]> granicus.if.org Git - ejabberd/commitdiff
enforce disco features results (thanks to Karim)(EJAB-1033, EJAB-1228, EJAB-1238)
authorChristophe Romain <christophe.romain@process-one.net>
Mon, 2 Aug 2010 15:07:23 +0000 (17:07 +0200)
committerChristophe Romain <christophe.romain@process-one.net>
Mon, 2 Aug 2010 15:07:23 +0000 (17:07 +0200)
src/mod_pubsub/mod_pubsub.erl
src/mod_pubsub/mod_pubsub_odbc.erl
src/mod_pubsub/pubsub_odbc.patch

index 01c295a8baf099358c522cda5eee176381ae4ea9..a9293212da3f261e7794121786f06dc1f1b764a1 100644 (file)
@@ -73,8 +73,7 @@
         disco_sm_items/5
        ]).
 %% exported iq handlers
--export([iq_local/3,
-        iq_sm/3
+-export([iq_sm/3
        ]).
 
 %% exports for console debug manual use
@@ -198,24 +197,22 @@ init([ServerHost, Opts]) ->
     ets:insert(gen_mod:get_module_proc(ServerHost, config), {ignore_pep_from_offline, PepOffline}),
     ets:insert(gen_mod:get_module_proc(ServerHost, config), {host, Host}),
     ejabberd_hooks:add(sm_remove_connection_hook, ServerHost, ?MODULE, on_user_offline, 75),
-    ejabberd_hooks:add(disco_sm_identity, ServerHost, ?MODULE, disco_sm_identity, 75),
-    ejabberd_hooks:add(disco_sm_features, ServerHost, ?MODULE, disco_sm_features, 75),
-    ejabberd_hooks:add(disco_sm_items, ServerHost, ?MODULE, disco_sm_items, 75),
+    ejabberd_hooks:add(disco_local_identity, ServerHost, ?MODULE, disco_local_identity, 75),
+    ejabberd_hooks:add(disco_local_features, ServerHost, ?MODULE, disco_local_features, 75),
+    ejabberd_hooks:add(disco_local_items, ServerHost, ?MODULE, disco_local_items, 75),
     ejabberd_hooks:add(presence_probe_hook, ServerHost, ?MODULE, presence_probe, 80),
     ejabberd_hooks:add(roster_in_subscription, ServerHost, ?MODULE, in_subscription, 50),
     ejabberd_hooks:add(roster_out_subscription, ServerHost, ?MODULE, out_subscription, 50),
     ejabberd_hooks:add(remove_user, ServerHost, ?MODULE, remove_user, 50),
     ejabberd_hooks:add(anonymous_purge_hook, ServerHost, ?MODULE, remove_user, 50),
-    gen_iq_handler:add_iq_handler(ejabberd_sm, ServerHost, ?NS_PUBSUB, ?MODULE, iq_sm, IQDisc),
-    gen_iq_handler:add_iq_handler(ejabberd_sm, ServerHost, ?NS_PUBSUB_OWNER, ?MODULE, iq_sm, IQDisc),
     case lists:member(?PEPNODE, Plugins) of
        true ->
            ejabberd_hooks:add(feature_check_packet, ServerHost, ?MODULE, feature_check_packet, 75),
-           ejabberd_hooks:add(disco_local_identity, ServerHost, ?MODULE, disco_local_identity, 75),
-           ejabberd_hooks:add(disco_local_features, ServerHost, ?MODULE, disco_local_features, 75),
-           ejabberd_hooks:add(disco_local_items, ServerHost, ?MODULE, disco_local_items, 75),
-           gen_iq_handler:add_iq_handler(ejabberd_local, ServerHost, ?NS_PUBSUB, ?MODULE, iq_local, IQDisc),
-           gen_iq_handler:add_iq_handler(ejabberd_local, ServerHost, ?NS_PUBSUB_OWNER, ?MODULE, iq_local, IQDisc);
+           ejabberd_hooks:add(disco_sm_identity, ServerHost, ?MODULE, disco_sm_identity, 75),
+           ejabberd_hooks:add(disco_sm_features, ServerHost, ?MODULE, disco_sm_features, 75),
+           ejabberd_hooks:add(disco_sm_items, ServerHost, ?MODULE, disco_sm_items, 75),
+           gen_iq_handler:add_iq_handler(ejabberd_sm, ServerHost, ?NS_PUBSUB, ?MODULE, iq_sm, IQDisc),
+           gen_iq_handler:add_iq_handler(ejabberd_sm, ServerHost, ?NS_PUBSUB_OWNER, ?MODULE, iq_sm, IQDisc);
        false ->
            ok
     end,
@@ -584,15 +581,12 @@ send_loop(State) ->
 %% disco hooks handling functions
 %%
 
-identity(Host) ->
-    Identity = case lists:member(?PEPNODE, plugins(Host)) of
-    true -> [{"category", "pubsub"}, {"type", "pep"}];
-    false -> [{"category", "pubsub"}, {"type", "service"}]
-    end,
-    {xmlelement, "identity", Identity, []}.
-
 disco_local_identity(Acc, _From, To, [], _Lang) ->
-    Acc ++ [identity(To#jid.lserver)];
+    case lists:member(?PEPNODE, plugins(To#jid.lserver)) of
+  true  ->
+      [{xmlelement, "identity", [{"category", "pubsub"}, {"type", "pep"}], []} | Acc];
+  false -> Acc
+    end;
 disco_local_identity(Acc, _From, _To, _Node, _Lang) ->
     Acc.
 
@@ -613,76 +607,116 @@ disco_local_items(Acc, _From, _To, [], _Lang) ->
 disco_local_items(Acc, _From, _To, _Node, _Lang) ->
     Acc.
 
-disco_sm_identity(Acc, _From, To, [], _Lang) ->
-    Acc ++ [identity(To#jid.lserver)];
+disco_sm_identity(Acc, From, To, Node, Lang) when is_list(Node) ->
+    disco_sm_identity(Acc, From, To, list_to_binary(Node), Lang);
+disco_sm_identity(empty, From, To, Node, Lang) ->
+    disco_sm_identity([], From, To, Node, Lang);
 disco_sm_identity(Acc, From, To, Node, _Lang) ->
-    LOwner = jlib:jid_tolower(jlib:jid_remove_resource(To)),
-    Acc ++ case node_disco_identity(LOwner, From, Node) of
-              {result, I} -> I;
-              _ -> []
-          end.
+    disco_identity(jlib:jid_tolower(jlib:jid_remove_resource(To)), Node, From) ++ Acc.
+
+disco_identity(_Host, <<>>, _From) ->
+    [{xmlelement, "identity", [{"category", "pubsub"}, {"type", "pep"}], []}];
+disco_identity(Host, Node, From) ->
+    Action = fun(#pubsub_node{id = Idx, type = Type, options = Options, owners = Owners}) ->
+           case get_allowed_items_call(Host, Idx, From, Type, Options, Owners) of
+               {result, _} ->
+                   {result, [{xmlelement, "identity", [{"category", "pubsub"}, {"type", "pep"}], []},
+                       {xmlelement, "identity",
+                           [{"category", "pubsub"},
+                               {"type", "leaf"}
+                               | case get_option(Options, title) of
+                                   false   -> [];
+                                   [Title] -> [{"name", Title}]
+                               end],
+                           []}]};
+               _ -> {result, []}
+           end
+       end,
+    case transaction(Host, Node, Action, sync_dirty) of
+       {result, {_, Result}} -> Result;
+       _ -> []
+    end.
 
-disco_sm_features(Acc, _From, _To, [], _Lang) ->
-    Acc;
-disco_sm_features(Acc, From, To, Node, _Lang) ->
-    LOwner = jlib:jid_tolower(jlib:jid_remove_resource(To)),
-    Features = node_disco_features(LOwner, From, Node),
-    case {Acc, Features} of
-       {{result, AccFeatures}, {result, AddFeatures}} ->
-           {result, AccFeatures++AddFeatures};
-       {_, {result, AddFeatures}} ->
-           {result, AddFeatures};
-       {_, _} ->
-           Acc
+disco_sm_features(Acc, From, To, Node, Lang) when is_list(Node) ->
+    disco_sm_features(Acc, From, To, list_to_binary(Node), Lang);
+disco_sm_features(empty, From, To, Node, Lang) ->
+    disco_sm_features({result, []}, From, To, Node, Lang);
+disco_sm_features({result, OtherFeatures} = _Acc, From, To, Node, _Lang) ->
+    {result,
+     OtherFeatures ++
+       disco_features(jlib:jid_tolower(jlib:jid_remove_resource(To)), Node, From)};
+disco_sm_features(Acc, _From, _To, _Node, _Lang) ->
+    Acc.
+
+disco_features(_Host, <<>>, _From) ->
+    [?NS_PUBSUB
+    | [?NS_PUBSUB++"#"++Feature || Feature <- features("pep")]];
+disco_features(Host, Node, From) ->
+    Action = fun(#pubsub_node{id = Idx, type = Type, options = Options, owners = Owners}) ->
+           case get_allowed_items_call(Host, Idx, From, Type, Options, Owners) of
+               {result, _} ->
+                   {result, [?NS_PUBSUB
+                           | [?NS_PUBSUB ++ "#" ++ Feature || Feature <- features("pep")]]};
+               _ -> {result, []}
+           end
+       end,
+    case transaction(Host, Node, Action, sync_dirty) of
+       {result, {_, Result}} -> Result;
+       _ -> []
     end.
 
