| <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"> |
| <html lang="en"> |
| <head> |
| <title>Source code</title> |
| <link rel="stylesheet" type="text/css" href="../../../../../../../stylesheet.css" title="Style"> |
| </head> |
| <body> |
| <div class="sourceContainer"> |
| <pre><span class="sourceLineNo">001</span>package org.apache.archiva.redback.rbac.ldap;<a name="line.1"></a> |
| <span class="sourceLineNo">002</span><a name="line.2"></a> |
| <span class="sourceLineNo">003</span>/*<a name="line.3"></a> |
| <span class="sourceLineNo">004</span> * Licensed to the Apache Software Foundation (ASF) under one<a name="line.4"></a> |
| <span class="sourceLineNo">005</span> * or more contributor license agreements. See the NOTICE file<a name="line.5"></a> |
| <span class="sourceLineNo">006</span> * distributed with this work for additional information<a name="line.6"></a> |
| <span class="sourceLineNo">007</span> * regarding copyright ownership. The ASF licenses this file<a name="line.7"></a> |
| <span class="sourceLineNo">008</span> * to you under the Apache License, Version 2.0 (the<a name="line.8"></a> |
| <span class="sourceLineNo">009</span> * "License"); you may not use this file except in compliance<a name="line.9"></a> |
| <span class="sourceLineNo">010</span> * with the License. You may obtain a copy of the License at<a name="line.10"></a> |
| <span class="sourceLineNo">011</span> *<a name="line.11"></a> |
| <span class="sourceLineNo">012</span> * http://www.apache.org/licenses/LICENSE-2.0<a name="line.12"></a> |
| <span class="sourceLineNo">013</span> *<a name="line.13"></a> |
| <span class="sourceLineNo">014</span> * Unless required by applicable law or agreed to in writing,<a name="line.14"></a> |
| <span class="sourceLineNo">015</span> * software distributed under the License is distributed on an<a name="line.15"></a> |
| <span class="sourceLineNo">016</span> * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY<a name="line.16"></a> |
| <span class="sourceLineNo">017</span> * KIND, either express or implied. See the License for the<a name="line.17"></a> |
| <span class="sourceLineNo">018</span> * specific language governing permissions and limitations<a name="line.18"></a> |
| <span class="sourceLineNo">019</span> * under the License.<a name="line.19"></a> |
| <span class="sourceLineNo">020</span> */<a name="line.20"></a> |
| <span class="sourceLineNo">021</span><a name="line.21"></a> |
| <span class="sourceLineNo">022</span>import org.apache.archiva.redback.common.ldap.MappingException;<a name="line.22"></a> |
| <span class="sourceLineNo">023</span>import org.apache.archiva.redback.common.ldap.connection.LdapConnection;<a name="line.23"></a> |
| <span class="sourceLineNo">024</span>import org.apache.archiva.redback.common.ldap.connection.LdapConnectionFactory;<a name="line.24"></a> |
| <span class="sourceLineNo">025</span>import org.apache.archiva.redback.common.ldap.connection.LdapException;<a name="line.25"></a> |
| <span class="sourceLineNo">026</span>import org.apache.archiva.redback.common.ldap.role.LdapRoleMapper;<a name="line.26"></a> |
| <span class="sourceLineNo">027</span>import org.apache.archiva.redback.common.ldap.role.LdapRoleMapperConfiguration;<a name="line.27"></a> |
| <span class="sourceLineNo">028</span>import org.apache.archiva.components.cache.Cache;<a name="line.28"></a> |
| <span class="sourceLineNo">029</span>import org.apache.archiva.redback.configuration.UserConfiguration;<a name="line.29"></a> |
| <span class="sourceLineNo">030</span>import org.apache.archiva.redback.configuration.UserConfigurationKeys;<a name="line.30"></a> |
| <span class="sourceLineNo">031</span>import org.apache.archiva.redback.rbac.AbstractRBACManager;<a name="line.31"></a> |
| <span class="sourceLineNo">032</span>import org.apache.archiva.redback.rbac.AbstractRole;<a name="line.32"></a> |
| <span class="sourceLineNo">033</span>import org.apache.archiva.redback.rbac.Operation;<a name="line.33"></a> |
| <span class="sourceLineNo">034</span>import org.apache.archiva.redback.rbac.Permission;<a name="line.34"></a> |
| <span class="sourceLineNo">035</span>import org.apache.archiva.redback.rbac.RBACManager;<a name="line.35"></a> |
| <span class="sourceLineNo">036</span>import org.apache.archiva.redback.rbac.RBACManagerListener;<a name="line.36"></a> |
| <span class="sourceLineNo">037</span>import org.apache.archiva.redback.rbac.RBACObjectAssertions;<a name="line.37"></a> |
| <span class="sourceLineNo">038</span>import org.apache.archiva.redback.rbac.RbacManagerException;<a name="line.38"></a> |
| <span class="sourceLineNo">039</span>import org.apache.archiva.redback.rbac.RbacObjectInvalidException;<a name="line.39"></a> |
| <span class="sourceLineNo">040</span>import org.apache.archiva.redback.rbac.RbacObjectNotFoundException;<a name="line.40"></a> |
| <span class="sourceLineNo">041</span>import org.apache.archiva.redback.rbac.RbacPermanentException;<a name="line.41"></a> |
| <span class="sourceLineNo">042</span>import org.apache.archiva.redback.rbac.Resource;<a name="line.42"></a> |
| <span class="sourceLineNo">043</span>import org.apache.archiva.redback.rbac.Role;<a name="line.43"></a> |
| <span class="sourceLineNo">044</span>import org.apache.archiva.redback.rbac.UserAssignment;<a name="line.44"></a> |
| <span class="sourceLineNo">045</span>import org.apache.archiva.redback.users.User;<a name="line.45"></a> |
| <span class="sourceLineNo">046</span>import org.apache.archiva.redback.users.UserManager;<a name="line.46"></a> |
| <span class="sourceLineNo">047</span>import org.apache.archiva.redback.users.UserManagerException;<a name="line.47"></a> |
| <span class="sourceLineNo">048</span>import org.apache.archiva.redback.users.ldap.ctl.LdapController;<a name="line.48"></a> |
| <span class="sourceLineNo">049</span>import org.apache.archiva.redback.users.ldap.ctl.LdapControllerException;<a name="line.49"></a> |
| <span class="sourceLineNo">050</span>import org.apache.commons.lang.StringUtils;<a name="line.50"></a> |
| <span class="sourceLineNo">051</span>import org.slf4j.Logger;<a name="line.51"></a> |
| <span class="sourceLineNo">052</span>import org.slf4j.LoggerFactory;<a name="line.52"></a> |
| <span class="sourceLineNo">053</span>import org.springframework.stereotype.Service;<a name="line.53"></a> |
| <span class="sourceLineNo">054</span><a name="line.54"></a> |
| <span class="sourceLineNo">055</span>import javax.annotation.PostConstruct;<a name="line.55"></a> |
| <span class="sourceLineNo">056</span>import javax.inject.Inject;<a name="line.56"></a> |
| <span class="sourceLineNo">057</span>import javax.inject.Named;<a name="line.57"></a> |
| <span class="sourceLineNo">058</span>import javax.naming.NamingException;<a name="line.58"></a> |
| <span class="sourceLineNo">059</span>import javax.naming.directory.DirContext;<a name="line.59"></a> |
| <span class="sourceLineNo">060</span>import java.util.ArrayList;<a name="line.60"></a> |
| <span class="sourceLineNo">061</span>import java.util.Collection;<a name="line.61"></a> |
| <span class="sourceLineNo">062</span>import java.util.Collections;<a name="line.62"></a> |
| <span class="sourceLineNo">063</span>import java.util.HashSet;<a name="line.63"></a> |
| <span class="sourceLineNo">064</span>import java.util.List;<a name="line.64"></a> |
| <span class="sourceLineNo">065</span>import java.util.Map;<a name="line.65"></a> |
| <span class="sourceLineNo">066</span>import java.util.Set;<a name="line.66"></a> |
| <span class="sourceLineNo">067</span><a name="line.67"></a> |
| <span class="sourceLineNo">068</span>/**<a name="line.68"></a> |
| <span class="sourceLineNo">069</span> * LdapRbacManager will read datas from ldap for mapping groups to role.<a name="line.69"></a> |
| <span class="sourceLineNo">070</span> * Write operations will delegate to cached implementation.<a name="line.70"></a> |
| <span class="sourceLineNo">071</span> *<a name="line.71"></a> |
| <span class="sourceLineNo">072</span> * @author Olivier Lamy<a name="line.72"></a> |
| <span class="sourceLineNo">073</span> */<a name="line.73"></a> |
| <span class="sourceLineNo">074</span>@Service("rbacManager#ldap")<a name="line.74"></a> |
| <span class="sourceLineNo">075</span>public class LdapRbacManager<a name="line.75"></a> |
| <span class="sourceLineNo">076</span> extends AbstractRBACManager<a name="line.76"></a> |
| <span class="sourceLineNo">077</span> implements RBACManager, RBACManagerListener<a name="line.77"></a> |
| <span class="sourceLineNo">078</span>{<a name="line.78"></a> |
| <span class="sourceLineNo">079</span><a name="line.79"></a> |
| <span class="sourceLineNo">080</span> private Logger log = LoggerFactory.getLogger( getClass() );<a name="line.80"></a> |
| <span class="sourceLineNo">081</span><a name="line.81"></a> |
| <span class="sourceLineNo">082</span> @Inject<a name="line.82"></a> |
| <span class="sourceLineNo">083</span> @Named(value = "rbacManager#cached")<a name="line.83"></a> |
| <span class="sourceLineNo">084</span> private RBACManager rbacImpl;<a name="line.84"></a> |
| <span class="sourceLineNo">085</span><a name="line.85"></a> |
| <span class="sourceLineNo">086</span> @Inject<a name="line.86"></a> |
| <span class="sourceLineNo">087</span> @Named(value = "ldapRoleMapper#default")<a name="line.87"></a> |
| <span class="sourceLineNo">088</span> private LdapRoleMapper ldapRoleMapper;<a name="line.88"></a> |
| <span class="sourceLineNo">089</span><a name="line.89"></a> |
| <span class="sourceLineNo">090</span> @Inject<a name="line.90"></a> |
| <span class="sourceLineNo">091</span> @Named(value = "userConfiguration#default")<a name="line.91"></a> |
| <span class="sourceLineNo">092</span> private UserConfiguration userConf;<a name="line.92"></a> |
| <span class="sourceLineNo">093</span><a name="line.93"></a> |
| <span class="sourceLineNo">094</span> @Inject<a name="line.94"></a> |
| <span class="sourceLineNo">095</span> @Named(value = "userManager#ldap")<a name="line.95"></a> |
| <span class="sourceLineNo">096</span> private UserManager userManager;<a name="line.96"></a> |
| <span class="sourceLineNo">097</span><a name="line.97"></a> |
| <span class="sourceLineNo">098</span> @Inject<a name="line.98"></a> |
| <span class="sourceLineNo">099</span> private LdapConnectionFactory ldapConnectionFactory;<a name="line.99"></a> |
| <span class="sourceLineNo">100</span><a name="line.100"></a> |
| <span class="sourceLineNo">101</span> @Inject<a name="line.101"></a> |
| <span class="sourceLineNo">102</span> private LdapController ldapController;<a name="line.102"></a> |
| <span class="sourceLineNo">103</span><a name="line.103"></a> |
| <span class="sourceLineNo">104</span> @Inject<a name="line.104"></a> |
| <span class="sourceLineNo">105</span> @Named(value = "ldapRoleMapperConfiguration#default")<a name="line.105"></a> |
| <span class="sourceLineNo">106</span> private LdapRoleMapperConfiguration ldapRoleMapperConfiguration;<a name="line.106"></a> |
| <span class="sourceLineNo">107</span><a name="line.107"></a> |
| <span class="sourceLineNo">108</span> @Inject<a name="line.108"></a> |
| <span class="sourceLineNo">109</span> @Named(value = "cache#ldapRoles")<a name="line.109"></a> |
| <span class="sourceLineNo">110</span> private Cache<String, Role> rolesCache;<a name="line.110"></a> |
| <span class="sourceLineNo">111</span><a name="line.111"></a> |
| <span class="sourceLineNo">112</span> @Inject<a name="line.112"></a> |
| <span class="sourceLineNo">113</span> @Named(value = "cache#userAssignments")<a name="line.113"></a> |
| <span class="sourceLineNo">114</span> private Cache<String, UserAssignment> userAssignmentsCache;<a name="line.114"></a> |
| <span class="sourceLineNo">115</span><a name="line.115"></a> |
| <span class="sourceLineNo">116</span> private boolean writableLdap = false;<a name="line.116"></a> |
| <span class="sourceLineNo">117</span><a name="line.117"></a> |
| <span class="sourceLineNo">118</span> @Override<a name="line.118"></a> |
| <span class="sourceLineNo">119</span> @PostConstruct<a name="line.119"></a> |
| <span class="sourceLineNo">120</span> public void initialize()<a name="line.120"></a> |
| <span class="sourceLineNo">121</span> {<a name="line.121"></a> |
| <span class="sourceLineNo">122</span> this.writableLdap = userConf.getBoolean( UserConfigurationKeys.LDAP_WRITABLE, this.writableLdap );<a name="line.122"></a> |
| <span class="sourceLineNo">123</span> }<a name="line.123"></a> |
| <span class="sourceLineNo">124</span><a name="line.124"></a> |
| <span class="sourceLineNo">125</span><a name="line.125"></a> |
| <span class="sourceLineNo">126</span> @Override<a name="line.126"></a> |
| <span class="sourceLineNo">127</span> public void addChildRole( Role role, Role childRole )<a name="line.127"></a> |
| <span class="sourceLineNo">128</span> throws RbacObjectInvalidException, RbacManagerException<a name="line.128"></a> |
| <span class="sourceLineNo">129</span> {<a name="line.129"></a> |
| <span class="sourceLineNo">130</span> this.rbacImpl.addChildRole( role, childRole );<a name="line.130"></a> |
| <span class="sourceLineNo">131</span> }<a name="line.131"></a> |
| <span class="sourceLineNo">132</span><a name="line.132"></a> |
| <span class="sourceLineNo">133</span> @Override<a name="line.133"></a> |
| <span class="sourceLineNo">134</span> public void addListener( RBACManagerListener listener )<a name="line.134"></a> |
| <span class="sourceLineNo">135</span> {<a name="line.135"></a> |
| <span class="sourceLineNo">136</span> super.addListener( listener );<a name="line.136"></a> |
| <span class="sourceLineNo">137</span> this.rbacImpl.addListener( listener );<a name="line.137"></a> |
| <span class="sourceLineNo">138</span> }<a name="line.138"></a> |
| <span class="sourceLineNo">139</span><a name="line.139"></a> |
| <span class="sourceLineNo">140</span> @Override<a name="line.140"></a> |
| <span class="sourceLineNo">141</span> public Operation createOperation( String name )<a name="line.141"></a> |
| <span class="sourceLineNo">142</span> throws RbacManagerException<a name="line.142"></a> |
| <span class="sourceLineNo">143</span> {<a name="line.143"></a> |
| <span class="sourceLineNo">144</span> return this.rbacImpl.createOperation( name );<a name="line.144"></a> |
| <span class="sourceLineNo">145</span> }<a name="line.145"></a> |
| <span class="sourceLineNo">146</span><a name="line.146"></a> |
| <span class="sourceLineNo">147</span> @Override<a name="line.147"></a> |
| <span class="sourceLineNo">148</span> public Permission createPermission( String name )<a name="line.148"></a> |
| <span class="sourceLineNo">149</span> throws RbacManagerException<a name="line.149"></a> |
| <span class="sourceLineNo">150</span> {<a name="line.150"></a> |
| <span class="sourceLineNo">151</span> return this.rbacImpl.createPermission( name );<a name="line.151"></a> |
| <span class="sourceLineNo">152</span> }<a name="line.152"></a> |
| <span class="sourceLineNo">153</span><a name="line.153"></a> |
| <span class="sourceLineNo">154</span> @Override<a name="line.154"></a> |
| <span class="sourceLineNo">155</span> public Permission createPermission( String name, String operationName, String resourceIdentifier )<a name="line.155"></a> |
| <span class="sourceLineNo">156</span> throws RbacManagerException<a name="line.156"></a> |
| <span class="sourceLineNo">157</span> {<a name="line.157"></a> |
| <span class="sourceLineNo">158</span> return this.rbacImpl.createPermission( name, operationName, resourceIdentifier );<a name="line.158"></a> |
| <span class="sourceLineNo">159</span> }<a name="line.159"></a> |
| <span class="sourceLineNo">160</span><a name="line.160"></a> |
| <span class="sourceLineNo">161</span> @Override<a name="line.161"></a> |
| <span class="sourceLineNo">162</span> public Resource createResource( String identifier )<a name="line.162"></a> |
