| /macosx-10.10/Security-57031.1.35/securityd/src/ |
| H A D | AuthorizationEngine.h | 89 OSStatus getRule(string &inRightName, CFDictionaryRef *outRuleDefinition);
90 OSStatus setRule(const char *inRightName, CFDictionaryRef inRuleDefinition, const CredentialSet *inCredentials, CredentialSet *outCredentials, AuthorizationToken &auth);
91 OSStatus removeRule(const char *inRightName, const CredentialSet *inCredentials, CredentialSet *outCredentials, AuthorizationToken &auth);
94 OSStatus verifyModification(string inRightName, bool remove,
|
| H A D | AuthorizationEngine.cpp | 243 Engine::verifyModification(string inRightName, bool remove, argument
262 if (inRightName.length() == 0)
266 if ( *(inRightName.rbegin()) == '.')
270 if (inRightName.find(kConfigRight, 0) != string::npos)
275 rightnameToCheck = string(kConfigRight) + inRightName;
280 bool existingRule = mAuthdb.existRule(inRightName);
284 rightnameToCheck = string(kAuthorizationConfigRightModify) + inRightName;
286 rightnameToCheck = string(kAuthorizationConfigRightAdd) + inRightName;
291 rightnameToCheck = string(kAuthorizationConfigRightRemove) + inRightName;
294 secdebug("engine", "rule %s doesn't exist.", inRightName
308 getRule(string &inRightName, CFDictionaryRef *outRuleDefinition) argument
331 setRule(const char *inRightName, CFDictionaryRef inRuleDefinition, const CredentialSet *inCredentials, CredentialSet *outCredentials, AuthorizationToken &auth) argument
348 removeRule(const char *inRightName, const CredentialSet *inCredentials, CredentialSet *outCredentials, AuthorizationToken &auth) argument
[all...] |
| H A D | AuthorizationDBPlist.h | 47 bool validateRule(string inRightName, CFDictionaryRef inRightDefinition) const;
53 void setRule(const char *inRightName, CFDictionaryRef inRuleDefinition);
54 void removeRule(const char *inRightName);
|
| H A D | AuthorizationDBPlist.cpp | 285 AuthorizationDBPlist::validateRule(string inRightName, CFDictionaryRef inRightDefinition) const argument
293 Rule newRule(inRightName, inRightDefinition, mConfigRules);
294 if (newRule->name() == inRightName)
298 inRightName.c_str());
368 AuthorizationDBPlist::setRule(const char *inRightName, CFDictionaryRef inRuleDefinition) argument
377 CFRef<CFStringRef> keyRef(CFStringCreateWithCString(NULL, inRightName,
384 secdebug("authdb", "setting up rule %s.", inRightName);
392 AuthorizationDBPlist::removeRule(const char *inRightName) argument
401 CFRef<CFStringRef> keyRef(CFStringCreateWithCString(NULL, inRightName,
408 secdebug("authdb", "removing rule %s.", inRightName);
[all...] |
| H A D | session.cpp | 506 OSStatus Session::authorizationdbGet(AuthorizationString inRightName, CFDictionaryRef *rightDict) argument
508 string rightName(inRightName);
513 OSStatus Session::authorizationdbSet(const AuthorizationBlob &authBlob, AuthorizationString inRightName, CFDictionaryRef rightDict) argument
524 OSStatus result = Server::authority().setRule(inRightName, rightDict, &effective, &resultCreds, auth);
533 &authorization(authBlob), inRightName, int32_t(result));
538 OSStatus Session::authorizationdbRemove(const AuthorizationBlob &authBlob, AuthorizationString inRightName) argument
549 OSStatus result = Server::authority().removeRule(inRightName, &effective, &resultCreds, auth);
558 &authorization(authBlob), inRightName, int32_t(result));
|
| H A D | session.h | 113 OSStatus authorizationdbGet(AuthorizationString inRightName, CFDictionaryRef *rightDict);
114 OSStatus authorizationdbSet(const AuthorizationBlob &authBlob, AuthorizationString inRightName, CFDictionaryRef rightDict);
115 OSStatus authorizationdbRemove(const AuthorizationBlob &authBlob, AuthorizationString inRightName);
|
| H A D | AuthorizationRule.cpp | 245 RuleImpl::RuleImpl(const string &inRightName, CFDictionaryRef cfRight, CFDictionaryRef cfRules) : mRightName(inRightName), mExtractPassword(false) argument
263 secdebug("authrule", "%s : rule allow", inRightName.c_str());
268 secdebug("authrule", "%s : rule deny", inRightName.c_str());
293 inRightName.c_str(),
300 secdebug("authrule", "%s : rule evaluate mechanisms", inRightName.c_str());
311 secdebug("authrule", "%s : rule delegate rule", inRightName.c_str());
354 secdebug("authrule", "%s : rule class '%s' unknown.", inRightName.c_str(), classTag.c_str());
355 Syslog::alert("%s : rule class '%s' unknown", inRightName.c_str(), classTag.c_str());
367 secdebug("authrule", "%s : rule delegate rule (1): %s", inRightName
1113 Rule(const string &inRightName, CFDictionaryRef cfRight, CFDictionaryRef cfRules) argument
[all...] |
| H A D | AuthorizationRule.h | 44 RuleImpl(const string &inRightName, CFDictionaryRef cfRight, CFDictionaryRef cfRules);
155 Rule(const string &inRightName, CFDictionaryRef cfRight, CFDictionaryRef cfRules);
|