1 files changed, 177 insertions, 0 deletions
diff --git a/Userland/Services/FileSystemAccessServer/ConnectionFromClient.cpp b/Userland/Services/FileSystemAccessServer/ConnectionFromClient.cpp
new file mode 100644
index 0000000000..48bbb2a548
--- /dev/null
+++ b/Userland/Services/FileSystemAccessServer/ConnectionFromClient.cpp
@@ -0,0 +1,177 @@
+/*
+ * Copyright (c) 2021, timmot <tiwwot@protonmail.com>
+ *
+ * SPDX-License-Identifier: BSD-2-Clause
+ */
+
+// FIXME: LibIPC Decoder and Encoder are sensitive to include order here
+// clang-format off
+#include <LibGUI/WindowServerConnection.h>
+// clang-format on
+#include <AK/Debug.h>
+#include <FileSystemAccessServer/ConnectionFromClient.h>
+#include <LibCore/File.h>
+#include <LibCore/IODevice.h>
+#include <LibGUI/Application.h>
+#include <LibGUI/FilePicker.h>
+#include <LibGUI/MessageBox.h>
+
+namespace FileSystemAccessServer {
+
+static HashMap<int, NonnullRefPtr<ConnectionFromClient>> s_connections;
+
+ConnectionFromClient::ConnectionFromClient(NonnullOwnPtr<Core::Stream::LocalSocket> socket)
+    : IPC::ConnectionFromClient<FileSystemAccessClientEndpoint, FileSystemAccessServerEndpoint>(*this, move(socket), 1)
+{
+    s_connections.set(1, *this);
+}
+
+ConnectionFromClient::~ConnectionFromClient()
+{
+}
+
+void ConnectionFromClient::die()
+{
+    s_connections.remove(client_id());
+    GUI::Application::the()->quit();
+}
+
+RefPtr<GUI::Window> ConnectionFromClient::create_dummy_child_window(i32 window_server_client_id, i32 parent_window_id)
+{
+    auto window = GUI::Window::construct();
+    window->set_opacity(0);
+    window->set_frameless(true);
+    auto rect = GUI::WindowServerConnection::the().get_window_rect_from_client(window_server_client_id, parent_window_id);
+    window->set_rect(rect);
+    window->show();
+    GUI::WindowServerConnection::the().async_set_window_parent_from_client(window_server_client_id, parent_window_id, window->window_id());
+
+    return window;
+}
+
+void ConnectionFromClient::request_file_handler(i32 window_server_client_id, i32 parent_window_id, String const& path, Core::OpenMode const& requested_access, ShouldPrompt prompt)
+{
+    VERIFY(path.starts_with("/"sv));
+
+    bool approved = false;
+    auto maybe_permissions = m_approved_files.get(path);
+
+    auto relevant_permissions = requested_access & (Core::OpenMode::ReadOnly | Core::OpenMode::WriteOnly);
+    VERIFY(relevant_permissions != Core::OpenMode::NotOpen);
+
+    if (maybe_permissions.has_value())
+        approved = has_flag(maybe_permissions.value(), relevant_permissions);
+
+    if (!approved) {
+        String access_string;
+
+        if (has_flag(requested_access, Core::OpenMode::ReadWrite))
+            access_string = "read and write";
+        else if (has_flag(requested_access, Core::OpenMode::ReadOnly))
+            access_string = "read from";
+        else if (has_flag(requested_access, Core::OpenMode::WriteOnly))
+            access_string = "write to";
+
+        auto pid = this->socket().peer_pid().release_value_but_fixme_should_propagate_errors();
+        auto exe_link = LexicalPath("/proc").append(String::number(pid)).append("exe").string();
+        auto exe_path = Core::File::real_path_for(exe_link);
+
+        auto main_window = create_dummy_child_window(window_server_client_id, parent_window_id);
+
+        if (prompt == ShouldPrompt::Yes) {
+            auto exe_name = LexicalPath::basename(exe_path);
+            auto result = GUI::MessageBox::show(main_window, String::formatted("Allow {} ({}) to {} \"{}\"?", exe_name, pid, access_string, path), "File Permissions Requested", GUI::MessageBox::Type::Warning, GUI::MessageBox::InputType::YesNo);
+            approved = result == GUI::MessageBox::ExecYes;
+        } else {
+            approved = true;
+        }
+
+        if (approved) {
+            auto new_permissions = relevant_permissions;
+
