#

# Copyright (C) 2013  Red Hat, Inc.

#

# This copyrighted material is made available to anyone wishing to use,

# modify, copy, or redistribute it subject to the terms and conditions of

# the GNU General Public License v.2, or (at your option) any later version.

# This program is distributed in the hope that it will be useful, but WITHOUT

# ANY WARRANTY expressed or implied, including the implied warranties of

# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General

# Public License for more details.  You should have received a copy of the

# GNU General Public License along with this program; if not, write to the

# Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA

# 02110-1301, USA.  Any Red Hat trademarks that are incorporated in the

# source code or documentation are not subject to the GNU General Public

# License and may only be used or replicated with the express permission of

# Red Hat, Inc.

#

# Red Hat Author(s): Vratislav Podzimek <vpodzime@redhat.com>

#

import threading

import logging

from functools import wraps

# the path to addons is in sys.path so we can import things

# from org_fedora_oscap

from org_fedora_oscap import common

from org_fedora_oscap import data_fetch

from org_fedora_oscap import rule_handling

from org_fedora_oscap import content_handling

from org_fedora_oscap import utils

from org_fedora_oscap.common import dry_run_skip

from pyanaconda.threading import threadMgr, AnacondaThread

from pyanaconda.ui.gui.spokes import NormalSpoke

from pyanaconda.ui.communication import hubQ

from pyanaconda.ui.gui.utils import async_action_wait, really_hide, really_show

from pyanaconda.ui.gui.utils import set_treeview_selection, fire_gtk_action

from pyanaconda.ui.categories.system import SystemCategory

from pykickstart.errors import KickstartValueError

from pyanaconda.modules.common.constants.services import USERS

# pylint: disable-msg=E0611

from gi.repository import Gdk

log = logging.getLogger("anaconda")

_ = common._

N_ = common.N_

# export only the spoke, no helper functions, classes or constants

__all__ = ["OSCAPSpoke"]

# pages in the main notebook

SET_PARAMS_PAGE = 0

GET_CONTENT_PAGE = 1

class GtkActionList(object):

    """Class for scheduling Gtk actions to be all run at once."""

    def __init__(self):

        self._actions = []

    def add_action(self, func, *args):

        """Add Gtk action to be run later."""

        @async_action_wait

        def gtk_action():

            func(*args)

        self._actions.append(gtk_action)

    def fire(self):

        """Run all scheduled Gtk actions."""

        for action in self._actions:

            action()

        self._actions = []

# helper functions

def set_combo_selection(combo, item, unset_first=False):

    """

    Set selected item of the combobox.

    :return: True if successfully set, False otherwise

    :rtype: bool

    """

    if unset_first:

        combo.set_active_iter(None)

    model = combo.get_model()

    if not model:

        return False

    itr = model.get_iter_first()

    while itr:

        if model[itr][0] == item:

            combo.set_active_iter(itr)

            return True

        itr = model.iter_next(itr)

        return False

def get_combo_selection(combo):

    """

    Get the selected item of the combobox.

    :return: selected item or None

    """

    model = combo.get_model()

    itr = combo.get_active_iter()

    if not itr or not model:

        return None

    return model[itr][0]

def render_message_type(column, renderer, model, itr, user_data=None):

    # get message type from the first column

    value = model[itr][0]

    if value == common.MESSAGE_TYPE_FATAL:

        renderer.set_property("stock-id", "gtk-dialog-error")

    elif value == common.MESSAGE_TYPE_WARNING:

        renderer.set_property("stock-id", "gtk-dialog-warning")

    elif value == common.MESSAGE_TYPE_INFO:

        renderer.set_property("stock-id", "gtk-info")

    else:

        renderer.set_property("stock-id", "gtk-dialog-question")

def set_ready(func):

    @wraps(func)

    def decorated(self, *args, **kwargs):

        ret = func(self, *args, **kwargs)

        self._unitialized_status = None

        self._ready = True

        # pylint: disable-msg=E1101

        hubQ.send_ready(self.__class__.__name__, True)

        hubQ.send_message(self.__class__.__name__, self.status)

        return ret

    return decorated

class OSCAPSpoke(NormalSpoke):

    """

    Main class of the OSCAP addon spoke that will appear in the Security

    category on the Summary hub. It allows interactive choosing of the data

    stream, checklist and profile driving the evaluation and remediation of the

    available SCAP content in the installation process.

