Remove network rating / security level system, add migrations

status/security_level.go

@@ -2,14 +2,50 @@ package status
 
 import "github.com/safing/portbase/config"
 
-type (
-	// SecurityLevelOptionFunc can be called with a minimum security level
-	// and returns whether or not a given security option is enabled or
-	// not.
-	// Use SecurityLevelOption() to get a SecurityLevelOptionFunc for a
-	// specific option.
-	SecurityLevelOptionFunc func(minSecurityLevel uint8) bool
-)
+// MigrateSecurityLevelToBoolean migrates a security level (int) option value to a boolean option value.
+func MigrateSecurityLevelToBoolean(option *config.Option, value any) any {
+	// Check new (target) option type.
+	if option.OptType != config.OptTypeBool {
+		// This migration converts to boolean.
+		// Thus, conversion is not applicable.
+		return value
+	}
+
+	// Convert value to uint8.
+	var nVal uint8
+	switch v := value.(type) {
+	case int:
+		nVal = uint8(v)
+	case int8:
+		nVal = uint8(v)
+	case int16:
+		nVal = uint8(v)
+	case int32:
+		nVal = uint8(v)
+	case int64:
+		nVal = uint8(v)
+	case uint:
+		nVal = uint8(v)
+	case uint8:
+		nVal = v
+	case uint16:
+		nVal = uint8(v)
+	case uint32:
+		nVal = uint8(v)
+	case uint64:
+		nVal = uint8(v)
+	case float32:
+		nVal = uint8(v)
+	case float64:
+		nVal = uint8(v)
+	default:
+		// Input type not compatible.
+		return value
+	}
+
+	// Convert to boolean.
+	return nVal&SecurityLevelNormal > 0
+}
 
 // DisplayHintSecurityLevel is an external option hint for security levels.
 // It's meant to be used as a value for config.DisplayHintAnnotation.
@@ -17,102 +53,8 @@ const DisplayHintSecurityLevel string = "security level"
 
 // Security levels.
 const (
-	SecurityLevelOff     uint8 = 0
-	SecurityLevelNormal  uint8 = 1
-	SecurityLevelHigh    uint8 = 2
-	SecurityLevelExtreme uint8 = 4
-
-	SecurityLevelsNormalAndHigh    uint8 = SecurityLevelNormal | SecurityLevelHigh
-	SecurityLevelsNormalAndExtreme uint8 = SecurityLevelNormal | SecurityLevelExtreme
-	SecurityLevelsHighAndExtreme   uint8 = SecurityLevelHigh | SecurityLevelExtreme
-	SecurityLevelsAll              uint8 = SecurityLevelNormal | SecurityLevelHigh | SecurityLevelExtreme
+	// SecurityLevelOff     uint8 = 0
+	SecurityLevelNormal uint8 = 1
+	// SecurityLevelHigh    uint8 = 2
+	// SecurityLevelExtreme uint8 = 4
 )
-
-// SecurityLevelValues defines all possible security levels.
-var SecurityLevelValues = []config.PossibleValue{
-	{
-		Name:        "Trusted / Home Network",
-		Value:       SecurityLevelsAll,
-		Description: "Setting is always enabled.",
-	},
-	{
-		Name:        "Untrusted / Public Network",
-		Value:       SecurityLevelsHighAndExtreme,
-		Description: "Setting is enabled in untrusted and dangerous networks.",
-	},
-	{
-		Name:        "Danger / Hacked Network",
-		Value:       SecurityLevelExtreme,
-		Description: "Setting is enabled only in dangerous networks.",
-	},
-}
-
-// AllSecurityLevelValues is like SecurityLevelValues but also includes Off.
-var AllSecurityLevelValues = append([]config.PossibleValue{
-	{
-		Name:        "Off",
-		Value:       SecurityLevelOff,
-		Description: "Setting is always disabled.",
-	},
-},
-	SecurityLevelValues...,
-)
-
-// IsValidSecurityLevel returns true if level is a valid,
-// single security level. Level is also invalid if it's a
-// bitmask with more that one security level set.
-func IsValidSecurityLevel(level uint8) bool {
-	return level == SecurityLevelOff ||
-		level == SecurityLevelNormal ||
-		level == SecurityLevelHigh ||
-		level == SecurityLevelExtreme
-}
-
-// IsValidSecurityLevelMask returns true if level is a valid
-// security level mask. It's like IsValidSecurityLevel but
-// also allows bitmask combinations.
-func IsValidSecurityLevelMask(level uint8) bool {
-	return level <= 7
-}
-
-func max(a, b uint8) uint8 {
-	if a > b {
-		return a
-	}
-	return b
-}
-
-// SecurityLevelOption returns a function to check if the option
-// identified by name is active at a given minimum security level.
-// The returned function is safe for concurrent use with configuration
-// updates.
-func SecurityLevelOption(name string) SecurityLevelOptionFunc {
-	activeAtLevel := config.Concurrent.GetAsInt(name, int64(SecurityLevelsAll))
-	return func(minSecurityLevel uint8) bool {
-		return uint8(activeAtLevel())&max(ActiveSecurityLevel(), minSecurityLevel) > 0
-	}
-}
-
-// SecurityLevelString returns the given security level as a string.
-func SecurityLevelString(level uint8) string {
-	switch level {
-	case SecurityLevelOff:
-		return "Off"
-	case SecurityLevelNormal:
-		return "Trusted"
-	case SecurityLevelHigh:
-		return "Untrusted"
-	case SecurityLevelExtreme:
-		return "Danger"
-	case SecurityLevelsNormalAndHigh:
-		return "Trusted and Untrusted"
-	case SecurityLevelsNormalAndExtreme:
-		return "Trusted and Danger"
-	case SecurityLevelsHighAndExtreme:
-		return "Untrusted and Danger"
-	case SecurityLevelsAll:
-		return "Trusted, Untrusted and Danger"
-	default:
-		return "INVALID"
-	}
-}