| <!DOCTYPE HTML> |
| <html lang="en"> |
| <head> |
| <title>Source code</title> |
| <link rel="stylesheet" type="text/css" href="../../../../../../stylesheet.css" title="Style"> |
| </head> |
| <body> |
| <main role="main"> |
| <div class="sourceContainer"> |
| <pre><span class="sourceLineNo">001</span><a id="line.1">package org.apache.archiva.redback.role;</a> |
| <span class="sourceLineNo">002</span><a id="line.2"></a> |
| <span class="sourceLineNo">003</span><a id="line.3">/*</a> |
| <span class="sourceLineNo">004</span><a id="line.4"> * Licensed to the Apache Software Foundation (ASF) under one</a> |
| <span class="sourceLineNo">005</span><a id="line.5"> * or more contributor license agreements. See the NOTICE file</a> |
| <span class="sourceLineNo">006</span><a id="line.6"> * distributed with this work for additional information</a> |
| <span class="sourceLineNo">007</span><a id="line.7"> * regarding copyright ownership. The ASF licenses this file</a> |
| <span class="sourceLineNo">008</span><a id="line.8"> * to you under the Apache License, Version 2.0 (the</a> |
| <span class="sourceLineNo">009</span><a id="line.9"> * "License"); you may not use this file except in compliance</a> |
| <span class="sourceLineNo">010</span><a id="line.10"> * with the License. You may obtain a copy of the License at</a> |
| <span class="sourceLineNo">011</span><a id="line.11"> *</a> |
| <span class="sourceLineNo">012</span><a id="line.12"> * http://www.apache.org/licenses/LICENSE-2.0</a> |
| <span class="sourceLineNo">013</span><a id="line.13"> *</a> |
| <span class="sourceLineNo">014</span><a id="line.14"> * Unless required by applicable law or agreed to in writing,</a> |
| <span class="sourceLineNo">015</span><a id="line.15"> * software distributed under the License is distributed on an</a> |
| <span class="sourceLineNo">016</span><a id="line.16"> * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY</a> |
| <span class="sourceLineNo">017</span><a id="line.17"> * KIND, either express or implied. See the License for the</a> |
| <span class="sourceLineNo">018</span><a id="line.18"> * specific language governing permissions and limitations</a> |
| <span class="sourceLineNo">019</span><a id="line.19"> * under the License.</a> |
| <span class="sourceLineNo">020</span><a id="line.20"> */</a> |
| <span class="sourceLineNo">021</span><a id="line.21"></a> |
| <span class="sourceLineNo">022</span><a id="line.22">import org.apache.archiva.redback.rbac.RBACManager;</a> |
| <span class="sourceLineNo">023</span><a id="line.23">import org.apache.archiva.redback.rbac.RbacManagerException;</a> |
| <span class="sourceLineNo">024</span><a id="line.24">import org.apache.archiva.redback.rbac.RbacObjectNotFoundException;</a> |
| <span class="sourceLineNo">025</span><a id="line.25">import org.apache.archiva.redback.rbac.Role;</a> |
| <span class="sourceLineNo">026</span><a id="line.26">import org.apache.archiva.redback.rbac.UserAssignment;</a> |
| <span class="sourceLineNo">027</span><a id="line.27">import org.apache.archiva.redback.role.model.ModelApplication;</a> |
| <span class="sourceLineNo">028</span><a id="line.28">import org.apache.archiva.redback.role.model.ModelRole;</a> |
| <span class="sourceLineNo">029</span><a id="line.29">import org.apache.archiva.redback.role.model.ModelTemplate;</a> |
| <span class="sourceLineNo">030</span><a id="line.30">import org.apache.archiva.redback.role.model.RedbackRoleModel;</a> |
| <span class="sourceLineNo">031</span><a id="line.31">import org.apache.archiva.redback.role.model.io.stax.RedbackRoleModelStaxReader;</a> |
| <span class="sourceLineNo">032</span><a id="line.32">import org.apache.archiva.redback.role.processor.RoleModelProcessor;</a> |
| <span class="sourceLineNo">033</span><a id="line.33">import org.apache.commons.io.IOUtils;</a> |
| <span class="sourceLineNo">034</span><a id="line.34">import org.apache.archiva.redback.rbac.Resource;</a> |
| <span class="sourceLineNo">035</span><a id="line.35">import org.apache.archiva.redback.role.template.RoleTemplateProcessor;</a> |
| <span class="sourceLineNo">036</span><a id="line.36">import org.apache.archiva.redback.role.util.RoleModelUtils;</a> |
| <span class="sourceLineNo">037</span><a id="line.37">import org.apache.archiva.redback.role.validator.RoleModelValidator;</a> |
| <span class="sourceLineNo">038</span><a id="line.38">import org.apache.commons.lang3.SystemUtils;</a> |
| <span class="sourceLineNo">039</span><a id="line.39">import org.apache.commons.lang3.time.StopWatch;</a> |
| <span class="sourceLineNo">040</span><a id="line.40">import org.slf4j.Logger;</a> |
| <span class="sourceLineNo">041</span><a id="line.41">import org.slf4j.LoggerFactory;</a> |
| <span class="sourceLineNo">042</span><a id="line.42">import org.springframework.stereotype.Service;</a> |
| <span class="sourceLineNo">043</span><a id="line.43"></a> |
| <span class="sourceLineNo">044</span><a id="line.44">import javax.annotation.PostConstruct;</a> |
| <span class="sourceLineNo">045</span><a id="line.45">import javax.inject.Inject;</a> |
| <span class="sourceLineNo">046</span><a id="line.46">import javax.inject.Named;</a> |
| <span class="sourceLineNo">047</span><a id="line.47">import javax.xml.stream.XMLStreamException;</a> |
| <span class="sourceLineNo">048</span><a id="line.48">import java.io.IOException;</a> |
| <span class="sourceLineNo">049</span><a id="line.49">import java.io.InputStreamReader;</a> |
| <span class="sourceLineNo">050</span><a id="line.50">import java.net.MalformedURLException;</a> |
| <span class="sourceLineNo">051</span><a id="line.51">import java.net.URL;</a> |
| <span class="sourceLineNo">052</span><a id="line.52">import java.util.Arrays;</a> |
| <span class="sourceLineNo">053</span><a id="line.53">import java.util.Enumeration;</a> |
| <span class="sourceLineNo">054</span><a id="line.54">import java.util.HashMap;</a> |
| <span class="sourceLineNo">055</span><a id="line.55">import java.util.List;</a> |
| <span class="sourceLineNo">056</span><a id="line.56">import java.util.Map;</a> |
| <span class="sourceLineNo">057</span><a id="line.57"></a> |
| <span class="sourceLineNo">058</span><a id="line.58">/**</a> |
| <span class="sourceLineNo">059</span><a id="line.59"> * RoleProfileManager:</a> |
| <span class="sourceLineNo">060</span><a id="line.60"> *</a> |
| <span class="sourceLineNo">061</span><a id="line.61"> * @author: Jesse McConnell</a> |
| <span class="sourceLineNo">062</span><a id="line.62"> */</a> |
| <span class="sourceLineNo">063</span><a id="line.63">@Service("roleManager")</a> |
| <span class="sourceLineNo">064</span><a id="line.64">public class DefaultRoleManager</a> |
| <span class="sourceLineNo">065</span><a id="line.65"> implements RoleManager</a> |
| <span class="sourceLineNo">066</span><a id="line.66">{</a> |
| <span class="sourceLineNo">067</span><a id="line.67"> private Logger log = LoggerFactory.getLogger( DefaultRoleManager.class );</a> |