    :see: pyanaconda.ui.common.UIObject

    :see: pyanaconda.ui.common.Spoke

    :see: pyanaconda.ui.gui.GUIObject

    """

    # class attributes defined by API #

    # list all top-level objects from the .glade file that should be exposed

    # to the spoke or leave empty to extract everything

    builderObjects = ["OSCAPspokeWindow", "profilesStore", "changesStore",

                      "dsStore", "xccdfStore", "profilesStore",

                      ]

    # the name of the main window widget

    mainWidgetName = "OSCAPspokeWindow"

    # name of the .glade file in the same directory as this source

    uiFile = "oscap.glade"

    # id of the help content for this spoke

    help_id = "SecurityPolicySpoke"

    # domain of oscap-anaconda-addon translations

    translationDomain = "oscap-anaconda-addon"

    # category this spoke belongs to

    category = SystemCategory

    # spoke icon (will be displayed on the hub)

    # preferred are the -symbolic icons as these are used in Anaconda's spokes

    icon = "changes-prevent-symbolic"

    # title of the spoke (will be displayed on the hub)

    title = N_("_Security Policy")

    # methods defined by API and helper methods #

    def __init__(self, data, storage, payload):

        """

        :see: pyanaconda.ui.common.Spoke.__init__

        :param data: data object passed to every spoke to load/store data

                     from/to it

        :type data: pykickstart.base.BaseHandler

        :param storage: object storing storage-related information

                        (disks, partitioning, bootloader, etc.)

        :type storage: blivet.Blivet

        :param payload: object storing packaging-related information

        :type payload: pyanaconda.packaging.Payload

        """

        NormalSpoke.__init__(self, data, storage, payload)

        self._addon_data = self.data.addons.org_fedora_oscap

        # workaround for https://bugzilla.redhat.com/show_bug.cgi?id=1673071

        self.title = _(self.title)

        self._storage = storage

        self._ready = False

        # the first status provided

        self._unitialized_status = _("Not ready")

        self._content_handler = None

        self._content_handling_cls = None

        self._ds_checklists = None

        # used for changing profiles, stored as self._addon_data.rule_data when

        # leaving the spoke

        self._rule_data = None

        # used for storing previously set root password if we need to remove it

        # due to the chosen policy (so that we can put it back in case of

        # revert)

        self.__old_root_pw = None

        # used to check if the profile was changed or not

        self._active_profile = None

        # prevent multiple simultaneous data fetches

        self._fetching = False

        self._fetch_flag_lock = threading.Lock()

        self._error = None

        # wait for all Anaconda spokes to initialiuze

        self._anaconda_spokes_initialized = threading.Event()

        self.initialization_controller.init_done.connect(self._all_anaconda_spokes_initialized)

    def _all_anaconda_spokes_initialized(self):

        log.debug("OSCAP addon: Anaconda init_done signal triggered")

        self._anaconda_spokes_initialized.set()

    def initialize(self):

        """

        The initialize method that is called after the instance is created.

        The difference between __init__ and this method is that this may take

        a long time and thus could be called in a separated thread.

        :see: pyanaconda.ui.common.UIObject.initialize

        """

        NormalSpoke.initialize(self)

        column = self.builder.get_object("messageTypeColumn")

        renderer = self.builder.get_object("messageTypeRenderer")

        column.set_cell_data_func(renderer, render_message_type)

        # the main notebook containing two pages -- for settings parameters and

        # for entering content URL

        self._main_notebook = self.builder.get_object("mainNotebook")

        # the store that holds the messages that come from the rules evaluation

        self._message_store = self.builder.get_object("changesStore")

        # stores with data streams, checklists and profiles

        self._ds_store = self.builder.get_object("dsStore")

        self._xccdf_store = self.builder.get_object("xccdfStore")

        self._profiles_store = self.builder.get_object("profilesStore")

        # comboboxes for data streams and checklists

        self._ids_box = self.builder.get_object("idsBox")

        self._ds_combo = self.builder.get_object("dsCombo")

        self._xccdf_combo = self.builder.get_object("xccdfCombo")

        # profiles view and selection

        self._profiles_view = self.builder.get_object("profilesView")

        self._profiles_selection = self.builder.get_object("profilesSelection")

        selected_column = self.builder.get_object("selectedColumn")

        selected_renderer = self.builder.get_object("selectedRenderer")

        selected_column.set_cell_data_func(selected_renderer,

                                           self._render_selected)