| <span class="sourceLineNo">163</span> throws RbacManagerException<a name="line.163"></a> |
| <span class="sourceLineNo">164</span> {<a name="line.164"></a> |
| <span class="sourceLineNo">165</span> return this.rbacImpl.createResource( identifier );<a name="line.165"></a> |
| <span class="sourceLineNo">166</span> }<a name="line.166"></a> |
| <span class="sourceLineNo">167</span><a name="line.167"></a> |
| <span class="sourceLineNo">168</span> @Override<a name="line.168"></a> |
| <span class="sourceLineNo">169</span> public Role createRole( String name )<a name="line.169"></a> |
| <span class="sourceLineNo">170</span> {<a name="line.170"></a> |
| <span class="sourceLineNo">171</span> return this.rbacImpl.createRole( name );<a name="line.171"></a> |
| <span class="sourceLineNo">172</span> }<a name="line.172"></a> |
| <span class="sourceLineNo">173</span><a name="line.173"></a> |
| <span class="sourceLineNo">174</span> @Override<a name="line.174"></a> |
| <span class="sourceLineNo">175</span> public UserAssignment createUserAssignment( String username )<a name="line.175"></a> |
| <span class="sourceLineNo">176</span> throws RbacManagerException<a name="line.176"></a> |
| <span class="sourceLineNo">177</span> {<a name="line.177"></a> |
| <span class="sourceLineNo">178</span> // TODO ldap cannot or isWritable ldap ?<a name="line.178"></a> |
| <span class="sourceLineNo">179</span> return this.rbacImpl.createUserAssignment( username );<a name="line.179"></a> |
| <span class="sourceLineNo">180</span> }<a name="line.180"></a> |
| <span class="sourceLineNo">181</span><a name="line.181"></a> |
| <span class="sourceLineNo">182</span> @Override<a name="line.182"></a> |
| <span class="sourceLineNo">183</span> public void eraseDatabase()<a name="line.183"></a> |
| <span class="sourceLineNo">184</span> {<a name="line.184"></a> |
| <span class="sourceLineNo">185</span> if ( writableLdap )<a name="line.185"></a> |
| <span class="sourceLineNo">186</span> {<a name="line.186"></a> |
| <span class="sourceLineNo">187</span> LdapConnection ldapConnection = null;<a name="line.187"></a> |
| <span class="sourceLineNo">188</span> DirContext context = null;<a name="line.188"></a> |
| <span class="sourceLineNo">189</span> try<a name="line.189"></a> |
| <span class="sourceLineNo">190</span> {<a name="line.190"></a> |
| <span class="sourceLineNo">191</span> ldapConnection = ldapConnectionFactory.getConnection();<a name="line.191"></a> |
| <span class="sourceLineNo">192</span> context = ldapConnection.getDirContext();<a name="line.192"></a> |
| <span class="sourceLineNo">193</span> ldapRoleMapper.removeAllRoles( context );<a name="line.193"></a> |
| <span class="sourceLineNo">194</span> }<a name="line.194"></a> |
| <span class="sourceLineNo">195</span> catch ( MappingException e )<a name="line.195"></a> |
| <span class="sourceLineNo">196</span> {<a name="line.196"></a> |
| <span class="sourceLineNo">197</span> log.warn( "skip error removing all roles {}", e.getMessage() );<a name="line.197"></a> |
| <span class="sourceLineNo">198</span> }<a name="line.198"></a> |
| <span class="sourceLineNo">199</span> catch ( LdapException e )<a name="line.199"></a> |
| <span class="sourceLineNo">200</span> {<a name="line.200"></a> |
| <span class="sourceLineNo">201</span> log.warn( "skip error removing all roles {}", e.getMessage() );<a name="line.201"></a> |
| <span class="sourceLineNo">202</span> }<a name="line.202"></a> |
| <span class="sourceLineNo">203</span> finally<a name="line.203"></a> |
| <span class="sourceLineNo">204</span> {<a name="line.204"></a> |
| <span class="sourceLineNo">205</span> closeContext( context );<a name="line.205"></a> |
| <span class="sourceLineNo">206</span> closeLdapConnection( ldapConnection );<a name="line.206"></a> |
| <span class="sourceLineNo">207</span> }<a name="line.207"></a> |
| <span class="sourceLineNo">208</span> }<a name="line.208"></a> |
| <span class="sourceLineNo">209</span> this.rolesCache.clear();<a name="line.209"></a> |
| <span class="sourceLineNo">210</span> this.userAssignmentsCache.clear();<a name="line.210"></a> |
| <span class="sourceLineNo">211</span> this.rbacImpl.eraseDatabase();<a name="line.211"></a> |
| <span class="sourceLineNo">212</span> }<a name="line.212"></a> |
| <span class="sourceLineNo">213</span><a name="line.213"></a> |
| <span class="sourceLineNo">214</span> /**<a name="line.214"></a> |
| <span class="sourceLineNo">215</span> * @see org.apache.archiva.redback.rbac.RBACManager#getAllAssignableRoles()<a name="line.215"></a> |
| <span class="sourceLineNo">216</span> */<a name="line.216"></a> |
| <span class="sourceLineNo">217</span> @Override<a name="line.217"></a> |
| <span class="sourceLineNo">218</span> public List<Role> getAllAssignableRoles()<a name="line.218"></a> |
| <span class="sourceLineNo">219</span> throws RbacManagerException<a name="line.219"></a> |
| <span class="sourceLineNo">220</span> {<a name="line.220"></a> |
| <span class="sourceLineNo">221</span> try<a name="line.221"></a> |
| <span class="sourceLineNo">222</span> {<a name="line.222"></a> |
| <span class="sourceLineNo">223</span> Collection<Collection<String>> roleNames = ldapRoleMapperConfiguration.getLdapGroupMappings().values();<a name="line.223"></a> |
| <span class="sourceLineNo">224</span><a name="line.224"></a> |
| <span class="sourceLineNo">225</span> Set<Role> roles = new HashSet<Role>();<a name="line.225"></a> |
| <span class="sourceLineNo">226</span><a name="line.226"></a> |
| <span class="sourceLineNo">227</span> for ( Collection<String> names : roleNames )<a name="line.227"></a> |
| <span class="sourceLineNo">228</span> {<a name="line.228"></a> |
| <span class="sourceLineNo">229</span> for ( String name : names )<a name="line.229"></a> |
| <span class="sourceLineNo">230</span> {<a name="line.230"></a> |
| <span class="sourceLineNo">231</span> roles.add( new RoleImpl( name ) );<a name="line.231"></a> |
| <span class="sourceLineNo">232</span> }<a name="line.232"></a> |
| <span class="sourceLineNo">233</span> }<a name="line.233"></a> |
| <span class="sourceLineNo">234</span><a name="line.234"></a> |
| <span class="sourceLineNo">235</span> return new ArrayList<Role>( roles );<a name="line.235"></a> |
| <span class="sourceLineNo">236</span> }<a name="line.236"></a> |
| <span class="sourceLineNo">237</span> catch ( MappingException e )<a name="line.237"></a> |
| <span class="sourceLineNo">238</span> {<a name="line.238"></a> |
| <span class="sourceLineNo">239</span> throw new RbacManagerException( e.getMessage(), e );<a name="line.239"></a> |
| <span class="sourceLineNo">240</span> }<a name="line.240"></a> |
| <span class="sourceLineNo">241</span> }<a name="line.241"></a> |
| <span class="sourceLineNo">242</span><a name="line.242"></a> |
| <span class="sourceLineNo">243</span> @Override<a name="line.243"></a> |
| <span class="sourceLineNo">244</span> public List<? extends Operation> getAllOperations()<a name="line.244"></a> |
| <span class="sourceLineNo">245</span> throws RbacManagerException<a name="line.245"></a> |
| <span class="sourceLineNo">246</span> {<a name="line.246"></a> |
| <span class="sourceLineNo">247</span> return this.rbacImpl.getAllOperations();<a name="line.247"></a> |
| <span class="sourceLineNo">248</span> }<a name="line.248"></a> |
| <span class="sourceLineNo">249</span><a name="line.249"></a> |
| <span class="sourceLineNo">250</span> @Override<a name="line.250"></a> |
| <span class="sourceLineNo">251</span> public List<? extends Permission> getAllPermissions()<a name="line.251"></a> |
| <span class="sourceLineNo">252</span> throws RbacManagerException<a name="line.252"></a> |
| <span class="sourceLineNo">253</span> {<a name="line.253"></a> |
| <span class="sourceLineNo">254</span> return this.rbacImpl.getAllPermissions();<a name="line.254"></a> |
| <span class="sourceLineNo">255</span> }<a name="line.255"></a> |
| <span class="sourceLineNo">256</span><a name="line.256"></a> |
| <span class="sourceLineNo">257</span> @Override<a name="line.257"></a> |
| <span class="sourceLineNo">258</span> public List<? extends Resource> getAllResources()<a name="line.258"></a> |
| <span class="sourceLineNo">259</span> throws RbacManagerException<a name="line.259"></a> |
| <span class="sourceLineNo">260</span> {<a name="line.260"></a> |
| <span class="sourceLineNo">261</span> return this.rbacImpl.getAllResources();<a name="line.261"></a> |
| <span class="sourceLineNo">262</span> }<a name="line.262"></a> |
| <span class="sourceLineNo">263</span><a name="line.263"></a> |
| <span class="sourceLineNo">264</span> @Override<a name="line.264"></a> |
| <span class="sourceLineNo">265</span> public List<Role> getAllRoles()<a name="line.265"></a> |
| <span class="sourceLineNo">266</span> throws RbacManagerException<a name="line.266"></a> |
| <span class="sourceLineNo">267</span> {<a name="line.267"></a> |
| <span class="sourceLineNo">268</span> LdapConnection ldapConnection = null;<a name="line.268"></a> |
| <span class="sourceLineNo">269</span> DirContext context = null;<a name="line.269"></a> |
| <span class="sourceLineNo">270</span> try<a name="line.270"></a> |
| <span class="sourceLineNo">271</span> {<a name="line.271"></a> |
| <span class="sourceLineNo">272</span> ldapConnection = ldapConnectionFactory.getConnection();<a name="line.272"></a> |
| <span class="sourceLineNo">273</span> context = ldapConnection.getDirContext();<a name="line.273"></a> |
| <span class="sourceLineNo">274</span><a name="line.274"></a> |
| <span class="sourceLineNo">275</span> List<String> groups = ldapRoleMapper.getAllGroups( context );<a name="line.275"></a> |
| <span class="sourceLineNo">276</span> return mapToRoles( groups );<a name="line.276"></a> |
| <span class="sourceLineNo">277</span> }<a name="line.277"></a> |
| <span class="sourceLineNo">278</span> catch ( MappingException e )<a name="line.278"></a> |
| <span class="sourceLineNo">279</span> {<a name="line.279"></a> |
| <span class="sourceLineNo">280</span> throw new RbacManagerException( e.getMessage(), e );<a name="line.280"></a> |
| <span class="sourceLineNo">281</span> }<a name="line.281"></a> |
| <span class="sourceLineNo">282</span> catch ( LdapException e )<a name="line.282"></a> |
| <span class="sourceLineNo">283</span> {<a name="line.283"></a> |
| <span class="sourceLineNo">284</span> throw new RbacManagerException( e.getMessage(), e );<a name="line.284"></a> |
| <span class="sourceLineNo">285</span> }<a name="line.285"></a> |
| <span class="sourceLineNo">286</span> finally<a name="line.286"></a> |
| <span class="sourceLineNo">287</span> {<a name="line.287"></a> |
| <span class="sourceLineNo">288</span> closeContext( context );<a name="line.288"></a> |
| <span class="sourceLineNo">289</span> closeLdapConnection( ldapConnection );<a name="line.289"></a> |
| <span class="sourceLineNo">290</span> }<a name="line.290"></a> |
| <span class="sourceLineNo">291</span> //return this.rbacImpl.getAllRoles();<a name="line.291"></a> |
| <span class="sourceLineNo">292</span> }<a name="line.292"></a> |
| <span class="sourceLineNo">293</span><a name="line.293"></a> |
| <span class="sourceLineNo">294</span><a name="line.294"></a> |
| <span class="sourceLineNo">295</span> @Override<a name="line.295"></a> |
| <span class="sourceLineNo">296</span> public List<UserAssignment> getAllUserAssignments()<a name="line.296"></a> |
| <span class="sourceLineNo">297</span> throws RbacManagerException<a name="line.297"></a> |
| <span class="sourceLineNo">298</span> {<a name="line.298"></a> |
| <span class="sourceLineNo">299</span> LdapConnection ldapConnection = null;<a name="line.299"></a> |
| <span class="sourceLineNo">300</span> DirContext context = null;<a name="line.300"></a> |
| <span class="sourceLineNo">301</span> try<a name="line.301"></a> |
| <span class="sourceLineNo">302</span> {<a name="line.302"></a> |
| <span class="sourceLineNo">303</span> ldapConnection = ldapConnectionFactory.getConnection();<a name="line.303"></a> |
| <span class="sourceLineNo">304</span> context = ldapConnection.getDirContext();<a name="line.304"></a> |
| <span class="sourceLineNo">305</span> Map<String, Collection<String>> usersWithRoles = ldapController.findUsersWithRoles( context );<a name="line.305"></a> |
| <span class="sourceLineNo">306</span> List<UserAssignment> userAssignments = new ArrayList<UserAssignment>( usersWithRoles.size() );<a name="line.306"></a> |
| <span class="sourceLineNo">307</span><a name="line.307"></a> |
| <span class="sourceLineNo">308</span> for ( Map.Entry<String, Collection<String>> entry : usersWithRoles.entrySet() )<a name="line.308"></a> |
| <span class="sourceLineNo">309</span> {<a name="line.309"></a> |
| <span class="sourceLineNo">310</span> UserAssignment userAssignment = new UserAssignmentImpl( entry.getKey(), entry.getValue() );<a name="line.310"></a> |
| <span class="sourceLineNo">311</span> userAssignments.add( userAssignment );<a name="line.311"></a> |
| <span class="sourceLineNo">312</span> userAssignmentsCache.put( userAssignment.getPrincipal(), userAssignment );<a name="line.312"></a> |
| <span class="sourceLineNo">313</span> }<a name="line.313"></a> |
| <span class="sourceLineNo">314</span><a name="line.314"></a> |
| <span class="sourceLineNo">315</span> return userAssignments;<a name="line.315"></a> |
| <span class="sourceLineNo">316</span> }<a name="line.316"></a> |
| <span class="sourceLineNo">317</span> catch ( LdapControllerException e )<a name="line.317"></a> |
| <span class="sourceLineNo">318</span> {<a name="line.318"></a> |
| <span class="sourceLineNo">319</span> throw new RbacManagerException( e.getMessage(), e );<a name="line.319"></a> |
| <span class="sourceLineNo">320</span> }<a name="line.320"></a> |
| <span class="sourceLineNo">321</span> catch ( LdapException e )<a name="line.321"></a> |
| <span class="sourceLineNo">322</span> {<a name="line.322"></a> |
| <span class="sourceLineNo">323</span> throw new RbacManagerException( e.getMessage(), e );<a name="line.323"></a> |
| <span class="sourceLineNo">324</span> }<a name="line.324"></a> |
| <span class="sourceLineNo">325</span> finally<a name="line.325"></a> |
| <span class="sourceLineNo">326</span> {<a name="line.326"></a> |
| <span class="sourceLineNo">327</span> closeContext( context );<a name="line.327"></a> |
| <span class="sourceLineNo">328</span> closeLdapConnection( ldapConnection );<a name="line.328"></a> |
| <span class="sourceLineNo">329</span> }<a name="line.329"></a> |
| <span class="sourceLineNo">330</span> }<a name="line.330"></a> |
| <span class="sourceLineNo">331</span><a name="line.331"></a> |
| <span class="sourceLineNo">332</span> protected void closeLdapConnection( LdapConnection ldapConnection )<a name="line.332"></a> |
| <span class="sourceLineNo">333</span> {<a name="line.333"></a> |
| <span class="sourceLineNo">334</span> if ( ldapConnection != null )<a name="line.334"></a> |
| <span class="sourceLineNo">335</span> {<a name="line.335"></a> |
| <span class="sourceLineNo">336</span> ldapConnection.close();<a name="line.336"></a> |
| <span class="sourceLineNo">337</span> }<a name="line.337"></a> |
| <span class="sourceLineNo">338</span> }<a name="line.338"></a> |
| <span class="sourceLineNo">339</span><a name="line.339"></a> |
| <span class="sourceLineNo">340</span> protected void closeContext( DirContext context )<a name="line.340"></a> |
| <span class="sourceLineNo">341</span> {<a name="line.341"></a> |
| <span class="sourceLineNo">342</span> if ( context != null )<a name="line.342"></a> |
| <span class="sourceLineNo">343</span> {<a name="line.343"></a> |
| <span class="sourceLineNo">344</span> try<a name="line.344"></a> |
| <span class="sourceLineNo">345</span> {<a name="line.345"></a> |
| <span class="sourceLineNo">346</span> context.close();<a name="line.346"></a> |
| <span class="sourceLineNo">347</span> }<a name="line.347"></a> |
