[PolicyKit-gnome] Display a status icon if we have temporary authorizations

[David Zeuthen <davidz src gnome org>]

commit 3a45ab85d0c4d3f6c4952e0418c7fecb3d7b25b8
Author: David Zeuthen <davidz redhat com>
Date:   Mon Jul 20 18:52:02 2009 -0400

    Display a status icon if we have temporary authorizations
    
    Clicking the icon will revoke all temporary authorizations.

 src/main.c |  204 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++--
 1 files changed, 199 insertions(+), 5 deletions(-)
---
diff --git a/src/main.c b/src/main.c
index b8b3091..5970670 100644
--- a/src/main.c
+++ b/src/main.c
@@ -30,6 +30,173 @@
 
 #include "polkitgnomelistener.h"
 
+/* the Authority */
+static PolkitAuthority *authority = NULL;
+
+/* the session we are servicing */
+static PolkitSubject *session = NULL;
+
+/* the current set of temporary authorizations */
+static GList *current_temporary_authorizations = NULL;
+
+static GtkStatusIcon *status_icon = NULL;
+
+static void
+revoke_tmp_authz_cb (GObject      *source_object,
+                     GAsyncResult *res,
+                     gpointer      user_data)
+{
+  GError *error;
+
+  error = NULL;
+  polkit_authority_revoke_temporary_authorizations_finish (POLKIT_AUTHORITY (source_object),
+                                                           res,
+                                                           &error);
+  if (error != NULL)
+    {
+      g_warning ("Error revoking temporary authorizations: %s", error->message);
+      g_error_free (error);
+    }
+}
+
+static void
+revoke_tmp_authz (void)
+{
+  polkit_authority_revoke_temporary_authorizations (authority,
+                                                    session,
+                                                    NULL,
+                                                    revoke_tmp_authz_cb,
+                                                    NULL);
+}
+
+static void
+on_status_icon_activate (GtkStatusIcon *status_icon,
+                         gpointer       user_data)
+{
+  revoke_tmp_authz ();
+}
+
+static void
+on_status_icon_popup_menu (GtkStatusIcon *status_icon,
+                           guint          button,
+                           guint          activate_time,
+                           gpointer       user_data)
+{
+  revoke_tmp_authz ();
+}
+
+static void
+update_temporary_authorization_icon_real (void)
+{
+
+#if 0
+  GList *l;
+  g_debug ("have %d tmp authorizations", g_list_length (current_temporary_authorizations));
+  for (l = current_temporary_authorizations; l != NULL; l = l->next)
+    {
+      PolkitTemporaryAuthorization *authz = POLKIT_TEMPORARY_AUTHORIZATION (l->data);
+
+      g_debug ("have tmp authz for action %s (subject %s) with id %s (obtained %d, expires %d)",
+               polkit_temporary_authorization_get_action_id (authz),
+               polkit_subject_to_string (polkit_temporary_authorization_get_subject (authz)),
+               polkit_temporary_authorization_get_id (authz),
+               (gint) polkit_temporary_authorization_get_time_obtained (authz),
+               (gint) polkit_temporary_authorization_get_time_expires (authz));
+    }
+#endif
+
+  /* TODO:
+   *
+   * - we could do something fancy like displaying a window with the tmp authz
+   *   when the icon is clicked...
+   *
+   * - we could do some work using polkit_subject_exists() to ignore tmp authz
+   *   for subjects that no longer exists.. this is because temporary authorizations
+   *   are only valid for the subject that trigger the authentication dialog.
+   *
+   *   Maybe the authority could do this, would probably involve some polling, but
+   *   it seems cleaner to do this server side.
+   */
+
+  if (current_temporary_authorizations != NULL)
+    {
+      /* show icon */
+      if (status_icon == NULL)
+        {
+          status_icon = gtk_status_icon_new_from_stock (GTK_STOCK_DIALOG_AUTHENTICATION);
+          gtk_status_icon_set_tooltip_text (status_icon,
+                                            _("Click the icon to drop all elevated privileges"));
+          g_signal_connect (status_icon,
+                            "activate",
+                            G_CALLBACK (on_status_icon_activate),
+                            NULL);
+          g_signal_connect (status_icon,
+                            "popup-menu",
+                            G_CALLBACK (on_status_icon_popup_menu),
+                            NULL);
+        }
+    }
+  else
+    {
+      /* hide icon */
+      if (status_icon != NULL)
+        {
+          g_object_unref (status_icon);
+          status_icon = NULL;
+        }
+    }
+}
+
+static void
+enumerate_temporary_authorizations_cb (GObject      *source_object,
+                                       GAsyncResult *res,
+                                       gpointer      user_data)
+{
+  PolkitAuthority *authority = POLKIT_AUTHORITY (source_object);
+  GList *temporary_authorizations;
+  GError *error;
+
+  temporary_authorizations = NULL;
+
+  error = NULL;
+  temporary_authorizations = polkit_authority_enumerate_temporary_authorizations_finish (authority,
+                                                                                         res,
+                                                                                         &error);
+  if (error != NULL)
+    {
+      g_warning ("Error enumerating temporary authorizations: %s", error->message);
+      g_error_free (error);
+      goto out;
+    }
+
+  g_list_foreach (current_temporary_authorizations, (GFunc) g_object_unref, NULL);
+  g_list_free (current_temporary_authorizations);
+
+  current_temporary_authorizations = temporary_authorizations;
+
+  update_temporary_authorization_icon_real ();
+
+ out:
+  ;
+}
+
+static void
+update_temporary_authorization_icon (PolkitAuthority *authority)
+{
+  polkit_authority_enumerate_temporary_authorizations (authority,
+                                                       session,
+                                                       NULL,
+                                                       enumerate_temporary_authorizations_cb,
+                                                       NULL);
+}
+
+static void
+on_authority_changed (PolkitAuthority *authority,
+                      gpointer         user_data)
+{
+  update_temporary_authorization_icon (authority);
+}
+
 int
 main (int argc, char **argv)
 {
@@ -41,21 +208,40 @@ main (int argc, char **argv)
   g_type_init ();
   gtk_init (&argc, &argv);
 
