diff options
Diffstat (limited to 'src/components/policy/policy_external/src/policy_helper.cc')
| -rw-r--r-- | src/components/policy/policy_external/src/policy_helper.cc | 896 |
1 files changed, 896 insertions, 0 deletions
diff --git a/src/components/policy/policy_external/src/policy_helper.cc b/src/components/policy/policy_external/src/policy_helper.cc new file mode 100644 index 0000000000..a477ca55d2 --- /dev/null +++ b/src/components/policy/policy_external/src/policy_helper.cc @@ -0,0 +1,896 @@ +/* + Copyright (c) 2013, Ford Motor Company + All rights reserved. + + Redistribution and use in source and binary forms, with or without + modification, are permitted provided that the following conditions are met: + + Redistributions of source code must retain the above copyright notice, this + list of conditions and the following disclaimer. + + Redistributions in binary form must reproduce the above copyright notice, + this list of conditions and the following + disclaimer in the documentation and/or other materials provided with the + distribution. + + Neither the name of the Ford Motor Company nor the names of its contributors + may be used to endorse or promote products derived from this software + without specific prior written permission. + + THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" + AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE + IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE + ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE + LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR + CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF + SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS + INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN + CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) + ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE + POSSIBILITY OF SUCH DAMAGE. + */ + +#include <algorithm> +#include <sstream> +#include <string.h> +#include "utils/logger.h" +#include "utils/custom_string.h" +#include "policy/policy_helper.h" +#include "policy/policy_manager_impl.h" + +namespace policy { + +namespace custom_str = utils::custom_string; + +namespace { + +CREATE_LOGGERPTR_GLOBAL(logger_, "Policy") + +bool Compare(const StringsValueType& first, const StringsValueType& second) { + const std::string& first_str = first; + const std::string& second_str = second; + return (strcasecmp(first_str.c_str(), second_str.c_str()) < 0); +} + +struct CheckGroupName { + explicit CheckGroupName(const policy::StringsValueType& value) + : value_(value) {} + + bool operator()(const FunctionalGroupNames::value_type& value) const { + return value.second.second == std::string(value_); + } + + private: + const policy::StringsValueType& value_; +}; + +struct CopyAttributes { + CopyAttributes(const FunctionalGroupNames& groups_attributes, + std::vector<FunctionalGroupPermission>& groups_permissions) + : groups_attributes_(groups_attributes) + , groups_permissions_(groups_permissions) {} + + bool operator()(const policy::StringsValueType& value) { + CheckGroupName checker(value); + FunctionalGroupNames::const_iterator it = std::find_if( + groups_attributes_.begin(), groups_attributes_.end(), checker); + if (groups_attributes_.end() == it) { + return false; + } + FunctionalGroupPermission group; + group.group_name = it->second.second; + group.group_alias = it->second.first; + group.group_id = it->first; + groups_permissions_.push_back(group); + return true; + } + + private: + const FunctionalGroupNames& groups_attributes_; + std::vector<FunctionalGroupPermission>& groups_permissions_; +}; +} // namespace + +CompareGroupName::CompareGroupName(const StringsValueType& group_name) + : group_name_(group_name) {} + +bool CompareGroupName::operator()( + const StringsValueType& group_name_to_compare) const { + const std::string gn_ = group_name_; + const std::string gn_compare = group_name_to_compare; + return !