inteligr8/alfresco-community-repo
1
0
Fork 0
mirror of https://github.com/Alfresco/alfresco-community-repo.git synced 2025-08-07 17:49:17 +00:00
Code Issues Packages Projects Releases Wiki Activity

RM capabilities: no op impl for RM_QUERY; First cut of Action security wrappers; Tidy up for new access API and config changes to support it across all public services (except AVM)

Browse Source 
git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@15186 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
This commit is contained in:
Andrew Hind
2009-07-14 20:05:58 +00:00
parent 7f0e03e131
commit 0848671c81
3 changed files with 44 additions and 35 deletions
Download Patch File Download Diff File Expand all files Collapse all files

47
source/java/org/alfresco/repo/security/permissions/impl/PublicServiceAccessServiceImpl.java
View File

@@ -36,7 +36,6 @@ import org.springframework.beans.factory.BeanFactory;
import org.springframework.beans.factory.BeanFactoryAware;
import org.springframework.beans.factory.ListableBeanFactory;
public class PublicServiceAccessServiceImpl implements PublicServiceAccessService, BeanFactoryAware
{
@@ -44,36 +43,46 @@ public class PublicServiceAccessServiceImpl implements PublicServiceAccessServic
public AccessStatus hasAccess(String publicService, String methodName, Object... args)
{
MethodSecurityInterceptor msi = (MethodSecurityInterceptor)beanFactory.getBean(publicService+"_security");
if(msi == null)
Object interceptor = beanFactory.getBean(publicService + "_security");
if (interceptor == null)
{
throw new UnsupportedOperationException("Unknown public service security implementation "+publicService);
throw new UnsupportedOperationException("Unknown public service security implementation " + publicService);
}
MethodInvocation methodInvocation = null;
Object publicServiceImpl = beanFactory.getBean(publicService);
for(Method method : publicServiceImpl.getClass().getMethods())
if (interceptor instanceof AlwaysProceedMethodInterceptor)
{
if(method.getName().equals(methodName))
return AccessStatus.ALLOWED;
}
if (interceptor instanceof MethodSecurityInterceptor)
{
MethodSecurityInterceptor msi = (MethodSecurityInterceptor) interceptor;
MethodInvocation methodInvocation = null;
Object publicServiceImpl = beanFactory.getBean(publicService);
for (Method method : publicServiceImpl.getClass().getMethods())
{
if(method.getParameterTypes().length == args.length)
if (method.getName().equals(methodName))
{
methodInvocation = new ReflectiveMethodInvocation(null, null, method, args, null, null);
if (method.getParameterTypes().length == args.length)
{
methodInvocation = new ReflectiveMethodInvocation(null, null, method, args, null, null);
}
}
}
if (methodInvocation == null)
{
throw new UnsupportedOperationException("Unknown public service security implementation " + publicService + "." + methodName);
}
return msi.pre(methodInvocation);
}
if(methodInvocation == null)
{
throw new UnsupportedOperationException("Unknown public service security implementation "+publicService+"."+methodName);
}
return msi.pre(methodInvocation);
throw new UnsupportedOperationException("Unknown security interceptor "+interceptor.getClass());
}
public void setBeanFactory(BeanFactory beanFactory) throws BeansException
{
this.beanFactory = (ListableBeanFactory)beanFactory;
this.beanFactory = (ListableBeanFactory) beanFactory;
}
}

2
source/java/org/alfresco/repo/security/permissions/impl/acegi/ACLEntryVoter.java
View File

@@ -256,7 +256,7 @@ public class ACLEntryVoter implements AccessDecisionVoter, InitializingBean
if (supportedDefinitions.size() == 0)
{
return AccessDecisionVoter.ACCESS_GRANTED;
return AccessDecisionVoter.ACCESS_ABSTAIN;
}
MethodInvocation invocation = (MethodInvocation) object;