-disco_sm_items(Acc, From, To, [], _Lang) ->
-    Host = To#jid.lserver,
-    case tree_action(Host, get_subnodes, [Host, <<>>, From]) of
-       [] ->
-           Acc;
-       Nodes ->
-           SBJID = jlib:jid_to_string(jlib:jid_remove_resource(To)),
-           Items = case Acc of
-                       {result, I} -> I;
-                       _ -> []
-                   end,
-           NodeItems = lists:map(
-                         fun(#pubsub_node{nodeid = {_, Node}}) ->
-                                 {xmlelement, "item",
-                                  [{"jid", SBJID}|nodeAttr(Node)],
-                                  []}
-                         end, Nodes),
-           {result, NodeItems ++ Items}
+disco_sm_items(Acc, From, To, Node, Lang) when is_list(Node) ->
+    disco_sm_items(Acc, From, To, list_to_binary(Node), Lang);
+disco_sm_items(empty, From, To, Node, Lang) ->
+    disco_sm_items({result, []}, From, To, Node, Lang);
+disco_sm_items({result, OtherItems}, From, To, Node, _Lang) ->
+    {result,
+     lists:usort(OtherItems ++
+       disco_items(jlib:jid_tolower(jlib:jid_remove_resource(To)), Node, From))};
+disco_sm_items(Acc, _From, _To, _Node, _Lang) ->
+    Acc.
+
+disco_items(Host, <<>>, From) ->
+    Action = fun(#pubsub_node{nodeid ={_, NodeID}, options = Options, type = Type, id = Idx, owners = Owners}, Acc) ->
+               case get_allowed_items_call(Host, Idx, From, Type, Options, Owners) of
+                   {result, _} ->
+                       [{xmlelement, "item",
+                               [{"node", binary_to_list(NodeID)},
+                                   {"jid",  case Host of
+                                           {_,_,_} -> jlib:jid_to_string(Host);
+                                           _Host   -> Host
+                                       end}
+                                   | case get_option(Options, title) of
+                                       false   -> [];
+                                       [Title] -> [{"name", Title}]
+                                   end],
+                               []}
+                           | Acc];
+                   _ -> Acc
+               end
+           end,
+    case transaction(Host, Action, sync_dirty) of
+       {result, Items} -> Items;
+       _ -> []
     end;
 
-disco_sm_items(Acc, From, To, SNode, _Lang) ->
-    Host = To#jid.lserver,
-    Node = string_to_node(SNode),
-    Action = fun(#pubsub_node{type = Type, id = NodeId}) ->
-       % TODO call get_items/6 instead for access control (EJAB-1033)
-       case node_call(Type, get_items, [NodeId, From]) of
-           {result, []} ->
-               none;
-           {result, AllItems} ->
-               SBJID = jlib:jid_to_string(jlib:jid_remove_resource(To)),
-               Items = case Acc of
-                       {result, I} -> I;
-                       _ -> []
-                   end,
-               NodeItems = lists:map(
-                         fun(#pubsub_item{itemid = {Id, _}}) ->
-                                 {result, Name} = node_call(Type, get_item_name, [Host, Node, Id]),
-                                 {xmlelement, "item", [{"jid", SBJID}, {"name", Name}], []}
-                         end, AllItems),
-               {result, NodeItems ++ Items};
-           _ ->
-               none
-       end
-    end,
+disco_items(Host, Node, From) ->
+    Action = fun(#pubsub_node{id = Idx, type = Type, options = Options, owners = Owners}) ->
+           case get_allowed_items_call(Host, Idx, From, Type, Options, Owners) of
+               {result, Items} ->
+                   {result, [{xmlelement, "item",
+                           [{"jid", case Host of
+                                       {_,_,_} -> jlib:jid_to_string(Host);
+                                       _Host   -> Host
+                                   end},
+                               {"name", ItemID}], []}
+                       || #pubsub_item{itemid = {ItemID,_}} <- Items]};
+               _ -> {result, []}
+           end
+       end,
     case transaction(Host, Node, Action, sync_dirty) of
-       {result, {_, Items}} -> {result, Items};
-       _ -> Acc
+       {result, {_, Result}} -> Result;
+       _ -> []
     end.
 
 %% -------
@@ -858,25 +892,23 @@ terminate(_Reason, #state{host = Host,
     case lists:member(?PEPNODE, Plugins) of
        true ->
            ejabberd_hooks:delete(feature_check_packet, ServerHost, ?MODULE, feature_check_packet, 75),
-           ejabberd_hooks:delete(disco_local_identity, ServerHost, ?MODULE, disco_local_identity, 75),
-           ejabberd_hooks:delete(disco_local_features, ServerHost, ?MODULE, disco_local_features, 75),
-           ejabberd_hooks:delete(disco_local_items, ServerHost, ?MODULE, disco_local_items, 75),
-           gen_iq_handler:remove_iq_handler(ejabberd_local, ServerHost, ?NS_PUBSUB),
-           gen_iq_handler:remove_iq_handler(ejabberd_local, ServerHost, ?NS_PUBSUB_OWNER);
+           ejabberd_hooks:delete(disco_sm_identity, ServerHost, ?MODULE, disco_sm_identity, 75),
+           ejabberd_hooks:delete(disco_sm_features, ServerHost, ?MODULE, disco_sm_features, 75),
+           ejabberd_hooks:delete(disco_sm_items, ServerHost, ?MODULE, disco_sm_items, 75),
+           gen_iq_handler:remove_iq_handler(ejabberd_sm, ServerHost, ?NS_PUBSUB),
+           gen_iq_handler:remove_iq_handler(ejabberd_sm, ServerHost, ?NS_PUBSUB_OWNER);
        false ->
            ok
     end,
     ejabberd_hooks:delete(sm_remove_connection_hook, ServerHost, ?MODULE, on_user_offline, 75),
-    ejabberd_hooks:delete(disco_sm_identity, ServerHost, ?MODULE, disco_sm_identity, 75),
-    ejabberd_hooks:delete(disco_sm_features, ServerHost, ?MODULE, disco_sm_features, 75),
-    ejabberd_hooks:delete(disco_sm_items, ServerHost, ?MODULE, disco_sm_items, 75),
+    ejabberd_hooks:delete(disco_local_identity, ServerHost, ?MODULE, disco_local_identity, 75),
+    ejabberd_hooks:delete(disco_local_features, ServerHost, ?MODULE, disco_local_features, 75),
+    ejabberd_hooks:delete(disco_local_items, ServerHost, ?MODULE, disco_local_items, 75),
     ejabberd_hooks:delete(presence_probe_hook, ServerHost, ?MODULE, presence_probe, 80),
     ejabberd_hooks:delete(roster_in_subscription, ServerHost, ?MODULE, in_subscription, 50),
     ejabberd_hooks:delete(roster_out_subscription, ServerHost, ?MODULE, out_subscription, 50),
     ejabberd_hooks:delete(remove_user, ServerHost, ?MODULE, remove_user, 50),
     ejabberd_hooks:delete(anonymous_purge_hook, ServerHost, ?MODULE, remove_user, 50),
-    gen_iq_handler:remove_iq_handler(ejabberd_sm, ServerHost, ?NS_PUBSUB),
-    gen_iq_handler:remove_iq_handler(ejabberd_sm, ServerHost, ?NS_PUBSUB_OWNER),
     mod_disco:unregister_feature(ServerHost, ?NS_PUBSUB),
     gen_mod:get_module_proc(ServerHost, ?LOOPNAME) ! stop,
     terminate_plugins(Host, ServerHost, Plugins, TreePlugin).
@@ -1017,10 +1049,10 @@ command_disco_info(_Host, <<?NS_PUBSUB_GET_PENDING>>, _From) ->
 
 node_disco_info(Host, Node, From) ->
     node_disco_info(Host, Node, From, true, true).
-node_disco_identity(Host, Node, From) ->
-    node_disco_info(Host, Node, From, true, false).
-node_disco_features(Host, Node, From) ->
-    node_disco_info(Host, Node, From, false, true).
+%node_disco_identity(Host, Node, From) ->
+%    node_disco_info(Host, Node, From, true, false).
+%node_disco_features(Host, Node, From) ->
+%    node_disco_info(Host, Node, From, false, true).
 node_disco_info(Host, Node, From, Identity, Features) ->
     Action =
        fun(#pubsub_node{type = Type, id = NodeId}) ->
@@ -1120,17 +1152,15 @@ iq_disco_items(Host, Item, From) ->
            {result, []};
        [SNode] ->
            Node = string_to_node(SNode),
-           Action =
-               fun(#pubsub_node{type = Type, id = NodeId}) ->
-                       % TODO call get_items/6 instead for access control (EJAB-1033)
-                       NodeItems = case node_call(Type, get_items, [NodeId, From]) of
-                                       {result, I} -> I;
-                                       _ -> []
-                                   end,
+           Action = fun(#pubsub_node{id = Idx, type = Type, options = Options, owners = Owners}) ->
+                       NodeItems = case get_allowed_items_call(Host, Idx, From, Type, Options, Owners) of
+                           {result, R} -> R;
+                           _ -> []
+                           end,
                        Nodes = lists:map(
-                               fun(#pubsub_node{nodeid = {_, SubNode}, options = Options}) ->
+                               fun(#pubsub_node{nodeid = {_, SubNode}, options = SubOptions}) ->
                                    Attrs =
-                                       case get_option(Options, title) of
+                                       case get_option(SubOptions, title) of
                                            false ->
                                                [{"jid", Host} |nodeAttr(SubNode)];
                                            Title ->
@@ -1151,24 +1181,6 @@ iq_disco_items(Host, Item, From) ->
            end
     end.
 
