Import upstream v0.16.22, stripped

Upstream commit: 474dd0229cb20cf513036619781ed97bd8073c3f Enterprise-only files removed or emptied: 63 Enterprise-only snippets removed: 117 in 50 files Dangling module declarations removed: 5 Cargo edits turning enterprise off: 14 Verification: clean Enterprise feature gates left for rebuilt features: 19 in 18 files Produced by tools/fork/strip.py. The full report is in docs/fork/strip-reports/ on main.
2026-09-18 10:21:56 -07:00
commit 7dae9b29fd
1650 changed files with 485521 additions and 0 deletions
@@ -0,0 +1,158 @@
+/*
+ * SPDX-FileCopyrightText: 2020 Stalwart Labs LLC <[email protected]>
+ *
+ * SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-SEL
+ */
+
+use crate::{DavResources, auth::AccessToken};
+use store::roaring::RoaringBitmap;
+use types::acl::Acl;
+use utils::map::bitmap::Bitmap;
+
+impl DavResources {
+    pub fn shared_containers(
+        &self,
+        access_token: &AccessToken,
+        check_acls: impl IntoIterator<Item = Acl>,
+        match_any: bool,
+    ) -> RoaringBitmap {
+        let check_acls = Bitmap::<Acl>::from_iter(check_acls);
+        let mut document_ids = RoaringBitmap::new();
+
+        for resource in &self.resources {
+            if let Some(acls) = resource.acls() {
+                for acl in acls {
+                    if access_token.is_member(acl.account_id) {
+                        let mut grants = acl.grants;
+                        grants.intersection(&check_acls);
+                        if grants == check_acls || (match_any && !grants.is_empty()) {
+                            document_ids.insert(resource.document_id);
+                        }
+                    }
+                }
+            }
+        }
+
+        document_ids
+    }
+
+    pub fn shared_items(
+        &self,
+        access_token: &AccessToken,
+        check_acls: impl IntoIterator<Item = Acl>,
+        match_any: bool,
+    ) -> RoaringBitmap {
+        let shared_containers = self.shared_containers(access_token, check_acls, match_any);
+
+        if !shared_containers.is_empty() {
+            let mut document_ids = RoaringBitmap::new();
+
+            for resource in &self.resources {
+                if !resource.is_container() && shared_containers.contains(resource.document_id) {
+                    document_ids.insert(resource.document_id);
+                }
+            }
+
+            for path in &self.paths {
+                if let Some(parent_id) = path.parent_id
+                    && shared_containers.contains(parent_id)
+                {
+                    document_ids.insert(self.resources[path.resource_idx].document_id);
+                }
+            }
+
+            document_ids
+        } else {
+            shared_containers
+        }
+    }
+
+    pub fn shared_documents(
+        &self,
+        access_token: &AccessToken,
+        check_acls: impl IntoIterator<Item = Acl>,
+        match_any: bool,
+    ) -> RoaringBitmap {
+        let shared_containers = self.shared_containers(access_token, check_acls, match_any);
+        let mut document_ids = shared_containers.clone();
+
+        if !shared_containers.is_empty() {
+            for path in &self.paths {
+                if let Some(parent_id) = path.parent_id
+                    && shared_containers.contains(parent_id)
+                {
+                    document_ids.insert(self.resources[path.resource_idx].document_id);
+                }
+            }
+        }
+
+        document_ids
+    }
+
+    pub fn has_access_to_container(
+        &self,
+        access_token: &AccessToken,
+        document_id: u32,
+        check_acls: impl Into<Bitmap<Acl>>,
+    ) -> bool {
+        let check_acls = check_acls.into();
+
+        for resource in &self.resources {
+            if resource.document_id == document_id
+                && let Some(acls) = resource.acls()
+            {
+                for acl in acls {
+                    if access_token.is_member(acl.account_id) {
+                        let mut grants = acl.grants;
+                        grants.intersection(&check_acls);
+                        return !grants.is_empty();
+                    }
+                }
+                break;
+            }
+        }
+
+        false
+    }
+
+    pub fn container_acl(&self, access_token: &AccessToken, document_id: u32) -> Bitmap<Acl> {
+        let mut account_acls = Bitmap::<Acl>::new();
+
+        for resource in &self.resources {
+            if resource.document_id == document_id
+                && let Some(acls) = resource.acls()
+            {
+                for acl in acls {
+                    if access_token.is_member(acl.account_id) {
+                        account_acls.union(&acl.grants);
+                    }
+                }
+                break;
+            }
+        }
+
+        account_acls
+    }
+
+    pub fn document_ids(&self, is_container: bool) -> impl Iterator<Item = u32> {
+        self.resources.iter().filter_map(move |resource| {
+            if resource.is_container() == is_container {
+                Some(resource.document_id)
+            } else {
+                None
+            }
+        })
+    }
+
+    pub fn has_container_id(&self, id: &u32) -> bool {
+        self.resources
+            .iter()
+            .any(|r| r.document_id == *id && r.is_container())
+    }
+
+    pub fn has_item_id(&self, id: &u32) -> bool {
+        self.resources
+            .iter()
+            .any(|r| r.document_id == *id && !r.is_container())
+    }
+}