| <span class="sourceLineNo">348</span> catch ( NamingException e )<a name="line.348"></a> |
| <span class="sourceLineNo">349</span> {<a name="line.349"></a> |
| <span class="sourceLineNo">350</span> log.warn( "skip issue closing context: {}", e.getMessage() );<a name="line.350"></a> |
| <span class="sourceLineNo">351</span> }<a name="line.351"></a> |
| <span class="sourceLineNo">352</span> }<a name="line.352"></a> |
| <span class="sourceLineNo">353</span> }<a name="line.353"></a> |
| <span class="sourceLineNo">354</span><a name="line.354"></a> |
| <span class="sourceLineNo">355</span> /**<a name="line.355"></a> |
| <span class="sourceLineNo">356</span> * public Map<String, List<Permission>> getAssignedPermissionMap( String username )<a name="line.356"></a> |
| <span class="sourceLineNo">357</span> * throws RbacManagerException<a name="line.357"></a> |
| <span class="sourceLineNo">358</span> * {<a name="line.358"></a> |
| <span class="sourceLineNo">359</span> * return this.rbacImpl.getAssignedPermissionMap( username );<a name="line.359"></a> |
| <span class="sourceLineNo">360</span> * }*<a name="line.360"></a> |
| <span class="sourceLineNo">361</span> */<a name="line.361"></a> |
| <span class="sourceLineNo">362</span><a name="line.362"></a> |
| <span class="sourceLineNo">363</span> /*public Set<Permission> getAssignedPermissions( String username )<a name="line.363"></a> |
| <span class="sourceLineNo">364</span> throws RbacObjectNotFoundException, RbacManagerException<a name="line.364"></a> |
| <span class="sourceLineNo">365</span> {<a name="line.365"></a> |
| <span class="sourceLineNo">366</span> // TODO here !!<a name="line.366"></a> |
| <span class="sourceLineNo">367</span> return this.rbacImpl.getAssignedPermissions( username );<a name="line.367"></a> |
| <span class="sourceLineNo">368</span> }*/<a name="line.368"></a> |
| <span class="sourceLineNo">369</span> private List<Role> mapToRoles( List<String> groups )<a name="line.369"></a> |
| <span class="sourceLineNo">370</span> throws MappingException, RbacManagerException<a name="line.370"></a> |
| <span class="sourceLineNo">371</span> {<a name="line.371"></a> |
| <span class="sourceLineNo">372</span> if ( groups == null || groups.isEmpty() )<a name="line.372"></a> |
| <span class="sourceLineNo">373</span> {<a name="line.373"></a> |
| <span class="sourceLineNo">374</span> return Collections.emptyList();<a name="line.374"></a> |
| <span class="sourceLineNo">375</span> }<a name="line.375"></a> |
| <span class="sourceLineNo">376</span><a name="line.376"></a> |
| <span class="sourceLineNo">377</span> List<Role> roles = new ArrayList<Role>( groups.size() );<a name="line.377"></a> |
| <span class="sourceLineNo">378</span> Map<String, Collection<String>> mappedGroups = ldapRoleMapperConfiguration.getLdapGroupMappings();<a name="line.378"></a> |
| <span class="sourceLineNo">379</span> for ( String group : groups )<a name="line.379"></a> |
| <span class="sourceLineNo">380</span> {<a name="line.380"></a> |
| <span class="sourceLineNo">381</span> Collection<String> roleNames = mappedGroups.get( group );<a name="line.381"></a> |
| <span class="sourceLineNo">382</span> if ( roleNames != null )<a name="line.382"></a> |
| <span class="sourceLineNo">383</span> {<a name="line.383"></a> |
| <span class="sourceLineNo">384</span> for ( String roleName : roleNames )<a name="line.384"></a> |
| <span class="sourceLineNo">385</span> {<a name="line.385"></a> |
| <span class="sourceLineNo">386</span> Role role = buildRole( roleName );<a name="line.386"></a> |
| <span class="sourceLineNo">387</span> roles.add( role );<a name="line.387"></a> |
| <span class="sourceLineNo">388</span> }<a name="line.388"></a> |
| <span class="sourceLineNo">389</span> }<a name="line.389"></a> |
| <span class="sourceLineNo">390</span> else if ( this.ldapRoleMapper.isUseDefaultRoleName() )<a name="line.390"></a> |
| <span class="sourceLineNo">391</span> {<a name="line.391"></a> |
| <span class="sourceLineNo">392</span> Role role = buildRole( group );<a name="line.392"></a> |
| <span class="sourceLineNo">393</span> roles.add( role );<a name="line.393"></a> |
| <span class="sourceLineNo">394</span><a name="line.394"></a> |
| <span class="sourceLineNo">395</span><a name="line.395"></a> |
| <span class="sourceLineNo">396</span> }<a name="line.396"></a> |
| <span class="sourceLineNo">397</span> }<a name="line.397"></a> |
| <span class="sourceLineNo">398</span> return roles;<a name="line.398"></a> |
| <span class="sourceLineNo">399</span><a name="line.399"></a> |
| <span class="sourceLineNo">400</span> }<a name="line.400"></a> |
| <span class="sourceLineNo">401</span><a name="line.401"></a> |
| <span class="sourceLineNo">402</span> private Role buildRole( String group )<a name="line.402"></a> |
| <span class="sourceLineNo">403</span> throws RbacManagerException<a name="line.403"></a> |
| <span class="sourceLineNo">404</span> {<a name="line.404"></a> |
| <span class="sourceLineNo">405</span> Role role = null;<a name="line.405"></a> |
| <span class="sourceLineNo">406</span> try<a name="line.406"></a> |
| <span class="sourceLineNo">407</span> {<a name="line.407"></a> |
| <span class="sourceLineNo">408</span> role = this.rbacImpl.getRole( group );<a name="line.408"></a> |
| <span class="sourceLineNo">409</span> }<a name="line.409"></a> |
| <span class="sourceLineNo">410</span> catch ( RbacObjectNotFoundException e )<a name="line.410"></a> |
| <span class="sourceLineNo">411</span> {<a name="line.411"></a> |
| <span class="sourceLineNo">412</span> // if it's mapped role to a group it doesn't exist in jpa<a name="line.412"></a> |
| <span class="sourceLineNo">413</span> }<a name="line.413"></a> |
| <span class="sourceLineNo">414</span> role = ( role == null ) ? new RoleImpl( group ) : role;<a name="line.414"></a> |
| <span class="sourceLineNo">415</span> if ( role != null )<a name="line.415"></a> |
| <span class="sourceLineNo">416</span> {<a name="line.416"></a> |
| <span class="sourceLineNo">417</span> rolesCache.put( role.getName(), role );<a name="line.417"></a> |
| <span class="sourceLineNo">418</span><a name="line.418"></a> |
| <span class="sourceLineNo">419</span> }<a name="line.419"></a> |
| <span class="sourceLineNo">420</span> return role;<a name="line.420"></a> |
| <span class="sourceLineNo">421</span> }<a name="line.421"></a> |
| <span class="sourceLineNo">422</span><a name="line.422"></a> |
| <span class="sourceLineNo">423</span> protected List<String> getRealRoles()<a name="line.423"></a> |
| <span class="sourceLineNo">424</span> throws RbacManagerException<a name="line.424"></a> |
| <span class="sourceLineNo">425</span> {<a name="line.425"></a> |
| <span class="sourceLineNo">426</span> List<? extends Role> roles = this.rbacImpl.getAllRoles();<a name="line.426"></a> |
| <span class="sourceLineNo">427</span> List<String> roleNames = new ArrayList<String>( roles.size() );<a name="line.427"></a> |
| <span class="sourceLineNo">428</span> for ( Role role : roles )<a name="line.428"></a> |
| <span class="sourceLineNo">429</span> {<a name="line.429"></a> |
| <span class="sourceLineNo">430</span> roleNames.add( role.getName() );<a name="line.430"></a> |
| <span class="sourceLineNo">431</span> }<a name="line.431"></a> |
| <span class="sourceLineNo">432</span> return roleNames;<a name="line.432"></a> |
| <span class="sourceLineNo">433</span> }<a name="line.433"></a> |
| <span class="sourceLineNo">434</span><a name="line.434"></a> |
| <span class="sourceLineNo">435</span> @Override<a name="line.435"></a> |
| <span class="sourceLineNo">436</span> public Collection<Role> getAssignedRoles( String username )<a name="line.436"></a> |
| <span class="sourceLineNo">437</span> throws RbacManagerException<a name="line.437"></a> |
| <span class="sourceLineNo">438</span> {<a name="line.438"></a> |
| <span class="sourceLineNo">439</span><a name="line.439"></a> |
| <span class="sourceLineNo">440</span> LdapConnection ldapConnection = null;<a name="line.440"></a> |
| <span class="sourceLineNo">441</span> DirContext context = null;<a name="line.441"></a> |
| <span class="sourceLineNo">442</span><a name="line.442"></a> |
| <span class="sourceLineNo">443</span> try<a name="line.443"></a> |
| <span class="sourceLineNo">444</span> {<a name="line.444"></a> |
| <span class="sourceLineNo">445</span><a name="line.445"></a> |
| <span class="sourceLineNo">446</span> ldapConnection = ldapConnectionFactory.getConnection();<a name="line.446"></a> |
| <span class="sourceLineNo">447</span> context = ldapConnection.getDirContext();<a name="line.447"></a> |
| <span class="sourceLineNo">448</span> List<String> roleNames = ldapRoleMapper.getRoles( username, context, getRealRoles() );<a name="line.448"></a> |
| <span class="sourceLineNo">449</span><a name="line.449"></a> |
| <span class="sourceLineNo">450</span> if ( roleNames.isEmpty() )<a name="line.450"></a> |
| <span class="sourceLineNo">451</span> {<a name="line.451"></a> |
| <span class="sourceLineNo">452</span> return Collections.emptyList();<a name="line.452"></a> |
| <span class="sourceLineNo">453</span> }<a name="line.453"></a> |
| <span class="sourceLineNo">454</span><a name="line.454"></a> |
| <span class="sourceLineNo">455</span> List<Role> roles = new ArrayList<Role>( roleNames.size() );<a name="line.455"></a> |
| <span class="sourceLineNo">456</span><a name="line.456"></a> |
| <span class="sourceLineNo">457</span> for ( String name : roleNames )<a name="line.457"></a> |
| <span class="sourceLineNo">458</span> {<a name="line.458"></a> |
| <span class="sourceLineNo">459</span> roles.add( this.rbacImpl.getRole( name ) );// new RoleImpl( name ) );<a name="line.459"></a> |
| <span class="sourceLineNo">460</span> }<a name="line.460"></a> |
| <span class="sourceLineNo">461</span><a name="line.461"></a> |
| <span class="sourceLineNo">462</span> return roles;<a name="line.462"></a> |
| <span class="sourceLineNo">463</span> }<a name="line.463"></a> |
| <span class="sourceLineNo">464</span> catch ( MappingException e )<a name="line.464"></a> |
| <span class="sourceLineNo">465</span> {<a name="line.465"></a> |
| <span class="sourceLineNo">466</span> throw new RbacManagerException( e.getMessage(), e );<a name="line.466"></a> |
| <span class="sourceLineNo">467</span> }<a name="line.467"></a> |
| <span class="sourceLineNo">468</span> catch ( LdapException e )<a name="line.468"></a> |
| <span class="sourceLineNo">469</span> {<a name="line.469"></a> |
| <span class="sourceLineNo">470</span> throw new RbacManagerException( e.getMessage(), e );<a name="line.470"></a> |
| <span class="sourceLineNo">471</span> }<a name="line.471"></a> |
| <span class="sourceLineNo">472</span> }<a name="line.472"></a> |
| <span class="sourceLineNo">473</span><a name="line.473"></a> |
| <span class="sourceLineNo">474</span> @Override<a name="line.474"></a> |
| <span class="sourceLineNo">475</span> public Collection<Role> getAssignedRoles( UserAssignment userAssignment )<a name="line.475"></a> |
| <span class="sourceLineNo">476</span> throws RbacManagerException<a name="line.476"></a> |
| <span class="sourceLineNo">477</span> {<a name="line.477"></a> |
| <span class="sourceLineNo">478</span> return getAssignedRoles( userAssignment.getPrincipal() );<a name="line.478"></a> |
| <span class="sourceLineNo">479</span> }<a name="line.479"></a> |
| <span class="sourceLineNo">480</span><a name="line.480"></a> |
| <span class="sourceLineNo">481</span> @Override<a name="line.481"></a> |
| <span class="sourceLineNo">482</span> public Map<String, ? extends Role> getChildRoles( Role role )<a name="line.482"></a> |
| <span class="sourceLineNo">483</span> throws RbacManagerException<a name="line.483"></a> |
| <span class="sourceLineNo">484</span> {<a name="line.484"></a> |
| <span class="sourceLineNo">485</span> return this.rbacImpl.getChildRoles( role );<a name="line.485"></a> |
| <span class="sourceLineNo">486</span> }<a name="line.486"></a> |
| <span class="sourceLineNo">487</span><a name="line.487"></a> |
| <span class="sourceLineNo">488</span> @Override<a name="line.488"></a> |
| <span class="sourceLineNo">489</span> public Map<String, ? extends Role> getParentRoles( Role role )<a name="line.489"></a> |
| <span class="sourceLineNo">490</span> throws RbacManagerException<a name="line.490"></a> |
| <span class="sourceLineNo">491</span> {<a name="line.491"></a> |
| <span class="sourceLineNo">492</span> return this.rbacImpl.getParentRoles( role );<a name="line.492"></a> |
| <span class="sourceLineNo">493</span> }<a name="line.493"></a> |
| <span class="sourceLineNo">494</span><a name="line.494"></a> |
| <span class="sourceLineNo">495</span> //<a name="line.495"></a> |
| <span class="sourceLineNo">496</span> // public Collection<Role> getEffectivelyAssignedRoles( String username )<a name="line.496"></a> |
| <span class="sourceLineNo">497</span> // throws RbacManagerException<a name="line.497"></a> |
| <span class="sourceLineNo">498</span> // {<a name="line.498"></a> |
| <span class="sourceLineNo">499</span> // TODO here !!<a name="line.499"></a> |
| <span class="sourceLineNo">500</span> // return this.rbacImpl.getEffectivelyAssignedRoles( username );<a name="line.500"></a> |
| <span class="sourceLineNo">501</span> // }<a name="line.501"></a> |
| <span class="sourceLineNo">502</span><a name="line.502"></a> |
| <span class="sourceLineNo">503</span> //public Collection<Role> getEffectivelyUnassignedRoles( String username )<a name="line.503"></a> |
| <span class="sourceLineNo">504</span> //throws RbacManagerException<a name="line.504"></a> |
| <span class="sourceLineNo">505</span> //{<a name="line.505"></a> |
| <span class="sourceLineNo">506</span> // TODO here !!<a name="line.506"></a> |
| <span class="sourceLineNo">507</span> // return this.rbacImpl.getEffectivelyUnassignedRoles( username );<a name="line.507"></a> |
| <span class="sourceLineNo">508</span> // }<a name="line.508"></a> |
| <span class="sourceLineNo">509</span><a name="line.509"></a> |
| <span class="sourceLineNo">510</span><a name="line.510"></a> |
| <span class="sourceLineNo">511</span> @Override<a name="line.511"></a> |
| <span class="sourceLineNo">512</span> public Set<? extends Role> getEffectiveRoles( Role role )<a name="line.512"></a> |
| <span class="sourceLineNo">513</span> throws RbacManagerException<a name="line.513"></a> |
| <span class="sourceLineNo">514</span> {<a name="line.514"></a> |
| <span class="sourceLineNo">515</span> return this.rbacImpl.getEffectiveRoles( role );<a name="line.515"></a> |
| <span class="sourceLineNo">516</span> }<a name="line.516"></a> |
| <span class="sourceLineNo">517</span><a name="line.517"></a> |
| <span class="sourceLineNo">518</span> @Override<a name="line.518"></a> |
| <span class="sourceLineNo">519</span> public Resource getGlobalResource()<a name="line.519"></a> |
| <span class="sourceLineNo">520</span> throws RbacManagerException<a name="line.520"></a> |
| <span class="sourceLineNo">521</span> {<a name="line.521"></a> |
| <span class="sourceLineNo">522</span> return this.rbacImpl.getGlobalResource();<a name="line.522"></a> |
| <span class="sourceLineNo">523</span> }<a name="line.523"></a> |
| <span class="sourceLineNo">524</span><a name="line.524"></a> |
| <span class="sourceLineNo">525</span> @Override<a name="line.525"></a> |
| <span class="sourceLineNo">526</span> public Operation getOperation( String operationName )<a name="line.526"></a> |
| <span class="sourceLineNo">527</span> throws RbacManagerException<a name="line.527"></a> |
| <span class="sourceLineNo">528</span> {<a name="line.528"></a> |
| <span class="sourceLineNo">529</span> return this.rbacImpl.getOperation( operationName );<a name="line.529"></a> |
| <span class="sourceLineNo">530</span> }<a name="line.530"></a> |
| <span class="sourceLineNo">531</span><a name="line.531"></a> |
| <span class="sourceLineNo">532</span> @Override<a name="line.532"></a> |
