fix(filetransfer): implement user permissions for file download and upload in client.

client/src/components/files.vue

@@ -9,7 +9,7 @@
         <i :class="fileIcon(item)" />
         <p class="file-name" :title="item.name">{{ item.name }}</p>
         <p class="file-size">{{ fileSize(item.size) }}</p>
-        <i v-if="item.type !== 'dir'" class="fas fa-download download" @click="download(item)" />
+        <i v-if="item.type !== 'dir' && canDownload" class="fas fa-download download" @click="download(item)" />
       </div>
     </div>
     <div class="transfer-area">
@@ -73,6 +73,7 @@
         </div>
       </div>
       <div
+        v-if="canUpload"
         class="upload-area"
         :class="{ 'upload-area-drag': uploadAreaDrag }"
         @dragover.prevent="uploadAreaDrag = true"
@@ -281,6 +282,14 @@
   export default class extends Vue {
     public uploadAreaDrag: boolean = false
 
+    get canDownload() {
+      return this.$accessor.user.admin || this.$accessor.files.userDownload
+    }
+
+    get canUpload() {
+      return this.$accessor.user.admin || this.$accessor.files.userUpload
+    }
+
     get cwd() {
       return this.$accessor.files.cwd
     }

client/src/components/side.vue

@@ -94,9 +94,19 @@
     },
   })
   export default class extends Vue {
+    get canDownload() {
+      return this.$accessor.user.admin || this.$accessor.files.userDownload
+    }
+
+    get canUpload() {
+      return this.$accessor.user.admin || this.$accessor.files.userUpload
+    }
+
     get filetransferAllowed() {
       return (
-        this.$accessor.remote.fileTransfer && (this.$accessor.user.admin || !this.$accessor.isLocked('file_transfer'))
+        this.$accessor.remote.fileTransfer &&
+        (this.$accessor.user.admin || !this.$accessor.isLocked('file_transfer')) &&
+        (this.canDownload || this.canUpload)
       )
     }
 

client/src/neko/index.ts

@@ -361,9 +361,11 @@ export class NekoClient extends BaseClient implements EventEmitter<NekoEvents> {
   /////////////////////////////
   // File Transfer Events
   /////////////////////////////
-  protected [EVENT.FILETRANSFER.LIST]({ cwd, files }: FileTransferListPayload) {
+  protected [EVENT.FILETRANSFER.LIST]({ cwd, user_download, user_upload, files }: FileTransferListPayload) {
     this.$accessor.files.setCwd(cwd)
     this.$accessor.files.setFileList(files)
+    this.$accessor.files.setUserDownload(user_download)
+    this.$accessor.files.setUserUpload(user_upload)
   }
 
   /////////////////////////////

client/src/neko/messages.ts

@@ -204,6 +204,8 @@ export interface FileTransferListMessage extends WebSocketMessage, FileTransferL
 
 export interface FileTransferListPayload {
   cwd: string
+  user_download: boolean
+  user_upload: boolean
   files: FileListItem[]
 }
 

client/src/store/files.ts

@@ -7,6 +7,8 @@ export const state = () => ({
   cwd: '',
   files: [] as FileListItem[],
   transfers: [] as FileTransfer[],
+  userDownload: false,
+  userUpload: false,
 })
 
 export const getters = getterTree(state, {
@@ -22,6 +24,14 @@ export const mutations = mutationTree(state, {
     state.files = files
   },
 
+  _setUserDownload(state, val: boolean) {
+    state.userDownload = val
+  },
+
+  _setUserUpload(state, val: boolean) {
+    state.userUpload = val
+  },
+
   _addTransfer(state, transfer: FileTransfer) {
     state.transfers = [...state.transfers, transfer]
   },
@@ -42,6 +52,14 @@ export const actions = actionTree(
       accessor.files._setFileList(files)
     },
 
+    setUserDownload(store, val: boolean) {
+      accessor.files._setUserDownload(val)
+    },
+
+    setUserUpload(store, val: boolean) {
+      accessor.files._setUserUpload(val)
+    },
+
     addTransfer(store, transfer: FileTransfer) {
       if (transfer.status !== 'pending') {
         return

server/internal/http/legacy/message/messages.go

@@ -111,6 +111,8 @@ type EmoteSend struct {
 type FileTransferList struct {
 	Event        string               `json:"event"`
 	Cwd          string               `json:"cwd"`
+	UserDownload bool                 `json:"user_download"`
+	UserUpload   bool                 `json:"user_upload"`
 	Files        []types.FileListItem `json:"files"`
 }
 

server/internal/http/legacy/wstoclient.go

@@ -609,6 +609,8 @@ func (s *session) wsToClient(msg []byte) error {
 		return s.toClient(&oldMessage.FileTransferList{
 			Event:        oldEvent.FILETRANSFER_LIST,
 			Cwd:          request.RootDir,
+			UserDownload: request.UserDownload,
+			UserUpload:   request.UserUpload,
 			Files:        files,
 		})
 

server/internal/plugins/filetransfer/manager.go

@@ -105,6 +105,8 @@ func (m *Manager) broadcastUpdate() {
 	m.sessions.Broadcast(FILETRANSFER_UPDATE, Message{
 		Enabled:      m.config.Enabled,
 		RootDir:      m.config.RootDir,
+		UserDownload: m.config.UserDownload,
+		UserUpload:   m.config.UserUpload,
 		Files:        fileList,
 	})
 }
@@ -117,6 +119,8 @@ func (m *Manager) sendUpdate(session types.Session) {
 	session.Send(FILETRANSFER_UPDATE, Message{
 		Enabled:      m.config.Enabled,
 		RootDir:      m.config.RootDir,
+		UserDownload: m.config.UserDownload,
+		UserUpload:   m.config.UserUpload,
 		Files:        fileList,
 	})
 }

server/internal/plugins/filetransfer/types.go

@@ -13,6 +13,8 @@ const (
 type Message struct {
 	Enabled      bool   `json:"enabled"`
 	RootDir      string `json:"root_dir"`
+	UserDownload bool   `json:"user_download"`
+	UserUpload   bool   `json:"user_upload"`
 	Files        []Item `json:"files"`
 }