Google Git
Sign in
apache / shiro-site / 01016f43374d9b054f3ea1e568b015d5d69428f9 / . / src / site / assets / static / 1.4.0 / shiro-test-coverage / jacoco-aggregate / shiro-core / org.apache.shiro.authz / ModularRealmAuthorizer.java.html
blob: 7245d9588f8ced526529866a03371009079cdee4 [file] [log] [blame]
<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml" lang="en"><head><meta http-equiv="Content-Type" content="text/html;charset=UTF-8"/><link rel="stylesheet" href="../../jacoco-resources/report.css" type="text/css"/><link rel="shortcut icon" href="../../jacoco-resources/report.gif" type="image/gif"/><title>ModularRealmAuthorizer.java</title><link rel="stylesheet" href="../../jacoco-resources/prettify.css" type="text/css"/><script type="text/javascript" src="../../jacoco-resources/prettify.js"></script></head><body onload="window['PR_TAB_WIDTH']=4;prettyPrint()"><div class="breadcrumb" id="breadcrumb"><span class="info"><a href="../../jacoco-sessions.html" class="el_session">Sessions</a></span><a href="../../index.html" class="el_report">Apache Shiro :: Test Coverage</a> &gt; <a href="../index.html" class="el_bundle">shiro-core</a> &gt; <a href="index.source.html" class="el_package">org.apache.shiro.authz</a> &gt; <span class="el_source">ModularRealmAuthorizer.java</span></div><h1>ModularRealmAuthorizer.java</h1><pre class="source lang-java linenums">/*
* Licensed to the Apache Software Foundation (ASF) under one
* or more contributor license agreements. See the NOTICE file
* distributed with this work for additional information
* regarding copyright ownership. The ASF licenses this file
* to you under the Apache License, Version 2.0 (the
* &quot;License&quot;); you may not use this file except in compliance
* with the License. You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing,
* software distributed under the License is distributed on an
* &quot;AS IS&quot; BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
* KIND, either express or implied. See the License for the
* specific language governing permissions and limitations
* under the License.
*/
package org.apache.shiro.authz;
import org.apache.shiro.authz.permission.PermissionResolver;
import org.apache.shiro.authz.permission.PermissionResolverAware;
import org.apache.shiro.authz.permission.RolePermissionResolver;
import org.apache.shiro.authz.permission.RolePermissionResolverAware;
import org.apache.shiro.realm.Realm;
import org.apache.shiro.subject.PrincipalCollection;
import java.util.Collection;
import java.util.List;
/**
* A &lt;tt&gt;ModularRealmAuthorizer&lt;/tt&gt; is an &lt;tt&gt;Authorizer&lt;/tt&gt; implementation that consults one or more configured
* {@link Realm Realm}s during an authorization operation.
*
* @since 0.2
*/
public class ModularRealmAuthorizer implements Authorizer, PermissionResolverAware, RolePermissionResolverAware {
/**
* The realms to consult during any authorization check.
*/
protected Collection&lt;Realm&gt; realms;
/**
* A PermissionResolver to be used by &lt;em&gt;all&lt;/em&gt; configured realms. Leave &lt;code&gt;null&lt;/code&gt; if you wish
* to configure different resolvers for different realms.
*/
protected PermissionResolver permissionResolver;
/**
* A RolePermissionResolver to be used by &lt;em&gt;all&lt;/em&gt; configured realms. Leave &lt;code&gt;null&lt;/code&gt; if you wish
* to configure different resolvers for different realms.
*/
protected RolePermissionResolver rolePermissionResolver;
/**
* Default no-argument constructor, does nothing.
*/
<span class="fc" id="L60"> public ModularRealmAuthorizer() {</span>
<span class="fc" id="L61"> }</span>
/**
* Constructor that accepts the &lt;code&gt;Realm&lt;/code&gt;s to consult during an authorization check. Immediately calls
* {@link #setRealms setRealms(realms)}.
