Examples with PrincipalManager org.apache.jackrabbit.api.security.principal.PrincipalManager used on opensource projects

Example 16 with PrincipalManager

use of org.apache.jackrabbit.api.security.principal.PrincipalManager in project sling by apache.

the class DefaultContentCreator method createAce.

/* (non-Javadoc)
     * @see org.apache.sling.jcr.contentloader.ContentCreator#createAce(java.lang.String, java.lang.String, java.lang.String[], java.lang.String[])
	 */
public void createAce(String principalId, String[] grantedPrivilegeNames, String[] deniedPrivilegeNames, String order) throws RepositoryException {
    final Node parentNode = this.parentNodeStack.peek();
    Session session = parentNode.getSession();
    PrincipalManager principalManager = AccessControlUtil.getPrincipalManager(session);
    Principal principal = principalManager.getPrincipal(principalId);
    if (principal == null) {
        throw new RepositoryException("No principal found for id: " + principalId);
    }
    String resourcePath = parentNode.getPath();
    if ((grantedPrivilegeNames != null) || (deniedPrivilegeNames != null)) {
        AccessControlUtil.replaceAccessControlEntry(session, resourcePath, principal, grantedPrivilegeNames, deniedPrivilegeNames, null, order);
    }
}

Example 17 with PrincipalManager

use of org.apache.jackrabbit.api.security.principal.PrincipalManager in project sling by apache.

the class ModifyAceServlet method modifyAce.

/* (non-Javadoc)
	 * @see org.apache.sling.jcr.jackrabbit.accessmanager.ModifyAce#modifyAce(javax.jcr.Session, java.lang.String, java.lang.String, java.util.Map, java.lang.String)
	 */
public void modifyAce(Session jcrSession, String resourcePath, String principalId, Map<String, String> privileges, String order) throws RepositoryException {
    if (jcrSession == null) {
        throw new RepositoryException("JCR Session not found");
    }
    if (principalId == null) {
        throw new RepositoryException("principalId was not submitted.");
    }
    PrincipalManager principalManager = AccessControlUtil.getPrincipalManager(jcrSession);
    Principal principal = principalManager.getPrincipal(principalId);
    if (resourcePath == null) {
        throw new ResourceNotFoundException("Resource path was not supplied.");
    }
    Item item = jcrSession.getItem(resourcePath);
    if (item != null) {
        resourcePath = item.getPath();
    } else {
        throw new ResourceNotFoundException("Resource is not a JCR Node");
    }
    // Collect the modified privileges from the request.
    Set<String> grantedPrivilegeNames = new HashSet<String>();
    Set<String> deniedPrivilegeNames = new HashSet<String>();
    Set<String> removedPrivilegeNames = new HashSet<String>();
    Set<Entry<String, String>> entrySet = privileges.entrySet();
    for (Entry<String, String> entry : entrySet) {
        String privilegeName = entry.getKey();
        if (privilegeName.startsWith("privilege@")) {
            privilegeName = privilegeName.substring(10);
        }
        String parameterValue = entry.getValue();
        if (parameterValue != null && parameterValue.length() > 0) {
            if ("granted".equals(parameterValue)) {
                grantedPrivilegeNames.add(privilegeName);
            } else if ("denied".equals(parameterValue)) {
                deniedPrivilegeNames.add(privilegeName);
            } else if ("none".equals(parameterValue)) {
                removedPrivilegeNames.add(privilegeName);
            }
        }
    }
    // Make the actual changes.
    try {
        AccessControlUtil.replaceAccessControlEntry(jcrSession, resourcePath, principal, grantedPrivilegeNames.toArray(new String[grantedPrivilegeNames.size()]), deniedPrivilegeNames.toArray(new String[deniedPrivilegeNames.size()]), removedPrivilegeNames.toArray(new String[removedPrivilegeNames.size()]), order);
        if (jcrSession.hasPendingChanges()) {
            jcrSession.save();
        }
    } catch (RepositoryException re) {
        throw new RepositoryException("Failed to create ace.", re);
    }
}

Example 18 with PrincipalManager

use of org.apache.jackrabbit.api.security.principal.PrincipalManager in project sling by apache.

the class AuthorizableResourceProvider method listChildren.

