// ----------------------------------------------------------------------
// File: XrdMgmOfsSecurity.hh
// Author: Andreas-Joachim Peters - CERN
// ----------------------------------------------------------------------

/************************************************************************
 * EOS - the CERN Disk Storage System                                   *
 * Copyright (C) 2011 CERN/Switzerland                                  *
 *                                                                      *
 * This program is free software: you can redistribute it and/or modify *
 * it under the terms of the GNU General Public License as published by *
 * the Free Software Foundation, either version 3 of the License, or    *
 * (at your option) any later version.                                  *
 *                                                                      *
 * This program is distributed in the hope that it will be useful,      *
 * but WITHOUT ANY WARRANTY; without even the implied warranty of       *
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the        *
 * GNU General Public License for more details.                         *
 *                                                                      *
 * You should have received a copy of the GNU General Public License    *
 * along with this program.  If not, see <http://www.gnu.org/licenses/>.*
 ************************************************************************/

#ifndef ___EOSMGM_SECURITY_H__
#define ___EOSMGM_SECURITY_H__

#include "XrdAcc/XrdAccAuthorize.hh"

#define AUTHORIZE(usr, env, optype, action, pathp, edata)               \
  if (usr && gOFS->mExtAuthz                                            \
      &&  !gOFS->mExtAuthz->Access(usr, pathp, optype, env))            \
    {gOFS->Emsg(epname, edata, EACCES, action, pathp); return SFS_ERROR;}

#define AUTHORIZE2(usr,edata,opt1,act1,path1,env1,opt2,act2,path2,env2) \
  {AUTHORIZE(usr, env1, opt1, act1, path1, edata);                      \
    AUTHORIZE(usr, env2, opt2, act2, path2, edata);                     \
  }

#define OOIDENTENV(usr, env)                                    \
  if (usr) {if (usr->name) env.Put(SEC_USER, usr->name);        \
    if (usr->host) env.Put(SEC_HOST, usr->host);}
#endif