. * */ namespace OCA\Files\Share; class Api { /** * @brief get all shares * * @param array $params option 'file' to limit the result to a specific file/folder * @return \OC_OCS_Result share information */ public static function getAllShares($params) { // if a file is specified, get the share for this file if (isset($_GET['file'])) { $params['itemSource'] = self::getFileId($_GET['file']); return self::getShare($params); } $share = \OCP\Share::getItemShared('file', null); if ($share !== null) { return new \OC_OCS_Result($share); } else { return new \OC_OCS_Result(null, 404, 'no shares available'); } } /** * @brief get share information for a given share * * @param array $params which contains a 'id' * @return \OC_OCS_Result share information */ public static function getShare($params) { // either the $params already contains a itemSource if we come from // getAllShare() or we need to translate the shareID to a itemSource if(isset($params['itemSource'])) { $itemSource = $params['itemSource']; $getSpecificShare = true; } else { $s = self::getShareFromId($params['id']); $itemSource = $s['item_source']; $getSpecificShare = false; } if ($itemSource !== null) { $shares = \OCP\Share::getItemShared('file', $itemSource); // if a specific share was specified only return this one if ($getSpecificShare === false) { foreach ($shares as $share) { if ($share['id'] === (int)$params['id']) { $shares = array('element' => $share); break; } } } } else { $shares = null; } if ($shares === null || empty($shares)) { return new \OC_OCS_Result(null, 404, 'share doesn\'t exists'); } else { return new \OC_OCS_Result($shares); } } /** * @breif create a new share * @param array $params * @return \OC_OCS_Result */ public static function createShare($params) { $path = isset($_POST['path']) ? $_POST['path'] : null; if($path === null) { return new \OC_OCS_Result(null, 400, "please specify a file or folder path"); } $itemSource = self::getFileId($path); $itemType = self::getItemType($path); if($itemSource === null) { return new \OC_OCS_Result(null, 404, "wrong path, file/folder doesn't exist."); } $shareWith = isset($_POST['shareWith']) ? $_POST['shareWith'] : null; $shareType = isset($_POST['shareType']) ? (int)$_POST['shareType'] : null; switch($shareType) { case \OCP\Share::SHARE_TYPE_USER: $permissions = isset($_POST['permissions']) ? (int)$_POST['permissions'] : 31; break; case \OCP\Share::SHARE_TYPE_GROUP: $permissions = isset($_POST['permissions']) ? (int)$_POST['permissions'] : 31; break; case \OCP\Share::SHARE_TYPE_LINK: //allow password protection $shareWith = isset($_POST['password']) ? $_POST['password'] : null; //check public link share $publicUploadEnabled = \OC_Appconfig::getValue('core', 'shareapi_allow_public_upload', 'yes'); $encryptionEnabled = \OC_App::isEnabled('files_encryption'); if(isset($_POST['publicUpload']) && ($encryptionEnabled || $publicUploadEnabled !== 'yes')) { return new \OC_OCS_Result(null, 404, "public upload disabled by the administrator"); } $publicUpload = isset($_POST['publicUpload']) ? $_POST['publicUpload'] : 'no'; // read, create, update (7) if public upload is enabled or // read (1) if public upload is disabled $permissions = $publicUpload === 'yes' ? 7 : 1; break; default: return new \OC_OCS_Result(null, 404, "unknown share type"); } try { $token = \OCP\Share::shareItem( $itemType, $itemSource, $shareType, $shareWith, $permissions ); } catch (\Exception $e) { return new \OC_OCS_Result(null, 404, $e->getMessage()); } if ($token) { $data = null; $shares = \OCP\Share::getItemShared('file', $itemSource); if(is_string($token)) { //public link share foreach ($shares as $share) { if ($share['token'] === $token) { $shareId = $share['id']; break; } } $url = \OCP\Util::linkToPublic('files&t='.$token); $data = array('url' => $url, // '&' gets encoded to $amp; 'token' => $token, 'id' => $shareId); } else { foreach ($shares as $share) { if ($share['share_with'] === $shareWith && $share['share_type'] === $shareType) { $shareId = $share['id']; $data = array('id' => $shareId); break; } } } return new \OC_OCS_Result($data); } else { return new \OC_OCS_Result(null, 404, "couldn't share file"); } } /** * update shares, e.g. password, permissions, etc * @param array $params shareId 'id' and the parameter we want to update * currently supported: permissions, password, publicUpload * @return \OC_OCS_Result */ public static function updateShare($params) { $share = self::getShareFromId($params['id']); $itemSource = isset($share['item_source']) ? $share['item_source'] : null; if($itemSource === null) { return new \OC_OCS_Result(null, 404, "wrong share Id, share doesn't exist."); } try { if(isset($params['_put']['permissions'])) { return self::updatePermissions($share, $params); } elseif (isset($params['_put']['password'])) { return self::updatePassword($share, $params); } elseif (isset($params['_put']['publicUpload'])) { return self::updatePublicUpload($share, $params); } } catch (\Exception $e) { return new \OC_OCS_Result(null, 400, $e->getMessage()); } return new \OC_OCS_Result(null, 400, "Wrong or no update parameter given"); } /** * @brief update permissions for a share * @param array $share information about the share * @param array $params contains 'permissions' * @return \OC_OCS_Result */ private static function updatePermissions($share, $params) { $itemSource = $share['item_source']; $itemType = $share['item_type']; $shareWith = $share['share_with']; $shareType = $share['share_type']; $permissions = isset($params['_put']['permissions']) ? (int)$params['_put']['permissions'] : null; $publicUploadStatus = \OC_Appconfig::getValue('core', 'shareapi_allow_public_upload', 'yes'); $encryptionEnabled = \OC_App::isEnabled('files_encryption'); $publicUploadEnabled = false; if(!