--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/src/plugins/acl/acl-mailbox.c	Mon Feb 27 18:30:39 2006 +0200
@@ -0,0 +1,223 @@
+/* Copyright (C) 2006 Timo Sirainen */
+
+/* FIXME: If we don't have permission to change flags/keywords, the changes
+   should still be stored temporarily for this session. However most clients
+   don't care and it's a huge job, so I currently this isn't done. The same
+   problem actually exists when opening read-only mailboxes. */
+#include "lib.h"
+#include "array.h"
+#include "istream.h"
+#include "mail-storage-private.h"
+#include "acl-api-private.h"
+#include "acl-plugin.h"
+
+#include <sys/stat.h>
+
+#define ACL_CONTEXT(obj) \
+	*((void **)array_idx_modifyable(&(obj)->module_contexts, \
+					acl_storage_module_id))
+
+struct acl_mailbox {
+	struct mailbox_vfuncs super;
+	struct acl_object *aclobj;
+
+	unsigned int save_hack:1;
+};
+
+struct acl_mail {
+	struct mail_vfuncs super;
+};
+
+static int acl_mailbox_close(struct mailbox *box)
+{
+	struct acl_mailbox *abox = ACL_CONTEXT(box);
+
+	acl_object_deinit(&abox->aclobj);
+	return abox->super.close(box);
+}
+
+static int mailbox_acl_right_lookup(struct mailbox *box, unsigned int right_idx)
+{
+	struct acl_mailbox *abox = ACL_CONTEXT(box);
+	struct acl_mail_storage *astorage = ACL_CONTEXT(box->storage);
+	int ret;
+
+	ret = acl_object_have_right(abox->aclobj,
+				    astorage->acl_storage_right_idx[right_idx]);
+	if (ret > 0)
+		return 1;
+	if (ret < 0)
+		return -1;
+
+	mail_storage_set_error(box->storage, MAIL_STORAGE_ERR_NO_PERMISSION);
+	return 0;
+}
+
+static int
+acl_get_write_rights(struct mailbox *box,
+		     bool *flags_r, bool *flag_seen_r, bool *flag_del_r)
+{
+	int ret;
+
+	ret = mailbox_acl_right_lookup(box, ACL_STORAGE_RIGHT_WRITE);
+	if (ret < 0)
+		return -1;
+	*flags_r = ret > 0;
+
+	ret = mailbox_acl_right_lookup(box, ACL_STORAGE_RIGHT_WRITE_SEEN);
+	if (ret < 0)
+		return -1;
+	*flag_seen_r = ret > 0;
+
+	ret = mailbox_acl_right_lookup(box, ACL_STORAGE_RIGHT_WRITE_DELETED);
+	if (ret < 0)
+		return -1;
+	*flag_del_r = ret > 0;
+	return 1;
+}
+
+static int
+acl_mail_update_flags(struct mail *_mail, enum modify_type modify_type,
+		      enum mail_flags flags)
+{
+	struct mail_private *mail = (struct mail_private *)_mail;
+	struct acl_mail *amail = ACL_CONTEXT(mail);
+	bool acl_flags, acl_flag_seen, acl_flag_del;
+	int ret;
+
+	ret = acl_get_write_rights(_mail->box, &acl_flags, &acl_flag_seen,
+				   &acl_flag_del);
+	if (ret < 0)
+		return -1;
+
+	if (modify_type != MODIFY_REPLACE) {
+		/* adding/removing flags. just remove the disallowed
+		   flags from the mask. */
+		if (!acl_flags)
+			flags &= MAIL_SEEN | MAIL_DELETED;
+		if (!acl_flag_seen)
+			flags &= ~MAIL_SEEN;
+		if (!acl_flag_del)
+			flags &= ~MAIL_DELETED;
+	} else if (!acl_flags || acl_flag_seen || !acl_flag_del) {
+		/* we don't have permission to replace all the flags. */
+		if (!acl_flags && !acl_flag_seen && !acl_flag_del) {
+			/* no flag changes allowed. ignore silently. */
+			return 0;
+		}
+
+		/* handle this by first removing the allowed flags and
+		   then adding the allowed flags */
+		if (acl_mail_update_flags(_mail, MODIFY_REMOVE,
+					  ~flags) < 0)
+			return -1;
+		return acl_mail_update_flags(_mail, MODIFY_ADD, flags);
+	}
+