+  loop = NULL;
+  authority = NULL;
+  listener = NULL;
+  session = NULL;
+  ret = 1;
+
   bindtextdomain (GETTEXT_PACKAGE, GNOMELOCALEDIR);
 #if HAVE_BIND_TEXTDOMAIN_CODESET
   bind_textdomain_codeset (GETTEXT_PACKAGE, "UTF-8");
 #endif
   textdomain (GETTEXT_PACKAGE);
 
-  ret = 1;
-
   loop = g_main_loop_new (NULL, FALSE);
 
+  authority = polkit_authority_get ();
+  g_signal_connect (authority,
+                    "changed",
+                    G_CALLBACK (on_authority_changed),
+                    NULL);
+
   listener = polkit_gnome_listener_new ();
 
   error = NULL;
+  session = polkit_unix_session_new_for_process_sync (getpid (), NULL, &error);
+  if (error != NULL)
+    {
+      g_warning ("Unable to determine the session we are in: %s", error->message);
+      g_error_free (error);
+      goto out;
+    }
+
+  error = NULL;
   if (!polkit_agent_register_listener (listener,
-                                       NULL,
+                                       session,
                                        "/org/gnome/PolicyKit1/AuthenticationAgent",
                                        &error))
     {
@@ -64,13 +250,21 @@ main (int argc, char **argv)
       goto out;
     }
 
+  update_temporary_authorization_icon (authority);
+
   g_main_loop_run (loop);
 
   ret = 0;
 
  out:
-  g_object_unref (listener);
-  g_main_loop_unref (loop);
+  if (authority != NULL)
+    g_object_unref (authority);
+  if (session != NULL)
+    g_object_unref (session);
+  if (listener != NULL)
+    g_object_unref (listener);
+  if (loop != NULL)
+    g_main_loop_unref (loop);
 
   return ret;
 }