2015-03-25 00:29:10 +03:00
|
|
|
<?php
|
|
|
|
/**
|
2016-07-21 17:49:16 +03:00
|
|
|
* @copyright Copyright (c) 2016, ownCloud, Inc.
|
|
|
|
*
|
2017-11-06 17:56:42 +03:00
|
|
|
* @author Bjoern Schiessle <bjoern@schiessle.org>
|
2016-05-26 20:56:05 +03:00
|
|
|
* @author Björn Schießle <bjoern@schiessle.org>
|
2015-04-07 18:02:49 +03:00
|
|
|
* @author Clark Tomlinson <fallen013@gmail.com>
|
2019-12-03 21:57:53 +03:00
|
|
|
* @author Morris Jobke <hey@morrisjobke.de>
|
2016-01-12 17:02:16 +03:00
|
|
|
* @author Phil Davis <phil.davis@inf.org>
|
2015-04-07 18:02:49 +03:00
|
|
|
*
|
2015-03-25 00:29:10 +03:00
|
|
|
* @license AGPL-3.0
|
|
|
|
*
|
|
|
|
* This code is free software: you can redistribute it and/or modify
|
|
|
|
* it under the terms of the GNU Affero General Public License, version 3,
|
|
|
|
* as published by the Free Software Foundation.
|
|
|
|
*
|
|
|
|
* This program is distributed in the hope that it will be useful,
|
|
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
|
|
* GNU Affero General Public License for more details.
|
|
|
|
*
|
|
|
|
* You should have received a copy of the GNU Affero General Public License, version 3,
|
2019-12-03 21:57:53 +03:00
|
|
|
* along with this program. If not, see <http://www.gnu.org/licenses/>
|
2015-03-25 00:29:10 +03:00
|
|
|
*
|
|
|
|
*/
|
|
|
|
|
|
|
|
namespace OCA\Encryption;
|
|
|
|
|
|
|
|
use OC\Files\View;
|
|
|
|
use OCA\Encryption\Crypto\Crypt;
|
|
|
|
use OCP\IConfig;
|
|
|
|
use OCP\ILogger;
|
|
|
|
use OCP\IUser;
|
2015-05-12 19:49:25 +03:00
|
|
|
use OCP\IUserManager;
|
2015-03-25 00:29:10 +03:00
|
|
|
use OCP\IUserSession;
|
|
|
|
use OCP\PreConditionNotMetException;
|
|
|
|
|
|
|
|
class Util {
|
|
|
|
/**
|
|
|
|
* @var View
|
|
|
|
*/
|
|
|
|
private $files;
|
|
|
|
/**
|
|
|
|
* @var Crypt
|
|
|
|
*/
|
|
|
|
private $crypt;
|
|
|
|
/**
|
|
|
|
* @var ILogger
|
|
|
|
*/
|
|
|
|
private $logger;
|
|
|
|
/**
|
|
|
|
* @var bool|IUser
|
|
|
|
*/
|
|
|
|
private $user;
|
|
|
|
/**
|
|
|
|
* @var IConfig
|
|
|
|
*/
|
|
|
|
private $config;
|
2015-05-12 19:49:25 +03:00
|
|
|
/**
|
|
|
|
* @var IUserManager
|
|
|
|
*/
|
|
|
|
private $userManager;
|
2015-03-25 00:29:10 +03:00
|
|
|
|
|
|
|
/**
|
|
|
|
* Util constructor.
|
|
|
|
*
|
|
|
|
* @param View $files
|
|
|
|
* @param Crypt $crypt
|
|
|
|
* @param ILogger $logger
|
|
|
|
* @param IUserSession $userSession
|
|
|
|
* @param IConfig $config
|
2015-05-12 19:49:25 +03:00
|
|
|
* @param IUserManager $userManager
|
2015-03-25 00:29:10 +03:00
|
|
|
*/
|
2015-03-31 00:01:50 +03:00
|
|
|
public function __construct(View $files,
|
|
|
|
Crypt $crypt,
|
|
|
|
ILogger $logger,
|
|
|
|
IUserSession $userSession,
|
2015-05-12 19:49:25 +03:00
|
|
|
IConfig $config,
|
|
|
|
IUserManager $userManager
|
2015-03-25 00:29:10 +03:00
|
|
|
) {
|
|
|
|
$this->files = $files;
|
|
|
|
$this->crypt = $crypt;
|
|
|
|
$this->logger = $logger;
|
|
|
|
$this->user = $userSession && $userSession->isLoggedIn() ? $userSession->getUser() : false;
|
|
|
|
$this->config = $config;
|
2015-05-12 19:49:25 +03:00
|
|
|
$this->userManager = $userManager;
|
2015-03-25 00:29:10 +03:00
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
2015-04-29 18:18:41 +03:00
|
|
|
* check if recovery key is enabled for user
|
|
|
|
*
|
|
|
|
* @param string $uid
|
2015-03-25 00:29:10 +03:00
|
|
|
* @return bool
|