        # button for switching profiles

        self._choose_button = self.builder.get_object("chooseProfileButton")

        # toggle switching the dry-run mode

        self._dry_run_switch = self.builder.get_object("dryRunSwitch")

        # control buttons

        self._control_buttons = self.builder.get_object("controlButtons")

        # content URL entering, content fetching, ...

        self._no_content_label = self.builder.get_object("noContentLabel")

        self._content_url_entry = self.builder.get_object("urlEntry")

        self._fetch_button = self.builder.get_object("fetchButton")

        self._progress_box = self.builder.get_object("progressBox")

        self._progress_spinner = self.builder.get_object("progressSpinner")

        self._progress_label = self.builder.get_object("progressLabel")

        self._ssg_button = self.builder.get_object("ssgButton")

        # if no content was specified and SSG is available, use it

        if not self._addon_data.content_type and common.ssg_available():

            self._addon_data.content_type = "scap-security-guide"

            self._addon_data.content_path = common.SSG_DIR + common.SSG_CONTENT

        if not self._addon_data.content_defined:

            # nothing more to be done now, the spoke is ready

            self._ready = True

            # no more being unitialized

            self._unitialized_status = None

            # user is going to enter the content URL

            self._content_url_entry.grab_focus()

            # pylint: disable-msg=E1101

            hubQ.send_ready(self.__class__.__name__, True)

        else:

            # else fetch data

            self._fetch_data_and_initialize()

    def _render_selected(self, column, renderer, model, itr, user_data=None):

        if model[itr][2]:

            renderer.set_property("stock-id", "gtk-apply")

        else:

            renderer.set_property("stock-id", None)

    def _fetch_data_and_initialize(self):

        """Fetch data from a specified URL and initialize everything."""

        with self._fetch_flag_lock:

            if self._fetching:

                # prevent multiple fetches running simultaneously

                return

            self._fetching = True

        thread_name = None

        if any(self._addon_data.content_url.startswith(net_prefix)

               for net_prefix in data_fetch.NET_URL_PREFIXES):

            # need to fetch data over network

            try:

                thread_name = common.wait_and_fetch_net_data(

                                     self._addon_data.content_url,

                                     self._addon_data.raw_preinst_content_path,

                                     self._addon_data.certificates)

            except common.OSCAPaddonNetworkError:

                self._network_problem()

                with self._fetch_flag_lock:

                    self._fetching = False

                return

            except KickstartValueError:

                self._invalid_url()

                with self._fetch_flag_lock:

                    self._fetching = False

                return

        # pylint: disable-msg=E1101

        hubQ.send_message(self.__class__.__name__,

                          _("Fetching content data"))

        # pylint: disable-msg=E1101

        hubQ.send_not_ready(self.__class__.__name__)

        threadMgr.add(AnacondaThread(name="OSCAPguiWaitForDataFetchThread",

                                     target=self._init_after_data_fetch,

                                     args=(thread_name,)))

    @set_ready

    def _init_after_data_fetch(self, wait_for):

        """

        Waits for data fetching to be finished, extracts it (if needed),

        populates the stores and evaluates pre-installation fixes from the

        content and marks the spoke as ready in the end.

        :param wait_for: name of the thread to wait for (if any)

        :type wait_for: str or None

        """

        try:

            threadMgr.wait(wait_for)

        except data_fetch.DataFetchError:

            self._data_fetch_failed()

            with self._fetch_flag_lock:

                self._fetching = False

            return

        finally:

            # stop the spinner in any case

            fire_gtk_action(self._progress_spinner.stop)

        if self._addon_data.fingerprint:

            hash_obj = utils.get_hashing_algorithm(self._addon_data.fingerprint)

            digest = utils.get_file_fingerprint(self._addon_data.raw_preinst_content_path,

                                                hash_obj)

            if digest != self._addon_data.fingerprint:

                self._integrity_check_failed()

                # fetching done

                with self._fetch_flag_lock:

                    self._fetching = False

                return

        # RPM is an archive at this phase

        if self._addon_data.content_type in ("archive", "rpm"):

            # extract the content

            try:

                fpaths = common.extract_data(self._addon_data.raw_preinst_content_path,

                                             common.INSTALLATION_CONTENT_DIR,

                                             [self._addon_data.content_path])

            except common.ExtractionError as err:

                self._extraction_failed(str(err))

