Examples with AccessControlList javax.jcr.security.AccessControlList used on opensource projects

Example 36 with AccessControlList

use of javax.jcr.security.AccessControlList in project jackrabbit by apache.

the class AccessControlListTest method tearDown.

protected void tearDown() throws Exception {
    try {
        // restore original entries (remove others).
        AccessControlList list = getList(acMgr, path);
        AccessControlEntry[] entries = list.getAccessControlEntries();
        for (int i = 0; i < entries.length; i++) {
            AccessControlEntry ace = entries[i];
            if (testPrincipal.equals(ace.getPrincipal())) {
                list.removeAccessControlEntry(ace);
            }
        }
        if (!privilegesToRestore.isEmpty()) {
            list.addAccessControlEntry(testPrincipal, (Privilege[]) privilegesToRestore.toArray(new Privilege[privilegesToRestore.size()]));
        }
        if (list.getAccessControlEntries().length > 0 && acMgr.getPolicies(path).length > 0) {
            acMgr.setPolicy(path, list);
            superuser.save();
        }
    } catch (Exception e) {
        log.warn("Unexpected error while removing test entries.", e);
    }
    super.tearDown();
}

Example 37 with AccessControlList

use of javax.jcr.security.AccessControlList in project jackrabbit by apache.

the class AccessControlListTest method testAddAggregatedPrivilegesSeparately.

public void testAddAggregatedPrivilegesSeparately() throws NotExecutableException, RepositoryException {
    checkCanModifyAc(path);
    Privilege aggregate = null;
    for (int i = 0; i < privs.length; i++) {
        if (privs[i].isAggregate()) {
            aggregate = privs[i];
            break;
        }
    }
    if (aggregate == null) {
        throw new NotExecutableException("No aggregate privilege supported at " + path);
    }
    AccessControlList acl = getList(acMgr, path);
    acl.addAccessControlEntry(testPrincipal, new Privilege[] { aggregate });
    Privilege[] privs = aggregate.getAggregatePrivileges();
    for (int i = 0; i < privs.length; i++) {
        boolean modified = acl.addAccessControlEntry(testPrincipal, new Privilege[] { privs[i] });
        assertFalse("Adding the aggregated privs individually later on must not modify the policy", modified);
    }
}

Example 38 with AccessControlList

use of javax.jcr.security.AccessControlList in project jackrabbit by apache.

the class AccessControlListTest method testAddAccessControlEntryAndSetPolicy.

public void testAddAccessControlEntryAndSetPolicy() throws RepositoryException, NotExecutableException {
    checkCanModifyAc(path);
    AccessControlList acl = getList(acMgr, path);
    List<AccessControlEntry> originalAces = Arrays.asList(acl.getAccessControlEntries());
    if (!acl.addAccessControlEntry(testPrincipal, privs)) {
        throw new NotExecutableException();
    }
    // re-access ACL from AC-Manager -> must not yet have changed
    assertEquals("Before calling setPolicy any modifications to an ACL must not be reflected in the policies", originalAces, Arrays.asList(getList(acMgr, path).getAccessControlEntries()));
    // setting the modified policy -> policy must change.
    acMgr.setPolicy(path, acl);
    assertEquals("Before calling setPolicy any modifications to an ACL must not be reflected in the policies", Arrays.asList(acl.getAccessControlEntries()), Arrays.asList(getList(acMgr, path).getAccessControlEntries()));
}

Example 39 with AccessControlList

use of javax.jcr.security.AccessControlList in project jackrabbit by apache.

the class AccessControlListTest method testAddAggregatePrivilege.

public void testAddAggregatePrivilege() throws NotExecutableException, RepositoryException {
    checkCanModifyAc(path);
    Privilege aggregate = null;
    for (int i = 0; i < privs.length; i++) {
        if (privs[i].isAggregate()) {
            aggregate = privs[i];
            break;
        }
    }
    if (aggregate == null) {
        throw new NotExecutableException("No aggregate privilege supported at " + path);
    }
    AccessControlList acl = getList(acMgr, path);
    acl.addAccessControlEntry(testPrincipal, new Privilege[] { aggregate });
    // make sure all privileges are present now
    List<Privilege> privs = currentPrivileges(acl, testPrincipal);
    assertTrue("Privileges added through 'addAccessControlEntry' must be " + "reflected upon getAccessControlEntries", privs.contains(aggregate) || privs.containsAll(Arrays.asList(aggregate.getAggregatePrivileges())));
}

Example 40 with AccessControlList

use of javax.jcr.security.AccessControlList in project jackrabbit by apache.

the class AccessControlListTest method testAddPrivilegesPresentInEntries.

public void testAddPrivilegesPresentInEntries() throws NotExecutableException, RepositoryException {
    checkCanModifyAc(path);
    AccessControlList acl = getList(acMgr, path);
    acl.addAccessControlEntry(testPrincipal, privs);
    Set<Privilege> assignedPrivs = new HashSet<Privilege>();
    AccessControlEntry[] entries = acl.getAccessControlEntries();
    for (int i = 0; i < entries.length; i++) {
        if (entries[i].getPrincipal().equals(testPrincipal)) {
            Privilege[] prvs = entries[i].getPrivileges();
            for (int j = 0; j < prvs.length; j++) {
                if (prvs[j].isAggregate()) {
                    assignedPrivs.addAll(Arrays.asList(prvs[j].getAggregatePrivileges()));
                } else {
                    assignedPrivs.add(prvs[j]);
                }
            }
        }
    }
    Set<Privilege> expected = new HashSet<Privilege>();
    for (int i = 0; i < privs.length; i++) {
        if (privs[i].isAggregate()) {
            expected.addAll(Arrays.asList(privs[i].getAggregatePrivileges()));
        } else {
            expected.add(privs[i]);
        }
    }
    assertTrue("getAccessControlEntries must contain an entry or entries that grant at least the added privileges.", assignedPrivs.containsAll(expected));
}