Add files via upload

internal/database/c2_payload.go

@@ -0,0 +1,30 @@
+package database
+
+import (
+	"strings"
+	"time"
+)
+
+func (db *DB) RecordC2PayloadArtifact(filename, payloadID, listenerID, ownerUserID string) error {
+	filename = strings.TrimSpace(filename)
+	if filename == "" || strings.TrimSpace(listenerID) == "" || strings.TrimSpace(ownerUserID) == "" {
+		return nil
+	}
+	_, err := db.Exec(`
+		INSERT INTO c2_payload_artifacts(filename, payload_id, listener_id, owner_user_id, created_at)
+		VALUES (?, ?, ?, ?, ?)
+		ON CONFLICT(filename) DO UPDATE SET payload_id=excluded.payload_id, listener_id=excluded.listener_id, owner_user_id=excluded.owner_user_id, created_at=excluded.created_at
+	`, filename, payloadID, listenerID, ownerUserID, time.Now())
+	return err
+}
+
+func (db *DB) UserCanAccessC2Payload(userID, scope, filename string) bool {
+	if scope == RBACScopeAll {
+		return true
+	}
+	var listenerID, ownerUserID string
+	if err := db.QueryRow(`SELECT listener_id, owner_user_id FROM c2_payload_artifacts WHERE filename = ?`, strings.TrimSpace(filename)).Scan(&listenerID, &ownerUserID); err != nil {
+		return false
+	}
+	return ownerUserID == strings.TrimSpace(userID) || db.UserCanAccessResource(userID, scope, "c2_listener", listenerID)
+}