Skip to main content
Module

x/deno/src/permissions.rs

A modern runtime for JavaScript and TypeScript.
Go to Latest
File
// Copyright 2018-2019 the Deno authors. All rights reserved. MIT license.use atty;
use crate::flags::DenoFlags;
use crate::errors::permission_denied;use crate::errors::DenoResult;use std::io;use std::sync::atomic::{AtomicBool, Ordering};
#[cfg_attr(feature = "cargo-clippy", allow(stutter))]#[derive(Debug, Default)]pub struct DenoPermissions { pub allow_write: AtomicBool, pub allow_net: AtomicBool, pub allow_env: AtomicBool, pub allow_run: AtomicBool,}
impl DenoPermissions { pub fn new(flags: &DenoFlags) -> Self { Self { allow_write: AtomicBool::new(flags.allow_write), allow_env: AtomicBool::new(flags.allow_env), allow_net: AtomicBool::new(flags.allow_net), allow_run: AtomicBool::new(flags.allow_run), } }
pub fn check_run(&self) -> DenoResult<()> { if self.allow_run.load(Ordering::SeqCst) { return Ok(()); }; // TODO get location (where access occurred) let r = permission_prompt("Deno requests access to run a subprocess."); if r.is_ok() { self.allow_run.store(true, Ordering::SeqCst); } r }
pub fn check_write(&self, filename: &str) -> DenoResult<()> { if self.allow_write.load(Ordering::SeqCst) { return Ok(()); }; // TODO get location (where access occurred) let r = permission_prompt(&format!( "Deno requests write access to \"{}\".", filename ));; if r.is_ok() { self.allow_write.store(true, Ordering::SeqCst); } r }
pub fn check_net(&self, domain_name: &str) -> DenoResult<()> { if self.allow_net.load(Ordering::SeqCst) { return Ok(()); }; // TODO get location (where access occurred) let r = permission_prompt(&format!( "Deno requests network access to \"{}\".", domain_name )); if r.is_ok() { self.allow_net.store(true, Ordering::SeqCst); } r }
pub fn check_env(&self) -> DenoResult<()> { if self.allow_env.load(Ordering::SeqCst) { return Ok(()); }; // TODO get location (where access occurred) let r = permission_prompt(&"Deno requests access to environment variables."); if r.is_ok() { self.allow_env.store(true, Ordering::SeqCst); } r }}
fn permission_prompt(message: &str) -> DenoResult<()> { if !atty::is(atty::Stream::Stdin) || !atty::is(atty::Stream::Stderr) { return Err(permission_denied()); }; // print to stderr so that if deno is > to a file this is still displayed. eprint!("{} Grant? [yN] ", message); let mut input = String::new(); let stdin = io::stdin(); let _nread = stdin.read_line(&mut input)?; let ch = input.chars().next().unwrap(); let is_yes = ch == 'y' || ch == 'Y'; if is_yes { Ok(()) } else { Err(permission_denied()) }}