epriestley ded641ae32 Add basic per-object privacy policies ... Summary: Provides a basic start for access policies. Objects expose various capabilities, like CAN_VIEW, CAN_EDIT, etc., and set a policy for each capability. We currently implement three policies, PUBLIC (anyone, including logged-out), USERS (any logged-in) and NOONE (nobody). There's also a way to provide automatic capability grants (e.g., the owner of an object can always see it, even if some capability is set to "NOONE"), but I'm not sure how great the implementation feels and it might change. Most of the code here is providing a primitive for efficient policy-aware list queries. The problem with doing queries naively is that you have to do crazy amounts of filtering, e.g. to show the user page 6, you need to filter at least 600 objects (and likely more) before you can figure out which ones are 500-600 for them. You can't just do "LIMIT 500, 100" because that might have only 50 results, or no results. Instead, the query looks like "WHERE id > last_visible_id", and then we fetch additional pages as necessary to satisfy the request. The general idea is that we move all data access to Query classes and have them do object filtering. The ID paging primitive allows efficient paging in most cases, and the executeOne() method provides a concise way to do policy checks for edit/view screens. We'll probably end up with mostly broader policy UIs or configuration-based policies, but there are at least a few cases for per-object privacy (e.g., marking tasks as "Security", and restricting things to the members of projects) so I figured we'd start with a flexible primitive and the simplify it in the UI where we can. Test Plan: Unit tests, played around in the UI with various policy settings. Reviewers: btrahan, vrana, jungejason Reviewed By: btrahan CC: aran Maniphest Tasks: T603 Differential Revision: https://secure.phabricator.com/D2210		2012-04-14 10:13:29 -07:00
..
applicationconfiguration	Return $this from setters	2012-04-02 18:48:37 -07:00
console	Use head_key() and last_key() to explicitly communicate intent	2012-04-09 11:08:59 -07:00
controller	Modularize oauth.	2011-02-27 20:38:11 -08:00
default/configuration	Add basic per-object privacy policies	2012-04-14 10:13:29 -07:00
exception	Add "final" to more classes	2012-03-13 11:18:11 -07:00
mapper	Always match full path in URI Mapper	2012-03-01 15:27:03 -08:00
request	Return $this from setters	2012-04-02 18:48:37 -07:00
response	Add "final" to more classes	2012-03-13 11:18:11 -07:00
sink	Encode "<" and ">" in JSON/Ajax responses to prevent content-sniffing attacks	2012-02-14 14:51:51 -08:00
writeguard	Create AphrontWriteGuard, a backup mechanism for CSRF validation	2011-08-16 13:29:57 -07:00