Proyectos de Subversion Moodle

<?php

// This file is part of Moodle - http://moodle.org/

//

// Moodle is free software: you can redistribute it and/or modify

// it under the terms of the GNU General Public License as published by

// the Free Software Foundation, either version 3 of the License, or

// (at your option) any later version.

//

// Moodle is distributed in the hope that it will be useful,

// but WITHOUT ANY WARRANTY; without even the implied warranty of

// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the

// GNU General Public License for more details.

//

// You should have received a copy of the GNU General Public License

// along with Moodle.  If not, see <http://www.gnu.org/licenses/>.

/**

 * Infected file report

 *

 * @package    report_infectedfiles

 * @author     Nathan Nguyen <nathannguyen@catalyst-au.net>

 * @copyright  Catalyst IT

 * @license    http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later

 */

namespace report_infectedfiles\privacy;

use core_privacy\local\metadata\collection;

use core_privacy\local\request;

defined('MOODLE_INTERNAL') || die();

/**

 * Infected file report

 *

 * @package    report_infectedfiles

 * @author     Nathan Nguyen <nathannguyen@catalyst-au.net>

 * @copyright  Catalyst IT

 * @license    http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later

 */

class provider implements

        \core_privacy\local\metadata\provider,

        request\plugin\provider,

        request\core_userlist_provider {

    /**

     * This plugin stores the userid of infected users.

     *

     * @param collection $collection the collection object to add data to.

     * @return collection The populated collection.

     */

    public static function get_metadata(collection $collection): collection {

        $collection->add_database_table(

            'infected_files',

            [

                'userid' => 'privacy:metadata:infected_files:userid',

                'filename' => 'privacy:metadata:infected_files:filename',

                'timecreated' => 'privacy:metadata:infected_files:timecreated',

            ],

            'privacy:metadata:infected_files'

        );

        return $collection;

    }

    /**

     * This function gets the contexts containing data for a userid.

     *

     * @param int $userid The userid to get contexts for.

     * @return request\contextlist the context list for the user.

     */

    public static function get_contexts_for_userid(int $userid): request\contextlist {

        $contextlist = new request\contextlist();

        // The system context is the only context where information is stored.

        $contextlist->add_system_context();

        return $contextlist;

    }

    /**

     * This function exports user data on infected files from the contextlist provided.

     *

     * @param request\approved_contextlist $contextlist

     * @return void

     */

    public static function export_user_data(request\approved_contextlist $contextlist) {

        global $DB;

        foreach ($contextlist as $context) {

            // We only export from system context.

            if ($context->contextlevel === CONTEXT_SYSTEM) {

                $userid = $contextlist->get_user()->id;

                $exportdata = [];

                $records = $DB->get_records('infected_files', ['userid' => $userid]);

                foreach ($records as $record) {

                    // Export only the data that does not expose internal information.

                    $data = [];

                    $data['userid'] = $record->userid;

                    $data['timecreated'] = $record->timecreated;

                    $data['filename'] = $record->filename;

                    $exportdata[] = $data;

                }

                // Now export this data in the infected files table as subcontext.

                request\writer::with_context($context)->export_data(

                    [get_string('privacy:metadata:infected_files_subcontext', 'report_infectedfiles')],

                    (object) $exportdata

                );

            }

        }

    }

    /**

     * As this report tracks potential attempted security violations,

     * This data should not be deleted at request. This would allow for an

     * avenue for a malicious user to cover their tracks. This function deliberately

     * does no deletes.

     *

     * @param \context $context the context to delete for.

     * @return void

     */

    public static function delete_data_for_all_users_in_context(\context $context) {

        return;

    }

    /**

     * As this report tracks potential attempted security violations,

     * This data should not be deleted at request. This would allow for an

     * avenue for a malicious user to cover their tracks. This function deliberately

     * does no deletes.

     *

     * @param \core_privacy\local\request\approved_contextlist $contextlist the contextlist to delete for.

     * @return void

     */

    public static function delete_data_for_user(request\approved_contextlist $contextlist) {

        return;

    }

    /**

     * This gets the list of users inside of the provided context. In this case, its only system context

     * which contains users.

     *

     * @param \core_privacy\local\request\userlist $userlist

     * @return void

     */

    public static function get_users_in_context(request\userlist $userlist) {

        $context = $userlist->get_context();

        if ($context->contextlevel === CONTEXT_SYSTEM) {

            // If we are checking system context, we need to get all distinct userids from the table.

            $sql = 'SELECT DISTINCT userid

                      FROM {infected_files}';

            $userlist->add_from_sql('userid', $sql, []);

        }

    }

    /**

     * As this report tracks potential attempted security violations,

     * This data should not be deleted at request. This would allow for an

     * avenue for a malicious user to cover their tracks. This function deliberately

     * does no deletes.

     *

     * @param request\approved_userlist $userlist

     * @return void

     */

    public static function delete_data_for_users(request\approved_userlist $userlist) {

        return;

    }

}