path: root/src/components/policy/policy_external/src/policy_helper.cc

/*
 Copyright (c) 2013, Ford Motor Company
 All rights reserved.

 Redistribution and use in source and binary forms, with or without
 modification, are permitted provided that the following conditions are met:

 Redistributions of source code must retain the above copyright notice, this
 list of conditions and the following disclaimer.

 Redistributions in binary form must reproduce the above copyright notice,
 this list of conditions and the following
 disclaimer in the documentation and/or other materials provided with the
 distribution.

 Neither the name of the Ford Motor Company nor the names of its contributors
 may be used to endorse or promote products derived from this software
 without specific prior written permission.

 THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
 AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
 ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE
 LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
 CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
 SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
 INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
 CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
 ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
 POSSIBILITY OF SUCH DAMAGE.
 */

#include <algorithm>
#include <sstream>
#include <string.h>
#include "utils/logger.h"
#include "utils/custom_string.h"
#include "policy/policy_helper.h"
#include "policy/policy_manager_impl.h"

namespace policy {

namespace custom_str = utils::custom_string;

namespace {

CREATE_LOGGERPTR_GLOBAL(logger_, "Policy")

bool Compare(const StringsValueType& first, const StringsValueType& second) {
  const std::string& first_str = first;
  const std::string& second_str = second;
  return (strcasecmp(first_str.c_str(), second_str.c_str()) < 0);
}

struct CheckGroupName {
  explicit CheckGroupName(const policy::StringsValueType& value)
      : value_(value) {}

  bool operator()(const FunctionalGroupNames::value_type& value) const {
    return value.second.second == std::string(value_);
  }

 private:
  const policy::StringsValueType& value_;
};

struct CopyAttributes {
  CopyAttributes(const FunctionalGroupNames& groups_attributes,
                 std::vector<FunctionalGroupPermission>& groups_permissions)
      : groups_attributes_(groups_attributes)
      , groups_permissions_(groups_permissions) {}

  bool operator()(const policy::StringsValueType& value) {
    CheckGroupName checker(value);
    FunctionalGroupNames::const_iterator it = std::find_if(
        groups_attributes_.begin(), groups_attributes_.end(), checker);
    if (groups_attributes_.end() == it) {
      return false;
    }
    FunctionalGroupPermission group;
    group.group_name = it->second.second;
    group.group_alias = it->second.first;
    group.group_id = it->first;
    groups_permissions_.push_back(group);
    return true;
  }

 private:
  const FunctionalGroupNames& groups_attributes_;
  std::vector<FunctionalGroupPermission>& groups_permissions_;
};
}  // namespace

CompareGroupName::CompareGroupName(const StringsValueType& group_name)
    : group_name_(group_name) {}

bool CompareGroupName::operator()(
    const StringsValueType& group_name_to_compare) const {
  const std::string gn_ = group_name_;
  const std::string gn_compare = group_name_to_compare;
  return !(strcasecmp(gn_.c_str(), gn_compare.c_str()));
}

bool operator!=(const policy_table::ApplicationParams& first,
                const policy_table::ApplicationParams& second) {
  if (first.groups.size() != second.groups.size()) {
    return true;
  }
  StringsConstItr it_first = first.groups.begin();
  StringsConstItr it_first_end = first.groups.end();
  StringsConstItr it_second = second.groups.begin();
  StringsConstItr it_second_end = second.groups.end();
  for (; it_first != it_first_end; ++it_first) {
    CompareGroupName gp(*it_first);
    StringsConstItr it = std::find_if(it_second, it_second_end, gp);
    if (it_first_end == it) {
      return true;
    }
  }
  return false;
}

CheckAppPolicy::CheckAppPolicy(
    PolicyManagerImpl* pm,
    const std::shared_ptr<policy_table::Table> update,
    const std::shared_ptr<policy_table::Table> snapshot,
    CheckAppPolicyResults& out_results)
    : pm_(pm)
    , update_(update)
    , snapshot_(snapshot)
    , out_results_(out_results) {}

bool policy::CheckAppPolicy::HasRevokedGroups(
    const policy::AppPoliciesValueType& app_policy,
    policy_table::Strings* revoked_groups) const {
  AppPoliciesConstItr it =
      snapshot_->policy_table.app_policies_section.apps.find(app_policy.first);

  policy_table::Strings groups_new = app_policy.second.groups;
  std::sort(groups_new.begin(), groups_new.end(), Compare);

  policy_table::Strings groups_curr = (*it).second.groups;
  std::sort(groups_curr.begin(), groups_curr.end(), Compare);

