]> jfr.im git - solanum.git/blobdiff - modules/m_grant.c
m_ban: check only the added K-line
[solanum.git] / modules / m_grant.c
index a24e74ce8126948df7745f1ab1e13585d46aa30c..20c3a6226031594c759234f440d398fbfc809623 100644 (file)
 /*
- *  charybdis: an advanced ircd
- *  m_grant: handle services grant commands
+ * Copyright (C) 2006 Jilles Tjoelker
+ * Copyright (C) 2006 Stephen Bennett <spb@gentoo.org>
+ * Copyright (C) 2016 Jason Volk <jason@zemos.net>
+ *
+ * Permission to use, copy, modify, and/or distribute this software for any
+ * purpose with or without fee is hereby granted, provided that the above
+ * copyright notice and this permission notice is present in all copies.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
+ * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+ * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+ * DISCLAIMED. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT,
+ * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
+ * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING
+ * IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
+ * POSSIBILITY OF SUCH DAMAGE.
  */
 
 #include "stdinc.h"
+#include "modules.h"
+#include "numeric.h"
 #include "client.h"
 #include "ircd.h"
-#include "numeric.h"
-#include "s_serv.h"
 #include "send.h"
-#include "msg.h"
-#include "parse.h"
-#include "modules.h"
+#include "s_user.h"
+#include "s_serv.h"
 #include "s_conf.h"
-#include "hash.h"
+#include "s_newconf.h"
+#include "privilege.h"
+
 
-struct flag_list
+static
+void set_mode(struct Client *const target,
+              const char *const str)
 {
-       char *name;
-       int flag;
-};
+       const char *mode[] =
+       {
+               target->name,
+               target->name,
+               str,
+               NULL
+       };
 
-static struct flag_list flaglist[] = {
-       {"kick",        CHANROLE_KICK},
-       {"grant",       CHANROLE_GRANT},
-       {"mode",        CHANROLE_MODE},
-       {"topic",       CHANROLE_TOPIC},
-       {"status",      CHANROLE_STATUS},
-       {NULL,          0},
-};
+       user_mode(target, target, 3, mode);
+}
 
-static int me_grant(struct Client *, struct Client *, int, const char **);
 
-struct Message grant_msgtab = {
-       "GRANT", 0, 0, 0, MFLG_SLOW,
-       {mg_unreg, mg_ignore, mg_ignore, mg_ignore, {me_grant, 4}, mg_ignore}
-};
+static
+void set_privset(struct Client *const source,
+                 struct Client *const target,
+                 const char *const privset_name)
+{
+       struct PrivilegeSet *const privset = privilegeset_get(privset_name);
+       if(!privset)
+       {
+               sendto_one_notice(source, ":There is no privilege set named '%s'.", privset_name);
+               return;
+       }
 
-mapi_clist_av1 grant_clist[] = { &grant_msgtab, NULL };
-DECLARE_MODULE_AV1(grant, NULL, NULL, grant_clist, NULL, NULL, "Charybdis development team");
+       if(IsOper(target) && target->localClient->privset == privset)
+       {
+               sendto_one_notice(source, ":%s already has role of %s.", target->name, privset_name);
+               return;
+       }
 
-static void
-apply_flags(struct membership *msptr, const char *flagspec, unsigned int flagmask)
-{
-       char *s, *t, *p;
+       if(IsOper(target))
+       {
+               sendto_one_notice(target, ":%s has changed your role to %s.", source->name, privset_name);
+               sendto_realops_snomask(SNO_GENERAL, L_NETWIDE, "%s has changed %s's role to %s.", get_oper_name(source), target->name, privset_name);
+               target->localClient->privset = privset;
+               return;
+       }
+
+       struct oper_conf oper =
+       {
+               .name = (char *)privset->name,
+               .privset = privset,
+       };
+
+       oper_up(target, &oper);
+       set_mode(target, "+o");
+       sendto_one_notice(target, ":%s has granted you the role of %s.", source->name, privset_name);
+       sendto_realops_snomask(SNO_GENERAL, L_NETWIDE, "%s has granted %s the role of %s.", get_oper_name(source), target->name, privset_name);
+}
 
-       /* unset all chanroles as we're setting new ones */
-       msptr->roles = 0;
 
