Examples with CaseSensitiveWildcardPermission org.graylog.security.permissions.CaseSensitiveWildcardPermission used on opensource projects

Example 1 with CaseSensitiveWildcardPermission

use of org.graylog.security.permissions.CaseSensitiveWildcardPermission in project graylog2-server by Graylog2.

the class DefaultPermissionAndRoleResolver method resolvePermissionsForPrincipal.

@Override
public Set<Permission> resolvePermissionsForPrincipal(GRN principal) {
    final Set<GrantDTO> grants = grantService.getForGranteesOrGlobal(resolveGrantees(principal));
    final ImmutableSet.Builder<Permission> permissionsBuilder = ImmutableSet.builder();
    for (GrantDTO grant : grants) {
        final Optional<CapabilityDescriptor> capability = builtinCapabilities.get(grant.capability());
        if (capability.isPresent()) {
            final Set<GRN> targets = resolveTargets(grant.target());
            for (String permission : capability.get().permissions()) {
                for (GRN target : targets) {
                    if (target.isPermissionApplicable(permission)) {
                        // Possible solution: Don't use strings for the constants
                        if (permission.equals(RestPermissions.ENTITY_OWN)) {
                            permissionsBuilder.add(GRNPermission.create(permission, target));
                        } else {
                            permissionsBuilder.add(new CaseSensitiveWildcardPermission(permission + ":" + target.entity()));
                        }
                    }
                }
            }
        } else {
            logger.warn("Couldn't find capability <{}>", grant.capability());
        }
    }
    return permissionsBuilder.build();
}

Example 2 with CaseSensitiveWildcardPermission

use of org.graylog.security.permissions.CaseSensitiveWildcardPermission in project graylog2-server by Graylog2.

the class UserImplTest method getObjectPermissions.

@Test
public void getObjectPermissions() {
    final Permissions permissions = new Permissions(Collections.emptySet());
    final List<String> customPermissions = ImmutableList.of("subject:action", "*");
    final Map<String, Object> fields = ImmutableMap.of(UserImpl.USERNAME, "foobar", UserImpl.PERMISSIONS, customPermissions);
    user = new UserImpl(passwordAlgorithmFactory, permissions, fields);
    final Set<Permission> userSelfEditPermissions = permissions.userSelfEditPermissions("foobar").stream().map(CaseSensitiveWildcardPermission::new).collect(Collectors.toSet());
    assertThat(user.getObjectPermissions()).containsAll(userSelfEditPermissions).contains(new CaseSensitiveWildcardPermission("subject:action")).extracting("class").containsOnlyOnce(AllPermission.class);
}

Example 3 with CaseSensitiveWildcardPermission

use of org.graylog.security.permissions.CaseSensitiveWildcardPermission in project graylog2-server by Graylog2.

the class UserServiceImplTest method testGetPermissionsForUser.

@Test
public void testGetPermissionsForUser() throws Exception {
    final InMemoryRolePermissionResolver permissionResolver = mock(InMemoryRolePermissionResolver.class);
    final GRNRegistry grnRegistry = GRNRegistry.createWithBuiltinTypes();
    final UserService userService = new UserServiceImpl(mongoConnection, configuration, roleService, accessTokenService, userFactory, permissionResolver, serverEventBus, grnRegistry, permissionAndRoleResolver);
    final UserImplFactory factory = new UserImplFactory(new Configuration(), permissions);
    final UserImpl user = factory.create(new HashMap<>());
    user.setName("user");
    final Role role = createRole("Foo");
    user.setRoleIds(Collections.singleton(role.getId()));
    user.setPermissions(Collections.singletonList("hello:world"));
    when(permissionResolver.resolveStringPermission(role.getId())).thenReturn(Collections.singleton("foo:bar"));
    final GRNPermission ownerShipPermission = GRNPermission.create(RestPermissions.ENTITY_OWN, grnRegistry.newGRN(GRNTypes.DASHBOARD, "1234"));
    final GRN userGRN = grnRegistry.ofUser(user);
    when(permissionAndRoleResolver.resolvePermissionsForPrincipal(userGRN)).thenReturn(ImmutableSet.of(new CaseSensitiveWildcardPermission("perm:from:grant"), ownerShipPermission));
    final String roleId = "12345";
    when(permissionAndRoleResolver.resolveRolesForPrincipal(userGRN)).thenReturn(ImmutableSet.of(roleId));
    when(permissionResolver.resolveStringPermission(roleId)).thenReturn(ImmutableSet.of("perm:from:role"));
    assertThat(userService.getPermissionsForUser(user).stream().map(p -> p instanceof CaseSensitiveWildcardPermission ? p.toString() : p).collect(Collectors.toSet())).containsExactlyInAnyOrder("users:passwordchange:user", "users:edit:user", "foo:bar", "hello:world", "users:tokenlist:user", "users:tokencreate:user", "users:tokenremove:user", "perm:from:grant", ownerShipPermission, "perm:from:role");
}

Example 4 with CaseSensitiveWildcardPermission

use of org.graylog.security.permissions.CaseSensitiveWildcardPermission in project graylog2-server by Graylog2.

the class UserServiceImpl method getPermissionsForUser.

@Override
public List<Permission> getPermissionsForUser(User user) {
    final GRN principal = grnRegistry.ofUser(user);
    final ImmutableSet.Builder<Permission> permSet = ImmutableSet.<Permission>builder().addAll(user.getPermissions().stream().map(CaseSensitiveWildcardPermission::new).collect(Collectors.toSet())).addAll(permissionAndRoleResolver.resolvePermissionsForPrincipal(principal)).addAll(getUserPermissionsFromRoles(user).stream().map(CaseSensitiveWildcardPermission::new).collect(Collectors.toSet()));
    return permSet.build().asList();
}