mfdlabs · mfdlabs-ops · Oct 9, 2024 · Oct 1, 2024 · Oct 1, 2024 · Oct 1, 2024
diff --git a/.editorconfig b/.editorconfig
diff --git a/.gitattributes b/.gitattributes
diff --git a/.github/ISSUE_TEMPLATE/blacklist_appeal.yml b/.github/ISSUE_TEMPLATE/blacklist_appeal.yml
diff --git a/.github/ISSUE_TEMPLATE/bug_report.yml b/.github/ISSUE_TEMPLATE/bug_report.yml
diff --git a/.github/ISSUE_TEMPLATE/config.yml b/.github/ISSUE_TEMPLATE/config.yml
diff --git a/.github/ISSUE_TEMPLATE/feature_request.yml b/.github/ISSUE_TEMPLATE/feature_request.yml
diff --git a/.github/ISSUE_TEMPLATE/security_vulnerabilty.yml b/.github/ISSUE_TEMPLATE/security_vulnerabilty.yml
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
diff --git a/.gitignore b/.gitignore
diff --git a/.gitmodules b/.gitmodules
diff --git a/CODEOWNERS b/CODEOWNERS
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
diff --git a/LICENSE b/LICENSE
diff --git a/README.md b/README.md
diff --git a/SECURITY.md b/SECURITY.md
diff --git a/docs/CNAME b/docs/CNAME
diff --git a/docs/assets/logo.svg b/docs/assets/logo.svg
diff --git a/docs/assets/theme.css b/docs/assets/theme.css
diff --git a/docs/index.md b/docs/index.md
diff --git a/docs/legal/index.md b/docs/legal/index.md
diff --git a/docs/legal/privacy-policy.md b/docs/legal/privacy-policy.md
diff --git a/docs/legal/tos.md b/docs/legal/tos.md
diff --git a/docs/overrides/assets/stylesheets/main.css b/docs/overrides/assets/stylesheets/main.css
diff --git a/docs/overrides/main.html b/docs/overrides/main.html
diff --git a/docs/request-data-deletion.md b/docs/request-data-deletion.md
diff --git a/mkdocs.yml b/mkdocs.yml
diff --git a/proto/grid_bot.proto b/proto/grid_bot.proto
diff --git a/scripts/clean.sh b/scripts/clean.sh
diff --git a/services/Directory.Build.props b/services/Directory.Build.props
diff --git a/services/Directory.Build.targets b/services/Directory.Build.targets
diff --git a/services/grid-bot/.component.yaml b/services/grid-bot/.component.yaml
diff --git a/services/grid-bot/.dockerignore b/services/grid-bot/.dockerignore
diff --git a/services/grid-bot/Dockerfile b/services/grid-bot/Dockerfile
diff --git a/services/grid-bot/README.md b/services/grid-bot/README.md
diff --git a/services/grid-bot/grid-bot-bare.sln b/services/grid-bot/grid-bot-bare.sln
diff --git a/services/grid-bot/grid-bot.sln b/services/grid-bot/grid-bot.sln
diff --git a/services/grid-bot/lib/Directory.Build.props b/services/grid-bot/lib/Directory.Build.props
diff --git a/services/grid-bot/lib/Directory.Build.targets b/services/grid-bot/lib/Directory.Build.targets
diff --git a/services/grid-bot/lib/commands/Attributes/LockDownCommandAttribute.cs b/services/grid-bot/lib/commands/Attributes/LockDownCommandAttribute.cs
@@ -0,0 +1,55 @@
+namespace Grid.Bot.Commands;
+
+using System;
+using System.Threading.Tasks;
+
+using Microsoft.Extensions.DependencyInjection;
+
+using Discord.Commands;
+
+using Utility;
+
+/// <summary>
+/// An attribute only allows the command to be executed within the DMs of
+/// users within the specified bot role, or within the specified guild (if configured).
+/// </summary>
+/// <remarks>
+/// Construct a new instance of <see cref="LockDownCommandAttribute"/>.
+/// </remarks>
+/// <param name="botRole">The <see cref="BotRole"/>.</param>
+public class LockDownCommandAttribute(BotRole botRole = BotRole.Administrator) : PreconditionAttribute
+{
+    private readonly BotRole _botRole = botRole;
+
+    /// <summary>
+    /// The marker to indicate that the command should not respond.