*
* @param realms the realms to consult during an authorization check.
*/
<span class="nc" id="L69"> public ModularRealmAuthorizer(Collection&lt;Realm&gt; realms) {</span>
<span class="nc" id="L70"> setRealms(realms);</span>
<span class="nc" id="L71"> }</span>
/**
* Returns the realms wrapped by this &lt;code&gt;Authorizer&lt;/code&gt; which are consulted during an authorization check.
*
* @return the realms wrapped by this &lt;code&gt;Authorizer&lt;/code&gt; which are consulted during an authorization check.
*/
public Collection&lt;Realm&gt; getRealms() {
<span class="fc" id="L79"> return this.realms;</span>
}
/**
* Sets the realms wrapped by this &lt;code&gt;Authorizer&lt;/code&gt; which are consulted during an authorization check.
*
* @param realms the realms wrapped by this &lt;code&gt;Authorizer&lt;/code&gt; which are consulted during an authorization check.
*/
public void setRealms(Collection&lt;Realm&gt; realms) {
<span class="fc" id="L88"> this.realms = realms;</span>
<span class="fc" id="L89"> applyPermissionResolverToRealms();</span>
<span class="fc" id="L90"> applyRolePermissionResolverToRealms();</span>
<span class="fc" id="L91"> }</span>
/**
* Returns the PermissionResolver to be used on &lt;em&gt;all&lt;/em&gt; configured realms, or &lt;code&gt;null&lt;/code (the default)
* if all realm instances will each configure their own permission resolver.
*
* @return the PermissionResolver to be used on &lt;em&gt;all&lt;/em&gt; configured realms, or &lt;code&gt;null&lt;/code (the default)
* if realm instances will each configure their own permission resolver.
* @since 1.0
*/
public PermissionResolver getPermissionResolver() {
<span class="fc" id="L102"> return this.permissionResolver;</span>
}
/**
* Sets the specified {@link PermissionResolver PermissionResolver} on &lt;em&gt;all&lt;/em&gt; of the wrapped realms that
* implement the {@link org.apache.shiro.authz.permission.PermissionResolverAware PermissionResolverAware} interface.
* &lt;p/&gt;
* Only call this method if you want the permission resolver to be passed to all realms that implement the
* &lt;code&gt;PermissionResolver&lt;/code&gt; interface. If you do not want this to occur, the realms must
* configure themselves individually (or be configured individually).
*
* @param permissionResolver the permissionResolver to set on all of the wrapped realms that implement the
* {@link org.apache.shiro.authz.permission.PermissionResolverAware PermissionResolverAware} interface.
*/
public void setPermissionResolver(PermissionResolver permissionResolver) {
<span class="fc" id="L117"> this.permissionResolver = permissionResolver;</span>
<span class="fc" id="L118"> applyPermissionResolverToRealms();</span>
<span class="fc" id="L119"> }</span>
/**
* Sets the internal {@link #getPermissionResolver} on any internal configured
* {@link #getRealms Realms} that implement the {@link org.apache.shiro.authz.permission.PermissionResolverAware PermissionResolverAware} interface.
* &lt;p/&gt;
* This method is called after setting a permissionResolver on this ModularRealmAuthorizer via the
* {@link #setPermissionResolver(org.apache.shiro.authz.permission.PermissionResolver) setPermissionResolver} method.
* &lt;p/&gt;
* It is also called after setting one or more realms via the {@link #setRealms setRealms} method to allow these
* newly available realms to be given the &lt;code&gt;PermissionResolver&lt;/code&gt; already in use.
