/*
- * charybdis: an advanced ircd
- * m_grant: handle services grant commands
+ * Copyright (C) 2006 Jilles Tjoelker
+ * Copyright (C) 2006 Stephen Bennett <spb@gentoo.org>
+ * Copyright (C) 2016 Jason Volk <jason@zemos.net>
+ *
+ * Permission to use, copy, modify, and/or distribute this software for any
+ * purpose with or without fee is hereby granted, provided that the above
+ * copyright notice and this permission notice is present in all copies.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
+ * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+ * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+ * DISCLAIMED. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING
+ * IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
+ * POSSIBILITY OF SUCH DAMAGE.
*/
#include "stdinc.h"
+#include "modules.h"
+#include "numeric.h"
#include "client.h"
#include "ircd.h"
-#include "numeric.h"
-#include "s_serv.h"
#include "send.h"
-#include "msg.h"
-#include "parse.h"
-#include "modules.h"
+#include "s_user.h"
+#include "s_serv.h"
#include "s_conf.h"
-#include "hash.h"
+#include "s_newconf.h"
+#include "privilege.h"
+
-struct flag_list
+static
+void set_mode(struct Client *const target,
+ const char *const str)
{
- char *name;
- int flag;
-};
+ const char *mode[] =
+ {
+ target->name,
+ target->name,
+ str,
+ NULL
+ };
-static struct flag_list flaglist[] = {
- {"kick", CHANROLE_KICK},
- {"grant", CHANROLE_GRANT},
- {"mode", CHANROLE_MODE},
- {"topic", CHANROLE_TOPIC},
- {"status", CHANROLE_STATUS},
- {NULL, 0},
-};
+ user_mode(target, target, 3, mode);
+}
-static int me_grant(struct Client *, struct Client *, int, const char **);
-struct Message grant_msgtab = {
- "GRANT", 0, 0, 0, MFLG_SLOW,
- {mg_unreg, mg_ignore, mg_ignore, mg_ignore, {me_grant, 4}, mg_ignore}
-};
+static
+void set_privset(struct Client *const source,
+ struct Client *const target,
+ const char *const privset_name)
+{
+ struct PrivilegeSet *const privset = privilegeset_get(privset_name);
+ if(!privset)
+ {
+ sendto_one_notice(source, ":There is no privilege set named '%s'.", privset_name);
+ return;
+ }
-mapi_clist_av1 grant_clist[] = { &grant_msgtab, NULL };
-DECLARE_MODULE_AV1(grant, NULL, NULL, grant_clist, NULL, NULL, "Charybdis development team");
+ if(IsOper(target) && target->localClient->privset == privset)
+ {
+ sendto_one_notice(source, ":%s already has role of %s.", target->name, privset_name);
+ return;
+ }
-static void
-apply_flags(struct membership *msptr, const char *flagspec, unsigned int flagmask)
-{
- char *s, *t, *p;
+ if(IsOper(target))
+ {
+ sendto_one_notice(target, ":%s has changed your role to %s.", source->name, privset_name);
+ sendto_realops_snomask(SNO_GENERAL, L_NETWIDE, "%s has changed %s's role to %s.", get_oper_name(source), target->name, privset_name);
+ target->localClient->privset = privset;
+ return;
+ }
+
+ struct oper_conf oper =
+ {
+ .name = (char *)privset->name,
+ .privset = privset,
+ };
+
+ oper_up(target, &oper);
+ set_mode(target, "+o");
+ sendto_one_notice(target, ":%s has granted you the role of %s.", source->name, privset_name);
+ sendto_realops_snomask(SNO_GENERAL, L_NETWIDE, "%s has granted %s the role of %s.", get_oper_name(source), target->name, privset_name);
+}
- /* unset all chanroles as we're setting new ones */
- msptr->roles = 0;