  StringsConstItr it_groups_new = groups_new.begin();
  StringsConstItr it_groups_new_end = groups_new.end();

  StringsConstItr it_groups_curr = groups_curr.begin();
  StringsConstItr it_groups_curr_end = groups_curr.end();

  policy_table::Strings revoked_group_list;
  std::set_difference(it_groups_curr,
                      it_groups_curr_end,
                      it_groups_new,
                      it_groups_new_end,
                      std::back_inserter(revoked_group_list),
                      Compare);

  // Remove groups which are not required user consent
  policy_table::Strings::iterator it_revoked = revoked_group_list.begin();
  for (; revoked_group_list.end() != it_revoked;) {
    if (!IsConsentRequired(app_policy.first, std::string(*it_revoked))) {
      revoked_group_list.erase(it_revoked);
      it_revoked = revoked_group_list.begin();
    } else {
      ++it_revoked;
    }
  }

  if (revoked_groups) {
    *revoked_groups = revoked_group_list;
  }

  return !revoked_group_list.empty();
}

bool policy::CheckAppPolicy::HasNewGroups(
    const policy::AppPoliciesValueType& app_policy,
    policy_table::Strings* new_groups) const {
  AppPoliciesConstItr it =
      snapshot_->policy_table.app_policies_section.apps.find(app_policy.first);

  policy_table::Strings groups_new = app_policy.second.groups;
  std::sort(groups_new.begin(), groups_new.end(), Compare);

  policy_table::Strings groups_curr = (*it).second.groups;
  std::sort(groups_curr.begin(), groups_curr.end(), Compare);

  StringsConstItr it_groups_new = groups_new.begin();
  StringsConstItr it_groups_new_end = groups_new.end();

  StringsConstItr it_groups_curr = groups_curr.begin();
  StringsConstItr it_groups_curr_end = groups_curr.end();

  policy_table::Strings new_group_list;
  std::set_difference(it_groups_new,
                      it_groups_new_end,
                      it_groups_curr,
                      it_groups_curr_end,
                      std::back_inserter(new_group_list),
                      Compare);

  if (new_groups) {
    *new_groups = new_group_list;
  }

  return !new_group_list.empty();
}

bool policy::CheckAppPolicy::HasConsentNeededGroups(
    const policy::AppPoliciesValueType& app_policy) const {
  policy_table::Strings new_groups;
  if (!HasNewGroups(app_policy, &new_groups)) {
    return false;
  }

  StringsConstItr it_new = new_groups.begin();
  StringsConstItr it_new_end = new_groups.end();
  for (; it_new != it_new_end; ++it_new) {
    if (IsConsentRequired(app_policy.first, *it_new)) {
      return true;
    }
  }

  return false;
}

std::vector<FunctionalGroupPermission> policy::CheckAppPolicy::GetRevokedGroups(
    const policy::AppPoliciesValueType& app_policy) const {
  policy_table::Strings revoked_groups_names;
  if (!HasRevokedGroups(app_policy, &revoked_groups_names)) {
    return std::vector<FunctionalGroupPermission>();
  }

  FunctionalGroupNames groups_attributes;
  if (!pm_->cache_->GetFunctionalGroupNames(groups_attributes)) {
    LOG4CXX_WARN(logger_, "Can't get functional group names");
    return std::vector<FunctionalGroupPermission>();
  }

  std::vector<FunctionalGroupPermission> revoked_groups_permissions;
  CopyAttributes copier(groups_attributes, revoked_groups_permissions);
  std::for_each(
      revoked_groups_names.begin(), revoked_groups_names.end(), copier);

  return revoked_groups_permissions;
}

void policy::CheckAppPolicy::RemoveRevokedConsents(
    const AppPoliciesValueType& app_policy,
    const std::vector<FunctionalGroupPermission>& revoked_groups) const {
  std::vector<policy::FunctionalGroupPermission>::const_iterator it =
      revoked_groups.begin();
  std::vector<policy::FunctionalGroupPermission>::const_iterator it_end =
      revoked_groups.end();
  for (; it != it_end; ++it) {
    pm_->RemoveAppConsentForGroup(app_policy.first, it->group_name);
  }
}

bool CheckAppPolicy::IsKnownAppication(
    const std::string& application_id) const {
  const policy_table::ApplicationPolicies& current_policies =
      snapshot_->policy_table.app_policies_section.apps;

  return !(current_policies.end() == current_policies.find(application_id));
}

bool CheckAppPolicy::IsAppRevoked(
    const AppPoliciesValueType& app_policy) const {
  LOG4CXX_AUTO_TRACE(logger_);
  // Application params are not initialized = application revoked
  // i.e. "123":null
  return app_policy.second.is_null();
}

