PolicyCondition インターフェース

1global class BlockLocalhostCondition implements TxnSecurity.PolicyCondition {
2  public boolean evaluate(TxnSecurity.Event e) {
3    // Get the LoginHistoryId to in turn get the SourceIp address.
4    String loginHistoryId = e.data.get('LoginHistoryId');
5    // Retrieve SourceIp from LoginHistory.
6    LoginHistory loginAttempt = 
7      [SELECT SourceIp FROM LoginHistory WHERE id = :loginHistoryId];
8    String sourceIp = String.valueOf(loginAttempt.SourceIp);
9    // If it's localhost, the policy is triggered and true is returned.
10    if (sourceIp != null && sourceIp.equals('127.0.0.1')) {
11      return true;
12    }
13    return false;
14  }
15}

1global class DataLoaderExportPolicyCondition implements TxnSecurity.PolicyCondition {
2  public boolean evaluate(TxnSecurity.Event e) {
3    Boolean isApi = Boolean.valueOf(e.data.get('IsApi')) { // For any API request...
4    Integer numberOfRecords = Integer.valueOf(e.data.get('NumberOfRecords'));
5      if (isApi && numberOfRecords >= 2000) {
6        return true;
7      }
8      return false;
9    }
10  }
11}

1global class ConfidentialDataPolicyCondition implements TxnSecurity.PolicyCondition {
2  public boolean evaluate(TxnSecurity.Event e) {
3    if (e.resourceType == 'Dashboard') {     // If the event is about Dashboards...
4      Dashboard dashboard =
5        [SELECT DeveloperName FROM Dashboard WHERE id = :e.entityId];
6      String name = String.valueOf(dashboard.DeveloperName);
7      // Check if this is a quarterly report.
8      if (name.containsIgnoreCase('Quarterly Report')) {
9        return true;
10      }
11    }
12    return false;
13  }
14}

1global class CeoBrowserAccessPolicyCondition implements TxnSecurity.PolicyCondition {
2  public boolean evaluate(TxnSecurity.Event e) {
3    // If it's a Login attempt from our CEO's user account.
4    if (e.action == 'Login' && e.userId == '005x0000005VmCu') {
5      // Get the platform & browser from LoginHistory for this login attempt.
6      LoginHistory loginAttempt =
7        [SELECT Platform, Browser FROM LoginHistory
8         WHERE Id = :e.data.get('LoginHistoryId')];
9      String platform = loginAttempt.Platform;
10      String browser = loginAttempt.Browser;
11      // The policy is triggered when the CEO isn’t using Safari on Mac OSX.
12      if (!platform.equals('Mac OSX') || !browser.startsWith('Safari')) {
13          return true;
14      }
15    }
16    return false;
17  }
18}

1global class BlockAccessFromNKPolicyCondition implements TxnSecurity.PolicyCondition {
2  public boolean evaluate(TxnSecurity.Event e) {
3    // Get the login history.
4    LoginHistory loginAttempt =
5      [SELECT LoginGeoId FROM LoginHistory WHERE Id = :e.data.get('LoginHistoryId')];
6    // Get the login's geographical info.
7    String loginGeoId = String.valueOf(loginAttempt.LoginGeoId);
8    LoginGeo loginGeo = [SELECT Country FROM LoginGeo WHERE Id = :loginGeoId];
9    // Get the country at that location.
10    String country = String.valueOf(loginGeo.Country);
11    // Trigger policy and block access for any user trying to log in from North Korea.
12    if(country.equals('North Korea')) {
13        return true;
14    }
15    return false;
16  }
17}

1global class BlockOldAndroidDevicesPolicyCondition implements TxnSecurity.PolicyCondition {
2  public boolean evaluate(TxnSecurity.Event e) {
3    LoginHistory loginAttempt =
4      [SELECT Platform FROM LoginHistory WHERE Id = :e.data.get('LoginHistoryId')];
5    if (loginAttempt != null) {
6      String platform = loginHistory.Platform;
7      if (platform.contains('Android') && platform.compareTo('Android 5') < 0) {
8        return true;
9      }
10    }
11    return false; // Allow access from Android versions greater than 5.
12  }
13}

1global class ChatterMessageProfanityFilterPolicyCondition implements TxnSecurity.PolicyCondition {
2  public boolean evaluate(TxnSecurity.Event e) {
3    String body = e.data.get('Body');
4
5    //Create HTTPRequest and specify its type and properties.
6    HttpRequest request = new HttpRequest();
7    request.setMethod('GET');
8    request.setHeader('content-type', 'text/plain');
9    request.setHeader('Connection', 'keep-alive');
10    request.setEndpoint('http://www.purgomalum.com/service/containsprofanity?text=' +
11                        EncodingUtil.urlEncode(body,'UTF-8'));
12
13    Http http = new Http();
14    HTTPResponse response = http.send(request);
15
16    if (response.getStatusCode() == 200 && response.getBody().equals('true')) {
17      return true; // Callout succeeded and found profanity in the message.
18    }
19    return false;  // Callout failed or no profanity was found.
20  }
21}

1global class DataLoaderLeadExportPolicyCondition implements TxnSecurity.PolicyCondition {
2  public boolean evaluate(TxnSecurity.Event e) {
3    if (Boolean.valueOf(e.data.get('IsApi'))) {
4
5      // The event data is a Map<String, String>. We need to call the 
6      // valueOf() method on appropriate data types to use them here.
7      String resourceType         = e.data.get('resourceType');
8      String connectedAppId       = e.data.get('ConnectedAppId');
9      Integer numberOfRecords     = Integer.valueOf(e.data.get('NumberOfRecords'));
10      Integer executionTimeMillis = Integer.valueOf(e.data.get('ExecutionTime'));
11
12      // We're looking for leads accessed by a specific connected app that is
13      // transferring more than 2,000 records a second - a large transfer.
14      if ('Lead'.equals(resourceType) &&
15        '0CiD00000004Cce'.equals(connectedAppId) &&
16        numberOfRecords > 2000 &&
17        executionTimeMillis > 1000) {
18          return true;
19        }
20    }
21    return false;
22  }
23}