construct/modules/m_grant.cc

/*
 * Copyright (C) 2006 Jilles Tjoelker
 * Copyright (C) 2006 Stephen Bennett <spb@gentoo.org>
 */

using namespace ircd;

static const char grant_desc[] =
	"Provides the grant facility for giving other users specific privilege sets";

static void mo_grant(struct MsgBuf *msgbuf_p, client::client &client, client::client &source, int parc, const char *parv[]);
static void me_grant(struct MsgBuf *msgbuf_p, client::client &client, client::client &source, int parc, const char *parv[]);

static void do_grant(client::client &source, client::client *target_p, const char *new_privset);

struct Message grant_msgtab = {
	"GRANT", 0, 0, 0, 0,
	{ mg_ignore, mg_not_oper, mg_ignore, mg_ignore, {me_grant, 3}, {mo_grant, 3}}
};

mapi_clist_av1 grant_clist[] = { &grant_msgtab, NULL };

DECLARE_MODULE_AV2(grant, NULL, NULL, grant_clist, NULL, NULL, NULL, NULL, grant_desc);

static void
mo_grant(struct MsgBuf *msgbuf_p, client::client &client, client::client &source, int parc, const char *parv[])
{
	client::client *target_p;

	if(!HasPrivilege(&source, "oper:grant"))
	{
		sendto_one(&source, form_str(ERR_NOPRIVS), me.name, source.name, "grant");
		return;
	}

	target_p = client::find_named_person(parv[1]);
	if (target_p == NULL)
	{
		sendto_one_numeric(&source, ERR_NOSUCHNICK,
				form_str(ERR_NOSUCHNICK), parv[1]);
		return;
	}

	if (my(*target_p))
	{
		do_grant(source, target_p, parv[2]);
	}
	else
	{
		sendto_one(target_p, ":%s ENCAP %s GRANT %s %s",
				get_id(&source, target_p), target_p->servptr->name,
				get_id(target_p, target_p), parv[2]);
	}
}

static void
me_grant(struct MsgBuf *msgbuf_p, client::client &client, client::client &source, int parc, const char *parv[])
{
	client::client *target_p;

	target_p = client::find_person(parv[1]);
	if (target_p == NULL)
	{
		sendto_one_numeric(&source, ERR_NOSUCHNICK,
				form_str(ERR_NOSUCHNICK), parv[1]);
		return;
	}

	if(!find_shared_conf(source.username, source.host,
				source.servptr->name, SHARED_GRANT))
	{
		sendto_one(&source, ":%s NOTICE %s :You don't have an appropriate shared"
			"block to grant privilege on this server.", me.name, source.name);
		return;
	}

	do_grant(source, target_p, parv[2]);
}


static void
do_grant(client::client &source, client::client *target_p, const char *new_privset)
{
	int dooper = 0, dodeoper = 0;
	struct PrivilegeSet *privset = 0;
	const char *modeparv[4];

	if (!strcmp(new_privset, "deoper"))
	{
		if (!is(*target_p, umode::OPER))
		{
			sendto_one_notice(&source, ":You can't deoper someone who isn't an oper.");
			return;
		}
		new_privset = "default";
		dodeoper = 1;

		sendto_one_notice(target_p, ":%s is deopering you.", source.name);
		sendto_realops_snomask(SNO_GENERAL, L_NETWIDE, "%s is deopering %s.", get_oper_name(&source), target_p->name);
	}
	else
	{
		if (!(privset = privilegeset_get(new_privset)))
		{
			sendto_one_notice(&source, ":There is no privilege set named '%s'.", new_privset);
			return;
		}

		if (privset == target_p->localClient->privset)
		{
			sendto_one_notice(&source, ":%s already has privilege set %s.", target_p->name, target_p->localClient->privset->name);
			return;
		}
	}

	if (!dodeoper)
	{
		if (!is(*target_p, umode::OPER))
		{
			sendto_one_notice(target_p, ":%s is opering you with privilege set %s", source.name, privset->name);
			sendto_realops_snomask(SNO_GENERAL, L_NETWIDE, "%s is opering %s with privilege set %s", get_oper_name(&source), target_p->name, privset->name);
			dooper = 1;
		}
		else
		{
			sendto_one_notice(target_p, ":%s is changing your privilege set to %s", source.name, privset->name);
			sendto_realops_snomask(SNO_GENERAL, L_NETWIDE, "%s is changing the privilege set of %s to %s", get_oper_name(&source), target_p->name, privset->name);
		}
	}

	if (dodeoper)
	{
		const char *modeparv[4];
		modeparv[0] = modeparv[1] = target_p->name;
		modeparv[2] = "-o";
		modeparv[3] = NULL;
		user_mode(target_p, target_p, 3, modeparv);
	}

	if (dooper)
	{
		struct oper_conf oper;
		oper.name = "<grant>";
		oper.umodes = 0;
		oper.snomask = 0;
		oper.privset = privset;

		oper_up(target_p, &oper);
	}

	target_p->localClient->privset = privset;
	modeparv[0] = modeparv[1] = target_p->name;
	modeparv[2] = "+";
	modeparv[3] = NULL;
	user_mode(target_p, target_p, 3, modeparv);
}