*
* @since 1.0
*/
protected void applyPermissionResolverToRealms() {
<span class="fc" id="L134"> PermissionResolver resolver = getPermissionResolver();</span>
<span class="fc" id="L135"> Collection&lt;Realm&gt; realms = getRealms();</span>
<span class="pc bpc" id="L136" title="1 of 6 branches missed."> if (resolver != null &amp;&amp; realms != null &amp;&amp; !realms.isEmpty()) {</span>
<span class="fc bfc" id="L137" title="All 2 branches covered."> for (Realm realm : realms) {</span>
<span class="pc bpc" id="L138" title="1 of 2 branches missed."> if (realm instanceof PermissionResolverAware) {</span>
<span class="fc" id="L139"> ((PermissionResolverAware) realm).setPermissionResolver(resolver);</span>
}
<span class="fc" id="L141"> }</span>
}
<span class="fc" id="L143"> }</span>
/**
* Returns the RolePermissionResolver to be used on &lt;em&gt;all&lt;/em&gt; configured realms, or &lt;code&gt;null&lt;/code (the default)
* if all realm instances will each configure their own permission resolver.
*
* @return the RolePermissionResolver to be used on &lt;em&gt;all&lt;/em&gt; configured realms, or &lt;code&gt;null&lt;/code (the default)
* if realm instances will each configure their own role permission resolver.
* @since 1.0
*/
public RolePermissionResolver getRolePermissionResolver() {
<span class="fc" id="L154"> return this.rolePermissionResolver;</span>
}
/**
* Sets the specified {@link RolePermissionResolver RolePermissionResolver} on &lt;em&gt;all&lt;/em&gt; of the wrapped realms that
* implement the {@link org.apache.shiro.authz.permission.RolePermissionResolverAware PermissionResolverAware} interface.
* &lt;p/&gt;
* Only call this method if you want the permission resolver to be passed to all realms that implement the
* &lt;code&gt;RolePermissionResolver&lt;/code&gt; interface. If you do not want this to occur, the realms must
* configure themselves individually (or be configured individually).
*
* @param rolePermissionResolver the rolePermissionResolver to set on all of the wrapped realms that implement the
* {@link org.apache.shiro.authz.permission.RolePermissionResolverAware RolePermissionResolverAware} interface.
*/
public void setRolePermissionResolver(RolePermissionResolver rolePermissionResolver) {
<span class="fc" id="L169"> this.rolePermissionResolver = rolePermissionResolver;</span>
<span class="fc" id="L170"> applyRolePermissionResolverToRealms();</span>
<span class="fc" id="L171"> }</span>
/**
* Sets the internal {@link #getRolePermissionResolver} on any internal configured
* {@link #getRealms Realms} that implement the {@link org.apache.shiro.authz.permission.RolePermissionResolverAware RolePermissionResolverAware} interface.
* &lt;p/&gt;
* This method is called after setting a rolePermissionResolver on this ModularRealmAuthorizer via the
* {@link #setRolePermissionResolver(org.apache.shiro.authz.permission.RolePermissionResolver) setRolePermissionResolver} method.
* &lt;p/&gt;
* It is also called after setting one or more realms via the {@link #setRealms setRealms} method to allow these
* newly available realms to be given the &lt;code&gt;RolePermissionResolver&lt;/code&gt; already in use.
*
* @since 1.0
*/
protected void applyRolePermissionResolverToRealms() {
<span class="fc" id="L187"> RolePermissionResolver resolver = getRolePermissionResolver();</span>
<span class="fc" id="L188"> Collection&lt;Realm&gt; realms = getRealms();</span>
<span class="pc bpc" id="L189" title="1 of 6 branches missed."> if (resolver != null &amp;&amp; realms != null &amp;&amp; !realms.isEmpty()) {</span>
<span class="fc bfc" id="L190" title="All 2 branches covered."> for (Realm realm : realms) {</span>
<span class="pc bpc" id="L191" title="1 of 2 branches missed."> if (realm instanceof RolePermissionResolverAware) {</span>
<span class="fc" id="L192"> ((RolePermissionResolverAware) realm).setRolePermissionResolver(resolver);</span>
}
<span class="fc" id="L194"> }</span>
}
<span class="fc" id="L196"> }</span>
/**
* Used by the {@link Authorizer Authorizer} implementation methods to ensure that the {@link #setRealms realms}
* has been set. The default implementation ensures the property is not null and not empty.
