Examples with UserSessionBase org.apache.ranger.common.UserSessionBase used on opensource projects

Example 46 with UserSessionBase

use of org.apache.ranger.common.UserSessionBase in project ranger by apache.

the class XUserMgr method searchXPermMaps.

public VXPermMapList searchXPermMaps(SearchCriteria searchCriteria) {
    VXPermMapList returnList;
    UserSessionBase currentUserSession = ContextUtil.getCurrentUserSession();
    // If user is system admin
    if (currentUserSession != null && currentUserSession.isUserAdmin()) {
        returnList = super.searchXPermMaps(searchCriteria);
    } else {
        returnList = new VXPermMapList();
        int startIndex = searchCriteria.getStartIndex();
        int pageSize = searchCriteria.getMaxRows();
        searchCriteria.setStartIndex(0);
        searchCriteria.setMaxRows(Integer.MAX_VALUE);
        List<VXPermMap> resultList = xPermMapService.searchXPermMaps(searchCriteria).getVXPermMaps();
        List<VXPermMap> adminPermResourceList = new ArrayList<VXPermMap>();
        for (VXPermMap xXPermMap : resultList) {
            XXResource xRes = daoManager.getXXResource().getById(xXPermMap.getResourceId());
            VXResponse vXResponse = msBizUtil.hasPermission(xResourceService.populateViewBean(xRes), AppConstants.XA_PERM_TYPE_ADMIN);
            if (vXResponse.getStatusCode() == VXResponse.STATUS_SUCCESS) {
                adminPermResourceList.add(xXPermMap);
            }
        }
        if (adminPermResourceList.size() > 0) {
            populatePageList(adminPermResourceList, startIndex, pageSize, returnList);
        }
    }
    return returnList;
}

Example 47 with UserSessionBase

use of org.apache.ranger.common.UserSessionBase in project ranger by apache.

the class RangerBizUtil method getXUserId.

/**
 * returns current user's userID from active user sessions
 *
 * @return
 */
public Long getXUserId() {
    UserSessionBase currentUserSession = ContextUtil.getCurrentUserSession();
    if (currentUserSession == null) {
        logger.debug("Unable to find session.");
        return null;
    }
    XXPortalUser user = daoManager.getXXPortalUser().getById(currentUserSession.getUserId());
    if (user == null) {
        logger.debug("XXPortalUser not found with logged in user id : " + currentUserSession.getUserId());
        return null;
    }
    XXUser xUser = daoManager.getXXUser().findByUserName(user.getLoginId());
    if (xUser == null) {
        logger.debug("XXPortalUser not found for user id :" + user.getId() + " with name " + user.getFirstName());
        return null;
    }
    return xUser.getId();
}

Example 48 with UserSessionBase

use of org.apache.ranger.common.UserSessionBase in project ranger by apache.

the class RangerBizUtil method isUserAllowed.

public boolean isUserAllowed(RangerService rangerService, String cfgNameAllowedUsers) {
    Map<String, String> map = rangerService.getConfigs();
    String user = null;
    UserSessionBase userSession = ContextUtil.getCurrentUserSession();
    if (userSession != null) {
        user = userSession.getLoginId();
    }
    if (map != null && map.containsKey(cfgNameAllowedUsers)) {
        String userNames = map.get(cfgNameAllowedUsers);
        String[] userList = userNames.split(",");
        if (userList != null) {
            for (String u : userList) {
                if ("*".equals(u) || (user != null && u.equalsIgnoreCase(user))) {
                    return true;
                }
            }
        }
    }
    return false;
}

Example 49 with UserSessionBase

use of org.apache.ranger.common.UserSessionBase in project ranger by apache.

the class RangerBizUtil method blockAuditorRoleUser.

public void blockAuditorRoleUser() {
    UserSessionBase session = ContextUtil.getCurrentUserSession();
    if (session != null) {
        if (session.isAuditKeyAdmin() || session.isAuditUserAdmin()) {
            VXResponse vXResponse = new VXResponse();
            vXResponse.setStatusCode(HttpServletResponse.SC_UNAUTHORIZED);
            vXResponse.setMsgDesc("Operation" + " denied. LoggedInUser=" + session.getXXPortalUser().getId() + " ,isn't permitted to perform the action.");
            throw restErrorUtil.generateRESTException(vXResponse);
        }
    } else {
        VXResponse vXResponse = new VXResponse();
        vXResponse.setStatusCode(HttpServletResponse.SC_UNAUTHORIZED);
        vXResponse.setMsgDesc("Bad Credentials");
        throw restErrorUtil.generateRESTException(vXResponse);
    }
}

Example 50 with UserSessionBase

use of org.apache.ranger.common.UserSessionBase in project ranger by apache.

the class RangerBizUtil method getCurrentUserLoginId.

/**
 * return username of currently logged in user
 *
 * @return
 */
public String getCurrentUserLoginId() {
    String ret = null;
    UserSessionBase currentUserSession = ContextUtil.getCurrentUserSession();
    if (currentUserSession != null) {
        ret = currentUserSession.getLoginId();
    }
    return ret;
}