From f2857397f0d30374520716368e40eb3033859574 Mon Sep 17 00:00:00 2001
From: Oscar Hinton <oscar@oscarhinton.com>
Date: Thu, 23 Sep 2021 18:30:20 +0200
Subject: [PATCH] Disable Private Vault Export Policy (#1546)

---
 src/App/Pages/Settings/ExportVaultPage.xaml   | 19 +++++++++++++++++--
 .../Settings/ExportVaultPageViewModel.cs      | 17 +++++++++++++++++
 src/App/Resources/AppResources.Designer.cs    |  9 +++++++++
 src/App/Resources/AppResources.resx           |  3 +++
 src/Core/Enums/PolicyType.cs                  |  1 +
 5 files changed, 47 insertions(+), 2 deletions(-)

diff --git a/src/App/Pages/Settings/ExportVaultPage.xaml b/src/App/Pages/Settings/ExportVaultPage.xaml
index 68b5a5221..1b6a9113a 100644
--- a/src/App/Pages/Settings/ExportVaultPage.xaml
+++ b/src/App/Pages/Settings/ExportVaultPage.xaml
@@ -27,6 +27,18 @@
     <ScrollView>
         <StackLayout Spacing="20">
             <StackLayout StyleClass="box">
+                <Frame
+                    IsVisible="{Binding DisablePrivateVaultPolicyEnabled}"
+                    Padding="10"
+                    Margin="0, 12, 0, 0"
+                    HasShadow="False"
+                    BackgroundColor="Transparent"
+                    BorderColor="Accent">
+                    <Label
+                        Text="{u:I18n DisablePersonalVaultExportPolicyInEffect}"
+                        StyleClass="text-muted, text-sm, text-bold"
+                        HorizontalTextAlignment="Center" />
+                </Frame>
                 <StackLayout StyleClass="box-row, box-row-input, box-row-input-options-platform">
                     <Label
                         Text="{u:I18n FileFormat}"
@@ -36,7 +48,8 @@
                         ItemsSource="{Binding FileFormatOptions, Mode=OneTime}"
                         SelectedIndex="{Binding FileFormatSelectedIndex}"
                         SelectedIndexChanged="FileFormat_Changed"
-                        StyleClass="box-value" />
+                        StyleClass="box-value"
+                        IsEnabled="{Binding DisablePrivateVaultPolicyEnabled, Converter={StaticResource inverseBool}}" />
                 </StackLayout>
                 <Grid StyleClass="box-row">
                     <Grid.RowDefinitions>
@@ -59,6 +72,7 @@
                         IsSpellCheckEnabled="False"
                         IsTextPredictionEnabled="False"
                         IsPassword="{Binding ShowPassword, Converter={StaticResource inverseBool}}"
+                        IsEnabled="{Binding DisablePrivateVaultPolicyEnabled, Converter={StaticResource inverseBool}}"
                         Grid.Row="1"
                         Grid.Column="0"
                         ReturnType="Go"
@@ -80,7 +94,8 @@
                     <Button Text="{u:I18n ExportVault}"
                             Clicked="ExportVault_Clicked"
                             HorizontalOptions="Fill"
-                            VerticalOptions="End" />
+                            VerticalOptions="End"
+                            IsEnabled="{Binding DisablePrivateVaultPolicyEnabled, Converter={StaticResource inverseBool}}"/>
                 </StackLayout>
             </StackLayout>
         </StackLayout>
diff --git a/src/App/Pages/Settings/ExportVaultPageViewModel.cs b/src/App/Pages/Settings/ExportVaultPageViewModel.cs
index b47a1908c..e8b73d950 100644
--- a/src/App/Pages/Settings/ExportVaultPageViewModel.cs
+++ b/src/App/Pages/Settings/ExportVaultPageViewModel.cs
@@ -4,8 +4,11 @@ using Bit.App.Resources;
 using Bit.Core.Abstractions;
 using Bit.Core.Utilities;
 using System.Collections.Generic;
+using System.ComponentModel;
 using System.Text;
 using System.Threading.Tasks;
+using Bit.Core;
+using Bit.Core.Enums;
 #if !FDROID
 using Microsoft.AppCenter.Crashes;
 #endif
@@ -20,6 +23,7 @@ namespace Bit.App.Pages
         private readonly II18nService _i18nService;
         private readonly ICryptoService _cryptoService;
         private readonly IExportService _exportService;
+        private readonly IPolicyService _policyService;
 
