// Copyright (c) 2004-2009 Nokia Corporation and/or its subsidiary(-ies).

// All rights reserved.

// This component and the accompanying materials are made available

// under the terms of "Eclipse Public License v1.0"

// which accompanies this distribution, and is available

// at the URL "http://www.eclipse.org/legal/epl-v10.html".

//

// Initial Contributors:

// Nokia Corporation - initial contribution.

//

// Contributors:

//

// Description:

// DBMS security policy - testing new APIs.

// This test app has "None" capabilities,

// The UID policy file is 11335579.spd.

// The test uses C:TESTDB.DB secure shared database, which has tables A, B and C, each of them

// with at least one record.

// Please, ensure that t_dbenvcreate test is executed before t_dbplatsec<N>/t_dbplatsecperf tests!

// Please, ensure that t_dbenvdestroy test is executed after t_dbplatsec<N>/t_dbplatsecperf tests!

// 

//

#include <e32test.h>

#include <d32dbms.h>

#include "t_dbplatsecutl.h"

const TUid KSecureDbUid = {0x11335579};

_LIT(KSecure,	"SECURE");

_LIT(KDbName,	"C:TestDB.DB");

_LIT(KTblNameA,	"A");

_LIT(KTblNameB,	"B");

_LIT(KTblNameC,	"C");

static RTest 				TheTest(_L("t_dbplatsec5: DBMS platform security testing - 5"));

static RDbs 				TheDbs;

static RDbNamedDatabase 	TheDb;

static RDbTable 			TheTbl;

static RDbView 				TheView;

TDBSCUtils 	TheDbscUtils(TheTest, NULL);

/**

@SYMTestCaseID SYSLIB-DBMS-CT-0018

@SYMTestCaseDesc Open table test.

				 This test app has no capabilities and it is restricted to be able to

				 open tables B and C in read-only mode.

@SYMTestPriority High

@SYMTestActions  Open table test.

@SYMTestExpectedResults The test must not fail.

@SYMREQ REQ2429

                 DBMS shall provide an API to apply security policies to database tables.

*/

static void Test1L()

	{

	TheTest.Printf(_L("An attempt to open tables in update/insert mode\n"));

	//The test must fail, because the test app cannot satisfy table A, B, C, policy W.

	TInt err = TheTbl.Open(TheDb, KTblNameA);

	TEST2(err, KErrPermissionDenied);

	err = TheTbl.Open(TheDb, KTblNameB);

	TEST2(err, KErrPermissionDenied);

	err = TheTbl.Open(TheDb, KTblNameC);

	TEST2(err, KErrPermissionDenied);

	TheTest.Printf(_L("An attempt to open tables in read-only mode\n"));

	//The test must pass for table B & C, but the test app cannot satisfy table A, policy R.

	err = TheTbl.Open(TheDb, KTblNameA, RDbRowSet::EReadOnly);

	TEST2(err, KErrPermissionDenied);

	err = TheTbl.Open(TheDb, KTblNameB, RDbRowSet::EReadOnly);

	TEST2(err, KErrNone);

	TheTbl.Close();

	err = TheTbl.Open(TheDb, KTblNameC, RDbRowSet::EReadOnly);

	TEST2(err, KErrNone);

	TheTbl.Close();

	TheTest.Printf(_L("An attempt to read tables\n"));

	//The test must pass for table B & C, but the test app cannot satisfy table A, policy R.

	err = TheView.Prepare(TheDb, TDbQuery(_L("SELECT * FROM A")));

	TEST2(err, KErrPermissionDenied);

	err = TheView.Prepare(TheDb, TDbQuery(_L("SELECT * FROM B")));

	TEST2(err, KErrNone);

	TInt cnt = TheView.CountL();

	TEST(cnt > 0);

	TheView.Close();

	err = TheView.Prepare(TheDb, TDbQuery(_L("SELECT * FROM C")));

	TEST2(err, KErrNone);

	cnt = TheView.CountL();

	TEST(cnt > 0);

	TheView.Close();

	}

/**

@SYMTestCaseID			SYSLIB-DBMS-CT-3407

@SYMTestCaseDesc		Test for defect DEF103023 - DBMS requires ReadDeviceData and WriteDeviceData capability to read from the db.

 						The current test application has no capabilities at all.

 						"C:TestDB.DB" database is a secure shared database with:

 							- no "READ" polycy (no restrictions apply to the database read operations);

 							- "WRITE" policy with "WriteUserData" capability defined;

 							- "SCHEMA" policy with "NetworkServices" capability defined;

 							- table C has no defined securoty policy, so the database security policy will be used;

 						The current test application should be able to:

 							- begin/commit/rollback a "read-only" transaction;

 						But should fail if:

 							- begin a transaction and try to modify the database within the transaction;

 						This test function asserts the test cases described above.

@SYMTestPriority		High

@SYMTestActions			Test for defect DEF103023 - DBMS requires ReadDeviceData and WriteDeviceData capability to read from the db.