| <span class="sourceLineNo">533</span> public Permission getPermission( String permissionName )<a name="line.533"></a> |
| <span class="sourceLineNo">534</span> throws RbacManagerException<a name="line.534"></a> |
| <span class="sourceLineNo">535</span> {<a name="line.535"></a> |
| <span class="sourceLineNo">536</span> return this.rbacImpl.getPermission( permissionName );<a name="line.536"></a> |
| <span class="sourceLineNo">537</span> }<a name="line.537"></a> |
| <span class="sourceLineNo">538</span><a name="line.538"></a> |
| <span class="sourceLineNo">539</span> @Override<a name="line.539"></a> |
| <span class="sourceLineNo">540</span> public Resource getResource( String resourceIdentifier )<a name="line.540"></a> |
| <span class="sourceLineNo">541</span> throws RbacManagerException<a name="line.541"></a> |
| <span class="sourceLineNo">542</span> {<a name="line.542"></a> |
| <span class="sourceLineNo">543</span> return this.rbacImpl.getResource( resourceIdentifier );<a name="line.543"></a> |
| <span class="sourceLineNo">544</span> }<a name="line.544"></a> |
| <span class="sourceLineNo">545</span><a name="line.545"></a> |
| <span class="sourceLineNo">546</span> @Override<a name="line.546"></a> |
| <span class="sourceLineNo">547</span> public Role getRole( String roleName )<a name="line.547"></a> |
| <span class="sourceLineNo">548</span> throws RbacManagerException<a name="line.548"></a> |
| <span class="sourceLineNo">549</span> {<a name="line.549"></a> |
| <span class="sourceLineNo">550</span><a name="line.550"></a> |
| <span class="sourceLineNo">551</span> Role role = rolesCache.get( roleName );<a name="line.551"></a> |
| <span class="sourceLineNo">552</span> if ( role != null )<a name="line.552"></a> |
| <span class="sourceLineNo">553</span> {<a name="line.553"></a> |
| <span class="sourceLineNo">554</span> return role;<a name="line.554"></a> |
| <span class="sourceLineNo">555</span> }<a name="line.555"></a> |
| <span class="sourceLineNo">556</span> LdapConnection ldapConnection = null;<a name="line.556"></a> |
| <span class="sourceLineNo">557</span> DirContext context = null;<a name="line.557"></a> |
| <span class="sourceLineNo">558</span> //verify it's a ldap group<a name="line.558"></a> |
| <span class="sourceLineNo">559</span> try<a name="line.559"></a> |
| <span class="sourceLineNo">560</span> {<a name="line.560"></a> |
| <span class="sourceLineNo">561</span> ldapConnection = ldapConnectionFactory.getConnection();<a name="line.561"></a> |
| <span class="sourceLineNo">562</span> context = ldapConnection.getDirContext();<a name="line.562"></a> |
| <span class="sourceLineNo">563</span> if ( !ldapRoleMapper.hasRole( context, roleName ) )<a name="line.563"></a> |
| <span class="sourceLineNo">564</span> {<a name="line.564"></a> |
| <span class="sourceLineNo">565</span> return null;<a name="line.565"></a> |
| <span class="sourceLineNo">566</span> }<a name="line.566"></a> |
| <span class="sourceLineNo">567</span> }<a name="line.567"></a> |
| <span class="sourceLineNo">568</span> catch ( MappingException e )<a name="line.568"></a> |
| <span class="sourceLineNo">569</span> {<a name="line.569"></a> |
| <span class="sourceLineNo">570</span> throw new RbacManagerException( e.getMessage(), e );<a name="line.570"></a> |
| <span class="sourceLineNo">571</span> }<a name="line.571"></a> |
| <span class="sourceLineNo">572</span> catch ( LdapException e )<a name="line.572"></a> |
| <span class="sourceLineNo">573</span> {<a name="line.573"></a> |
| <span class="sourceLineNo">574</span> throw new RbacManagerException( e.getMessage(), e );<a name="line.574"></a> |
| <span class="sourceLineNo">575</span> }<a name="line.575"></a> |
| <span class="sourceLineNo">576</span> role = this.rbacImpl.getRole( roleName );<a name="line.576"></a> |
| <span class="sourceLineNo">577</span> role = ( role == null ) ? new RoleImpl( roleName ) : role;<a name="line.577"></a> |
| <span class="sourceLineNo">578</span><a name="line.578"></a> |
| <span class="sourceLineNo">579</span> rolesCache.put( roleName, role );<a name="line.579"></a> |
| <span class="sourceLineNo">580</span><a name="line.580"></a> |
| <span class="sourceLineNo">581</span> return role;<a name="line.581"></a> |
| <span class="sourceLineNo">582</span> }<a name="line.582"></a> |
| <span class="sourceLineNo">583</span><a name="line.583"></a> |
| <span class="sourceLineNo">584</span> @Override<a name="line.584"></a> |
| <span class="sourceLineNo">585</span> public Map<String, ? extends Role> getRoles( Collection<String> roleNames )<a name="line.585"></a> |
| <span class="sourceLineNo">586</span> throws RbacManagerException<a name="line.586"></a> |
| <span class="sourceLineNo">587</span> {<a name="line.587"></a> |
| <span class="sourceLineNo">588</span> return this.rbacImpl.getRoles( roleNames );<a name="line.588"></a> |
| <span class="sourceLineNo">589</span> }<a name="line.589"></a> |
| <span class="sourceLineNo">590</span><a name="line.590"></a> |
| <span class="sourceLineNo">591</span> @Override<a name="line.591"></a> |
| <span class="sourceLineNo">592</span> public Collection<Role> getUnassignedRoles( String username )<a name="line.592"></a> |
| <span class="sourceLineNo">593</span> throws RbacManagerException<a name="line.593"></a> |
| <span class="sourceLineNo">594</span> {<a name="line.594"></a> |
| <span class="sourceLineNo">595</span> LdapConnection ldapConnection = null;<a name="line.595"></a> |
| <span class="sourceLineNo">596</span><a name="line.596"></a> |
| <span class="sourceLineNo">597</span> DirContext context = null;<a name="line.597"></a> |
| <span class="sourceLineNo">598</span><a name="line.598"></a> |
| <span class="sourceLineNo">599</span> try<a name="line.599"></a> |
| <span class="sourceLineNo">600</span> {<a name="line.600"></a> |
| <span class="sourceLineNo">601</span><a name="line.601"></a> |
| <span class="sourceLineNo">602</span> ldapConnection = ldapConnectionFactory.getConnection();<a name="line.602"></a> |
| <span class="sourceLineNo">603</span><a name="line.603"></a> |
| <span class="sourceLineNo">604</span> context = ldapConnection.getDirContext();<a name="line.604"></a> |
| <span class="sourceLineNo">605</span><a name="line.605"></a> |
| <span class="sourceLineNo">606</span> List<String> allRoles = ldapRoleMapper.getAllRoles( context );<a name="line.606"></a> |
| <span class="sourceLineNo">607</span> final List<String> userRoles = ldapRoleMapper.getRoles( username, context, getRealRoles() );<a name="line.607"></a> |
| <span class="sourceLineNo">608</span><a name="line.608"></a> |
| <span class="sourceLineNo">609</span> List<Role> unassignedRoles = new ArrayList<Role>();<a name="line.609"></a> |
| <span class="sourceLineNo">610</span><a name="line.610"></a> |
| <span class="sourceLineNo">611</span> for ( String roleName : allRoles )<a name="line.611"></a> |
| <span class="sourceLineNo">612</span> {<a name="line.612"></a> |
| <span class="sourceLineNo">613</span> if ( !userRoles.contains( roleName ) )<a name="line.613"></a> |
| <span class="sourceLineNo">614</span> {<a name="line.614"></a> |
| <span class="sourceLineNo">615</span> unassignedRoles.add( rbacImpl.getRole( roleName ) );<a name="line.615"></a> |
| <span class="sourceLineNo">616</span> }<a name="line.616"></a> |
| <span class="sourceLineNo">617</span> }<a name="line.617"></a> |
| <span class="sourceLineNo">618</span> return unassignedRoles;<a name="line.618"></a> |
| <span class="sourceLineNo">619</span> }<a name="line.619"></a> |
| <span class="sourceLineNo">620</span> catch ( MappingException e )<a name="line.620"></a> |
| <span class="sourceLineNo">621</span> {<a name="line.621"></a> |
| <span class="sourceLineNo">622</span> throw new RbacManagerException( e.getMessage(), e );<a name="line.622"></a> |
| <span class="sourceLineNo">623</span> }<a name="line.623"></a> |
| <span class="sourceLineNo">624</span> catch ( LdapException e )<a name="line.624"></a> |
| <span class="sourceLineNo">625</span> {<a name="line.625"></a> |
| <span class="sourceLineNo">626</span> throw new RbacManagerException( e.getMessage(), e );<a name="line.626"></a> |
| <span class="sourceLineNo">627</span> }<a name="line.627"></a> |
| <span class="sourceLineNo">628</span> finally<a name="line.628"></a> |
| <span class="sourceLineNo">629</span> {<a name="line.629"></a> |
| <span class="sourceLineNo">630</span> closeContext( context );<a name="line.630"></a> |
| <span class="sourceLineNo">631</span> closeLdapConnection( ldapConnection );<a name="line.631"></a> |
| <span class="sourceLineNo">632</span> }<a name="line.632"></a> |
| <span class="sourceLineNo">633</span> }<a name="line.633"></a> |
| <span class="sourceLineNo">634</span><a name="line.634"></a> |
| <span class="sourceLineNo">635</span> @Override<a name="line.635"></a> |
| <span class="sourceLineNo">636</span> public UserAssignment getUserAssignment( String username )<a name="line.636"></a> |
| <span class="sourceLineNo">637</span> throws RbacManagerException<a name="line.637"></a> |
| <span class="sourceLineNo">638</span> {<a name="line.638"></a> |
| <span class="sourceLineNo">639</span> UserAssignment ua = userAssignmentsCache.get( username );<a name="line.639"></a> |
| <span class="sourceLineNo">640</span> if ( ua != null )<a name="line.640"></a> |
| <span class="sourceLineNo">641</span> {<a name="line.641"></a> |
| <span class="sourceLineNo">642</span> return ua;<a name="line.642"></a> |
| <span class="sourceLineNo">643</span> }<a name="line.643"></a> |
| <span class="sourceLineNo">644</span> LdapConnection ldapConnection = null;<a name="line.644"></a> |
| <span class="sourceLineNo">645</span> DirContext context = null;<a name="line.645"></a> |
| <span class="sourceLineNo">646</span> try<a name="line.646"></a> |
| <span class="sourceLineNo">647</span> {<a name="line.647"></a> |
| <span class="sourceLineNo">648</span> ldapConnection = ldapConnectionFactory.getConnection();<a name="line.648"></a> |
| <span class="sourceLineNo">649</span> context = ldapConnection.getDirContext();<a name="line.649"></a> |
| <span class="sourceLineNo">650</span> List<String> roles = ldapRoleMapper.getRoles( username, context, getRealRoles() );<a name="line.650"></a> |
| <span class="sourceLineNo">651</span><a name="line.651"></a> |
| <span class="sourceLineNo">652</span> ua = new UserAssignmentImpl( username, roles );<a name="line.652"></a> |
| <span class="sourceLineNo">653</span><a name="line.653"></a> |
| <span class="sourceLineNo">654</span> userAssignmentsCache.put( username, ua );<a name="line.654"></a> |
| <span class="sourceLineNo">655</span><a name="line.655"></a> |
| <span class="sourceLineNo">656</span> return ua;<a name="line.656"></a> |
| <span class="sourceLineNo">657</span> }<a name="line.657"></a> |
| <span class="sourceLineNo">658</span> catch ( MappingException e )<a name="line.658"></a> |
| <span class="sourceLineNo">659</span> {<a name="line.659"></a> |
| <span class="sourceLineNo">660</span> throw new RbacManagerException( e.getMessage(), e );<a name="line.660"></a> |
| <span class="sourceLineNo">661</span> }<a name="line.661"></a> |
| <span class="sourceLineNo">662</span> catch ( LdapException e )<a name="line.662"></a> |
| <span class="sourceLineNo">663</span> {<a name="line.663"></a> |
| <span class="sourceLineNo">664</span> throw new RbacManagerException( e.getMessage(), e );<a name="line.664"></a> |
| <span class="sourceLineNo">665</span> }<a name="line.665"></a> |
| <span class="sourceLineNo">666</span> finally<a name="line.666"></a> |
| <span class="sourceLineNo">667</span> {<a name="line.667"></a> |
| <span class="sourceLineNo">668</span> closeContext( context );<a name="line.668"></a> |
| <span class="sourceLineNo">669</span> closeLdapConnection( ldapConnection );<a name="line.669"></a> |
| <span class="sourceLineNo">670</span> }<a name="line.670"></a> |
| <span class="sourceLineNo">671</span><a name="line.671"></a> |
| <span class="sourceLineNo">672</span> //return this.rbacImpl.getUserAssignment( username );<a name="line.672"></a> |
| <span class="sourceLineNo">673</span> }<a name="line.673"></a> |
| <span class="sourceLineNo">674</span><a name="line.674"></a> |
| <span class="sourceLineNo">675</span> @Override<a name="line.675"></a> |
| <span class="sourceLineNo">676</span> public List<? extends UserAssignment> getUserAssignmentsForRoles( Collection<String> roleNames )<a name="line.676"></a> |
| <span class="sourceLineNo">677</span> throws RbacManagerException<a name="line.677"></a> |
| <span class="sourceLineNo">678</span> {<a name="line.678"></a> |
| <span class="sourceLineNo">679</span> // TODO from ldap<a name="line.679"></a> |
| <span class="sourceLineNo">680</span> return this.rbacImpl.getUserAssignmentsForRoles( roleNames );<a name="line.680"></a> |
| <span class="sourceLineNo">681</span> }<a name="line.681"></a> |
| <span class="sourceLineNo">682</span><a name="line.682"></a> |
| <span class="sourceLineNo">683</span> @Override<a name="line.683"></a> |
| <span class="sourceLineNo">684</span> public boolean operationExists( Operation operation )<a name="line.684"></a> |
| <span class="sourceLineNo">685</span> {<a name="line.685"></a> |
| <span class="sourceLineNo">686</span> return this.rbacImpl.operationExists( operation );<a name="line.686"></a> |
| <span class="sourceLineNo">687</span> }<a name="line.687"></a> |
| <span class="sourceLineNo">688</span><a name="line.688"></a> |
| <span class="sourceLineNo">689</span> @Override<a name="line.689"></a> |
| <span class="sourceLineNo">690</span> public boolean operationExists( String name )<a name="line.690"></a> |
| <span class="sourceLineNo">691</span> {<a name="line.691"></a> |
| <span class="sourceLineNo">692</span> return this.rbacImpl.operationExists( name );<a name="line.692"></a> |
| <span class="sourceLineNo">693</span> }<a name="line.693"></a> |
| <span class="sourceLineNo">694</span><a name="line.694"></a> |
| <span class="sourceLineNo">695</span> @Override<a name="line.695"></a> |
| <span class="sourceLineNo">696</span> public boolean permissionExists( Permission permission )<a name="line.696"></a> |
| <span class="sourceLineNo">697</span> {<a name="line.697"></a> |
| <span class="sourceLineNo">698</span> return this.rbacImpl.permissionExists( permission );<a name="line.698"></a> |
| <span class="sourceLineNo">699</span> }<a name="line.699"></a> |
| <span class="sourceLineNo">700</span><a name="line.700"></a> |
| <span class="sourceLineNo">701</span> @Override<a name="line.701"></a> |
| <span class="sourceLineNo">702</span> public boolean permissionExists( String name )<a name="line.702"></a> |
| <span class="sourceLineNo">703</span> {<a name="line.703"></a> |
| <span class="sourceLineNo">704</span> return this.rbacImpl.permissionExists( name );<a name="line.704"></a> |
| <span class="sourceLineNo">705</span> }<a name="line.705"></a> |
| <span class="sourceLineNo">706</span><a name="line.706"></a> |
| <span class="sourceLineNo">707</span> @Override<a name="line.707"></a> |
| <span class="sourceLineNo">708</span> public void rbacInit( boolean freshdb )<a name="line.708"></a> |
| <span class="sourceLineNo">709</span> {<a name="line.709"></a> |
| <span class="sourceLineNo">710</span> if ( rbacImpl instanceof RBACManagerListener )<a name="line.710"></a> |
| <span class="sourceLineNo">711</span> {<a name="line.711"></a> |
| <span class="sourceLineNo">712</span> ( (RBACManagerListener) this.rbacImpl ).rbacInit( freshdb );<a name="line.712"></a> |
| <span class="sourceLineNo">713</span> }<a name="line.713"></a> |
| <span class="sourceLineNo">714</span> }<a name="line.714"></a> |
| <span class="sourceLineNo">715</span><a name="line.715"></a> |
| <span class="sourceLineNo">716</span> @Override<a name="line.716"></a> |
| <span class="sourceLineNo">717</span> public void rbacPermissionRemoved( Permission permission )<a name="line.717"></a> |
