fix owners cache and fix unsubscribe permissions (EJAB-840)

SVN Revision: 1797

diff --git a/ChangeLog b/ChangeLog
index ed215105aae0646be21dfda580707dd72cc1fe95..7ff49b0860bbe13d9efe027cbb286d0666f4f586 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,9 @@
+2009-01-11  Christophe Romain <christophe.romain@process-one.net>
+
+       * src/mod_pubsub/mod_pubsub.erl: fix owners cache and fix unsubscribe
+       permissions (thanks to Andy Skelton)(EJAB-840)
+       * src/mod_pubsub/node_default.erl: Likewise
+
 2009-01-10  Christophe Romain <christophe.romain@process-one.net>
 
        * src/mod_pubsub/node_default.erl: fix unsubscription of full jid

diff --git a/src/mod_pubsub/mod_pubsub.erl b/src/mod_pubsub/mod_pubsub.erl
index cdfa9b5edb2eae494cbf5e99044d929f59e42441..bec830f8534b310aea3ef7a35685296d9b11819d 100644 (file)
--- a/src/mod_pubsub/mod_pubsub.erl
+++ b/src/mod_pubsub/mod_pubsub.erl
@@ -1899,19 +1899,34 @@ set_affiliations(Host, Node, From, EntitiesEls) ->
        error ->
            {error, ?ERR_BAD_REQUEST};
        _ ->
-           Action = fun(#pubsub_node{type = Type, owners = Owners}) ->
-                            case lists:member(Owner, Owners) of
-                                true ->
-                                    lists:foreach(
-                                      fun({JID, Affiliation}) ->
-                                              node_call(
-                                                Type, set_affiliation,
-                                                [Host, Node, JID, Affiliation])
-                                      end, Entities),
-                                    {result, []};
-                                _ ->
-                                    {error, ?ERR_FORBIDDEN}
-                            end
+           Action = fun(#pubsub_node{type = Type, owners = Owners}=N) ->
+                       case lists:member(Owner, Owners) of
+                           true ->
+                               lists:foreach(
+                                   fun({JID, Affiliation}) ->
+                                       node_call(Type, set_affiliation, [Host, Node, JID, Affiliation]),
+                                       case Affiliation of
+                                           owner ->
+                                               NewOwner = jlib:jid_tolower(jlib:jid_remove_resource(JID)),
+                                               NewOwners = [NewOwner|Owners],
+                                               tree_call(Host, set_node, [N#pubsub_node{owners = NewOwners}]);
+                                           none ->
+                                               OldOwner = jlib:jid_tolower(jlib:jid_remove_resource(JID)),
+                                               case lists:member(OldOwner, Owners) of
+                                                   true ->
+                                                       NewOwners = Owners--[OldOwner],
+                                                       tree_call(Host, set_node, [N#pubsub_node{owners = NewOwners}]);
+                                                   _ ->
+                                                       ok
+                                               end;
+                                           _ ->
+                                               ok
+                                       end
+                                   end, Entities),
+                               {result, []};
+                           _ ->
+                               {error, ?ERR_FORBIDDEN}
+                       end
                     end,
            transaction(Host, Node, Action, sync_dirty)
     end.