bool CheckAppPolicy::NicknamesMatch(
    const AppPoliciesValueType& app_policy) const {
  const std::string& app_id = app_policy.first;
  const custom_str::CustomString app_name = pm_->listener()->GetAppName(app_id);
  if (!app_name.empty() && app_policy.second.nicknames &&
      !app_policy.second.nicknames->empty()) {
    for (policy_table::Strings::const_iterator it =
             app_policy.second.nicknames->begin();
         app_policy.second.nicknames->end() != it;
         ++it) {
      std::string temp = *it;
      if (app_name.CompareIgnoreCase(temp.c_str())) {
        return true;
      }
    }
    return false;
  }
  return true;
}

void CheckAppPolicy::AddResult(const std::string& app_id,
                               PermissionsCheckResult result) {
  out_results_.insert(std::make_pair(app_id, result));
}

void CheckAppPolicy::InsertPermission(const std::string& app_id,
                                      const AppPermissions& permissions_diff) {
  pm_->app_permissions_diff_lock_.Acquire();
  auto result = pm_->app_permissions_diff_.insert(
      std::make_pair(app_id, permissions_diff));
  if (!result.second) {
    LOG4CXX_ERROR(logger_, "App ID: " << app_id << " already exists in map.");
  }
  pm_->app_permissions_diff_lock_.Release();
}

bool CheckAppPolicy::operator()(const AppPoliciesValueType& app_policy) {
  const std::string app_id = app_policy.first;
  AppPermissions permissions_diff(app_id);
  if (!IsKnownAppication(app_id)) {
    LOG4CXX_WARN(logger_,
                 "Application:" << app_id << " is not present in snapshot.");
    return true;
  }

  if (!IsPredefinedApp(app_policy) && IsAppRevoked(app_policy)) {
    SetPendingPermissions(app_policy, RESULT_APP_REVOKED, permissions_diff);
    AddResult(app_id, RESULT_APP_REVOKED);
    InsertPermission(app_id, permissions_diff);
    return true;
  }

  if (!IsPredefinedApp(app_policy) && !NicknamesMatch(app_policy)) {
    SetPendingPermissions(
        app_policy, RESULT_NICKNAME_MISMATCH, permissions_diff);
    AddResult(app_id, RESULT_NICKNAME_MISMATCH);
    InsertPermission(app_id, permissions_diff);
    return true;
  }

  PermissionsCheckResult result = CheckPermissionsChanges(app_policy);

  if (!IsPredefinedApp(app_policy)) {
    const bool is_request_type_changed = IsRequestTypeChanged(app_policy);
    const bool is_request_subtype_changed = IsRequestSubTypeChanged(app_policy);
    if (is_request_type_changed) {
      LOG4CXX_TRACE(logger_,
                    "Request types were changed for application: " << app_id);
      SetPendingPermissions(
          app_policy, RESULT_REQUEST_TYPE_CHANGED, permissions_diff);
      AddResult(app_id, RESULT_REQUEST_TYPE_CHANGED);
      result =
          (RESULT_NO_CHANGES == result) ? RESULT_REQUEST_TYPE_CHANGED : result;
    }
    if (is_request_subtype_changed) {
      LOG4CXX_TRACE(
          logger_, "Request subtypes were changed for application: " << app_id);
      SetPendingPermissions(
          app_policy, RESULT_REQUEST_SUBTYPE_CHANGED, permissions_diff);
      AddResult(app_id, RESULT_REQUEST_SUBTYPE_CHANGED);
      result = (RESULT_NO_CHANGES == result) ? RESULT_REQUEST_SUBTYPE_CHANGED
                                             : result;
    }
  }

  if (RESULT_NO_CHANGES == result) {
    LOG4CXX_INFO(logger_,
                 "Permissions for application:" << app_id
                                                << " wasn't changed.");
    AddResult(app_id, result);
    return true;
  }

  LOG4CXX_INFO(logger_,
               "Permissions for application:" << app_id
                                              << " have been changed.");

  if (!IsPredefinedApp(app_policy)) {
    SetPendingPermissions(app_policy, result, permissions_diff);
    AddResult(app_id, result);
  }