*
* @throws IllegalStateException if the &lt;tt&gt;realms&lt;/tt&gt; property is configured incorrectly.
*/
protected void assertRealmsConfigured() throws IllegalStateException {
<span class="fc" id="L206"> Collection&lt;Realm&gt; realms = getRealms();</span>
<span class="pc bpc" id="L207" title="2 of 4 branches missed."> if (realms == null || realms.isEmpty()) {</span>
<span class="nc" id="L208"> String msg = &quot;Configuration error: No realms have been configured! One or more realms must be &quot; +</span>
&quot;present to execute an authorization operation.&quot;;
<span class="nc" id="L210"> throw new IllegalStateException(msg);</span>
}
<span class="fc" id="L212"> }</span>
/**
* Returns &lt;code&gt;true&lt;/code&gt; if any of the configured realms'
* {@link #isPermitted(org.apache.shiro.subject.PrincipalCollection, String)} returns &lt;code&gt;true&lt;/code&gt;,
* &lt;code&gt;false&lt;/code&gt; otherwise.
*/
public boolean isPermitted(PrincipalCollection principals, String permission) {
<span class="fc" id="L220"> assertRealmsConfigured();</span>
<span class="fc bfc" id="L221" title="All 2 branches covered."> for (Realm realm : getRealms()) {</span>
<span class="pc bpc" id="L222" title="1 of 2 branches missed."> if (!(realm instanceof Authorizer)) continue;</span>
<span class="fc bfc" id="L223" title="All 2 branches covered."> if (((Authorizer) realm).isPermitted(principals, permission)) {</span>
<span class="fc" id="L224"> return true;</span>
}
<span class="fc" id="L226"> }</span>
<span class="fc" id="L227"> return false;</span>
}
/**
* Returns &lt;code&gt;true&lt;/code&gt; if any of the configured realms'
* {@link #isPermitted(org.apache.shiro.subject.PrincipalCollection, Permission)} call returns &lt;code&gt;true&lt;/code&gt;,
* &lt;code&gt;false&lt;/code&gt; otherwise.
*/
public boolean isPermitted(PrincipalCollection principals, Permission permission) {
<span class="nc" id="L236"> assertRealmsConfigured();</span>
<span class="nc bnc" id="L237" title="All 2 branches missed."> for (Realm realm : getRealms()) {</span>
<span class="nc bnc" id="L238" title="All 2 branches missed."> if (!(realm instanceof Authorizer)) continue;</span>
<span class="nc bnc" id="L239" title="All 2 branches missed."> if (((Authorizer) realm).isPermitted(principals, permission)) {</span>
<span class="nc" id="L240"> return true;</span>
}
<span class="nc" id="L242"> }</span>
<span class="nc" id="L243"> return false;</span>
}
/**
* Returns &lt;code&gt;true&lt;/code&gt; if any of the configured realms'
* {@link #isPermittedAll(org.apache.shiro.subject.PrincipalCollection, String...)} call returns
* &lt;code&gt;true&lt;/code&gt;, &lt;code&gt;false&lt;/code&gt; otherwise.
*/
public boolean[] isPermitted(PrincipalCollection principals, String... permissions) {
<span class="nc" id="L252"> assertRealmsConfigured();</span>
<span class="nc bnc" id="L253" title="All 4 branches missed."> if (permissions != null &amp;&amp; permissions.length &gt; 0) {</span>
<span class="nc" id="L254"> boolean[] isPermitted = new boolean[permissions.length];</span>
<span class="nc bnc" id="L255" title="All 2 branches missed."> for (int i = 0; i &lt; permissions.length; i++) {</span>
<span class="nc" id="L256"> isPermitted[i] = isPermitted(principals, permissions[i]);</span>
}
<span class="nc" id="L258"> return isPermitted;</span>
}
<span class="nc" id="L260"> return new boolean[0];</span>
}
/**
* Returns &lt;code&gt;true&lt;/code&gt; if any of the configured realms'
* {@link #isPermitted(org.apache.shiro.subject.PrincipalCollection, List)} call returns &lt;code&gt;true&lt;/code&gt;,
* &lt;code&gt;false&lt;/code&gt; otherwise.