diff --git a/src/mod_pubsub/node_default.erl b/src/mod_pubsub/node_default.erl
index 9583b34a02c6a3f2234eeb0b33efe886bfa63a5c..3300b57803f102f59c1d8b1f4197e061b6e78374 100644 (file)
--- a/src/mod_pubsub/node_default.erl
+++ b/src/mod_pubsub/node_default.erl
@@ -350,14 +350,19 @@ subscribe_node(Host, Node, Sender, Subscriber, AccessModel,
 unsubscribe_node(Host, Node, Sender, Subscriber, _SubId) ->
     SubKey = jlib:jid_tolower(Subscriber),
     GenKey = jlib:jid_remove_resource(SubKey),
-    Authorized = (jlib:jid_tolower(jlib:jid_remove_resource(Sender)) == GenKey),
+    SenderKey = jlib:jid_tolower(jlib:jid_remove_resource(Sender)),
     GenState = get_state(Host, Node, GenKey),
     SubState = case SubKey of
        GenKey -> GenState;
        _ -> get_state(Host, Node, SubKey)
        end,
-    Affiliation = GenState#pubsub_state.affiliation,
-    Subscription = SubState#pubsub_state.subscription,
+    Authorized = case SenderKey of
+       GenKey ->
+           true;
+       _ ->
+           SenderState = get_state(Host, Node, SenderKey),
+           SenderState#pubsub_state.affiliation == owner
+       end,
     if
        %% Entity did not specify SubID
        %%SubID == "", ?? ->
@@ -366,10 +371,10 @@ unsubscribe_node(Host, Node, Sender, Subscriber, _SubId) ->
        %%InvalidSubID ->
        %%      {error, ?ERR_EXTENDED(?ERR_NOT_ACCEPTABLE, "invalid-subid")};
        %% Requesting entity is not a subscriber
-       Subscription == none ->
+       SubState#pubsub_state.subscription == none ->
            {error, ?ERR_EXTENDED(?ERR_UNEXPECTED_REQUEST, "not-subscribed")};
        %% Requesting entity is prohibited from unsubscribing entity
-       (not Authorized) and (Affiliation =/= owner) ->
+       not Authorized ->
            {error, ?ERR_FORBIDDEN};
        %% Was just subscriber, remove the record
        SubState#pubsub_state.affiliation == none ->
@@ -580,7 +585,12 @@ set_affiliation(Host, Node, Owner, Affiliation) ->
     SubKey = jlib:jid_tolower(Owner),
     GenKey = jlib:jid_remove_resource(SubKey),
     GenState = get_state(Host, Node, GenKey),
-    set_state(GenState#pubsub_state{affiliation = Affiliation}),
+    case {Affiliation, GenState#pubsub_state.subscription} of
+       {none, none} ->
+           del_state(GenState#pubsub_state.stateid);
+       _ ->
+           set_state(GenState#pubsub_state{affiliation = Affiliation})
+    end,
     ok.
 
 %% @spec (Host, Owner) -> [{Node,Subscription}]
@@ -624,7 +634,12 @@ get_subscription(Host, Node, Owner) ->
 set_subscription(Host, Node, Owner, Subscription) ->
     SubKey = jlib:jid_tolower(Owner),
     SubState = get_state(Host, Node, SubKey),
-    set_state(SubState#pubsub_state{subscription = Subscription}),
+    case {Subscription, SubState#pubsub_state.affiliation} of
+       {none, none} ->
+           del_state(SubState#pubsub_state.stateid);
+       _ ->
+           set_state(SubState#pubsub_state{subscription = Subscription})
+    end,
     ok.
 
 %% @spec (Host, Node) -> [States] | []
@@ -704,7 +719,7 @@ get_items(Host, Node, JID, AccessModel, PresenceSubscription, RosterGroup, _SubI
        %%InvalidSubID ->
            %% Entity is subscribed but specifies an invalid subscription ID
            %{error, ?ERR_EXTENDED(?ERR_NOT_ACCEPTABLE, "invalid-subid")};
-       Affiliation == outcast ->
+       GenState#pubsub_state.affiliation == outcast ->
            %% Requesting entity is blocked
            {error, ?ERR_FORBIDDEN};
        (AccessModel == presence) and (not PresenceSubscription) ->
@@ -752,7 +767,7 @@ get_item(Host, Node, ItemId, JID, AccessModel, PresenceSubscription, RosterGroup
        %%InvalidSubID ->
            %% Entity is subscribed but specifies an invalid subscription ID
            %{error, ?ERR_EXTENDED(?ERR_NOT_ACCEPTABLE, "invalid-subid")};
-       Affiliation == outcast ->
+       GenState#pubsub_state.affiliation == outcast ->
            %% Requesting entity is blocked
            {error, ?ERR_FORBIDDEN};
        (AccessModel == presence) and (not PresenceSubscription) ->