Esempio n. 1
0
        internal Permission GetTargetPermission(PermissionSet permissionSet)
        {
            Permission result = null;

            switch (this.MailboxFolderUserId.UserType)
            {
            case MailboxFolderUserId.MailboxFolderUserType.Default:
                return(permissionSet.DefaultPermission);

            case MailboxFolderUserId.MailboxFolderUserType.Anonymous:
                return(permissionSet.AnonymousPermission);

            case MailboxFolderUserId.MailboxFolderUserType.Internal:
            case MailboxFolderUserId.MailboxFolderUserType.External:
            {
                PermissionSecurityPrincipal securityPrincipal = this.MailboxFolderUserId.ToSecurityPrincipal();
                return(permissionSet.GetEntry(securityPrincipal));
            }
            }
            foreach (Permission permission in permissionSet)
            {
                if (this.MailboxFolderUserId.Equals(permission.Principal))
                {
                    result = permission;
                    break;
                }
            }
            return(result);
        }
Esempio n. 2
0
        private void RemovePermissions(CalendarFolderPermissionSet permissions, PermissionSet fbPermissions)
        {
            List <ADRecipient> list = new List <ADRecipient>(this.policyMembersToRemovePermission.Count + this.delegatesToRemovePermission.Count);

            foreach (string legacyExchangeDN in this.policyMembersToRemovePermission)
            {
                list.Add(base.TenantGlobalCatalogSession.FindByLegacyExchangeDN(legacyExchangeDN));
            }
            foreach (ADObjectId entryId in this.delegatesToRemovePermission)
            {
                list.Add(base.TenantGlobalCatalogSession.Read(entryId));
            }
            foreach (ADRecipient adrecipient in list)
            {
                if (adrecipient != null && adrecipient.IsValidSecurityPrincipal)
                {
                    PermissionSecurityPrincipal securityPrincipal = new PermissionSecurityPrincipal(adrecipient);
                    CalendarFolderPermission    entry             = permissions.GetEntry(securityPrincipal);
                    bool flag  = this.delegatesToRemovePermission.Contains(adrecipient.Id);
                    bool flag2 = this.policyMembersToRemovePermission.Contains(adrecipient.LegacyExchangeDN);
                    if (entry != null)
                    {
                        if (flag)
                        {
                            if (!this.newPolicyMembers.Contains(adrecipient.LegacyExchangeDN))
                            {
                                permissions.RemoveEntry(securityPrincipal);
                            }
                            else
                            {
                                entry.PermissionLevel = PermissionLevel.None;
                            }
                        }
                        if (flag2 && entry.PermissionLevel != PermissionLevel.Editor)
                        {
                            entry.FreeBusyAccess = FreeBusyAccess.None;
                            if (entry.PermissionLevel == PermissionLevel.None)
                            {
                                permissions.RemoveEntry(securityPrincipal);
                            }
                        }
                    }
                    if (flag)
                    {
                        Permission entry2 = fbPermissions.GetEntry(securityPrincipal);
                        if (entry2 != null)
                        {
                            fbPermissions.RemoveEntry(securityPrincipal);
                        }
                    }
                }
            }
        }
        internal override bool InternalProcessPermissions(Folder folder)
        {
            MemberRights  memberRights  = (MemberRights)MailboxFolderAccessRight.CalculateMemberRights(this.AccessRights, folder.ClassName == "IPF.Appointment");
            PermissionSet permissionSet = folder.GetPermissionSet();
            Permission    permission    = null;

            try
            {
                if (base.MailboxFolderUserId.UserType == MailboxFolderUserId.MailboxFolderUserType.Default)
                {
                    if (permissionSet.DefaultPermission != null && permissionSet.DefaultPermission.MemberRights != MemberRights.None)
                    {
                        throw new UserAlreadyExistsInPermissionEntryException(base.MailboxFolderUserId.ToString());
                    }
                    permissionSet.SetDefaultPermission(memberRights);
                    permission = permissionSet.DefaultPermission;
                }
                else if (base.MailboxFolderUserId.UserType == MailboxFolderUserId.MailboxFolderUserType.Anonymous)
                {
                    if (permissionSet.AnonymousPermission != null && permissionSet.AnonymousPermission.MemberRights != MemberRights.None)
                    {
                        throw new UserAlreadyExistsInPermissionEntryException(base.MailboxFolderUserId.ToString());
                    }
                    permissionSet.SetAnonymousPermission(memberRights);
                    permission = permissionSet.AnonymousPermission;
                }
                else
                {
                    PermissionSecurityPrincipal securityPrincipal = base.MailboxFolderUserId.ToSecurityPrincipal();
                    Permission entry = permissionSet.GetEntry(securityPrincipal);
                    if (entry != null)
                    {
                        throw new UserAlreadyExistsInPermissionEntryException(base.MailboxFolderUserId.ToString());
                    }
                    permission = permissionSet.AddEntry(securityPrincipal, memberRights);
                }
            }
            catch (ArgumentOutOfRangeException exception)
            {
                base.WriteError(exception, (ErrorCategory)1003, this.Identity);
                return(false);
            }
            base.WriteObject(MailboxFolderPermission.FromXsoPermission(folder.DisplayName, permission, this.ResolvedObjectId));
            return(true);
        }
Esempio n. 4
0
        public static bool ModifyPermission(PermissionSet permissionSet, PermissionSecurityPrincipal permissionSecurityPrincipal, MemberRights memberRights)
        {
            bool result = false;

            if (permissionSecurityPrincipal.Type == PermissionSecurityPrincipal.SecurityPrincipalType.SpecialPrincipal && permissionSecurityPrincipal.SpecialType == PermissionSecurityPrincipal.SpecialPrincipalType.Default)
            {
                GroupMailboxPermissionHandler.Tracer.TraceDebug <PermissionSecurityPrincipal.SpecialPrincipalType, MemberRights>(0L, "Modifying permissions for permissionSecurityPrincipal {0} with rights {1}", PermissionSecurityPrincipal.SpecialPrincipalType.Default, memberRights);
                Permission permission = permissionSet.DefaultPermission;
                if (permission != null && permission.MemberRights != memberRights)
                {
                    permissionSet.SetDefaultPermission(memberRights);
                    result = true;
                }
            }
            else
            {
                GroupMailboxPermissionHandler.Tracer.TraceDebug <string, MemberRights>(0L, "Modifying permissions for permissionSecurityPrincipal {0} with rights {1}", (permissionSecurityPrincipal.Type == PermissionSecurityPrincipal.SecurityPrincipalType.ExternalUserPrincipal) ? permissionSecurityPrincipal.ExternalUser.ExternalId : string.Empty, memberRights);
                Permission permission = permissionSet.GetEntry(permissionSecurityPrincipal);
                if (permission == null && memberRights != MemberRights.None)
                {
                    permission = permissionSet.AddEntry(permissionSecurityPrincipal, PermissionLevel.None);
                    permission.MemberRights = memberRights;
                    result = true;
                }
                else if (permission != null && memberRights == MemberRights.None)
                {
                    permissionSet.RemoveEntry(permissionSecurityPrincipal);
                    result = true;
                }
                else if (permission != null && permission.MemberRights != memberRights)
                {
                    permission.MemberRights = memberRights;
                    result = true;
                }
            }
            return(result);
        }