|
|
|
*/
|
2015-04-29 18:18:41 +03:00
|
|
|
public function isRecoveryEnabledForUser($uid) {
|
|
|
|
$recoveryMode = $this->config->getUserValue($uid,
|
2015-03-25 00:29:10 +03:00
|
|
|
'encryption',
|
|
|
|
'recoveryEnabled',
|
2015-10-13 18:54:06 +03:00
|
|
|
'0');
|
2015-03-25 00:29:10 +03:00
|
|
|
|
|
|
|
return ($recoveryMode === '1');
|
|
|
|
}
|
|
|
|
|
2015-10-13 18:54:06 +03:00
|
|
|
/**
|
|
|
|
* check if the home storage should be encrypted
|
|
|
|
*
|
|
|
|
* @return bool
|
|
|
|
*/
|
|
|
|
public function shouldEncryptHomeStorage() {
|
|
|
|
$encryptHomeStorage = $this->config->getAppValue(
|
|
|
|
'encryption',
|
|
|
|
'encryptHomeStorage',
|
|
|
|
'1'
|
|
|
|
);
|
|
|
|
|
|
|
|
return ($encryptHomeStorage === '1');
|
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
2015-11-03 20:02:55 +03:00
|
|
|
* set the home storage encryption on/off
|
2015-10-13 18:54:06 +03:00
|
|
|
*
|
|
|
|
* @param bool $encryptHomeStorage
|
|
|
|
*/
|
|
|
|
public function setEncryptHomeStorage($encryptHomeStorage) {
|
|
|
|
$value = $encryptHomeStorage ? '1' : '0';
|
|
|
|
$this->config->setAppValue(
|
|
|
|
'encryption',
|
|
|
|
'encryptHomeStorage',
|
|
|
|
$value
|
|
|
|
);
|
|
|
|
}
|
|
|
|
|
2015-09-07 12:38:44 +03:00
|
|
|
/**
|
|
|
|
* check if master key is enabled
|
|
|
|
*
|
|
|
|
* @return bool
|
|
|
|
*/
|
|
|
|
public function isMasterKeyEnabled() {
|
2017-05-30 12:40:40 +03:00
|
|
|
$userMasterKey = $this->config->getAppValue('encryption', 'useMasterKey', '1');
|
2015-09-07 12:38:44 +03:00
|
|
|
return ($userMasterKey === '1');
|
|
|
|
}
|
|
|
|
|
2015-03-25 00:29:10 +03:00
|
|
|
/**
|
|
|
|
* @param $enabled
|
|
|
|
* @return bool
|
|
|
|
*/
|
|
|
|
public function setRecoveryForUser($enabled) {
|
|
|
|
$value = $enabled ? '1' : '0';
|
|
|
|
|
|
|
|
try {
|
|
|
|
$this->config->setUserValue($this->user->getUID(),
|
|
|
|
'encryption',
|
|
|
|
'recoveryEnabled',
|
|
|
|
$value);
|
|
|
|
return true;
|
|
|
|
} catch (PreConditionNotMetException $e) {
|
|
|
|
return false;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
/**
|
|
|
|
* @param string $uid
|
|
|
|
* @return bool
|
|
|
|
*/
|
|
|
|
public function userHasFiles($uid) {
|
|
|
|
return $this->files->file_exists($uid . '/files');
|
|
|
|
}
|
|
|
|
|
2015-05-12 19:49:25 +03:00
|
|
|
/**
|
|
|
|
* get owner from give path, path relative to data/ expected
|
|
|
|
*
|
|
|
|
* @param string $path relative to data/
|
|
|
|
* @return string
|
|
|
|
* @throws \BadMethodCallException
|
|
|
|
*/
|
|
|
|
public function getOwner($path) {
|
|
|
|
$owner = '';
|
|
|
|
$parts = explode('/', $path, 3);
|
|
|
|
if (count($parts) > 1) {
|
|
|
|
$owner = $parts[1];
|
|
|
|
if ($this->userManager->userExists($owner) === false) {
|
|
|
|
throw new \BadMethodCallException('Unknown user: ' .
|
|
|
|
'method expects path to a user folder relative to the data folder');
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
return $owner;
|
|
|
|
}
|
2015-03-25 00:29:10 +03:00
|
|
|
|
2015-10-13 18:54:06 +03:00
|
|
|
/**
|
|
|
|
* get storage of path
|
|
|
|
*
|
|
|
|
* @param string $path
|
|
|
|
* @return \OC\Files\Storage\Storage
|
|
|
|
*/
|
|
|
|
public function getStorage($path) {
|
2018-01-26 02:02:03 +03:00
|
|
|
return $this->files->getMount($path)->getStorage();
|
2015-10-13 18:54:06 +03:00
|
|
|
}
|
2015-03-25 00:29:10 +03:00
|
|
|
}
|