mod_adhoc: Add support for commands only executable by global administrators

[prosody.git] / util / pubsub.lua

diff --git a/util/pubsub.lua b/util/pubsub.lua
index f7c6597f178159bb73c216a580a0bd02baa073c3..69e79acc2894d52ab45c90f91f516768d0c7c86b 100644 (file)
--- a/util/pubsub.lua
+++ b/util/pubsub.lua
@@ -14,6 +14,7 @@ function new(config)
        return setmetatable({
                config = setmetatable(config, { __index = default_config });
                affiliations = {};
+               subscriptions = {};
                nodes = {};
        }, service_mt);
 end
@@ -26,17 +27,14 @@ end
 function service:may(node, actor, action)
        if actor == true then return true; end
        
-       
        local node_obj = self.nodes[node];
        local node_aff = node_obj and node_obj.affiliations[actor];
        local service_aff = self.affiliations[actor]
                         or self.config.get_affiliation(actor, node, action)
                         or "none";
        
+       -- Check if node allows/forbids it
        local node_capabilities = node_obj and node_obj.capabilities;
-       local service_capabilities = self.config.capabilities;
-       
-       -- Check if node allows/forbids it      
        if node_capabilities then
                local caps = node_capabilities[node_aff or service_aff];
                if caps then
@@ -46,7 +44,9 @@ function service:may(node, actor, action)
                        end
                end
        end
+       
        -- Check service-wide capabilities instead
+       local service_capabilities = self.config.capabilities;
        local caps = service_capabilities[node_aff or service_aff];
        if caps then
                local can = caps[action];
@@ -69,14 +69,14 @@ function service:set_affiliation(node, actor, jid, affiliation)
                return false, "item-not-found";
        end
        node_obj.affiliations[jid] = affiliation;
-       local _, jid_sub = self:get_subscription(node, nil, jid);
+       local _, jid_sub = self:get_subscription(node, true, jid);
        if not jid_sub and not self:may(node, jid, "be_unsubscribed") then
-               local ok, err = self:add_subscription(node, nil, jid);
+               local ok, err = self:add_subscription(node, true, jid);
                if not ok then
                        return ok, err;
                end
        elseif jid_sub and not self:may(node, jid, "be_subscribed") then
-               local ok, err = self:add_subscription(node, nil, jid);
+               local ok, err = self:add_subscription(node, true, jid);
                if not ok then
                        return ok, err;
                end
@@ -87,7 +87,7 @@ end
 function service:add_subscription(node, actor, jid, options)
        -- Access checking
        local cap;
-       if jid == actor or self:jids_equal(actor, jid) then
+       if actor == true or jid == actor or self:jids_equal(actor, jid) then
                cap = "subscribe";
        else
                cap = "subscribe_other";
@@ -112,13 +112,24 @@ function service:add_subscription(node, actor, jid, options)
                end
        end
        node_obj.subscribers[jid] = options or true;
+       local normal_jid = self.config.normalize_jid(jid);
+       local subs = self.subscriptions[normal_jid];
+       if subs then
+               if not subs[jid] then
+                       subs[jid] = { [node] = true };
+               else
+                       subs[jid][node] = true;
+               end
+       else
+               self.subscriptions[normal_jid] = { [jid] = { [node] = true } };
+       end
        return true;
 end
 
 function service:remove_subscription(node, actor, jid)
        -- Access checking
        local cap;
-       if jid == actor or self:jids_equal(actor, jid) then
+       if actor == true or jid == actor or self:jids_equal(actor, jid) then
                cap = "unsubscribe";
        else
                cap = "unsubscribe_other";
@@ -138,13 +149,27 @@ function service:remove_subscription(node, actor, jid)
                return false, "not-subscribed";
        end
        node_obj.subscribers[jid] = nil;
+       local normal_jid = self.config.normalize_jid(jid);
+       local subs = self.subscriptions[normal_jid];
+       if subs then
+               local jid_subs = subs[jid];
+               if jid_subs then
+                       jid_subs[node] = nil;
+                       if next(jid_subs) == nil then
+                               subs[jid] = nil;
+                       end
+               end
+               if next(subs) == nil then
+                       self.subscriptions[normal_jid] = nil;
+               end
+       end
        return true;
 end
 
 function service:get_subscription(node, actor, jid)
        -- Access checking
        local cap;
-       if jid == actor or self:jids_equal(actor, jid) then
+       if actor == true or jid == actor or self:jids_equal(actor, jid) then
                cap = "get_subscription";
        else
                cap = "get_subscription_other";
@@ -249,6 +274,55 @@ function service:get_nodes(actor)
        return true, self.nodes;
 end
 
+function service:get_subscriptions(node, actor, jid)
+       -- Access checking
+       local cap;
+       if actor == true or jid == actor or self:jids_equal(actor, jid) then
+               cap = "get_subscriptions";
+       else
+               cap = "get_subscriptions_other";
+       end
+       if not self:may(node, actor, cap) then
+               return false, "forbidden";
+       end
+       --
+       local node_obj;
+       if node then
+               node_obj = self.nodes[node];
+               if not node_obj then
+                       return false, "item-not-found";
+               end
+       end
+       local normal_jid = self.config.normalize_jid(jid);
+       local subs = self.subscriptions[normal_jid];
+       -- We return the subscription object from the node to save
+       -- a get_subscription() call for each node.
+       local ret = {};
+       if subs then
+               for jid, subscribed_nodes in pairs(subs) do
+                       if node then -- Return only subscriptions to this node
+                               if subscribed_nodes[node] then
+                                       ret[#ret+1] = {
+                                               node = subscribed_node;
+                                               jid = jid;
+                                               subscription = node_obj.subscribers[jid];
+                                       };
+                               end
+                       else -- Return subscriptions to all nodes
+                               local nodes = self.nodes;
+                               for subscribed_node in pairs(subscribed_nodes) do
+                                       ret[#ret+1] = {
+                                               node = subscribed_node;
+                                               jid = jid;
+                                               subscription = nodes[subscribed_node].subscribers[jid];
+                                       };
+                               end
+                       end
+               end
+       end
+       return true, ret;
+end
+
 -- Access models only affect 'none' affiliation caps, service/default access level...
 function service:set_node_capabilities(node, actor, capabilities)
        -- Access checking