+    /// </summary>
+    public const string MarkerDoNotRespond = "___||DO_NOT_RESPOND||___";
+
+    /// <inheritdoc cref="PreconditionAttribute.CheckPermissionsAsync(ICommandContext, CommandInfo, IServiceProvider)"/>
+    public override Task<PreconditionResult> CheckPermissionsAsync(ICommandContext context, CommandInfo commandInfo, IServiceProvider services)
+    {
+        var commandsSettings = services.GetRequiredService<CommandsSettings>();
+        if (!commandsSettings.EnableLockdownCommands)
+            return Task.FromResult(PreconditionResult.FromSuccess());
+
+        if (context.Guild is not null)
+            return context.Guild.Id == commandsSettings.LockdownGuildId
+                ? Task.FromResult(PreconditionResult.FromSuccess())
+                : Task.FromResult(PreconditionResult.FromError(MarkerDoNotRespond));
+
+        var adminUtility = services.GetRequiredService<IAdminUtility>();
+
+        var isInRole = _botRole switch
+        {
+            BotRole.Privileged => adminUtility.UserIsPrivilaged(context.User),
+            BotRole.Administrator => adminUtility.UserIsPrivilaged(context.User),
+            BotRole.Owner => adminUtility.UserIsOwner(context.User),
+            _ => throw new ArgumentOutOfRangeException(nameof(_botRole), _botRole, null),
+        };
+
+        return isInRole
+            ? Task.FromResult(PreconditionResult.FromSuccess())
+            : Task.FromResult(PreconditionResult.FromError(MarkerDoNotRespond));
+    }
+}
diff --git a/services/grid-bot/lib/commands/Attributes/RequireCommandBotRoleAttribute.cs b/services/grid-bot/lib/commands/Attributes/RequireCommandBotRoleAttribute.cs
@@ -0,0 +1,49 @@
+namespace Grid.Bot.Commands;
+
+using System;
+using System.Threading.Tasks;
+
+using Microsoft.Extensions.DependencyInjection;
+
+using Discord.Commands;
+
+using Utility;
+
+/// <summary>
+/// An attribute that validates if the user has the required bot role.
+/// </summary>
+/// <remarks>
+/// Construct a new instance of <see cref="RequireBotRoleAttribute"/>.
+/// </remarks>
+/// <param name="botRole">The <see cref="Utility.BotRole"/>.</param>
+public class RequireBotRoleAttribute(BotRole botRole = BotRole.Privileged) : PreconditionAttribute
+{
+    /// <summary>
+    /// The role.
+    /// </summary>
+    public BotRole BotRole { get; } = botRole;
+
+    private const string _permissionDeniedText = "You lack permission to execute this command.";
+
+
+    /// <inheritdoc cref="PreconditionAttribute.CheckPermissionsAsync(ICommandContext, CommandInfo, IServiceProvider)"/>
+    public override Task<PreconditionResult> CheckPermissionsAsync(ICommandContext context, CommandInfo commandInfo, IServiceProvider services)
+    {
+        var adminUtility = services.GetRequiredService<IAdminUtility>();
+
+        return BotRole switch
+        {
+            BotRole.Privileged => Task.FromResult(!adminUtility.UserIsPrivilaged(context.User)
+                                ? PreconditionResult.FromError(_permissionDeniedText)
+                                : PreconditionResult.FromSuccess()),
+            BotRole.Administrator => Task.FromResult(!adminUtility.UserIsPrivilaged(context.User)
+                                ? PreconditionResult.FromError(_permissionDeniedText)
+                                : PreconditionResult.FromSuccess()),
+            BotRole.Owner => Task.FromResult(!adminUtility.UserIsOwner(context.User)
+                                ? PreconditionResult.FromError(_permissionDeniedText)
+                                : PreconditionResult.FromSuccess()),
+            _ => throw new ArgumentOutOfRangeException(nameof(BotRole), BotRole, null),
+        };
+
+    }
+}
diff --git a/services/grid-bot/lib/commands/Attributes/RequireInteractionBotRoleAttribute.cs b/services/grid-bot/lib/commands/Attributes/RequireInteractionBotRoleAttribute.cs