9533f4e5ed
Single user mode basically disables WebDAV, OCS and cron execution. Since we heavily rely on WebDAV and OCS also in the web UI it's basically useless. An admin only sees a broken interface and can't even change any settings nor sees any files. Also sharing is not possible. As this is at least the case since Nextcloud 9 and we haven't received any reports for this it seems that this feature is not used at all so I removed it. The encryption commands now rely on the well tested maintenance mode. Signed-off-by: Morris Jobke <hey@morrisjobke.de>
135 lines
4.1 KiB
PHP
135 lines
4.1 KiB
PHP
<?php
|
|
/**
|
|
* @copyright Copyright (c) 2016, ownCloud, Inc.
|
|
*
|
|
* @author Björn Schießle <bjoern@schiessle.org>
|
|
* @author Joas Schilling <coding@schilljs.com>
|
|
*
|
|
* @license AGPL-3.0
|
|
*
|
|
* This code is free software: you can redistribute it and/or modify
|
|
* it under the terms of the GNU Affero General Public License, version 3,
|
|
* as published by the Free Software Foundation.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU Affero General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU Affero General Public License, version 3,
|
|
* along with this program. If not, see <http://www.gnu.org/licenses/>
|
|
*
|
|
*/
|
|
|
|
namespace OC\Core\Command\Encryption;
|
|
|
|
use OCP\App\IAppManager;
|
|
use OCP\Encryption\IManager;
|
|
use OCP\IConfig;
|
|
use Symfony\Component\Console\Command\Command;
|
|
use Symfony\Component\Console\Helper\QuestionHelper;
|
|
use Symfony\Component\Console\Input\InputInterface;
|
|
use Symfony\Component\Console\Output\OutputInterface;
|
|
use Symfony\Component\Console\Question\ConfirmationQuestion;
|
|
|
|
class EncryptAll extends Command {
|
|
|
|
/** @var IManager */
|
|
protected $encryptionManager;
|
|
|
|
/** @var IAppManager */
|
|
protected $appManager;
|
|
|
|
/** @var IConfig */
|
|
protected $config;
|
|
|
|
/** @var QuestionHelper */
|
|
protected $questionHelper;
|
|
|
|
/** @var bool */
|
|
protected $wasTrashbinEnabled;
|
|
|
|
/** @var bool */
|
|
protected $wasMaintenanceModeEnabled;
|
|
|
|
/**
|
|
* @param IManager $encryptionManager
|
|
* @param IAppManager $appManager
|
|
* @param IConfig $config
|
|
* @param QuestionHelper $questionHelper
|
|
*/
|
|
public function __construct(
|
|
IManager $encryptionManager,
|
|
IAppManager $appManager,
|
|
IConfig $config,
|
|
QuestionHelper $questionHelper
|
|
) {
|
|
parent::__construct();
|
|
$this->appManager = $appManager;
|
|
$this->encryptionManager = $encryptionManager;
|
|
$this->config = $config;
|
|
$this->questionHelper = $questionHelper;
|
|
}
|
|
|
|
/**
|
|
* Set maintenance mode and disable the trashbin app
|
|
*/
|
|
protected function forceMaintenanceAndTrashbin() {
|
|
$this->wasTrashbinEnabled = $this->appManager->isEnabledForUser('files_trashbin');
|
|
$this->wasMaintenanceModeEnabled = $this->config->getSystemValue('maintenance', false);
|
|
$this->config->setSystemValue('maintenance', true);
|
|
$this->appManager->disableApp('files_trashbin');
|
|
}
|
|
|
|
/**
|
|
* Reset the maintenance mode and re-enable the trashbin app
|
|
*/
|
|
protected function resetMaintenanceAndTrashbin() {
|
|
$this->config->setSystemValue('maintenance', $this->wasMaintenanceModeEnabled);
|
|
if ($this->wasTrashbinEnabled) {
|
|
$this->appManager->enableApp('files_trashbin');
|
|
}
|
|
}
|
|
|
|
protected function configure() {
|
|
parent::configure();
|
|
|
|
$this->setName('encryption:encrypt-all');
|
|
$this->setDescription('Encrypt all files for all users');
|
|
$this->setHelp(
|
|
'This will encrypt all files for all users. '
|
|
. 'Please make sure that no user access his files during this process!'
|
|
);
|
|
}
|
|
|
|
protected function execute(InputInterface $input, OutputInterface $output) {
|
|
|
|
if ($this->encryptionManager->isEnabled() === false) {
|
|
throw new \Exception('Server side encryption is not enabled');
|
|
}
|
|
|
|
$output->writeln("\n");
|
|
$output->writeln('You are about to start to encrypt all files stored in your ownCloud.');
|
|
$output->writeln('It will depend on the encryption module you use which files get encrypted.');
|
|
$output->writeln('Depending on the number and size of your files this can take some time');
|
|
$output->writeln('Please make sure that no user access his files during this process!');
|
|
$output->writeln('');
|
|
$question = new ConfirmationQuestion('Do you really want to continue? (y/n) ', false);
|
|
if ($this->questionHelper->ask($input, $output, $question)) {
|
|
$this->forceMaintenanceAndTrashbin();
|
|
|
|
try {
|
|
$defaultModule = $this->encryptionManager->getEncryptionModule();
|
|
$defaultModule->encryptAll($input, $output);
|
|
} catch (\Exception $ex) {
|
|
$this->resetMaintenanceAndTrashbin();
|
|
throw $ex;
|
|
}
|
|
|
|
$this->resetMaintenanceAndTrashbin();
|
|
} else {
|
|
$output->writeln('aborted');
|
|
}
|
|
}
|
|
|
|
}
|