/*
* Copyright (c) 2008 Nokia Corporation and/or its subsidiary(-ies).
* All rights reserved.
* This component and the accompanying materials are made available
* under the terms of "Eclipse Public License v1.0"
* which accompanies this distribution, and is available
* at the URL "http://www.eclipse.org/legal/epl-v10.html".
*
* Initial Contributors:
* Nokia Corporation - initial contribution.
*
* Contributors:
*
* Description:
 *
*/


#ifndef CSTSACCESSCONTROL_H
#define CSTSACCESSCONTROL_H

//  INCLUDES
#include <e32base.h>
#include "stsapduconstants.h"   //for TPinApduType

namespace java
{
namespace satsa
{

class CSTSPKCS15Reader;
class CSTSAce;
class CSTSAuthType;
class CSTSMidletInfo;

// CLASS DECLARATION

/**
 *  Handels the security and access logic of SATSA-APDU.
 *  Uses ACF information and PIN related information found in the card's
 *  PKCS#15 structure and checks security and access related information
 *  when asked.
 */
NONSHARABLE_CLASS(CSTSAccessControl): public CBase
{

public: // Constructors and destructor


    static CSTSAccessControl* NewL(CSTSMidletInfo* aMidletInfo);

    virtual ~CSTSAccessControl();

public:

    // Reads Access Control related files from the smart card.
    void ReadFilesL();

    /**
     * Checks is current J2ME application domain allowed to use
     * selected application in the card.
     * @return ETrue if domain is allowed to use application, else EFalse
     */
    TBool IsAllowedDomain();

    /**
     * Checks is the gived apdu allowed to be sent to card application.
     * @param aMidletApduHeader APDU header part, which will be checked
     * @return ETrue if apdu is allowed, EFalse if not
     */
    TBool IsAllowedApduL(const TDesC8& aMidletApduHeader);

    /**
     * Chekcs is the gived PIN method supported in the card application.
     * @return ETrue if method is allowed to use, EFalse if not
     */
    TBool IsAllowedPinMethod();

    /**
     * Gets recommended PIN header for the gived PIN method if there is any
     * @param aPinID Id of the PIN
     * @param aPinApduType Which PIN header is tried to get
     * @return Pin header if found or KNullDesC8() if not found
     */
    const TDesC8& GetPinHeaderL(TInt aPinID, TPinApduType aPinApduType);

    /**
     * Gets PIN attributes which can be used for creating proper PIN UI
     * @param aPinID Id of the PIN
     * @return Reference to CSTSAuthType object, contains PIN information.
     */
    const CSTSAuthType& GetPinAttributesL(TInt aPinID);

    /**
     * Gets token label which can be used for creating proper PIN UI
     * @return Reference to descriptor, contains token label.
     */
    const TDesC& TokenLabelL();

    // Sets card application AID
    void SetAIDL(const TDesC8& aAID);

    // Closes connection to PKCS15 application if it is still open
    void Close();

    /**
     * Checks change disabled, unblock disabled and disable allowed PIN
     * flags depending on which PIN apdu type is used and leaves if
     * flag informs that operation is disabled or not allowed to do.
     * @param aPinApduType Which PIN header is tried to get
     */
    void CheckPinFlagsL(TPinApduType aPinApduType);

private:

    CSTSAccessControl(CSTSMidletInfo* aMidletInfo);

    void ConstructL();

    /**
     * Finds correct authType of gived PinId. Saves found authType
     * to member variable. Leaves, if correct authType will not found.
     * @return Reference to descriptor, contains token label.
     */
    void FindAuthTypeL(TInt aPinID);

    /**
     * Checks is gived ace valid for current Domain, RootId or EndEntityId.
     * @param aAce Ace entry which will be used in comparison.
     * @return True if ace was proper, otherwice false
     */
    TBool IsProperAce(const CSTSAce* aAce) const;

private:

    // PKCS15 structure reader, owned
    CSTSPKCS15Reader* iPKCS15Reader;
    CSTSMidletInfo* iMidletInfo; //not owned

    // information of principals, permissions and userAuthentications
    CArrayPtrFlat< CSTSAce>* iAces;

    // contains PIN related information, owned
    CSTSAuthType* iAuthType;
    CArrayPtrFlat< CSTSAuthType>* iAuthTypes;

    // buffer for pin header, owned
    HBufC8* iApduHeader;

};

} // namespace satsa
} // namespace java
#endif // CSTSACCESSCONTROL_H
// End of File