-iq_local(From, To, #iq{type = Type, sub_el = SubEl, xmlns = XMLNS, lang = Lang} = IQ) ->
-    ServerHost = To#jid.lserver,
-    %% Accept IQs to server only from our own users.
-    if
-       From#jid.lserver /= ServerHost ->
-           IQ#iq{type = error, sub_el = [?ERR_FORBIDDEN, SubEl]};
-       true ->
-           LOwner = jlib:jid_tolower(jlib:jid_remove_resource(From)),
-           Res = case XMLNS of
-                     ?NS_PUBSUB -> iq_pubsub(LOwner, ServerHost, From, Type, SubEl, Lang);
-                     ?NS_PUBSUB_OWNER -> iq_pubsub_owner(LOwner, ServerHost, From, Type, SubEl, Lang)
-                 end,
-           case Res of
-               {result, IQRes} -> IQ#iq{type = result, sub_el = IQRes};
-               {error, Error} -> IQ#iq{type = error, sub_el = [Error, SubEl]}
-           end
-    end.
-
 iq_sm(From, To, #iq{type = Type, sub_el = SubEl, xmlns = XMLNS, lang = Lang} = IQ) ->
     ServerHost = To#jid.lserver,
     LOwner = jlib:jid_tolower(jlib:jid_remove_resource(To)),
@@ -1868,7 +1880,7 @@ subscribe_node(Host, Node, From, JID, Configuration) ->
                     error -> {"", "", ""};
                     J -> jlib:jid_tolower(J)
                 end,
-    Action = fun(#pubsub_node{options = Options, owners = [Owner|_], type = Type, id = NodeId}) ->
+    Action = fun(#pubsub_node{options = Options, owners = Owners, type = Type, id = NodeId}) ->
                    Features = features(Type),
                    SubscribeFeature = lists:member("subscribe", Features),
                    OptionsFeature = lists:member("subscription-options", Features),
@@ -1877,21 +1889,7 @@ subscribe_node(Host, Node, From, JID, Configuration) ->
                    AccessModel = get_option(Options, access_model),
                    SendLast = get_option(Options, send_last_published_item),
                    AllowedGroups = get_option(Options, roster_groups_allowed, []),
-                   {PresenceSubscription, RosterGroup} =
-                       case Host of
-                           {OUser, OServer, _} ->
-                               get_roster_info(OUser, OServer,
-                                               Subscriber, AllowedGroups);
-                           _ ->
-                               case Subscriber of
-                                   {"", "", ""} ->
-                                       {false, false};
-                                   _ ->
-                                       {OU, OS, _} = Owner,
-                                       get_roster_info(OU, OS,
-                                                       Subscriber, AllowedGroups)
-                               end
-                       end,
+                   {PresenceSubscription, RosterGroup} = get_presence_and_roster_permissions(Host, Subscriber, Owners, AccessModel, AllowedGroups),
                    if
                        not SubscribeFeature ->
                            %% Node does not support subscriptions
@@ -2234,20 +2232,13 @@ get_items(Host, Node, From, SubId, SMaxItems, ItemIDs) ->
        {error, Error} ->
            {error, Error};
        _ ->
-           Action = fun(#pubsub_node{options = Options, type = Type, id = NodeId}) ->
+           Action = fun(#pubsub_node{options = Options, type = Type, id = NodeId, owners = Owners}) ->
                     Features = features(Type),
                     RetreiveFeature = lists:member("retrieve-items", Features),
                     PersistentFeature = lists:member("persistent-items", Features),
                     AccessModel = get_option(Options, access_model),
                     AllowedGroups = get_option(Options, roster_groups_allowed, []),
-                    {PresenceSubscription, RosterGroup} =
-                        case Host of
-                            {OUser, OServer, _} ->
-                                get_roster_info(OUser, OServer,
-                                                jlib:jid_tolower(From), AllowedGroups);
-                            _ ->
-                                {true, true}
-                        end,
+                    {PresenceSubscription, RosterGroup} = get_presence_and_roster_permissions(Host, From, Owners, AccessModel, AllowedGroups),
                     if
                         not RetreiveFeature ->
                             %% Item Retrieval Not Supported
@@ -2297,6 +2288,12 @@ get_item(Host, Node, ItemId) ->
        {result, {_, Items}} -> Items;
        Error -> Error
     end.
+get_allowed_items_call(Host, NodeIdx, From, Type, Options, Owners) ->
+    AccessModel = get_option(Options, access_model),
+    AllowedGroups = get_option(Options, roster_groups_allowed, []),
+    {PresenceSubscription, RosterGroup} = get_presence_and_roster_permissions(Host, From, Owners, AccessModel, AllowedGroups),
+    node_call(Type, get_items, [NodeIdx, From, AccessModel, PresenceSubscription, RosterGroup, undefined]).
+
 
 %% @spec (Host, Node, NodeId, Type, LJID, Number) -> any()
 %%      Host = pubsubHost()
@@ -2774,8 +2771,24 @@ set_subscriptions(Host, Node, From, EntitiesEls) ->
            end
     end.
 
+
+get_presence_and_roster_permissions(Host, From, Owners, AccessModel, AllowedGroups) ->
+    if (AccessModel == presence) or (AccessModel == roster) ->
+       case Host of
+           {User, Server, _} ->
+               get_roster_info(User, Server, From, AllowedGroups);
+           _ ->
+               [{OUser, OServer, _}|_] = Owners,
+               get_roster_info(OUser, OServer, From, AllowedGroups)
+       end;
+    true ->
+       {true, true}
+    end.
+
 %% @spec (OwnerUser, OwnerServer, {SubscriberUser, SubscriberServer, SubscriberResource}, AllowedGroups)
 %%    -> {PresenceSubscription, RosterGroup}
+get_roster_info(_, _, {"", "", _}, _) ->
+    {false, false};
 get_roster_info(OwnerUser, OwnerServer, {SubscriberUser, SubscriberServer, _}, AllowedGroups) ->
     {Subscription, Groups} =
        ejabberd_hooks:run_fold(
@@ -2787,7 +2800,9 @@ get_roster_info(OwnerUser, OwnerServer, {SubscriberUser, SubscriberServer, _}, A
     RosterGroup = lists:any(fun(Group) ->
                                    lists:member(Group, AllowedGroups)
                            end, Groups),
-    {PresenceSubscription, RosterGroup}.
+    {PresenceSubscription, RosterGroup};
+get_roster_info(OwnerUser, OwnerServer, JID, AllowedGroups) ->
+    get_roster_info(OwnerUser, OwnerServer, jlib:jid_tolower(JID), AllowedGroups).
 
 %% @spec (AffiliationStr) -> Affiliation
 %%      AffiliationStr = string()
@@ -3742,6 +3757,10 @@ transaction(Host, Node, Action, Trans) ->
                                Error
                        end
                end, Trans).
+transaction(Host, Action, Trans) ->
+    transaction(fun() ->
+                       {result, lists:foldl(Action, [], tree_call(Host, get_nodes, [Host]))}
+               end, Trans).
 
 transaction(Fun, Trans) ->
     case catch mnesia:Trans(Fun) of
index 6150141e78c47363d3b6e62948afd77e56267f77..3507091f2657fed2c2788fe3904c8e201d9f0ea6 100644 (file)
@@ -73,8 +73,7 @@
         disco_sm_items/5
        ]).
 %% exported iq handlers
--export([iq_local/3,
-        iq_sm/3
+-export([iq_sm/3
        ]).
 