| <span class="sourceLineNo">718</span> {<a name="line.718"></a> |
| <span class="sourceLineNo">719</span> if ( rbacImpl instanceof RBACManagerListener )<a name="line.719"></a> |
| <span class="sourceLineNo">720</span> {<a name="line.720"></a> |
| <span class="sourceLineNo">721</span> ( (RBACManagerListener) this.rbacImpl ).rbacPermissionRemoved( permission );<a name="line.721"></a> |
| <span class="sourceLineNo">722</span> }<a name="line.722"></a> |
| <span class="sourceLineNo">723</span><a name="line.723"></a> |
| <span class="sourceLineNo">724</span> }<a name="line.724"></a> |
| <span class="sourceLineNo">725</span><a name="line.725"></a> |
| <span class="sourceLineNo">726</span> @Override<a name="line.726"></a> |
| <span class="sourceLineNo">727</span> public void rbacPermissionSaved( Permission permission )<a name="line.727"></a> |
| <span class="sourceLineNo">728</span> {<a name="line.728"></a> |
| <span class="sourceLineNo">729</span> if ( rbacImpl instanceof RBACManagerListener )<a name="line.729"></a> |
| <span class="sourceLineNo">730</span> {<a name="line.730"></a> |
| <span class="sourceLineNo">731</span> ( (RBACManagerListener) this.rbacImpl ).rbacPermissionSaved( permission );<a name="line.731"></a> |
| <span class="sourceLineNo">732</span> }<a name="line.732"></a> |
| <span class="sourceLineNo">733</span><a name="line.733"></a> |
| <span class="sourceLineNo">734</span> }<a name="line.734"></a> |
| <span class="sourceLineNo">735</span><a name="line.735"></a> |
| <span class="sourceLineNo">736</span> @Override<a name="line.736"></a> |
| <span class="sourceLineNo">737</span> public void rbacRoleRemoved( Role role )<a name="line.737"></a> |
| <span class="sourceLineNo">738</span> {<a name="line.738"></a> |
| <span class="sourceLineNo">739</span> if ( rbacImpl instanceof RBACManagerListener )<a name="line.739"></a> |
| <span class="sourceLineNo">740</span> {<a name="line.740"></a> |
| <span class="sourceLineNo">741</span> ( (RBACManagerListener) this.rbacImpl ).rbacRoleRemoved( role );<a name="line.741"></a> |
| <span class="sourceLineNo">742</span> }<a name="line.742"></a> |
| <span class="sourceLineNo">743</span><a name="line.743"></a> |
| <span class="sourceLineNo">744</span> }<a name="line.744"></a> |
| <span class="sourceLineNo">745</span><a name="line.745"></a> |
| <span class="sourceLineNo">746</span> @Override<a name="line.746"></a> |
| <span class="sourceLineNo">747</span> public void rbacRoleSaved( Role role )<a name="line.747"></a> |
| <span class="sourceLineNo">748</span> {<a name="line.748"></a> |
| <span class="sourceLineNo">749</span> if ( rbacImpl instanceof RBACManagerListener )<a name="line.749"></a> |
| <span class="sourceLineNo">750</span> {<a name="line.750"></a> |
| <span class="sourceLineNo">751</span> ( (RBACManagerListener) this.rbacImpl ).rbacRoleSaved( role );<a name="line.751"></a> |
| <span class="sourceLineNo">752</span> }<a name="line.752"></a> |
| <span class="sourceLineNo">753</span><a name="line.753"></a> |
| <span class="sourceLineNo">754</span> }<a name="line.754"></a> |
| <span class="sourceLineNo">755</span><a name="line.755"></a> |
| <span class="sourceLineNo">756</span> @Override<a name="line.756"></a> |
| <span class="sourceLineNo">757</span> public void rbacUserAssignmentRemoved( UserAssignment userAssignment )<a name="line.757"></a> |
| <span class="sourceLineNo">758</span> {<a name="line.758"></a> |
| <span class="sourceLineNo">759</span> if ( rbacImpl instanceof RBACManagerListener )<a name="line.759"></a> |
| <span class="sourceLineNo">760</span> {<a name="line.760"></a> |
| <span class="sourceLineNo">761</span> ( (RBACManagerListener) this.rbacImpl ).rbacUserAssignmentRemoved( userAssignment );<a name="line.761"></a> |
| <span class="sourceLineNo">762</span> }<a name="line.762"></a> |
| <span class="sourceLineNo">763</span><a name="line.763"></a> |
| <span class="sourceLineNo">764</span> }<a name="line.764"></a> |
| <span class="sourceLineNo">765</span><a name="line.765"></a> |
| <span class="sourceLineNo">766</span> @Override<a name="line.766"></a> |
| <span class="sourceLineNo">767</span> public void rbacUserAssignmentSaved( UserAssignment userAssignment )<a name="line.767"></a> |
| <span class="sourceLineNo">768</span> {<a name="line.768"></a> |
| <span class="sourceLineNo">769</span> if ( rbacImpl instanceof RBACManagerListener )<a name="line.769"></a> |
| <span class="sourceLineNo">770</span> {<a name="line.770"></a> |
| <span class="sourceLineNo">771</span> ( (RBACManagerListener) this.rbacImpl ).rbacUserAssignmentSaved( userAssignment );<a name="line.771"></a> |
| <span class="sourceLineNo">772</span> }<a name="line.772"></a> |
| <span class="sourceLineNo">773</span><a name="line.773"></a> |
| <span class="sourceLineNo">774</span> }<a name="line.774"></a> |
| <span class="sourceLineNo">775</span><a name="line.775"></a> |
| <span class="sourceLineNo">776</span> @Override<a name="line.776"></a> |
| <span class="sourceLineNo">777</span> public void removeListener( RBACManagerListener listener )<a name="line.777"></a> |
| <span class="sourceLineNo">778</span> {<a name="line.778"></a> |
| <span class="sourceLineNo">779</span> this.rbacImpl.removeListener( listener );<a name="line.779"></a> |
| <span class="sourceLineNo">780</span> }<a name="line.780"></a> |
| <span class="sourceLineNo">781</span><a name="line.781"></a> |
| <span class="sourceLineNo">782</span> @Override<a name="line.782"></a> |
| <span class="sourceLineNo">783</span> public void removeOperation( Operation operation )<a name="line.783"></a> |
| <span class="sourceLineNo">784</span> throws RbacManagerException<a name="line.784"></a> |
| <span class="sourceLineNo">785</span> {<a name="line.785"></a> |
| <span class="sourceLineNo">786</span> this.rbacImpl.removeOperation( operation );<a name="line.786"></a> |
| <span class="sourceLineNo">787</span> }<a name="line.787"></a> |
| <span class="sourceLineNo">788</span><a name="line.788"></a> |
| <span class="sourceLineNo">789</span> @Override<a name="line.789"></a> |
| <span class="sourceLineNo">790</span> public void removeOperation( String operationName )<a name="line.790"></a> |
| <span class="sourceLineNo">791</span> throws RbacManagerException<a name="line.791"></a> |
| <span class="sourceLineNo">792</span> {<a name="line.792"></a> |
| <span class="sourceLineNo">793</span> this.rbacImpl.removeOperation( operationName );<a name="line.793"></a> |
| <span class="sourceLineNo">794</span> }<a name="line.794"></a> |
| <span class="sourceLineNo">795</span><a name="line.795"></a> |
| <span class="sourceLineNo">796</span> @Override<a name="line.796"></a> |
| <span class="sourceLineNo">797</span> public void removePermission( Permission permission )<a name="line.797"></a> |
| <span class="sourceLineNo">798</span> throws RbacManagerException<a name="line.798"></a> |
| <span class="sourceLineNo">799</span> {<a name="line.799"></a> |
| <span class="sourceLineNo">800</span> this.rbacImpl.removePermission( permission );<a name="line.800"></a> |
| <span class="sourceLineNo">801</span> }<a name="line.801"></a> |
| <span class="sourceLineNo">802</span><a name="line.802"></a> |
| <span class="sourceLineNo">803</span> @Override<a name="line.803"></a> |
| <span class="sourceLineNo">804</span> public void removePermission( String permissionName )<a name="line.804"></a> |
| <span class="sourceLineNo">805</span> throws RbacManagerException<a name="line.805"></a> |
| <span class="sourceLineNo">806</span> {<a name="line.806"></a> |
| <span class="sourceLineNo">807</span> this.rbacImpl.removePermission( permissionName );<a name="line.807"></a> |
| <span class="sourceLineNo">808</span> }<a name="line.808"></a> |
| <span class="sourceLineNo">809</span><a name="line.809"></a> |
| <span class="sourceLineNo">810</span> @Override<a name="line.810"></a> |
| <span class="sourceLineNo">811</span> public void removeResource( Resource resource )<a name="line.811"></a> |
| <span class="sourceLineNo">812</span> throws RbacManagerException<a name="line.812"></a> |
| <span class="sourceLineNo">813</span> {<a name="line.813"></a> |
| <span class="sourceLineNo">814</span> this.rbacImpl.removeResource( resource );<a name="line.814"></a> |
| <span class="sourceLineNo">815</span> }<a name="line.815"></a> |
| <span class="sourceLineNo">816</span><a name="line.816"></a> |
| <span class="sourceLineNo">817</span> @Override<a name="line.817"></a> |
| <span class="sourceLineNo">818</span> public void removeResource( String resourceIdentifier )<a name="line.818"></a> |
| <span class="sourceLineNo">819</span> throws RbacManagerException<a name="line.819"></a> |
| <span class="sourceLineNo">820</span> {<a name="line.820"></a> |
| <span class="sourceLineNo">821</span> this.rbacImpl.removeResource( resourceIdentifier );<a name="line.821"></a> |
| <span class="sourceLineNo">822</span> }<a name="line.822"></a> |
| <span class="sourceLineNo">823</span><a name="line.823"></a> |
| <span class="sourceLineNo">824</span> @Override<a name="line.824"></a> |
| <span class="sourceLineNo">825</span> public void removeRole( Role role )<a name="line.825"></a> |
| <span class="sourceLineNo">826</span> throws RbacManagerException<a name="line.826"></a> |
| <span class="sourceLineNo">827</span> {<a name="line.827"></a> |
| <span class="sourceLineNo">828</span> RBACObjectAssertions.assertValid( role );<a name="line.828"></a> |
| <span class="sourceLineNo">829</span><a name="line.829"></a> |
| <span class="sourceLineNo">830</span> if ( role.isPermanent() )<a name="line.830"></a> |
| <span class="sourceLineNo">831</span> {<a name="line.831"></a> |
| <span class="sourceLineNo">832</span> throw new RbacPermanentException( "Unable to delete permanent role [" + role.getName() + "]" );<a name="line.832"></a> |
| <span class="sourceLineNo">833</span> }<a name="line.833"></a> |
| <span class="sourceLineNo">834</span> rolesCache.remove( role.getName() );<a name="line.834"></a> |
| <span class="sourceLineNo">835</span> if ( writableLdap )<a name="line.835"></a> |
| <span class="sourceLineNo">836</span> {<a name="line.836"></a> |
| <span class="sourceLineNo">837</span> LdapConnection ldapConnection = null;<a name="line.837"></a> |
| <span class="sourceLineNo">838</span> DirContext context = null;<a name="line.838"></a> |
| <span class="sourceLineNo">839</span> try<a name="line.839"></a> |
| <span class="sourceLineNo">840</span> {<a name="line.840"></a> |
| <span class="sourceLineNo">841</span> ldapConnection = ldapConnectionFactory.getConnection();<a name="line.841"></a> |
| <span class="sourceLineNo">842</span> context = ldapConnection.getDirContext();<a name="line.842"></a> |
| <span class="sourceLineNo">843</span> ldapRoleMapper.removeRole( role.getName(), context );<a name="line.843"></a> |
| <span class="sourceLineNo">844</span> }<a name="line.844"></a> |
| <span class="sourceLineNo">845</span> catch ( MappingException e )<a name="line.845"></a> |
| <span class="sourceLineNo">846</span> {<a name="line.846"></a> |
| <span class="sourceLineNo">847</span> throw new RbacManagerException( e.getMessage(), e );<a name="line.847"></a> |
| <span class="sourceLineNo">848</span> }<a name="line.848"></a> |
| <span class="sourceLineNo">849</span> catch ( LdapException e )<a name="line.849"></a> |
| <span class="sourceLineNo">850</span> {<a name="line.850"></a> |
| <span class="sourceLineNo">851</span> throw new RbacManagerException( e.getMessage(), e );<a name="line.851"></a> |
| <span class="sourceLineNo">852</span> }<a name="line.852"></a> |
| <span class="sourceLineNo">853</span> fireRbacRoleRemoved( role );<a name="line.853"></a> |
| <span class="sourceLineNo">854</span> }<a name="line.854"></a> |
| <span class="sourceLineNo">855</span> }<a name="line.855"></a> |
| <span class="sourceLineNo">856</span><a name="line.856"></a> |
| <span class="sourceLineNo">857</span> @Override<a name="line.857"></a> |
| <span class="sourceLineNo">858</span> public void removeRole( String roleName )<a name="line.858"></a> |
| <span class="sourceLineNo">859</span> throws RbacManagerException<a name="line.859"></a> |
| <span class="sourceLineNo">860</span> {<a name="line.860"></a> |
| <span class="sourceLineNo">861</span> if ( roleName == null )<a name="line.861"></a> |
| <span class="sourceLineNo">862</span> {<a name="line.862"></a> |
| <span class="sourceLineNo">863</span> return;<a name="line.863"></a> |
| <span class="sourceLineNo">864</span> }<a name="line.864"></a> |
| <span class="sourceLineNo">865</span> removeRole( new RoleImpl( roleName ) );<a name="line.865"></a> |
| <span class="sourceLineNo">866</span> }<a name="line.866"></a> |
| <span class="sourceLineNo">867</span><a name="line.867"></a> |
| <span class="sourceLineNo">868</span> @Override<a name="line.868"></a> |
| <span class="sourceLineNo">869</span> public void removeUserAssignment( String username )<a name="line.869"></a> |
| <span class="sourceLineNo">870</span> throws RbacManagerException<a name="line.870"></a> |
| <span class="sourceLineNo">871</span> {<a name="line.871"></a> |
| <span class="sourceLineNo">872</span> // TODO ldap cannot or isWritable ldap ?<a name="line.872"></a> |
| <span class="sourceLineNo">873</span> userAssignmentsCache.remove( username );<a name="line.873"></a> |
| <span class="sourceLineNo">874</span> this.rbacImpl.removeUserAssignment( username );<a name="line.874"></a> |
| <span class="sourceLineNo">875</span> }<a name="line.875"></a> |
| <span class="sourceLineNo">876</span><a name="line.876"></a> |
| <span class="sourceLineNo">877</span> @Override<a name="line.877"></a> |
| <span class="sourceLineNo">878</span> public void removeUserAssignment( UserAssignment userAssignment )<a name="line.878"></a> |
| <span class="sourceLineNo">879</span> throws RbacManagerException<a name="line.879"></a> |
| <span class="sourceLineNo">880</span> {<a name="line.880"></a> |
| <span class="sourceLineNo">881</span> if ( userAssignment != null )<a name="line.881"></a> |
| <span class="sourceLineNo">882</span> {<a name="line.882"></a> |
| <span class="sourceLineNo">883</span> userAssignmentsCache.remove( userAssignment.getPrincipal() );<a name="line.883"></a> |
| <span class="sourceLineNo">884</span> }<a name="line.884"></a> |
| <span class="sourceLineNo">885</span> // TODO ldap cannot or isWritable ldap ?<a name="line.885"></a> |
| <span class="sourceLineNo">886</span> this.rbacImpl.removeUserAssignment( userAssignment );<a name="line.886"></a> |
| <span class="sourceLineNo">887</span> }<a name="line.887"></a> |
| <span class="sourceLineNo">888</span><a name="line.888"></a> |
| <span class="sourceLineNo">889</span> @Override<a name="line.889"></a> |
| <span class="sourceLineNo">890</span> public boolean resourceExists( Resource resource )<a name="line.890"></a> |
| <span class="sourceLineNo">891</span> {<a name="line.891"></a> |
| <span class="sourceLineNo">892</span> return this.rbacImpl.resourceExists( resource );<a name="line.892"></a> |
| <span class="sourceLineNo">893</span> }<a name="line.893"></a> |
| <span class="sourceLineNo">894</span><a name="line.894"></a> |
| <span class="sourceLineNo">895</span> @Override<a name="line.895"></a> |
| <span class="sourceLineNo">896</span> public boolean resourceExists( String identifier )<a name="line.896"></a> |
| <span class="sourceLineNo">897</span> {<a name="line.897"></a> |
| <span class="sourceLineNo">898</span> return this.rbacImpl.resourceExists( identifier );<a name="line.898"></a> |
| <span class="sourceLineNo">899</span> }<a name="line.899"></a> |
| <span class="sourceLineNo">900</span><a name="line.900"></a> |
| <span class="sourceLineNo">901</span> @Override<a name="line.901"></a> |
| <span class="sourceLineNo">902</span> public boolean roleExists( Role role )<a name="line.902"></a> |
| <span class="sourceLineNo">903</span> throws RbacManagerException<a name="line.903"></a> |