*/
public boolean[] isPermitted(PrincipalCollection principals, List&lt;Permission&gt; permissions) {
<span class="nc" id="L269"> assertRealmsConfigured();</span>
<span class="nc bnc" id="L270" title="All 4 branches missed."> if (permissions != null &amp;&amp; !permissions.isEmpty()) {</span>
<span class="nc" id="L271"> boolean[] isPermitted = new boolean[permissions.size()];</span>
<span class="nc" id="L272"> int i = 0;</span>
<span class="nc bnc" id="L273" title="All 2 branches missed."> for (Permission p : permissions) {</span>
<span class="nc" id="L274"> isPermitted[i++] = isPermitted(principals, p);</span>
<span class="nc" id="L275"> }</span>
<span class="nc" id="L276"> return isPermitted;</span>
}
<span class="nc" id="L279"> return new boolean[0];</span>
}
/**
* Returns &lt;code&gt;true&lt;/code&gt; if any of the configured realms'
* {@link #isPermitted(org.apache.shiro.subject.PrincipalCollection, String)} call returns &lt;code&gt;true&lt;/code&gt;
* for &lt;em&gt;all&lt;/em&gt; of the specified string permissions, &lt;code&gt;false&lt;/code&gt; otherwise.
*/
public boolean isPermittedAll(PrincipalCollection principals, String... permissions) {
<span class="nc" id="L288"> assertRealmsConfigured();</span>
<span class="nc bnc" id="L289" title="All 4 branches missed."> if (permissions != null &amp;&amp; permissions.length &gt; 0) {</span>
<span class="nc bnc" id="L290" title="All 2 branches missed."> for (String perm : permissions) {</span>
<span class="nc bnc" id="L291" title="All 2 branches missed."> if (!isPermitted(principals, perm)) {</span>
<span class="nc" id="L292"> return false;</span>
}
}
}
<span class="nc" id="L296"> return true;</span>
}
/**
* Returns &lt;code&gt;true&lt;/code&gt; if any of the configured realms'
* {@link #isPermitted(org.apache.shiro.subject.PrincipalCollection, Permission)} call returns &lt;code&gt;true&lt;/code&gt;
* for &lt;em&gt;all&lt;/em&gt; of the specified Permissions, &lt;code&gt;false&lt;/code&gt; otherwise.
*/
public boolean isPermittedAll(PrincipalCollection principals, Collection&lt;Permission&gt; permissions) {
<span class="nc" id="L305"> assertRealmsConfigured();</span>
<span class="nc bnc" id="L306" title="All 4 branches missed."> if (permissions != null &amp;&amp; !permissions.isEmpty()) {</span>
<span class="nc bnc" id="L307" title="All 2 branches missed."> for (Permission permission : permissions) {</span>
<span class="nc bnc" id="L308" title="All 2 branches missed."> if (!isPermitted(principals, permission)) {</span>
<span class="nc" id="L309"> return false;</span>
}
<span class="nc" id="L311"> }</span>
}
<span class="nc" id="L313"> return true;</span>
}
/**
* If !{@link #isPermitted(org.apache.shiro.subject.PrincipalCollection, String) isPermitted(permission)}, throws
* an &lt;code&gt;UnauthorizedException&lt;/code&gt; otherwise returns quietly.