| <span class="sourceLineNo">068</span><a id="line.68"></a> |
| <span class="sourceLineNo">069</span><a id="line.69"> /**</a> |
| <span class="sourceLineNo">070</span><a id="line.70"> * the blessed model that has been validated as complete</a> |
| <span class="sourceLineNo">071</span><a id="line.71"> */</a> |
| <span class="sourceLineNo">072</span><a id="line.72"> private RedbackRoleModel blessedModel;</a> |
| <span class="sourceLineNo">073</span><a id="line.73"></a> |
| <span class="sourceLineNo">074</span><a id="line.74"> /**</a> |
| <span class="sourceLineNo">075</span><a id="line.75"> * the merged model that can be validated as complete</a> |
| <span class="sourceLineNo">076</span><a id="line.76"> */</a> |
| <span class="sourceLineNo">077</span><a id="line.77"> private RedbackRoleModel unblessedModel;</a> |
| <span class="sourceLineNo">078</span><a id="line.78"></a> |
| <span class="sourceLineNo">079</span><a id="line.79"> /**</a> |
| <span class="sourceLineNo">080</span><a id="line.80"> * a map of the resources, and the model that they loaded</a> |
| <span class="sourceLineNo">081</span><a id="line.81"> */</a> |
| <span class="sourceLineNo">082</span><a id="line.82"> private Map<String, ModelApplication> knownResources = new HashMap<String, ModelApplication>();</a> |
| <span class="sourceLineNo">083</span><a id="line.83"></a> |
| <span class="sourceLineNo">084</span><a id="line.84"> @Inject</a> |
| <span class="sourceLineNo">085</span><a id="line.85"> @Named(value = "roleModelValidator")</a> |
| <span class="sourceLineNo">086</span><a id="line.86"> private RoleModelValidator modelValidator;</a> |
| <span class="sourceLineNo">087</span><a id="line.87"></a> |
| <span class="sourceLineNo">088</span><a id="line.88"> @Inject</a> |
| <span class="sourceLineNo">089</span><a id="line.89"> @Named(value = "roleModelProcessor")</a> |
| <span class="sourceLineNo">090</span><a id="line.90"> private RoleModelProcessor modelProcessor;</a> |
| <span class="sourceLineNo">091</span><a id="line.91"></a> |
| <span class="sourceLineNo">092</span><a id="line.92"> @Inject</a> |
| <span class="sourceLineNo">093</span><a id="line.93"> @Named(value = "roleTemplateProcessor")</a> |
| <span class="sourceLineNo">094</span><a id="line.94"> private RoleTemplateProcessor templateProcessor;</a> |
| <span class="sourceLineNo">095</span><a id="line.95"></a> |
| <span class="sourceLineNo">096</span><a id="line.96"> @Inject</a> |
| <span class="sourceLineNo">097</span><a id="line.97"> @Named(value = "rbacManager#default")</a> |
| <span class="sourceLineNo">098</span><a id="line.98"> private RBACManager rbacManager;</a> |
| <span class="sourceLineNo">099</span><a id="line.99"></a> |
| <span class="sourceLineNo">100</span><a id="line.100"></a> |
| <span class="sourceLineNo">101</span><a id="line.101"> @Override</a> |
| <span class="sourceLineNo">102</span><a id="line.102"> public void loadRoleModel( URL resource )</a> |
| <span class="sourceLineNo">103</span><a id="line.103"> throws RoleManagerException</a> |
| <span class="sourceLineNo">104</span><a id="line.104"> {</a> |
| <span class="sourceLineNo">105</span><a id="line.105"> RedbackRoleModelStaxReader reader = new RedbackRoleModelStaxReader();</a> |
| <span class="sourceLineNo">106</span><a id="line.106"></a> |
| <span class="sourceLineNo">107</span><a id="line.107"> try(InputStreamReader inputStreamReader = new InputStreamReader( resource.openStream() ))</a> |
| <span class="sourceLineNo">108</span><a id="line.108"> {</a> |
| <span class="sourceLineNo">109</span><a id="line.109"></a> |
| <span class="sourceLineNo">110</span><a id="line.110"> RedbackRoleModel roleModel = reader.read( inputStreamReader );</a> |
| <span class="sourceLineNo">111</span><a id="line.111"></a> |
| <span class="sourceLineNo">112</span><a id="line.112"> for ( ModelApplication app : roleModel.getApplications() )</a> |
| <span class="sourceLineNo">113</span><a id="line.113"> {</a> |
| <span class="sourceLineNo">114</span><a id="line.114"> if ( !knownResources.containsKey( app.getId() ) )</a> |
| <span class="sourceLineNo">115</span><a id="line.115"> {</a> |
| <span class="sourceLineNo">116</span><a id="line.116"> log.info( "loading {}", app.getId() );</a> |
| <span class="sourceLineNo">117</span><a id="line.117"> loadApplication( app );</a> |
| <span class="sourceLineNo">118</span><a id="line.118"> }</a> |
| <span class="sourceLineNo">119</span><a id="line.119"> }</a> |
| <span class="sourceLineNo">120</span><a id="line.120"> }</a> |
| <span class="sourceLineNo">121</span><a id="line.121"> catch ( MalformedURLException e )</a> |
| <span class="sourceLineNo">122</span><a id="line.122"> {</a> |
| <span class="sourceLineNo">123</span><a id="line.123"> throw new RoleManagerException( "error locating redback profile", e );</a> |
| <span class="sourceLineNo">124</span><a id="line.124"> }</a> |
| <span class="sourceLineNo">125</span><a id="line.125"> catch ( IOException e )</a> |
| <span class="sourceLineNo">126</span><a id="line.126"> {</a> |
| <span class="sourceLineNo">127</span><a id="line.127"> throw new RoleManagerException( "error reading redback profile", e );</a> |
| <span class="sourceLineNo">128</span><a id="line.128"> }</a> |
| <span class="sourceLineNo">129</span><a id="line.129"> catch ( XMLStreamException e )</a> |
| <span class="sourceLineNo">130</span><a id="line.130"> {</a> |
| <span class="sourceLineNo">131</span><a id="line.131"> throw new RoleManagerException( "error parsing redback profile", e );</a> |
| <span class="sourceLineNo">132</span><a id="line.132"> }</a> |
| <span class="sourceLineNo">133</span><a id="line.133"> }</a> |
| <span class="sourceLineNo">134</span><a id="line.134"></a> |
| <span class="sourceLineNo">135</span><a id="line.135"> @Override</a> |
| <span class="sourceLineNo">136</span><a id="line.136"> public void loadRoleModel( RedbackRoleModel roleModel )</a> |
| <span class="sourceLineNo">137</span><a id="line.137"> throws RoleManagerException</a> |
| <span class="sourceLineNo">138</span><a id="line.138"> {</a> |
| <span class="sourceLineNo">139</span><a id="line.139"> for ( ModelApplication app : roleModel.getApplications() )</a> |
| <span class="sourceLineNo">140</span><a id="line.140"> {</a> |
| <span class="sourceLineNo">141</span><a id="line.141"> if ( !knownResources.containsKey( app.getId() ) )</a> |
| <span class="sourceLineNo">142</span><a id="line.142"> {</a> |
| <span class="sourceLineNo">143</span><a id="line.143"> loadApplication( app );</a> |
| <span class="sourceLineNo">144</span><a id="line.144"> }</a> |
| <span class="sourceLineNo">145</span><a id="line.145"> }</a> |
| <span class="sourceLineNo">146</span><a id="line.146"></a> |
| <span class="sourceLineNo">147</span><a id="line.147"> }</a> |
| <span class="sourceLineNo">148</span><a id="line.148"></a> |
| <span class="sourceLineNo">149</span><a id="line.149"> public void loadApplication( ModelApplication app )</a> |
