/* * SPDX-FileCopyrightText: 2020 Stalwart Labs Ltd * * SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-SEL */ use core::cache::CachedDirectory; use std::{fmt::Debug, sync::Arc}; use ahash::AHashMap; use backend::{ imap::{ImapDirectory, ImapError}, internal::{PrincipalField, PrincipalValue}, ldap::LdapDirectory, memory::MemoryDirectory, smtp::SmtpDirectory, sql::SqlDirectory, }; use deadpool::managed::PoolError; use ldap3::LdapError; use mail_send::Credentials; use proc_macros::EnumMethods; use store::Store; use trc::ipc::bitset::Bitset; pub mod backend; pub mod core; pub struct Directory { pub store: DirectoryInner, pub cache: Option, } #[derive(Debug, Default, Clone, PartialEq, Eq)] pub struct Principal { pub(crate) id: u32, pub(crate) typ: Type, pub(crate) fields: AHashMap, } #[derive(Debug, Default, Clone, Copy, PartialEq, Eq, serde::Serialize, serde::Deserialize)] #[serde(rename_all = "camelCase")] pub enum Type { #[default] Individual = 0, Group = 1, Resource = 2, Location = 3, List = 5, Other = 6, Domain = 7, Tenant = 8, Role = 9, ApiKey = 10, OauthClient = 11, } pub const MAX_TYPE_ID: usize = 11; #[derive( Debug, Clone, Copy, PartialEq, Eq, Hash, serde::Serialize, serde::Deserialize, EnumMethods, )] #[serde(rename_all = "kebab-case")] pub enum Permission { // WARNING: add new ids at the end (TODO: use static ids) // Admin Impersonate, UnlimitedRequests, UnlimitedUploads, DeleteSystemFolders, MessageQueueList, MessageQueueGet, MessageQueueUpdate, MessageQueueDelete, OutgoingReportList, OutgoingReportGet, OutgoingReportDelete, IncomingReportList, IncomingReportGet, IncomingReportDelete, SettingsList, SettingsUpdate, SettingsDelete, SettingsReload, IndividualList, IndividualGet, IndividualUpdate, IndividualDelete, IndividualCreate, GroupList, GroupGet, GroupUpdate, GroupDelete, GroupCreate, DomainList, DomainGet, DomainCreate, DomainUpdate, DomainDelete, TenantList, TenantGet, TenantCreate, TenantUpdate, TenantDelete, MailingListList, MailingListGet, MailingListCreate, MailingListUpdate, MailingListDelete, RoleList, RoleGet, RoleCreate, RoleUpdate, RoleDelete, PrincipalList, PrincipalGet, PrincipalCreate, PrincipalUpdate, PrincipalDelete, BlobFetch, PurgeBlobStore, PurgeDataStore, PurgeLookupStore, PurgeAccount, FtsReindex, Undelete, DkimSignatureCreate, DkimSignatureGet, UpdateSpamFilter, UpdateWebadmin, LogsView, SieveRun, Restart, TracingList, TracingGet, TracingLive, MetricsList, MetricsLive, // Generic Authenticate, AuthenticateOauth, EmailSend, EmailReceive, // Account Management ManageEncryption, ManagePasswords, // JMAP JmapEmailGet, JmapMailboxGet, JmapThreadGet, JmapIdentityGet, JmapEmailSubmissionGet, JmapPushSubscriptionGet, JmapSieveScriptGet, JmapVacationResponseGet, JmapPrincipalGet, JmapQuotaGet, JmapBlobGet, JmapEmailSet, JmapMailboxSet, JmapIdentitySet, JmapEmailSubmissionSet, JmapPushSubscriptionSet, JmapSieveScriptSet, JmapVacationResponseSet, JmapEmailChanges, JmapMailboxChanges, JmapThreadChanges, JmapIdentityChanges, JmapEmailSubmissionChanges, JmapQuotaChanges, JmapEmailCopy, JmapBlobCopy, JmapEmailImport, JmapEmailParse, JmapEmailQueryChanges, JmapMailboxQueryChanges, JmapEmailSubmissionQueryChanges, JmapSieveScriptQueryChanges, JmapPrincipalQueryChanges, JmapQuotaQueryChanges, JmapEmailQuery, JmapMailboxQuery, JmapEmailSubmissionQuery, JmapSieveScriptQuery, JmapPrincipalQuery, JmapQuotaQuery, JmapSearchSnippet, JmapSieveScriptValidate, JmapBlobLookup, JmapBlobUpload, JmapEcho, // IMAP