From 5699bb2e64766da634ca4be34bc2d8eab991f2e1 Mon Sep 17 00:00:00 2001
From: Adam Frisby
Date: Wed, 15 Aug 2007 14:10:26 +0000
Subject: * Permissions! - You can now only perform certain functions (such as
 editing other peoples objects) if you have permission to do so. * Moved
 OnPermissionError to EventManager - now triggers a standard blue alert. *
 Terraforming now requires permission via the permissions manager. [Defaults
 to admin-only] * Permissions manager is now substantiated in Scene * Buttload
 of new permissions added. * Estate manager operations now require various
 levels of permission to operate * OGS1 now produces 'summary reports' for a
 commsManager of each scene it maintains connections for. Reduces grid network
 traffic for ping checks. * Added new "permissions true" / "permissions false"
 console command to enable or disable permissions.

---
 OpenSim/Region/Environment/PermissionManager.cs | 119 ++++++++++++++++++++++--
 1 file changed, 110 insertions(+), 9 deletions(-)

(limited to 'OpenSim/Region/Environment/PermissionManager.cs')

diff --git a/OpenSim/Region/Environment/PermissionManager.cs b/OpenSim/Region/Environment/PermissionManager.cs
index 0758566..2698d3f 100644
--- a/OpenSim/Region/Environment/PermissionManager.cs
+++ b/OpenSim/Region/Environment/PermissionManager.cs
@@ -15,35 +15,79 @@ namespace OpenSim.Region.Environment
     {
         protected Scene m_scene;
 
+        // Bypasses the permissions engine (always returns OK)
+        // disable in any production environment
+        // TODO: Change this to false when permissions are a desired default
+        // TODO: Move to configuration option.
+        private bool bypassPermissions = true;
+
         public PermissionManager(Scene scene)
         {
             m_scene = scene;
         }
 
-        public delegate void OnPermissionErrorDelegate(LLUUID user, string reason);
-        public event OnPermissionErrorDelegate OnPermissionError;
+        public void DisablePermissions()
+        {
+            bypassPermissions = true;
+        }
+
+        public void EnablePermissions()
+        {
+            bypassPermissions = false;
+        }
 
         protected virtual void SendPermissionError(LLUUID user, string reason)
         {
-            if (OnPermissionError != null)
-                OnPermissionError(user, reason);
+            m_scene.EventManager.TriggerPermissionError(user, reason);
         }
 
         protected virtual bool IsAdministrator(LLUUID user)
         {
+            if (bypassPermissions)
+                return bypassPermissions;
+
             return m_scene.RegionInfo.MasterAvatarAssignedUUID == user;
         }
 
         protected virtual bool IsEstateManager(LLUUID user)
         {
+            if (bypassPermissions)
+                return bypassPermissions;
+
             return false;
         }
 
-        public virtual bool CanRezObject(LLUUID user, LLVector3 position)
+        protected virtual bool IsGridUser(LLUUID user)
         {
             return true;
         }
 
+        protected virtual bool IsGuest(LLUUID user)
+        {
+            return false;
+        }
+
+        public virtual bool CanRezObject(LLUUID user, LLVector3 position)
+        {
+            bool permission = false;
+
+            string reason = "Insufficient permission";
+
+            if (IsAdministrator(user))
+                permission = true;
+            else
+                reason = "Not an administrator";
+
+            if (GenericParcelPermission(user, position))
+                permission = true;
+            else
+                reason = "Not the parcel owner";
+
+            if (!permission)
+                SendPermissionError(user, reason);
+
+            return true;
+        }
 
         #region Object Permissions
 
@@ -105,19 +149,71 @@ namespace OpenSim.Region.Environment
 
         #endregion
 
+        #region Communication Permissions
+
+        public virtual bool GenericCommunicationPermission(LLUUID user, LLUUID target)
+        {
+            bool permission = false;
+            string reason = "Only registered users may communicate with another account.";
+
+            if (IsGridUser(user))
+                permission = true;
+
+            if (!IsGridUser(user))
+            {
+                permission = false;
+                reason = "The person that you are messaging is not a registered user.";
+            }
+            if (IsAdministrator(user))
+                permission = true;
+
+            if (IsEstateManager(user))
+                permission = true;
+
+            if (!permission)
+                SendPermissionError(user, reason);
+
+            return permission;
+        }
+
+        public virtual bool CanInstantMessage(LLUUID user, LLUUID target)
+        {
+            return GenericCommunicationPermission(user, target);
+        }
+
+        public virtual bool CanInventoryTransfer(LLUUID user, LLUUID target)
+        {
+            return GenericCommunicationPermission(user, target);
+        }
+
+        #endregion
+
         public virtual bool CanEditScript(LLUUID user, LLUUID script)
         {
-            return false;
+            return IsAdministrator(user);
         }
 
         public virtual bool CanRunScript(LLUUID user, LLUUID script)
         {
-            return false;
+            return IsAdministrator(user);
         }
 
-        public virtual bool CanTerraform(LLUUID user, LLUUID position)
+        public virtual bool CanTerraform(LLUUID user, LLVector3 position)
         {
-            return false;
+            bool permission = false;
+
+            // Estate override
+            if (GenericEstatePermission(user))
+                permission = true;
+
+            // Land owner can terraform too
+            if (GenericParcelPermission(user, m_scene.LandManager.getLandObject(position.X, position.Y)))
+                permission = true;
+
+            if (!permission)
+                SendPermissionError(user, "Not authorized to terraform at this location.");
+
+            return permission;
         }
 
         #region Estate Permissions
@@ -168,6 +264,11 @@ namespace OpenSim.Region.Environment
             return permission;
         }
 
+        protected virtual bool GenericParcelPermission(LLUUID user, LLVector3 pos)
+        {
+            return GenericParcelPermission(user, m_scene.LandManager.getLandObject(pos.X, pos.Y));
+        }
+
         public virtual bool CanEditParcel(LLUUID user, Land parcel)
         {
             return GenericParcelPermission(user, parcel);
-- 
cgit v1.1