  InsertPermission(app_id, permissions_diff);
  return true;
}

void policy::CheckAppPolicy::SetPendingPermissions(
    const AppPoliciesValueType& app_policy,
    PermissionsCheckResult result,
    AppPermissions& permissions_diff) const {
  using namespace rpc::policy_table_interface_base;
  const std::string app_id = app_policy.first;

  const std::string priority =
      policy_table::EnumToJsonString(app_policy.second.priority);
  const std::string current_prio = EnumToJsonString(
      snapshot_->policy_table.app_policies_section.apps[app_id].priority);

  bool need_send_priority = (current_prio != priority);

  switch (result) {
    case RESULT_APP_REVOKED:
      need_send_priority = false;
      permissions_diff.appRevoked = true;
      break;
    case RESULT_NICKNAME_MISMATCH:
      need_send_priority = false;
      permissions_diff.appUnauthorized = true;
      break;
    case RESULT_PERMISSIONS_REVOKED:
      permissions_diff.priority = priority;
      permissions_diff.isAppPermissionsRevoked = true;
      permissions_diff.appRevokedPermissions = GetRevokedGroups(app_policy);
      RemoveRevokedConsents(app_policy, permissions_diff.appRevokedPermissions);
      break;
    case RESULT_CONSENT_NEEDED:
      permissions_diff.priority = priority;
      permissions_diff.appPermissionsConsentNeeded = true;
      break;
    case RESULT_PERMISSIONS_REVOKED_AND_CONSENT_NEEDED:
      permissions_diff.priority = priority;
      permissions_diff.isAppPermissionsRevoked = true;
      permissions_diff.appPermissionsConsentNeeded = true;
      permissions_diff.appRevokedPermissions = GetRevokedGroups(app_policy);
      RemoveRevokedConsents(app_policy, permissions_diff.appRevokedPermissions);
      break;
    case RESULT_REQUEST_TYPE_CHANGED:
      permissions_diff.requestTypeChanged = true;

      // Getting Request Types from PTU (not from cache)
      for (const auto& request_type : *app_policy.second.RequestType) {
        permissions_diff.requestType.push_back(EnumToJsonString(request_type));
      }
      break;
    case RESULT_REQUEST_SUBTYPE_CHANGED:
      permissions_diff.requestSubTypeChanged = true;
      // Getting Request SubTypes from PTU (not from cache)
      for (const auto& request_subtype : *app_policy.second.RequestSubType) {
        permissions_diff.requestSubType.push_back(request_subtype);
      }
      break;
    default:
      return;
  }

  if (need_send_priority) {
    permissions_diff.priority = priority;
  }
}

PermissionsCheckResult CheckAppPolicy::CheckPermissionsChanges(
    const policy::AppPoliciesValueType& app_policy) const {
  bool has_revoked_groups = HasRevokedGroups(app_policy);

  bool has_consent_needed_groups = HasConsentNeededGroups(app_policy);

  bool has_new_groups = HasNewGroups(app_policy);

  if (has_revoked_groups && has_consent_needed_groups) {
    return RESULT_PERMISSIONS_REVOKED_AND_CONSENT_NEEDED;
  } else if (has_revoked_groups) {
    return RESULT_PERMISSIONS_REVOKED;
  } else if (has_consent_needed_groups) {
    return RESULT_CONSENT_NEEDED;
  } else if (has_new_groups) {
    return RESULT_CONSENT_NOT_REQIURED;
  }

  return RESULT_NO_CHANGES;
}

bool CheckAppPolicy::IsConsentRequired(const std::string& app_id,
                                       const std::string& group_name) const {
  const policy_table::FunctionalGroupings& functional_groupings =
      snapshot_->policy_table.functional_groupings;

  FuncGroupConstItr it = functional_groupings.find(group_name);

  if (functional_groupings.end() == it) {
    return false;
  }

  bool is_preconsented = false;
  policy_table::Strings::value_type str(group_name);
  policy_table::Strings::iterator pre_begin =
      update_->policy_table.app_policies_section.apps[app_id]
          .preconsented_groups->begin();
  policy_table::Strings::iterator pre_end =
      update_->policy_table.app_policies_section.apps[app_id]
          .preconsented_groups->end();

  policy_table::Strings::iterator it2 = std::find(pre_begin, pre_end, str);

  is_preconsented = pre_end != it2;

  return it->second.user_consent_prompt.is_initialized() && !is_preconsented;
}

bool CheckAppPolicy::IsRequestTypeChanged(
    const AppPoliciesValueType& app_policy) const {
  policy::AppPoliciesConstItr it =
      snapshot_->policy_table.app_policies_section.apps.find(app_policy.first);
  if (it == snapshot_->policy_table.app_policies_section.apps.end()) {
    if (!app_policy.second.RequestType->empty()) {
      return true;
    }
    return false;
  }
  if (it->second.RequestType->size() != app_policy.second.RequestType->size()) {
    return true;
  }
  policy_table::RequestTypes diff;
  std::set_difference(it->second.RequestType->begin(),
                      it->second.RequestType->end(),
                      app_policy.second.RequestType->begin(),
                      app_policy.second.RequestType->end(),
                      std::back_inserter(diff));
  return diff.size();
}