$encryptionEnabled && $publicUploadStatus === 'yes') { $publicUploadEnabled = true; } // only change permissions for public shares if public upload is enabled // and we want to set permissions to 1 (read only) or 7 (allow upload) if ( (int)$shareType === \OCP\Share::SHARE_TYPE_LINK ) { if ($publicUploadEnabled === false || ($permissions !== 7 && $permissions !== 1)) { return new \OC_OCS_Result(null, 400, "can't change permission for public link share"); } } try { $return = \OCP\Share::setPermissions( $itemType, $itemSource, $shareType, $shareWith, $permissions ); } catch (\Exception $e) { return new \OC_OCS_Result(null, 404, $e->getMessage()); } if ($return) { return new \OC_OCS_Result(); } else { return new \OC_OCS_Result(null, 404, "couldn't set permissions"); } } /** * @brief enable/disable public upload * @param array $share information about the share * @param array $params contains 'publicUpload' which can be 'yes' or 'no' * @return \OC_OCS_Result */ private static function updatePublicUpload($share, $params) { $publicUploadEnabled = \OC_Appconfig::getValue('core', 'shareapi_allow_public_upload', 'yes'); $encryptionEnabled = \OC_App::isEnabled('files_encryption'); if($encryptionEnabled || $publicUploadEnabled !== 'yes') { return new \OC_OCS_Result(null, 404, "public upload disabled by the administrator"); } if ($share['item_type'] !== 'folder' || (int)$share['share_type'] !== \OCP\Share::SHARE_TYPE_LINK ) { return new \OC_OCS_Result(null, 404, "public upload is only possible for public shared folders"); } // read, create, update (7) if public upload is enabled or // read (1) if public upload is disabled $params['_put']['permissions'] = $params['_put']['publicUpload'] === 'yes' ? 7 : 1; return self::updatePermissions($share, $params); } /** * @brief update password for public link share * @param array $share information about the share * @param type $params 'password' * @return \OC_OCS_Result */ private static function updatePassword($share, $params) { $itemSource = $share['item_source']; $itemType = $share['item_type']; if( (int)$share['share_type'] !== \OCP\Share::SHARE_TYPE_LINK) { return new \OC_OCS_Result(null, 400, "password protection is only supported for public shares"); } $shareWith = isset($params['_put']['password']) ? $params['_put']['password'] : null; if($shareWith === '') { $shareWith = null; } $items = \OCP\Share::getItemShared($itemType, $itemSource); $checkExists = false; foreach ($items as $item) { if($item['share_type'] === \OCP\Share::SHARE_TYPE_LINK) { $checkExists = true; $permissions = $item['permissions']; } } if (!$checkExists) { return new \OC_OCS_Result(null, 404, "share doesn't exists, can't change password"); } $result = \OCP\Share::shareItem( $itemType, $itemSource, \OCP\Share::SHARE_TYPE_LINK, $shareWith, $permissions ); if($result) { return new \OC_OCS_Result(); } return new \OC_OCS_Result(null, 404, "couldn't set password"); } /** * @brief unshare a file/folder * @param array $params contains the shareID 'id' which should be unshared * @return \OC_OCS_Result */ public static function deleteShare($params) { $share = self::getShareFromId($params['id']); $itemSource = isset($share['item_source']) ? $share['item_source'] : null; $itemType = isset($share['item_type']) ? $share['item_type'] : null;; if($itemSource === null) { return new \OC_OCS_Result(null, 404, "wrong share ID, share doesn't exist."); } $shareWith = isset($share['share_with']) ? $share['share_with'] : null; $shareType = isset($share['share_type']) ? (int)$share['share_type'] : null; if( $shareType === \OCP\Share::SHARE_TYPE_LINK) { $shareWith = null; } try { $return = \OCP\Share::unshare( $itemType, $itemSource, $shareType, $shareWith); } catch (\Exception $e) { return new \OC_OCS_Result(null, 404, $e->getMessage()); } if ($return) { return new \OC_OCS_Result(); } else { $msg = "Unshare Failed"; return new \OC_OCS_Result(null, 404, $msg); } } /** * @brief get file ID from a given path * @param string $path * @return string fileID or null */ private static function getFileId($path) { $view = new \OC\Files\View('/'.\OCP\User::getUser().'/files'); $fileId = null; $fileInfo = $view->getFileInfo($path); if ($fileInfo) { $fileId = $fileInfo['fileid']; } return $fileId; } /** * @brief get itemType * @param string $path * @return string type 'file', 'folder' or null of file/folder doesn't exists */ private static function getItemType($path) { $view = new \OC\Files\View('/'.\OCP\User::getUser().'/files'); $itemType = null; if ($view->is_dir($path)) { $itemType = "folder"; } elseif ($view->is_file($path)) { $itemType = "file"; } return $itemType; } /** * @brief get some information from a given share * @param int $shareID * @return array with: item_source, share_type, share_with, item_type, permissions */ private static function getShareFromId($shareID) { $sql = 'SELECT `item_source`, `share_type`, `share_with`, `item_type`, `permissions` FROM `*PREFIX*share` WHERE `id` = ?'; $args = array($shareID); $query = \OCP\DB::prepare($sql); $result = $query->execute($args); $share = Null; if (\OCP\DB::isError($result)) { \OCP\Util::writeLog('files_sharing', \OC_DB::getErrorMessage($result), \OCP\Util::ERROR); } else { if ($result->numRows() > 0) { $share = $result->fetchRow(); } } return $share; } }