The Tor Browser / file revision

 /* This Source Code Form is subject to the terms of the Mozilla Public

  * License, v. 2.0. If a copy of the MPL was not distributed with this file,

  * You can obtain one at http://mozilla.org/MPL/2.0/. */

 "use strict";

 const Ci = Components.interfaces;

 const Cu = Components.utils;

 Cu.import("resource://gre/modules/XPCOMUtils.jsm");

 Cu.import("resource://gre/modules/AppsUtils.jsm");

 Cu.import("resource://gre/modules/PermissionSettings.jsm");

 Cu.import("resource://gre/modules/PermissionsTable.jsm");

 this.EXPORTED_SYMBOLS = ["PermissionsInstaller"];

 const UNKNOWN_ACTION = Ci.nsIPermissionManager.UNKNOWN_ACTION;

 const ALLOW_ACTION = Ci.nsIPermissionManager.ALLOW_ACTION;

 const DENY_ACTION = Ci.nsIPermissionManager.DENY_ACTION;

 const PROMPT_ACTION = Ci.nsIPermissionManager.PROMPT_ACTION;

 // Permission access flags

 const READONLY = "readonly";

 const CREATEONLY = "createonly";

 const READCREATE = "readcreate";

 const READWRITE = "readwrite";

 const PERM_TO_STRING = ["unknown", "allow", "deny", "prompt"];

 function debug(aMsg) {

   //dump("-*-*- PermissionsInstaller.jsm : " + aMsg + "\n");

 }

 // An array carring all the possible (expanded) permission names.

 let AllPossiblePermissions = [];

 for (let permName in PermissionsTable) {

   let expandedPermNames = [];

   if (PermissionsTable[permName].access) {

     expandedPermNames = expandPermissions(permName, READWRITE);

   } else {

     expandedPermNames = expandPermissions(permName);

   }

   AllPossiblePermissions = AllPossiblePermissions.concat(expandedPermNames);

   AllPossiblePermissions =

     AllPossiblePermissions.concat(["offline-app", "pin-app"]);

 }

 this.PermissionsInstaller = {

   /**

    * Install permissisions or remove deprecated permissions upon re-install.

    * @param object aApp

    *        The just-installed app configuration.

    *        The properties used are manifestURL, origin and manifest.

    * @param boolean aIsReinstall

    *        Indicates the app was just re-installed

    * @param function aOnError

    *        A function called if an error occurs

    * @returns void

    **/

   installPermissions: function installPermissions(aApp, aIsReinstall, aOnError) {

     try {

       let newManifest = new ManifestHelper(aApp.manifest, aApp.origin);

       if (!newManifest.permissions && !aIsReinstall) {

         return;

       }

       if (aIsReinstall) {

         // Compare the original permissions against the new permissions

         // Remove any deprecated Permissions

         if (newManifest.permissions) {

           // Expand permission names.

           let newPermNames = [];

           for (let permName in newManifest.permissions) {

             let expandedPermNames =

               expandPermissions(permName,

                                 newManifest.permissions[permName].access);

             newPermNames = newPermNames.concat(expandedPermNames);

           }

           // Add the appcache related permissions.

           if (newManifest.appcache_path) {

             newPermNames = newPermNames.concat(["offline-app", "pin-app"]);

           }

           for (let idx in AllPossiblePermissions) {

             let permName = AllPossiblePermissions[idx];

             let index = newPermNames.indexOf(permName);

             if (index == -1) {

               // See if the permission was installed previously.

               let permValue =

                 PermissionSettingsModule.getPermission(permName,

                                                        aApp.manifestURL,

                                                        aApp.origin,

                                                        false);

               if (permValue == "unknown" || permValue == "deny") {

                 // All 'deny' permissions should be preserved

                 continue;

               }

               // Remove the deprecated permission

               PermissionSettingsModule.removePermission(permName,

                                                         aApp.manifestURL,

                                                         aApp.origin,

                                                         false);

             }

           }

         }

       }

       // Check to see if the 'webapp' is app/privileged/certified.

       let appStatus;

       switch (AppsUtils.getAppManifestStatus(aApp.manifest)) {

       case Ci.nsIPrincipal.APP_STATUS_CERTIFIED:

         appStatus = "certified";

         break;

       case Ci.nsIPrincipal.APP_STATUS_PRIVILEGED:

         appStatus = "privileged";

         break;

       case Ci.nsIPrincipal.APP_STATUS_INSTALLED:

         appStatus = "app";

         break;

       default:

         // Cannot determine app type, abort install by throwing an error.

         throw new Error("PermissionsInstaller.jsm: " +

                         "Cannot determine the app's status. Install cancelled.");

         break;

       }

       // Add the appcache related permissions. We allow it for all kinds of

       // apps.

       if (newManifest.appcache_path) {

         this._setPermission("offline-app", "allow", aApp);

         this._setPermission("pin-app", "allow", aApp);

       }

       for (let permName in newManifest.permissions) {

         if (!PermissionsTable[permName]) {

           Cu.reportError("PermissionsInstaller.jsm: '" + permName + "'" +

                          " is not a valid Webapps permission name.");

           dump("PermissionsInstaller.jsm: '" + permName + "'" +

                " is not a valid Webapps permission name.");

           continue;

         }

         let expandedPermNames =

           expandPermissions(permName,

                             newManifest.permissions[permName].access);

         for (let idx in expandedPermNames) {

           this._setPermission(expandedPermNames[idx],

                               PERM_TO_STRING[PermissionsTable[permName][appStatus]],

                               aApp);

         }

       }

     }

     catch (ex) {

       dump("Caught webapps install permissions error for " + aApp.origin);

       Cu.reportError(ex);

       if (aOnError) {

         aOnError();

       }

     }

   },

   /**

    * Set a permission value.

    * @param string aPermName

    *        The permission name.

    * @param string aPermValue

    *        The permission value.

    * @param object aApp

    *        The just-installed app configuration.

    *        The properties used are manifestURL and origin.

    * @returns void

    **/

   _setPermission: function setPermission(aPermName, aPermValue, aApp) {

     PermissionSettingsModule.addPermission({

       type: aPermName,

       origin: aApp.origin,

       manifestURL: aApp.manifestURL,

       value: aPermValue,

       browserFlag: false

     });

   }

 };