@Override
public Iterator<Resource> listChildren(ResolveContext<Object> ctx, Resource parent) {
    try {
        String path = parent.getPath();
        ResourceResolver resourceResolver = parent.getResourceResolver();
        // handle children of /system/userManager
        if (SYSTEM_USER_MANAGER_PATH.equals(path)) {
            List<Resource> resources = new ArrayList<Resource>();
            if (resourceResolver != null) {
                resources.add(getResource(ctx, SYSTEM_USER_MANAGER_USER_PATH, null, null));
                resources.add(getResource(ctx, SYSTEM_USER_MANAGER_GROUP_PATH, null, null));
            }
            return resources.iterator();
        }
        int searchType = -1;
        if (SYSTEM_USER_MANAGER_USER_PATH.equals(path)) {
            searchType = PrincipalManager.SEARCH_TYPE_NOT_GROUP;
        } else if (SYSTEM_USER_MANAGER_GROUP_PATH.equals(path)) {
            searchType = PrincipalManager.SEARCH_TYPE_GROUP;
        }
        if (searchType != -1) {
            PrincipalIterator principals = null;
            Session session = resourceResolver.adaptTo(Session.class);
            if (session != null) {
                PrincipalManager principalManager = AccessControlUtil.getPrincipalManager(session);
                principals = principalManager.getPrincipals(searchType);
            }
            if (principals != null) {
                return new ChildrenIterator(parent, principals);
            }
        }
    } catch (RepositoryException re) {
        throw new SlingException("Error listing children of resource: " + parent.getPath(), re);
    }
    return null;
}

Example 19 with PrincipalManager

use of org.apache.jackrabbit.api.security.principal.PrincipalManager in project jackrabbit by apache.

the class GroupImplTest method testEveryoneGroup.

public void testEveryoneGroup() throws RepositoryException, NotExecutableException {
    Group g = null;
    try {
        g = userMgr.createGroup(EveryonePrincipal.NAME);
        save(superuser);
        assertEquals(EveryonePrincipal.NAME, g.getPrincipal().getName());
        assertEquals(EveryonePrincipal.getInstance(), g.getPrincipal());
        assertTrue(g.isDeclaredMember(getTestUser(superuser)));
        assertTrue(g.isMember(getTestUser(superuser)));
        Iterator<Authorizable> it = g.getDeclaredMembers();
        assertTrue(it.hasNext());
        Set<Authorizable> members = new HashSet<Authorizable>();
        while (it.hasNext()) {
            members.add(it.next());
        }
        it = g.getMembers();
        assertTrue(it.hasNext());
        while (it.hasNext()) {
            assertTrue(members.contains(it.next()));
        }
        assertFalse(g.addMember(getTestUser(superuser)));
        assertFalse(g.removeMember(getTestUser(superuser)));
        PrincipalManager pMgr = ((JackrabbitSession) superuser).getPrincipalManager();
        Principal everyone = pMgr.getEveryone();
        assertTrue(everyone instanceof ItemBasedPrincipal);
        assertEquals(everyone, EveryonePrincipal.getInstance());
    } finally {
        if (g != null) {
            g.remove();
            save(superuser);
        }
    }
}

Example 20 with PrincipalManager

use of org.apache.jackrabbit.api.security.principal.PrincipalManager in project jackrabbit by apache.

the class Entry method readEntries.

static List<Entry> readEntries(NodeImpl aclNode, String path) throws RepositoryException {
    if (aclNode == null || !NT_REP_ACL.equals(aclNode.getPrimaryNodeTypeName())) {
        throw new IllegalArgumentException("Node must be of type 'rep:ACL'");
    }
    SessionImpl sImpl = (SessionImpl) aclNode.getSession();
    PrincipalManager principalMgr = sImpl.getPrincipalManager();
    PrivilegeManagerImpl privilegeMgr = (PrivilegeManagerImpl) ((JackrabbitWorkspace) sImpl.getWorkspace()).getPrivilegeManager();
    NodeId nodeId = aclNode.getParentId();
    List<Entry> entries = new ArrayList<Entry>();
    // load the entries:
    NodeIterator itr = aclNode.getNodes();
    while (itr.hasNext()) {
        NodeImpl aceNode = (NodeImpl) itr.nextNode();
        try {
            String principalName = aceNode.getProperty(P_PRINCIPAL_NAME).getString();
            boolean isGroupEntry = false;
            Principal princ = principalMgr.getPrincipal(principalName);
            if (princ != null) {
                isGroupEntry = (princ instanceof Group);
            }
            InternalValue[] privValues = aceNode.getProperty(P_PRIVILEGES).internalGetValues();
            Name[] privNames = new Name[privValues.length];
            for (int i = 0; i < privValues.length; i++) {
                privNames[i] = privValues[i].getName();
            }
            Value globValue = null;
            if (aceNode.hasProperty(P_GLOB)) {
                globValue = aceNode.getProperty(P_GLOB).getValue();
            }
            boolean isAllow = NT_REP_GRANT_ACE.equals(aceNode.getPrimaryNodeTypeName());
            Entry ace = new Entry(nodeId, principalName, isGroupEntry, privilegeMgr.getBits(privNames), isAllow, path, globValue);
            entries.add(ace);
        } catch (RepositoryException e) {
            log.debug("Failed to build ACE from content. {}", e.getMessage());
        }
    }
    return entries;
}