| <span class="sourceLineNo">904</span> {<a name="line.904"></a> |
| <span class="sourceLineNo">905</span> if ( role == null )<a name="line.905"></a> |
| <span class="sourceLineNo">906</span> {<a name="line.906"></a> |
| <span class="sourceLineNo">907</span> return false;<a name="line.907"></a> |
| <span class="sourceLineNo">908</span> }<a name="line.908"></a> |
| <span class="sourceLineNo">909</span> return roleExists( role.getName() );<a name="line.909"></a> |
| <span class="sourceLineNo">910</span> }<a name="line.910"></a> |
| <span class="sourceLineNo">911</span><a name="line.911"></a> |
| <span class="sourceLineNo">912</span> @Override<a name="line.912"></a> |
| <span class="sourceLineNo">913</span> public boolean roleExists( String name )<a name="line.913"></a> |
| <span class="sourceLineNo">914</span> throws RbacManagerException<a name="line.914"></a> |
| <span class="sourceLineNo">915</span> {<a name="line.915"></a> |
| <span class="sourceLineNo">916</span> if ( StringUtils.isEmpty( name ) )<a name="line.916"></a> |
| <span class="sourceLineNo">917</span> {<a name="line.917"></a> |
| <span class="sourceLineNo">918</span> return false;<a name="line.918"></a> |
| <span class="sourceLineNo">919</span> }<a name="line.919"></a> |
| <span class="sourceLineNo">920</span> if ( rolesCache.get( name ) != null )<a name="line.920"></a> |
| <span class="sourceLineNo">921</span> {<a name="line.921"></a> |
| <span class="sourceLineNo">922</span> return true;<a name="line.922"></a> |
| <span class="sourceLineNo">923</span> }<a name="line.923"></a> |
| <span class="sourceLineNo">924</span> LdapConnection ldapConnection = null;<a name="line.924"></a> |
| <span class="sourceLineNo">925</span> DirContext context = null;<a name="line.925"></a> |
| <span class="sourceLineNo">926</span> try<a name="line.926"></a> |
| <span class="sourceLineNo">927</span> {<a name="line.927"></a> |
| <span class="sourceLineNo">928</span> ldapConnection = ldapConnectionFactory.getConnection();<a name="line.928"></a> |
| <span class="sourceLineNo">929</span> context = ldapConnection.getDirContext();<a name="line.929"></a> |
| <span class="sourceLineNo">930</span> if ( rolesCache.hasKey( name ) )<a name="line.930"></a> |
| <span class="sourceLineNo">931</span> {<a name="line.931"></a> |
| <span class="sourceLineNo">932</span> return true;<a name="line.932"></a> |
| <span class="sourceLineNo">933</span> }<a name="line.933"></a> |
| <span class="sourceLineNo">934</span> return ldapRoleMapper.hasRole( context, name );<a name="line.934"></a> |
| <span class="sourceLineNo">935</span> }<a name="line.935"></a> |
| <span class="sourceLineNo">936</span> catch ( MappingException e )<a name="line.936"></a> |
| <span class="sourceLineNo">937</span> {<a name="line.937"></a> |
| <span class="sourceLineNo">938</span> throw new RbacManagerException( e.getMessage(), e );<a name="line.938"></a> |
| <span class="sourceLineNo">939</span> }<a name="line.939"></a> |
| <span class="sourceLineNo">940</span> catch ( LdapException e )<a name="line.940"></a> |
| <span class="sourceLineNo">941</span> {<a name="line.941"></a> |
| <span class="sourceLineNo">942</span> throw new RbacManagerException( e.getMessage(), e );<a name="line.942"></a> |
| <span class="sourceLineNo">943</span> }<a name="line.943"></a> |
| <span class="sourceLineNo">944</span> finally<a name="line.944"></a> |
| <span class="sourceLineNo">945</span> {<a name="line.945"></a> |
| <span class="sourceLineNo">946</span> closeContext( context );<a name="line.946"></a> |
| <span class="sourceLineNo">947</span> closeLdapConnection( ldapConnection );<a name="line.947"></a> |
| <span class="sourceLineNo">948</span> }<a name="line.948"></a> |
| <span class="sourceLineNo">949</span> }<a name="line.949"></a> |
| <span class="sourceLineNo">950</span><a name="line.950"></a> |
| <span class="sourceLineNo">951</span> @Override<a name="line.951"></a> |
| <span class="sourceLineNo">952</span> public Operation saveOperation( Operation operation )<a name="line.952"></a> |
| <span class="sourceLineNo">953</span> throws RbacManagerException<a name="line.953"></a> |
| <span class="sourceLineNo">954</span> {<a name="line.954"></a> |
| <span class="sourceLineNo">955</span> return this.rbacImpl.saveOperation( operation );<a name="line.955"></a> |
| <span class="sourceLineNo">956</span> }<a name="line.956"></a> |
| <span class="sourceLineNo">957</span><a name="line.957"></a> |
| <span class="sourceLineNo">958</span> @Override<a name="line.958"></a> |
| <span class="sourceLineNo">959</span> public Permission savePermission( Permission permission )<a name="line.959"></a> |
| <span class="sourceLineNo">960</span> throws RbacManagerException<a name="line.960"></a> |
| <span class="sourceLineNo">961</span> {<a name="line.961"></a> |
| <span class="sourceLineNo">962</span> return this.rbacImpl.savePermission( permission );<a name="line.962"></a> |
| <span class="sourceLineNo">963</span> }<a name="line.963"></a> |
| <span class="sourceLineNo">964</span><a name="line.964"></a> |
| <span class="sourceLineNo">965</span> @Override<a name="line.965"></a> |
| <span class="sourceLineNo">966</span> public Resource saveResource( Resource resource )<a name="line.966"></a> |
| <span class="sourceLineNo">967</span> throws RbacManagerException<a name="line.967"></a> |
| <span class="sourceLineNo">968</span> {<a name="line.968"></a> |
| <span class="sourceLineNo">969</span> return this.rbacImpl.saveResource( resource );<a name="line.969"></a> |
| <span class="sourceLineNo">970</span> }<a name="line.970"></a> |
| <span class="sourceLineNo">971</span><a name="line.971"></a> |
| <span class="sourceLineNo">972</span> @Override<a name="line.972"></a> |
| <span class="sourceLineNo">973</span> public synchronized Role saveRole( Role role )<a name="line.973"></a> |
| <span class="sourceLineNo">974</span> throws RbacManagerException<a name="line.974"></a> |
| <span class="sourceLineNo">975</span> {<a name="line.975"></a> |
| <span class="sourceLineNo">976</span> if ( writableLdap )<a name="line.976"></a> |
| <span class="sourceLineNo">977</span> {<a name="line.977"></a> |
| <span class="sourceLineNo">978</span> LdapConnection ldapConnection = null;<a name="line.978"></a> |
| <span class="sourceLineNo">979</span> DirContext context = null;<a name="line.979"></a> |
| <span class="sourceLineNo">980</span> try<a name="line.980"></a> |
| <span class="sourceLineNo">981</span> {<a name="line.981"></a> |
| <span class="sourceLineNo">982</span> ldapConnection = ldapConnectionFactory.getConnection();<a name="line.982"></a> |
| <span class="sourceLineNo">983</span> context = ldapConnection.getDirContext();<a name="line.983"></a> |
| <span class="sourceLineNo">984</span> ldapRoleMapper.saveRole( role.getName(), context );<a name="line.984"></a> |
| <span class="sourceLineNo">985</span><a name="line.985"></a> |
| <span class="sourceLineNo">986</span> if ( !role.getChildRoleNames().isEmpty() )<a name="line.986"></a> |
| <span class="sourceLineNo">987</span> {<a name="line.987"></a> |
| <span class="sourceLineNo">988</span> for ( String roleName : role.getChildRoleNames() )<a name="line.988"></a> |
| <span class="sourceLineNo">989</span> {<a name="line.989"></a> |
| <span class="sourceLineNo">990</span> ldapRoleMapper.saveRole( roleName, context );<a name="line.990"></a> |
| <span class="sourceLineNo">991</span> }<a name="line.991"></a> |
| <span class="sourceLineNo">992</span> }<a name="line.992"></a> |
| <span class="sourceLineNo">993</span> fireRbacRoleSaved( role );<a name="line.993"></a> |
| <span class="sourceLineNo">994</span> }<a name="line.994"></a> |
| <span class="sourceLineNo">995</span> catch ( MappingException e )<a name="line.995"></a> |
| <span class="sourceLineNo">996</span> {<a name="line.996"></a> |
| <span class="sourceLineNo">997</span> throw new RbacManagerException( e.getMessage(), e );<a name="line.997"></a> |
| <span class="sourceLineNo">998</span> }<a name="line.998"></a> |
| <span class="sourceLineNo">999</span> catch ( LdapException e )<a name="line.999"></a> |
| <span class="sourceLineNo">1000</span> {<a name="line.1000"></a> |
| <span class="sourceLineNo">1001</span> throw new RbacManagerException( e.getMessage(), e );<a name="line.1001"></a> |
| <span class="sourceLineNo">1002</span> }<a name="line.1002"></a> |
| <span class="sourceLineNo">1003</span> }<a name="line.1003"></a> |
| <span class="sourceLineNo">1004</span> role = this.rbacImpl.saveRole( role );<a name="line.1004"></a> |
| <span class="sourceLineNo">1005</span> rolesCache.put( role.getName(), role );<a name="line.1005"></a> |
| <span class="sourceLineNo">1006</span><a name="line.1006"></a> |
| <span class="sourceLineNo">1007</span> return role;<a name="line.1007"></a> |
| <span class="sourceLineNo">1008</span> //return new RoleImpl( role.getName(), role.getPermissions() );<a name="line.1008"></a> |
| <span class="sourceLineNo">1009</span> }<a name="line.1009"></a> |
| <span class="sourceLineNo">1010</span><a name="line.1010"></a> |
| <span class="sourceLineNo">1011</span> @Override<a name="line.1011"></a> |
| <span class="sourceLineNo">1012</span> public synchronized void saveRoles( Collection<Role> roles )<a name="line.1012"></a> |
| <span class="sourceLineNo">1013</span> throws RbacManagerException<a name="line.1013"></a> |
| <span class="sourceLineNo">1014</span> {<a name="line.1014"></a> |
| <span class="sourceLineNo">1015</span> if ( writableLdap )<a name="line.1015"></a> |
| <span class="sourceLineNo">1016</span> {<a name="line.1016"></a> |
| <span class="sourceLineNo">1017</span> LdapConnection ldapConnection = null;<a name="line.1017"></a> |
| <span class="sourceLineNo">1018</span> DirContext context = null;<a name="line.1018"></a> |
| <span class="sourceLineNo">1019</span> try<a name="line.1019"></a> |
| <span class="sourceLineNo">1020</span> {<a name="line.1020"></a> |
| <span class="sourceLineNo">1021</span><a name="line.1021"></a> |
| <span class="sourceLineNo">1022</span> ldapConnection = ldapConnectionFactory.getConnection();<a name="line.1022"></a> |
| <span class="sourceLineNo">1023</span> context = ldapConnection.getDirContext();<a name="line.1023"></a> |
| <span class="sourceLineNo">1024</span> for ( Role role : roles )<a name="line.1024"></a> |
| <span class="sourceLineNo">1025</span> {<a name="line.1025"></a> |
| <span class="sourceLineNo">1026</span> ldapRoleMapper.saveRole( role.getName(), context );<a name="line.1026"></a> |
| <span class="sourceLineNo">1027</span> fireRbacRoleSaved( role );<a name="line.1027"></a> |
| <span class="sourceLineNo">1028</span> }<a name="line.1028"></a> |
| <span class="sourceLineNo">1029</span> }<a name="line.1029"></a> |
| <span class="sourceLineNo">1030</span> catch ( MappingException e )<a name="line.1030"></a> |
| <span class="sourceLineNo">1031</span> {<a name="line.1031"></a> |
| <span class="sourceLineNo">1032</span> throw new RbacManagerException( e.getMessage(), e );<a name="line.1032"></a> |
| <span class="sourceLineNo">1033</span> }<a name="line.1033"></a> |
| <span class="sourceLineNo">1034</span> catch ( LdapException e )<a name="line.1034"></a> |
| <span class="sourceLineNo">1035</span> {<a name="line.1035"></a> |
| <span class="sourceLineNo">1036</span> throw new RbacManagerException( e.getMessage(), e );<a name="line.1036"></a> |
| <span class="sourceLineNo">1037</span> }<a name="line.1037"></a> |
| <span class="sourceLineNo">1038</span> }<a name="line.1038"></a> |
| <span class="sourceLineNo">1039</span> this.rbacImpl.saveRoles( roles );<a name="line.1039"></a> |
| <span class="sourceLineNo">1040</span><a name="line.1040"></a> |
| <span class="sourceLineNo">1041</span> }<a name="line.1041"></a> |
| <span class="sourceLineNo">1042</span><a name="line.1042"></a> |
| <span class="sourceLineNo">1043</span> @Override<a name="line.1043"></a> |
| <span class="sourceLineNo">1044</span> public UserAssignment saveUserAssignment( UserAssignment userAssignment )<a name="line.1044"></a> |
| <span class="sourceLineNo">1045</span> throws RbacManagerException<a name="line.1045"></a> |
| <span class="sourceLineNo">1046</span> {<a name="line.1046"></a> |
| <span class="sourceLineNo">1047</span> LdapConnection ldapConnection = null;<a name="line.1047"></a> |
| <span class="sourceLineNo">1048</span> DirContext context = null;<a name="line.1048"></a> |
| <span class="sourceLineNo">1049</span> try<a name="line.1049"></a> |
| <span class="sourceLineNo">1050</span> {<a name="line.1050"></a> |
| <span class="sourceLineNo">1051</span> if ( !userManager.userExists( userAssignment.getPrincipal() ) )<a name="line.1051"></a> |
| <span class="sourceLineNo">1052</span> {<a name="line.1052"></a> |
| <span class="sourceLineNo">1053</span> User user = userManager.createUser( userAssignment.getPrincipal(), null, null );<a name="line.1053"></a> |
| <span class="sourceLineNo">1054</span> userManager.addUser( user );<a name="line.1054"></a> |
| <span class="sourceLineNo">1055</span> }<a name="line.1055"></a> |
| <span class="sourceLineNo">1056</span> ldapConnection = ldapConnectionFactory.getConnection();<a name="line.1056"></a> |
| <span class="sourceLineNo">1057</span> context = ldapConnection.getDirContext();<a name="line.1057"></a> |
| <span class="sourceLineNo">1058</span> List<String> allRoles = ldapRoleMapper.getAllRoles( context );<a name="line.1058"></a> |
| <span class="sourceLineNo">1059</span><a name="line.1059"></a> |
| <span class="sourceLineNo">1060</span> List<String> currentUserRoles =<a name="line.1060"></a> |
| <span class="sourceLineNo">1061</span> ldapRoleMapper.getRoles( userAssignment.getPrincipal(), context, getRealRoles() );<a name="line.1061"></a> |
| <span class="sourceLineNo">1062</span><a name="line.1062"></a> |
| <span class="sourceLineNo">1063</span> for ( String role : userAssignment.getRoleNames() )<a name="line.1063"></a> |
| <span class="sourceLineNo">1064</span> {<a name="line.1064"></a> |
| <span class="sourceLineNo">1065</span> if ( !currentUserRoles.contains( role ) && writableLdap )<a name="line.1065"></a> |
| <span class="sourceLineNo">1066</span> {<a name="line.1066"></a> |
| <span class="sourceLineNo">1067</span> // role exists in ldap ?<a name="line.1067"></a> |
| <span class="sourceLineNo">1068</span> if ( !allRoles.contains( role ) )<a name="line.1068"></a> |
| <span class="sourceLineNo">1069</span> {<a name="line.1069"></a> |
| <span class="sourceLineNo">1070</span> ldapRoleMapper.saveRole( role, context );<a name="line.1070"></a> |
| <span class="sourceLineNo">1071</span> allRoles.add( role );<a name="line.1071"></a> |
| <span class="sourceLineNo">1072</span> }<a name="line.1072"></a> |
| <span class="sourceLineNo">1073</span> ldapRoleMapper.saveUserRole( role, userAssignment.getPrincipal(), context );<a name="line.1073"></a> |
| <span class="sourceLineNo">1074</span> currentUserRoles.add( role );<a name="line.1074"></a> |
| <span class="sourceLineNo">1075</span> }<a name="line.1075"></a> |
| <span class="sourceLineNo">1076</span> }<a name="line.1076"></a> |
| <span class="sourceLineNo">1077</span><a name="line.1077"></a> |
| <span class="sourceLineNo">1078</span> for ( String role : currentUserRoles )<a name="line.1078"></a> |
| <span class="sourceLineNo">1079</span> {<a name="line.1079"></a> |
| <span class="sourceLineNo">1080</span> if ( !userAssignment.getRoleNames().contains( role ) && writableLdap )<a name="line.1080"></a> |
| <span class="sourceLineNo">1081</span> {<a name="line.1081"></a> |
| <span class="sourceLineNo">1082</span> ldapRoleMapper.removeUserRole( role, userAssignment.getPrincipal(), context );<a name="line.1082"></a> |
| <span class="sourceLineNo">1083</span> }<a name="line.1083"></a> |
| <span class="sourceLineNo">1084</span> }<a name="line.1084"></a> |
| <span class="sourceLineNo">1085</span><a name="line.1085"></a> |