 %% exports for console debug manual use
@@ -198,24 +197,22 @@ init([ServerHost, Opts]) ->
     ets:insert(gen_mod:get_module_proc(ServerHost, config), {ignore_pep_from_offline, PepOffline}),
     ets:insert(gen_mod:get_module_proc(ServerHost, config), {host, Host}),
     ejabberd_hooks:add(sm_remove_connection_hook, ServerHost, ?MODULE, on_user_offline, 75),
-    ejabberd_hooks:add(disco_sm_identity, ServerHost, ?MODULE, disco_sm_identity, 75),
-    ejabberd_hooks:add(disco_sm_features, ServerHost, ?MODULE, disco_sm_features, 75),
-    ejabberd_hooks:add(disco_sm_items, ServerHost, ?MODULE, disco_sm_items, 75),
+    ejabberd_hooks:add(disco_local_identity, ServerHost, ?MODULE, disco_local_identity, 75),
+    ejabberd_hooks:add(disco_local_features, ServerHost, ?MODULE, disco_local_features, 75),
+    ejabberd_hooks:add(disco_local_items, ServerHost, ?MODULE, disco_local_items, 75),
     ejabberd_hooks:add(presence_probe_hook, ServerHost, ?MODULE, presence_probe, 80),
     ejabberd_hooks:add(roster_in_subscription, ServerHost, ?MODULE, in_subscription, 50),
     ejabberd_hooks:add(roster_out_subscription, ServerHost, ?MODULE, out_subscription, 50),
     ejabberd_hooks:add(remove_user, ServerHost, ?MODULE, remove_user, 50),
     ejabberd_hooks:add(anonymous_purge_hook, ServerHost, ?MODULE, remove_user, 50),
-    gen_iq_handler:add_iq_handler(ejabberd_sm, ServerHost, ?NS_PUBSUB, ?MODULE, iq_sm, IQDisc),
-    gen_iq_handler:add_iq_handler(ejabberd_sm, ServerHost, ?NS_PUBSUB_OWNER, ?MODULE, iq_sm, IQDisc),
     case lists:member(?PEPNODE, Plugins) of
        true ->
            ejabberd_hooks:add(feature_check_packet, ServerHost, ?MODULE, feature_check_packet, 75),
-           ejabberd_hooks:add(disco_local_identity, ServerHost, ?MODULE, disco_local_identity, 75),
-           ejabberd_hooks:add(disco_local_features, ServerHost, ?MODULE, disco_local_features, 75),
-           ejabberd_hooks:add(disco_local_items, ServerHost, ?MODULE, disco_local_items, 75),
-           gen_iq_handler:add_iq_handler(ejabberd_local, ServerHost, ?NS_PUBSUB, ?MODULE, iq_local, IQDisc),
-           gen_iq_handler:add_iq_handler(ejabberd_local, ServerHost, ?NS_PUBSUB_OWNER, ?MODULE, iq_local, IQDisc);
+           ejabberd_hooks:add(disco_sm_identity, ServerHost, ?MODULE, disco_sm_identity, 75),
+           ejabberd_hooks:add(disco_sm_features, ServerHost, ?MODULE, disco_sm_features, 75),
+           ejabberd_hooks:add(disco_sm_items, ServerHost, ?MODULE, disco_sm_items, 75),
+           gen_iq_handler:add_iq_handler(ejabberd_sm, ServerHost, ?NS_PUBSUB, ?MODULE, iq_sm, IQDisc),
+           gen_iq_handler:add_iq_handler(ejabberd_sm, ServerHost, ?NS_PUBSUB_OWNER, ?MODULE, iq_sm, IQDisc);
        false ->
            ok
     end,
@@ -387,15 +384,12 @@ send_loop(State) ->
 %% disco hooks handling functions
 %%
 
-identity(Host) ->
-    Identity = case lists:member(?PEPNODE, plugins(Host)) of
-    true -> [{"category", "pubsub"}, {"type", "pep"}];
-    false -> [{"category", "pubsub"}, {"type", "service"}]
-    end,
-    {xmlelement, "identity", Identity, []}.
-
 disco_local_identity(Acc, _From, To, [], _Lang) ->
-    Acc ++ [identity(To#jid.lserver)];
+    case lists:member(?PEPNODE, plugins(To#jid.lserver)) of
+  true  ->
+      [{xmlelement, "identity", [{"category", "pubsub"}, {"type", "pep"}], []} | Acc];
+  false -> Acc
+    end;
 disco_local_identity(Acc, _From, _To, _Node, _Lang) ->
     Acc.
 
@@ -416,76 +410,120 @@ disco_local_items(Acc, _From, _To, [], _Lang) ->
 disco_local_items(Acc, _From, _To, _Node, _Lang) ->
     Acc.
 
-disco_sm_identity(Acc, _From, To, [], _Lang) ->
-    Acc ++ [identity(To#jid.lserver)];
+disco_sm_identity(Acc, From, To, Node, Lang) when is_list(Node) ->
+    disco_sm_identity(Acc, From, To, list_to_binary(Node), Lang);
+disco_sm_identity(empty, From, To, Node, Lang) ->
+    disco_sm_identity([], From, To, Node, Lang);
 disco_sm_identity(Acc, From, To, Node, _Lang) ->
-    LOwner = jlib:jid_tolower(jlib:jid_remove_resource(To)),
-    Acc ++ case node_disco_identity(LOwner, From, Node) of
-              {result, I} -> I;
-              _ -> []
-          end.
+    disco_identity(jlib:jid_tolower(jlib:jid_remove_resource(To)), Node, From) ++ Acc.
+
+disco_identity(_Host, <<>>, _From) ->
+    [{xmlelement, "identity", [{"category", "pubsub"}, {"type", "pep"}], []}];
+disco_identity(Host, Node, From) ->
+    Action = fun(#pubsub_node{id = Idx, type = Type, options = Options}) ->
+           Owners = node_owners_call(Type, Idx),
+           case get_allowed_items_call(Host, Idx, From, Type, Options, Owners) of
+               {result, _} ->
+                   {result, [{xmlelement, "identity", [{"category", "pubsub"}, {"type", "pep"}], []},
+                       {xmlelement, "identity",
+                           [{"category", "pubsub"},
+                               {"type", "leaf"}
+                               | case get_option(Options, title) of
+                                   false   -> [];
+                                   [Title] -> [{"name", Title}]
+                               end],
+                           []}]};
+               _ -> {result, []}
+           end
+       end,
+    case transaction(Host, Node, Action, sync_dirty) of
+       {result, {_, Result}} -> Result;
+       _ -> []
+    end.
 
-disco_sm_features(Acc, _From, _To, [], _Lang) ->
-    Acc;
-disco_sm_features(Acc, From, To, Node, _Lang) ->
-    LOwner = jlib:jid_tolower(jlib:jid_remove_resource(To)),
-    Features = node_disco_features(LOwner, From, Node),
-    case {Acc, Features} of
-       {{result, AccFeatures}, {result, AddFeatures}} ->
-           {result, AccFeatures++AddFeatures};
-       {_, {result, AddFeatures}} ->
-           {result, AddFeatures};
-       {_, _} ->
-           Acc
+disco_sm_features(Acc, From, To, Node, Lang) when is_list(Node) ->
+    disco_sm_features(Acc, From, To, list_to_binary(Node), Lang);
+disco_sm_features(empty, From, To, Node, Lang) ->
+    disco_sm_features({result, []}, From, To, Node, Lang);
+disco_sm_features({result, OtherFeatures} = _Acc, From, To, Node, _Lang) ->
+    {result,
+     OtherFeatures ++
+       disco_features(jlib:jid_tolower(jlib:jid_remove_resource(To)), Node, From)};
+disco_sm_features(Acc, _From, _To, _Node, _Lang) ->
+    Acc.
+
+disco_features(_Host, <<>>, _From) ->
+    [?NS_PUBSUB
+    | [?NS_PUBSUB++"#"++Feature || Feature <- features("pep")]];
+disco_features(Host, Node, From) ->
+    Action = fun(#pubsub_node{id = Idx, type = Type, options = Options}) ->
+           Owners = node_owners_call(Type, Idx),
+           case get_allowed_items_call(Host, Idx, From, Type, Options, Owners) of
+               {result, _} ->
+                   {result, [?NS_PUBSUB
+                           | [?NS_PUBSUB ++ "#" ++ Feature || Feature <- features("pep")]]};
+               _ -> {result, []}
+           end
+       end,
+    case transaction(Host, Node, Action, sync_dirty) of
+       {result, {_, Result}} -> Result;
+       _ -> []
     end.
 
-disco_sm_items(Acc, From, To, [], _Lang) ->
-    Host = To#jid.lserver,
-    case tree_action(Host, get_subnodes, [Host, <<>>, From]) of
-       [] ->
-           Acc;
-       Nodes ->
-           SBJID = jlib:jid_to_string(jlib:jid_remove_resource(To)),
-           Items = case Acc of
-                       {result, I} -> I;
-                       _ -> []
-                   end,
-           NodeItems = lists:map(
-                         fun(#pubsub_node{nodeid = {_, Node}}) ->
-                                 {xmlelement, "item",
-                                  [{"jid", SBJID}|nodeAttr(Node)],
-                                  []}
-                         end, Nodes),
-           {result, NodeItems ++ Items}
+disco_sm_items(Acc, From, To, Node, Lang) when is_list(Node) ->
+    disco_sm_items(Acc, From, To, list_to_binary(Node), Lang);
+disco_sm_items(empty, From, To, Node, Lang) ->
+    disco_sm_items({result, []}, From, To, Node, Lang);
+disco_sm_items({result, OtherItems}, From, To, Node, _Lang) ->
+    {result,
+     lists:usort(OtherItems ++
+       disco_items(jlib:jid_tolower(jlib:jid_remove_resource(To)), Node, From))};
+disco_sm_items(Acc, _From, _To, _Node, _Lang) ->
+    Acc.
+
+disco_items(Host, <<>>, From) ->
+    Action = fun(#pubsub_node{nodeid ={_, NodeID}, options = Options, type = Type, id = Idx}, Acc) ->
+               Owners = node_owners_call(Type, Idx),
+               case get_allowed_items_call(Host, Idx, From, Type, Options, Owners) of
+                   {result, _} ->
+                       [{xmlelement, "item",
+                               [{"node", binary_to_list(NodeID)},
+                                   {"jid",  case Host of
+                                           {_,_,_} -> jlib:jid_to_string(Host);
+                                           _Host   -> Host
+                                       end}
+                                   | case get_option(Options, title) of
+                                       false   -> [];
+                                       [Title] -> [{"name", Title}]
+                                   end],
+                               []}
+                           | Acc];
+                   _ -> Acc
+               end
+           end,
+    case transaction_on_nodes(Host, Action, sync_dirty) of
+       {result, Items} -> Items;
+       _ -> []
     end;
 