| <span class="sourceLineNo">150</span><a id="line.150"> throws RoleManagerException</a> |
| <span class="sourceLineNo">151</span><a id="line.151"> {</a> |
| <span class="sourceLineNo">152</span><a id="line.152"> if ( unblessedModel == null )</a> |
| <span class="sourceLineNo">153</span><a id="line.153"> {</a> |
| <span class="sourceLineNo">154</span><a id="line.154"> unblessedModel = new RedbackRoleModel();</a> |
| <span class="sourceLineNo">155</span><a id="line.155"> }</a> |
| <span class="sourceLineNo">156</span><a id="line.156"></a> |
| <span class="sourceLineNo">157</span><a id="line.157"> unblessedModel.addApplication( app );</a> |
| <span class="sourceLineNo">158</span><a id="line.158"></a> |
| <span class="sourceLineNo">159</span><a id="line.159"> if ( modelValidator.validate( unblessedModel ) )</a> |
| <span class="sourceLineNo">160</span><a id="line.160"> {</a> |
| <span class="sourceLineNo">161</span><a id="line.161"> blessedModel = unblessedModel;</a> |
| <span class="sourceLineNo">162</span><a id="line.162"> }</a> |
| <span class="sourceLineNo">163</span><a id="line.163"> else</a> |
| <span class="sourceLineNo">164</span><a id="line.164"> {</a> |
| <span class="sourceLineNo">165</span><a id="line.165"> StringBuilder stringBuilder = new StringBuilder( "Role Model Validation Errors:" );</a> |
| <span class="sourceLineNo">166</span><a id="line.166"></a> |
| <span class="sourceLineNo">167</span><a id="line.167"> for ( String error : modelValidator.getValidationErrors() )</a> |
| <span class="sourceLineNo">168</span><a id="line.168"> {</a> |
| <span class="sourceLineNo">169</span><a id="line.169"> stringBuilder.append( error ).append( SystemUtils.LINE_SEPARATOR );</a> |
| <span class="sourceLineNo">170</span><a id="line.170"> }</a> |
| <span class="sourceLineNo">171</span><a id="line.171"></a> |
| <span class="sourceLineNo">172</span><a id="line.172"> log.error( stringBuilder.toString() );</a> |
| <span class="sourceLineNo">173</span><a id="line.173"></a> |
| <span class="sourceLineNo">174</span><a id="line.174"> throw new RoleManagerException(</a> |
| <span class="sourceLineNo">175</span><a id="line.175"> "Role Model Validation Error " + SystemUtils.LINE_SEPARATOR + stringBuilder.toString() );</a> |
| <span class="sourceLineNo">176</span><a id="line.176"> }</a> |
| <span class="sourceLineNo">177</span><a id="line.177"></a> |
| <span class="sourceLineNo">178</span><a id="line.178"> modelProcessor.process( blessedModel );</a> |
| <span class="sourceLineNo">179</span><a id="line.179"></a> |
| <span class="sourceLineNo">180</span><a id="line.180"> knownResources.put( app.getId(), app );</a> |
| <span class="sourceLineNo">181</span><a id="line.181"> }</a> |
| <span class="sourceLineNo">182</span><a id="line.182"></a> |
| <span class="sourceLineNo">183</span><a id="line.183"> /**</a> |
| <span class="sourceLineNo">184</span><a id="line.184"> * create a role for the given roleName using the resource passed in for</a> |
| <span class="sourceLineNo">185</span><a id="line.185"> * resolving the ${resource} expression</a> |
| <span class="sourceLineNo">186</span><a id="line.186"> */</a> |
| <span class="sourceLineNo">187</span><a id="line.187"> @Override</a> |
| <span class="sourceLineNo">188</span><a id="line.188"> public String createTemplatedRole( String templateId, String resource )</a> |
| <span class="sourceLineNo">189</span><a id="line.189"> throws RoleManagerException</a> |
| <span class="sourceLineNo">190</span><a id="line.190"> {</a> |
| <span class="sourceLineNo">191</span><a id="line.191"> return templateProcessor.create( blessedModel, templateId, resource );</a> |
| <span class="sourceLineNo">192</span><a id="line.192"> }</a> |
| <span class="sourceLineNo">193</span><a id="line.193"></a> |
| <span class="sourceLineNo">194</span><a id="line.194"> /**</a> |
| <span class="sourceLineNo">195</span><a id="line.195"> * remove the role corresponding to the role using the resource passed in for resolving the</a> |
| <span class="sourceLineNo">196</span><a id="line.196"> * ${resource} expression</a> |
| <span class="sourceLineNo">197</span><a id="line.197"> */</a> |
| <span class="sourceLineNo">198</span><a id="line.198"> @Override</a> |
| <span class="sourceLineNo">199</span><a id="line.199"> public void removeTemplatedRole( String templateId, String resource )</a> |
| <span class="sourceLineNo">200</span><a id="line.200"> throws RoleManagerException</a> |
| <span class="sourceLineNo">201</span><a id="line.201"> {</a> |
| <span class="sourceLineNo">202</span><a id="line.202"> String roleId = templateProcessor.getRoleId( templateId, resource );</a> |
| <span class="sourceLineNo">203</span><a id="line.203"> try</a> |
| <span class="sourceLineNo">204</span><a id="line.204"> {</a> |
| <span class="sourceLineNo">205</span><a id="line.205"> Role role = rbacManager.getRoleById( roleId );</a> |
| <span class="sourceLineNo">206</span><a id="line.206"></a> |
| <span class="sourceLineNo">207</span><a id="line.207"> for ( UserAssignment assignment : rbacManager.getUserAssignmentsForRoles(</a> |
| <span class="sourceLineNo">208</span><a id="line.208"> Arrays.asList( role.getId() ) ) )</a> |
| <span class="sourceLineNo">209</span><a id="line.209"> {</a> |
| <span class="sourceLineNo">210</span><a id="line.210"> assignment.removeRoleId( role );</a> |
| <span class="sourceLineNo">211</span><a id="line.211"> rbacManager.saveUserAssignment( assignment );</a> |
| <span class="sourceLineNo">212</span><a id="line.212"> }</a> |
| <span class="sourceLineNo">213</span><a id="line.213"></a> |
| <span class="sourceLineNo">214</span><a id="line.214"> } catch ( RbacObjectNotFoundException e) {</a> |
| <span class="sourceLineNo">215</span><a id="line.215"> throw new RoleNotFoundException( e.getMessage( ), e );</a> |
| <span class="sourceLineNo">216</span><a id="line.216"> }</a> |
| <span class="sourceLineNo">217</span><a id="line.217"> catch ( RbacManagerException e )</a> |
| <span class="sourceLineNo">218</span><a id="line.218"> {</a> |
| <span class="sourceLineNo">219</span><a id="line.219"> throw new RoleManagerException( "Unable to remove role", e );</a> |
| <span class="sourceLineNo">220</span><a id="line.220"> }</a> |
| <span class="sourceLineNo">221</span><a id="line.221"></a> |
| <span class="sourceLineNo">222</span><a id="line.222"> templateProcessor.remove( blessedModel, templateId, resource );</a> |
| <span class="sourceLineNo">223</span><a id="line.223"> }</a> |
| <span class="sourceLineNo">224</span><a id="line.224"></a> |
| <span class="sourceLineNo">225</span><a id="line.225"> /**</a> |
| <span class="sourceLineNo">226</span><a id="line.226"> * update the role from templateId from oldResource to newResource</a> |
| <span class="sourceLineNo">227</span><a id="line.227"> *</a> |
| <span class="sourceLineNo">228</span><a id="line.228"> * NOTE: this requires removal and creation of the role since the jdo store does not tolerate renaming</a> |