                # fetching done

                with self._fetch_flag_lock:

                    self._fetching = False

                return

            # and populate missing fields

            self._content_handling_cls, files = content_handling.explore_content_files(fpaths)

            files = common.strip_content_dir(files)

            # pylint: disable-msg=E1103

            self._addon_data.content_path = self._addon_data.content_path or files.xccdf

            self._addon_data.cpe_path = self._addon_data.cpe_path or files.cpe

            self._addon_data.tailoring_path = (self._addon_data.tailoring_path or

                                               files.tailoring)

        elif self._addon_data.content_type == "datastream":

            self._content_handling_cls = content_handling.DataStreamHandler

        elif self._addon_data.content_type == "scap-security-guide":

            self._content_handling_cls = content_handling.BenchmarkHandler

        else:

            raise common.OSCAPaddonError("Unsupported content type")

        try:

            self._content_handler = self._content_handling_cls(self._addon_data.preinst_content_path,

                                                               self._addon_data.preinst_tailoring_path)

        except content_handling.ContentHandlingError:

            self._invalid_content()

            # fetching done

            with self._fetch_flag_lock:

                self._fetching = False

            return

        if self._using_ds:

            # populate the stores from items from the content

            self._ds_checklists = self._content_handler.get_data_streams_checklists()

            add_ds_ids = GtkActionList()

            add_ds_ids.add_action(self._ds_store.clear)

            for dstream in self._ds_checklists.keys():

                add_ds_ids.add_action(self._add_ds_id, dstream)

            add_ds_ids.fire()

        self._update_ids_visibility()

        # refresh UI elements

        self.refresh()

        # let all initialization and configuration happen before we evaluate

        # the setup

        if not self._anaconda_spokes_initialized.is_set():

            # only wait (and log the messages) if the event is not set yet

            log.debug("OSCAP addon: waiting for all Anaconda spokes to be initialized")

            self._anaconda_spokes_initialized.wait()

            log.debug("OSCAP addon: all Anaconda spokes have been initialized - continuing")

        # try to switch to the chosen profile (if any)

        selected = self._switch_profile()

        if self._addon_data.profile_id and not selected:

            # profile ID given, but it was impossible to select it -> invalid

            # profile ID given

            self._invalid_profile_id()

            return

        # initialize the self._addon_data.rule_data

        self._addon_data.rule_data = self._rule_data

        # update the message store with the messages

        self._update_message_store()

        # all initialized, we can now let user set parameters

        fire_gtk_action(self._main_notebook.set_current_page, SET_PARAMS_PAGE)

        # and use control buttons

        fire_gtk_action(really_show, self._control_buttons)

        # fetching done

        with self._fetch_flag_lock:

            self._fetching = False

        # no error

        self._set_error(None)

    @property

    def _using_ds(self):

        return self._content_handling_cls == content_handling.DataStreamHandler

    @property

    def _current_ds_id(self):

        return get_combo_selection(self._ds_combo)

    @property

    def _current_xccdf_id(self):

        return get_combo_selection(self._xccdf_combo)

    @property

    def _current_profile_id(self):

        store, itr = self._profiles_selection.get_selected()

        if not store or not itr:

            return None

        else:

            return store[itr][0]

    def _add_ds_id(self, ds_id):

        """

        Add data stream ID to the data streams store.

        :param ds_id: data stream ID

        :type ds_id: str

        """

        self._ds_store.append([ds_id])

    @async_action_wait

    def _update_ids_visibility(self):

        """

        Updates visibility of the combo boxes that are used to select the DS

        and XCCDF IDs.

        """

        if self._using_ds:

            # only show the combo boxes if there are multiple data streams or

            # multiple xccdfs (IOW if there's something to choose from)

            ds_ids = list(self._ds_checklists.keys())

            if len(ds_ids) > 1 or len(self._ds_checklists[ds_ids[0]]) > 1:

                really_show(self._ids_box)

                return

        # not showing, hide instead

        really_hide(self._ids_box)

    @async_action_wait

    def _update_xccdfs_store(self):

        """

        Clears and repopulates the store with XCCDF IDs from the currently

        selected data stream.

        """

        if self._ds_checklists is None:

            # not initialized, cannot do anything

            return

        self._xccdf_store.clear()

        for xccdf_id in self._ds_checklists[self._current_ds_id]:

            self._xccdf_store.append([xccdf_id])

    @async_action_wait

    def _update_profiles_store(self):

        """

        Clears and repopulates the store with profiles from the currently

        selected data stream and checklist.