ImapAuthenticate, ImapAclGet, ImapAclSet, ImapMyRights, ImapListRights, ImapAppend, ImapCapability, ImapId, ImapCopy, ImapMove, ImapCreate, ImapDelete, ImapEnable, ImapExpunge, ImapFetch, ImapIdle, ImapList, ImapLsub, ImapNamespace, ImapRename, ImapSearch, ImapSort, ImapSelect, ImapExamine, ImapStatus, ImapStore, ImapSubscribe, ImapThread, // POP3 Pop3Authenticate, Pop3List, Pop3Uidl, Pop3Stat, Pop3Retr, Pop3Dele, // ManageSieve SieveAuthenticate, SieveListScripts, SieveSetActive, SieveGetScript, SievePutScript, SieveDeleteScript, SieveRenameScript, SieveCheckScript, SieveHaveSpace, // API keys ApiKeyList, ApiKeyGet, ApiKeyCreate, ApiKeyUpdate, ApiKeyDelete, // OAuth clients OauthClientList, OauthClientGet, OauthClientCreate, OauthClientUpdate, OauthClientDelete, // OAuth client registration OauthClientRegistration, OauthClientOverride, AiModelInteract, Troubleshoot, // WARNING: add new ids at the end (TODO: use static ids) } pub type Permissions = Bitset<{ Permission::COUNT.div_ceil(std::mem::size_of::()) }>; pub const ROLE_ADMIN: u32 = u32::MAX; pub const ROLE_TENANT_ADMIN: u32 = u32::MAX - 1; pub const ROLE_USER: u32 = u32::MAX - 2; pub enum DirectoryInner { Internal(Store), Ldap(LdapDirectory), Sql(SqlDirectory), #[cfg(feature = "enterprise")] OpenId(backend::oidc::OpenIdDirectory), Imap(ImapDirectory), Smtp(SmtpDirectory), Memory(MemoryDirectory), } pub enum QueryBy<'x> { Name(&'x str), Id(u32), Credentials(&'x Credentials), } impl Default for Directory { fn default() -> Self { Self { store: DirectoryInner::Internal(Store::None), cache: None, } } } impl Debug for Directory { fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result { f.debug_struct("Directory").finish() } } #[derive(Default, Clone, Debug)] pub struct Directories { pub directories: AHashMap>, } trait IntoError { fn into_error(self) -> trc::Error; } impl IntoError for PoolError { fn into_error(self) -> trc::Error { match self { PoolError::Backend(error) => error.into_error(), PoolError::Timeout(_) => trc::StoreEvent::PoolError .into_err() .details("Connection timed out"), err => trc::StoreEvent::PoolError.reason(err), } } } impl IntoError for PoolError { fn into_error(self) -> trc::Error { match self { PoolError::Backend(error) => error.into_error(), PoolError::Timeout(_) => trc::StoreEvent::PoolError .into_err() .details("Connection timed out"), err => trc::StoreEvent::PoolError.reason(err), } } } impl IntoError for PoolError { fn into_error(self) -> trc::Error { match self { PoolError::Backend(error) => error.into_error(), PoolError::Timeout(_) => trc::StoreEvent::PoolError .into_err() .details("Connection timed out"), err => trc::StoreEvent::PoolError.reason(err), } } } impl IntoError for ImapError { fn into_error(self) -> trc::Error { trc::ImapEvent::Error.into_err().reason(self) } } impl IntoError for mail_send::Error { fn into_error(self) -> trc::Error { trc::SmtpEvent::Error.into_err().reason(self) } } impl IntoError for LdapError { fn into_error(self) -> trc::Error { if let LdapError::LdapResult { result } = &self { trc::StoreEvent::LdapError .ctx(trc::Key::Code, result.rc) .reason(self) } else { trc::StoreEvent::LdapError.reason(self) } } }