1/*
2 * Copyright (c) 2004 Apple Computer, Inc. All Rights Reserved.
3 *
4 * @APPLE_LICENSE_HEADER_START@
5 *
6 * This file contains Original Code and/or Modifications of Original Code
7 * as defined in and that are subject to the Apple Public Source License
8 * Version 2.0 (the 'License'). You may not use this file except in
9 * compliance with the License. Please obtain a copy of the License at
10 * http://www.opensource.apple.com/apsl/ and read it before using this
11 * file.
12 *
13 * The Original Code and all software distributed under the License are
14 * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
15 * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
16 * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
17 * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.
18 * Please see the License for the specific language governing rights and
19 * limitations under the License.
20 *
21 * @APPLE_LICENSE_HEADER_END@
22 */
23#ifndef _H_TOKENACL
24#define _H_TOKENACL
25
26
27//
28// tokenacl - Token-based ACL implementation
29//
30#include "acls.h"
31#include <security_cdsa_utilities/acl_preauth.h>
32
33class Token;
34class TokenDatabase;
35
36
37//
38// The Token version of a SecurityServerAcl.
39//
40class TokenAcl : public virtual SecurityServerAcl {
41public:
42	TokenAcl();
43
44	typedef unsigned int ResetGeneration;
45
46public:
47	// implement SecurityServerAcl
48	void getOwner(AclOwnerPrototype &owner);
49	void getAcl(const char *tag, uint32 &count, AclEntryInfo *&acls);
50    void changeAcl(const AclEdit &edit, const AccessCredentials *cred,
51		Database *relatedDatabase);
52	void changeOwner(const AclOwnerPrototype &newOwner, const AccessCredentials *cred,
53		Database *relatedDatabase);
54
55	void instantiateAcl();
56	void changedAcl();
57
58public:
59	// required from our MDC
60	virtual Token &token() = 0;
61	virtual GenericHandle tokenHandle() const = 0;
62
63protected:
64	void invalidateAcl()	{ mLastReset = 0; }
65	void pinChange(unsigned int pin, CSSM_ACL_HANDLE handle, TokenDatabase &database);
66
67private:
68	ResetGeneration mLastReset;
69};
70
71
72#endif //_H_TOKENACL
73