Examples with Privilege javax.jcr.security.Privilege used on opensource projects

Example 61 with Privilege

use of javax.jcr.security.Privilege in project jackrabbit-oak by apache.

the class AccessControlManagerImplTest method testGetSupportedPrivilegesIncludingPathConversion.

@Test
public void testGetSupportedPrivilegesIncludingPathConversion() throws Exception {
    List<Privilege> allPrivileges = Arrays.asList(getPrivilegeManager(root).getRegisteredPrivileges());
    List<String> testPaths = new ArrayList();
    testPaths.add('/' + TEST_LOCAL_PREFIX + ":testRoot");
    testPaths.add("/{" + TEST_URI + "}testRoot");
    NameMapper remapped = new LocalNameMapper(root, singletonMap(TEST_LOCAL_PREFIX, TEST_URI));
    AccessControlManager acMgr = createAccessControlManager(root, new NamePathMapperImpl(remapped));
    for (String path : testPaths) {
        Privilege[] supported = acMgr.getSupportedPrivileges(path);
        assertNotNull(supported);
        assertEquals(allPrivileges.size(), supported.length);
        assertTrue(allPrivileges.containsAll(Arrays.asList(supported)));
    }
}

Example 62 with Privilege

use of javax.jcr.security.Privilege in project jackrabbit-oak by apache.

the class AccessControlManagerImplTest method testTestSessionGetEffectivePoliciesByPrincipal.

@Test
public void testTestSessionGetEffectivePoliciesByPrincipal() throws Exception {
    NodeUtil child = new NodeUtil(root.getTree(testPath)).addChild("child", JcrConstants.NT_UNSTRUCTURED);
    String childPath = child.getTree().getPath();
    Privilege[] privs = privilegesFromNames(PrivilegeConstants.JCR_READ, PrivilegeConstants.JCR_READ_ACCESS_CONTROL);
    setupPolicy(testPath, privs);
    setupPolicy(childPath, privs);
    root.commit();
    Root testRoot = getTestRoot();
    testRoot.refresh();
    JackrabbitAccessControlManager testAcMgr = getTestAccessControlManager();
    AccessControlPolicy[] effective = testAcMgr.getEffectivePolicies(Collections.singleton(testPrincipal));
    assertNotNull(effective);
    assertEquals(2, effective.length);
}

Example 63 with Privilege

use of javax.jcr.security.Privilege in project jackrabbit-oak by apache.

the class AccessControlManagerImplTest method testModifyExistingPolicy.

@Test
public void testModifyExistingPolicy() throws Exception {
    ACL acl = getApplicablePolicy(testPath);
    assertTrue(acl.addAccessControlEntry(testPrincipal, testPrivileges));
    AccessControlEntry allowTest = acl.getAccessControlEntries()[0];
    acMgr.setPolicy(testPath, acl);
    root.commit();
    acl = (ACL) acMgr.getPolicies(testPath)[0];
    assertTrue(acl.addEntry(EveryonePrincipal.getInstance(), testPrivileges, false, getGlobRestriction("*/something")));
    AccessControlEntry[] aces = acl.getAccessControlEntries();
    assertEquals(2, aces.length);
    AccessControlEntry denyEveryone = aces[1];
    assertEquals(EveryonePrincipal.getInstance(), denyEveryone.getPrincipal());
    acl.orderBefore(denyEveryone, allowTest);
    acMgr.setPolicy(testPath, acl);
    root.commit();
    acl = (ACL) acMgr.getPolicies(testPath)[0];
    aces = acl.getAccessControlEntries();
    assertEquals(2, aces.length);
    assertEquals(denyEveryone, aces[0]);
    assertEquals(allowTest, aces[1]);
    Privilege[] readAc = new Privilege[] { acMgr.privilegeFromName(PrivilegeConstants.JCR_READ_ACCESS_CONTROL) };
    assertTrue(acl.addEntry(testPrincipal, readAc, false, Collections.<String, Value>emptyMap()));
    assertEquals(3, acl.size());
    AccessControlEntry denyTest = acl.getAccessControlEntries()[2];
    acl.orderBefore(denyTest, allowTest);
    acMgr.setPolicy(testPath, acl);
    acl = (ACL) acMgr.getPolicies(testPath)[0];
    aces = acl.getAccessControlEntries();
    assertEquals(3, aces.length);
    assertEquals(denyEveryone, aces[0]);
    assertEquals(denyTest, aces[1]);
    assertEquals(allowTest, aces[2]);
}

Example 64 with Privilege

use of javax.jcr.security.Privilege in project jackrabbit-oak by apache.

the class AccessControlManagerImplTest method testPrivilegeFromExpandedName.

@Test
public void testPrivilegeFromExpandedName() throws Exception {
    Privilege readPriv = getPrivilegeManager(root).getPrivilege(PrivilegeConstants.JCR_READ);
    assertEquals(readPriv, acMgr.privilegeFromName(Privilege.JCR_READ));
}

Example 65 with Privilege

use of javax.jcr.security.Privilege in project jackrabbit by apache.

the class JcrSupportedPrivilegesProperty method asDavProperty.

/**
     * Calculated the supported privileges at {@code absPath} and build a
     * {@link org.apache.jackrabbit.webdav.security.SupportedPrivilegeSetProperty}
     * from the result.
     *
     * @return a new {@code SupportedPrivilegeSetProperty} property.
     * @throws RepositoryException
     */
public SupportedPrivilegeSetProperty asDavProperty() throws RepositoryException {
    if (privileges.isEmpty()) {
        AccessControlManager acMgr = session.getAccessControlManager();
        privileges.addAll(Arrays.asList(acMgr.getSupportedPrivileges(absPath)));
    }
    for (Privilege p : privileges) {
        if (!aggregated.contains(p.getName())) {
            createSupportedPrivilege(p);
        }
    }
    return new SupportedPrivilegeSetProperty(supportedPrivileges.values().toArray(new SupportedPrivilege[supportedPrivileges.size()]));
}