
|
if t.cid != nil {
|
|
t.cid.WriteToV2(&cidV2)
|
|
v2.SetContainerID(&cidV2)
|
|
}
|
|
|
|
if t.records != nil {
|
|
records := make([]v2acl.Record, len(t.records))
|
|
for i := range t.records {
|
|
records[i] = *t.records[i].ToV2()
|
|
}
|
|
|
|
v2.SetRecords(records)
|
|
}
|
|
|
|
var verV2 refs.Version
|
|
t.version.WriteToV2(&verV2)
|
|
v2.SetVersion(&verV2)
|
|
|
|
return v2
|
|
}
|
|
|
|
// NewTable creates, initializes and returns blank Table instance.
|
|
//
|
|
// Defaults:
|
|
// - version: version.Current();
|
|
// - container ID: nil;
|
|
// - records: nil;
|
|
// - session token: nil;
|
|
// - signature: nil.
|
|
func NewTable() *Table {
|
|
t := new(Table)
|
|
t.SetVersion(version.Current())
|
|
|
|
return t
|
|
}
|
|
|
|
// CreateTable creates, initializes with parameters and returns Table instance.
|
|
func CreateTable(cid cid.ID) *Table {
|
|
t := NewTable()
|
|
t.SetCID(cid)
|
|
|
|
return t
|
|
}
|
|
|
|
// NewTableFromV2 converts v2 acl.EACLTable message to Table.
|
|
func NewTableFromV2(table *v2acl.Table) *Table {
|
|
t := new(Table)
|
|
|
|
if table == nil {
|
|
return t
|
|
}
|
|
|
|
// set version
|
|
if v := table.GetVersion(); v != nil {
|
|
ver := version.Version{}
|
|
ver.SetMajor(v.GetMajor())
|
|
ver.SetMinor(v.GetMinor())
|
|
|
|
t.SetVersion(ver)
|
|
}
|
|
|
|
// set container id
|
|
if id := table.GetContainerID(); id != nil {
|
|
if t.cid == nil {
|
|
t.cid = new(cid.ID)
|
|
}
|
|
|
|
var h [sha256.Size]byte
|
|
|
|
copy(h[:], id.GetValue())
|
|
t.cid.SetSHA256(h)
|
|
}
|
|
|
|
// set eacl records
|
|
v2records := table.GetRecords()
|
|
t.records = make([]Record, len(v2records))
|
|
|
|
for i := range v2records {
|
|
t.records[i] = *NewRecordFromV2(&v2records[i])
|
|
}
|
|
|
|
return t
|
|
}
|
|
|
|
// Marshal marshals Table into a protobuf binary form.
|
|
func (t *Table) Marshal() ([]byte, error) {
|
|
return t.ToV2().StableMarshal(nil), nil
|
|
}
|
|
|
|
// Unmarshal unmarshals protobuf binary representation of Table.
|
|
func (t *Table) Unmarshal(data []byte) error {
|
|
fV2 := new(v2acl.Table)
|
|
if err := fV2.Unmarshal(data); err != nil {
|
|
return err
|
|
}
|
|
|
|
// format checks
|
|
err := checkFormat(fV2)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
*t = *NewTableFromV2(fV2)
|
|
|
|
return nil
|
|
}
|
|
|
|
// MarshalJSON encodes Table to protobuf JSON format.
|
|
func (t *Table) MarshalJSON() ([]byte, error) {
|
|
return t.ToV2().MarshalJSON()
|
|
}
|
|
|
|
// UnmarshalJSON decodes Table from protobuf JSON format.
|
|
func (t *Table) UnmarshalJSON(data []byte) error {
|
|
tV2 := new(v2acl.Table)
|
|
if err := tV2.UnmarshalJSON(data); err != nil {
|
|
return err
|
|
}
|
|
|
|
err := checkFormat(tV2)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
*t = *NewTableFromV2(tV2)
|
|
|
|
return nil
|
|
}
|
|
|
|
// EqualTables compares Table with each other.
|
|
func EqualTables(t1, t2 Table) bool {
|
|
cID1, set1 := t1.CID()
|
|
cID2, set2 := t2.CID()
|
|
|
|
if set1 != set2 || cID1 != cID2 ||
|
|
!t1.Version().Equal(t2.Version()) {
|
|
return false
|
|
}
|
|
|
|
rs1, rs2 := t1.Records(), t2.Records()
|
|
|
|
if len(rs1) != len(rs2) {
|
|
return false
|
|
}
|
|
|
|
for i := 0; i < len(rs1); i++ {
|
|
if !equalRecords(rs1[i], rs2[i]) {
|
|
return false
|
|
}
|
|
}
|
|
|
|
return true
|
|
}
|
|
|
|
func checkFormat(v2 *v2acl.Table) error {
|
|
var cID cid.ID
|
|
|
|
cidV2 := v2.GetContainerID()
|
|
if cidV2 == nil {
|
|
return nil
|
|
}
|
|
|
|
err := cID.ReadFromV2(*cidV2)
|
|
if err != nil {
|
|
return fmt.Errorf("could not convert V2 container ID: %w", err)
|
|
}
|
|
|
|
return nil
|
|
}
|