#include <RBAC.h>

Public Member Functions

RBACData (uint32 id, std::string const &name, int32 realmId, uint8 secLevel=255)

RBACData (RBACData const &other)

RBACData (RBACData &&other) noexcept

RBACData & operator= (RBACData const &right)

RBACData & operator= (RBACData &&right) noexcept

~RBACData ()

std::string const & GetName () const

Gets the Name of the Object.

uint32 GetId () const

Gets the Id of the Object.

HasPermission

Checks if certain action is allowed

Checks if certain action can be performed.

Returns: grant or deny action

Example Usage:

bool Player::CanJoinArena(Battleground* bg)
{
    return bg->isArena() && HasPermission(RBAC_PERM_JOIN_ARENA);
}

bool HasPermission (uint32 permission) const

RBACPermissionContainer const & GetPermissions () const

Returns all the granted permissions (after computation)

RBACPermissionContainer const & GetGrantedPermissions () const

Returns all the granted permissions.

RBACPermissionContainer const & GetDeniedPermissions () const

Returns all the denied permissions.

GrantRole

Grants a permission

Grants a permission to the account. If realm is 0 or the permission can not be added No save to db action will be performed.

Fails if permission Id does not exists or permission already granted or denied

Parameters

permissionId	permission to be granted
realmId	realm affected

Returns: Success or failure (with reason) to grant the permission

Example Usage:

// previously defined "RBACData* rbac" with proper initialization
uint32 permissionId = 2;
if (rbac->GrantRole(permissionId) == RBAC_IN_DENIED_LIST)
    TC_LOG_DEBUG("entities.player", "Failed to grant permission {}, already denied", permissionId);

RBACCommandResult GrantPermission (uint32 permissionId, int32 realmId=0)

DenyPermission

Denies a permission

Denied a permission to the account. If realm is 0 or the permission can not be added No save to db action will be performed.

Fails if permission Id does not exists or permission already granted or denied

Parameters

permissionId	permission to be denied
realmId	realm affected

Returns: Success or failure (with reason) to deny the permission

Example Usage:

// previously defined "RBACData* rbac" with proper initialization
uint32 permissionId = 2;
if (rbac->DenyRole(permissionId) == RBAC_ID_DOES_NOT_EXISTS)
    TC_LOG_DEBUG("entities.player", "Role Id {} does not exists", permissionId);

RBACCommandResult DenyPermission (uint32 permissionId, int32 realmId=0)

Private Member Functions
CalculateNewPermissions
Calculates new permissions Calculates new permissions after some change The calculation is done Granted - Denied: Granted permissions: through linked permissions and directly assigned Denied permissions: through linked permissions and directly assigned
void	CalculateNewPermissions ()

int32	GetRealmId () const

bool	HasGrantedPermission (uint32 permissionId) const
	Checks if a permission is granted.

bool	HasDeniedPermission (uint32 permissionId) const
	Checks if a permission is denied.

void	AddGrantedPermission (uint32 permissionId)
	Adds a new granted permission.

void	RemoveGrantedPermission (uint32 permissionId)
	Removes a granted permission.

void	AddDeniedPermission (uint32 permissionId)
	Adds a new denied permission.

void	RemoveDeniedPermission (uint32 permissionId)
	Removes a denied permission.

void	AddPermissions (RBACPermissionContainer const &permsFrom, RBACPermissionContainer &permsTo)
	Adds a list of permissions to another list.

void	RemovePermissions (RBACPermissionContainer &permsFrom, RBACPermissionContainer const &permsToRemove)
	Removes a list of permissions from another list.

ExpandPermissions

Adds the list of linked permissions to the original list

Given a list of permissions, gets all the inherited permissions

Parameters

permissions The list of permissions to expand

uint32

_id

std::string _name

‍Account id

int32

_realmId

‍Account name

uint8

_secLevel

‍RealmId Affected

RBACPermissionContainer

_grantedPerms

‍Account SecurityLevel

RBACPermissionContainer

_deniedPerms

‍Granted permissions

RBACPermissionContainer

_globalPerms

‍Denied permissions

void ExpandPermissions (RBACPermissionContainer &permissions)

RevokePermission

Removes a permission

Removes a permission from the account. If realm is 0 or the permission can not be removed No save to db action will be performed. Any delete operation will always affect "all realms (-1)" in addition to the realm specified

Fails if permission not present

Parameters

permissionId	permission to be removed
realmId	realm affected

Returns: Success or failure (with reason) to remove the permission

Example Usage:

// previously defined "RBACData* rbac" with proper initialization
uint32 permissionId = 2;
if (rbac->RevokeRole(permissionId) == RBAC_OK)
    TC_LOG_DEBUG("entities.player", "Permission {} succesfully removed", permissionId);

RBACCommandResult RevokePermission (uint32 permissionId, int32 realmId=0)

void LoadFromDB ()

Loads all permissions assigned to current account.