(strcasecmp(gn_.c_str(), gn_compare.c_str())); +} + +bool operator!=(const policy_table::ApplicationParams& first, + const policy_table::ApplicationParams& second) { + if (first.groups.size() != second.groups.size()) { + return true; + } + StringsConstItr it_first = first.groups.begin(); + StringsConstItr it_first_end = first.groups.end(); + StringsConstItr it_second = second.groups.begin(); + StringsConstItr it_second_end = second.groups.end(); + for (; it_first != it_first_end; ++it_first) { + CompareGroupName gp(*it_first); + StringsConstItr it = std::find_if(it_second, it_second_end, gp); + if (it_first_end == it) { + return true; + } + } + return false; +} + +CheckAppPolicy::CheckAppPolicy( + PolicyManagerImpl* pm, + const utils::SharedPtr<policy_table::Table> update, + const utils::SharedPtr<policy_table::Table> snapshot) + : pm_(pm), update_(update), snapshot_(snapshot) {} + +bool policy::CheckAppPolicy::HasRevokedGroups( + const policy::AppPoliciesValueType& app_policy, + policy_table::Strings* revoked_groups) const { + AppPoliciesConstItr it = + snapshot_->policy_table.app_policies_section.apps.find(app_policy.first); + + policy_table::Strings groups_new = app_policy.second.groups; + std::sort(groups_new.begin(), groups_new.end(), Compare); + + policy_table::Strings groups_curr = (*it).second.groups; + std::sort(groups_curr.begin(), groups_curr.end(), Compare); + + StringsConstItr it_groups_new = groups_new.begin(); + StringsConstItr it_groups_new_end = groups_new.end(); + + StringsConstItr it_groups_curr = groups_curr.begin(); + StringsConstItr it_groups_curr_end = groups_curr.end(); + + policy_table::Strings revoked_group_list; + std::set_difference(it_groups_curr, + it_groups_curr_end, + it_groups_new, + it_groups_new_end, + std::back_inserter(revoked_group_list), + Compare); + + // Remove groups which are not required user consent + policy_table::Strings::iterator it_revoked = revoked_group_list.begin(); + for (; revoked_group_list.end() != it_revoked;) { + if (!IsConsentRequired(app_policy.first, std::string(*it_revoked))) { + revoked_group_list.erase(it_revoked); + it_revoked = revoked_group_list.begin(); + } else { + ++it_revoked; + } + } + + if (revoked_groups) { + *revoked_groups = revoked_group_list; + } + + return !revoked_group_list.empty(); +} + +bool policy::CheckAppPolicy::HasNewGroups( + const policy::AppPoliciesValueType& app_policy, + policy_table::Strings* new_groups) const { + AppPoliciesConstItr it = + snapshot_->policy_table.app_policies_section.apps.find(app_policy.first); + + policy_table::Strings groups_new = app_policy.second.groups; + std::sort(groups_new.begin(), groups_new.end(), Compare); + + policy_table::Strings groups_curr = (*it).second.groups; + std::sort(groups_curr.begin(), groups_curr.end(), Compare); + + StringsConstItr it_groups_new = groups_new.begin(); + StringsConstItr it_groups_new_end = groups_new.end(); + + StringsConstItr it_groups_curr = groups_curr.begin(); + StringsConstItr it_groups_curr_end = groups_curr.end(); + + policy_table::Strings new_group_list; + std::set_difference(it_groups_new, + it_groups_new_end, + it_groups_curr, + it_groups_curr_end, + std::back_inserter(new_group_list), + Compare); + + if (new_groups) { + *new_groups = new_group_list; + } + + return !new_group_list.empty(); +} + +bool policy::CheckAppPolicy::HasConsentNeededGroups( + const policy::AppPoliciesValueType& app_policy) const { + policy_table::Strings new_groups; + if (!HasNewGroups(app_policy, &new_groups)) { + return false; + } + + StringsConstItr it_new = new_groups.begin(); + StringsConstItr