src/main/java/org/apache/sling/feature/cpconverter/handlers/AbstractPolicyParser.java

/*
 * Licensed to the Apache Software Foundation (ASF) under one or more
 * contributor license agreements.  See the NOTICE file distributed with
 * this work for additional information regarding copyright ownership.
 * The ASF licenses this file to You under the Apache License, Version 2.0
 * (the "License"); you may not use this file except in compliance with
 * the License.  You may obtain a copy of the License at
 *
 *      http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */
package org.apache.sling.feature.cpconverter.handlers;

import org.apache.sling.feature.cpconverter.accesscontrol.AccessControlEntry;
import org.apache.sling.feature.cpconverter.accesscontrol.AclManager;
import org.apache.sling.feature.cpconverter.shared.AbstractJcrNodeParser;
import org.apache.sling.feature.cpconverter.shared.RepoPath;
import org.jetbrains.annotations.NotNull;
import org.jetbrains.annotations.Nullable;
import org.xml.sax.Attributes;
import org.xml.sax.SAXException;

import javax.xml.transform.sax.TransformerHandler;
import java.util.ArrayList;
import java.util.Collections;
import java.util.List;
import java.util.Objects;
import java.util.regex.Matcher;
import java.util.regex.Pattern;

abstract class AbstractPolicyParser extends AbstractJcrNodeParser<Boolean> {

    static final String REP_RESTRICTIONS = "rep:Restrictions";
    static final String REP_PRINCIPAL_NAME = "rep:principalName";
    static final String REP_PRIVILEGES = "rep:privileges";

    private static final Pattern typeIndicatorPattern = Pattern.compile("\\{[^\\}]+\\}\\[(.+)\\]");

    private final RepoPath repositoryPath;

    final TransformerHandler handler;
    final AclManager aclManager;

    boolean onRepAclNode = false;
    // ACL processing result
    boolean hasRejectedNodes = false;

    AbstractPolicyParser(@NotNull String primaryType, @NotNull RepoPath repositoryPath, @NotNull AclManager aclManager, @NotNull TransformerHandler handler) {
        super(primaryType);
        this.handler = handler;
        this.repositoryPath = repositoryPath;
        this.aclManager = aclManager;
    }

    static @NotNull List<String> extractValues(@Nullable String expression) {
        if (expression == null || expression.isEmpty()) {
            return Collections.emptyList();
        }

        String valuesString = expression;
        Matcher matcher = typeIndicatorPattern.matcher(expression);
        if (matcher.matches()) {
            valuesString = matcher.group(1);
        }

        List<String> vs = new ArrayList<>();
        for (String v : valuesString.split(",")) {
            vs.add(v.trim());
        }
        return vs;
    }

    void addRestrictions(@NotNull AccessControlEntry ace, @NotNull Attributes attributes) {
        for (int i = 0; i < attributes.getLength(); i++) {
            String name = attributes.getQName(i);
            if (isRestriction(name)) {
                List<String> vs = extractValues(attributes.getValue(name));
                if (!vs.isEmpty()) {
                    ace.addRestriction(name, vs);
                }
            }
        }
    }

    boolean isRestriction(@NotNull String attributeName) {
        return !(REP_PRINCIPAL_NAME.equals(attributeName) || REP_PRIVILEGES.equals(attributeName) || attributeName.startsWith("jcr:"));
    }

    AccessControlEntry createEntry(boolean isAllow, @NotNull Attributes attributes) {
        return new AccessControlEntry(isAllow, Objects.requireNonNull(extractValues(attributes.getValue(REP_PRIVILEGES))), repositoryPath);
    }

    @Override
    public void startDocument() throws SAXException {
        handler.startDocument();
    }

    @Override
    public void endDocument() throws SAXException {
        handler.endDocument();
    }

    @Override
    protected void onJcrRootElement(String uri, String localName, String qName, Attributes attributes) {
        onRepAclNode = true;
    }

    @Override
    protected Boolean getParsingResult() {
        return hasRejectedNodes;
    }
}