        """

        if self._content_handler is None:

            # not initialized, cannot do anything

            return

        if self._using_ds and self._ds_checklists is None:

            # not initialized, cannot do anything

            return

        self._profiles_store.clear()

        if self._using_ds:

            profiles = self._content_handler.get_profiles(self._current_ds_id,

                                                          self._current_xccdf_id)

        else:

            # pylint: disable-msg=E1103

            profiles = self._content_handler.profiles

        for profile in profiles:

            profile_markup = '%s\n%s' \

                                % (profile.title, profile.description)

            self._profiles_store.append([profile.id,

                                         profile_markup,

                                         profile.id == self._active_profile])

    def _add_message(self, message):

        """

        Add message to the store.

        :param message: message to be added

        :type message: org_fedora_oscap.common.RuleMessage

        """

        self._message_store.append([message.type, message.text])

    @dry_run_skip

    @async_action_wait

    def _update_message_store(self, report_only=False):

        """

        Updates the message store with messages from rule evaluation.

        :param report_only: wheter to do changes in configuration or just

                            report

        :type report_only: bool

        """

        self._message_store.clear()

        if not self._rule_data:

            # RuleData instance not initialized, cannot do anything

            return

        messages = self._rule_data.eval_rules(self.data, self._storage,

                                              report_only)

        if not messages:

            # no messages from the rules, add a message informing about that

            if not self._active_profile:

                # because of no profile

                message = common.RuleMessage(self.__class__,

                                             common.MESSAGE_TYPE_INFO,

                                             _("No profile selected"))

            else:

                # because of no pre-inst rules

                message = common.RuleMessage(self.__class__,

                                             common.MESSAGE_TYPE_INFO,

                                             _("No rules for the pre-installation phase"))

            self._add_message(message)

            # nothing more to be done

            return

        self._resolve_rootpw_issues(messages, report_only)

        for msg in messages:

            self._add_message(msg)

    def _resolve_rootpw_issues(self, messages, report_only):

        """Mitigate root password issues (which are not fatal in GUI)"""

        fatal_rootpw_msgs = [

            msg for msg in messages

            if msg.origin == rule_handling.PasswdRules and msg.type == common.MESSAGE_TYPE_FATAL]

        if fatal_rootpw_msgs:

            for msg in fatal_rootpw_msgs:

                # cannot just change the message type because it is a namedtuple

                messages.remove(msg)

                msg = common.RuleMessage(

                    self.__class__, common.MESSAGE_TYPE_WARNING, msg.text)

                messages.append(msg)

            if not report_only:

                users_proxy = USERS.get_proxy()

                self.__old_root_pw = users_proxy.RootPassword

                self.data.rootpw.password = None

                self.__old_root_pw_seen = users_proxy.IsRootpwKickstarted

                self.data.rootpw.seen = False

    def _revert_rootpw_changes(self):

        if self.__old_root_pw is not None:

            users_proxy = USERS.get_proxy()

            users_proxy.SetRootPassword(self.__old_root_pw)

            self.__old_root_pw = None

            users_proxy.SetRootpwKickstarted(self.__old_root_pw_seen)

            self.__old_root_pw_seen = None

    @async_action_wait

    def _unselect_profile(self, profile_id):

        """Unselects the given profile."""

        if not profile_id:

            # no profile specified, nothing to do

            return

        itr = self._profiles_store.get_iter_first()

        while itr:

            if self._profiles_store[itr][0] == profile_id:

                self._profiles_store.set_value(itr, 2, False)

            itr = self._profiles_store.iter_next(itr)

        if self._rule_data:

            # revert changes and clear rule_data (no longer valid)

            self._rule_data.revert_changes(self.data, self._storage)

            self._revert_rootpw_changes()

            self._rule_data = None

        self._active_profile = None

    @async_action_wait

    def _select_profile(self, profile_id):

        """Selects the given profile."""

        if not profile_id:

            # no profile specified, nothing to do

            return False

        if self._using_ds:

            ds = self._current_ds_id

            xccdf = self._current_xccdf_id

            if not all((ds, xccdf, profile_id)):