bool CheckAppPolicy::IsRequestSubTypeChanged(
    const AppPoliciesValueType& app_policy) const {
  policy::AppPoliciesConstItr it =
      snapshot_->policy_table.app_policies_section.apps.find(app_policy.first);

  if (it == snapshot_->policy_table.app_policies_section.apps.end()) {
    if (!app_policy.second.RequestSubType->empty()) {
      return true;
    }
    return false;
  }

  if (it->second.RequestSubType->size() !=
      app_policy.second.RequestSubType->size()) {
    return true;
  }

  policy_table::RequestSubTypes diff;
  std::set_difference(it->second.RequestSubType->begin(),
                      it->second.RequestSubType->end(),
                      app_policy.second.RequestSubType->begin(),
                      app_policy.second.RequestSubType->end(),
                      std::back_inserter(diff));
  return diff.size();
}

void FillActionsForAppPolicies::operator()(
    const policy::CheckAppPolicyResults::value_type& value) {
  const std::string app_id = value.first;
  const policy_table::ApplicationPolicies::const_iterator app_policy =
      app_policies_.find(app_id);

  if (app_policies_.end() == app_policy) {
    return;
  }

  if (IsPredefinedApp(*app_policy)) {
    return;
  }

  switch (value.second) {
    case RESULT_APP_REVOKED:
    case RESULT_NICKNAME_MISMATCH:
      actions_[app_id].is_notify_system = true;
      return;
    case RESULT_CONSENT_NEEDED:
    case RESULT_PERMISSIONS_REVOKED_AND_CONSENT_NEEDED:
      actions_[app_id].is_consent_needed = true;
      break;
    case RESULT_CONSENT_NOT_REQIURED:
    case RESULT_PERMISSIONS_REVOKED:
    case RESULT_REQUEST_TYPE_CHANGED:
    case RESULT_REQUEST_SUBTYPE_CHANGED:
      break;
    case RESULT_NO_CHANGES:
    default:
      return;
  }
  actions_[app_id].is_notify_system = true;
  actions_[app_id].is_send_permissions_to_app = true;
}

FillNotificationData::FillNotificationData(Permissions& data,
                                           GroupConsent group_state,
                                           GroupConsent undefined_group_consent,
                                           bool does_require_user_consent)
    : data_(data), does_require_user_consent_(does_require_user_consent) {
  switch (group_state) {
    case kGroupAllowed:
      current_key_ = kAllowedKey;
      break;
    case kGroupUndefined:
      if (kGroupUndefined == undefined_group_consent) {
        current_key_ = kUndefinedKey;
        break;
      }
      current_key_ = kGroupAllowed == undefined_group_consent
                         ? kAllowedKey
                         : kUserDisallowedKey;
      break;
    default:
      current_key_ = kUserDisallowedKey;
      break;
  }
}

bool FillNotificationData::operator()(const RpcValueType& rpc) {
  Permissions::iterator it = data_.find(rpc.first);
  // If rpc is present already - update its permissions
  if (data_.end() != it) {
    UpdateHMILevels(rpc.second.hmi_levels, (*it).second.hmi_permissions);
    UpdateParameters(*rpc.second.parameters,
                     (*it).second.parameter_permissions);
    ExcludeSame(it->second);
  } else {
    // Init mandatory keys, since they should be present irrespectively of
    // values presence
    InitRpcKeys(rpc.first);
    // If rpc is not present - add its permissions
    UpdateHMILevels(rpc.second.hmi_levels, data_[rpc.first].hmi_permissions);
    UpdateParameters(*rpc.second.parameters,
                     data_[rpc.first].parameter_permissions);
  }
  return true;
}

void FillNotificationData::UpdateHMILevels(
    const policy_table::HmiLevels& in_hmi, HMIPermissions& out_hmi) {
  HMILevelsConstItr it_hmi_levels = in_hmi.begin();
  HMILevelsConstItr it_hmi_levels_end = in_hmi.end();

  for (; it_hmi_levels != it_hmi_levels_end; ++it_hmi_levels) {
    out_hmi[current_key_].insert(
        policy_table::EnumToJsonString(*it_hmi_levels));
  }
}

void FillNotificationData::UpdateParameters(
    const policy_table::Parameters& in_parameters,
    ParameterPermissions& out_parameter) {
  ParametersConstItr it_parameters = in_parameters.begin();
  ParametersConstItr it_parameters_end = in_parameters.end();

  // To determine consent for a particular RPC in a particular HMI level with
  // particular parameters (if applicable), the system shall find all of the
  // functional groups the RPC is included in. If user consent is needed as
  // listed within the functional group in the policy table, the system shall
  // use a logical AND: backend permissions AND User permissions. If the RPC is
  // listed under more than one group, the system shall perform a logical OR
  // amongst all of the possible allowed permissions scenarios for the RPC (and
  // parameter/or HMI level) defined by each of the functional groups.