| <span class="sourceLineNo">229</span><a id="line.229"> * because of the use of the name as an identifier</a> |
| <span class="sourceLineNo">230</span><a id="line.230"> */</a> |
| <span class="sourceLineNo">231</span><a id="line.231"> @Override</a> |
| <span class="sourceLineNo">232</span><a id="line.232"> public String moveTemplatedRole( String templateId, String oldResource, String newResource )</a> |
| <span class="sourceLineNo">233</span><a id="line.233"> throws RoleManagerException</a> |
| <span class="sourceLineNo">234</span><a id="line.234"> {</a> |
| <span class="sourceLineNo">235</span><a id="line.235"> // make the new role</a> |
| <span class="sourceLineNo">236</span><a id="line.236"> String roleId = templateProcessor.create( blessedModel, templateId, newResource );</a> |
| <span class="sourceLineNo">237</span><a id="line.237"></a> |
| <span class="sourceLineNo">238</span><a id="line.238"> ModelTemplate template = RoleModelUtils.getModelTemplate( blessedModel, templateId );</a> |
| <span class="sourceLineNo">239</span><a id="line.239"></a> |
| <span class="sourceLineNo">240</span><a id="line.240"> String oldRoleName = template.getNamePrefix() + template.getDelimiter() + oldResource;</a> |
| <span class="sourceLineNo">241</span><a id="line.241"> String newRoleName = template.getNamePrefix() + template.getDelimiter() + newResource;</a> |
| <span class="sourceLineNo">242</span><a id="line.242"></a> |
| <span class="sourceLineNo">243</span><a id="line.243"> String oldRoleId = RoleModelUtils.getRoleId( templateId, oldResource );</a> |
| <span class="sourceLineNo">244</span><a id="line.244"> String newRoleId = RoleModelUtils.getRoleId( templateId, newResource );</a> |
| <span class="sourceLineNo">245</span><a id="line.245"></a> |
| <span class="sourceLineNo">246</span><a id="line.246"> try</a> |
| <span class="sourceLineNo">247</span><a id="line.247"> {</a> |
| <span class="sourceLineNo">248</span><a id="line.248"> Role role = rbacManager.getRole( oldRoleName );</a> |
| <span class="sourceLineNo">249</span><a id="line.249"></a> |
| <span class="sourceLineNo">250</span><a id="line.250"> // remove the user assignments</a> |
| <span class="sourceLineNo">251</span><a id="line.251"> for ( UserAssignment assignment : rbacManager.getUserAssignmentsForRoles(</a> |
| <span class="sourceLineNo">252</span><a id="line.252"> Arrays.asList( role.getId() ) ) )</a> |
| <span class="sourceLineNo">253</span><a id="line.253"> {</a> |
| <span class="sourceLineNo">254</span><a id="line.254"> assignment.removeRoleId( oldRoleId );</a> |
| <span class="sourceLineNo">255</span><a id="line.255"> assignment.addRoleId( newRoleId );</a> |
| <span class="sourceLineNo">256</span><a id="line.256"> rbacManager.saveUserAssignment( assignment );</a> |
| <span class="sourceLineNo">257</span><a id="line.257"> }</a> |
| <span class="sourceLineNo">258</span><a id="line.258"> }</a> |
| <span class="sourceLineNo">259</span><a id="line.259"> catch ( RbacManagerException e )</a> |
| <span class="sourceLineNo">260</span><a id="line.260"> {</a> |
| <span class="sourceLineNo">261</span><a id="line.261"> throw new RoleManagerException( "unable to update role", e );</a> |
| <span class="sourceLineNo">262</span><a id="line.262"> }</a> |
| <span class="sourceLineNo">263</span><a id="line.263"></a> |
| <span class="sourceLineNo">264</span><a id="line.264"> templateProcessor.remove( blessedModel, templateId, oldResource );</a> |
| <span class="sourceLineNo">265</span><a id="line.265"> return roleId;</a> |
| <span class="sourceLineNo">266</span><a id="line.266"> }</a> |
| <span class="sourceLineNo">267</span><a id="line.267"></a> |
| <span class="sourceLineNo">268</span><a id="line.268"> @Override</a> |
| <span class="sourceLineNo">269</span><a id="line.269"> public void assignRole( String roleId, String principal )</a> |
| <span class="sourceLineNo">270</span><a id="line.270"> throws RoleManagerException</a> |
| <span class="sourceLineNo">271</span><a id="line.271"> {</a> |
| <span class="sourceLineNo">272</span><a id="line.272"> try</a> |
| <span class="sourceLineNo">273</span><a id="line.273"> {</a> |
| <span class="sourceLineNo">274</span><a id="line.274"> rbacManager.getRoleById( roleId );</a> |
| <span class="sourceLineNo">275</span><a id="line.275"> }</a> |
| <span class="sourceLineNo">276</span><a id="line.276"> catch ( RbacObjectNotFoundException e ) {</a> |
| <span class="sourceLineNo">277</span><a id="line.277"> throw new RoleNotFoundException( e.getMessage(), e );</a> |
| <span class="sourceLineNo">278</span><a id="line.278"> }</a> |
| <span class="sourceLineNo">279</span><a id="line.279"> catch ( RbacManagerException e )</a> |
| <span class="sourceLineNo">280</span><a id="line.280"> {</a> |
| <span class="sourceLineNo">281</span><a id="line.281"> throw new RoleManagerException( e.getMessage( ), e );</a> |
| <span class="sourceLineNo">282</span><a id="line.282"> }</a> |
| <span class="sourceLineNo">283</span><a id="line.283"> try</a> |
| <span class="sourceLineNo">284</span><a id="line.284"> {</a> |
| <span class="sourceLineNo">285</span><a id="line.285"> UserAssignment userAssignment;</a> |
| <span class="sourceLineNo">286</span><a id="line.286"></a> |
| <span class="sourceLineNo">287</span><a id="line.287"> if ( rbacManager.userAssignmentExists( principal ) )</a> |
| <span class="sourceLineNo">288</span><a id="line.288"> {</a> |
| <span class="sourceLineNo">289</span><a id="line.289"> userAssignment = rbacManager.getUserAssignment( principal );</a> |
| <span class="sourceLineNo">290</span><a id="line.290"> }</a> |
| <span class="sourceLineNo">291</span><a id="line.291"> else</a> |
| <span class="sourceLineNo">292</span><a id="line.292"> {</a> |
| <span class="sourceLineNo">293</span><a id="line.293"> userAssignment = rbacManager.createUserAssignment( principal );</a> |
| <span class="sourceLineNo">294</span><a id="line.294"> }</a> |
| <span class="sourceLineNo">295</span><a id="line.295"></a> |
| <span class="sourceLineNo">296</span><a id="line.296"> userAssignment.addRoleId( roleId );</a> |
| <span class="sourceLineNo">297</span><a id="line.297"> rbacManager.saveUserAssignment( userAssignment );</a> |
| <span class="sourceLineNo">298</span><a id="line.298"> }</a> |
| <span class="sourceLineNo">299</span><a id="line.299"> catch ( RbacManagerException e )</a> |
| <span class="sourceLineNo">300</span><a id="line.300"> {</a> |
| <span class="sourceLineNo">301</span><a id="line.301"> throw new RoleManagerException( "Unable to assign role: unable to manage user assignment", e );</a> |
| <span class="sourceLineNo">302</span><a id="line.302"> }</a> |
| <span class="sourceLineNo">303</span><a id="line.303"> }</a> |
| <span class="sourceLineNo">304</span><a id="line.304"></a> |
| <span class="sourceLineNo">305</span><a id="line.305"> @Override</a> |
