Examples with UserSessionBase org.apache.ranger.common.UserSessionBase used on opensource projects

Example 6 with UserSessionBase

use of org.apache.ranger.common.UserSessionBase in project ranger by apache.

the class SessionMgr method getActiveUserSessionsForPortalUserId.

public Set<UserSessionBase> getActiveUserSessionsForPortalUserId(Long portalUserId) {
    CopyOnWriteArrayList<UserSessionBase> activeSessions = getActiveSessionsOnServer();
    if (CollectionUtils.isEmpty(activeSessions)) {
        return null;
    }
    Set<UserSessionBase> activeUserSessions = new HashSet<UserSessionBase>();
    for (UserSessionBase session : activeSessions) {
        if (session.getUserId().equals(portalUserId)) {
            activeUserSessions.add(session);
        }
    }
    if (logger.isDebugEnabled()) {
        logger.debug("No Session Found with portalUserId: " + portalUserId);
    }
    return activeUserSessions;
}

Example 7 with UserSessionBase

use of org.apache.ranger.common.UserSessionBase in project ranger by apache.

the class UserMgr method updateRoleForExternalUsers.

protected VXPortalUser updateRoleForExternalUsers(Collection<String> reqRoleList, Collection<String> existingRoleList, VXPortalUser userProfileRes) {
    rangerBizUtil.blockAuditorRoleUser();
    UserSessionBase session = ContextUtil.getCurrentUserSession();
    if (session != null && session.getXXPortalUser() != null && session.getXXPortalUser().getLoginId() != null && "rangerusersync".equals(session.getXXPortalUser().getLoginId()) && reqRoleList != null && !reqRoleList.isEmpty() && existingRoleList != null && !existingRoleList.isEmpty()) {
        if (!reqRoleList.equals(existingRoleList)) {
            userProfileRes.setUserRoleList(reqRoleList);
            userProfileRes.setUserSource(RangerCommonEnums.USER_EXTERNAL);
            List<XXUserPermission> xuserPermissionList = daoManager.getXXUserPermission().findByUserPermissionId(userProfileRes.getId());
            if (xuserPermissionList != null && xuserPermissionList.size() > 0) {
                for (XXUserPermission xXUserPermission : xuserPermissionList) {
                    if (xXUserPermission != null) {
                        try {
                            xUserPermissionService.deleteResource(xXUserPermission.getId());
                        } catch (Exception e) {
                            logger.error(e.getMessage());
                        }
                    }
                }
            }
            updateUser(userProfileRes);
        }
    } else {
        if (logger.isDebugEnabled()) {
            logger.debug("Permission" + " denied. LoggedInUser=" + (session != null ? session.getXXPortalUser().getId() : "") + " isn't permitted to perform the action.");
        }
    }
    return userProfileRes;
}

Example 8 with UserSessionBase

use of org.apache.ranger.common.UserSessionBase in project ranger by apache.

the class UserMgr method deleteUserRole.

public boolean deleteUserRole(Long userId, XXPortalUserRole gjUserRole) {
    /*
		 * if (RangerConstants.ROLE_USER.equals(gjUserRole.getUserRole())) {
		 * return false; }
		 */
    rangerBizUtil.blockAuditorRoleUser();
    boolean publicRole = false;
    for (String publicRoleStr : publicRoles) {
        if (publicRoleStr.equalsIgnoreCase(gjUserRole.getUserRole())) {
            publicRole = true;
            break;
        }
    }
    if (!publicRole) {
        UserSessionBase sess = ContextUtil.getCurrentUserSession();
        if (sess == null || (!sess.isUserAdmin() && !sess.isKeyAdmin())) {
            return false;
        }
    }
    daoManager.getXXPortalUserRole().remove(gjUserRole.getId());
    return true;
}

Example 9 with UserSessionBase

use of org.apache.ranger.common.UserSessionBase in project ranger by apache.

the class UserMgr method mapXXPortalUserToVXPortalUser.

/**
 * @param user
 * @return
 */
public VXPortalUser mapXXPortalUserToVXPortalUser(XXPortalUser user, Collection<String> userRoleList) {
    if (user == null) {
        return null;
    }
    UserSessionBase sess = ContextUtil.getCurrentUserSession();
    if (sess == null) {
        return null;
    }
    VXPortalUser userProfile = new VXPortalUser();
    gjUserToUserProfile(user, userProfile);
    if (sess.isUserAdmin() || sess.isKeyAdmin() || sess.getXXPortalUser().getId().equals(user.getId())) {
        if (userRoleList == null) {
            userRoleList = new ArrayList<String>();
            List<XXPortalUserRole> gjUserRoleList = daoManager.getXXPortalUserRole().findByParentId(user.getId());
            for (XXPortalUserRole userRole : gjUserRoleList) {
                userRoleList.add(userRole.getUserRole());
            }
        }
        userProfile.setUserRoleList(userRoleList);
    }
    userProfile.setUserSource(user.getUserSource());
    return userProfile;
}

Example 10 with UserSessionBase

use of org.apache.ranger.common.UserSessionBase in project ranger by apache.

the class XUserMgr method updateXUserPermission.

public VXUserPermission updateXUserPermission(VXUserPermission vXUserPermission) {
    vXUserPermission = xUserPermissionService.updateResource(vXUserPermission);
    Set<UserSessionBase> userSessions = sessionMgr.getActiveUserSessionsForPortalUserId(vXUserPermission.getUserId());
    if (!CollectionUtils.isEmpty(userSessions)) {
        for (UserSessionBase userSession : userSessions) {
            logger.info("Updating permission of user who's found logged in into system, so updating permission in session of user: [" + vXUserPermission.getUserName() + "]");
            sessionMgr.resetUserModulePermission(userSession);
        }
    }
    return vXUserPermission;
}