mediawiki-extensions-AbuseF.../includes/Filter/MutableFilter.php
STran bf28dbce0e Allow variables to be restricted by user right
Some exposed variables (eg. `user_ip`) used in filters are sensitive
and need to only be available to restricted groups of users.

Back-end changes:
- Add `AbuseFilterProtectedVariables` which defines what variables are
  protected by the new right `abusefilter-access-protected-vars`
- Add the concept of a `protected` variable, the use of which will
  denote the entire filter as protected via a flag on `af_hidden`

New UX features:
- Display changes to the protected status of filters on history and diff
  pages
- Check for protected variables and the right to see them in filter
  validation and don't allow a filter to be saved if it uses a variable
  that the user doesn't have access to
- Check for the right to view protected variables before allowing access
  and edits to existing filters that use them

Bug: T364465
Bug: T363906
Change-Id: I828bbb4015e87040f69a8e10c7888273c4f24dd3
2024-06-04 06:54:53 -07:00

183 lines
3.6 KiB
PHP

<?php
namespace MediaWiki\Extension\AbuseFilter\Filter;
use LogicException;
/**
* Value object representing a filter that can be mutated (i.e. provides setters); this representation can
* be used to modify an existing database filter before saving it back to the DB.
*/
class MutableFilter extends Filter {
/**
* Convenience shortcut to get a 'default' filter, using the defaults for the editing interface.
*
* @return self
* @codeCoverageIgnore
*/
public static function newDefault(): self {
return new self(
new Specs(
'',
'',
'',
[],
''
),
new Flags(
true,
false,
Flags::FILTER_PUBLIC,
false
),
[],
new LastEditInfo(
0,
'',
''
)
);
}
/**
* @param Filter $filter
* @return self
*/
public static function newFromParentFilter( Filter $filter ): self {
return new self(
$filter->getSpecs(),
$filter->getFlags(),
// @phan-suppress-next-line PhanTypeMismatchArgumentNullable One is guaranteed to be set
$filter->actions ?? $filter->actionsCallback,
$filter->getLastEditInfo(),
$filter->getID(),
$filter->getHitCount(),
$filter->isThrottled()
);
}
/**
* @param string $rules
*/
public function setRules( string $rules ): void {
$this->specs->setRules( $rules );
}
/**
* @param string $comments
*/
public function setComments( string $comments ): void {
$this->specs->setComments( $comments );
}
/**
* @param string $name
*/
public function setName( string $name ): void {
$this->specs->setName( $name );
}
/**
* @throws LogicException if $actions are already set; use $this->setActions to update names
* @param string[] $actionsNames
*/
public function setActionsNames( array $actionsNames ): void {
if ( $this->actions !== null ) {
throw new LogicException( 'Cannot set actions names with actions already set' );
}
$this->specs->setActionsNames( $actionsNames );
}
/**
* @param string $group
*/
public function setGroup( string $group ): void {
$this->specs->setGroup( $group );
}
/**
* @param bool $enabled
*/
public function setEnabled( bool $enabled ): void {
$this->flags->setEnabled( $enabled );
}
/**
* @param bool $deleted
*/
public function setDeleted( bool $deleted ): void {
$this->flags->setDeleted( $deleted );
}
/**
* @param bool $hidden
*/
public function setHidden( bool $hidden ): void {
$this->flags->setHidden( $hidden );
}
/**
* @param bool $protected
*/
public function setProtected( bool $protected ): void {
$this->flags->setProtected( $protected );
}
/**
* @param bool $global
*/
public function setGlobal( bool $global ): void {
$this->flags->setGlobal( $global );
}
/**
* @note This also updates action names
* @param array[] $actions
*/
public function setActions( array $actions ): void {
parent::setActions( $actions );
}
/**
* @param int $id
*/
public function setUserID( int $id ): void {
$this->lastEditInfo->setUserID( $id );
}
/**
* @param string $name
*/
public function setUserName( string $name ): void {
$this->lastEditInfo->setUserName( $name );
}
/**
* @param string $timestamp
*/
public function setTimestamp( string $timestamp ): void {
$this->lastEditInfo->setTimestamp( $timestamp );
}
/**
* @param int|null $id
*/
public function setID( ?int $id ): void {
$this->id = $id;
}
/**
* @param int $hitCount
*/
public function setHitCount( int $hitCount ): void {
$this->hitCount = $hitCount;
}
/**
* @param bool $throttled
*/
public function setThrottled( bool $throttled ): void {
$this->throttled = $throttled;
}
}