  // Due to requirements SDL must consider cases when 'parameters' section is
  // not present for RPC or present, but is empty.

  // If 'parameters' section is like: 'parameters' : []
  if (in_parameters.is_initialized() && in_parameters.empty()) {
    if (!does_require_user_consent_) {
      out_parameter.any_parameter_disallowed_by_policy = true;
    }
    if (does_require_user_consent_ && kAllowedKey == current_key_) {
      out_parameter.any_parameter_disallowed_by_user = true;
    }
  }

  // If 'parameters' section is omitted
  if (!in_parameters.is_initialized()) {
    if (!does_require_user_consent_ ||
        (does_require_user_consent_ && kAllowedKey == current_key_)) {
      out_parameter.any_parameter_allowed = true;
    }
  }

  for (; it_parameters != it_parameters_end; ++it_parameters) {
    out_parameter[current_key_].insert(
        policy_table::EnumToJsonString(*it_parameters));
  }

  // We should reset ALL DISALLOWED flags if at least one parameter is allowed
  // due to a logical OR permissions check
  if (IsSomeParameterAllowed(out_parameter)) {
    out_parameter.any_parameter_disallowed_by_policy = false;
    out_parameter.any_parameter_disallowed_by_user = false;
  }
}

void FillNotificationData::ExcludeSame(RpcPermissions& rpc) {
  HMIPermissions::const_iterator it_hmi_allowed =
      rpc.hmi_permissions.find(kAllowedKey);
  HMIPermissions::const_iterator it_hmi_undefined =
      rpc.hmi_permissions.find(kUndefinedKey);
  HMIPermissions::const_iterator it_hmi_user_disallowed =
      rpc.hmi_permissions.find(kUserDisallowedKey);

  // There is different logic of processing RPCs with and w/o 'parameters'
  if (RpcParametersEmpty(rpc)) {
    // First, remove disallowed from other types
    if (rpc.hmi_permissions.end() != it_hmi_user_disallowed) {
      if (rpc.hmi_permissions.end() != it_hmi_allowed) {
        ExcludeSameHMILevels(rpc.hmi_permissions[kAllowedKey],
                             rpc.hmi_permissions[kUserDisallowedKey]);
      }
      if (rpc.hmi_permissions.end() != it_hmi_undefined) {
        ExcludeSameHMILevels(rpc.hmi_permissions[kUndefinedKey],
                             rpc.hmi_permissions[kUserDisallowedKey]);
      }
    }

    // Then, remove undefined from allowed
    if (rpc.hmi_permissions.end() != it_hmi_undefined) {
      if (rpc.hmi_permissions.end() != it_hmi_allowed) {
        ExcludeSameHMILevels(rpc.hmi_permissions[kAllowedKey],
                             rpc.hmi_permissions[kUndefinedKey]);
      }
    }

    return;
  }

  ParameterPermissions::const_iterator it_parameter_allowed =
      rpc.parameter_permissions.find(kAllowedKey);
  ParameterPermissions::const_iterator it_parameter_undefined =
      rpc.parameter_permissions.find(kUndefinedKey);
  ParameterPermissions::const_iterator it_parameter_user_disallowed =
      rpc.parameter_permissions.find(kUserDisallowedKey);

  // First, removing allowed HMI levels from other types, permissions will be
  // dependent on parameters instead of HMI levels since w/o parameters RPC
  // won't passed to HMI
  if (rpc.hmi_permissions.end() != it_hmi_allowed) {
    if (rpc.hmi_permissions.end() != it_hmi_user_disallowed) {
      ExcludeSameHMILevels(rpc.hmi_permissions[kUserDisallowedKey],
                           rpc.hmi_permissions[kAllowedKey]);
    }
    if (rpc.hmi_permissions.end() != it_hmi_undefined) {
      ExcludeSameHMILevels(rpc.hmi_permissions[kUndefinedKey],
                           rpc.hmi_permissions[kAllowedKey]);
    }
  }

