1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
use glib::{ParamSpec, Properties};
use gtk::glib;
use gtk::prelude::*;
use gtk::subclass::prelude::*;
use once_cell::unsync::OnceCell;
use crate::main::context::{SkContextDetail, SkContextDetailGroup, SkContextDetailGroupModel};
use crate::main::flatpak::permissions::types::{SkFilesystemPermission, SkServicePermission};
use crate::main::flatpak::permissions::{PermissionDetails, SkAppPermissions, SkPermissionSummary};
use crate::main::i18n::i18n;
mod imp {
use super::*;
#[derive(Debug, Default, Properties)]
#[properties(wrapper_type = super::SkContext)]
pub struct SkContext {
#[property(get, set, construct_only)]
summary: OnceCell<SkContextDetail>,
#[property(get, set, construct_only)]
details: OnceCell<SkContextDetailGroupModel>,
}
#[glib::object_subclass]
impl ObjectSubclass for SkContext {
const NAME: &'static str = "SkContext";
type Type = super::SkContext;
}
impl ObjectImpl for SkContext {
fn properties() -> &'static [ParamSpec] {
Self::derived_properties()
}
fn property(&self, id: usize, pspec: &ParamSpec) -> glib::Value {
Self::derived_property(self, id, pspec)
}
fn set_property(&self, id: usize, value: &glib::Value, pspec: &ParamSpec) {
Self::derived_set_property(self, id, value, pspec)
}
}
}
glib::wrapper! {
pub struct SkContext(ObjectSubclass<imp::SkContext>);
}
impl SkContext {
pub fn new(summary: &SkContextDetail, details: &SkContextDetailGroupModel) -> Self {
glib::Object::builder()
.property("summary", summary)
.property("details", details)
.build()
}
pub fn permissions(permissions: &SkAppPermissions) -> Self {
let mut groups = Vec::new();
let mut summary = SkPermissionSummary::empty();
let mut general_details = Vec::new();
general_details.append(&mut permissions.subsystems().context_details());
general_details.append(&mut permissions.devices().context_details());
general_details.append(&mut permissions.sockets().context_details());
summary |= permissions.subsystems().summary();
summary |= permissions.devices().summary();
summary |= permissions.sockets().summary();
let description = i18n("The isolated environment does not protect against malicious applications. Applications can request additional permissions at runtime. However, these must be explicitly confirmed.");
let group = SkContextDetailGroup::new(None, Some(&description));
group.add_details(&general_details);
groups.push(group);
let mut filesystem_details = Vec::new();
for value in permissions.filesystems().snapshot() {
let value: SkFilesystemPermission = value.downcast().unwrap();
filesystem_details.push(value.context_details()[0].clone());
summary |= value.summary();
}
if permissions.filesystems().n_items() == 0 {
filesystem_details.push(SkFilesystemPermission::no_access_context());
}
let title = i18n("Filesystem Permissions");
let group = SkContextDetailGroup::new(Some(&title), None);
group.add_details(&filesystem_details);
groups.push(group);
let mut service_details = Vec::new();
for value in permissions.services().snapshot() {
let value: SkServicePermission = value.downcast().unwrap();
service_details.push(value.context_details()[0].clone());
summary |= value.summary();
}
if permissions.services().n_items() == 0 {
service_details.push(SkServicePermission::no_access_context());
}
let title = i18n("Service Permissions");
let group = SkContextDetailGroup::new(Some(&title), None);
group.add_details(&service_details);
groups.push(group);
let summary = summary.as_context_detail();
let model = SkContextDetailGroupModel::new();
model.add_groups(&groups);
Self::new(&summary, &model)
}
}