+            if (maybe_permissions.has_value())
+                new_permissions |= maybe_permissions.value();
+
+            m_approved_files.set(path, new_permissions);
+        }
+    }
+
+    if (approved) {
+        auto file = Core::File::open(path, requested_access);
+
+        if (file.is_error()) {
+            dbgln("FileSystemAccessServer: Couldn't open {}, error {}", path, file.error());
+            async_handle_prompt_end(errno, Optional<IPC::File> {}, path);
+        } else {
+            async_handle_prompt_end(0, IPC::File(file.value()->leak_fd(), IPC::File::CloseAfterSending), path);
+        }
+    } else {
+        async_handle_prompt_end(-1, Optional<IPC::File> {}, path);
+    }
+}
+
+void ConnectionFromClient::request_file_read_only_approved(i32 window_server_client_id, i32 parent_window_id, String const& path)
+{
+    request_file_handler(window_server_client_id, parent_window_id, path, Core::OpenMode::ReadOnly, ShouldPrompt::No);
+}
+
+void ConnectionFromClient::request_file(i32 window_server_client_id, i32 parent_window_id, String const& path, Core::OpenMode const& requested_access)
+{
+    request_file_handler(window_server_client_id, parent_window_id, path, requested_access, ShouldPrompt::Yes);
+}
+
+void ConnectionFromClient::prompt_open_file(i32 window_server_client_id, i32 parent_window_id, String const& window_title, String const& path_to_view, Core::OpenMode const& requested_access)
+{
+    auto relevant_permissions = requested_access & (Core::OpenMode::ReadOnly | Core::OpenMode::WriteOnly);
+    VERIFY(relevant_permissions != Core::OpenMode::NotOpen);
+
+    auto main_window = create_dummy_child_window(window_server_client_id, parent_window_id);
+
+    auto user_picked_file = GUI::FilePicker::get_open_filepath(main_window, window_title, path_to_view);
+
+    prompt_helper(user_picked_file, requested_access);
+}
+
+void ConnectionFromClient::prompt_save_file(i32 window_server_client_id, i32 parent_window_id, String const& name, String const& ext, String const& path_to_view, Core::OpenMode const& requested_access)
+{
+    auto relevant_permissions = requested_access & (Core::OpenMode::ReadOnly | Core::OpenMode::WriteOnly);
+    VERIFY(relevant_permissions != Core::OpenMode::NotOpen);
+
+    auto main_window = create_dummy_child_window(window_server_client_id, parent_window_id);
+
+    auto user_picked_file = GUI::FilePicker::get_save_filepath(main_window, name, ext, path_to_view);
+
+    prompt_helper(user_picked_file, requested_access);
+}
+
+void ConnectionFromClient::prompt_helper(Optional<String> const& user_picked_file, Core::OpenMode const& requested_access)
+{
+    if (user_picked_file.has_value()) {
+        VERIFY(user_picked_file->starts_with("/"sv));
+        auto file = Core::File::open(user_picked_file.value(), requested_access);
+
+        if (file.is_error()) {
+            dbgln("FileSystemAccessServer: Couldn't open {}, error {}", user_picked_file.value(), file.error());
+
+            async_handle_prompt_end(errno, Optional<IPC::File> {}, user_picked_file);
+        } else {
+            auto maybe_permissions = m_approved_files.get(user_picked_file.value());
+            auto new_permissions = requested_access & (Core::OpenMode::ReadOnly | Core::OpenMode::WriteOnly);
+            if (maybe_permissions.has_value())
+                new_permissions |= maybe_permissions.value();
+
+            m_approved_files.set(user_picked_file.value(), new_permissions);
+
+            async_handle_prompt_end(0, IPC::File(file.value()->leak_fd(), IPC::File::CloseAfterSending), user_picked_file);
+        }
+    } else {
+        async_handle_prompt_end(-1, Optional<IPC::File> {}, Optional<String> {});
+    }
+}
+
+Messages::FileSystemAccessServer::ExposeWindowServerClientIdResponse ConnectionFromClient::expose_window_server_client_id()
+{
+    return GUI::WindowServerConnection::the().expose_client_id();
+}
+
+}