| <span class="sourceLineNo">306</span><a id="line.306"> public void assignRoleByName( String roleName, String principal )</a> |
| <span class="sourceLineNo">307</span><a id="line.307"> throws RoleManagerException</a> |
| <span class="sourceLineNo">308</span><a id="line.308"> {</a> |
| <span class="sourceLineNo">309</span><a id="line.309"> try</a> |
| <span class="sourceLineNo">310</span><a id="line.310"> {</a> |
| <span class="sourceLineNo">311</span><a id="line.311"> Role role = rbacManager.getRole( roleName );</a> |
| <span class="sourceLineNo">312</span><a id="line.312"> UserAssignment userAssignment;</a> |
| <span class="sourceLineNo">313</span><a id="line.313"></a> |
| <span class="sourceLineNo">314</span><a id="line.314"> if ( rbacManager.userAssignmentExists( principal ) )</a> |
| <span class="sourceLineNo">315</span><a id="line.315"> {</a> |
| <span class="sourceLineNo">316</span><a id="line.316"> userAssignment = rbacManager.getUserAssignment( principal );</a> |
| <span class="sourceLineNo">317</span><a id="line.317"> }</a> |
| <span class="sourceLineNo">318</span><a id="line.318"> else</a> |
| <span class="sourceLineNo">319</span><a id="line.319"> {</a> |
| <span class="sourceLineNo">320</span><a id="line.320"> userAssignment = rbacManager.createUserAssignment( principal );</a> |
| <span class="sourceLineNo">321</span><a id="line.321"> }</a> |
| <span class="sourceLineNo">322</span><a id="line.322"></a> |
| <span class="sourceLineNo">323</span><a id="line.323"> if ( !rbacManager.roleExists( roleName ) )</a> |
| <span class="sourceLineNo">324</span><a id="line.324"> {</a> |
| <span class="sourceLineNo">325</span><a id="line.325"> throw new RoleManagerException( "Unable to assign role: " + roleName + " does not exist." );</a> |
| <span class="sourceLineNo">326</span><a id="line.326"> }</a> |
| <span class="sourceLineNo">327</span><a id="line.327"></a> |
| <span class="sourceLineNo">328</span><a id="line.328"> userAssignment.addRoleId( role.getId() );</a> |
| <span class="sourceLineNo">329</span><a id="line.329"> rbacManager.saveUserAssignment( userAssignment );</a> |
| <span class="sourceLineNo">330</span><a id="line.330"> }</a> |
| <span class="sourceLineNo">331</span><a id="line.331"> catch ( RbacManagerException e )</a> |
| <span class="sourceLineNo">332</span><a id="line.332"> {</a> |
| <span class="sourceLineNo">333</span><a id="line.333"> throw new RoleManagerException( "Unable to assign role: unable to manage user assignment", e );</a> |
| <span class="sourceLineNo">334</span><a id="line.334"> }</a> |
| <span class="sourceLineNo">335</span><a id="line.335"> }</a> |
| <span class="sourceLineNo">336</span><a id="line.336"></a> |
| <span class="sourceLineNo">337</span><a id="line.337"> @Override</a> |
| <span class="sourceLineNo">338</span><a id="line.338"> public void assignTemplatedRole( String templateId, String resource, String principal )</a> |
| <span class="sourceLineNo">339</span><a id="line.339"> throws RoleManagerException</a> |
| <span class="sourceLineNo">340</span><a id="line.340"> {</a> |
| <span class="sourceLineNo">341</span><a id="line.341"> ModelTemplate modelTemplate = RoleModelUtils.getModelTemplate( blessedModel, templateId );</a> |
| <span class="sourceLineNo">342</span><a id="line.342"></a> |
| <span class="sourceLineNo">343</span><a id="line.343"> if ( modelTemplate == null )</a> |
| <span class="sourceLineNo">344</span><a id="line.344"> {</a> |
| <span class="sourceLineNo">345</span><a id="line.345"> throw new RoleNotFoundException( "Unable to assign role: " + templateId + " does not exist." );</a> |
| <span class="sourceLineNo">346</span><a id="line.346"> }</a> |
| <span class="sourceLineNo">347</span><a id="line.347"> try</a> |
| <span class="sourceLineNo">348</span><a id="line.348"> {</a> |
| <span class="sourceLineNo">349</span><a id="line.349"> if ( !rbacManager.resourceExists( resource ) )</a> |
| <span class="sourceLineNo">350</span><a id="line.350"> {</a> |
| <span class="sourceLineNo">351</span><a id="line.351"> Resource newResource = rbacManager.createResource( resource );</a> |
| <span class="sourceLineNo">352</span><a id="line.352"> rbacManager.saveResource( newResource );</a> |
| <span class="sourceLineNo">353</span><a id="line.353"> }</a> |
| <span class="sourceLineNo">354</span><a id="line.354"></a> |
| <span class="sourceLineNo">355</span><a id="line.355"> UserAssignment userAssignment;</a> |
| <span class="sourceLineNo">356</span><a id="line.356"></a> |
| <span class="sourceLineNo">357</span><a id="line.357"> if ( rbacManager.userAssignmentExists( principal ) )</a> |
| <span class="sourceLineNo">358</span><a id="line.358"> {</a> |
| <span class="sourceLineNo">359</span><a id="line.359"> userAssignment = rbacManager.getUserAssignment( principal );</a> |
| <span class="sourceLineNo">360</span><a id="line.360"> }</a> |
| <span class="sourceLineNo">361</span><a id="line.361"> else</a> |
| <span class="sourceLineNo">362</span><a id="line.362"> {</a> |
| <span class="sourceLineNo">363</span><a id="line.363"> userAssignment = rbacManager.createUserAssignment( principal );</a> |
| <span class="sourceLineNo">364</span><a id="line.364"> }</a> |
| <span class="sourceLineNo">365</span><a id="line.365"></a> |
| <span class="sourceLineNo">366</span><a id="line.366"> userAssignment.addRoleId( RoleModelUtils.getRoleId( modelTemplate.getId(), resource ) );</a> |
| <span class="sourceLineNo">367</span><a id="line.367"> rbacManager.saveUserAssignment( userAssignment );</a> |
| <span class="sourceLineNo">368</span><a id="line.368"> }</a> |
| <span class="sourceLineNo">369</span><a id="line.369"> catch ( RbacManagerException e )</a> |
| <span class="sourceLineNo">370</span><a id="line.370"> {</a> |
| <span class="sourceLineNo">371</span><a id="line.371"> throw new RoleManagerException( "Unable to assign role: unable to manage user assignment", e );</a> |
| <span class="sourceLineNo">372</span><a id="line.372"> }</a> |
| <span class="sourceLineNo">373</span><a id="line.373"> }</a> |
| <span class="sourceLineNo">374</span><a id="line.374"></a> |
| <span class="sourceLineNo">375</span><a id="line.375"> @Override</a> |
| <span class="sourceLineNo">376</span><a id="line.376"> public void unassignRole( String roleId, String principal )</a> |
| <span class="sourceLineNo">377</span><a id="line.377"> throws RoleManagerException</a> |
| <span class="sourceLineNo">378</span><a id="line.378"> {</a> |
| <span class="sourceLineNo">379</span><a id="line.379"></a> |
| <span class="sourceLineNo">380</span><a id="line.380"> try</a> |
| <span class="sourceLineNo">381</span><a id="line.381"> {</a> |
| <span class="sourceLineNo">382</span><a id="line.382"> rbacManager.getRoleById( roleId );</a> |
| <span class="sourceLineNo">383</span><a id="line.383"> UserAssignment userAssignment;</a> |
| <span class="sourceLineNo">384</span><a id="line.384"></a> |