it_new_end = new_groups.end(); + for (; it_new != it_new_end; ++it_new) { + if (IsConsentRequired(app_policy.first, *it_new)) { + return true; + } + } + + return false; +} + +std::vector<FunctionalGroupPermission> policy::CheckAppPolicy::GetRevokedGroups( + const policy::AppPoliciesValueType& app_policy) const { + policy_table::Strings revoked_groups_names; + if (!HasRevokedGroups(app_policy, &revoked_groups_names)) { + return std::vector<FunctionalGroupPermission>(); + } + + FunctionalGroupNames groups_attributes; + if (!pm_->cache_->GetFunctionalGroupNames(groups_attributes)) { + LOG4CXX_WARN(logger_, "Can't get functional group names"); + return std::vector<FunctionalGroupPermission>(); + } + + std::vector<FunctionalGroupPermission> revoked_groups_permissions; + CopyAttributes copier(groups_attributes, revoked_groups_permissions); + std::for_each( + revoked_groups_names.begin(), revoked_groups_names.end(), copier); + + return revoked_groups_permissions; +} + +void policy::CheckAppPolicy::RemoveRevokedConsents( + const AppPoliciesValueType& app_policy, + const std::vector<FunctionalGroupPermission>& revoked_groups) const { + std::vector<policy::FunctionalGroupPermission>::const_iterator it = + revoked_groups.begin(); + std::vector<policy::FunctionalGroupPermission>::const_iterator it_end = + revoked_groups.end(); + for (; it != it_end; ++it) { + pm_->RemoveAppConsentForGroup(app_policy.first, it->group_name); + } +} + +bool CheckAppPolicy::IsKnownAppication( + const std::string& application_id) const { + const policy_table::ApplicationPolicies& current_policies = + snapshot_->policy_table.app_policies_section.apps; + + return !(current_policies.end() == current_policies.find(application_id)); +} + +void policy::CheckAppPolicy::NotifySystem( + const policy::AppPoliciesValueType& app_policy) const { + pm_->listener()->OnPendingPermissionChange(app_policy.first); +} + +void CheckAppPolicy::SendPermissionsToApp( + const AppPoliciesValueType& app_policy) const { + const std::string app_id = app_policy.first; + + const std::string device_id = pm_->GetCurrentDeviceId(app_id); + if (device_id.empty()) { + LOG4CXX_WARN(logger_, + "Couldn't find device info for application id: " << app_id); + return; + } + std::vector<FunctionalGroupPermission> group_permissons; + pm_->GetPermissionsForApp(device_id, app_id, group_permissons); + + Permissions notification_data; + pm_->PrepareNotificationData(update_->policy_table.functional_groupings, + app_policy.second.groups, + group_permissons, + notification_data); + + LOG4CXX_INFO(logger_, "Send notification for application_id: " << app_id); + pm_->listener()->OnPermissionsUpdated( + app_id, + notification_data, + policy_table::EnumToJsonString(app_policy.second.default_hmi)); +} + +bool CheckAppPolicy::IsAppRevoked( + const AppPoliciesValueType& app_policy) const { + LOG4CXX_AUTO_TRACE(logger_); + // Application params are not initialized = application revoked + // i.e. "123":null + return app_policy.second.is_null(); +} + +bool CheckAppPolicy::NicknamesMatch( + const AppPoliciesValueType& app_policy) const { + const std::string& app_id = app_policy.first; + const custom_str::CustomString app_name = pm_->listener()->GetAppName(app_id); + if (!app_name.empty() && app_policy.second.nicknames && + !app_policy.second.nicknames->empty()) { + for (policy_table::Strings::const_iterator it = + app_policy.second.nicknames->begin(); + app_policy.second.nicknames->end() != it; + ++it) { + std::string temp = *it; + if (app_name.CompareIgnoreCase(temp.c_str())) { + return true; + } + } + return false; + } + return true; +} + +bool CheckAppPolicy::operator()(const AppPoliciesValueType& app_policy) { + const std::string app_id = app_policy.first; + + if (!IsKnownAppication(app_id)) { + LOG4CXX_WARN(logger_, + "Application:" << app_id << " is not present in snapshot."); + return true; + } + + if (!IsPredefinedApp(app_policy) && IsAppRevoked(app_policy)) { + SetPendingPermissions(app_policy, RESULT_APP_REVOKED); + NotifySystem(app_policy); + return true; + } + + if (!IsPredefinedApp(app_policy) && !NicknamesMatch(app_policy)) { + SetPendingPermissions(app_policy, RESULT_NICKNAME_MISMATCH); + NotifySystem(app_policy); + return true; + } + + PermissionsCheckResult result = CheckPermissionsChanges(app_policy); + + if (!IsPredefinedApp(app_policy) && IsRequestTypeChanged(app_policy)) { + SetPendingPermissions(app_policy, RESULT_REQUEST_TYPE_CHANGED); + NotifySystem(app_policy); + } + + if (RESULT_NO_CHANGES == result) { + LOG4CXX_INFO(logger_, + "Permissions for application:" << app_id + << " wasn't changed."); + return true; + } + + LOG4CXX_INFO(logger_, + "Permissions for application:" << app_id + << " have been changed."); + + if (!IsPredefinedApp(app_policy) && RESULT_CONSENT_NOT_REQIURED != result) { + SetPendingPermissions(app_policy, result); + NotifySystem(app_policy); + } + + // Don't sent notification for predefined apps (e.g. default, device etc.) + if (!IsPredefinedApp(app_policy)) { + SendPermissionsToApp(app_policy); + } + return true; +} + +void policy::CheckAppPolicy::SetPendingPermissions( + const AppPoliciesValueType& app_policy, + PermissionsCheckResult result) const { + using namespace rpc::policy_table_interface_base; + const std::string app_id = app_policy.first; + AppPermissions permissions_diff(app_id); + + const std::string priority = + policy_table::EnumToJsonString(app_policy.second.priority); + const std::string current_prio = EnumToJsonString( + snapshot_->policy_table.app_policies_section.apps[app_id].priority); + + bool need_send_priority = (current_prio != priority); + + switch (result) { + case RESULT_APP_REVOKED: + need_send_priority = false; + permissions_diff.appRevoked = true; + break; + case RESULT_NICKNAME_MISMATCH: + need_send_priority = false; + permissions_diff.appUnauthorized = true; + break; + case RESULT_PERMISSIONS_REVOKED: + permissions_diff.priority = priority; + permissions_diff.isAppPermissionsRevoked = true; + permissions_diff.appRevokedPermissions = GetRevokedGroups(app_policy); + RemoveRevokedConsents(app_policy, permissions_diff.appRevokedPermissions); + break; + case RESULT_CONSENT_NEEDED: + permissions_diff.priority = priority; + permissions_diff.appPermissionsConsentNeeded = true; + break; + case RESULT_PERMISSIONS_REVOKED_AND_CONSENT_NEEDED: + permissions_diff.priority = priority; + permissions_diff.isAppPermissionsRevoked = true; + permissions_diff.appPermissionsConsentNeeded = true; + permissions_diff.appRevokedPermissions = GetRevokedGroups(app_policy); + RemoveRevokedConsents(app_policy, permissions_diff.appRevokedPermissions); + break; + case RESULT_REQUEST_TYPE_CHANGED: + permissions_diff.requestTypeChanged = true; + { + // Getting RequestTypes from PTU (not from cache) + policy_table::RequestTypes::const_iterator it_request_type = + app_policy.second.RequestType->begin(); + for (; app_policy.second.RequestType->end() != it_request_type; + ++it_request_type) { + permissions_diff.requestType.push_back( + EnumToJsonString(*it_request_type)); + } + } + + break; + default: + return; + } + + if (need_send_priority) { + permissions_diff.priority = priority; + } + + pm_->app_permissions_diff_lock_.Acquire(); + pm_->app_permissions_diff_.insert(std::make_pair(app_id, permissions_diff)); + pm_->app_permissions_diff_lock_.Release(); +} + +policy::CheckAppPolicy::PermissionsCheckResult +policy::CheckAppPolicy::CheckPermissionsChanges( + const policy::AppPoliciesValueType& app_policy) const { + bool has_revoked_groups = HasRevokedGroups(app_policy); + + bool has_consent_needed_groups = HasConsentNeededGroups(app_policy); + + bool has_new_groups = HasNewGroups(app_policy); + + if (has_revoked_groups && has_consent_needed_groups) { + return RESULT_PERMISSIONS_REVOKED_AND_CONSENT_NEEDED; + } else if (has_revoked_groups) { + return RESULT_PERMISSIONS_REVOKED; + } else if (has_consent_needed_groups) { + return RESULT_CONSENT_NEEDED; + } else if (has_new_groups) { + return RESULT_CONSENT_NOT_REQIURED; + } + + return RESULT_NO_CHANGES; +} + +bool CheckAppPolicy::IsConsentRequired(const std::string& app_id, + const std::string& group_name) const { + const policy_table::FunctionalGroupings& functional_groupings = + snapshot_->policy_table.functional_groupings; + + FuncGroupConstItr it = functional_groupings.find(group_name); + + if (functional_groupings.end() == it) { + return false; + } + + bool is_preconsented = false; + policy_table::Strings::value_type str(group_name); + policy_table::Strings::iterator pre_begin = + update_->policy_table.app_policies_section.apps[app_id] + .preconsented_groups->begin(); + policy_table::Strings::iterator pre_end = + update_->policy_table.app_policies_section.apps[app_id] + .preconsented_groups->end(); + + policy_table::Strings::iterator it2 = std::find(pre_begin, pre_end, str); + + is_preconsented = pre_end != it2; + + return it->second.user_consent_prompt.is_initialized() && !is_preconsented; +} + +bool CheckAppPolicy::IsRequestTypeChanged( + const AppPoliciesValueType& app_policy) const { + policy::AppPoliciesConstItr it = + snapshot_->policy_table.app_policies_section.apps.find(app_policy.first); + if (it == snapshot_->policy_table.app_policies_section.apps.end()) { + if (!app_policy.second.RequestType->empty()) { + return true; + } + return false; + } + if (it->second.RequestType->size() != app_policy.second.RequestType->size()) { + return true; + } + policy_table::RequestTypes diff; + std::set_difference(it->second.RequestType->begin(), + it->second.RequestType->end(), + app_policy.second.RequestType->begin(), + app_policy.second.RequestType->end(), + std::back_inserter(diff)); + return diff.size(); +} + +FillNotificationData::FillNotificationData(Permissions& data, + GroupConsent group_state, + GroupConsent undefined_group_consent, + bool does_require_user_consent) + : data_(data), does_require_user_consent_(does_require_user_consent) { + switch (group_state) { + case kGroupAllowed: + current_key_ = kAllowedKey; + break; + case kGroupUndefined: + if (kGroupUndefined == undefined_group_consent) { + current_key_ = kUndefinedKey; + break; + } + current_key_ = kGroupAllowed == undefined_group_consent + ? kAllowedKey + : kUserDisallowedKey; + break; + default: + current_key_ = kUserDisallowedKey; + break; + } +} + +bool FillNotificationData::operator()(const RpcValueType& rpc) { + Permissions::iterator it = data_.find(rpc.first); + // If rpc is present already - update its permissions + if (data_.end() != it) { + UpdateHMILevels(rpc.second.hmi_levels, (*it).second.hmi_permissions); + UpdateParameters(*rpc.second.parameters, + (*it).second.parameter_permissions); + ExcludeSame(it->second); + } else { + // Init mandatory keys, since they should be present irrespectively of + // values presence + InitRpcKeys(rpc.first); + // If rpc is not present - add its permissions + UpdateHMILevels(rpc.second.hmi_levels, data_[rpc.first].hmi_permissions); + UpdateParameters(*rpc.second.parameters, + data_[rpc.first].parameter_permissions); + } + return true; +} + +void FillNotificationData::UpdateHMILevels( + const policy_table::HmiLevels& in_hmi, HMIPermissions& out_hmi) { + HMILevelsConstItr it_hmi_levels = in_hmi.begin(); + HMILevelsConstItr