Implement ACL request fingerprinting and change detection in CResource

Author: MohabCodeX

Server/mods/deathmatch/logic/CResource.AclRequest.cpp

@@ -123,9 +123,6 @@ bool CResource::HasAutoPermissions(CXMLNode* pNodeAclRequest)
 ///////////////////////////////////////////////////////////////
 void CResource::RefreshAutoPermissions(CXMLNode* pNodeAclRequest)
 {
-    // Check if permissions already active
-    if (HasAutoPermissions(pNodeAclRequest))
-        return;
 
     // Ensure group and acl exist
     CAccessControlListGroup* pAutoGroup = g_pGame->GetACLManager()->AddGroup(GetAutoGroupName());
@@ -372,3 +369,53 @@ bool CResource::FindAclRequest(SAclRequest& result)
 
     return pAclRight->GetAttributeValue("pending") != "";
 }
+
+std::string CResource::CalculateACLRequestFingerprint()
+{
+    std::string strPath;
+    if (!GetFilePath("meta.xml", strPath))
+        return "";
+
+    CXMLFile* pMetaFile = g_pServerInterface->GetXML()->CreateXML(strPath.c_str());
+    if (!pMetaFile || !pMetaFile->Parse())
+    {
+        delete pMetaFile;
+        return "";
+    }
+
+    CXMLNode* pRoot = pMetaFile->GetRootNode();
+    if (!pRoot)
+    {
+        delete pMetaFile;
+        return "";
+    }
+
+    std::string strFingerprint;
+    CXMLNode* pNodeAclRequest = pRoot->FindSubNode("aclrequest", 0);
+    
+    if (pNodeAclRequest)
+    {
+        for (uint uiIndex = 0; true; uiIndex++)
+        {
+            CXMLNode* pNodeRight = pNodeAclRequest->FindSubNode("right", uiIndex);
+            if (!pNodeRight)
+                break;
+
+            std::string strName = pNodeRight->GetAttributeValue("name");
+            std::string strAccess = pNodeRight->GetAttributeValue("access");
+            
+            if (!strFingerprint.empty())
+                strFingerprint += ";";
+            strFingerprint += strName + ":" + strAccess;
+        }
+    }
+    
+    delete pMetaFile;
+    return strFingerprint;
+}
+
+bool CResource::HasACLRequestsChanged()
+{
+    std::string strCurrentFingerprint = CalculateACLRequestFingerprint();
+    return strCurrentFingerprint != m_strACLRequestFingerprint;
+}

Server/mods/deathmatch/logic/CResource.cpp

@@ -196,6 +196,8 @@ bool CResource::Load()
             else
                 RemoveAutoPermissions();
 
+            m_strACLRequestFingerprint = CalculateACLRequestFingerprint();
+
             // Find any map sync option
             m_bSyncMapElementData = true;
             m_bSyncMapElementDataDefined = false;
@@ -351,6 +353,7 @@ bool CResource::Unload()
     m_strResourceZip = "";
     m_strResourceCachePath = "";
     m_strResourceDirectoryPath = "";
+    m_strACLRequestFingerprint.clear();
     m_eState = EResourceState::None;
 
     return true;
@@ -402,6 +405,8 @@ CResource::~CResource()
 
 void CResource::TidyUp()
 {
+    RemoveAutoPermissions();
+
     // Close the zipfile stuff
     if (m_zipfile)
         unzClose(m_zipfile);
@@ -678,6 +683,11 @@ bool CResource::HasResourceChanged()
             return true;
     }
 
+    if (HasACLRequestsChanged())
+    {
+        return true;
+    }
+
     return false;
 }
 
@@ -1195,6 +1205,9 @@ bool CResource::Stop(bool bManualStop)
     // Clear the list of players where this resource is running
     std::exchange(m_isRunningForPlayer, {});
 
+    // Remove ACL permissions when stopping
+    RemoveAutoPermissions();
+
     OnResourceStateChange("loaded");
     m_eState = EResourceState::Loaded;
     return true;

Server/mods/deathmatch/logic/CResource.h

@@ -349,6 +349,9 @@ class CResource : public EHS
     void CommitAclRequest(const SAclRequest& request);
     bool FindAclRequest(SAclRequest& request);
 
+    std::string CalculateACLRequestFingerprint();
+    bool        HasACLRequestsChanged();
+
 private:
     bool CheckState();            // if the resource has no Dependents, stop it, if it has, start it. returns true if the resource is started.
     bool ReadIncludedResources(CXMLNode* pRoot);
@@ -450,6 +453,7 @@ class CResource : public EHS
     SString     m_strMinServerReason;
 
     CChecksum m_metaChecksum;            // Checksum of meta.xml last time this was loaded, generated in GenerateChecksums()
+    std::string m_strACLRequestFingerprint;
 
     uint                              m_uiFunctionRightCacheRevision = 0;
     CFastHashMap<lua_CFunction, bool> m_FunctionRightCacheMap;

Server/mods/deathmatch/logic/CResourceManager.cpp

@@ -184,6 +184,14 @@ bool CResourceManager::Refresh(bool bRefreshAll, const SString strJustThisResour
                 // Add the resource
                 Load(!info.bIsDir, info.strAbsPath, info.strName);
             }
+            else if (pResource && pResource->HasResourceChanged())
+            {
+                if (g_pServerInterface->IsRequestingExit())
+                    return false;
+                    
+                // Resource exists but has changed, reload it
+                Load(!info.bIsDir, info.strAbsPath, info.strName);
+            }
         }
     }