DatabaseAuthorizer.cpp [plain text]
#include "config.h"
#include "DatabaseAuthorizer.h"
#include "Database.h"
#include "PlatformString.h"
namespace WebCore {
DatabaseAuthorizer::DatabaseAuthorizer()
: m_securityEnabled(false)
{
reset();
}
void DatabaseAuthorizer::reset()
{
m_lastActionWasInsert = false;
m_lastActionChangedDatabase = false;
m_readOnly = false;
}
int DatabaseAuthorizer::createTable(const String& tableName)
{
if (m_readOnly && m_securityEnabled)
return SQLAuthDeny;
m_lastActionChangedDatabase = true;
return denyBasedOnTableName(tableName);
}
int DatabaseAuthorizer::createTempTable(const String& tableName)
{
return denyBasedOnTableName(tableName);
}
int DatabaseAuthorizer::dropTable(const String& tableName)
{
if (m_readOnly && m_securityEnabled)
return SQLAuthDeny;
return denyBasedOnTableName(tableName);
}
int DatabaseAuthorizer::dropTempTable(const String& tableName)
{
return denyBasedOnTableName(tableName);
}
int DatabaseAuthorizer::allowAlterTable(const String&, const String& tableName)
{
if (m_readOnly && m_securityEnabled)
return SQLAuthDeny;
m_lastActionChangedDatabase = true;
return denyBasedOnTableName(tableName);
}
int DatabaseAuthorizer::createIndex(const String&, const String& tableName)
{
if (m_readOnly && m_securityEnabled)
return SQLAuthDeny;
m_lastActionChangedDatabase = true;
return denyBasedOnTableName(tableName);
}
int DatabaseAuthorizer::createTempIndex(const String&, const String& tableName)
{
return denyBasedOnTableName(tableName);
}
int DatabaseAuthorizer::dropIndex(const String&, const String& tableName)
{
if (m_readOnly && m_securityEnabled)
return SQLAuthDeny;
return denyBasedOnTableName(tableName);
}
int DatabaseAuthorizer::dropTempIndex(const String&, const String& tableName)
{
return denyBasedOnTableName(tableName);
}
int DatabaseAuthorizer::createTrigger(const String&, const String& tableName)
{
if (m_readOnly && m_securityEnabled)
return SQLAuthDeny;
m_lastActionChangedDatabase = true;
return denyBasedOnTableName(tableName);
}
int DatabaseAuthorizer::createTempTrigger(const String&, const String& tableName)
{
return denyBasedOnTableName(tableName);
}
int DatabaseAuthorizer::dropTrigger(const String&, const String& tableName)
{
if (m_readOnly && m_securityEnabled)
return SQLAuthDeny;
return denyBasedOnTableName(tableName);
}
int DatabaseAuthorizer::dropTempTrigger(const String&, const String& tableName)
{
return denyBasedOnTableName(tableName);
}
int DatabaseAuthorizer::createVTable(const String&, const String&)
{
if (m_readOnly && m_securityEnabled)
return SQLAuthDeny;
m_lastActionChangedDatabase = true;
return m_securityEnabled ? SQLAuthDeny : SQLAuthAllow;
}
int DatabaseAuthorizer::dropVTable(const String&, const String&)
{
if (m_readOnly && m_securityEnabled)
return SQLAuthDeny;
return m_securityEnabled ? SQLAuthDeny : SQLAuthAllow;
}
int DatabaseAuthorizer::allowDelete(const String& tableName)
{
if (m_readOnly && m_securityEnabled)
return SQLAuthDeny;
return denyBasedOnTableName(tableName);
}
int DatabaseAuthorizer::allowInsert(const String& tableName)
{
if (m_readOnly && m_securityEnabled)
return SQLAuthDeny;
m_lastActionChangedDatabase = true;
m_lastActionWasInsert = true;
return denyBasedOnTableName(tableName);
}
int DatabaseAuthorizer::allowUpdate(const String& tableName, const String&)
{
if (m_readOnly && m_securityEnabled)
return SQLAuthDeny;
m_lastActionChangedDatabase = true;
return denyBasedOnTableName(tableName);
}
int DatabaseAuthorizer::allowTransaction()
{
return m_securityEnabled ? SQLAuthDeny : SQLAuthAllow;
}
int DatabaseAuthorizer::allowRead(const String& tableName, const String&)
{
return denyBasedOnTableName(tableName);
}
int DatabaseAuthorizer::allowAnalyze(const String& tableName)
{
return denyBasedOnTableName(tableName);
}
int DatabaseAuthorizer::allowPragma(const String&, const String&)
{
return m_securityEnabled ? SQLAuthDeny : SQLAuthAllow;
}
int DatabaseAuthorizer::allowAttach(const String&)
{
return m_securityEnabled ? SQLAuthDeny : SQLAuthAllow;
}
int DatabaseAuthorizer::allowDetach(const String&)
{
return m_securityEnabled ? SQLAuthDeny : SQLAuthAllow;
}
int DatabaseAuthorizer::allowFunction(const String&)
{
return SQLAuthAllow;
}
void DatabaseAuthorizer::disable()
{
m_securityEnabled = false;
}
void DatabaseAuthorizer::enable()
{
m_securityEnabled = true;
}
void DatabaseAuthorizer::setReadOnly()
{
m_readOnly = true;
}
int DatabaseAuthorizer::denyBasedOnTableName(const String& tableName)
{
if (!m_securityEnabled)
return SQLAuthAllow;
if (equalIgnoringCase(tableName, Database::databaseInfoTableName()))
return SQLAuthDeny;
return SQLAuthAllow;
}
}