mirror of
https://we.phorge.it/source/phorge.git
synced 2024-11-15 03:12:41 +01:00
45d61b7110
Summary: Ref T3116. Currently signatures are visible to anyone, but they should be more private than that. Instead, you can see a signature if: - It's a signature on a document you can edit; or - it's your signature. I'm going to lock down the signatures page a bit in general, but this makes sure that the root policy is correct. Test Plan: - Signed a document. - Viewed signatures of a document. Reviewers: chad Reviewed By: chad Subscribers: epriestley Maniphest Tasks: T3116 Differential Revision: https://secure.phabricator.com/D9764
73 lines
1.7 KiB
PHP
73 lines
1.7 KiB
PHP
<?php
|
|
|
|
final class LegalpadDocumentSignature
|
|
extends LegalpadDAO
|
|
implements PhabricatorPolicyInterface {
|
|
|
|
const VERIFIED = 0;
|
|
const UNVERIFIED = 1;
|
|
|
|
protected $documentPHID;
|
|
protected $documentVersion;
|
|
protected $signerPHID;
|
|
protected $signatureData = array();
|
|
protected $verified;
|
|
protected $secretKey;
|
|
|
|
private $document = self::ATTACHABLE;
|
|
|
|
public function getConfiguration() {
|
|
return array(
|
|
self::CONFIG_SERIALIZATION => array(
|
|
'signatureData' => self::SERIALIZATION_JSON,
|
|
),
|
|
) + parent::getConfiguration();
|
|
}
|
|
|
|
public function save() {
|
|
if (!$this->getSecretKey()) {
|
|
$this->setSecretKey(Filesystem::readRandomCharacters(20));
|
|
}
|
|
return parent::save();
|
|
}
|
|
|
|
public function isVerified() {
|
|
return ($this->getVerified() != self::UNVERIFIED);
|
|
}
|
|
|
|
public function getDocument() {
|
|
return $this->assertAttached($this->document);
|
|
}
|
|
|
|
public function attachDocument(LegalpadDocument $document) {
|
|
$this->document = $document;
|
|
return $this;
|
|
}
|
|
|
|
|
|
/* -( PhabricatorPolicyInterface )----------------------------------------- */
|
|
|
|
|
|
public function getCapabilities() {
|
|
return array(
|
|
PhabricatorPolicyCapability::CAN_VIEW,
|
|
);
|
|
}
|
|
|
|
public function getPolicy($capability) {
|
|
switch ($capability) {
|
|
case PhabricatorPolicyCapability::CAN_VIEW:
|
|
return $this->getDocument()->getPolicy(
|
|
PhabricatorPolicyCapability::CAN_EDIT);
|
|
}
|
|
}
|
|
|
|
public function hasAutomaticCapability($capability, PhabricatorUser $viewer) {
|
|
return ($viewer->getPHID() == $this->getSignerPHID());
|
|
}
|
|
|
|
public function describeAutomaticCapability($capability) {
|
|
return null;
|
|
}
|
|
|
|
}
|