| <span class="sourceLineNo">385</span><a id="line.385"> if ( rbacManager.userAssignmentExists( principal ) )</a> |
| <span class="sourceLineNo">386</span><a id="line.386"> {</a> |
| <span class="sourceLineNo">387</span><a id="line.387"> userAssignment = rbacManager.getUserAssignment( principal );</a> |
| <span class="sourceLineNo">388</span><a id="line.388"> }</a> |
| <span class="sourceLineNo">389</span><a id="line.389"> else</a> |
| <span class="sourceLineNo">390</span><a id="line.390"> {</a> |
| <span class="sourceLineNo">391</span><a id="line.391"> throw new RoleManagerException(</a> |
| <span class="sourceLineNo">392</span><a id="line.392"> "UserAssignment for principal " + principal + "does not exist, can't unassign role." );</a> |
| <span class="sourceLineNo">393</span><a id="line.393"> }</a> |
| <span class="sourceLineNo">394</span><a id="line.394"></a> |
| <span class="sourceLineNo">395</span><a id="line.395"> userAssignment.removeRoleId( roleId );</a> |
| <span class="sourceLineNo">396</span><a id="line.396"> rbacManager.saveUserAssignment( userAssignment );</a> |
| <span class="sourceLineNo">397</span><a id="line.397"> }</a> |
| <span class="sourceLineNo">398</span><a id="line.398"> catch (RoleNotFoundException e) {</a> |
| <span class="sourceLineNo">399</span><a id="line.399"> throw new RoleNotFoundException( "Unable to unassign role: " + roleId + " does not exist." );</a> |
| <span class="sourceLineNo">400</span><a id="line.400"> }</a> |
| <span class="sourceLineNo">401</span><a id="line.401"> catch ( RbacManagerException e )</a> |
| <span class="sourceLineNo">402</span><a id="line.402"> {</a> |
| <span class="sourceLineNo">403</span><a id="line.403"> throw new RoleManagerException( "Unable to unassign role: unable to manage user assignment", e );</a> |
| <span class="sourceLineNo">404</span><a id="line.404"> }</a> |
| <span class="sourceLineNo">405</span><a id="line.405"> }</a> |
| <span class="sourceLineNo">406</span><a id="line.406"></a> |
| <span class="sourceLineNo">407</span><a id="line.407"> @Override</a> |
| <span class="sourceLineNo">408</span><a id="line.408"> public void unassignRoleByName( String roleName, String principal )</a> |
| <span class="sourceLineNo">409</span><a id="line.409"> throws RoleManagerException</a> |
| <span class="sourceLineNo">410</span><a id="line.410"> {</a> |
| <span class="sourceLineNo">411</span><a id="line.411"> try</a> |
| <span class="sourceLineNo">412</span><a id="line.412"> {</a> |
| <span class="sourceLineNo">413</span><a id="line.413"> UserAssignment userAssignment;</a> |
| <span class="sourceLineNo">414</span><a id="line.414"></a> |
| <span class="sourceLineNo">415</span><a id="line.415"> if ( rbacManager.userAssignmentExists( principal ) )</a> |
| <span class="sourceLineNo">416</span><a id="line.416"> {</a> |
| <span class="sourceLineNo">417</span><a id="line.417"> userAssignment = rbacManager.getUserAssignment( principal );</a> |
| <span class="sourceLineNo">418</span><a id="line.418"> }</a> |
| <span class="sourceLineNo">419</span><a id="line.419"> else</a> |
| <span class="sourceLineNo">420</span><a id="line.420"> {</a> |
| <span class="sourceLineNo">421</span><a id="line.421"> throw new RoleManagerException(</a> |
| <span class="sourceLineNo">422</span><a id="line.422"> "UserAssignment for principal " + principal + "does not exist, can't unassign role." );</a> |
| <span class="sourceLineNo">423</span><a id="line.423"> }</a> |
| <span class="sourceLineNo">424</span><a id="line.424"></a> |
| <span class="sourceLineNo">425</span><a id="line.425"> if ( !rbacManager.roleExists( roleName ) )</a> |
| <span class="sourceLineNo">426</span><a id="line.426"> {</a> |
| <span class="sourceLineNo">427</span><a id="line.427"> throw new RoleManagerException( "Unable to unassign role: " + roleName + " does not exist." );</a> |
| <span class="sourceLineNo">428</span><a id="line.428"> }</a> |
| <span class="sourceLineNo">429</span><a id="line.429"></a> |
| <span class="sourceLineNo">430</span><a id="line.430"> Role rbacRole = rbacManager.getRole( roleName );</a> |
| <span class="sourceLineNo">431</span><a id="line.431"> userAssignment.removeRoleId( rbacRole.getId() );</a> |
| <span class="sourceLineNo">432</span><a id="line.432"> rbacManager.saveUserAssignment( userAssignment );</a> |
| <span class="sourceLineNo">433</span><a id="line.433"> }</a> |
| <span class="sourceLineNo">434</span><a id="line.434"> catch ( RbacManagerException e )</a> |
| <span class="sourceLineNo">435</span><a id="line.435"> {</a> |
| <span class="sourceLineNo">436</span><a id="line.436"> throw new RoleManagerException( "Unable to unassign role: unable to manage user assignment", e );</a> |
| <span class="sourceLineNo">437</span><a id="line.437"> }</a> |
| <span class="sourceLineNo">438</span><a id="line.438"> }</a> |
| <span class="sourceLineNo">439</span><a id="line.439"></a> |
| <span class="sourceLineNo">440</span><a id="line.440"> @Override</a> |
| <span class="sourceLineNo">441</span><a id="line.441"> public boolean roleExists( String roleId )</a> |
| <span class="sourceLineNo">442</span><a id="line.442"> throws RoleManagerException</a> |
| <span class="sourceLineNo">443</span><a id="line.443"> {</a> |
| <span class="sourceLineNo">444</span><a id="line.444"> ModelRole modelRole = RoleModelUtils.getModelRole( blessedModel, roleId );</a> |
| <span class="sourceLineNo">445</span><a id="line.445"></a> |
| <span class="sourceLineNo">446</span><a id="line.446"> if ( modelRole == null )</a> |
| <span class="sourceLineNo">447</span><a id="line.447"> {</a> |
| <span class="sourceLineNo">448</span><a id="line.448"> return false;</a> |
| <span class="sourceLineNo">449</span><a id="line.449"> }</a> |
| <span class="sourceLineNo">450</span><a id="line.450"> else</a> |
| <span class="sourceLineNo">451</span><a id="line.451"> {</a> |
| <span class="sourceLineNo">452</span><a id="line.452"> try</a> |
| <span class="sourceLineNo">453</span><a id="line.453"> {</a> |
| <span class="sourceLineNo">454</span><a id="line.454"> if ( rbacManager.roleExists( modelRole.getName() ) )</a> |
| <span class="sourceLineNo">455</span><a id="line.455"> {</a> |
| <span class="sourceLineNo">456</span><a id="line.456"> return true;</a> |
| <span class="sourceLineNo">457</span><a id="line.457"> }</a> |
| <span class="sourceLineNo">458</span><a id="line.458"> else</a> |
| <span class="sourceLineNo">459</span><a id="line.459"> {</a> |
| <span class="sourceLineNo">460</span><a id="line.460"> // perhaps try and reload the model here?</a> |
| <span class="sourceLineNo">461</span><a id="line.461"> throw new RoleManagerException( "breakdown in role management, role '" + modelRole.getName()</a> |
| <span class="sourceLineNo">462</span><a id="line.462"> + "' exists in configuration but was not created in underlying store" );</a> |
| <span class="sourceLineNo">463</span><a id="line.463"> }</a> |
| <span class="sourceLineNo">464</span><a id="line.464"> }</a> |