it_hmi_levels_end = in_hmi.end(); + + for (; it_hmi_levels != it_hmi_levels_end; ++it_hmi_levels) { + out_hmi[current_key_].insert( + policy_table::EnumToJsonString(*it_hmi_levels)); + } +} + +void FillNotificationData::UpdateParameters( + const policy_table::Parameters& in_parameters, + ParameterPermissions& out_parameter) { + ParametersConstItr it_parameters = in_parameters.begin(); + ParametersConstItr it_parameters_end = in_parameters.end(); + + // Due to APPLINK-24201 SDL must consider cases when 'parameters' section is + // not present for RPC or present, but is empty. + + // If 'parameters' section is like: 'parameters' : [] + if (in_parameters.is_initialized() && in_parameters.empty()) { + if (!does_require_user_consent_) { + out_parameter.any_parameter_disallowed_by_policy = true; + } + if (does_require_user_consent_ && kAllowedKey == current_key_) { + out_parameter.any_parameter_disallowed_by_user = true; + } + } + + // If 'parameters' section is omitted + if (!in_parameters.is_initialized()) { + if (!does_require_user_consent_) { + out_parameter.any_parameter_allowed = true; + } + if (does_require_user_consent_ && kAllowedKey == current_key_) { + out_parameter.any_parameter_allowed = true; + } + } + + for (; it_parameters != it_parameters_end; ++it_parameters) { + out_parameter[current_key_].insert( + policy_table::EnumToJsonString(*it_parameters)); + } +} + +void FillNotificationData::ExcludeSame(RpcPermissions& rpc) { + HMIPermissions& rpc_hmi_permissions = rpc.hmi_permissions; + HMIPermissions::const_iterator it_hmi_allowed = + rpc.hmi_permissions.find(kAllowedKey); + HMIPermissions::const_iterator it_hmi_undefined = + rpc.hmi_permissions.find(kUndefinedKey); + HMIPermissions::const_iterator it_hmi_user_disallowed = + rpc.hmi_permissions.find(kUserDisallowedKey); + + // There is different logic of processing RPCs with and w/o 'parameters' + if (RpcParametersEmpty(rpc)) { + // First, remove disallowed from other types + if (rpc_hmi_permissions.end() != it_hmi_user_disallowed) { + if (rpc_hmi_permissions.end() != it_hmi_allowed) { + ExcludeSameHMILevels(rpc_hmi_permissions[kAllowedKey], + rpc_hmi_permissions[kUserDisallowedKey]); + } + if (rpc_hmi_permissions.end() != it_hmi_undefined) { + ExcludeSameHMILevels(rpc_hmi_permissions[kUndefinedKey], + rpc_hmi_permissions[kUserDisallowedKey]); + } + } + + // Then, remove undefined from allowed + if (rpc_hmi_permissions.end() != it_hmi_undefined) { + if (rpc_hmi_permissions.end() != it_hmi_allowed) { + ExcludeSameHMILevels(rpc_hmi_permissions[kAllowedKey], + rpc_hmi_permissions[kUndefinedKey]); + } + } + + return; + } + + ParameterPermissions& rpc_parameter_permissions = rpc.parameter_permissions; + ParameterPermissions::const_iterator it_parameter_allowed = + rpc.parameter_permissions.find(kAllowedKey); + ParameterPermissions::const_iterator it_parameter_undefined = + rpc.parameter_permissions.find(kUndefinedKey); + ParameterPermissions::const_iterator it_parameter_user_disallowed = + rpc.parameter_permissions.find(kUserDisallowedKey); + + // First, removing allowed HMI levels from other types, permissions will be + // dependent on parameters instead of HMI levels since w/o parameters RPC + // won't passed to HMI + if (rpc_hmi_permissions.end() != it_hmi_allowed) { + if (rpc_hmi_permissions.end() != it_hmi_user_disallowed) { + ExcludeSameHMILevels(rpc_hmi_permissions[kUserDisallowedKey], + rpc_hmi_permissions[kAllowedKey]); + } + if (rpc.hmi_permissions.end() != it_hmi_undefined) { + ExcludeSameHMILevels(rpc_hmi_permissions[kUndefinedKey], + rpc_hmi_permissions[kAllowedKey]); + } + } + + // Removing disallowed parameters from allowed and undefined (by user consent) + if (rpc_parameter_permissions.end() != it_parameter_user_disallowed) { + if (rpc_parameter_permissions.end() != it_parameter_allowed) { + ExcludeSameParameters(rpc_parameter_permissions[kAllowedKey], + rpc_parameter_permissions[kUserDisallowedKey]); + } + if (rpc_parameter_permissions.end() != it_parameter_undefined) { + ExcludeSameParameters(rpc_parameter_permissions[kUndefinedKey], + rpc_parameter_permissions[kUserDisallowedKey]); + } + } + + // Removing undefined (by user consent) parameters from allowed + if (rpc_parameter_permissions.end() != it_parameter_undefined) { + if (rpc_parameter_permissions.end() != it_parameter_allowed) { + ExcludeSameParameters(rpc_parameter_permissions[kAllowedKey], + rpc_parameter_permissions[kUndefinedKey]); + } + } +} + +void FillNotificationData::ExcludeSameHMILevels( + std::set<HMILevel>& source, const std::set<HMILevel>& target) { + std::set<HMILevel> diff_hmi; + + std::set_difference(source.begin(), + source.end(), + target.begin(), + target.end(), + std::inserter(diff_hmi, diff_hmi.begin())); + + source = diff_hmi; +} + +void FillNotificationData::ExcludeSameParameters( + std::set<Parameter>& source, const std::set<Parameter>& target) { + std::set<Parameter> diff_parameter; + + std::set_difference(source.begin(), + source.end(), + target.begin(), + target.end(), + std::inserter(diff_parameter, diff_parameter.begin())); + + source = diff_parameter; +} + +void FillNotificationData::InitRpcKeys(const std::string& rpc_name) { + data_[rpc_name].hmi_permissions[kAllowedKey]; + data_[rpc_name].hmi_permissions[kUserDisallowedKey]; + data_[rpc_name].parameter_permissions[kAllowedKey]; + data_[rpc_name].parameter_permissions[kUserDisallowedKey]; +} + +bool FillNotificationData::RpcParametersEmpty(RpcPermissions& rpc) { + const bool no_allowed_parameters = + IsSectionEmpty(rpc.parameter_permissions, kAllowedKey); + const bool no_user_disallowed_parameters = + IsSectionEmpty(rpc.parameter_permissions, kUserDisallowedKey); + const bool no_undefined_parameters = + IsSectionEmpty(rpc.parameter_permissions, kUndefinedKey); + + return no_allowed_parameters && no_undefined_parameters && + no_user_disallowed_parameters; +} + +bool FillNotificationData::IsSectionEmpty(ParameterPermissions& permissions, + const std::string& section) { + ParameterPermissions::const_iterator it_section = permissions.find(section); + ParameterPermissions::const_iterator end = permissions.end(); + if (end != it_section) { + return permissions[section].empty(); + } + return true; +} + +ProcessFunctionalGroup::ProcessFunctionalGroup( + const policy_table::FunctionalGroupings& fg, + const std::vector<FunctionalGroupPermission>& group_permissions, + Permissions& data, + GroupConsent undefined_group_consent) + : fg_(fg) + , group_permissions_(group_permissions) + , data_(data) + , undefined_group_consent_(undefined_group_consent) {} + +bool ProcessFunctionalGroup::operator()(const StringsValueType& group_name) { + const std::string group_name_str = group_name; + FuncGroupConstItr it = fg_.find(group_name_str); + const bool does_require_user_consent = + it->second.user_consent_prompt.is_initialized(); + + if (fg_.end() != it) { + const policy_table::Rpc& rpcs = (*it).second.rpcs; + FillNotificationData filler(data_, + GetGroupState(group_name_str), + undefined_group_consent_, + does_require_user_consent); + std::for_each(rpcs.begin(), rpcs.end(), filler); + } + return true; +} + +GroupConsent ProcessFunctionalGroup::GetGroupState( + const std::string& group_name) { + std::vector<FunctionalGroupPermission>::const_iterator it = + group_permissions_.begin(); + std::vector<FunctionalGroupPermission>::const_iterator it_end = + group_permissions_.end(); + for (; it != it_end; ++it) { + if (group_name == (*it).group_name) { + return (*it).state; + } + } + return