# Copyright (C) 2005-2011 Canonical Ltd
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA


"""Tests for bzr setting permissions.

Files which are created underneath .bzr/ should inherit its permissions.
So if the directory is group writable, the files and subdirs should be as well.

In the future, when we have Repository/Branch/Checkout information, the
permissions should be inherited individually, rather than all be the same.
"""

# TODO: jam 20051215 There are no tests for ftp yet, because we have no ftp server
# TODO: jam 20051215 Currently the default behavior for 'bzr branch' is just
#                    defined by the local umask. This isn't terrible, is it
#                    the truly desired behavior?

import os
import sys

from breezy import urlutils
from breezy.branch import Branch
from breezy.controldir import ControlDir
from breezy.tests import TestCaseWithTransport, TestSkipped
from breezy.tests.test_sftp_transport import TestCaseWithSFTPServer
from breezy.workingtree import WorkingTree


def chmod_r(base, file_mode, dir_mode):
    """Recursively chmod from a base directory"""
    os.chmod(base, dir_mode)
    for root, dirs, files in os.walk(base):
        for d in dirs:
            p = os.path.join(root, d)
            os.chmod(p, dir_mode)
        for f in files:
            p = os.path.join(root, f)
            os.chmod(p, file_mode)


def check_mode_r(test, base, file_mode, dir_mode, include_base=True):
    """Check that all permissions match

    :param test: The TestCase being run
    :param base: The path to the root directory to check
    :param file_mode: The mode for all files
    :param dir_mode: The mode for all directories
    :param include_base: If false, only check the subdirectories
    """
    t = test.get_transport()
    if include_base:
        test.assertTransportMode(t, base, dir_mode)
    for root, dirs, files in os.walk(base):
        for d in dirs:
            p = "/".join([urlutils.quote(x) for x in root.split("/\\") + [d]])
            test.assertTransportMode(t, p, dir_mode)
        for f in files:
            p = os.path.join(root, f)
            p = "/".join([urlutils.quote(x) for x in root.split("/\\") + [f]])
            test.assertTransportMode(t, p, file_mode)


class TestPermissions(TestCaseWithTransport):
    def test_new_files(self):
        if sys.platform == "win32":
            raise TestSkipped("chmod has no effect on win32")

        t = self.make_branch_and_tree(".")
        b = t.branch
        with open("a", "wb") as f:
            f.write(b"foo\n")
        # ensure check_mode_r works with capital-letter file-ids like TREE_ROOT
        t.add("a", ids=b"CAPS-ID")
        t.commit("foo")

        chmod_r(".bzr", 0o644, 0o755)
        check_mode_r(self, ".bzr", 0o644, 0o755)

        # although we are modifying the filesystem
        # underneath the objects, they are not locked, and thus it must
        # be safe for most operations. But here we want to observe a
        # mode change in the control bits, which current do not refresh
        # when a new lock is taken out.
        t = WorkingTree.open(".")
        b = t.branch
        self.assertEqualMode(0o755, b.control_files._dir_mode)
        self.assertEqualMode(0o644, b.control_files._file_mode)
        self.assertEqualMode(0o755, b.controldir._get_dir_mode())
        self.assertEqualMode(0o644, b.controldir._get_file_mode())

        # Modifying a file shouldn't break the permissions
        with open("a", "wb") as f:
            f.write(b"foo2\n")
        t.commit("foo2")
        # The mode should be maintained after commit
        check_mode_r(self, ".bzr", 0o644, 0o755)

        # Adding a new file should maintain the permissions
        with open("b", "wb") as f:
            f.write(b"new b\n")
        t.add("b")
        t.commit("new b")
        check_mode_r(self, ".bzr", 0o644, 0o755)

        # Recursively update the modes of all files
        chmod_r(".bzr", 0o664, 0o775)
        check_mode_r(self, ".bzr", 0o664, 0o775)
        t = WorkingTree.open(".")
        b = t.branch
        self.assertEqualMode(0o775, b.control_files._dir_mode)
        self.assertEqualMode(0o664, b.control_files._file_mode)
        self.assertEqualMode(0o775, b.controldir._get_dir_mode())
        self.assertEqualMode(0o664, b.controldir._get_file_mode())

        with open("a", "wb") as f:
            f.write(b"foo3\n")
        t.commit("foo3")
        check_mode_r(self, ".bzr", 0o664, 0o775)

        with open("c", "wb") as f:
            f.write(b"new c\n")
        t.add("c")
        t.commit("new c")
        check_mode_r(self, ".bzr", 0o664, 0o775)

    def test_new_files_group_sticky_bit(self):
        if sys.platform == "win32":
            raise TestSkipped("chmod has no effect on win32")
        elif sys.platform == "darwin" or "freebsd" in sys.platform:
            # FreeBSD-based platforms create temp dirs with the 'wheel' group,
            # which users are not likely to be in, and this prevents us from
            # setting the sgid bit
            os.chown(self.test_dir, os.getuid(), os.getgid())

