Examples with TreeLocation org.apache.jackrabbit.oak.plugins.tree.TreeLocation used on opensource projects

Example 16 with TreeLocation

use of org.apache.jackrabbit.oak.plugins.tree.TreeLocation in project jackrabbit-oak by apache.

the class PermissionsTest method testGetPermissionsFromActions.

@Test
public void testGetPermissionsFromActions() {
    TreeLocation tl = TreeLocation.create(existingTree);
    Map<String, Long> map = ImmutableMap.of(Session.ACTION_READ, Permissions.READ_NODE, Session.ACTION_READ + "," + Session.ACTION_REMOVE, Permissions.READ_NODE | Permissions.REMOVE_NODE);
    for (Map.Entry<String, Long> entry : map.entrySet()) {
        assertEquals(entry.getValue().longValue(), Permissions.getPermissions(entry.getKey(), tl, false));
    }
}

Example 17 with TreeLocation

use of org.apache.jackrabbit.oak.plugins.tree.TreeLocation in project jackrabbit-oak by apache.

the class CugPermissionProviderTest method testIsGrantedByLocation.

/**
     * @see org.apache.jackrabbit.oak.spi.security.authorization.permission.AggregatedPermissionProvider#isGranted(org.apache.jackrabbit.oak.plugins.tree.TreeLocation, long)
     */
@Test
public void testIsGrantedByLocation() throws Exception {
    for (String p : NOT_READABLE_PATHS) {
        TreeLocation location = TreeLocation.create(root, p);
        assertFalse(cugPermProvider.isGranted(location, Permissions.READ));
        assertFalse(cugPermProvider.isGranted(location, Permissions.READ_NODE));
        assertFalse(cugPermProvider.isGranted(location, Permissions.READ_PROPERTY));
        assertFalse(cugPermProvider.isGranted(location, Permissions.ALL));
        assertFalse(cugPermProvider.isGranted(location, Permissions.ADD_NODE));
        assertFalse(cugPermProvider.isGranted(location, Permissions.READ_ACCESS_CONTROL));
    }
    for (String p : READABLE_PATHS) {
        TreeLocation location = TreeLocation.create(root, p);
        assertTrue(cugPermProvider.isGranted(location, Permissions.READ));
        assertTrue(cugPermProvider.isGranted(location, Permissions.READ_NODE));
        assertTrue(cugPermProvider.isGranted(location, Permissions.READ_PROPERTY));
        assertFalse(cugPermProvider.isGranted(location, Permissions.ALL));
        assertFalse(cugPermProvider.isGranted(location, Permissions.ADD_NODE));
        assertFalse(cugPermProvider.isGranted(location, Permissions.READ_ACCESS_CONTROL));
    }
}

Example 18 with TreeLocation

use of org.apache.jackrabbit.oak.plugins.tree.TreeLocation in project jackrabbit-oak by apache.

the class CugPermissionProviderTest method testIsGrantedNonExistingLocation.

/**
     * @see org.apache.jackrabbit.oak.spi.security.authorization.permission.AggregatedPermissionProvider#isGranted(org.apache.jackrabbit.oak.plugins.tree.TreeLocation, long)
     */
@Test
public void testIsGrantedNonExistingLocation() throws Exception {
    ContentSession anonymous = login(new GuestCredentials());
    try {
        // additionally create a root that doesn't have access to the root node
        Root anonymousRoot = anonymous.getLatestRoot();
        for (Root r : new Root[] { anonymousRoot, root }) {
            TreeLocation location = TreeLocation.create(r, "/path/to/non/existing/tree");
            assertFalse(cugPermProvider.isGranted(location, Permissions.READ));
            assertFalse(cugPermProvider.isGranted(location, Permissions.READ_NODE));
            assertFalse(cugPermProvider.isGranted(location, Permissions.READ_PROPERTY));
            assertFalse(cugPermProvider.isGranted(location, Permissions.ALL));
            assertFalse(cugPermProvider.isGranted(location, Permissions.ADD_NODE));
            assertFalse(cugPermProvider.isGranted(location, Permissions.READ_ACCESS_CONTROL));
        }
    } finally {
        anonymous.close();
    }
}

Example 19 with TreeLocation

use of org.apache.jackrabbit.oak.plugins.tree.TreeLocation in project jackrabbit-oak by apache.

the class CugPermissionProvider method isGranted.

@Override
public boolean isGranted(@Nonnull String oakPath, @Nonnull String jcrActions) {
    TreeLocation location = TreeLocation.create(immutableRoot, oakPath);
    if (ctx.definesLocation(location) || NodeStateUtils.isHiddenPath(oakPath)) {
        return false;
    }
    long permissions = Permissions.getPermissions(jcrActions, location, false);
    return isGranted(location, permissions);
}

Example 20 with TreeLocation

use of org.apache.jackrabbit.oak.plugins.tree.TreeLocation in project jackrabbit-oak by apache.

the class CugOakTest method runTest.

@Override
protected void runTest() throws Exception {
    boolean logout = false;
    ContentSession readSession;
    if (singleSession) {
        readSession = cs;
    } else {
        readSession = Subject.doAs(subject, new PrivilegedAction<ContentSession>() {

            @Override
            public ContentSession run() {
                try {
                    return contentRepository.login(null, null);
                } catch (Exception e) {
                    throw new RuntimeException(e);
                }
            }
        });
        logout = true;
    }
    Root root = readSession.getLatestRoot();
    try {
        int nodeCnt = 0;
        int propertyCnt = 0;
        int noAccess = 0;
        int size = allPaths.size();
        long start = System.currentTimeMillis();
        for (int i = 0; i < itemsToRead; i++) {
            double rand = size * Math.random();
            int index = (int) Math.floor(rand);
            String path = allPaths.get(index);
            TreeLocation treeLocation = TreeLocation.create(root, path);
            if (treeLocation.exists()) {
                PropertyState ps = treeLocation.getProperty();
                if (ps != null) {
                    propertyCnt++;
                } else {
                    nodeCnt++;
                }
            } else {
                noAccess++;
            }
        }
        long end = System.currentTimeMillis();
        if (doReport) {
            System.out.println("ContentSession " + cs.getAuthInfo().getUserID() + " reading " + (itemsToRead - noAccess) + " (Tree: " + nodeCnt + "; PropertyState: " + propertyCnt + ") completed in " + (end - start));
        }
    } finally {
        if (logout) {
            readSession.close();
        }
    }
}