File authenticate_access_auth.hpp¶

File List > cubrid > src > object > authenticate_access_auth.hpp
/*
 *
 * Copyright 2016 CUBRID Corporation
 *
 *  Licensed under the Apache License, Version 2.0 (the "License");
 *  you may not use this file except in compliance with the License.
 *  You may obtain a copy of the License at
 *
 *      http://www.apache.org/licenses/LICENSE-2.0
 *
 *  Unless required by applicable law or agreed to in writing, software
 *  distributed under the License is distributed on an "AS IS" BASIS,
 *  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 *  See the License for the specific language governing permissions and
 *  limitations under the License.
 *
 */

/*
 * authenticate_access_auth.hpp -
 */

#ifndef _authenticate_access_auth_HPP_
#define _authenticate_access_auth_HPP_

#define AU_AUTH_ATTR_OWNER     "owner"
#define AU_AUTH_ATTR_GRANTS    "grants"

#define AU_AUTH_ATTR_GRANTOR    "grantor"
#define AU_AUTH_ATTR_GRANTEE    "grantee"

#include "dbtype_def.h"


//
#include "authenticate_grant.hpp"
#include "set_object.h"
#include "dbtype.h"
#include "error_manager.h"
#include "object_accessor.h"

/*
* access _db_auth through db_obj interface
*/
class au_auth_accessor
{
  private:
    // TODO: thread safe?
    MOP m_au_class_mop;

    MOP m_au_obj;

    enum
    {
      INDEX_FOR_GRANTEE_NAME = 0,
      INDEX_FOR_GRANTOR_NAME = 1,
      INDEX_FOR_OBJECT_NAME = 2,
      INDEX_FOR_AUTH_TYPE = 3,
      /* Total count for the above */
      COUNT_FOR_VARIABLES
    };

    int create_new_auth ();
    int set_new_auth (DB_OBJECT_TYPE obj_type, MOP au_object, MOP grantor, MOP user, MOP obj_mop, DB_AUTH auth_type,
              bool grant_option);
    int get_new_auth (DB_OBJECT_TYPE obj_type, MOP grantor, MOP user, MOP obj_mop, DB_AUTH auth_type);

  public:
    explicit au_auth_accessor ();

    int insert_auth (DB_OBJECT_TYPE obj_type, MOP grantor, MOP user, MOP obj_mop, DB_AUTH auth_type, int grant_option);
    int update_auth (DB_OBJECT_TYPE obj_type, MOP grantor, MOP user, MOP obj_mop, DB_AUTH auth_type, int grant_option);
    int delete_auth (DB_OBJECT_TYPE obj_type, MOP grantor, MOP user, MOP obj_mop, DB_AUTH auth_type);

    MOP get_auth_class_mop ()
    {
      return m_au_class_mop;
    }

    MOP get_auth_object ()
    {
      return m_au_obj;
    }
};

/*
* access _db_auth through executing query
*/
extern int au_delete_auth_of_dropping_user (MOP user);

/*
* access db_authorization through executing query
*/
extern int au_delete_authorizartion_of_dropping_user (MOP user);

// delete _db_auth records refers to the given table
extern int au_delete_auth_of_dropping_database_object (DB_OBJECT_TYPE obj_type, const char *name);

/*
* drop a class, virtual class and procedure all privileges are revoked.
*/
extern int au_object_revoke_all_privileges (DB_OBJECT_TYPE obj_type, MOP grantor_mop, const char *unique_name);

/*
* when a user is deleted, all of their privileges are revoked.
*/
extern int au_user_revoke_all_privileges (MOP user_mop);

/*
* when the owner of a class, virtual class, or procedure is changed, the previous owner's privileges are transferred to the new owner.
*/
extern int au_object_owner_change_privileges (DB_OBJECT_TYPE obj_type, MOP object_mop, MOP old_owner_mop,
    MOP new_owner_mop, const char *unique_name);

#endif // _authenticate_access_auth_HPP_