1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
|
/* Any copyright is dedicated to the Public Domain.
http://creativecommons.org/publicdomain/zero/1.0/ */
function getPrincipalFromURI(aURI) {
let ssm = Services.scriptSecurityManager;
let uri = NetUtil.newURI(aURI);
return ssm.createContentPrincipal(uri, {});
}
function getSystemPrincipal() {
return Services.scriptSecurityManager.getSystemPrincipal();
}
function run_test() {
var pm = Services.perms;
Assert.equal(
null,
pm.getPermissionObject(getSystemPrincipal(), "test/pobject", false)
);
let principal = getPrincipalFromURI("http://example.com");
let subPrincipal = getPrincipalFromURI("http://sub.example.com");
let subSubPrincipal = getPrincipalFromURI("http://sub.sub.example.com");
Assert.equal(null, pm.getPermissionObject(principal, "test/pobject", false));
Assert.equal(null, pm.getPermissionObject(principal, "test/pobject", true));
pm.addFromPrincipal(principal, "test/pobject", pm.ALLOW_ACTION);
var rootPerm = pm.getPermissionObject(principal, "test/pobject", false);
Assert.ok(rootPerm != null);
Assert.equal(rootPerm.principal.origin, "http://example.com");
Assert.equal(rootPerm.type, "test/pobject");
Assert.equal(rootPerm.capability, pm.ALLOW_ACTION);
Assert.equal(rootPerm.expireType, pm.EXPIRE_NEVER);
Assert.ok(rootPerm != null);
Assert.equal(rootPerm.principal.origin, "http://example.com");
var subPerm = pm.getPermissionObject(subPrincipal, "test/pobject", true);
Assert.equal(null, subPerm);
subPerm = pm.getPermissionObject(subPrincipal, "test/pobject", false);
Assert.ok(subPerm != null);
Assert.equal(subPerm.principal.origin, "http://example.com");
Assert.equal(subPerm.type, "test/pobject");
Assert.equal(subPerm.capability, pm.ALLOW_ACTION);
subPerm = pm.getPermissionObject(subSubPrincipal, "test/pobject", true);
Assert.equal(null, subPerm);
subPerm = pm.getPermissionObject(subSubPrincipal, "test/pobject", false);
Assert.ok(subPerm != null);
Assert.equal(subPerm.principal.origin, "http://example.com");
pm.addFromPrincipal(
principal,
"test/pobject",
pm.DENY_ACTION,
pm.EXPIRE_SESSION
);
// make sure permission objects are not dynamic
Assert.equal(rootPerm.capability, pm.ALLOW_ACTION);
// but do update on change
rootPerm = pm.getPermissionObject(principal, "test/pobject", true);
Assert.equal(rootPerm.capability, pm.DENY_ACTION);
Assert.equal(rootPerm.expireType, pm.EXPIRE_SESSION);
subPerm = pm.getPermissionObject(subPrincipal, "test/pobject", false);
Assert.equal(subPerm.principal.origin, "http://example.com");
Assert.equal(subPerm.capability, pm.DENY_ACTION);
Assert.equal(subPerm.expireType, pm.EXPIRE_SESSION);
pm.addFromPrincipal(subPrincipal, "test/pobject", pm.PROMPT_ACTION);
rootPerm = pm.getPermissionObject(principal, "test/pobject", true);
Assert.equal(rootPerm.principal.origin, "http://example.com");
Assert.equal(rootPerm.capability, pm.DENY_ACTION);
subPerm = pm.getPermissionObject(subPrincipal, "test/pobject", true);
Assert.equal(subPerm.principal.origin, "http://sub.example.com");
Assert.equal(subPerm.capability, pm.PROMPT_ACTION);
subPerm = pm.getPermissionObject(subPrincipal, "test/pobject", false);
Assert.equal(subPerm.principal.origin, "http://sub.example.com");
Assert.equal(subPerm.capability, pm.PROMPT_ACTION);
subPerm = pm.getPermissionObject(subSubPrincipal, "test/pobject", true);
Assert.equal(null, subPerm);
subPerm = pm.getPermissionObject(subSubPrincipal, "test/pobject", false);
Assert.equal(subPerm.principal.origin, "http://sub.example.com");
Assert.equal(subPerm.capability, pm.PROMPT_ACTION);
pm.removeFromPrincipal(principal, "test/pobject");
rootPerm = pm.getPermissionObject(principal, "test/pobject", true);
Assert.equal(null, rootPerm);
}
|