| <span class="sourceLineNo">465</span><a id="line.465"> catch ( RbacManagerException e )</a> |
| <span class="sourceLineNo">466</span><a id="line.466"> {</a> |
| <span class="sourceLineNo">467</span><a id="line.467"> throw new RoleManagerException( e.getMessage(), e );</a> |
| <span class="sourceLineNo">468</span><a id="line.468"> }</a> |
| <span class="sourceLineNo">469</span><a id="line.469"> }</a> |
| <span class="sourceLineNo">470</span><a id="line.470"> }</a> |
| <span class="sourceLineNo">471</span><a id="line.471"></a> |
| <span class="sourceLineNo">472</span><a id="line.472"> @Override</a> |
| <span class="sourceLineNo">473</span><a id="line.473"> public boolean templatedRoleExists( String templateId, String resource )</a> |
| <span class="sourceLineNo">474</span><a id="line.474"> throws RoleManagerException</a> |
| <span class="sourceLineNo">475</span><a id="line.475"> {</a> |
| <span class="sourceLineNo">476</span><a id="line.476"> ModelTemplate modelTemplate = RoleModelUtils.getModelTemplate( blessedModel, templateId );</a> |
| <span class="sourceLineNo">477</span><a id="line.477"></a> |
| <span class="sourceLineNo">478</span><a id="line.478"> // template not existing is valid to check, it will throw exception on trying to create</a> |
| <span class="sourceLineNo">479</span><a id="line.479"> if ( modelTemplate == null )</a> |
| <span class="sourceLineNo">480</span><a id="line.480"> {</a> |
| <span class="sourceLineNo">481</span><a id="line.481"> return false;</a> |
| <span class="sourceLineNo">482</span><a id="line.482"> }</a> |
| <span class="sourceLineNo">483</span><a id="line.483"> else</a> |
| <span class="sourceLineNo">484</span><a id="line.484"> {</a> |
| <span class="sourceLineNo">485</span><a id="line.485"> try</a> |
| <span class="sourceLineNo">486</span><a id="line.486"> {</a> |
| <span class="sourceLineNo">487</span><a id="line.487"> if ( rbacManager.roleExists( modelTemplate.getNamePrefix() + modelTemplate.getDelimiter() + resource ) )</a> |
| <span class="sourceLineNo">488</span><a id="line.488"> {</a> |
| <span class="sourceLineNo">489</span><a id="line.489"> return true;</a> |
| <span class="sourceLineNo">490</span><a id="line.490"> }</a> |
| <span class="sourceLineNo">491</span><a id="line.491"> else</a> |
| <span class="sourceLineNo">492</span><a id="line.492"> {</a> |
| <span class="sourceLineNo">493</span><a id="line.493"> return false;</a> |
| <span class="sourceLineNo">494</span><a id="line.494"> }</a> |
| <span class="sourceLineNo">495</span><a id="line.495"> }</a> |
| <span class="sourceLineNo">496</span><a id="line.496"> catch ( RbacManagerException e )</a> |
| <span class="sourceLineNo">497</span><a id="line.497"> {</a> |
| <span class="sourceLineNo">498</span><a id="line.498"> throw new RoleManagerException( e.getMessage(), e );</a> |
| <span class="sourceLineNo">499</span><a id="line.499"> }</a> |
| <span class="sourceLineNo">500</span><a id="line.500"> }</a> |
| <span class="sourceLineNo">501</span><a id="line.501"> }</a> |
| <span class="sourceLineNo">502</span><a id="line.502"></a> |
| <span class="sourceLineNo">503</span><a id="line.503"> @Override</a> |
| <span class="sourceLineNo">504</span><a id="line.504"> @PostConstruct</a> |
| <span class="sourceLineNo">505</span><a id="line.505"> public void initialize()</a> |
| <span class="sourceLineNo">506</span><a id="line.506"> {</a> |
| <span class="sourceLineNo">507</span><a id="line.507"></a> |
| <span class="sourceLineNo">508</span><a id="line.508"> knownResources = new HashMap<String, ModelApplication>();</a> |
| <span class="sourceLineNo">509</span><a id="line.509"> this.unblessedModel = new RedbackRoleModel();</a> |
| <span class="sourceLineNo">510</span><a id="line.510"> StopWatch stopWatch = new StopWatch();</a> |
| <span class="sourceLineNo">511</span><a id="line.511"> stopWatch.start();</a> |
| <span class="sourceLineNo">512</span><a id="line.512"></a> |
| <span class="sourceLineNo">513</span><a id="line.513"> try</a> |
| <span class="sourceLineNo">514</span><a id="line.514"> {</a> |
| <span class="sourceLineNo">515</span><a id="line.515"> URL baseResource = RoleManager.class.getResource( "/META-INF/redback/redback-core.xml" );</a> |
| <span class="sourceLineNo">516</span><a id="line.516"></a> |
| <span class="sourceLineNo">517</span><a id="line.517"> if ( baseResource == null )</a> |
| <span class="sourceLineNo">518</span><a id="line.518"> {</a> |
| <span class="sourceLineNo">519</span><a id="line.519"> throw new RuntimeException( "unable to initialize role manager, missing redback-core.xml" );</a> |
| <span class="sourceLineNo">520</span><a id="line.520"> }</a> |
| <span class="sourceLineNo">521</span><a id="line.521"></a> |
| <span class="sourceLineNo">522</span><a id="line.522"> loadRoleModel( baseResource );</a> |
| <span class="sourceLineNo">523</span><a id="line.523"></a> |
| <span class="sourceLineNo">524</span><a id="line.524"> Enumeration<URL> enumerator =</a> |
| <span class="sourceLineNo">525</span><a id="line.525"> RoleManager.class.getClassLoader().getResources( "META-INF/redback/redback.xml" );</a> |
| <span class="sourceLineNo">526</span><a id="line.526"></a> |
| <span class="sourceLineNo">527</span><a id="line.527"> while ( enumerator.hasMoreElements() )</a> |
| <span class="sourceLineNo">528</span><a id="line.528"> {</a> |
| <span class="sourceLineNo">529</span><a id="line.529"> URL redbackResource = enumerator.nextElement();</a> |
| <span class="sourceLineNo">530</span><a id="line.530"></a> |
| <span class="sourceLineNo">531</span><a id="line.531"> loadRoleModel( redbackResource );</a> |
| <span class="sourceLineNo">532</span><a id="line.532"> }</a> |
| <span class="sourceLineNo">533</span><a id="line.533"> }</a> |
| <span class="sourceLineNo">534</span><a id="line.534"> catch ( RoleManagerException e )</a> |
| <span class="sourceLineNo">535</span><a id="line.535"> {</a> |
| <span class="sourceLineNo">536</span><a id="line.536"> throw new RuntimeException( "unable to initialize RoleManager", e );</a> |
| <span class="sourceLineNo">537</span><a id="line.537"> }</a> |
| <span class="sourceLineNo">538</span><a id="line.538"> catch ( IOException e )</a> |
| <span class="sourceLineNo">539</span><a id="line.539"> {</a> |
| <span class="sourceLineNo">540</span><a id="line.540"> throw new RuntimeException( "unable to initialize RoleManager, problem with redback.xml loading", e );</a> |
| <span class="sourceLineNo">541</span><a id="line.541"> }</a> |
| <span class="sourceLineNo">542</span><a id="line.542"></a> |
| <span class="sourceLineNo">543</span><a id="line.543"> stopWatch.stop();</a> |
| <span class="sourceLineNo">544</span><a id="line.544"> log.info( "DefaultRoleManager initialize time {}", stopWatch.getTime() );</a> |
| <span class="sourceLineNo">545</span><a id="line.545"> }</a> |
| <span class="sourceLineNo">546</span><a id="line.546"></a> |