  // Removing disallowed parameters from allowed and undefined (by user consent)
  if (rpc.parameter_permissions.end() != it_parameter_user_disallowed) {
    if (rpc.parameter_permissions.end() != it_parameter_allowed) {
      ExcludeSameParameters(rpc.parameter_permissions[kAllowedKey],
                            rpc.parameter_permissions[kUserDisallowedKey]);
    }
    if (rpc.parameter_permissions.end() != it_parameter_undefined) {
      ExcludeSameParameters(rpc.parameter_permissions[kUndefinedKey],
                            rpc.parameter_permissions[kUserDisallowedKey]);
    }
  }

  // Removing undefined (by user consent) parameters from allowed
  if (rpc.parameter_permissions.end() != it_parameter_undefined) {
    if (rpc.parameter_permissions.end() != it_parameter_allowed) {
      ExcludeSameParameters(rpc.parameter_permissions[kAllowedKey],
                            rpc.parameter_permissions[kUndefinedKey]);
    }
  }
}

void FillNotificationData::ExcludeSameHMILevels(
    std::set<HMILevel>& source, const std::set<HMILevel>& target) {
  std::set<HMILevel> diff_hmi;

  std::set_difference(source.begin(),
                      source.end(),
                      target.begin(),
                      target.end(),
                      std::inserter(diff_hmi, diff_hmi.begin()));

  source = diff_hmi;
}

void FillNotificationData::ExcludeSameParameters(
    std::set<Parameter>& source, const std::set<Parameter>& target) {
  std::set<Parameter> diff_parameter;

  std::set_difference(source.begin(),
                      source.end(),
                      target.begin(),
                      target.end(),
                      std::inserter(diff_parameter, diff_parameter.begin()));

  source = diff_parameter;
}

void FillNotificationData::InitRpcKeys(const std::string& rpc_name) {
  data_[rpc_name].hmi_permissions[kAllowedKey];
  data_[rpc_name].hmi_permissions[kUserDisallowedKey];
  data_[rpc_name].parameter_permissions[kAllowedKey];
  data_[rpc_name].parameter_permissions[kUserDisallowedKey];
}

bool FillNotificationData::RpcParametersEmpty(RpcPermissions& rpc) {
  const bool no_allowed_parameters =
      IsSectionEmpty(rpc.parameter_permissions, kAllowedKey);
  const bool no_user_disallowed_parameters =
      IsSectionEmpty(rpc.parameter_permissions, kUserDisallowedKey);
  const bool no_undefined_parameters =
      IsSectionEmpty(rpc.parameter_permissions, kUndefinedKey);

  return no_allowed_parameters && no_undefined_parameters &&
         no_user_disallowed_parameters;
}

bool FillNotificationData::IsSectionEmpty(
    const ParameterPermissions& permissions, const std::string& section) const {
  ParameterPermissions::const_iterator it_section = permissions.find(section);
  ParameterPermissions::const_iterator end = permissions.end();
  if (end != it_section) {
    return it_section->second.empty();
  }
  return true;
}

bool FillNotificationData::IsSomeParameterAllowed(
    const ParameterPermissions& permissions) const {
  const bool are_any_consented_parameters_allowed =
      kAllowedKey == current_key_ && !IsSectionEmpty(permissions, current_key_);
  return permissions.any_parameter_allowed ||
         are_any_consented_parameters_allowed;
}

ProcessFunctionalGroup::ProcessFunctionalGroup(
    const policy_table::FunctionalGroupings& fg,
    const std::vector<FunctionalGroupPermission>& group_permissions,
    Permissions& data,
    GroupConsent undefined_group_consent)
    : fg_(fg)
    , group_permissions_(group_permissions)
    , data_(data)
    , undefined_group_consent_(undefined_group_consent) {}

bool ProcessFunctionalGroup::operator()(const StringsValueType& group_name) {
  const std::string group_name_str = group_name;
  FuncGroupConstItr it = fg_.find(group_name_str);
  const bool does_require_user_consent =
      it->second.user_consent_prompt.is_initialized();

  if (fg_.end() != it) {
    const policy_table::Rpc& rpcs = (*it).second.rpcs;
    FillNotificationData filler(data_,
                                GetGroupState(group_name_str),
                                undefined_group_consent_,
                                does_require_user_consent);
    std::for_each(rpcs.begin(), rpcs.end(), filler);
  }
  return true;
}