kGroupUndefined; +} + +FunctionalGroupInserter::FunctionalGroupInserter( + const policy_table::Strings& preconsented_groups, PermissionsList& list) + : list_(list), preconsented_(preconsented_groups) {} + +void FunctionalGroupInserter::operator()(const StringsValueType& group_name) { + CompareGroupName name(group_name); + if (std::find_if(preconsented_.begin(), preconsented_.end(), name) == + preconsented_.end()) { + list_.push_back(group_name); + } +} + +void FillFunctionalGroupPermissions( + FunctionalGroupIDs& ids, + FunctionalGroupNames& names, + GroupConsent state, + std::vector<FunctionalGroupPermission>& permissions) { + LOG4CXX_INFO(logger_, "FillFunctionalGroupPermissions"); + FunctionalGroupIDs::const_iterator it = ids.begin(); + FunctionalGroupIDs::const_iterator it_end = ids.end(); + for (; it != it_end; ++it) { + FunctionalGroupPermission current_group; + current_group.group_id = *it; + current_group.group_alias = names[*it].first; + current_group.group_name = names[*it].second; + current_group.state = state; + permissions.push_back(current_group); + } +} + +bool IsPredefinedApp(const AppPoliciesValueType& app) { + return app.first == kDefaultId || app.first == kPreDataConsentId || + app.first == kDeviceId; +} + +FunctionalGroupIDs ExcludeSame(const FunctionalGroupIDs& from, + const FunctionalGroupIDs& what) { + LOG4CXX_INFO(logger_, "Exclude same groups"); + FunctionalGroupIDs from_copy(from); + FunctionalGroupIDs what_copy(what); + + std::sort(from_copy.begin(), from_copy.end()); + std::sort(what_copy.begin(), what_copy.end()); + + FunctionalGroupIDs no_same; + std::set_difference(from_copy.begin(), + from_copy.end(), + what_copy.begin(), + what_copy.end(), + std::back_inserter(no_same)); + + no_same.resize(std::distance(no_same.begin(), + std::unique(no_same.begin(), no_same.end()))); + + return no_same; +} + +FunctionalGroupIDs Merge(const FunctionalGroupIDs& first, + const FunctionalGroupIDs& second) { + LOG4CXX_INFO(logger_, "Merge groups"); + FunctionalGroupIDs first_copy(first); + FunctionalGroupIDs second_copy(second); + + std::sort(first_copy.begin(), first_copy.end()); + std::sort(second_copy.begin(), second_copy.end()); + + FunctionalGroupIDs merged; + std::set_union(first_copy.begin(), + first_copy.end(), + second_copy.begin(), + second_copy.end(), + std::back_inserter(merged)); + + merged.resize( + std::distance(merged.begin(), std::unique(merged.begin(), merged.end()))); + + return merged; +} + +FunctionalGroupIDs FindSame(const FunctionalGroupIDs& first, + const FunctionalGroupIDs& second) { + LOG4CXX_INFO(logger_, "Find same groups"); + FunctionalGroupIDs first_copy(first); + FunctionalGroupIDs second_copy(second); + + std::sort(first_copy.begin(), first_copy.end()); + std::sort(second_copy.begin(), second_copy.end()); + + FunctionalGroupIDs same; + std::set_intersection(first_copy.begin(), + first_copy.end(), + second_copy.begin(), + second_copy.end(), + std::back_inserter(same)); + + same.resize( + std::distance(same.begin(), std::unique(same.begin(), same.end()))); + + return same; +} + +bool UnwrapAppPolicies(policy_table::ApplicationPolicies& app_policies) { + policy_table::ApplicationPolicies::iterator it_default = + app_policies.find(kDefaultId); + if (app_policies.end() == it_default) { + LOG4CXX_ERROR(logger_, "No default application policy found in PTU."); + return false; + } + + policy_table::ApplicationPolicies::iterator it = app_policies.begin(); + for (; app_policies.end() != it; ++it) { + // Set default policies for app, if there is record like "123":"default" + if (kDefaultId.compare((*it).second.get_string()) == 0) { + (*it).second = (*it_default).second; + it->second.set_to_string(kDefaultId); + } + } + + return true; +} +} |