1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
|
/* -*- Mode: C++; tab-width: 4; indent-tabs-mode: nil; c-basic-offset: 4 -*- */
/*
* This file is part of the LibreOffice project.
*
* This Source Code Form is subject to the terms of the Mozilla Public
* License, v. 2.0. If a copy of the MPL was not distributed with this
* file, You can obtain one at http://mozilla.org/MPL/2.0/.
*
* This file incorporates work covered by the following license notice:
*
* Licensed to the Apache Software Foundation (ASF) under one or more
* contributor license agreements. See the NOTICE file distributed
* with this work for additional information regarding copyright
* ownership. The ASF licenses this file to you under the Apache
* License, Version 2.0 (the "License"); you may not use this file
* except in compliance with the License. You may obtain a copy of
* the License at http://www.apache.org/licenses/LICENSE-2.0 .
*/
#ifndef SFX2_DOCMACROMODE_HXX
#define SFX2_DOCMACROMODE_HXX
#include "sfx2/dllapi.h"
#include <com/sun/star/task/XInteractionHandler.hpp>
#include <com/sun/star/embed/XStorage.hpp>
#include <com/sun/star/script/XLibraryContainer.hpp>
#include <com/sun/star/document/XEmbeddedScripts.hpp>
#include <boost/shared_ptr.hpp>
//........................................................................
namespace sfx2
{
//........................................................................
//====================================================================
//= IMacroDocumentAccess
//====================================================================
/** provides access to several settings of a document, which are needed by ->DocumentMacroMode
to properly determine the current macro execution mode of this document
*/
class SAL_NO_VTABLE IMacroDocumentAccess
{
public:
/** retrieves the current MacroExecutionMode.
Usually, this is initialized from the media descriptor used to load the document,
respectively the one passed into the document's XModel::attachResource call.
If no such mode was passed there, document implementations should return
MacroExecMode::NEVER_EXECUTE.
@see ::com::sun::star::document::MediaDescriptor::MacroExecutionMode
@see ::com::sun::star::frame::XComponentLoader::loadComponentFromURL
@see ::com::sun::star::frame::XModel::attachResource
@see setCurrentMacroExecMode
@todo
Effectively, this is the MacroExecutionMode of the MediaDescriptor of
the document. Thus, this setting could be obtained from the XModel
directly. We should introduce a getDocumentModel method here, which
can be used for this and other purposes.
*/
virtual sal_Int16
getCurrentMacroExecMode() const = 0;
/** sets the MacroExecutionMode of the document, as calculated by the DocumentMacroMode
class.
Effectively, the existence of this method means that the responsibility
to store the current macro execution mode is not with the DocumentMacroMode
instance, but with the document instance itself.
Usually, a document implementation will simply put the macro execution mode
into its media descriptor, as returned by XModel::getArgs.
@see ::com::sun::star::document::MediaDescriptor::MacroExecutionMode
@see ::com::sun::star::frame::XComponentLoader::loadComponentFromURL
@see ::com::sun::star::frame::XModel::attachResource
see getCurrentMacroExecMode
*/
virtual sal_Bool
setCurrentMacroExecMode( sal_uInt16 ) = 0;
/** returns the origin of the document
This usually is the document's location, or, if the document has been
newly created from a template, then the location of the template. Location
here means the complete path of the document, including the file name.
@todo
This probably can also be obtained from the XModel, by calling getURL
or getLocation. If both are empty, then we need an UNO way to obtain
the URL of the underlying template document - if any. If we have this,
we could replace this method with a newly introduced method
getDocumentModel and some internal code.
*/
virtual OUString
getDocumentLocation() const = 0;
/** returns a zip-storage based on the last commited version of the document,
for readonly access
The storage is intended to be used for signing. An implementation is
allowed to return <NULL/> here if and only if the document
does not support signing the script storages.
@todo
UNOize this, too. Once we have a getDocumentModel, we should be able to
obtain the "last commit" storage via UNO API, provided it's an
XStorageBasedDocument.
*/
virtual ::com::sun::star::uno::Reference< ::com::sun::star::embed::XStorage >
getZipStorageToSign() = 0;
/** checks whether the document's storage contains sub storages with macros or scripts
A default implementation of this method will simply cann DocumentMacroMode::storageHasMacros
with the document's root storage. However, there might be document types where this
isn't sufficient (e.g. database documents which contain sub documents which can also
contain macro/script storages).
*/
virtual sal_Bool
documentStorageHasMacros() const = 0;
/** provides access to the XEmbeddedScripts interface of the document
Implementations are allowed to return <NULL/> here if and only if they
do not (yet) support embedding scripts.
@todo
can also be replaced with a call to the (to be introduced) getDocumentModel
method, and a queryInterface.
*/
virtual ::com::sun::star::uno::Reference< ::com::sun::star::document::XEmbeddedScripts >
getEmbeddedDocumentScripts() const = 0;
/** returns the state of the signatures for the scripts embedded in the document
Note: On the medium run, the signature handling of a document should be outsourced
into a dedicated class, instead of being hard-wired into the SfxObjectShell. This
class could then be used outside the SfxObjectShell (e.g. in Base documents), too.
When this happens, this method here becomes should be replaced by a method at this
new class.
@seealso <sfx2/signaturestate.hxx>
*/
virtual sal_Int16
getScriptingSignatureState() = 0;
/** allows to detect whether there is a trusted scripting signature
Note: On the medium run, the signature handling of a document should be outsourced
into a dedicated class, instead of being hard-wired into the SfxObjectShell. This
class could then be used outside the SfxObjectShell (e.g. in Base documents), too.
When this happens, this method here should be replaced by a method at this
new class.
