Examples with AccessControlPolicy javax.jcr.security.AccessControlPolicy used on opensource projects

Example 51 with AccessControlPolicy

use of javax.jcr.security.AccessControlPolicy in project jackrabbit-oak by apache.

the class AccessControlManagerImpl method getEffectivePolicies.

@Nonnull
@Override
public AccessControlPolicy[] getEffectivePolicies(@Nullable String absPath) throws RepositoryException {
    String oakPath = getOakPath(absPath);
    Tree tree = getTree(oakPath, Permissions.READ_ACCESS_CONTROL, true);
    Root r = getRoot().getContentSession().getLatestRoot();
    tree = r.getTree(tree.getPath());
    List<AccessControlPolicy> effective = new ArrayList<AccessControlPolicy>();
    AccessControlPolicy policy = createACL(oakPath, tree, true);
    if (policy != null) {
        effective.add(policy);
    }
    if (oakPath != null) {
        String parentPath = Text.getRelativeParent(oakPath, 1);
        while (!parentPath.isEmpty()) {
            Tree t = r.getTree(parentPath);
            AccessControlPolicy plc = createACL(parentPath, t, true);
            if (plc != null) {
                effective.add(plc);
            }
            parentPath = (PathUtils.denotesRoot(parentPath)) ? "" : Text.getRelativeParent(parentPath, 1);
        }
    }
    if (readPaths.contains(oakPath)) {
        effective.add(ReadPolicy.INSTANCE);
    }
    return effective.toArray(new AccessControlPolicy[effective.size()]);
}

Example 52 with AccessControlPolicy

use of javax.jcr.security.AccessControlPolicy in project jackrabbit-oak by apache.

the class AccessControlManagerImplTest method testGetApplicablePoliciesByPrincipal.

@Test
public void testGetApplicablePoliciesByPrincipal() throws Exception {
    List<Principal> principals = ImmutableList.of(testPrincipal, EveryonePrincipal.getInstance());
    for (Principal principal : principals) {
        AccessControlPolicy[] applicable = acMgr.getApplicablePolicies(principal);
        assertNotNull(applicable);
        assertEquals(1, applicable.length);
        assertTrue(applicable[0] instanceof ACL);
    }
}

Example 53 with AccessControlPolicy

use of javax.jcr.security.AccessControlPolicy in project jackrabbit-oak by apache.

the class AccessControlManagerImplTest method testEffectivePoliciesFiltering.

@Test
public void testEffectivePoliciesFiltering() throws Exception {
    // create first policy with multiple ACEs for the test principal set.
    ACL policy = getApplicablePolicy(testPath);
    policy.addEntry(testPrincipal, testPrivileges, true, getGlobRestriction("*"));
    policy.addEntry(testPrincipal, privilegesFromNames(PrivilegeConstants.JCR_VERSION_MANAGEMENT), false);
    policy.addEntry(EveryonePrincipal.getInstance(), privilegesFromNames(PrivilegeConstants.JCR_LIFECYCLE_MANAGEMENT), false);
    assertEquals(3, policy.getAccessControlEntries().length);
    acMgr.setPolicy(testPath, policy);
    root.commit();
    // different ways to create the principal-set to make sure the filtering
    // doesn't rely on principal equality but rather on the name.
    List<Principal> principals = ImmutableList.of(testPrincipal, new PrincipalImpl(testPrincipal.getName()), new Principal() {

        @Override
        public String getName() {
            return testPrincipal.getName();
        }
    });
    for (Principal princ : principals) {
        AccessControlPolicy[] policies = acMgr.getEffectivePolicies(ImmutableSet.of(princ));
        assertEquals(1, policies.length);
        assertTrue(policies[0] instanceof AccessControlList);
        AccessControlList acl = (AccessControlList) policies[0];
        assertEquals(2, acl.getAccessControlEntries().length);
        for (AccessControlEntry ace : acl.getAccessControlEntries()) {
            assertEquals(princ.getName(), ace.getPrincipal().getName());
        }
    }
}

Example 54 with AccessControlPolicy

use of javax.jcr.security.AccessControlPolicy in project jackrabbit-oak by apache.

the class AccessControlManagerImplTest method testSetPolicyPropertyPath.

@Test
public void testSetPolicyPropertyPath() throws Exception {
    try {
        String path = "/jcr:primaryType";
        AccessControlPolicy acl = createPolicy(path);
        acMgr.setPolicy(path, acl);
        fail("Setting access control policy at property path should fail");
    } catch (PathNotFoundException e) {
    // success
    }
}

Example 55 with AccessControlPolicy

use of javax.jcr.security.AccessControlPolicy in project jackrabbit-oak by apache.

the class AccessControlManagerImplTest method testGetPoliciesAfterSet.

@Test
public void testGetPoliciesAfterSet() throws Exception {
    setupPolicy(testPath);
    AccessControlPolicy[] policies = acMgr.getPolicies(testPath);
    assertNotNull(policies);
    assertEquals(1, policies.length);
    assertTrue(policies[0] instanceof ACL);
    ACL acl = (ACL) policies[0];
    assertFalse(acl.isEmpty());
}