| /* |
| * Licensed to the Apache Software Foundation (ASF) under one or more |
| * contributor license agreements. See the NOTICE file distributed with |
| * this work for additional information regarding copyright ownership. |
| * The ASF licenses this file to You under the Apache License, Version 2.0 |
| * (the "License"); you may not use this file except in compliance with |
| * the License. You may obtain a copy of the License at |
| * |
| * http://www.apache.org/licenses/LICENSE-2.0 |
| * |
| * Unless required by applicable law or agreed to in writing, software |
| * distributed under the License is distributed on an "AS IS" BASIS, |
| * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| * See the License for the specific language governing permissions and |
| * limitations under the License. |
| */ |
| package org.apache.sling.jcr.jackrabbit.accessmanager.post; |
| |
| import javax.jcr.RepositoryException; |
| import javax.jcr.Session; |
| import javax.jcr.security.AccessControlEntry; |
| import javax.jcr.security.AccessControlList; |
| import javax.jcr.security.AccessControlManager; |
| import javax.jcr.security.AccessControlPolicy; |
| import javax.servlet.Servlet; |
| |
| import org.apache.felix.scr.annotations.Component; |
| import org.apache.felix.scr.annotations.Properties; |
| import org.apache.felix.scr.annotations.Property; |
| import org.apache.felix.scr.annotations.Service; |
| import org.apache.sling.commons.json.JSONException; |
| import org.apache.sling.commons.json.JSONObject; |
| import org.apache.sling.jcr.base.util.AccessControlUtil; |
| import org.apache.sling.jcr.jackrabbit.accessmanager.GetAcl; |
| |
| /** |
| * <p> |
| * Sling GET servlet implementation for dumping the declared ACL of a resource to JSON. |
| * </p> |
| * <h2>Rest Service Description</h2> |
| * <p> |
| * Mapped to the default resourceType. Gets and Acl for a resource. Get of the form |
| * >resource<.acl.json Provided the user has access to the ACL, they get a chunk of |
| * JSON of the form. |
| * </p> |
| * <h4>Methods</h4> |
| * <ul> |
| * <li>GET</li> |
| * </ul> |
| * <h4>Response</h4> |
| * <dl> |
| * <dt>200</dt> |
| * <dd>Success.</dd> |
| * <dt>404</dt> |
| * <dd>The resource was not found.</dd> |
| * <dt>500</dt> |
| * <dd>Failure. HTML explains the failure.</dd> |
| * </dl> |
| * <h4>Example Response</h4> |
| * <code> |
| * <pre> |
| * { |
| * "principalNameA": |
| * { "granted" : [ |
| * "permission1", |
| * "permission2", |
| * "permission3", |
| * "permission4" ], |
| * "denied" : [ |
| * "permission5", |
| * "permission6", |
| * "permission7", |
| * "permission8"] |
| * }, |
| * "principalNameB": |
| * { "granted" : [ |
| * "permission1", |
| * "permission2", |
| * "permission3", |
| * "permission4" ], |
| * "denied" : [ |
| * "permission5", |
| * "permission6", |
| * "permission7", |
| * "permission8"] }, |
| * "principalNameC": |
| * { "granted" : [ |
| * "permission1", |
| * "permission2", |
| * "permission3", |
| * "permission4" ], |
| * "denied" : [ |
| * "permission5", |
| * "permission6", |
| * "permission7", |
| * "permission8"] } |
| * } |
| * </pre> |
| * </code> |
| */ |
| @Component (immediate=true, |
| label="%getAcl.get.operation.name", |
| description="%getAcl.get.operation.description" |
| ) |
| @Service (value={ |
| Servlet.class, |
| GetAcl.class |
| }) |
| @Properties ({ |
| @Property (name="sling.servlet.resourceTypes", |
| value="sling/servlet/default"), |
| @Property (name="sling.servlet.methods", |
| value="GET"), |
| @Property (name="sling.servlet.selectors", |
| value="acl"), |
| @Property (name="sling.servlet.extensions", |
| value="json") |
| }) |
| public class GetAclServlet extends AbstractGetAclServlet implements GetAcl { |
| private static final long serialVersionUID = 3391376559396223185L; |
| |
| /* (non-Javadoc) |
| * @see org.apache.sling.jcr.jackrabbit.accessmanager.GetAcl#getAcl(javax.jcr.Session, java.lang.String) |
| */ |
| public JSONObject getAcl(Session jcrSession, String resourcePath) |
| throws RepositoryException, JSONException { |
| return internalGetAcl(jcrSession, resourcePath); |
| } |
| |
| @Override |
| protected AccessControlEntry[] getAccessControlEntries(Session session, String absPath) throws RepositoryException { |
| AccessControlManager accessControlManager = AccessControlUtil.getAccessControlManager(session); |
| AccessControlPolicy[] policies = accessControlManager.getPolicies(absPath); |
| for (AccessControlPolicy accessControlPolicy : policies) { |
| if (accessControlPolicy instanceof AccessControlList) { |
| AccessControlEntry[] accessControlEntries = ((AccessControlList)accessControlPolicy).getAccessControlEntries(); |
| return accessControlEntries; |
| } |
| } |
| return new AccessControlEntry[0]; |
| } |
| |
| } |