@seealso <sfx2/signaturestate.hxx>
*/
virtual sal_Bool
hasTrustedScriptingSignature( sal_Bool bAllowUIToAddAuthor ) = 0;
/** shows a warning that the document's signature is broken
Here, a similar note applies as to getScriptingSignatureState: This method doesn't
really belong here. It's just there because SfxObjectShell_Impl::bSignatureErrorIsShown
is not accessible where the method is called.
So, once the signature handling has been oursourced from SfxObjectShell/_Impl, so it
is re-usable in non-SFX contexts as well, this method here is also unneeded, probably.
@param _rxInteraction
the interaction handler to use for showing the warning. It is exactly the same
as passed to DocumentMacroMode::adjustMacroMode, so it is <NULL/> if and
only if the instance passed to that method was <NULL/>.
*/
virtual void
showBrokenSignatureWarning(
const ::com::sun::star::uno::Reference< ::com::sun::star::task::XInteractionHandler >& _rxInteraction
) const = 0;
protected:
~IMacroDocumentAccess() {}
};
//====================================================================
//= DocumentMacroMode
//====================================================================
struct DocumentMacroMode_Data;
/** encapsulates handling the macro mode of a document
@see com::sun::star::document::MacroExecMode
*/
class SFX2_DLLPUBLIC DocumentMacroMode
{
public:
/** creates an instance
@param _rDocumentAccess
access to the document which this instance works for. Must live as long as the
DocumentMacroMode instance lives, at least
*/
DocumentMacroMode( IMacroDocumentAccess& _rDocumentAccess );
~DocumentMacroMode();
/** allows macro execution in the document
Effectively, the macro mode is set to MacroExecMode::ALWAYS_EXECUTE_NO_WARN.
@return
<TRUE/>, always
*/
sal_Bool allowMacroExecution();
/** disallows macro execution in the document
Effectively, the macro mode is set to MacroExecMode::NEVER_EXECUTE.
@return
<TRUE/>, always
*/
sal_Bool disallowMacroExecution();
/** checks whether the document allows executing contained macros.
The method transforms the current macro execution mode into either
ALWAYS_EXECUTE_NO_WARN or NEVER_EXECUTE, depending on the current value,
possible configuration settings, and possible user interaction.
@param _rxInteraction
A handler for interactions which might become necessary.
This includes
<ul><li>Asking the user for confirmation for macro execution.</li>
<li>Telling the user that macro execution is disabled.</li>
</ul>
If the user needs to be asked for macro execution confirmation, and if
this parameter is <NULL/>, the most defensive assumptions will be made,
effectively disabling macro execution.
@return
<TRUE/> if and only if macro execution in this document is allowed.
*/
sal_Bool adjustMacroMode(
const ::com::sun::star::uno::Reference< ::com::sun::star::task::XInteractionHandler >& _rxInteraction
);
/** determines whether macro execution is disallowed
There's a number of reasons why macro execution could be disallowed:
<ul><li>Somebody called ->disallowMacroExecution</li>
<li>Macro execution is disabled globally, via the security options</li>
<li>Macro execution mode was not defined initially, and the user denied
executing macros for this particular document.</li>
</ul>
Note that if this method returns <FALSE/>, then subsequent calls of
->adjustMacroMode can still return <FALSE/>.
That is, if the current macro execution mode for the document is not yet known
(and inparticular <em>not</em> MacroExecMode::NEVER_EXECUTE), then ->isMacroExecutionDisallowed
will return <FALSE/>.
However, a subsequent call to ->adjustMacroMode can result in the user
denying macro execution, in which ->adjustMacroMode will return <FALSE/>,
and the next call to isMacroExecutionDisallowed will return <TRUE/>.
*/
sal_Bool isMacroExecutionDisallowed() const;
/** determines whether the document actually has a macros library
Effectively, this method checks the Basic library container (as returned by
IMacroDocumentAccess::getEmbeddedDocumentScripts().getBasicLibraries) for
content.
*/
sal_Bool hasMacroLibrary() const;
/** determines whether the given document storage has sub storages containing scripts
or macros.
Effectively, the method checks for the presence of a sub-storage name "Scripts" (where
BeanShell-/JavaScript-/Python-Scripts are stored, and a sub storage named "Basic" (where
Basic scripts are stored).
*/
static sal_Bool
storageHasMacros( const ::com::sun::star::uno::Reference< ::com::sun::star::embed::XStorage >& _rxStorage );
static sal_Bool containerHasBasicMacros( const ::com::sun::star::uno::Reference< ::com::sun::star::script::XLibraryContainer >& xContainter );
/** checks the macro execution mode while loading the document.
This must be called when the loading is effectively finished, but before any macro action
happened.
The method will disallow macro execution for this document if it is disabled
globally (SvtSecurityOptions::IsMacroDisabled). Otherwise, it will check whether
the document contains a macro storage or macro libraries. If so, it will
properly calculate the MacroExecutionMode by calling adjustMacroMode.
If the document doesn't contain macros, yet, then the macro execution for this
document will be allowed (again: unless disabled globally), since in this case
macros which later are newly created by the user should be allowed, of course.
@return
<TRUE/> if and only if macro execution is allowed in the document
@see isMacroExecutionDisallowed
@see IMacroDocumentAccess::documentStorageHasMacros
@see hasMacroLibrary
@see IMacroDocumentAccess::checkForBrokenScriptingSignatures
*/
sal_Bool
checkMacrosOnLoading(
const ::com::sun::star::uno::Reference< ::com::sun::star::task::XInteractionHandler >& _rxInteraction
);
private:
::boost::shared_ptr< DocumentMacroMode_Data > m_pData;
};
//........................................................................
} // namespace sfx2
//........................................................................
#endif // SFX2_DOCMACROMODE_HXX
/* vim:set shiftwidth=4 softtabstop=4 expandtab: */
|