| <span class="sourceLineNo">547</span><a id="line.547"> @Override</a> |
| <span class="sourceLineNo">548</span><a id="line.548"> public RedbackRoleModel getModel()</a> |
| <span class="sourceLineNo">549</span><a id="line.549"> {</a> |
| <span class="sourceLineNo">550</span><a id="line.550"> return blessedModel;</a> |
| <span class="sourceLineNo">551</span><a id="line.551"> }</a> |
| <span class="sourceLineNo">552</span><a id="line.552"></a> |
| <span class="sourceLineNo">553</span><a id="line.553"> @Override</a> |
| <span class="sourceLineNo">554</span><a id="line.554"> public void verifyTemplatedRole( String templateId, String resource )</a> |
| <span class="sourceLineNo">555</span><a id="line.555"> throws RoleManagerException</a> |
| <span class="sourceLineNo">556</span><a id="line.556"> {</a> |
| <span class="sourceLineNo">557</span><a id="line.557"> // create also serves as update</a> |
| <span class="sourceLineNo">558</span><a id="line.558"> templateProcessor.create( blessedModel, templateId, resource );</a> |
| <span class="sourceLineNo">559</span><a id="line.559"> }</a> |
| <span class="sourceLineNo">560</span><a id="line.560"></a> |
| <span class="sourceLineNo">561</span><a id="line.561"> public RedbackRoleModel getBlessedModel()</a> |
| <span class="sourceLineNo">562</span><a id="line.562"> {</a> |
| <span class="sourceLineNo">563</span><a id="line.563"> return blessedModel;</a> |
| <span class="sourceLineNo">564</span><a id="line.564"> }</a> |
| <span class="sourceLineNo">565</span><a id="line.565"></a> |
| <span class="sourceLineNo">566</span><a id="line.566"> public void setBlessedModel( RedbackRoleModel blessedModel )</a> |
| <span class="sourceLineNo">567</span><a id="line.567"> {</a> |
| <span class="sourceLineNo">568</span><a id="line.568"> this.blessedModel = blessedModel;</a> |
| <span class="sourceLineNo">569</span><a id="line.569"> }</a> |
| <span class="sourceLineNo">570</span><a id="line.570"></a> |
| <span class="sourceLineNo">571</span><a id="line.571"> public RedbackRoleModel getUnblessedModel()</a> |
| <span class="sourceLineNo">572</span><a id="line.572"> {</a> |
| <span class="sourceLineNo">573</span><a id="line.573"> return unblessedModel;</a> |
| <span class="sourceLineNo">574</span><a id="line.574"> }</a> |
| <span class="sourceLineNo">575</span><a id="line.575"></a> |
| <span class="sourceLineNo">576</span><a id="line.576"> public void setUnblessedModel( RedbackRoleModel unblessedModel )</a> |
| <span class="sourceLineNo">577</span><a id="line.577"> {</a> |
| <span class="sourceLineNo">578</span><a id="line.578"> this.unblessedModel = unblessedModel;</a> |
| <span class="sourceLineNo">579</span><a id="line.579"> }</a> |
| <span class="sourceLineNo">580</span><a id="line.580"></a> |
| <span class="sourceLineNo">581</span><a id="line.581"> public Map<String, ModelApplication> getKnownResources()</a> |
| <span class="sourceLineNo">582</span><a id="line.582"> {</a> |
| <span class="sourceLineNo">583</span><a id="line.583"> return knownResources;</a> |
| <span class="sourceLineNo">584</span><a id="line.584"> }</a> |
| <span class="sourceLineNo">585</span><a id="line.585"></a> |
| <span class="sourceLineNo">586</span><a id="line.586"> public void setKnownResources( Map<String, ModelApplication> knownResources )</a> |
| <span class="sourceLineNo">587</span><a id="line.587"> {</a> |
| <span class="sourceLineNo">588</span><a id="line.588"> this.knownResources = knownResources;</a> |
| <span class="sourceLineNo">589</span><a id="line.589"> }</a> |
| <span class="sourceLineNo">590</span><a id="line.590"></a> |
| <span class="sourceLineNo">591</span><a id="line.591"> public RoleModelValidator getModelValidator()</a> |
| <span class="sourceLineNo">592</span><a id="line.592"> {</a> |
| <span class="sourceLineNo">593</span><a id="line.593"> return modelValidator;</a> |
| <span class="sourceLineNo">594</span><a id="line.594"> }</a> |
| <span class="sourceLineNo">595</span><a id="line.595"></a> |
| <span class="sourceLineNo">596</span><a id="line.596"> public void setModelValidator( RoleModelValidator modelValidator )</a> |
| <span class="sourceLineNo">597</span><a id="line.597"> {</a> |
| <span class="sourceLineNo">598</span><a id="line.598"> this.modelValidator = modelValidator;</a> |
| <span class="sourceLineNo">599</span><a id="line.599"> }</a> |
| <span class="sourceLineNo">600</span><a id="line.600"></a> |
| <span class="sourceLineNo">601</span><a id="line.601"> public RoleModelProcessor getModelProcessor()</a> |
| <span class="sourceLineNo">602</span><a id="line.602"> {</a> |
| <span class="sourceLineNo">603</span><a id="line.603"> return modelProcessor;</a> |
| <span class="sourceLineNo">604</span><a id="line.604"> }</a> |
| <span class="sourceLineNo">605</span><a id="line.605"></a> |
| <span class="sourceLineNo">606</span><a id="line.606"> public void setModelProcessor( RoleModelProcessor modelProcessor )</a> |
| <span class="sourceLineNo">607</span><a id="line.607"> {</a> |
| <span class="sourceLineNo">608</span><a id="line.608"> this.modelProcessor = modelProcessor;</a> |
| <span class="sourceLineNo">609</span><a id="line.609"> }</a> |
| <span class="sourceLineNo">610</span><a id="line.610"></a> |
| <span class="sourceLineNo">611</span><a id="line.611"> public RoleTemplateProcessor getTemplateProcessor()</a> |
| <span class="sourceLineNo">612</span><a id="line.612"> {</a> |
| <span class="sourceLineNo">613</span><a id="line.613"> return templateProcessor;</a> |
| <span class="sourceLineNo">614</span><a id="line.614"> }</a> |
| <span class="sourceLineNo">615</span><a id="line.615"></a> |
| <span class="sourceLineNo">616</span><a id="line.616"> public void setTemplateProcessor( RoleTemplateProcessor templateProcessor )</a> |
| <span class="sourceLineNo">617</span><a id="line.617"> {</a> |
| <span class="sourceLineNo">618</span><a id="line.618"> this.templateProcessor = templateProcessor;</a> |
| <span class="sourceLineNo">619</span><a id="line.619"> }</a> |
| <span class="sourceLineNo">620</span><a id="line.620"></a> |
| <span class="sourceLineNo">621</span><a id="line.621"> public RBACManager getRbacManager()</a> |
| <span class="sourceLineNo">622</span><a id="line.622"> {</a> |
| <span class="sourceLineNo">623</span><a id="line.623"> return rbacManager;</a> |
| <span class="sourceLineNo">624</span><a id="line.624"> }</a> |
| <span class="sourceLineNo">625</span><a id="line.625"></a> |
| <span class="sourceLineNo">626</span><a id="line.626"> public void setRbacManager( RBACManager rbacManager )</a> |
| <span class="sourceLineNo">627</span><a id="line.627"> {</a> |
| <span class="sourceLineNo">628</span><a id="line.628"> this.rbacManager = rbacManager;</a> |
| <span class="sourceLineNo">629</span><a id="line.629"> }</a> |
| <span class="sourceLineNo">630</span><a id="line.630">}</a> |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| </pre> |
| </div> |
| </main> |
| </body> |
| </html> |