*/
public void checkPermission(PrincipalCollection principals, String permission) throws AuthorizationException {
<span class="fc" id="L321"> assertRealmsConfigured();</span>
<span class="fc bfc" id="L322" title="All 2 branches covered."> if (!isPermitted(principals, permission)) {</span>
<span class="fc" id="L323"> throw new UnauthorizedException(&quot;Subject does not have permission [&quot; + permission + &quot;]&quot;);</span>
}
<span class="fc" id="L325"> }</span>
/**
* If !{@link #isPermitted(org.apache.shiro.subject.PrincipalCollection, Permission) isPermitted(permission)}, throws
* an &lt;code&gt;UnauthorizedException&lt;/code&gt; otherwise returns quietly.
*/
public void checkPermission(PrincipalCollection principals, Permission permission) throws AuthorizationException {
<span class="nc" id="L332"> assertRealmsConfigured();</span>
<span class="nc bnc" id="L333" title="All 2 branches missed."> if (!isPermitted(principals, permission)) {</span>
<span class="nc" id="L334"> throw new UnauthorizedException(&quot;Subject does not have permission [&quot; + permission + &quot;]&quot;);</span>
}
<span class="nc" id="L336"> }</span>
/**
* If !{@link #isPermitted(org.apache.shiro.subject.PrincipalCollection, String...) isPermitted(permission)},
* throws an &lt;code&gt;UnauthorizedException&lt;/code&gt; otherwise returns quietly.
*/
public void checkPermissions(PrincipalCollection principals, String... permissions) throws AuthorizationException {
<span class="nc" id="L343"> assertRealmsConfigured();</span>
<span class="nc bnc" id="L344" title="All 4 branches missed."> if (permissions != null &amp;&amp; permissions.length &gt; 0) {</span>
<span class="nc bnc" id="L345" title="All 2 branches missed."> for (String perm : permissions) {</span>
<span class="nc" id="L346"> checkPermission(principals, perm);</span>
}
}
<span class="nc" id="L349"> }</span>
/**
* If !{@link #isPermitted(org.apache.shiro.subject.PrincipalCollection, Permission) isPermitted(permission)} for
* &lt;em&gt;all&lt;/em&gt; the given Permissions, throws
* an &lt;code&gt;UnauthorizedException&lt;/code&gt; otherwise returns quietly.
*/
public void checkPermissions(PrincipalCollection principals, Collection&lt;Permission&gt; permissions) throws AuthorizationException {
<span class="nc" id="L357"> assertRealmsConfigured();</span>
<span class="nc bnc" id="L358" title="All 2 branches missed."> if (permissions != null) {</span>
<span class="nc bnc" id="L359" title="All 2 branches missed."> for (Permission permission : permissions) {</span>
<span class="nc" id="L360"> checkPermission(principals, permission);</span>
<span class="nc" id="L361"> }</span>
}
<span class="nc" id="L363"> }</span>
/**
* Returns &lt;code&gt;true&lt;/code&gt; if any of the configured realms'
* {@link #hasRole(org.apache.shiro.subject.PrincipalCollection, String)} call returns &lt;code&gt;true&lt;/code&gt;,
* &lt;code&gt;false&lt;/code&gt; otherwise.
*/
public boolean hasRole(PrincipalCollection principals, String roleIdentifier) {
<span class="fc" id="L371"> assertRealmsConfigured();</span>
<span class="fc bfc" id="L372" title="All 2 branches covered."> for (Realm realm : getRealms()) {</span>
<span class="pc bpc" id="L373" title="1 of 2 branches missed."> if (!(realm instanceof Authorizer)) continue;</span>
<span class="fc bfc" id="L374" title="All 2 branches covered."> if (((Authorizer) realm).hasRole(principals, roleIdentifier)) {</span>
<span class="fc" id="L375"> return true;</span>
}
<span class="fc" id="L377"> }</span>
<span class="fc" id="L378"> return false;</span>
}
/**
* Calls {@link #hasRole(org.apache.shiro.subject.PrincipalCollection, String)} for each role name in the specified
* collection and places the return value from each call at the respective location in the returned array.