-disco_sm_items(Acc, From, To, SNode, _Lang) ->
-    Host = To#jid.lserver,
-    Node = string_to_node(SNode),
-    Action = fun(#pubsub_node{type = Type, id = NodeId}) ->
-       % TODO call get_items/6 instead for access control (EJAB-1033)
-       case node_call(Type, get_items, [NodeId, From]) of
-           {result, []} ->
-               none;
-           {result, AllItems} ->
-               SBJID = jlib:jid_to_string(jlib:jid_remove_resource(To)),
-               Items = case Acc of
-                       {result, I} -> I;
-                       _ -> []
-                   end,
-               NodeItems = lists:map(
-                         fun(#pubsub_item{itemid = {Id, _}}) ->
-                                 {result, Name} = node_call(Type, get_item_name, [Host, Node, Id]),
-                                 {xmlelement, "item", [{"jid", SBJID}, {"name", Name}], []}
-                         end, AllItems),
-               {result, NodeItems ++ Items};
-           _ ->
-               none
-       end
-    end,
+disco_items(Host, Node, From) ->
+    Action = fun(#pubsub_node{id = Idx, type = Type, options = Options}) ->
+           Owners = node_owners_call(Type, Idx),
+           case get_allowed_items_call(Host, Idx, From, Type, Options, Owners) of
+               {result, Items} ->
+                   {result, [{xmlelement, "item",
+                           [{"jid", case Host of
+                                       {_,_,_} -> jlib:jid_to_string(Host);
+                                       _Host   -> Host
+                                   end},
+                               {"name", ItemID}], []}
+                       || #pubsub_item{itemid = {ItemID,_}} <- Items]};
+               _ -> {result, []}
+           end
+       end,
     case transaction(Host, Node, Action, sync_dirty) of
-       {result, {_, Items}} -> {result, Items};
-       _ -> Acc
+       {result, {_, Result}} -> Result;
+       _ -> []
     end.
 
 %% -------
@@ -661,25 +699,23 @@ terminate(_Reason, #state{host = Host,
     case lists:member(?PEPNODE, Plugins) of
        true ->
            ejabberd_hooks:delete(feature_check_packet, ServerHost, ?MODULE, feature_check_packet, 75),
-           ejabberd_hooks:delete(disco_local_identity, ServerHost, ?MODULE, disco_local_identity, 75),
-           ejabberd_hooks:delete(disco_local_features, ServerHost, ?MODULE, disco_local_features, 75),
-           ejabberd_hooks:delete(disco_local_items, ServerHost, ?MODULE, disco_local_items, 75),
-           gen_iq_handler:remove_iq_handler(ejabberd_local, ServerHost, ?NS_PUBSUB),
-           gen_iq_handler:remove_iq_handler(ejabberd_local, ServerHost, ?NS_PUBSUB_OWNER);
+           ejabberd_hooks:delete(disco_sm_identity, ServerHost, ?MODULE, disco_sm_identity, 75),
+           ejabberd_hooks:delete(disco_sm_features, ServerHost, ?MODULE, disco_sm_features, 75),
+           ejabberd_hooks:delete(disco_sm_items, ServerHost, ?MODULE, disco_sm_items, 75),
+           gen_iq_handler:remove_iq_handler(ejabberd_sm, ServerHost, ?NS_PUBSUB),
+           gen_iq_handler:remove_iq_handler(ejabberd_sm, ServerHost, ?NS_PUBSUB_OWNER);
        false ->
            ok
     end,
     ejabberd_hooks:delete(sm_remove_connection_hook, ServerHost, ?MODULE, on_user_offline, 75),
-    ejabberd_hooks:delete(disco_sm_identity, ServerHost, ?MODULE, disco_sm_identity, 75),
-    ejabberd_hooks:delete(disco_sm_features, ServerHost, ?MODULE, disco_sm_features, 75),
-    ejabberd_hooks:delete(disco_sm_items, ServerHost, ?MODULE, disco_sm_items, 75),
+    ejabberd_hooks:delete(disco_local_identity, ServerHost, ?MODULE, disco_local_identity, 75),
+    ejabberd_hooks:delete(disco_local_features, ServerHost, ?MODULE, disco_local_features, 75),
+    ejabberd_hooks:delete(disco_local_items, ServerHost, ?MODULE, disco_local_items, 75),
     ejabberd_hooks:delete(presence_probe_hook, ServerHost, ?MODULE, presence_probe, 80),
     ejabberd_hooks:delete(roster_in_subscription, ServerHost, ?MODULE, in_subscription, 50),
     ejabberd_hooks:delete(roster_out_subscription, ServerHost, ?MODULE, out_subscription, 50),
     ejabberd_hooks:delete(remove_user, ServerHost, ?MODULE, remove_user, 50),
     ejabberd_hooks:delete(anonymous_purge_hook, ServerHost, ?MODULE, remove_user, 50),
-    gen_iq_handler:remove_iq_handler(ejabberd_sm, ServerHost, ?NS_PUBSUB),
-    gen_iq_handler:remove_iq_handler(ejabberd_sm, ServerHost, ?NS_PUBSUB_OWNER),
     mod_disco:unregister_feature(ServerHost, ?NS_PUBSUB),
     gen_mod:get_module_proc(ServerHost, ?LOOPNAME) ! stop,
     terminate_plugins(Host, ServerHost, Plugins, TreePlugin).
@@ -821,10 +857,10 @@ command_disco_info(_Host, <<?NS_PUBSUB_GET_PENDING>>, _From) ->
 
 node_disco_info(Host, Node, From) ->
     node_disco_info(Host, Node, From, true, true).
-node_disco_identity(Host, Node, From) ->
-    node_disco_info(Host, Node, From, true, false).
-node_disco_features(Host, Node, From) ->
-    node_disco_info(Host, Node, From, false, true).
+%node_disco_identity(Host, Node, From) ->
+%    node_disco_info(Host, Node, From, true, false).
+%node_disco_features(Host, Node, From) ->
+%    node_disco_info(Host, Node, From, false, true).
 node_disco_info(Host, Node, From, Identity, Features) ->
     Action =
        fun(#pubsub_node{type = Type, id = NodeId}) ->
@@ -926,17 +962,16 @@ iq_disco_items(Host, Item, From, RSM) ->
            {result, []};
        [SNode] ->
            Node = string_to_node(SNode),
-           Action =
-               fun(#pubsub_node{type = Type, id = NodeId}) ->
-                       %% TODO call get_items/6 instead for access control (EJAB-1033)
-                       {NodeItems, RsmOut} = case node_call(Type, get_items, [NodeId, From, RSM]) of
-                                       {result, I} -> I;
-                                       _ -> {[], none}
-                                   end,
+           Action = fun(#pubsub_node{id = Idx, type = Type, options = Options}) ->
+                       Owners = node_owners_call(Type, Idx),
+                       {NodeItems, RsmOut} = case get_allowed_items_call(Host, Idx, From, Type, Options, Owners, RSM) of
+                           {result, R} -> R;
+                           _ -> {[], none}
+                           end,
                        Nodes = lists:map(
-                               fun(#pubsub_node{nodeid = {_, SubNode}, options = Options}) ->
+                               fun(#pubsub_node{nodeid = {_, SubNode}, options = SubOptions}) ->
                                    Attrs =
-                                       case get_option(Options, title) of
+                                       case get_option(SubOptions, title) of
                                            false ->
                                                [{"jid", Host} |nodeAttr(SubNode)];
                                            Title ->
@@ -957,24 +992,6 @@ iq_disco_items(Host, Item, From, RSM) ->
            end
     end.
 