-       t = LOCAL_COPY(flagspec);
-       for (s = rb_strtok_r(t, " ", &p); s; s = rb_strtok_r(NULL, " ", &p))
+static
+void grant_revoke(struct Client *const source,
+                  struct Client *const target)
+{
+       if(!IsOper(target))
        {
-               const char *priv = s + 1;       /* The actual priv */
-               struct flag_list *fl;
-               unsigned int flag = 0;
-
-               /* Go through the flags list... */
-               for(fl = flaglist; fl->name != NULL; fl++)
-               {
-                       if (strcasecmp(fl->name, priv) == 0)
-                       {
-                               /* flagmask exists to ensure users can't give privileges they
-                                * don't possess themselves */
-                               if (!flagmask || (flagmask & fl->flag))
-                                       flag = fl->flag;
-                               break;
-                       }
-               }
-
-               /* Ack no flag! */
-               if (!flag)
-                       continue;
-
-               if (s[0] == '-')
-                       RemoveChanRole(msptr, flag);
-               else if (s[0] == '+')
-                       SetChanRole(msptr, flag);
+               sendto_one_notice(source, ":You can't deoper someone who isn't an oper.");
+               return;
        }
+
+       set_mode(target, "-o");
+       sendto_one_notice(target, ":%s has deopered you.", source->name);
+       sendto_realops_snomask(SNO_GENERAL, L_NETWIDE, "%s has deopered %s.", get_oper_name(source), target->name);
 }
 
-/*
- * me_grant
- *
- * parv[1] = channel
- * parv[2] = target UID
- * parv[3] = flag spec
-*/
-static int
-me_grant(struct Client *client_p, struct Client *source_p, int parc, const char *parv[])
+
+static
+void grant(struct MsgBuf *msgbuf, struct Client *client_p, struct Client *source_p, int parc, const char *parv[])
 {
-       struct Channel *chptr;
-       struct Client *target_p;
-       struct membership *msptr;
+       if(MyClient(source_p) && !HasPrivilege(source_p, "oper:grant"))
+       {
+               sendto_one(source_p, form_str(ERR_NOPRIVS), me.name, source_p->name, "grant");
+               return;
+       }
 
-       if (!(chptr = find_channel(parv[1])))
-               return 0;
+       if(parc < 3)
+       {
+               sendto_one_notice(source_p, ":usage GRANT: <target nickname> <privilegese name | 'revoke'>");
+               return;
+       }
+
+       struct Client *const target_p = find_person(parv[1]);
 
-       if (!(target_p = find_person(parv[2])))
-               return 0;
+       if(!target_p)
+       {
+               if(IsPerson(source_p))
+                       sendto_one_numeric(source_p, ERR_NOSUCHNICK, form_str(ERR_NOSUCHNICK), parv[1]);
 
-       /* Makes no sense to do this for non-local users */
-       if(!MyClient(target_p))
-               return 0;
+               return;
+       }
 
-       if (!(msptr = find_channel_membership(chptr, target_p)))
-               return 0;
+       if(!MyClient(source_p) && !find_shared_conf(source_p->username, source_p->host, source_p->servptr->name, SHARED_GRANT))
+       {
+               sendto_one_notice(source_p, ":GRANT failed: You have no shared configuration block on this server.");
+               return;
+       }
 
-       apply_flags(msptr, parv[3], 0);
+       if(MyClient(target_p))
+       {
+               if(irccmp(parv[2], "revoke") == 0)
+                       grant_revoke(source_p, target_p);
+               else
+                       set_privset(source_p, target_p, parv[2]);
+       }
+       else if(MyClient(source_p))
+       {
+               sendto_one(target_p, ":%s ENCAP %s GRANT %s %s",
+                          get_id(source_p, target_p),
+                          target_p->servptr->name,
+                          get_id(target_p, target_p),
+                          parv[2]);
+       }
 
-       return 0;
+       return;
 }
+
+struct Message msgtab =
+{
+       "GRANT", 0, 0, 0, 0,
+       {
+               mg_ignore,
+               mg_not_oper,
+               mg_ignore,
+               mg_ignore,
+               { grant, 3 },
+               { grant, 3 }
+       }
+};
+
+mapi_clist_av1 grant_clist[] =
+{
+       &msgtab,
+       NULL
+};
+
+static const char grant_desc[] =
+       "Provides the grant facility for giving other users specific privilege sets";
+
+DECLARE_MODULE_AV2
+(
+       grant,
+       NULL,
+       NULL,
+       grant_clist,
+       NULL,
+       NULL,
+       NULL,
+       NULL,
+       grant_desc
+);