QueryCallback LoadFromDBAsync ()

void LoadFromDBCallback (PreparedQueryResult result)

void SetSecurityLevel (uint8 id)

Sets security level.

uint8 GetSecurityLevel () const

Returns the security level assigned.

void SavePermission (uint32 role, bool granted, int32 realm)

Saves a permission to DB, Granted or Denied.

void ClearData ()

Clears roles, groups and permissions - Used for reload.

Detailed Description

Definition at line 814 of file RBAC.h.

Constructor & Destructor Documentation

◆ RBACData() [1/3]

rbac::RBACData::RBACData	(	uint32	id,
		std::string const &	name,
		int32	realmId,
		uint8	secLevel = `255`
	)

Definition at line 44 of file RBAC.cpp.

◆ RBACData() [2/3]

rbac::RBACData::RBACData ( RBACData const & other )

default

◆ RBACData() [3/3]

rbac::RBACData::RBACData ( RBACData && other )

defaultnoexcept

◆ ~RBACData()

rbac::RBACData::~RBACData ( )

default

Member Function Documentation

◆ AddDeniedPermission()

void rbac::RBACData::AddDeniedPermission ( uint32 permissionId )

inlineprivate

Adds a new denied permission.

Definition at line 992 of file RBAC.h.

Referenced by DenyPermission().

◆ AddGrantedPermission()

void rbac::RBACData::AddGrantedPermission ( uint32 permissionId )

inlineprivate

Adds a new granted permission.

Definition at line 980 of file RBAC.h.

Referenced by GrantPermission().

◆ AddPermissions()

void rbac::RBACData::AddPermissions	(	RBACPermissionContainer const &	permsFrom,
		RBACPermissionContainer &	permsTo
	)

private

Adds a list of permissions to another list.

Definition at line 248 of file RBAC.cpp.

◆ CalculateNewPermissions()

void rbac::RBACData::CalculateNewPermissions ( )

private

Definition at line 236 of file RBAC.cpp.

References _globalPerms, ExpandPermissions(), GetDeniedPermissions(), GetGrantedPermissions(), GetId(), GetName(), RemovePermissions(), and TC_LOG_TRACE.

Referenced by DenyPermission(), GrantPermission(), LoadFromDBCallback(), and RevokePermission().

◆ ClearData()

void rbac::RBACData::ClearData ( )

private

Clears roles, groups and permissions - Used for reload.

Definition at line 288 of file RBAC.cpp.

References _deniedPerms, _globalPerms, and _grantedPerms.

Referenced by LoadFromDB(), and LoadFromDBAsync().

◆ DenyPermission()

RBACCommandResult rbac::RBACData::DenyPermission	(	uint32	permissionId,
		int32	realmId = `0`
	)

Definition at line 100 of file RBAC.cpp.

References AddDeniedPermission(), CalculateNewPermissions(), GetId(), GetName(), HasDeniedPermission(), HasGrantedPermission(), rbac::RBAC_CANT_ADD_ALREADY_ADDED, rbac::RBAC_ID_DOES_NOT_EXISTS, rbac::RBAC_IN_GRANTED_LIST, rbac::RBAC_OK, sAccountMgr, SavePermission(), and TC_LOG_TRACE.

Referenced by rbac_commandscript::HandleRBACPermDenyCommand(), and LoadFromDBCallback().

◆ ExpandPermissions()

void rbac::RBACData::ExpandPermissions ( RBACPermissionContainer & permissions )

private

Definition at line 260 of file RBAC.cpp.

References rbac::GetDebugPermissionString(), rbac::RBACPermission::GetLinkedPermissions(), sAccountMgr, and TC_LOG_DEBUG.

Referenced by CalculateNewPermissions().

◆ GetDeniedPermissions()

RBACPermissionContainer const & rbac::RBACData::GetDeniedPermissions ( ) const

inline

Returns all the denied permissions.

Definition at line 856 of file RBAC.h.

Referenced by CalculateNewPermissions(), and rbac_commandscript::HandleRBACPermListCommand().

◆ GetGrantedPermissions()

RBACPermissionContainer const & rbac::RBACData::GetGrantedPermissions ( ) const

inline

Returns all the granted permissions.

Definition at line 854 of file RBAC.h.

Referenced by CalculateNewPermissions(), and rbac_commandscript::HandleRBACPermListCommand().

◆ GetId()

uint32 rbac::RBACData::GetId ( ) const

inline

Gets the Id of the Object.

Definition at line 827 of file RBAC.h.