| <span class="sourceLineNo">1086</span> userAssignmentsCache.put( userAssignment.getPrincipal(), userAssignment );<a name="line.1086"></a> |
| <span class="sourceLineNo">1087</span> return userAssignment;<a name="line.1087"></a> |
| <span class="sourceLineNo">1088</span> }<a name="line.1088"></a> |
| <span class="sourceLineNo">1089</span> catch ( UserManagerException e )<a name="line.1089"></a> |
| <span class="sourceLineNo">1090</span> {<a name="line.1090"></a> |
| <span class="sourceLineNo">1091</span> throw new RbacManagerException( e.getMessage(), e );<a name="line.1091"></a> |
| <span class="sourceLineNo">1092</span> }<a name="line.1092"></a> |
| <span class="sourceLineNo">1093</span> catch ( MappingException e )<a name="line.1093"></a> |
| <span class="sourceLineNo">1094</span> {<a name="line.1094"></a> |
| <span class="sourceLineNo">1095</span> throw new RbacManagerException( e.getMessage(), e );<a name="line.1095"></a> |
| <span class="sourceLineNo">1096</span> }<a name="line.1096"></a> |
| <span class="sourceLineNo">1097</span> catch ( LdapException e )<a name="line.1097"></a> |
| <span class="sourceLineNo">1098</span> {<a name="line.1098"></a> |
| <span class="sourceLineNo">1099</span> throw new RbacManagerException( e.getMessage(), e );<a name="line.1099"></a> |
| <span class="sourceLineNo">1100</span> }<a name="line.1100"></a> |
| <span class="sourceLineNo">1101</span> finally<a name="line.1101"></a> |
| <span class="sourceLineNo">1102</span> {<a name="line.1102"></a> |
| <span class="sourceLineNo">1103</span> closeContext( context );<a name="line.1103"></a> |
| <span class="sourceLineNo">1104</span> closeLdapConnection( ldapConnection );<a name="line.1104"></a> |
| <span class="sourceLineNo">1105</span> }<a name="line.1105"></a> |
| <span class="sourceLineNo">1106</span> }<a name="line.1106"></a> |
| <span class="sourceLineNo">1107</span><a name="line.1107"></a> |
| <span class="sourceLineNo">1108</span> @Override<a name="line.1108"></a> |
| <span class="sourceLineNo">1109</span> public boolean userAssignmentExists( String principal )<a name="line.1109"></a> |
| <span class="sourceLineNo">1110</span> {<a name="line.1110"></a> |
| <span class="sourceLineNo">1111</span> if ( userAssignmentsCache.hasKey( principal ) )<a name="line.1111"></a> |
| <span class="sourceLineNo">1112</span> {<a name="line.1112"></a> |
| <span class="sourceLineNo">1113</span> return true;<a name="line.1113"></a> |
| <span class="sourceLineNo">1114</span> }<a name="line.1114"></a> |
| <span class="sourceLineNo">1115</span> LdapConnection ldapConnection = null;<a name="line.1115"></a> |
| <span class="sourceLineNo">1116</span> DirContext context = null;<a name="line.1116"></a> |
| <span class="sourceLineNo">1117</span> try<a name="line.1117"></a> |
| <span class="sourceLineNo">1118</span> {<a name="line.1118"></a> |
| <span class="sourceLineNo">1119</span> ldapConnection = ldapConnectionFactory.getConnection();<a name="line.1119"></a> |
| <span class="sourceLineNo">1120</span> context = ldapConnection.getDirContext();<a name="line.1120"></a> |
| <span class="sourceLineNo">1121</span> List<String> roles = ldapRoleMapper.getRoles( principal, context, getRealRoles() );<a name="line.1121"></a> |
| <span class="sourceLineNo">1122</span> if ( roles == null || roles.isEmpty() )<a name="line.1122"></a> |
| <span class="sourceLineNo">1123</span> {<a name="line.1123"></a> |
| <span class="sourceLineNo">1124</span> return false;<a name="line.1124"></a> |
| <span class="sourceLineNo">1125</span> }<a name="line.1125"></a> |
| <span class="sourceLineNo">1126</span> return true;<a name="line.1126"></a> |
| <span class="sourceLineNo">1127</span> }<a name="line.1127"></a> |
| <span class="sourceLineNo">1128</span> catch ( RbacManagerException e )<a name="line.1128"></a> |
| <span class="sourceLineNo">1129</span> {<a name="line.1129"></a> |
| <span class="sourceLineNo">1130</span> log.warn( "fail to call userAssignmentExists: {}", e.getMessage() );<a name="line.1130"></a> |
| <span class="sourceLineNo">1131</span> }<a name="line.1131"></a> |
| <span class="sourceLineNo">1132</span> catch ( LdapException e )<a name="line.1132"></a> |
| <span class="sourceLineNo">1133</span> {<a name="line.1133"></a> |
| <span class="sourceLineNo">1134</span> log.warn( "fail to call userAssignmentExists: {}", e.getMessage() );<a name="line.1134"></a> |
| <span class="sourceLineNo">1135</span> }<a name="line.1135"></a> |
| <span class="sourceLineNo">1136</span> catch ( MappingException e )<a name="line.1136"></a> |
| <span class="sourceLineNo">1137</span> {<a name="line.1137"></a> |
| <span class="sourceLineNo">1138</span> log.warn( "fail to call userAssignmentExists: {}", e.getMessage() );<a name="line.1138"></a> |
| <span class="sourceLineNo">1139</span> }<a name="line.1139"></a> |
| <span class="sourceLineNo">1140</span> finally<a name="line.1140"></a> |
| <span class="sourceLineNo">1141</span> {<a name="line.1141"></a> |
| <span class="sourceLineNo">1142</span> closeContext( context );<a name="line.1142"></a> |
| <span class="sourceLineNo">1143</span> closeLdapConnection( ldapConnection );<a name="line.1143"></a> |
| <span class="sourceLineNo">1144</span> }<a name="line.1144"></a> |
| <span class="sourceLineNo">1145</span> return false;<a name="line.1145"></a> |
| <span class="sourceLineNo">1146</span> }<a name="line.1146"></a> |
| <span class="sourceLineNo">1147</span><a name="line.1147"></a> |
| <span class="sourceLineNo">1148</span> @Override<a name="line.1148"></a> |
| <span class="sourceLineNo">1149</span> public boolean userAssignmentExists( UserAssignment assignment )<a name="line.1149"></a> |
| <span class="sourceLineNo">1150</span> {<a name="line.1150"></a> |
| <span class="sourceLineNo">1151</span> if ( assignment == null )<a name="line.1151"></a> |
| <span class="sourceLineNo">1152</span> {<a name="line.1152"></a> |
| <span class="sourceLineNo">1153</span> return false;<a name="line.1153"></a> |
| <span class="sourceLineNo">1154</span> }<a name="line.1154"></a> |
| <span class="sourceLineNo">1155</span> return this.userAssignmentExists( assignment.getPrincipal() );<a name="line.1155"></a> |
| <span class="sourceLineNo">1156</span> }<a name="line.1156"></a> |
| <span class="sourceLineNo">1157</span><a name="line.1157"></a> |
| <span class="sourceLineNo">1158</span> public RBACManager getRbacImpl()<a name="line.1158"></a> |
| <span class="sourceLineNo">1159</span> {<a name="line.1159"></a> |
| <span class="sourceLineNo">1160</span> return rbacImpl;<a name="line.1160"></a> |
| <span class="sourceLineNo">1161</span> }<a name="line.1161"></a> |
| <span class="sourceLineNo">1162</span><a name="line.1162"></a> |
| <span class="sourceLineNo">1163</span> public void setRbacImpl( RBACManager rbacImpl )<a name="line.1163"></a> |
| <span class="sourceLineNo">1164</span> {<a name="line.1164"></a> |
| <span class="sourceLineNo">1165</span> this.rbacImpl = rbacImpl;<a name="line.1165"></a> |
| <span class="sourceLineNo">1166</span> }<a name="line.1166"></a> |
| <span class="sourceLineNo">1167</span><a name="line.1167"></a> |
| <span class="sourceLineNo">1168</span> public boolean isWritableLdap()<a name="line.1168"></a> |
| <span class="sourceLineNo">1169</span> {<a name="line.1169"></a> |
| <span class="sourceLineNo">1170</span> return writableLdap;<a name="line.1170"></a> |
| <span class="sourceLineNo">1171</span> }<a name="line.1171"></a> |
| <span class="sourceLineNo">1172</span><a name="line.1172"></a> |
| <span class="sourceLineNo">1173</span> public void setWritableLdap( boolean writableLdap )<a name="line.1173"></a> |
| <span class="sourceLineNo">1174</span> {<a name="line.1174"></a> |
| <span class="sourceLineNo">1175</span> this.writableLdap = writableLdap;<a name="line.1175"></a> |
| <span class="sourceLineNo">1176</span> }<a name="line.1176"></a> |
| <span class="sourceLineNo">1177</span><a name="line.1177"></a> |
| <span class="sourceLineNo">1178</span> public LdapRoleMapper getLdapRoleMapper()<a name="line.1178"></a> |
| <span class="sourceLineNo">1179</span> {<a name="line.1179"></a> |
| <span class="sourceLineNo">1180</span> return ldapRoleMapper;<a name="line.1180"></a> |
| <span class="sourceLineNo">1181</span> }<a name="line.1181"></a> |
| <span class="sourceLineNo">1182</span><a name="line.1182"></a> |
| <span class="sourceLineNo">1183</span> public void setLdapRoleMapper( LdapRoleMapper ldapRoleMapper )<a name="line.1183"></a> |
| <span class="sourceLineNo">1184</span> {<a name="line.1184"></a> |
| <span class="sourceLineNo">1185</span> this.ldapRoleMapper = ldapRoleMapper;<a name="line.1185"></a> |
| <span class="sourceLineNo">1186</span> }<a name="line.1186"></a> |
| <span class="sourceLineNo">1187</span><a name="line.1187"></a> |
| <span class="sourceLineNo">1188</span> private static class RoleImpl<a name="line.1188"></a> |
| <span class="sourceLineNo">1189</span> extends AbstractRole<a name="line.1189"></a> |
| <span class="sourceLineNo">1190</span> {<a name="line.1190"></a> |
| <span class="sourceLineNo">1191</span> private String name;<a name="line.1191"></a> |
| <span class="sourceLineNo">1192</span><a name="line.1192"></a> |
| <span class="sourceLineNo">1193</span> private String description;<a name="line.1193"></a> |
| <span class="sourceLineNo">1194</span><a name="line.1194"></a> |
| <span class="sourceLineNo">1195</span> private List<Permission> permissions = new ArrayList<Permission>();<a name="line.1195"></a> |
| <span class="sourceLineNo">1196</span><a name="line.1196"></a> |
| <span class="sourceLineNo">1197</span> private List<String> childRoleNames = new ArrayList<String>();<a name="line.1197"></a> |
| <span class="sourceLineNo">1198</span><a name="line.1198"></a> |
| <span class="sourceLineNo">1199</span> private RoleImpl( String name )<a name="line.1199"></a> |
| <span class="sourceLineNo">1200</span> {<a name="line.1200"></a> |
| <span class="sourceLineNo">1201</span> this.name = name;<a name="line.1201"></a> |
| <span class="sourceLineNo">1202</span> }<a name="line.1202"></a> |
| <span class="sourceLineNo">1203</span><a name="line.1203"></a> |
| <span class="sourceLineNo">1204</span> private RoleImpl( String name, List<Permission> permissions )<a name="line.1204"></a> |
| <span class="sourceLineNo">1205</span> {<a name="line.1205"></a> |
| <span class="sourceLineNo">1206</span> this.name = name;<a name="line.1206"></a> |
| <span class="sourceLineNo">1207</span> this.permissions = permissions;<a name="line.1207"></a> |
| <span class="sourceLineNo">1208</span> }<a name="line.1208"></a> |
| <span class="sourceLineNo">1209</span><a name="line.1209"></a> |
| <span class="sourceLineNo">1210</span> @Override<a name="line.1210"></a> |
| <span class="sourceLineNo">1211</span> public void addPermission( Permission permission )<a name="line.1211"></a> |
| <span class="sourceLineNo">1212</span> {<a name="line.1212"></a> |
| <span class="sourceLineNo">1213</span> this.permissions.add( permission );<a name="line.1213"></a> |
| <span class="sourceLineNo">1214</span> }<a name="line.1214"></a> |
| <span class="sourceLineNo">1215</span><a name="line.1215"></a> |
| <span class="sourceLineNo">1216</span> @Override<a name="line.1216"></a> |
| <span class="sourceLineNo">1217</span> public void addChildRoleName( String name )<a name="line.1217"></a> |
| <span class="sourceLineNo">1218</span> {<a name="line.1218"></a> |
| <span class="sourceLineNo">1219</span> this.childRoleNames.add( name );<a name="line.1219"></a> |
| <span class="sourceLineNo">1220</span> }<a name="line.1220"></a> |
| <span class="sourceLineNo">1221</span><a name="line.1221"></a> |
| <span class="sourceLineNo">1222</span> @Override<a name="line.1222"></a> |
| <span class="sourceLineNo">1223</span> public List<String> getChildRoleNames()<a name="line.1223"></a> |
| <span class="sourceLineNo">1224</span> {<a name="line.1224"></a> |
| <span class="sourceLineNo">1225</span> return this.childRoleNames;<a name="line.1225"></a> |
| <span class="sourceLineNo">1226</span> }<a name="line.1226"></a> |
| <span class="sourceLineNo">1227</span><a name="line.1227"></a> |
| <span class="sourceLineNo">1228</span> @Override<a name="line.1228"></a> |
| <span class="sourceLineNo">1229</span> public String getDescription()<a name="line.1229"></a> |
| <span class="sourceLineNo">1230</span> {<a name="line.1230"></a> |
| <span class="sourceLineNo">1231</span> return this.description;<a name="line.1231"></a> |
| <span class="sourceLineNo">1232</span> }<a name="line.1232"></a> |
| <span class="sourceLineNo">1233</span><a name="line.1233"></a> |
| <span class="sourceLineNo">1234</span> @Override<a name="line.1234"></a> |
| <span class="sourceLineNo">1235</span> public String getName()<a name="line.1235"></a> |
| <span class="sourceLineNo">1236</span> {<a name="line.1236"></a> |
| <span class="sourceLineNo">1237</span> return this.name;<a name="line.1237"></a> |
| <span class="sourceLineNo">1238</span> }<a name="line.1238"></a> |
| <span class="sourceLineNo">1239</span><a name="line.1239"></a> |
| <span class="sourceLineNo">1240</span> @Override<a name="line.1240"></a> |
| <span class="sourceLineNo">1241</span> public List<Permission> getPermissions()<a name="line.1241"></a> |
| <span class="sourceLineNo">1242</span> {<a name="line.1242"></a> |
| <span class="sourceLineNo">1243</span> return this.permissions;<a name="line.1243"></a> |
| <span class="sourceLineNo">1244</span> }<a name="line.1244"></a> |
| <span class="sourceLineNo">1245</span><a name="line.1245"></a> |
| <span class="sourceLineNo">1246</span> @Override<a name="line.1246"></a> |
| <span class="sourceLineNo">1247</span> public boolean isAssignable()<a name="line.1247"></a> |
| <span class="sourceLineNo">1248</span> {<a name="line.1248"></a> |
| <span class="sourceLineNo">1249</span> return true;<a name="line.1249"></a> |
| <span class="sourceLineNo">1250</span> }<a name="line.1250"></a> |
| <span class="sourceLineNo">1251</span><a name="line.1251"></a> |
| <span class="sourceLineNo">1252</span> @Override<a name="line.1252"></a> |
| <span class="sourceLineNo">1253</span> public void removePermission( Permission permission )<a name="line.1253"></a> |
| <span class="sourceLineNo">1254</span> {<a name="line.1254"></a> |
| <span class="sourceLineNo">1255</span> this.permissions.remove( permission );<a name="line.1255"></a> |
| <span class="sourceLineNo">1256</span> }<a name="line.1256"></a> |
| <span class="sourceLineNo">1257</span><a name="line.1257"></a> |
| <span class="sourceLineNo">1258</span> @Override<a name="line.1258"></a> |
| <span class="sourceLineNo">1259</span> public void setAssignable( boolean assignable )<a name="line.1259"></a> |
| <span class="sourceLineNo">1260</span> {<a name="line.1260"></a> |
| <span class="sourceLineNo">1261</span> // no op<a name="line.1261"></a> |
| <span class="sourceLineNo">1262</span> }<a name="line.1262"></a> |
| <span class="sourceLineNo">1263</span><a name="line.1263"></a> |
| <span class="sourceLineNo">1264</span> @Override<a name="line.1264"></a> |
| <span class="sourceLineNo">1265</span> public void setChildRoleNames( List<String> names )<a name="line.1265"></a> |
| <span class="sourceLineNo">1266</span> {<a name="line.1266"></a> |
| <span class="sourceLineNo">1267</span> this.childRoleNames = names;<a name="line.1267"></a> |
| <span class="sourceLineNo">1268</span> }<a name="line.1268"></a> |
| <span class="sourceLineNo">1269</span><a name="line.1269"></a> |
| <span class="sourceLineNo">1270</span> @Override<a name="line.1270"></a> |
| <span class="sourceLineNo">1271</span> public void setDescription( String description )<a name="line.1271"></a> |
| <span class="sourceLineNo">1272</span> {<a name="line.1272"></a> |
| <span class="sourceLineNo">1273</span> this.description = description;<a name="line.1273"></a> |
| <span class="sourceLineNo">1274</span> }<a name="line.1274"></a> |
| <span class="sourceLineNo">1275</span><a name="line.1275"></a> |