@SYMTestExpectedResults Test must not fail

@SYMDEF					DEF103023

*/

void DEF103023L()

	{

	TheTest.Printf(_L("Begin a transaction. Read-only operations tested\n"));

	TInt err = TheDb.Begin();

	TEST2(err, KErrNone);

	TheTest.Printf(_L("Perform some read-only operations inside the transaction\n"));

	err = TheView.Prepare(TheDb, _L("SELECT * FROM C"));

	TEST2(err, KErrNone);

	err = TheView.EvaluateAll();

	TEST2(err, KErrNone);

	TInt cnt = TheView.CountL();

	TEST(cnt > 0);

	TBool rc = TheView.FirstL();

	TEST(rc);

	TheView.GetL();

	TInt val = TheView.ColInt32(1);

	rc = TheView.LastL();

	TEST(rc);

	rc = TheView.NextL();

	TEST(!rc);

	rc = TheView.PreviousL();

	TEST(rc);

	TheView.BeginningL();

	TheView.EndL();

	TheView.Close();

	TheTest.Printf(_L("Commit a transaction\n"));

	err = TheDb.Commit();

	TEST2(err, KErrNone);

	//

	TheTest.Printf(_L("Begin a transaction. Read-only operations tested\n"));

	err = TheDb.Begin();

	TEST2(err, KErrNone);

	err = TheView.Prepare(TheDb, _L("SELECT * FROM C"));

	TEST2(err, KErrNone);

	err = TheView.EvaluateAll();

	TEST2(err, KErrNone);

	cnt = TheView.CountL();

	TEST(cnt > 0);

	TheView.Close();

	TheTest.Printf(_L("Rollback a transaction\n"));

	TheDb.Rollback();

	//

	TheTest.Printf(_L("Begin a transaction. Tested operations violate the database security\n"));

	err = TheDb.Begin();

	TEST2(err, KErrNone);

	err = TheView.Prepare(TheDb, _L("SELECT * FROM C"));

	TEST2(err, KErrNone);

	err = TheView.EvaluateAll();

	TEST2(err, KErrNone);

	rc = TheView.FirstL();

	TEST(rc);

	TheView.GetL();

	TheTest.Printf(_L("An attempt to update a record within the transaction\n"));

	TRAP(err, TheView.UpdateL());

	TEST2(err, KErrPermissionDenied);

	TheTest.Printf(_L("An attempt to delete a record within the transaction\n"));

	TRAP(err, TheView.DeleteL());

	TEST2(err, KErrPermissionDenied);

	TheTest.Printf(_L("An attempt to insert a record within the transaction\n"));

	TRAP(err, TheView.InsertL());

	TEST2(err, KErrPermissionDenied);

	TheView.Close();

	TheTest.Printf(_L("An attempt to modify the database schema within the transaction\n"));

	err = TheDb.Execute(_L("CREATE TABLE C2(Id INTEGER, Z INTEGER)"));

	TEST2(err, KErrPermissionDenied);

	TheTest.Printf(_L("An attempt to execute an INSERT statement within the transaction\n"));

	err = TheDb.Execute(_L("INSERT INTO C VALUES(100)"));

	TEST2(err, KErrPermissionDenied);

	TheTest.Printf(_L("An attempt to modify the database within the transaction using RDbUpdate\n"));

	RDbUpdate update;

	err = update.Execute(TheDb, _L("INSERT INTO C VALUES(200)"));

	TEST2(err, KErrPermissionDenied);

	update.Close();

	TheTest.Printf(_L("Rollback a transaction\n"));

	TheDb.Rollback();

	}

void DoTestL()

	{

	TheTest.Start(_L(" @SYMTestCaseID:SYSLIB-DBMS-CT-0018 An app with \"None\" capabilities set "));

	Test1L();

	TheTest.Next(_L(" @SYMTestCaseID:SYSLIB-DBMS-CT-3407 DEF103023-DBMS requires ReadDeviceData and WriteDeviceData capability to read from the db "));

	DEF103023L();

	}

TInt E32Main()

    {

	__UHEAP_MARK;

	CTrapCleanup* tc = CTrapCleanup::New();

	TEST(tc != NULL);

	TInt err = TheDbs.Connect();

	TEST2(err, KErrNone);

	TBuf<32> format;

	TheTest.Printf(_L("Open database\n"));

	format.Copy(KSecure);

	format.Append(KSecureDbUid.Name());

	err = TheDb.Open(TheDbs, KDbName, format);

	TEST2(err, KErrNone);

	TRAP(err, DoTestL());

	TEST2(err, KErrNone);

	TheView.Close();

	TheTbl.Close();

	TheDb.Close();

	TheDbs.Close();

	TheTest.End();

	TheTest.Close();

	delete tc;

	__UHEAP_MARKEND;

	User::Heap().Check();

	return KErrNone;

    }