- t = LOCAL_COPY(flagspec);
- for (s = rb_strtok_r(t, " ", &p); s; s = rb_strtok_r(NULL, " ", &p))
+static
+void grant_revoke(struct Client *const source,
+ struct Client *const target)
+{
+ if(!IsOper(target))
{
- const char *priv = s + 1; /* The actual priv */
- struct flag_list *fl;
- unsigned int flag = 0;
-
- /* Go through the flags list... */
- for(fl = flaglist; fl->name != NULL; fl++)
- {
- if (strcasecmp(fl->name, priv) == 0)
- {
- /* flagmask exists to ensure users can't give privileges they
- * don't possess themselves */
- if (!flagmask || (flagmask & fl->flag))
- flag = fl->flag;
- break;
- }
- }
-
- /* Ack no flag! */
- if (!flag)
- continue;
-
- if (s[0] == '-')
- RemoveChanRole(msptr, flag);
- else if (s[0] == '+')
- SetChanRole(msptr, flag);
+ sendto_one_notice(source, ":You can't deoper someone who isn't an oper.");
+ return;
}
+
+ set_mode(target, "-o");
+ sendto_one_notice(target, ":%s has deopered you.", source->name);
+ sendto_realops_snomask(SNO_GENERAL, L_NETWIDE, "%s has deopered %s.", get_oper_name(source), target->name);
}
-/*
- * me_grant
- *
- * parv[1] = channel
- * parv[2] = target UID
- * parv[3] = flag spec
-*/
-static int
-me_grant(struct Client *client_p, struct Client *source_p, int parc, const char *parv[])
+
+static
+void grant(struct MsgBuf *msgbuf, struct Client *client_p, struct Client *source_p, int parc, const char *parv[])
{
- struct Channel *chptr;
- struct Client *target_p;
- struct membership *msptr;
+ if(MyClient(source_p) && !HasPrivilege(source_p, "oper:grant"))
+ {
+ sendto_one(source_p, form_str(ERR_NOPRIVS), me.name, source_p->name, "grant");
+ return;
+ }
- if (!(chptr = find_channel(parv[1])))
- return 0;
+ if(parc < 3)
+ {
+ sendto_one_notice(source_p, ":usage GRANT: <target nickname> <privilegese name | 'revoke'>");
+ return;
+ }
+
+ struct Client *const target_p = find_person(parv[1]);
- if (!(target_p = find_person(parv[2])))
- return 0;
+ if(!target_p)
+ {
+ if(IsPerson(source_p))
+ sendto_one_numeric(source_p, ERR_NOSUCHNICK, form_str(ERR_NOSUCHNICK), parv[1]);
- /* Makes no sense to do this for non-local users */
- if(!MyClient(target_p))
- return 0;
+ return;
+ }
- if (!(msptr = find_channel_membership(chptr, target_p)))
- return 0;
+ if(!MyClient(source_p) && !find_shared_conf(source_p->username, source_p->host, source_p->servptr->name, SHARED_GRANT))
+ {
+ sendto_one_notice(source_p, ":GRANT failed: You have no shared configuration block on this server.");
+ return;
+ }
- apply_flags(msptr, parv[3], 0);
+ if(MyClient(target_p))
+ {
+ if(irccmp(parv[2], "revoke") == 0)
+ grant_revoke(source_p, target_p);
+ else
+ set_privset(source_p, target_p, parv[2]);
+ }
+ else if(MyClient(source_p))
+ {
+ sendto_one(target_p, ":%s ENCAP %s GRANT %s %s",
+ get_id(source_p, target_p),
+ target_p->servptr->name,
+ get_id(target_p, target_p),
+ parv[2]);
+ }
- return 0;
+ return;
}
+
+struct Message msgtab =
+{
+ "GRANT", 0, 0, 0, 0,
+ {
+ mg_ignore,
+ mg_not_oper,
+ mg_ignore,
+ mg_ignore,
+ { grant, 3 },
+ { grant, 3 }
+ }
+};
+
+mapi_clist_av1 grant_clist[] =
+{
+ &msgtab,
+ NULL
+};
+
+static const char grant_desc[] =
+ "Provides the grant facility for giving other users specific privilege sets";
+
+DECLARE_MODULE_AV2
+(
+ grant,
+ NULL,
+ NULL,
+ grant_clist,
+ NULL,
+ NULL,
+ NULL,
+ NULL,
+ grant_desc
+);