         private int _fileFormatSelectedIndex;
         private string _exportWarningMessage;
@@ -36,6 +40,7 @@ namespace Bit.App.Pages
             _i18nService = ServiceContainer.Resolve<II18nService>("i18nService");
             _cryptoService = ServiceContainer.Resolve<ICryptoService>("cryptoService");
             _exportService = ServiceContainer.Resolve<IExportService>("exportService");
+            _policyService = ServiceContainer.Resolve<IPolicyService>("policyService");
 
             PageTitle = AppResources.ExportVault;
             TogglePasswordCommand = new Command(TogglePassword);
@@ -53,10 +58,22 @@ namespace Bit.App.Pages
         {
             _initialized = true;
             FileFormatSelectedIndex = FileFormatOptions.FindIndex(k => k.Key == "json");
+            DisablePrivateVaultPolicyEnabled = await _policyService.PolicyAppliesToUser(PolicyType.DisablePersonalVaultExport);
+
             UpdateWarning();
         }
 
         public List<KeyValuePair<string, string>> FileFormatOptions { get; set; }
+        private bool _disabledPrivateVaultPolicyEnabled = false;
+
+        public bool DisablePrivateVaultPolicyEnabled
+        {
+            get => _disabledPrivateVaultPolicyEnabled;
+            set
+            {
+                SetProperty(ref _disabledPrivateVaultPolicyEnabled, value);
+            }
+        }
 
         public int FileFormatSelectedIndex
         {
diff --git a/src/App/Resources/AppResources.Designer.cs b/src/App/Resources/AppResources.Designer.cs
index 7b4d0b44c..956f4f922 100644
--- a/src/App/Resources/AppResources.Designer.cs
+++ b/src/App/Resources/AppResources.Designer.cs
@@ -1474,6 +1474,15 @@ namespace Bit.App.Resources {
             }
         }
         
+        /// <summary>
+        ///   Looks up a localized string similar to One or more organization policies prevents your from exporting your personal vault..
+        /// </summary>
+        public static string DisablePersonalVaultExportPolicyInEffect {
+            get {
+                return ResourceManager.GetString("DisablePersonalVaultExportPolicyInEffect", resourceCulture);
+            }
+        }
+        
         /// <summary>
         ///   Looks up a localized string similar to Disable Save Prompt.
         /// </summary>
diff --git a/src/App/Resources/AppResources.resx b/src/App/Resources/AppResources.resx
index 9d253f4df..71b086221 100644
--- a/src/App/Resources/AppResources.resx
+++ b/src/App/Resources/AppResources.resx
@@ -2040,4 +2040,7 @@
   <data name="VaultTimeoutToLarge" xml:space="preserve">
     <value>Your vault timeout exceeds the restrictions set by your organization.</value>
   </data>
+  <data name="DisablePersonalVaultExportPolicyInEffect">
+    <value>One or more organization policies prevents your from exporting your personal vault.</value>
+  </data>
 </root>
diff --git a/src/Core/Enums/PolicyType.cs b/src/Core/Enums/PolicyType.cs
index e5aad46cf..59c0566a8 100644
--- a/src/Core/Enums/PolicyType.cs
+++ b/src/Core/Enums/PolicyType.cs
@@ -12,5 +12,6 @@
         SendOptions = 7, // Sets restrictions or defaults for Bitwarden Sends
         ResetPassword = 8, // Allows orgs to use reset password : also can enable auto-enrollment during invite flow
         MaximumVaultTimeout = 9, // Sets the maximum allowed vault timeout
+        DisablePersonalVaultExport = 10, // Disable personal vault export
     }
 }