Examples with Privilege com.sun.identity.entitlement.Privilege used on opensource projects

Example 46 with Privilege

use of com.sun.identity.entitlement.Privilege in project OpenAM by OpenRock.

the class OpenSSOApplicationPrivilegeManager method replacePrivilege.

public void replacePrivilege(ApplicationPrivilege appPrivilege) throws EntitlementException {
    if (delegatables.hasPrivilege(appPrivilege.getName())) {
        validatePrivilege(appPrivilege);
        Privilege[] privileges = toPrivilege(appPrivilege);
        PrivilegeManager pm = PrivilegeManager.getInstance(getHiddenRealmDN(), dsameUserSubject);
        pm.modify(privileges[0]);
        cachePrivilege(privileges[0]);
        pm.modify(privileges[1]);
        cachePrivilege(privileges[1]);
    } else {
        throw new EntitlementException(326);
    }
}

Example 47 with Privilege

use of com.sun.identity.entitlement.Privilege in project OpenAM by OpenRock.

the class OpenSSOApplicationPrivilegeManager method toPrivilege.

/**
     * Creates two privileges here
     */
private Privilege[] toPrivilege(ApplicationPrivilege appPrivilege) throws EntitlementException {
    Privilege[] results = new Privilege[2];
    try {
        Privilege actualP = Privilege.getNewInstance();
        actualP.setName(appPrivilege.getName());
        actualP.setDescription(appPrivilege.getDescription());
        Set<String> res = createDelegationResources(appPrivilege);
        Entitlement entitlement = new Entitlement(APPL_NAME, res, getActionValues(appPrivilege.getActionValues()));
        actualP.setEntitlement(entitlement);
        Privilege ghostP = Privilege.getNewInstance();
        ghostP.setName(GHOST_PRIVILEGE_NAME_PREFIX + appPrivilege.getName());
        Set<String> ghostRes = new HashSet<String>();
        String currentOrgDN = DNMapper.orgNameToDN(realm);
        Object[] param = { currentOrgDN };
        ghostRes.add(MessageFormat.format(SUN_AM_REALM_RESOURCE, param));
        ghostRes.add(MessageFormat.format(SUN_IDREPO_RESOURCE, param));
        entitlement = new Entitlement(APPL_NAME, ghostRes, getActionValues(ApplicationPrivilege.PossibleAction.READ));
        ghostP.setEntitlement(entitlement);
        Set<SubjectImplementation> subjects = appPrivilege.getSubjects();
        Set<EntitlementSubject> eSubjects = new HashSet<EntitlementSubject>();
        for (SubjectImplementation i : subjects) {
            eSubjects.add((EntitlementSubject) i);
        }
        OrSubject orSubject = new OrSubject(eSubjects);
        actualP.setSubject(orSubject);
        actualP.setCondition(appPrivilege.getCondition());
        ghostP.setSubject(orSubject);
        ghostP.setCondition(appPrivilege.getCondition());
        Set<String> applIndexes = new HashSet<String>();
        applIndexes.addAll(appPrivilege.getApplicationNames());
        actualP.setApplicationIndexes(applIndexes);
        results[0] = actualP;
        results[1] = ghostP;
    } catch (UnsupportedEncodingException ex) {
        String[] params = {};
        throw new EntitlementException(324, params);
    }
    return results;
}

Example 48 with Privilege

use of com.sun.identity.entitlement.Privilege in project OpenAM by OpenRock.

the class PrivilegeResource method modifyPrivilege.

@PUT
@Produces("application/json")
@Path("/{name}")
public String modifyPrivilege(@Context HttpHeaders headers, @Context HttpServletRequest request, @FormParam("realm") @DefaultValue("/") String realm, @FormParam("privilege.json") String jsonString, @PathParam("name") String name) {
    try {
        Subject caller = getCaller(request);
        PrivilegeManager pm = PrivilegeManager.getInstance(realm, caller);
        Privilege privilege = Privilege.getNewInstance(jsonString);
        pm.modify(privilege);
        return createResponseJSONString(200, headers, "OK");
    } catch (JSONException e) {
        PrivilegeManager.debug.error("PrivilegeResource.modify", e);
        throw getWebApplicationException(e, MimeType.JSON);
    } catch (RestException e) {
        PrivilegeManager.debug.error("PrivilegeResource.modify", e);
        throw getWebApplicationException(headers, e, MimeType.JSON);
    } catch (EntitlementException e) {
        PrivilegeManager.debug.error("PrivilegeResource.modify", e);
        throw getWebApplicationException(headers, e, MimeType.JSON);
    }
}

Example 49 with Privilege

use of com.sun.identity.entitlement.Privilege in project OpenAM by OpenRock.

the class XACMLExportImportTest method canImportPrivilegesIntoRealm.

@Test
public void canImportPrivilegesIntoRealm() throws Exception {
    // Given
    // shared test state
    Privilege privilegeToUpdate = existing(valid(privilege("p1")));
    Privilege privilegeToAdd = notExisting(valid(privilege("p2")));
    PrivilegeSet privilegeSet = new PrivilegeSet(Collections.<ReferralPrivilege>emptyList(), asList(privilegeToUpdate, privilegeToAdd));
    given(xacmlReaderWriter.read(eq(NULL_INPUT))).willReturn(privilegeSet);
    // When
    List<ImportStep> importSteps = xacmlExportImport.importXacml(ROOT_REALM, NULL_INPUT, NULL_SUBJECT, false);
    // Then
    assertThat(importSteps).hasSize(2);
    assertImportStep(importSteps.get(0), DiffStatus.UPDATE, privilegeToUpdate);
    assertImportStep(importSteps.get(1), DiffStatus.ADD, privilegeToAdd);
    verify(validator).validatePrivilege(privilegeToAdd);
    verify(validator).validatePrivilege(privilegeToUpdate);
    verify(pm).add(privilegeToAdd);
    verify(pm).modify(privilegeToUpdate);
}

Example 50 with Privilege

use of com.sun.identity.entitlement.Privilege in project OpenAM by OpenRock.

the class XACMLExportImportTest method canPerformAnImportDryRun.

@Test
public void canPerformAnImportDryRun() throws Exception {
    // Given
    // shared test state
    Privilege privilegeToUpdate = existing(valid(privilege("p1")));
    Privilege privilegeToAdd = notExisting(valid(privilege("p2")));
    PrivilegeSet privilegeSet = new PrivilegeSet(Collections.<ReferralPrivilege>emptyList(), asList(privilegeToUpdate, privilegeToAdd));
    given(xacmlReaderWriter.read(eq(NULL_INPUT))).willReturn(privilegeSet);
    // When
    List<ImportStep> importSteps = xacmlExportImport.importXacml(ROOT_REALM, NULL_INPUT, NULL_SUBJECT, true);
    // Then
    assertThat(importSteps).hasSize(2);
    assertImportStep(importSteps.get(0), DiffStatus.UPDATE, privilegeToUpdate);
    assertImportStep(importSteps.get(1), DiffStatus.ADD, privilegeToAdd);
    verify(validator).validatePrivilege(privilegeToAdd);
    verify(validator).validatePrivilege(privilegeToUpdate);
    verify(pm, times(0)).add(any(Privilege.class));
    verify(pm, times(0)).modify(any(Privilege.class));
}