Referenced by CalculateNewPermissions(), DenyPermission(), GrantPermission(), rbac_commandscript::HandleRBACPermListCommand(), WorldSession::HasPermission(), WorldSession::InvalidateRBACData(), LoadFromDB(), LoadFromDBAsync(), RevokePermission(), and SavePermission().

◆ GetName()

std::string const & rbac::RBACData::GetName ( ) const

inline

Gets the Name of the Object.

Definition at line 825 of file RBAC.h.

Referenced by CalculateNewPermissions(), DenyPermission(), GrantPermission(), rbac_commandscript::HandleRBACPermListCommand(), WorldSession::HasPermission(), WorldSession::InvalidateRBACData(), LoadFromDB(), LoadFromDBAsync(), and RevokePermission().

◆ GetPermissions()

RBACPermissionContainer const & rbac::RBACData::GetPermissions ( ) const

inline

Returns all the granted permissions (after computation)

Definition at line 852 of file RBAC.h.

◆ GetRealmId()

int32 rbac::RBACData::GetRealmId ( ) const

inlineprivate

Definition at line 962 of file RBAC.h.

Referenced by LoadFromDB(), and LoadFromDBAsync().

◆ GetSecurityLevel()

uint8 rbac::RBACData::GetSecurityLevel ( ) const

inline

Returns the security level assigned.

Definition at line 944 of file RBAC.h.

Referenced by rbac_commandscript::HandleRBACPermListCommand().

◆ GrantPermission()

RBACCommandResult rbac::RBACData::GrantPermission	(	uint32	permissionId,
		int32	realmId = `0`
	)

Definition at line 56 of file RBAC.cpp.

References AddGrantedPermission(), CalculateNewPermissions(), GetId(), GetName(), HasDeniedPermission(), HasGrantedPermission(), rbac::RBAC_CANT_ADD_ALREADY_ADDED, rbac::RBAC_ID_DOES_NOT_EXISTS, rbac::RBAC_IN_DENIED_LIST, rbac::RBAC_OK, sAccountMgr, SavePermission(), and TC_LOG_TRACE.

Referenced by rbac_commandscript::HandleRBACPermGrantCommand(), and LoadFromDBCallback().

◆ HasDeniedPermission()

bool rbac::RBACData::HasDeniedPermission ( uint32 permissionId ) const

inlineprivate

Checks if a permission is denied.

Definition at line 974 of file RBAC.h.

Referenced by DenyPermission(), GrantPermission(), and RevokePermission().

◆ HasGrantedPermission()

bool rbac::RBACData::HasGrantedPermission ( uint32 permissionId ) const

inlineprivate

Checks if a permission is granted.

Definition at line 968 of file RBAC.h.

Referenced by DenyPermission(), GrantPermission(), and RevokePermission().

◆ HasPermission()

bool rbac::RBACData::HasPermission ( uint32 permission ) const

inline

Definition at line 845 of file RBAC.h.

Referenced by WorldSession::HasPermission().

◆ LoadFromDB()

void rbac::RBACData::LoadFromDB ( )

Loads all permissions assigned to current account.

Definition at line 187 of file RBAC.cpp.

References ClearData(), GetId(), GetName(), GetRealmId(), LoadFromDBCallback(), LOGIN_SEL_RBAC_ACCOUNT_PERMISSIONS, LoginDatabase, PreparedStatementBase::setInt32(), PreparedStatementBase::setUInt32(), and TC_LOG_DEBUG.

Referenced by WorldSession::LoadPermissions().

◆ LoadFromDBAsync()

QueryCallback rbac::RBACData::LoadFromDBAsync ( )

Definition at line 200 of file RBAC.cpp.

References ClearData(), GetId(), GetName(), GetRealmId(), LOGIN_SEL_RBAC_ACCOUNT_PERMISSIONS, LoginDatabase, PreparedStatementBase::setInt32(), PreparedStatementBase::setUInt32(), and TC_LOG_DEBUG.

Referenced by WorldSession::LoadPermissionsAsync().

◆ LoadFromDBCallback()

void rbac::RBACData::LoadFromDBCallback ( PreparedQueryResult result )

Definition at line 213 of file RBAC.cpp.

References _secLevel, CalculateNewPermissions(), DenyPermission(), GrantPermission(), and sAccountMgr.

Referenced by LoadFromDB(), and WorldSocket::LoadSessionPermissionsCallback().

◆ operator=() [1/2]

RBACData & rbac::RBACData::operator= ( RBACData && right )

defaultnoexcept

◆ operator=() [2/2]

RBACData & rbac::RBACData::operator= ( RBACData const & right )

default

◆ RemoveDeniedPermission()

void rbac::RBACData::RemoveDeniedPermission ( uint32 permissionId )

inlineprivate

Removes a denied permission.

Definition at line 998 of file RBAC.h.

Referenced by RevokePermission().

