frostfs-contract/policy/policy_contract.go

package policy

import (
	"git.frostfs.info/TrueCloudLab/frostfs-contract/common"
	"github.com/nspcc-dev/neo-go/pkg/interop"
	"github.com/nspcc-dev/neo-go/pkg/interop/iterator"
	"github.com/nspcc-dev/neo-go/pkg/interop/runtime"
	"github.com/nspcc-dev/neo-go/pkg/interop/storage"
)

// Kind represents the object the chain is attached to.
// Currently only namespace and container are supported.
type Kind byte

const (
	Namespace = 'n'
	Container = 'c'
	IAM       = 'i'
)

const (
	ownerKeyPrefix = 'o'
)

const (
	// ErrNotAutorized is returned when the none of the transaction signers
	// belongs to the list of autorized keys.
	ErrNotAutorized = "none of the signers is not autorized to change the contract"
)

// _deploy function sets up initial list of inner ring public keys.
func _deploy(data any, isUpdate bool) {
	if isUpdate {
		return
	}

	args := data.(struct {
		Admin interop.Hash160
	})
	ctx := storage.GetContext()
	if args.Admin != nil {
		if len(args.Admin) != 20 {
			panic("invaliad admin hash length")
		}
		storage.Put(ctx, []byte{ownerKeyPrefix}, args.Admin)
	}
}

func checkAuthorization(ctx storage.Context) {
	if runtime.CheckWitness(common.AlphabetAddress()) {
		return
	}

	admin := getAdmin(ctx)
	if admin != nil && runtime.CheckWitness(admin) {
		return
	}

	panic(ErrNotAutorized)
}

func SetAdmin(addr interop.Hash160) {
	common.CheckAlphabetWitness()

	ctx := storage.GetContext()
	storage.Put(ctx, []byte{ownerKeyPrefix}, addr)
}

func GetAdmin() interop.Hash160 {
	ctx := storage.GetReadOnlyContext()
	return getAdmin(ctx)
}

func getAdmin(ctx storage.Context) interop.Hash160 {
	return storage.Get(ctx, []byte{ownerKeyPrefix}).(interop.Hash160)
}

func storageKey(prefix Kind, entityName, name string) []byte {
	ln := len(entityName)
	key := append([]byte{byte(prefix)}, byte(ln&0xFF), byte(ln>>8))
	key = append(key, entityName...)
	return append(key, name...)
}

func AddChain(entity Kind, entityName, name string, chain []byte) {
	ctx := storage.GetContext()
	checkAuthorization(ctx)

	key := storageKey(entity, entityName, name)
	storage.Put(ctx, key, chain)
}

func GetChain(entity Kind, entityName, name string) []byte {
	ctx := storage.GetReadOnlyContext()
	key := storageKey(entity, entityName, name)
	data := storage.Get(ctx, key).([]byte)
	if data == nil {
		panic("not found")
	}

	return data
}

func RemoveChain(entity Kind, entityName string, name string) {
	ctx := storage.GetContext()
	checkAuthorization(ctx)

	key := storageKey(entity, entityName, name)
	storage.Delete(ctx, key)
}

func RemoveChainsByPrefix(entity Kind, entityName string, name string) {
	ctx := storage.GetContext()
	checkAuthorization(ctx)

	key := storageKey(entity, entityName, name)
	it := storage.Find(ctx, key, storage.KeysOnly)
	for iterator.Next(it) {
		storage.Delete(ctx, iterator.Value(it).([]byte))
	}
}

// ListChains lists all chains for the namespace by prefix.
// container may be empty.
func ListChains(namespace, container, name string) [][]byte {
	result := ListChainsByPrefix(Namespace, namespace, name)

	if container != "" {
		result = append(result, ListChainsByPrefix(Container, container, name)...)
	}

	return result
}

// ListChainsByPrefix list all chains for the provided kind and entity by prefix.
func ListChainsByPrefix(entity Kind, entityName, prefix string) [][]byte {
	ctx := storage.GetReadOnlyContext()

	result := [][]byte{}

	keyPrefix := storageKey(entity, entityName, prefix)
	it := storage.Find(ctx, keyPrefix, storage.ValuesOnly)
	for iterator.Next(it) {
		result = append(result, iterator.Value(it).([]byte))
	}

	return result
}