LXR qemu/authz/base.c

   1/*
   2 * QEMU authorization framework base class
   3 *
   4 * Copyright (c) 2018 Red Hat, Inc.
   5 *
   6 * This library is free software; you can redistribute it and/or
   7 * modify it under the terms of the GNU Lesser General Public
   8 * License as published by the Free Software Foundation; either
   9 * version 2 of the License, or (at your option) any later version.
  10 *
  11 * This library is distributed in the hope that it will be useful,
  12 * but WITHOUT ANY WARRANTY; without even the implied warranty of
  13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  14 * Lesser General Public License for more details.
  15 *
  16 * You should have received a copy of the GNU Lesser General Public
  17 * License along with this library; if not, see <http://www.gnu.org/licenses/>.
  18 *
  19 */
  20
  21#include "qemu/osdep.h"
  22#include "authz/base.h"
  23#include "authz/trace.h"
  24
  25bool qauthz_is_allowed(QAuthZ *authz,
  26                       const char *identity,
  27                       Error **errp)
  28{
  29    QAuthZClass *cls = QAUTHZ_GET_CLASS(authz);
  30    bool allowed;
  31
  32    allowed = cls->is_allowed(authz, identity, errp);
  33    trace_qauthz_is_allowed(authz, identity, allowed);
  34
  35    return allowed;
  36}
  37
  38
  39bool qauthz_is_allowed_by_id(const char *authzid,
  40                             const char *identity,
  41                             Error **errp)
  42{
  43    QAuthZ *authz;
  44    Object *obj;
  45    Object *container;
  46
  47    container = object_get_objects_root();
  48    obj = object_resolve_path_component(container,
  49                                        authzid);
  50    if (!obj) {
  51        error_setg(errp, "Cannot find QAuthZ object ID %s",
  52                   authzid);
  53        return false;
  54    }
  55
  56    if (!object_dynamic_cast(obj, TYPE_QAUTHZ)) {
  57        error_setg(errp, "Object '%s' is not a QAuthZ subclass",
  58                   authzid);
  59        return false;
  60    }
  61
  62    authz = QAUTHZ(obj);
  63
  64    return qauthz_is_allowed(authz, identity, errp);
  65}
  66
  67
  68static const TypeInfo authz_info = {
  69    .parent = TYPE_OBJECT,
  70    .name = TYPE_QAUTHZ,
  71    .instance_size = sizeof(QAuthZ),
  72    .class_size = sizeof(QAuthZClass),
  73    .abstract = true,
  74};
  75
  76static void qauthz_register_types(void)
  77{
  78    type_register_static(&authz_info);
  79}
  80
  81type_init(qauthz_register_types)
  82
  83