+	return amail->super.update_flags(_mail, modify_type, flags);
+}
+
+static int
+acl_mail_update_keywords(struct mail *_mail, enum modify_type modify_type,
+			 struct mail_keywords *keywords)
+{
+	struct mail_private *mail = (struct mail_private *)_mail;
+	struct acl_mail *amail = ACL_CONTEXT(mail);
+	int ret;
+
+	ret = mailbox_acl_right_lookup(_mail->box, ACL_STORAGE_RIGHT_WRITE);
+	if (ret <= 0) {
+		/* if we don't have permission, just silently return success. */
+		return ret;
+	}
+
+	return amail->super.update_keywords(_mail, modify_type, keywords);
+}
+
+static int acl_mail_expunge(struct mail *_mail)
+{
+	struct mail_private *mail = (struct mail_private *)_mail;
+	struct acl_mail *amail = ACL_CONTEXT(mail);
+	int ret;
+
+	ret = mailbox_acl_right_lookup(_mail->box, ACL_STORAGE_RIGHT_EXPUNGE);
+	if (ret <= 0) {
+		/* if we don't have permission, silently return success so
+		   users won't see annoying error messages in case their
+		   clients try automatic expunging. */
+		return ret;
+	}
+
+	return amail->super.expunge(_mail);
+}
+
+static struct mail *
+acl_mail_alloc(struct mailbox_transaction_context *t,
+	       enum mail_fetch_field wanted_fields,
+	       struct mailbox_header_lookup_ctx *wanted_headers)
+{
+	struct acl_mailbox *abox = ACL_CONTEXT(t->box);
+	struct acl_mail *amail;
+	struct mail *_mail;
+	struct mail_private *mail;
+
+	_mail = abox->super.mail_alloc(t, wanted_fields, wanted_headers);
+	mail = (struct mail_private *)_mail;
+
+	amail = p_new(mail->pool, struct acl_mail, 1);
+	amail->super = mail->v;
+
+	mail->v.update_flags = acl_mail_update_flags;
+	mail->v.update_keywords = acl_mail_update_keywords;
+	mail->v.expunge = acl_mail_expunge;
+	array_idx_set(&mail->module_contexts, acl_storage_module_id, &amail);
+	return _mail;
+}
+
+static int
+acl_save_init(struct mailbox_transaction_context *t,
+	      enum mail_flags flags, struct mail_keywords *keywords,
+	      time_t received_date, int timezone_offset,
+	      const char *from_envelope, struct istream *input,
+	      bool want_mail, struct mail_save_context **ctx_r)
+{
+	struct acl_mailbox *abox = ACL_CONTEXT(t->box);
+
+	if (mailbox_acl_right_lookup(t->box, ACL_STORAGE_RIGHT_INSERT) <= 0)
+		return -1;
+
+	return abox->super.save_init(t, flags, keywords, received_date,
+				     timezone_offset, from_envelope,
+				     input, want_mail, ctx_r);
+}
+
+static int
+acl_copy(struct mailbox_transaction_context *t, struct mail *mail,
+	 enum mail_flags flags, struct mail_keywords *keywords,
+	 struct mail *dest_mail)
+{
+	struct acl_mailbox *abox = ACL_CONTEXT(t->box);
+
+	if (mailbox_acl_right_lookup(t->box, ACL_STORAGE_RIGHT_INSERT) <= 0)
+		return -1;
+
+	return abox->super.copy(t, mail, flags, keywords, dest_mail);
+}
+
+struct mailbox *acl_mailbox_open_box(struct mailbox *box)
+{
+	struct acl_mail_storage *astorage = ACL_CONTEXT(box->storage);
+	struct acl_mailbox *abox;
+
+	abox = p_new(box->pool, struct acl_mailbox, 1);
+	abox->super = box->v;
+	abox->aclobj = acl_object_init_from_name(astorage->backend,
+						 mailbox_get_name(box));
+	
+	box->v.close = acl_mailbox_close;
+	box->v.mail_alloc = acl_mail_alloc;
+	box->v.save_init = acl_save_init;
+	box->v.copy = acl_copy;
+	array_idx_set(&box->module_contexts, acl_storage_module_id, &abox);
+	return box;
+}