Examples with JcrAllowedActions com.thinkbiganalytics.metadata.modeshape.security.action.JcrAllowedActions used on opensource projects

Example 11 with JcrAllowedActions

use of com.thinkbiganalytics.metadata.modeshape.security.action.JcrAllowedActions in project kylo by Teradata.

the class CheckEntityAccessControlAction method ensureCategoryAccessControl.

private void ensureCategoryAccessControl() {
    List<Category> categories = categoryProvider.findAll();
    if (categories != null) {
        List<SecurityRole> catRoles = this.roleProvider.getEntityRoles(SecurityRole.CATEGORY);
        List<SecurityRole> feedRoles = this.roleProvider.getEntityRoles(SecurityRole.FEED);
        Optional<AllowedActions> allowedActions = this.actionsProvider.getAvailableActions(AllowedActions.CATEGORY);
        categories.stream().forEach(category -> {
            Principal owner = category.getOwner() != null ? category.getOwner() : JcrMetadataAccess.getActiveUser();
            allowedActions.ifPresent(actions -> ((JcrCategory) category).enableAccessControl((JcrAllowedActions) actions, owner, catRoles, feedRoles));
        });
    }
}

Example 12 with JcrAllowedActions

use of com.thinkbiganalytics.metadata.modeshape.security.action.JcrAllowedActions in project kylo by Teradata.

the class AccessControlledMixin method enableAccessControl.

default void enableAccessControl(JcrAllowedActions prototype, Principal owner, List<SecurityRole> roles) {
    JcrAllowedActions allowed = getJcrAllowedActions();
    prototype.copy(allowed.getNode(), owner, Privilege.JCR_ALL);
    allowed.setupAccessControl(owner);
    roles.forEach(role -> JcrAbstractRoleMembership.create(getNode(), ((JcrSecurityRole) role).getNode(), JcrEntityRoleMembership.class, allowed));
}

Example 13 with JcrAllowedActions

use of com.thinkbiganalytics.metadata.modeshape.security.action.JcrAllowedActions in project kylo by Teradata.

the class StartFeedPermUpgradeAction method upgradeTo.

@Override
public void upgradeTo(final KyloVersion targetVersion) {
    log.info("Add start feed permission to roles: {}", targetVersion);
    if (this.accessController.isEntityAccessControlled()) {
        // Define the new "start" action for feeds.
        actionsBuilder.module(AllowedActions.FEED).action(FeedAccessControl.START).add();
        // Grant the start action permission to the editor and admin roles
        this.roleProvider.getRole(SecurityRole.FEED, "editor").ifPresent(role -> role.setPermissions(FeedAccessControl.START));
        this.roleProvider.getRole(SecurityRole.FEED, "admin").ifPresent(role -> role.setPermissions(FeedAccessControl.START));
        // Re-apply entity access to all existing feeds to permit the start action to users/groups in the editor and admin roles.
        List<SecurityRole> roles = this.roleProvider.getEntityRoles(SecurityRole.FEED);
        Optional<AllowedActions> allowedActions = this.actionsProvider.getAvailableActions(AllowedActions.FEED);
        this.feedProvider.getFeeds().forEach(feed -> {
            Principal owner = feed.getOwner();
            allowedActions.ifPresent(actions -> ((JcrFeed) feed).enableAccessControl((JcrAllowedActions) actions, owner, roles));
        });
    }
}