GroupConsent ProcessFunctionalGroup::GetGroupState(
    const std::string& group_name) {
  std::vector<FunctionalGroupPermission>::const_iterator it =
      group_permissions_.begin();
  std::vector<FunctionalGroupPermission>::const_iterator it_end =
      group_permissions_.end();
  for (; it != it_end; ++it) {
    if (group_name == (*it).group_name) {
      return (*it).state;
    }
  }
  return kGroupUndefined;
}

FunctionalGroupInserter::FunctionalGroupInserter(
    const policy_table::Strings& preconsented_groups, PermissionsList& list)
    : list_(list), preconsented_(preconsented_groups) {}

void FunctionalGroupInserter::operator()(const StringsValueType& group_name) {
  CompareGroupName name(group_name);
  if (std::find_if(preconsented_.begin(), preconsented_.end(), name) ==
      preconsented_.end()) {
    list_.push_back(group_name);
  }
}

void FillFunctionalGroupPermissions(
    FunctionalGroupIDs& ids,
    FunctionalGroupNames& names,
    GroupConsent state,
    std::vector<FunctionalGroupPermission>& permissions) {
  LOG4CXX_AUTO_TRACE(logger_);
  FunctionalGroupIDs::const_iterator it = ids.begin();
  FunctionalGroupIDs::const_iterator it_end = ids.end();
  for (; it != it_end; ++it) {
    FunctionalGroupPermission current_group;
    current_group.group_id = *it;
    current_group.group_alias = names[*it].first;
    current_group.group_name = names[*it].second;
    current_group.state = state;
    permissions.push_back(current_group);
  }
}

bool IsPredefinedApp(const AppPoliciesValueType& app) {
  return app.first == kDefaultId || app.first == kPreDataConsentId ||
         app.first == kDeviceId;
}

FunctionalGroupIDs ExcludeSame(const FunctionalGroupIDs& from,
                               const FunctionalGroupIDs& what) {
  LOG4CXX_AUTO_TRACE(logger_);
  FunctionalGroupIDs from_copy(from);
  FunctionalGroupIDs what_copy(what);

  std::sort(from_copy.begin(), from_copy.end());
  std::sort(what_copy.begin(), what_copy.end());

  FunctionalGroupIDs no_same;
  std::set_difference(from_copy.begin(),
                      from_copy.end(),
                      what_copy.begin(),
                      what_copy.end(),
                      std::back_inserter(no_same));

  no_same.resize(std::distance(no_same.begin(),
                               std::unique(no_same.begin(), no_same.end())));

  return no_same;
}

FunctionalGroupIDs Merge(const FunctionalGroupIDs& first,
                         const FunctionalGroupIDs& second) {
  LOG4CXX_AUTO_TRACE(logger_);
  FunctionalGroupIDs first_copy(first);
  FunctionalGroupIDs second_copy(second);

  std::sort(first_copy.begin(), first_copy.end());
  std::sort(second_copy.begin(), second_copy.end());

  FunctionalGroupIDs merged;
  std::set_union(first_copy.begin(),
                 first_copy.end(),
                 second_copy.begin(),
                 second_copy.end(),
                 std::back_inserter(merged));

  merged.resize(
      std::distance(merged.begin(), std::unique(merged.begin(), merged.end())));

  return merged;
}

FunctionalGroupIDs FindSame(const FunctionalGroupIDs& first,
                            const FunctionalGroupIDs& second) {
  LOG4CXX_INFO(logger_, "Find same groups");
  FunctionalGroupIDs first_copy(first);
  FunctionalGroupIDs second_copy(second);

  std::sort(first_copy.begin(), first_copy.end());
  std::sort(second_copy.begin(), second_copy.end());

  FunctionalGroupIDs same;
  std::set_intersection(first_copy.begin(),
                        first_copy.end(),
                        second_copy.begin(),
                        second_copy.end(),
                        std::back_inserter(same));

  same.resize(
      std::distance(same.begin(), std::unique(same.begin(), same.end())));

  return same;
}

bool UnwrapAppPolicies(policy_table::ApplicationPolicies& app_policies) {
  policy_table::ApplicationPolicies::iterator it_default =
      app_policies.find(kDefaultId);
  if (app_policies.end() == it_default) {
    LOG4CXX_ERROR(logger_, "No default application policy found in PTU.");
    return false;
  }

  policy_table::ApplicationPolicies::iterator it = app_policies.begin();
  for (; app_policies.end() != it; ++it) {
    // Set default policies for app, if there is record like "123":"default"
    if (kDefaultId.compare((*it).second.get_string()) == 0) {
      (*it).second = (*it_default).second;
      it->second.set_to_string(kDefaultId);
    }
  }

  return true;
}

}  // namespace policy