more services from Web API

src/Yavsc.Server/Services/FileSystemAuthManager.cs

@@ -0,0 +1,113 @@
+using System.Security.Claims;
+using Microsoft.EntityFrameworkCore;
+using Microsoft.Extensions.FileProviders;
+using Microsoft.Extensions.Options;
+using rules;
+using Yavsc.Helpers;
+using Yavsc.Models;
+
+namespace Yavsc.Services
+{
+    public class FileSystemAuthManager : IFileSystemAuthManager
+    {
+        class BelongsToCircle : UserMatch
+        {
+            public override bool Match(string userId)
+            {
+                return true;
+            }
+        }
+        class OutOfCircle : UserMatch
+        {
+            public override bool Match(string userId)
+            {
+                return false;
+            }
+        }
+
+        private readonly UserMatch Out = new OutOfCircle();
+        private readonly UserMatch In = new BelongsToCircle();
+
+        private readonly ApplicationDbContext _dbContext;
+
+        private readonly SiteSettings SiteSettings;
+
+        private readonly string aclfileName;
+
+        readonly RuleSetParser ruleSetParser;
+
+        public FileSystemAuthManager(ApplicationDbContext dbContext, IOptions<SiteSettings> sitesOptions)
+        {
+            _dbContext = dbContext;
+            SiteSettings = sitesOptions.Value;
+            aclfileName = SiteSettings.AccessListFileName;
+            ruleSetParser = new RuleSetParser(false);
+        }
+
+        public FileAccessRight GetFilePathAccess(ClaimsPrincipal user, IFileInfo file)
+        {
+            var parts = file.PhysicalPath.Split(Path.DirectorySeparatorChar);
+            var cwd = Environment.CurrentDirectory.Split(Path.DirectorySeparatorChar).Length;
+
+            
+            // below 3 parts behind cwd, no file name.
+            if (parts.Length < cwd + 3) return FileAccessRight.None;
+
+            var fileDir = string.Join("/", parts.Take(parts.Length - 1));
+            var fileName = parts[parts.Length - 1];
+
+            var cusername = user.GetUserName();
+
+            var funame = parts[cwd+1];
+            if (funame == cusername)
+            {
+                return FileAccessRight.Read | FileAccessRight.Write;
+            }
+
+            if (aclfileName == fileName)
+                return FileAccessRight.None;
+
+            ruleSetParser.Reset();
+            var cuserid = user.GetUserId();
+
+            var fuserid = _dbContext.Users.SingleOrDefault(u => u.UserName == funame).Id;
+
+            if (string.IsNullOrEmpty(fuserid)) return FileAccessRight.None;
+
+            var circles = _dbContext.Circle.Include(mb => mb.Members).Where(c => c.OwnerId == fuserid).ToArray();
+            foreach (var circle in circles)
+            {
+                if (circle.Members.Any(m => m.MemberId == cuserid))
+                    ruleSetParser.Definitions.Add(circle.Name, In);
+                else ruleSetParser.Definitions.Add(circle.Name, Out);
+            }
+
+            for (int dirlevel = parts.Length - 1; dirlevel > cwd + 1; dirlevel--)
+            {
+                fileDir = string.Join(Path.DirectorySeparatorChar.ToString(), parts.Take(dirlevel));
+                var aclfin = Path.Combine(fileDir, aclfileName);
+                var aclfi = new FileInfo(aclfin);
+                if (!aclfi.Exists) continue;
+                ruleSetParser.ParseFile(aclfi.FullName);
+            }
+
+            if (ruleSetParser.Rules.Allow(cusername))
+            {
+                return FileAccessRight.Read;
+            }
+            return  FileAccessRight.None;
+            // TODO default user scoped file access policy
+
+        }
+
+        public string NormalizePath(string path)
+        {
+            throw new NotImplementedException();
+        }
+
+        public void SetAccess(long circleId, string normalizedFullPath, FileAccessRight access)
+        {
+            throw new NotImplementedException();
+        }
+    }
+}