| <span class="sourceLineNo">1276</span> @Override<a name="line.1276"></a> |
| <span class="sourceLineNo">1277</span> public void setName( String name )<a name="line.1277"></a> |
| <span class="sourceLineNo">1278</span> {<a name="line.1278"></a> |
| <span class="sourceLineNo">1279</span> this.name = name;<a name="line.1279"></a> |
| <span class="sourceLineNo">1280</span> }<a name="line.1280"></a> |
| <span class="sourceLineNo">1281</span><a name="line.1281"></a> |
| <span class="sourceLineNo">1282</span> @Override<a name="line.1282"></a> |
| <span class="sourceLineNo">1283</span> public void setPermissions( List<Permission> permissions )<a name="line.1283"></a> |
| <span class="sourceLineNo">1284</span> {<a name="line.1284"></a> |
| <span class="sourceLineNo">1285</span> this.permissions = permissions;<a name="line.1285"></a> |
| <span class="sourceLineNo">1286</span> }<a name="line.1286"></a> |
| <span class="sourceLineNo">1287</span><a name="line.1287"></a> |
| <span class="sourceLineNo">1288</span> @Override<a name="line.1288"></a> |
| <span class="sourceLineNo">1289</span> public boolean isPermanent()<a name="line.1289"></a> |
| <span class="sourceLineNo">1290</span> {<a name="line.1290"></a> |
| <span class="sourceLineNo">1291</span> return true;<a name="line.1291"></a> |
| <span class="sourceLineNo">1292</span> }<a name="line.1292"></a> |
| <span class="sourceLineNo">1293</span><a name="line.1293"></a> |
| <span class="sourceLineNo">1294</span> @Override<a name="line.1294"></a> |
| <span class="sourceLineNo">1295</span> public void setPermanent( boolean permanent )<a name="line.1295"></a> |
| <span class="sourceLineNo">1296</span> {<a name="line.1296"></a> |
| <span class="sourceLineNo">1297</span> // no op<a name="line.1297"></a> |
| <span class="sourceLineNo">1298</span> }<a name="line.1298"></a> |
| <span class="sourceLineNo">1299</span><a name="line.1299"></a> |
| <span class="sourceLineNo">1300</span> @Override<a name="line.1300"></a> |
| <span class="sourceLineNo">1301</span> public String toString()<a name="line.1301"></a> |
| <span class="sourceLineNo">1302</span> {<a name="line.1302"></a> |
| <span class="sourceLineNo">1303</span> final StringBuilder sb = new StringBuilder();<a name="line.1303"></a> |
| <span class="sourceLineNo">1304</span> sb.append( "RoleImpl" );<a name="line.1304"></a> |
| <span class="sourceLineNo">1305</span> sb.append( "{name='" ).append( name ).append( '\'' );<a name="line.1305"></a> |
| <span class="sourceLineNo">1306</span> sb.append( '}' );<a name="line.1306"></a> |
| <span class="sourceLineNo">1307</span> return sb.toString();<a name="line.1307"></a> |
| <span class="sourceLineNo">1308</span> }<a name="line.1308"></a> |
| <span class="sourceLineNo">1309</span><a name="line.1309"></a> |
| <span class="sourceLineNo">1310</span> @Override<a name="line.1310"></a> |
| <span class="sourceLineNo">1311</span> public boolean equals( Object o )<a name="line.1311"></a> |
| <span class="sourceLineNo">1312</span> {<a name="line.1312"></a> |
| <span class="sourceLineNo">1313</span> if ( this == o )<a name="line.1313"></a> |
| <span class="sourceLineNo">1314</span> {<a name="line.1314"></a> |
| <span class="sourceLineNo">1315</span> return true;<a name="line.1315"></a> |
| <span class="sourceLineNo">1316</span> }<a name="line.1316"></a> |
| <span class="sourceLineNo">1317</span> if ( o == null || getClass() != o.getClass() )<a name="line.1317"></a> |
| <span class="sourceLineNo">1318</span> {<a name="line.1318"></a> |
| <span class="sourceLineNo">1319</span> return false;<a name="line.1319"></a> |
| <span class="sourceLineNo">1320</span> }<a name="line.1320"></a> |
| <span class="sourceLineNo">1321</span><a name="line.1321"></a> |
| <span class="sourceLineNo">1322</span> RoleImpl role = (RoleImpl) o;<a name="line.1322"></a> |
| <span class="sourceLineNo">1323</span><a name="line.1323"></a> |
| <span class="sourceLineNo">1324</span> if ( name != null ? !name.equals( role.name ) : role.name != null )<a name="line.1324"></a> |
| <span class="sourceLineNo">1325</span> {<a name="line.1325"></a> |
| <span class="sourceLineNo">1326</span> return false;<a name="line.1326"></a> |
| <span class="sourceLineNo">1327</span> }<a name="line.1327"></a> |
| <span class="sourceLineNo">1328</span><a name="line.1328"></a> |
| <span class="sourceLineNo">1329</span> return true;<a name="line.1329"></a> |
| <span class="sourceLineNo">1330</span> }<a name="line.1330"></a> |
| <span class="sourceLineNo">1331</span><a name="line.1331"></a> |
| <span class="sourceLineNo">1332</span> @Override<a name="line.1332"></a> |
| <span class="sourceLineNo">1333</span> public int hashCode()<a name="line.1333"></a> |
| <span class="sourceLineNo">1334</span> {<a name="line.1334"></a> |
| <span class="sourceLineNo">1335</span> return name != null ? name.hashCode() : 0;<a name="line.1335"></a> |
| <span class="sourceLineNo">1336</span> }<a name="line.1336"></a> |
| <span class="sourceLineNo">1337</span> }<a name="line.1337"></a> |
| <span class="sourceLineNo">1338</span><a name="line.1338"></a> |
| <span class="sourceLineNo">1339</span> private static class UserAssignmentImpl<a name="line.1339"></a> |
| <span class="sourceLineNo">1340</span> implements UserAssignment<a name="line.1340"></a> |
| <span class="sourceLineNo">1341</span> {<a name="line.1341"></a> |
| <span class="sourceLineNo">1342</span> private String username;<a name="line.1342"></a> |
| <span class="sourceLineNo">1343</span><a name="line.1343"></a> |
| <span class="sourceLineNo">1344</span> private List<String> roleNames;<a name="line.1344"></a> |
| <span class="sourceLineNo">1345</span><a name="line.1345"></a> |
| <span class="sourceLineNo">1346</span> private boolean permanent;<a name="line.1346"></a> |
| <span class="sourceLineNo">1347</span><a name="line.1347"></a> |
| <span class="sourceLineNo">1348</span> private UserAssignmentImpl( String username, Collection<String> roleNames )<a name="line.1348"></a> |
| <span class="sourceLineNo">1349</span> {<a name="line.1349"></a> |
| <span class="sourceLineNo">1350</span> this.username = username;<a name="line.1350"></a> |
| <span class="sourceLineNo">1351</span><a name="line.1351"></a> |
| <span class="sourceLineNo">1352</span> if ( roleNames == null )<a name="line.1352"></a> |
| <span class="sourceLineNo">1353</span> {<a name="line.1353"></a> |
| <span class="sourceLineNo">1354</span> this.roleNames = new ArrayList<String>();<a name="line.1354"></a> |
| <span class="sourceLineNo">1355</span> }<a name="line.1355"></a> |
| <span class="sourceLineNo">1356</span> else<a name="line.1356"></a> |
| <span class="sourceLineNo">1357</span> {<a name="line.1357"></a> |
| <span class="sourceLineNo">1358</span> this.roleNames = new ArrayList<String>( roleNames );<a name="line.1358"></a> |
| <span class="sourceLineNo">1359</span> }<a name="line.1359"></a> |
| <span class="sourceLineNo">1360</span> }<a name="line.1360"></a> |
| <span class="sourceLineNo">1361</span><a name="line.1361"></a> |
| <span class="sourceLineNo">1362</span> @Override<a name="line.1362"></a> |
| <span class="sourceLineNo">1363</span> public String getPrincipal()<a name="line.1363"></a> |
| <span class="sourceLineNo">1364</span> {<a name="line.1364"></a> |
| <span class="sourceLineNo">1365</span> return this.username;<a name="line.1365"></a> |
| <span class="sourceLineNo">1366</span> }<a name="line.1366"></a> |
| <span class="sourceLineNo">1367</span><a name="line.1367"></a> |
| <span class="sourceLineNo">1368</span> @Override<a name="line.1368"></a> |
| <span class="sourceLineNo">1369</span> public List<String> getRoleNames()<a name="line.1369"></a> |
| <span class="sourceLineNo">1370</span> {<a name="line.1370"></a> |
| <span class="sourceLineNo">1371</span> return this.roleNames;<a name="line.1371"></a> |
| <span class="sourceLineNo">1372</span> }<a name="line.1372"></a> |
| <span class="sourceLineNo">1373</span><a name="line.1373"></a> |
| <span class="sourceLineNo">1374</span> @Override<a name="line.1374"></a> |
| <span class="sourceLineNo">1375</span> public void addRoleName( Role role )<a name="line.1375"></a> |
| <span class="sourceLineNo">1376</span> {<a name="line.1376"></a> |
| <span class="sourceLineNo">1377</span> if ( role == null )<a name="line.1377"></a> |
| <span class="sourceLineNo">1378</span> {<a name="line.1378"></a> |
| <span class="sourceLineNo">1379</span> return;<a name="line.1379"></a> |
| <span class="sourceLineNo">1380</span> }<a name="line.1380"></a> |
| <span class="sourceLineNo">1381</span> this.roleNames.add( role.getName() );<a name="line.1381"></a> |
| <span class="sourceLineNo">1382</span> }<a name="line.1382"></a> |
| <span class="sourceLineNo">1383</span><a name="line.1383"></a> |
| <span class="sourceLineNo">1384</span> @Override<a name="line.1384"></a> |
| <span class="sourceLineNo">1385</span> public void addRoleName( String roleName )<a name="line.1385"></a> |
| <span class="sourceLineNo">1386</span> {<a name="line.1386"></a> |
| <span class="sourceLineNo">1387</span> if ( roleName == null )<a name="line.1387"></a> |
| <span class="sourceLineNo">1388</span> {<a name="line.1388"></a> |
| <span class="sourceLineNo">1389</span> return;<a name="line.1389"></a> |
| <span class="sourceLineNo">1390</span> }<a name="line.1390"></a> |
| <span class="sourceLineNo">1391</span> this.roleNames.add( roleName );<a name="line.1391"></a> |
| <span class="sourceLineNo">1392</span> }<a name="line.1392"></a> |
| <span class="sourceLineNo">1393</span><a name="line.1393"></a> |
| <span class="sourceLineNo">1394</span> @Override<a name="line.1394"></a> |
| <span class="sourceLineNo">1395</span> public void removeRoleName( Role role )<a name="line.1395"></a> |
| <span class="sourceLineNo">1396</span> {<a name="line.1396"></a> |
| <span class="sourceLineNo">1397</span> if ( role == null )<a name="line.1397"></a> |
| <span class="sourceLineNo">1398</span> {<a name="line.1398"></a> |
| <span class="sourceLineNo">1399</span> return;<a name="line.1399"></a> |
| <span class="sourceLineNo">1400</span> }<a name="line.1400"></a> |
| <span class="sourceLineNo">1401</span> this.roleNames.remove( role.getName() );<a name="line.1401"></a> |
| <span class="sourceLineNo">1402</span> }<a name="line.1402"></a> |
| <span class="sourceLineNo">1403</span><a name="line.1403"></a> |
| <span class="sourceLineNo">1404</span> @Override<a name="line.1404"></a> |
| <span class="sourceLineNo">1405</span> public void removeRoleName( String roleName )<a name="line.1405"></a> |
| <span class="sourceLineNo">1406</span> {<a name="line.1406"></a> |
| <span class="sourceLineNo">1407</span> if ( roleName == null )<a name="line.1407"></a> |
| <span class="sourceLineNo">1408</span> {<a name="line.1408"></a> |
| <span class="sourceLineNo">1409</span> return;<a name="line.1409"></a> |
| <span class="sourceLineNo">1410</span> }<a name="line.1410"></a> |
| <span class="sourceLineNo">1411</span> this.roleNames.remove( roleName );<a name="line.1411"></a> |
| <span class="sourceLineNo">1412</span> }<a name="line.1412"></a> |
| <span class="sourceLineNo">1413</span><a name="line.1413"></a> |
| <span class="sourceLineNo">1414</span> @Override<a name="line.1414"></a> |
| <span class="sourceLineNo">1415</span> public void setPrincipal( String principal )<a name="line.1415"></a> |
| <span class="sourceLineNo">1416</span> {<a name="line.1416"></a> |
| <span class="sourceLineNo">1417</span> this.username = principal;<a name="line.1417"></a> |
| <span class="sourceLineNo">1418</span> }<a name="line.1418"></a> |
| <span class="sourceLineNo">1419</span><a name="line.1419"></a> |
| <span class="sourceLineNo">1420</span> @Override<a name="line.1420"></a> |
| <span class="sourceLineNo">1421</span> public void setRoleNames( List<String> roles )<a name="line.1421"></a> |
| <span class="sourceLineNo">1422</span> {<a name="line.1422"></a> |
| <span class="sourceLineNo">1423</span> this.roleNames = roles;<a name="line.1423"></a> |
| <span class="sourceLineNo">1424</span> }<a name="line.1424"></a> |
| <span class="sourceLineNo">1425</span><a name="line.1425"></a> |
| <span class="sourceLineNo">1426</span> @Override<a name="line.1426"></a> |
| <span class="sourceLineNo">1427</span> public boolean isPermanent()<a name="line.1427"></a> |
| <span class="sourceLineNo">1428</span> {<a name="line.1428"></a> |
| <span class="sourceLineNo">1429</span> return this.permanent;<a name="line.1429"></a> |
| <span class="sourceLineNo">1430</span> }<a name="line.1430"></a> |
| <span class="sourceLineNo">1431</span><a name="line.1431"></a> |
| <span class="sourceLineNo">1432</span> @Override<a name="line.1432"></a> |
| <span class="sourceLineNo">1433</span> public void setPermanent( boolean permanent )<a name="line.1433"></a> |
| <span class="sourceLineNo">1434</span> {<a name="line.1434"></a> |
| <span class="sourceLineNo">1435</span> this.permanent = permanent;<a name="line.1435"></a> |
| <span class="sourceLineNo">1436</span> }<a name="line.1436"></a> |
| <span class="sourceLineNo">1437</span><a name="line.1437"></a> |
| <span class="sourceLineNo">1438</span> @Override<a name="line.1438"></a> |
| <span class="sourceLineNo">1439</span> public String toString()<a name="line.1439"></a> |
| <span class="sourceLineNo">1440</span> {<a name="line.1440"></a> |
| <span class="sourceLineNo">1441</span> final StringBuilder sb = new StringBuilder();<a name="line.1441"></a> |
| <span class="sourceLineNo">1442</span> sb.append( "UserAssignmentImpl" );<a name="line.1442"></a> |
| <span class="sourceLineNo">1443</span> sb.append( "{username='" ).append( username ).append( '\'' );<a name="line.1443"></a> |
| <span class="sourceLineNo">1444</span> sb.append( ", roleNames=" ).append( roleNames );<a name="line.1444"></a> |
| <span class="sourceLineNo">1445</span> sb.append( ", permanent=" ).append( permanent );<a name="line.1445"></a> |
| <span class="sourceLineNo">1446</span> sb.append( '}' );<a name="line.1446"></a> |
| <span class="sourceLineNo">1447</span> return sb.toString();<a name="line.1447"></a> |
| <span class="sourceLineNo">1448</span> }<a name="line.1448"></a> |
| <span class="sourceLineNo">1449</span> }<a name="line.1449"></a> |
| <span class="sourceLineNo">1450</span><a name="line.1450"></a> |
| <span class="sourceLineNo">1451</span><a name="line.1451"></a> |
| <span class="sourceLineNo">1452</span> @Override<a name="line.1452"></a> |
| <span class="sourceLineNo">1453</span> public boolean isFinalImplementation()<a name="line.1453"></a> |
| <span class="sourceLineNo">1454</span> {<a name="line.1454"></a> |
| <span class="sourceLineNo">1455</span> return true;<a name="line.1455"></a> |
| <span class="sourceLineNo">1456</span> }<a name="line.1456"></a> |
| <span class="sourceLineNo">1457</span><a name="line.1457"></a> |
| <span class="sourceLineNo">1458</span> @Override<a name="line.1458"></a> |
| <span class="sourceLineNo">1459</span> public String getDescriptionKey()<a name="line.1459"></a> |
| <span class="sourceLineNo">1460</span> {<a name="line.1460"></a> |
| <span class="sourceLineNo">1461</span> return "archiva.redback.rbacmanager.ldap";<a name="line.1461"></a> |
| <span class="sourceLineNo">1462</span> }<a name="line.1462"></a> |
| <span class="sourceLineNo">1463</span><a name="line.1463"></a> |
| <span class="sourceLineNo">1464</span> @Override<a name="line.1464"></a> |
| <span class="sourceLineNo">1465</span> public boolean isReadOnly()<a name="line.1465"></a> |
| <span class="sourceLineNo">1466</span> {<a name="line.1466"></a> |
| <span class="sourceLineNo">1467</span> return !writableLdap;<a name="line.1467"></a> |
| <span class="sourceLineNo">1468</span> }<a name="line.1468"></a> |
| <span class="sourceLineNo">1469</span>}<a name="line.1469"></a> |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| </pre> |
| </div> |
| </body> |
| </html> |
