Sometimes my mind drifts away and forgets that I live in a world where I have

to write everything in two languages, and now have to take special care that
things written in one of those languages works properly in a wholly separate
and somewhat limited deployment environment. Ah such sweet forgetting.


git-svn-id: svn+ssh://src.earth.threerings.net/narya/trunk@5119 542714f4-19e9-0310-aa3c-eee0fc999fb1

src/as/com/threerings/presents/data/ClientObject.as

@@ -57,6 +57,19 @@ public class ClientObject extends DObject
         return "(" + getOid() + ")";
     }
 
+    /**
+     * Checks whether or not this client has the specified permission.
+     *
+     * @return null if the user has access, a fully-qualified translatable message string
+     * indicating the reason for denial of access.
+     *
+     * @see PermissionPolicy
+     */
+    public function checkAccess (perm :Permission, context :Object = null) :String
+    {
+        return _permPolicy.checkAccess(this, perm, context);
+    }
+
     // AUTO-GENERATED: METHODS START
     public function addToReceivers (elem :DSet_Entry) :void
     {
@@ -91,6 +104,9 @@ public class ClientObject extends DObject
     {
         super.readObject(ins);
         receivers = (ins.readObject() as DSet);
+        _permPolicy = (ins.readObject() as PermissionPolicy);
     }
+
+    protected var _permPolicy :PermissionPolicy;
 }
 }

src/as/com/threerings/presents/data/Permission.as

@@ -0,0 +1,30 @@
+//
+// $Id$
+//
+// Narya library - tools for developing networked games
+// Copyright (C) 2002-2008 Three Rings Design, Inc., All Rights Reserved
+// http://www.threerings.net/code/narya/
+//
+// This library is free software; you can redistribute it and/or modify it
+// under the terms of the GNU Lesser General Public License as published
+// by the Free Software Foundation; either version 2.1 of the License, or
+// (at your option) any later version.
+//
+// This library is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+// Lesser General Public License for more details.
+//
+// You should have received a copy of the GNU Lesser General Public
+// License along with this library; if not, write to the Free Software
+// Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
+
+package com.threerings.presents.data {
+
+/**
+ * A value class used by ClientObject.checkAccess to do fine-grained access control.
+ */
+public class Permission
+{
+}
+}

src/as/com/threerings/presents/data/PermissionPolicy.as

@@ -0,0 +1,59 @@
+//
+// $Id$
+//
+// Narya library - tools for developing networked games
+// Copyright (C) 2002-2008 Three Rings Design, Inc., All Rights Reserved
+// http://www.threerings.net/code/narya/
+//
+// This library is free software; you can redistribute it and/or modify it
+// under the terms of the GNU Lesser General Public License as published
+// by the Free Software Foundation; either version 2.1 of the License, or
+// (at your option) any later version.
+//
+// This library is distributed in the hope that it will be useful,
+// but WITHOUT ANY WARRANTY; without even the implied warranty of
+// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+// Lesser General Public License for more details.
+//
+// You should have received a copy of the GNU Lesser General Public
+// License along with this library; if not, write to the Free Software
+// Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
+
+package com.threerings.presents.data {
+
+import com.threerings.io.ObjectInputStream;
+import com.threerings.io.ObjectOutputStream;
+import com.threerings.io.Streamable;
+
+/**
+ * Encapsulates a fine-grained permissions policy. The default policy is to deny access to
+ * everything, systems using fine-grained permissions should create a custom policy and provide it
+ * at client resolution time via the ClientResolver.
+ */
+public class PermissionPolicy
+    implements Streamable
+{
+    /**
+     * Returns null if the specified client has the specified permission, an error code explaining
+     * the lack of access if they do not. {@link InvocationCodes#ACCESS_DENIED} should be returned
+     * if no more specific explanation is available.
+     */
+    public function checkAccess (clobj :ClientObject, perm :Permission, context :Object) :String
+    {
+        // by default, you can't do it!
+        return InvocationCodes.ACCESS_DENIED;
+    }
+
+    // from interface Streamable
+    public function writeObject (out :ObjectOutputStream) :void
+    {
+        // nothing needed
+    }
+
+    // from interface Streamable
+    public function readObject (ins :ObjectInputStream) :void
+    {
+        // nothing needed
+    }
+}
+}