-iq_local(From, To, #iq{type = Type, sub_el = SubEl, xmlns = XMLNS, lang = Lang} = IQ) ->
-    ServerHost = To#jid.lserver,
-    %% Accept IQs to server only from our own users.
-    if
-       From#jid.lserver /= ServerHost ->
-           IQ#iq{type = error, sub_el = [?ERR_FORBIDDEN, SubEl]};
-       true ->
-           LOwner = jlib:jid_tolower(jlib:jid_remove_resource(From)),
-           Res = case XMLNS of
-                     ?NS_PUBSUB -> iq_pubsub(LOwner, ServerHost, From, Type, SubEl, Lang);
-                     ?NS_PUBSUB_OWNER -> iq_pubsub_owner(LOwner, ServerHost, From, Type, SubEl, Lang)
-                 end,
-           case Res of
-               {result, IQRes} -> IQ#iq{type = result, sub_el = IQRes};
-               {error, Error} -> IQ#iq{type = error, sub_el = [Error, SubEl]}
-           end
-    end.
-
 iq_sm(From, To, #iq{type = Type, sub_el = SubEl, xmlns = XMLNS, lang = Lang} = IQ) ->
     ServerHost = To#jid.lserver,
     LOwner = jlib:jid_tolower(jlib:jid_remove_resource(To)),
@@ -1687,25 +1704,8 @@ subscribe_node(Host, Node, From, JID, Configuration) ->
                    AccessModel = get_option(Options, access_model),
                    SendLast = get_option(Options, send_last_published_item),
                    AllowedGroups = get_option(Options, roster_groups_allowed, []),
-                   {PresenceSubscription, RosterGroup} =
-                       case Host of
-                           {OUser, OServer, _} ->
-                               get_roster_info(OUser, OServer,
-                                               Subscriber, AllowedGroups);
-                           _ ->
-                               case Subscriber of
-                                   {"", "", ""} ->
-                                       {false, false};
-                                   _ ->
-                                       case node_owners_call(Type, NodeId) of
-                                           [{OU, OS, _}|_] ->
-                                               get_roster_info(OU, OS,
-                                                               Subscriber, AllowedGroups);
-                                           _ ->
-                                               {false, false}
-                                       end
-                               end
-                       end,
+                   Owners = node_owners_call(Type, NodeId),
+                   {PresenceSubscription, RosterGroup} = get_presence_and_roster_permissions(Host, Subscriber, Owners, AccessModel, AllowedGroups),
                    if
                        not SubscribeFeature ->
                            %% Node does not support subscriptions
@@ -2054,14 +2054,8 @@ get_items(Host, Node, From, SubId, SMaxItems, ItemIDs, RSM) ->
                     PersistentFeature = lists:member("persistent-items", Features),
                     AccessModel = get_option(Options, access_model),
                     AllowedGroups = get_option(Options, roster_groups_allowed, []),
-                    {PresenceSubscription, RosterGroup} =
-                        case Host of
-                            {OUser, OServer, _} ->
-                                get_roster_info(OUser, OServer,
-                                                jlib:jid_tolower(From), AllowedGroups);
-                            _ ->
-                                {true, true}
-                        end,
+                    Owners = node_owners_call(Type, NodeId),
+                    {PresenceSubscription, RosterGroup} = get_presence_and_roster_permissions(Host, From, Owners, AccessModel, AllowedGroups),
                     if
                         not RetreiveFeature ->
                             %% Item Retrieval Not Supported
@@ -2112,6 +2106,17 @@ get_item(Host, Node, ItemId) ->
        {result, {_, Items}} -> Items;
        Error -> Error
     end.
+get_allowed_items_call(Host, NodeIdx, From, Type, Options, Owners) ->
+    case get_allowed_items_call(Host, NodeIdx, From, Type, Options, Owners, none) of
+       {result, {I, _}} -> {result, I};
+       Error -> Error
+    end.
+get_allowed_items_call(Host, NodeIdx, From, Type, Options, Owners, RSM) ->
+    AccessModel = get_option(Options, access_model),
+    AllowedGroups = get_option(Options, roster_groups_allowed, []),
+    {PresenceSubscription, RosterGroup} = get_presence_and_roster_permissions(Host, From, Owners, AccessModel, AllowedGroups),
+    node_call(Type, get_items, [NodeIdx, From, AccessModel, PresenceSubscription, RosterGroup, undefined, RSM]).
+
 
 %% @spec (Host, Node, NodeId, Type, LJID, Number) -> any()
 %%      Host = pubsubHost()
@@ -2584,8 +2589,24 @@ set_subscriptions(Host, Node, From, EntitiesEls) ->
            end
     end.
 
+
+get_presence_and_roster_permissions(Host, From, Owners, AccessModel, AllowedGroups) ->
+    if (AccessModel == presence) or (AccessModel == roster) ->
+       case Host of
+           {User, Server, _} ->
+               get_roster_info(User, Server, From, AllowedGroups);
+           _ ->
+               [{OUser, OServer, _}|_] = Owners,
+               get_roster_info(OUser, OServer, From, AllowedGroups)
+       end;
+    true ->
+       {true, true}
+    end.
+
 %% @spec (OwnerUser, OwnerServer, {SubscriberUser, SubscriberServer, SubscriberResource}, AllowedGroups)
 %%    -> {PresenceSubscription, RosterGroup}
+get_roster_info(_, _, {"", "", _}, _) ->
+    {false, false};
 get_roster_info(OwnerUser, OwnerServer, {SubscriberUser, SubscriberServer, _}, AllowedGroups) ->
     {Subscription, Groups} =
        ejabberd_hooks:run_fold(
@@ -2597,7 +2618,9 @@ get_roster_info(OwnerUser, OwnerServer, {SubscriberUser, SubscriberServer, _}, A
     RosterGroup = lists:any(fun(Group) ->
                                    lists:member(Group, AllowedGroups)
                            end, Groups),
-    {PresenceSubscription, RosterGroup}.
+    {PresenceSubscription, RosterGroup};
+get_roster_info(OwnerUser, OwnerServer, JID, AllowedGroups) ->
+    get_roster_info(OwnerUser, OwnerServer, jlib:jid_tolower(JID), AllowedGroups).
 
 %% @spec (AffiliationStr) -> Affiliation
 %%      AffiliationStr = string()
@@ -3582,6 +3605,10 @@ transaction(Host, Node, Action, Trans) ->
                                Error
                        end
                end, Trans).
+transaction_on_nodes(Host, Action, Trans) ->
+    transaction(Host, fun() ->
+                       {result, lists:foldl(Action, [], tree_call(Host, get_nodes, [Host]))}
+               end, Trans).
 
 transaction(Host, Fun, Trans) ->
     transaction_retry(Host, Fun, Trans, 2).
index 6dfc8b6288acacd7bf618ab5bfd3616d943c4d39..0e32e198c1f1b608031107e7eb10515ac4d7dd9a 100644 (file)
@@ -1,5 +1,5 @@
---- mod_pubsub.erl     2010-06-02 15:03:48.000000000 +0200
-+++ mod_pubsub_odbc.erl        2010-06-02 16:45:38.000000000 +0200
+--- mod_pubsub.erl     2010-08-02 16:07:28.000000000 +0200
++++ mod_pubsub_odbc.erl        2010-08-02 17:04:37.000000000 +0200
 @@ -42,7 +42,7 @@
  %%% 6.2.3.1, 6.2.3.5, and 6.3. For information on subscription leases see
  %%% XEP-0060 section 12.18.
@@ -22,7 +22,7 @@
  
  %% exports for hooks
  -export([presence_probe/3,
-@@ -104,7 +104,7 @@
+@@ -103,7 +103,7 @@
         string_to_affiliation/1,
         extended_error/2,
         extended_error/3,
@@ -31,7 +31,7 @@
        ]).
  
  %% API and gen_server callbacks
-@@ -123,7 +123,7 @@
+@@ -122,7 +122,7 @@
  -export([send_loop/1
        ]).
  
@@ -40,7 +40,7 @@
  -define(LOOPNAME, ejabberd_mod_pubsub_loop).
  -define(PLUGIN_PREFIX, "node_").
  -define(TREE_PREFIX, "nodetree_").
-@@ -220,8 +220,6 @@
+@@ -217,8 +217,6 @@
            ok
      end,
      ejabberd_router:register_route(Host),
@@ -49,7 +49,7 @@
      init_nodes(Host, ServerHost, NodeTree, Plugins),
      State = #state{host = Host,
                server_host = ServerHost,
-@@ -280,207 +278,14 @@
+@@ -277,207 +275,14 @@
  