*/
public boolean[] hasRoles(PrincipalCollection principals, List&lt;String&gt; roleIdentifiers) {
<span class="nc" id="L386"> assertRealmsConfigured();</span>
<span class="nc bnc" id="L387" title="All 4 branches missed."> if (roleIdentifiers != null &amp;&amp; !roleIdentifiers.isEmpty()) {</span>
<span class="nc" id="L388"> boolean[] hasRoles = new boolean[roleIdentifiers.size()];</span>
<span class="nc" id="L389"> int i = 0;</span>
<span class="nc bnc" id="L390" title="All 2 branches missed."> for (String roleId : roleIdentifiers) {</span>
<span class="nc" id="L391"> hasRoles[i++] = hasRole(principals, roleId);</span>
<span class="nc" id="L392"> }</span>
<span class="nc" id="L393"> return hasRoles;</span>
}
<span class="nc" id="L396"> return new boolean[0];</span>
}
/**
* Returns &lt;code&gt;true&lt;/code&gt; iff any of the configured realms'
* {@link #hasRole(org.apache.shiro.subject.PrincipalCollection, String)} call returns &lt;code&gt;true&lt;/code&gt; for
* &lt;em&gt;all&lt;/em&gt; roles specified, &lt;code&gt;false&lt;/code&gt; otherwise.
*/
public boolean hasAllRoles(PrincipalCollection principals, Collection&lt;String&gt; roleIdentifiers) {
<span class="nc" id="L405"> assertRealmsConfigured();</span>
<span class="nc bnc" id="L406" title="All 2 branches missed."> for (String roleIdentifier : roleIdentifiers) {</span>
<span class="nc bnc" id="L407" title="All 2 branches missed."> if (!hasRole(principals, roleIdentifier)) {</span>
<span class="nc" id="L408"> return false;</span>
}
<span class="nc" id="L410"> }</span>
<span class="nc" id="L411"> return true;</span>
}
/**
* If !{@link #hasRole(org.apache.shiro.subject.PrincipalCollection, String) hasRole(role)}, throws
* an &lt;code&gt;UnauthorizedException&lt;/code&gt; otherwise returns quietly.
*/
public void checkRole(PrincipalCollection principals, String role) throws AuthorizationException {
<span class="fc" id="L419"> assertRealmsConfigured();</span>
<span class="fc bfc" id="L420" title="All 2 branches covered."> if (!hasRole(principals, role)) {</span>
<span class="fc" id="L421"> throw new UnauthorizedException(&quot;Subject does not have role [&quot; + role + &quot;]&quot;);</span>
}
<span class="fc" id="L423"> }</span>
/**
* Calls {@link #checkRoles(PrincipalCollection principals, String... roles) checkRoles(PrincipalCollection principals, String... roles) }.
*/
public void checkRoles(PrincipalCollection principals, Collection&lt;String&gt; roles) throws AuthorizationException {
//SHIRO-234 - roles.toArray() -&gt; roles.toArray(new String[roles.size()])
<span class="nc bnc" id="L430" title="All 4 branches missed."> if (roles != null &amp;&amp; !roles.isEmpty()) checkRoles(principals, roles.toArray(new String[roles.size()]));</span>
<span class="nc" id="L431"> }</span>
/**
* Calls {@link #checkRole(org.apache.shiro.subject.PrincipalCollection, String) checkRole} for each role specified.
*/
public void checkRoles(PrincipalCollection principals, String... roles) throws AuthorizationException {
<span class="nc" id="L437"> assertRealmsConfigured();</span>
<span class="nc bnc" id="L438" title="All 2 branches missed."> if (roles != null) {</span>
<span class="nc bnc" id="L439" title="All 2 branches missed."> for (String role : roles) {</span>
<span class="nc" id="L440"> checkRole(principals, role);</span>
}
}
<span class="nc" id="L443"> }</span>
}
</pre><div class="footer"><span class="right">Created with <a href="http://www.eclemma.org/jacoco">JaCoCo</a> 0.7.7.201606060606</span></div></body></html>