        t = self.make_branch_and_tree(".")
        b = t.branch

        # Test the group sticky bit
        # Recursively update the modes of all files
        chmod_r(".bzr", 0o664, 0o2775)
        check_mode_r(self, ".bzr", 0o664, 0o2775)
        t = WorkingTree.open(".")
        b = t.branch
        self.assertEqualMode(0o2775, b.control_files._dir_mode)
        self.assertEqualMode(0o664, b.control_files._file_mode)
        self.assertEqualMode(0o2775, b.controldir._get_dir_mode())
        self.assertEqualMode(0o664, b.controldir._get_file_mode())

        with open("a", "wb") as f:
            f.write(b"foo4\n")
        t.commit("foo4")
        check_mode_r(self, ".bzr", 0o664, 0o2775)

        with open("d", "wb") as f:
            f.write(b"new d\n")
        t.add("d")
        t.commit("new d")
        check_mode_r(self, ".bzr", 0o664, 0o2775)


class TestSftpPermissions(TestCaseWithSFTPServer):
    def test_new_files(self):
        if sys.platform == "win32":
            raise TestSkipped("chmod has no effect on win32")
        # Though it would be nice to test that SFTP to a server
        # which does support chmod has the right effect

        # bodge around for stubsftpserver not letting use connect
        # more than once
        _t = self.get_transport()

        os.mkdir("local")
        t_local = self.make_branch_and_tree("local")
        b_local = t_local.branch
        with open("local/a", "wb") as f:
            f.write(b"foo\n")
        t_local.add("a")
        t_local.commit("foo")

        # Delete them because we are modifying the filesystem underneath them
        chmod_r("local/.bzr", 0o644, 0o755)
        check_mode_r(self, "local/.bzr", 0o644, 0o755)

        t = WorkingTree.open("local")
        b_local = t.branch
        self.assertEqualMode(0o755, b_local.control_files._dir_mode)
        self.assertEqualMode(0o644, b_local.control_files._file_mode)
        self.assertEqualMode(0o755, b_local.controldir._get_dir_mode())
        self.assertEqualMode(0o644, b_local.controldir._get_file_mode())

        os.mkdir("sftp")
        sftp_url = self.get_url("sftp")
        b_sftp = ControlDir.create_branch_and_repo(sftp_url)

        b_sftp.pull(b_local)
        del b_sftp
        chmod_r("sftp/.bzr", 0o644, 0o755)
        check_mode_r(self, "sftp/.bzr", 0o644, 0o755)

        b_sftp = Branch.open(sftp_url)
        self.assertEqualMode(0o755, b_sftp.control_files._dir_mode)
        self.assertEqualMode(0o644, b_sftp.control_files._file_mode)
        self.assertEqualMode(0o755, b_sftp.controldir._get_dir_mode())
        self.assertEqualMode(0o644, b_sftp.controldir._get_file_mode())

        with open("local/a", "wb") as f:
            f.write(b"foo2\n")
        t_local.commit("foo2")
        b_sftp.pull(b_local)
        # The mode should be maintained after commit
        check_mode_r(self, "sftp/.bzr", 0o644, 0o755)

        with open("local/b", "wb") as f:
            f.write(b"new b\n")
        t_local.add("b")
        t_local.commit("new b")
        b_sftp.pull(b_local)
        check_mode_r(self, "sftp/.bzr", 0o644, 0o755)

        del b_sftp
        # Recursively update the modes of all files
        chmod_r("sftp/.bzr", 0o664, 0o775)
        check_mode_r(self, "sftp/.bzr", 0o664, 0o775)

        b_sftp = Branch.open(sftp_url)
        self.assertEqualMode(0o775, b_sftp.control_files._dir_mode)
        self.assertEqualMode(0o664, b_sftp.control_files._file_mode)
        self.assertEqualMode(0o775, b_sftp.controldir._get_dir_mode())
        self.assertEqualMode(0o664, b_sftp.controldir._get_file_mode())

        with open("local/a", "wb") as f:
            f.write(b"foo3\n")
        t_local.commit("foo3")
        b_sftp.pull(b_local)
        check_mode_r(self, "sftp/.bzr", 0o664, 0o775)

        with open("local/c", "wb") as f:
            f.write(b"new c\n")
        t_local.add("c")
        t_local.commit("new c")
        b_sftp.pull(b_local)
        check_mode_r(self, "sftp/.bzr", 0o664, 0o775)

    def test_sftp_server_modes(self):
        if sys.platform == "win32":
            raise TestSkipped("chmod has no effect on win32")

        umask = 0o022
        original_umask = os.umask(umask)

        try:
            t = self.get_transport()
            # Direct access should be masked by umask
            with t._sftp_open_exclusive("a", mode=0o666) as f:
                f.write(b"foo\n")
            self.assertTransportMode(t, "a", 0o666 & ~umask)

            # but Transport overrides umask
            t.put_bytes("b", b"txt", mode=0o666)
            self.assertTransportMode(t, "b", 0o666)

            t._get_sftp().mkdir("c", mode=0o777)
            self.assertTransportMode(t, "c", 0o777 & ~umask)

            t.mkdir("d", mode=0o777)
            self.assertTransportMode(t, "d", 0o777)
        finally:
            os.umask(original_umask)
