/*

* Copyright (c) 2008 Nokia Corporation and/or its subsidiary(-ies).

* All rights reserved.

* This component and the accompanying materials are made available

* under the terms of "Eclipse Public License v1.0"

* which accompanies this distribution, and is available

* at the URL "http://www.eclipse.org/legal/epl-v10.html".

*

* Initial Contributors:

* Nokia Corporation - initial contribution.

*

* Contributors:

*

* Description:  Class used by session to handle access control list

 *  Version     : %version: 5 % << Don't touch! Updated by Synergy at check-out.

 *

*/

#ifndef C_CPSECURITYPOLICY_H

#define C_CPSECURITYPOLICY_H

#include <e32base.h>

class CLiwDefaultMap;

/**

 *  Internal class for Security related activities

 *

 *  @since S60 v5.0

 */

NONSHARABLE_CLASS( CCPSecurityPolicy ): public CBase

    {

public:

    enum TACLPolicy 

        {

        ERead,

        EWrite,

        EDelete    

        };

   /**

     * Two-phased constructor.

     */

    static CCPSecurityPolicy* NewL( const RMessage2& aMessage );

    /**

     * Two-phased constructor.

     */

    static CCPSecurityPolicy* NewLC( const RMessage2& aMessage );

    /**

     * Destructor.

     */

    virtual ~CCPSecurityPolicy();

    /**

     * Sets default ACL map and serializes it

     *

     * @param aPolicy target for ACL binary

     */

    void GetDefaultSecurityL( RBuf8& aResult ) const ;

    /**

     * Checks if access for client (iMessage) 

     * should be granted or not

     *

     * @param aBinary serialized ACL map

     * @param aPolicy secururity policy to check

     * @return ETrue if security check is ok, 

     * 	EFalse if not 

     */

    TBool CheckSecurityL( TPtrC8& aBinary , TACLPolicy aPolicy ) const;

    /**

     * Performs actuall security check

     * should be granted or not

     *

     * @param aMap ACL map

     * @return ETrue if security check is ok, 

     * 	EFalse if not 

     */

    TInt DoCheckSecurityL( const CLiwMap* aMap ) const;

    /**

     * Performs security check based on client UIDs

     *

     * @param aList list of uids which have access

     *

     * @return access granted or not

     */

    TBool CheckUids( const TDesC& aList ) const ;

    /**

     * Performs security check based on client Capabilities

     *

     * @param aList list of capabilities which client must have

     *

     * @return access granted or not

     */

    TBool CheckCapabilities( const TDesC& aList ) const;

    /**

     * Exctracts from list next token( UID or Capability )

     *

     * @param aList list as desciptor

     * @param aResult single token extracted from list

     * @param aPos position of the reuired token

     */

    void ExctractNextToken( const TDesC& aList, 

                            TPtrC& aResult , TInt& aPos ) const;

    /**

     * Converts capability given as descriptor to enum

     *

     * @param aCapability descriptor to convert

     *

     * @return Capablity as enum

     */

    TCapability GetCapability( const TDesC& aCapability ) const; 

private:

    /**

     * C++ default constructor.

     */

    CCPSecurityPolicy( const RMessage2& aMessage );

    /**

     * By default Symbian 2nd phase constructor is private.

     */

    void ConstructL();

private:

    // data

    /*

     * Not own.

     * Message from client

     */

    const RMessage2& iMessage;

    };

#endif // C_CPSECURITYPOLICY_H