mirror of
https://github.com/facebook/sapling.git
synced 2024-10-09 08:18:15 +03:00
fbdb46f5cb
Reviewed By: chadaustin Differential Revision: D17872966 fbshipit-source-id: cd60a364a2146f0dadbeca693b1d4a5d7c97ff63
44 lines
1.1 KiB
C++
44 lines
1.1 KiB
C++
/*
|
|
* Copyright (c) Facebook, Inc. and its affiliates.
|
|
*
|
|
* This software may be used and distributed according to the terms of the
|
|
* GNU General Public License version 2.
|
|
*/
|
|
|
|
#pragma once
|
|
|
|
#include <thrift/lib/cpp/TProcessorEventHandler.h>
|
|
#include <stdexcept>
|
|
|
|
namespace facebook {
|
|
namespace eden {
|
|
|
|
class ServerState;
|
|
|
|
class NotAuthorized : public std::runtime_error {
|
|
public:
|
|
using std::runtime_error::runtime_error;
|
|
};
|
|
|
|
/**
|
|
* Throws NotAuthorized in preRead if process connected to Eden's unix domain
|
|
* socket has an effective uid not allowed to access a given Thrift method.
|
|
*/
|
|
class ThriftPermissionChecker : public apache::thrift::TProcessorEventHandler {
|
|
public:
|
|
explicit ThriftPermissionChecker(std::shared_ptr<ServerState> serverState);
|
|
|
|
void* getContext(
|
|
const char* fn_name,
|
|
apache::thrift::TConnectionContext* connectionContext) override;
|
|
void freeContext(void* ctx, const char* fn_name) override;
|
|
|
|
void preRead(void* ctx, const char* fn_name) override;
|
|
|
|
private:
|
|
std::shared_ptr<ServerState> serverState_;
|
|
};
|
|
|
|
} // namespace eden
|
|
} // namespace facebook
|