Examples with CompiledPermissions org.apache.jackrabbit.core.security.authorization.CompiledPermissions used on opensource projects

Example 6 with CompiledPermissions

use of org.apache.jackrabbit.core.security.authorization.CompiledPermissions in project jackrabbit by apache.

the class DefaultAccessManager method hasPrivileges.

/**
     * @see org.apache.jackrabbit.api.security.JackrabbitAccessControlManager#hasPrivileges(String, Set, Privilege[])
     */
public boolean hasPrivileges(String absPath, Set<Principal> principals, Privilege[] privileges) throws PathNotFoundException, RepositoryException {
    checkInitialized();
    checkValidNodePath(absPath);
    checkPermission(absPath, Permission.READ_AC);
    if (privileges == null || privileges.length == 0) {
        // null or empty privilege array -> return true
        log.debug("No privileges passed -> allowed.");
        return true;
    } else {
        Path p = getPath(absPath);
        CompiledPermissions perms = acProvider.compilePermissions(principals);
        try {
            return perms.hasPrivileges(p, privileges);
        } finally {
            perms.close();
        }
    }
}

Example 7 with CompiledPermissions

use of org.apache.jackrabbit.core.security.authorization.CompiledPermissions in project jackrabbit by apache.

the class UserAccessControlProviderTest method testNodeRemovedForPrincipal.

public void testNodeRemovedForPrincipal() throws RepositoryException, NotExecutableException {
    Principal testPrincipal = getTestPrincipal();
    final User u = getUserManager(superuser).createUser(testPrincipal.getName(), "pw");
    save(superuser);
    Path rootPath = ((SessionImpl) s).getQPath("/");
    CompiledPermissions cp = null;
    try {
        Set<Principal> principals = Collections.singleton(u.getPrincipal());
        cp = provider.compilePermissions(principals);
        assertTrue(cp.canReadAll());
        assertTrue(cp.grants(rootPath, Permission.READ));
        assertNotSame(CompiledPermissions.NO_PERMISSION, cp);
    } finally {
        // remove the user to assert that the path doesn't point to an
        // existing node any more -> userNode cannot be resolved any more -> permissions denied.
        u.remove();
        save(superuser);
        if (cp != null) {
            assertFalse(cp.canReadAll());
            assertFalse(cp.grants(rootPath, Permission.READ));
            assertTrue(cp.getPrivilegeSet(rootPath).isEmpty());
        }
    }
}