src/permission/permission_base.h - main - githubmirror/node

src/permission/permission_base.h
79 строк3 KB
Filip Skokan
crypto: support loading private keys through STORE loaders
02 авг 2026, 23:18
02 авг 2026, 23:18565c3da
#ifndef SRC_PERMISSION_PERMISSION_BASE_H_
#define SRC_PERMISSION_PERMISSION_BASE_H_

#if defined(NODE_WANT_INTERNALS) && NODE_WANT_INTERNALS

#include <map>
#include <string>
#include <string_view>
#include "v8.h"

namespace node {

class Environment;

namespace permission {

#define FILESYSTEM_PERMISSIONS(V)                                              \
  V(FileSystem, "fs", PermissionsRoot, "")                                     \
  V(FileSystemRead, "fs.read", FileSystem, "--allow-fs-read")                  \
  V(FileSystemWrite, "fs.write", FileSystem, "--allow-fs-write")

#define CHILD_PROCESS_PERMISSIONS(V)                                           \
  V(ChildProcess, "child", PermissionsRoot, "--allow-child-process")

#define WASI_PERMISSIONS(V) V(WASI, "wasi", PermissionsRoot, "--allow-wasi")

#define WORKER_THREADS_PERMISSIONS(V)                                          \
  V(WorkerThreads, "worker", PermissionsRoot, "--allow-worker")

#define INSPECTOR_PERMISSIONS(V)                                               \
  V(Inspector, "inspector", PermissionsRoot, "--allow-inspector")

#define NET_PERMISSIONS(V) V(Net, "net", PermissionsRoot, "--allow-net")

#define ADDON_PERMISSIONS(V)                                                   \
  V(Addon, "addon", PermissionsRoot, "--allow-addons")

#define FFI_PERMISSIONS(V) V(FFI, "ffi", PermissionsRoot, "--allow-ffi")

#define OPENSSL_STORE_PERMISSIONS(V)                                           \
  V(OpenSSLStore, "openssl.store", PermissionsRoot, "--allow-openssl-store")

#define PERMISSIONS(V)                                                         \
  FILESYSTEM_PERMISSIONS(V)                                                    \
  CHILD_PROCESS_PERMISSIONS(V)                                                 \
  WASI_PERMISSIONS(V)                                                          \
  WORKER_THREADS_PERMISSIONS(V)                                                \
  INSPECTOR_PERMISSIONS(V)                                                     \
  NET_PERMISSIONS(V)                                                           \
  ADDON_PERMISSIONS(V)                                                         \
  FFI_PERMISSIONS(V)                                                           \
  OPENSSL_STORE_PERMISSIONS(V)

#define V(name, _, __, ___) k##name,
enum class PermissionScope {
  kPermissionsRoot = -1,
  PERMISSIONS(V) kPermissionsCount
};
#undef V

class PermissionBase {
 public:
  virtual void Apply(Environment* env,
                     const std::vector<std::string>& allow,
                     PermissionScope scope) = 0;
  virtual void Drop(Environment* env,
                    PermissionScope scope,
                    const std::string_view& param = "") = 0;
  virtual bool is_granted(Environment* env,
                          PermissionScope perm,
                          const std::string_view& param = "") const = 0;
};

}  // namespace permission

}  // namespace node

#endif  // defined(NODE_WANT_INTERNALS) && NODE_WANT_INTERNALS
#endif  // SRC_PERMISSION_PERMISSION_BASE_H_