                # something is not set -> do nothing

                return False

        else:

            ds = None

            xccdf = None

        # get pre-install fix rules from the content

        try:

            rules = common.get_fix_rules_pre(profile_id,

                                             self._addon_data.preinst_content_path,

                                             ds, xccdf,

                                             self._addon_data.preinst_tailoring_path)

        except common.OSCAPaddonError as exc:

            log.error(

                "Failed to get rules for the profile '{}': {}"

                .format(profile_id, str(exc)))

            self._set_error(

                "Failed to get rules for the profile '{}'"

                .format(profile_id))

            return False

        itr = self._profiles_store.get_iter_first()

        while itr:

            if self._profiles_store[itr][0] == profile_id:

                self._profiles_store.set_value(itr, 2, True)

            itr = self._profiles_store.iter_next(itr)

        # parse and store rules with a clean RuleData instance

        self._rule_data = rule_handling.RuleData()

        for rule in rules.splitlines():

            self._rule_data.new_rule(rule)

        # remember the active profile

        self._active_profile = profile_id

        return True

    @async_action_wait

    @dry_run_skip

    def _switch_profile(self):

        """Switches to a current selected profile.

        :returns: whether some profile was selected or not

        """

        self._set_error(None)

        profile = self._current_profile_id

        if not profile:

            return False

        self._unselect_profile(self._active_profile)

        ret = self._select_profile(profile)

        # update messages according to the newly chosen profile

        self._update_message_store()

        return ret

    @set_ready

    def _set_error(self, msg):

        """Set or clear error message"""

        if msg:

            self._error = msg

            self.clear_info()

            self.set_error(msg)

        else:

            self._error = None

            self.clear_info()

    @async_action_wait

    def _invalid_content(self):

        """Callback for informing user about provided content invalidity."""

        msg = _("Invalid content provided. Enter a different URL, please.")

        self._progress_label.set_markup("%s" % msg)

        self._wrong_content(msg)

    @async_action_wait

    def _invalid_url(self):

        """Callback for informing user about provided URL invalidity."""

        msg = _("Invalid or unsupported content URL, please enter a different one.")

        self._progress_label.set_markup("%s" % msg)

        self._wrong_content(msg)

    @async_action_wait

    def _data_fetch_failed(self):

        """Adapts the UI if fetching data from entered URL failed"""

        msg = _("Failed to fetch content. Enter a different URL, please.")

        self._progress_label.set_markup("%s" % msg)

        self._wrong_content(msg)

    @async_action_wait

    def _network_problem(self):

        """Adapts the UI if network error was encountered during data fetch"""

        msg = _("Network error encountered when fetching data."

                " Please check that network is setup and working.")

        self._progress_label.set_markup("%s" % msg)

        self._wrong_content(msg)

    @async_action_wait

    def _integrity_check_failed(self):

        """Adapts the UI if integrity check fails"""

        msg = _("The integrity check of the content failed. Cannot use the content.")

        self._progress_label.set_markup("%s" % msg)

        self._wrong_content(msg)

    @async_action_wait

    def _extraction_failed(self, err_msg):

        """Adapts the UI if extracting data from entered URL failed"""

        msg = _("Failed to extract content (%s). Enter a different URL, "

                "please.") % err_msg

        self._progress_label.set_markup("%s" % msg)

        self._wrong_content(msg)

    @async_action_wait

    def _wrong_content(self, msg):

        self._addon_data.clear_all()

        really_hide(self._progress_spinner)

        self._fetch_button.set_sensitive(True)

        self._content_url_entry.set_sensitive(True)

        self._content_url_entry.grab_focus()

        self._content_url_entry.select_region(0, -1)

        self._content_handling_cls = None

        self._set_error(msg)

    @async_action_wait

    def _invalid_profile_id(self):

        msg = _("Profile with ID '%s' not defined in the content. Select a different profile, please") % self._addon_data.profile_id

        self._set_error(msg)

        self._addon_data.profile_id = None

    @async_action_wait

    def _switch_dry_run(self, dry_run):

        self._choose_button.set_sensitive(not dry_run)

        if dry_run:

            # no profile can be selected in the dry-run mode

            self._unselect_profile(self._active_profile)

            # no messages in the dry-run mode

            self._message_store.clear()

            message = common.RuleMessage(self.__class__,

                                         common.MESSAGE_TYPE_INFO,

                                         _("Not applying security policy"))

            self._add_message(message)

            self._set_error(None)

        else:

            # mark the active profile as selected

            self._select_profile(self._active_profile)

            self._update_message_store()