ask permissions

apps/remix-ide/src/app/plugins/permission-handler-plugin.tsx

@@ -70,12 +70,12 @@ export class PermissionHandlerPlugin extends Plugin {
      * @param {string} message from the caller plugin to add more details if needed
      * @returns {Promise<boolean>}
      */
-    async askPermission(from: Profile, to: Profile, method: string, message: string) {
+    async askPermission(from: Profile, to: Profile, method: string, message: string, sensitiveCall: boolean) {
         try {
             this.permissions = this._getFromLocal()
             if (!this.permissions[to.name]) this.permissions[to.name] = {}
             if (!this.permissions[to.name][method]) this.permissions[to.name][method] = {}
-            if (!this.permissions[to.name][method][from.name]) return this.openPermission(from, to, method, message)
+            if (!this.permissions[to.name][method][from.name]) return this.openPermission(from, to, method, message, sensitiveCall)
 
             const { allow, hash } = this.permissions[to.name][method][from.name]
             if (!allow) {
@@ -85,20 +85,21 @@ export class PermissionHandlerPlugin extends Plugin {
             }
             return hash === from.hash
                 ? true // Allow
-                : await this.openPermission(from, to, method, message)
+                : await this.openPermission(from, to, method, message, sensitiveCall)
         } catch (err) {
             throw new Error(err)
         }
     }
 
-    async openPermission(from: Profile, to: Profile, method: string, message: string) {
+    async openPermission(from: Profile, to: Profile, method: string, message: string, sensitiveCall: boolean) {
         const remember = this.permissions[to.name][method][from.name]
         const value: PermissionHandlerValue = {
             from,
             to,
             method,
             message,
-            remember
+            remember,
+            sensitiveCall
         }
         const modal: AppModal = {
             id: 'PermissionHandler',

apps/remix-ide/src/remixAppManager.js

@@ -12,6 +12,11 @@ const requiredModules = [ // services + layout views + system views
 
 const dependentModules = ['git', 'hardhat', 'truffle', 'slither'] // module which shouldn't be manually activated (e.g git is activated by remixd)
 
+const sensitiveCalls = {
+  'fileManager': ['writeFile', 'copyFile', 'rename', 'copyDir'],
+  'contentImport': ['resolveAndSave']
+}
+
 export function isNative(name) {
   const nativePlugins = ['vyper', 'workshops', 'debugger', 'remixd', 'menuicons', 'solidity', 'hardhat-provider', 'solidityStaticAnalysis', 'solidityUnitTesting', 'layout', 'notification', 'hardhat-provider', 'ganache-provider']
   return nativePlugins.includes(name) || requiredModules.includes(name)
@@ -65,16 +70,19 @@ export class RemixAppManager extends PluginManager {
   }
 
   async canCall(from, to, method, message) {
+    const isSensitiveCall = sensitiveCalls[to] && sensitiveCalls[to].includes(method)
     // Make sure the caller of this methods is the target plugin
     if (to !== this.currentRequest.from) {
       return false
     }
     // skipping native plugins' requests
-    if (isNative(from)) {
+    if (isNative(from) && !isSensitiveCall) {
       return true
     }
+
+
     // ask the user for permission
-    return await this.call('permissionhandler', 'askPermission', this.profiles[from], this.profiles[to], method, message)
+    return await this.call('permissionhandler', 'askPermission', this.profiles[from], this.profiles[to], method, message, isSensitiveCall)
   }
 
   onPluginActivated(plugin) {

libs/remix-core-plugin/src/lib/compiler-content-imports.ts

@@ -125,7 +125,7 @@ export class CompilerImports extends Plugin {
   async resolveAndSave (url, targetPath) {
     try {
       if (targetPath && this.currentRequest) {
-        const canCall = await this.askUserPermission('writeFile', 'This action will update the path ' + targetPath)
+        const canCall = await this.askUserPermission('resolveAndSave', 'This action will update the path ' + targetPath)
         if (!canCall) throw new Error('No permission to update ' + targetPath)
       }      
       const provider = await this.call('fileManager', 'getProviderOf', url)
@@ -181,7 +181,7 @@ export class CompilerImports extends Plugin {
         }
       }
     } catch (e) {
-      throw new Error(`not found ${url}`)
+      throw new Error(e)
     }
   }
 }

libs/remix-ui/permission-handler/src/interface/index.ts

@@ -5,7 +5,8 @@ export interface PermissionHandlerValue {
     to: Profile,
     remember: boolean,
     method: string,
-    message: string
+    message: string,
+    sensitiveCall: boolean
 }
 
 export interface PermissionHandlerProps {

libs/remix-ui/permission-handler/src/lib/permission-dialog.tsx

@@ -3,7 +3,7 @@ import { PermissionHandlerProps } from '../interface'
 import './permission-dialog.css'
 
 const PermissionHandlerDialog = (props: PermissionHandlerProps) => {
-  const { from, to, remember, method, message } = props.value
+  const { from, to, remember, method, message, sensitiveCall } = props.value
   const [feedback, setFeedback] = useState<string>('')
   const theme = props.theme
 
@@ -43,7 +43,6 @@ const PermissionHandlerDialog = (props: PermissionHandlerProps) => {
       </div> : null
   }
 
-  const sensitiveCall = method === 'writeFile'
   return (<section className="permission">
     {pluginsImages()}
     <article>