◆ RemoveGrantedPermission()

void rbac::RBACData::RemoveGrantedPermission ( uint32 permissionId )

inlineprivate

Removes a granted permission.

Definition at line 986 of file RBAC.h.

Referenced by RevokePermission().

◆ RemovePermissions()

void rbac::RBACData::RemovePermissions	(	RBACPermissionContainer &	permsFrom,
		RBACPermissionContainer const &	permsToRemove
	)

private

Removes a list of permissions from another list.

Definition at line 254 of file RBAC.cpp.

Referenced by CalculateNewPermissions().

◆ RevokePermission()

RBACCommandResult rbac::RBACData::RevokePermission	(	uint32	permissionId,
		int32	realmId = `0`
	)

Definition at line 154 of file RBAC.cpp.

References CalculateNewPermissions(), GetId(), GetName(), HasDeniedPermission(), HasGrantedPermission(), LOGIN_DEL_RBAC_ACCOUNT_PERMISSION, LoginDatabase, rbac::RBAC_CANT_REVOKE_NOT_IN_LIST, rbac::RBAC_OK, RemoveDeniedPermission(), RemoveGrantedPermission(), PreparedStatementBase::setInt32(), PreparedStatementBase::setUInt32(), and TC_LOG_TRACE.

Referenced by rbac_commandscript::HandleRBACPermRevokeCommand().

◆ SavePermission()

void rbac::RBACData::SavePermission	(	uint32	role,
		bool	granted,
		int32	realm
	)

private

Saves a permission to DB, Granted or Denied.

Definition at line 144 of file RBAC.cpp.

References GetId(), LOGIN_INS_RBAC_ACCOUNT_PERMISSION, LoginDatabase, PreparedStatementBase::setBool(), PreparedStatementBase::setInt32(), and PreparedStatementBase::setUInt32().

Referenced by DenyPermission(), and GrantPermission().

◆ SetSecurityLevel()

void rbac::RBACData::SetSecurityLevel ( uint8 id )

inline

Sets security level.

Definition at line 937 of file RBAC.h.

Member Data Documentation

◆ _deniedPerms

RBACPermissionContainer rbac::RBACData::_deniedPerms

private

‍Granted permissions

Definition at line 1023 of file RBAC.h.

Referenced by ClearData().

◆ _globalPerms

RBACPermissionContainer rbac::RBACData::_globalPerms

private

‍Denied permissions

Definition at line 1024 of file RBAC.h.

Referenced by CalculateNewPermissions(), and ClearData().

◆ _grantedPerms

RBACPermissionContainer rbac::RBACData::_grantedPerms

private

‍Account SecurityLevel

Definition at line 1022 of file RBAC.h.

Referenced by ClearData().

◆ _id

uint32 rbac::RBACData::_id

private

Definition at line 1018 of file RBAC.h.

◆ _name

std::string rbac::RBACData::_name

private

‍Account id

Definition at line 1019 of file RBAC.h.

◆ _realmId

int32 rbac::RBACData::_realmId

private

‍Account name

Definition at line 1020 of file RBAC.h.

◆ _secLevel

uint8 rbac::RBACData::_secLevel

private

‍RealmId Affected

Definition at line 1021 of file RBAC.h.

Referenced by LoadFromDBCallback().

The documentation for this class was generated from the following files:

server/game/Accounts/RBAC.h
server/game/Accounts/RBAC.cpp

Public Member Functions

Private Member Functions

ExpandPermissions

RevokePermission

Detailed Description

Constructor & Destructor Documentation

◆ RBACData() [1/3]

◆ RBACData() [2/3]

◆ RBACData() [3/3]

◆ ~RBACData()

Member Function Documentation

◆ AddDeniedPermission()

◆ AddGrantedPermission()

◆ AddPermissions()

◆ CalculateNewPermissions()

◆ ClearData()

◆ DenyPermission()

◆ ExpandPermissions()

◆ GetDeniedPermissions()

◆ GetGrantedPermissions()

◆ GetId()

◆ GetName()

◆ GetPermissions()

◆ GetRealmId()

◆ GetSecurityLevel()

◆ GrantPermission()

◆ HasDeniedPermission()

◆ HasGrantedPermission()

◆ HasPermission()

◆ LoadFromDB()

◆ LoadFromDBAsync()

◆ LoadFromDBCallback()

◆ operator=() [1/2]

◆ operator=() [2/2]

◆ RemoveDeniedPermission()

◆ RemoveGrantedPermission()

◆ RemovePermissions()

◆ RevokePermission()

◆ SavePermission()

◆ SetSecurityLevel()

Member Data Documentation

◆ _deniedPerms

◆ _globalPerms

◆ _grantedPerms

◆ _id

◆ _name

◆ _realmId

◆ _secLevel