[tracker/wip/carlosg/portal: 12/36] libtracker-data: Check graph permissions on graph manipulation syntax

[Carlos Garnacho <carlosg src gnome org>]

commit 5b050524b72cd08bc931ae1c29ce6cd58363deff
Author: Carlos Garnacho <carlosg gnome org>
Date:   Sat Jan 25 13:54:20 2020 +0100

    libtracker-data: Check graph permissions on graph manipulation syntax
    
    Check when handling CREATE/DROP/ADD/MOVE/COPY that the graph can be
    accessed.

 src/libtracker-data/tracker-sparql.c | 40 ++++++++++++++++++++++++++++++++++++
 1 file changed, 40 insertions(+)
---
diff --git a/src/libtracker-data/tracker-sparql.c b/src/libtracker-data/tracker-sparql.c
index c910a8fd0..e9b31fced 100644
--- a/src/libtracker-data/tracker-sparql.c
+++ b/src/libtracker-data/tracker-sparql.c
@@ -3895,6 +3895,14 @@ translate_Drop (TrackerSparql  *sparql,
        }
 
        for (l = graphs; l; l = l->next) {
+               if (!tracker_sparql_graph_is_whitelisted (sparql, l->data)) {
+                       inner_error = g_error_new (TRACKER_SPARQL_ERROR,
+                                                  TRACKER_SPARQL_ERROR_CONSTRAINT,
+                                                  "Graph '%s' disallowed by policy",
+                                                  (const gchar *) l->data);
+                       break;
+               }
+
                if (!tracker_data_manager_drop_graph (sparql->data_manager,
                                                      l->data, &inner_error))
                        break;
@@ -3933,6 +3941,14 @@ translate_Create (TrackerSparql  *sparql,
                goto error;
        }
 
+       if (!tracker_sparql_graph_is_whitelisted (sparql, graph_name)) {
+               inner_error = g_error_new (TRACKER_SPARQL_ERROR,
+                                          TRACKER_SPARQL_ERROR_CONSTRAINT,
+                                          "Graph '%s' disallowed by policy",
+                                          graph_name);
+               goto error;
+       }
+
        if (!tracker_data_manager_create_graph (sparql->data_manager,
                                                graph_name,
                                                &inner_error))
@@ -3981,6 +3997,14 @@ translate_Add (TrackerSparql  *sparql,
                goto error;
        }
 
+       if (!tracker_sparql_graph_is_whitelisted (sparql, destination)) {
+               inner_error = g_error_new (TRACKER_SPARQL_ERROR,
+                                          TRACKER_SPARQL_ERROR_CONSTRAINT,
+                                          "Graph '%s' disallowed by policy",
+                                          destination);
+               goto error;
+       }
+
        if (destination &&
            !tracker_sparql_find_graph (sparql, destination)) {
                if (!tracker_data_manager_create_graph (sparql->data_manager,
@@ -4043,6 +4067,14 @@ translate_Move (TrackerSparql  *sparql,
                goto error;
        }
 
+       if (!tracker_sparql_graph_is_whitelisted (sparql, destination)) {
+               inner_error = g_error_new (TRACKER_SPARQL_ERROR,
+                                          TRACKER_SPARQL_ERROR_CONSTRAINT,
+                                          "Graph '%s' disallowed by policy",
+                                          destination);
+               goto error;
+       }
+
        if (destination &&
            !tracker_sparql_find_graph (sparql, destination)) {
                if (!tracker_data_manager_create_graph (sparql->data_manager,
@@ -4117,6 +4149,14 @@ translate_Copy (TrackerSparql  *sparql,
                goto error;
        }
 
+       if (!tracker_sparql_graph_is_whitelisted (sparql, destination)) {
+               inner_error = g_error_new (TRACKER_SPARQL_ERROR,
+                                          TRACKER_SPARQL_ERROR_CONSTRAINT,
+                                          "Graph '%s' disallowed by policy",
+                                          destination);
+               goto error;
+       }
+
        if (destination &&
            !tracker_sparql_find_graph (sparql, destination)) {
                if (!tracker_data_manager_create_graph (sparql->data_manager,