  init_nodes(Host, ServerHost, _NodeTree, Plugins) ->
      %% TODO, this call should be done plugin side
  send_loop(State) ->
      receive
      {presence, JID, Pid} ->
-@@ -491,17 +296,15 @@
+@@ -488,17 +293,15 @@
        %% for each node From is subscribed to
        %% and if the node is so configured, send the last published item to From
        lists:foreach(fun(PType) ->
                    true ->
                        % resource not concerned about that subscription
                        ok
-@@ -747,10 +550,10 @@
+@@ -617,7 +420,8 @@
+ disco_identity(_Host, <<>>, _From) ->
+     [{xmlelement, "identity", [{"category", "pubsub"}, {"type", "pep"}], []}];
+ disco_identity(Host, Node, From) ->
+-    Action = fun(#pubsub_node{id = Idx, type = Type, options = Options, owners = Owners}) ->
++    Action = fun(#pubsub_node{id = Idx, type = Type, options = Options}) ->
++          Owners = node_owners_call(Type, Idx),
+           case get_allowed_items_call(Host, Idx, From, Type, Options, Owners) of
+               {result, _} ->
+                   {result, [{xmlelement, "identity", [{"category", "pubsub"}, {"type", "pep"}], []},
+@@ -652,7 +456,8 @@
+     [?NS_PUBSUB
+     | [?NS_PUBSUB++"#"++Feature || Feature <- features("pep")]];
+ disco_features(Host, Node, From) ->
+-    Action = fun(#pubsub_node{id = Idx, type = Type, options = Options, owners = Owners}) ->
++    Action = fun(#pubsub_node{id = Idx, type = Type, options = Options}) ->
++          Owners = node_owners_call(Type, Idx),
+           case get_allowed_items_call(Host, Idx, From, Type, Options, Owners) of
+               {result, _} ->
+                   {result, [?NS_PUBSUB
+@@ -677,7 +482,8 @@
+     Acc.
+ disco_items(Host, <<>>, From) ->
+-    Action = fun(#pubsub_node{nodeid ={_, NodeID}, options = Options, type = Type, id = Idx, owners = Owners}, Acc) ->
++    Action = fun(#pubsub_node{nodeid ={_, NodeID}, options = Options, type = Type, id = Idx}, Acc) ->
++              Owners = node_owners_call(Type, Idx),
+               case get_allowed_items_call(Host, Idx, From, Type, Options, Owners) of
+                   {result, _} ->
+                       [{xmlelement, "item",
+@@ -695,13 +501,14 @@
+                   _ -> Acc
+               end
+           end,
+-    case transaction(Host, Action, sync_dirty) of
++    case transaction_on_nodes(Host, Action, sync_dirty) of
+       {result, Items} -> Items;
+       _ -> []
+     end;
+ disco_items(Host, Node, From) ->
+-    Action = fun(#pubsub_node{id = Idx, type = Type, options = Options, owners = Owners}) ->
++    Action = fun(#pubsub_node{id = Idx, type = Type, options = Options}) ->
++          Owners = node_owners_call(Type, Idx),
+           case get_allowed_items_call(Host, Idx, From, Type, Options, Owners) of
+               {result, Items} ->
+                   {result, [{xmlelement, "item",
+@@ -781,10 +588,10 @@
        lists:foreach(fun(PType) ->
            {result, Subscriptions} = node_action(Host, PType, get_entity_subscriptions, [Host, Entity]),
            lists:foreach(fun
                                true ->
                                    node_action(Host, PType, unsubscribe_node, [NodeId, Entity, JID, all]);
                                false ->
-@@ -920,7 +723,8 @@
+@@ -952,7 +759,8 @@
                            sub_el = SubEl} = IQ ->
                            {xmlelement, _, QAttrs, _} = SubEl,
                            Node = xml:get_attr_s("node", QAttrs),
                                      {result, IQRes} ->
                                          jlib:iq_to_xml(
                                            IQ#iq{type = result,
-@@ -1033,7 +837,7 @@
+@@ -1065,7 +873,7 @@
                                    [] ->
                                        ["leaf"]; %% No sub-nodes: it's a leaf node
                                    _ ->
                                            {result, []} -> ["collection"];
                                            {result, _} -> ["leaf", "collection"];
                                            _ -> []
-@@ -1049,8 +853,9 @@
+@@ -1081,8 +889,9 @@
                            [];
                        true ->
                            [{xmlelement, "feature", [{"var", ?NS_PUBSUB}], []} |
                                       end, features(Type))]
                    end,
                %% TODO: add meta-data info (spec section 5.4)
-@@ -1079,8 +884,9 @@
+@@ -1111,8 +920,9 @@
                {xmlelement, "feature", [{"var", ?NS_PUBSUB}], []},
                {xmlelement, "feature", [{"var", ?NS_COMMANDS}], []},
                {xmlelement, "feature", [{"var", ?NS_VCARD}], []}] ++
             end, features(Host, Node))};
          <<?NS_COMMANDS>> ->
              command_disco_info(Host, Node, From);
-@@ -1090,7 +896,7 @@
+@@ -1122,7 +932,7 @@
            node_disco_info(Host, Node, From)
      end.
  
      case tree_action(Host, get_subnodes, [Host, <<>>, From]) of
        Nodes when is_list(Nodes) ->
            {result, lists:map(
-@@ -1107,14 +913,14 @@
+@@ -1139,23 +949,24 @@
        Other ->
            Other
      end;
      case string:tokens(Item, "!") of
        [_SNode, _ItemID] ->
            {result, []};
-@@ -1122,10 +928,10 @@
+       [SNode] ->
            Node = string_to_node(SNode),
-           Action =
-               fun(#pubsub_node{type = Type, id = NodeId}) ->
--                      % TODO call get_items/6 instead for access control (EJAB-1033)
--                      NodeItems = case node_call(Type, get_items, [NodeId, From]) of
-+                      %% TODO call get_items/6 instead for access control (EJAB-1033)
-+                      {NodeItems, RsmOut} = case node_call(Type, get_items, [NodeId, From, RSM]) of
-                                       {result, I} -> I;
--                                      _ -> []
-+                                      _ -> {[], none}
-                                   end,
+-          Action = fun(#pubsub_node{id = Idx, type = Type, options = Options, owners = Owners}) ->
+-                      NodeItems = case get_allowed_items_call(Host, Idx, From, Type, Options, Owners) of
++          Action = fun(#pubsub_node{id = Idx, type = Type, options = Options}) ->
++                      Owners = node_owners_call(Type, Idx),
++                      {NodeItems, RsmOut} = case get_allowed_items_call(Host, Idx, From, Type, Options, Owners, RSM) of
+                           {result, R} -> R;
+-                          _ -> []
++                          _ -> {[], none}
+                           end,
                        Nodes = lists:map(
-                               fun(#pubsub_node{nodeid = {_, SubNode}, options = Options}) ->
-@@ -1143,7 +949,7 @@
+                               fun(#pubsub_node{nodeid = {_, SubNode}, options = SubOptions}) ->
+@@ -1173,7 +984,7 @@
                                    {result, Name} = node_call(Type, get_item_name, [Host, Node, RN]),
                                    {xmlelement, "item", [{"jid", Host}, {"name", Name}], []}
                                end, NodeItems),
                end,
            case transaction(Host, Node, Action, sync_dirty) of
                {result, {_, Result}} -> {result, Result};
-@@ -1272,7 +1078,8 @@
+@@ -1284,7 +1095,8 @@
                        (_, Acc) ->
                            Acc
                        end, [], xml:remove_cdata(Els)),
                {get, "subscriptions"} ->
                    get_subscriptions(Host, Node, From, Plugins);
                {get, "affiliations"} ->
-@@ -1295,7 +1102,9 @@
+@@ -1307,7 +1119,9 @@
  
  iq_pubsub_owner(Host, ServerHost, From, IQType, SubEl, Lang) ->
      {xmlelement, _, _, SubEls} = SubEl,
      case Action of
        [{xmlelement, Name, Attrs, Els}] ->
            Node = string_to_node(xml:get_attr_s("node", Attrs)),
-@@ -1425,7 +1234,8 @@
+@@ -1437,7 +1251,8 @@
                    _          -> []
                end
        end,
                     sync_dirty) of
        {result, Res} -> Res;
        Err        -> Err
-@@ -1464,7 +1274,7 @@
+@@ -1476,7 +1291,7 @@
  
  %%% authorization handling
  
      Lang = "en", %% TODO fix
      Stanza = {xmlelement, "message",
              [],
-@@ -1493,7 +1303,7 @@
+@@ -1505,7 +1320,7 @@
                  [{xmlelement, "value", [], [{xmlcdata, "false"}]}]}]}]},
      lists:foreach(fun(Owner) ->
        ejabberd_router:route(service_jid(Host), jlib:make_jid(Owner), Stanza)
  
  find_authorization_response(Packet) ->
      {xmlelement, _Name, _Attrs, Els} = Packet,
-@@ -1557,8 +1367,8 @@
+@@ -1569,8 +1384,8 @@
                        "true" -> true;
                        _ -> false
                    end,
                             {result, Subscriptions} = node_call(Type, get_subscriptions, [NodeId, Subscriber]),
                             if
                                 not IsApprover ->
-@@ -1757,7 +1567,7 @@
+@@ -1769,7 +1584,7 @@
            Reply = [{xmlelement, "pubsub", [{"xmlns", ?NS_PUBSUB}],
                      [{xmlelement, "create", nodeAttr(Node),
                        []}]}],
                {result, {NodeId, SubsByDepth, {Result, broadcast}}} ->
                    broadcast_created_node(Host, Node, NodeId, Type, NodeOptions, SubsByDepth),
                    case Result of
-@@ -1860,7 +1670,7 @@
+@@ -1872,7 +1687,7 @@
  %%<li>The node does not exist.</li>
  %%</ul>
  subscribe_node(Host, Node, From, JID, Configuration) ->
        {result, GoodSubOpts} -> GoodSubOpts;
        _ -> invalid
      end,
-@@ -1868,7 +1678,7 @@
+@@ -1880,7 +1695,7 @@
                     error -> {"", "", ""};
                     J -> jlib:jid_tolower(J)
                 end,
--    Action = fun(#pubsub_node{options = Options, owners = [Owner|_], type = Type, id = NodeId}) ->
+-    Action = fun(#pubsub_node{options = Options, owners = Owners, type = Type, id = NodeId}) ->
 +    Action = fun(#pubsub_node{options = Options, type = Type, id = NodeId}) ->
                    Features = features(Type),
                    SubscribeFeature = lists:member("subscribe", Features),
                    OptionsFeature = lists:member("subscription-options", Features),
-@@ -1887,9 +1697,13 @@
-                                   {"", "", ""} ->
-                                       {false, false};
-                                   _ ->
--                                      {OU, OS, _} = Owner,
--                                      get_roster_info(OU, OS,
--                                                      Subscriber, AllowedGroups)
-+                                      case node_owners_call(Type, NodeId) of
-+                                          [{OU, OS, _}|_] ->
-+                                              get_roster_info(OU, OS,
-+                                                              Subscriber, AllowedGroups);
-+                                          _ ->
-+                                              {false, false}
-+                                      end
-                               end
-                       end,
+@@ -1889,6 +1704,7 @@
+                   AccessModel = get_option(Options, access_model),
+                   SendLast = get_option(Options, send_last_published_item),
+                   AllowedGroups = get_option(Options, roster_groups_allowed, []),
++                  Owners = node_owners_call(Type, NodeId),
+                   {PresenceSubscription, RosterGroup} = get_presence_and_roster_permissions(Host, Subscriber, Owners, AccessModel, AllowedGroups),
                    if
-@@ -2220,7 +2034,7 @@
+                       not SubscribeFeature ->
+@@ -2218,7 +2034,7 @@
  %% <p>The permission are not checked in this function.</p>
  %% @todo We probably need to check that the user doing the query has the right
  %% to read the items.
      MaxItems =
        if
            SMaxItems == "" -> get_max_items_node(Host);
-@@ -2259,11 +2073,11 @@
+@@ -2232,12 +2048,13 @@
+       {error, Error} ->
+           {error, Error};
+       _ ->
+-          Action = fun(#pubsub_node{options = Options, type = Type, id = NodeId, owners = Owners}) ->
++          Action = fun(#pubsub_node{options = Options, type = Type, id = NodeId}) ->
+                    Features = features(Type),
+                    RetreiveFeature = lists:member("retrieve-items", Features),
+                    PersistentFeature = lists:member("persistent-items", Features),
+                    AccessModel = get_option(Options, access_model),
+                    AllowedGroups = get_option(Options, roster_groups_allowed, []),
++                   Owners = node_owners_call(Type, NodeId),
+                    {PresenceSubscription, RosterGroup} = get_presence_and_roster_permissions(Host, From, Owners, AccessModel, AllowedGroups),
+                    if
+                        not RetreiveFeature ->
+@@ -2250,11 +2067,11 @@
                             node_call(Type, get_items,
                                       [NodeId, From,
                                        AccessModel, PresenceSubscription, RosterGroup,
                    SendItems = case ItemIDs of
                        [] -> 
                            Items;
-@@ -2276,7 +2090,8 @@
+@@ -2267,7 +2084,8 @@
                    %% number of items sent to MaxItems:
                    {result, [{xmlelement, "pubsub", [{"xmlns", ?NS_PUBSUB}],
                                [{xmlelement, "items", nodeAttr(Node),
                Error ->
                    Error
            end
-@@ -2308,16 +2123,27 @@
+@@ -2289,10 +2107,15 @@
+       Error -> Error
+     end.
+ get_allowed_items_call(Host, NodeIdx, From, Type, Options, Owners) ->
++    case get_allowed_items_call(Host, NodeIdx, From, Type, Options, Owners, none) of
++      {result, {I, _}} -> {result, I};
++      Error -> Error
++    end.
++get_allowed_items_call(Host, NodeIdx, From, Type, Options, Owners, RSM) ->
+     AccessModel = get_option(Options, access_model),
+     AllowedGroups = get_option(Options, roster_groups_allowed, []),
+     {PresenceSubscription, RosterGroup} = get_presence_and_roster_permissions(Host, From, Owners, AccessModel, AllowedGroups),
+-    node_call(Type, get_items, [NodeIdx, From, AccessModel, PresenceSubscription, RosterGroup, undefined]).
++    node_call(Type, get_items, [NodeIdx, From, AccessModel, PresenceSubscription, RosterGroup, undefined, RSM]).
+ %% @spec (Host, Node, NodeId, Type, LJID, Number) -> any()
+@@ -2305,16 +2128,27 @@
  %% @doc <p>Resend the items of a node to the user.</p>
  %% @todo use cache-last-item feature
  send_items(Host, Node, NodeId, Type, LJID, last) ->
  send_items(Host, Node, NodeId, Type, LJID, Number) ->
      ToSend = case node_action(Host, Type, get_items, [NodeId, LJID]) of
        {result, []} -> 
-@@ -2443,7 +2269,8 @@
+@@ -2440,7 +2274,8 @@
        error ->
            {error, ?ERR_BAD_REQUEST};
        _ ->
                        case lists:member(Owner, Owners) of
                            true ->
                                OwnerJID = jlib:make_jid(Owner),
-@@ -2453,24 +2280,7 @@
+@@ -2450,24 +2285,7 @@
                                    end,
                                lists:foreach(
                                    fun({JID, Affiliation}) ->
                                    end, FilteredEntities),
                                {result, []};
                            _ ->
-@@ -2523,11 +2333,11 @@
+@@ -2520,11 +2338,11 @@
      end.
  
  read_sub(Subscriber, Node, NodeID, SubID, Lang) ->
            OptionsEl = {xmlelement, "options", [{"jid", jlib:jid_to_string(Subscriber)},
                                                 {"subid", SubID}|nodeAttr(Node)],
                         [XdataEl]},
-@@ -2553,7 +2363,7 @@
+@@ -2550,7 +2368,7 @@
      end.
  
  set_options_helper(Configuration, JID, NodeID, SubID, Type) ->
        {result, GoodSubOpts} -> GoodSubOpts;
        _ -> invalid
      end,
-@@ -2582,7 +2392,7 @@
+@@ -2579,7 +2397,7 @@
  write_sub(_Subscriber, _NodeID, _SubID, invalid) ->
      {error, extended_error(?ERR_BAD_REQUEST, "invalid-options")};
  write_sub(Subscriber, NodeID, SubID, Options) ->
        {error, notfound} ->
            {error, extended_error(?ERR_NOT_ACCEPTABLE, "invalid-subid")};
        {result, _} ->
-@@ -2750,8 +2560,8 @@
+@@ -2747,8 +2565,8 @@
                                     {"subscription", subscription_to_string(Sub)} | nodeAttr(Node)], []}]}]},
                ejabberd_router:route(service_jid(Host), jlib:make_jid(JID), Stanza)
            end,
                                true ->
                                    Result = lists:foldl(fun({JID, Subscription, SubId}, Acc) ->
  
-@@ -3088,7 +2898,7 @@
+@@ -3103,7 +2921,7 @@
                        {Depth, [{N, get_node_subs(N)} || N <- Nodes]}
            end, tree_call(Host, get_parentnodes_tree, [Host, Node, service_jid(Host)]))}
        end,
        {result, CollSubs} -> CollSubs;
        _ -> []
      end.
-@@ -3102,9 +2912,9 @@
+@@ -3117,9 +2935,9 @@
  
  get_options_for_subs(NodeID, Subs) ->
      lists:foldl(fun({JID, subscribed, SubID}, Acc) ->
                            _ -> Acc
                        end;
                    (_, Acc) ->
-@@ -3308,6 +3118,30 @@
+@@ -3323,6 +3141,30 @@
            Result
      end.
  
  %% @spec (Host, Options) -> MaxItems
  %%     Host = host()
  %%     Options = [Option]
-@@ -3704,7 +3538,13 @@
+@@ -3719,7 +3561,13 @@
  tree_action(Host, Function, Args) ->
      ?DEBUG("tree_action ~p ~p ~p",[Host,Function,Args]),
      Fun = fun() -> tree_call(Host, Function, Args) end,
  
  %% @doc <p>node plugin call.</p>
  node_call(Type, Function, Args) ->
-@@ -3724,13 +3564,13 @@
+@@ -3739,13 +3587,13 @@
  
  node_action(Host, Type, Function, Args) ->
      ?DEBUG("node_action ~p ~p ~p ~p",[Host,Type,Function,Args]),
                        case tree_call(Host, get_node, [Host, Node]) of
                            N when is_record(N, pubsub_node) ->
                                case Action(N) of
-@@ -3743,8 +3583,14 @@
+@@ -3757,13 +3605,19 @@
+                               Error
                        end
                end, Trans).
+-transaction(Host, Action, Trans) ->
+-    transaction(fun() ->
++transaction_on_nodes(Host, Action, Trans) ->
++    transaction(Host, fun() ->
+                       {result, lists:foldl(Action, [], tree_call(Host, get_nodes, [Host]))}
+               end, Trans).
  
 -transaction(Fun, Trans) ->
 -    case catch mnesia:Trans(Fun) of
        {result, Result} -> {result, Result};
        {error, Error} -> {error, Error};
        {atomic, {result, Result}} -> {result, Result};
-@@ -3752,6 +3598,15 @@
+@@ -3771,6 +3625,15 @@
        {aborted, Reason} ->
            ?ERROR_MSG("transaction return internal error: ~p~n", [{aborted, Reason}]),
            {error, ?ERR_INTERNAL_SERVER_ERROR};
        {'EXIT', Reason} ->
            ?ERROR_MSG("transaction return internal error: ~p~n", [{'EXIT', Reason}]),
            {error, ?ERR_INTERNAL_SERVER_ERROR};
-@@ -3760,6 +3615,17 @@
+@@ -3779,6 +3642,17 @@
            {error, ?ERR_INTERNAL_SERVER_ERROR}
      end.