mirror of
https://github.com/Alfresco/alfresco-community-repo.git
synced 2025-08-14 17:58:59 +00:00
ALF-4106: WS call to clear audit entries
- /api/audit/clear/{application}?fromTime={fromTime}&toTime={toTime} git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@22110 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
This commit is contained in:
@@ -38,11 +38,14 @@ public abstract class AbstractAuditWebScript extends DeclarativeWebScript
|
||||
public static final String PARAM_APPLICATION = "application";
|
||||
public static final String PARAM_PATH="path";
|
||||
public static final String PARAM_ENABLED = "enabled";
|
||||
public static final String PARAM_FROM_TIME = "fromTime";
|
||||
public static final String PARAM_TO_TIME = "toTime";
|
||||
|
||||
public static final String JSON_KEY_ENABLED = "enabled";
|
||||
public static final String JSON_KEY_APPLICATIONS = "applications";
|
||||
public static final String JSON_KEY_NAME = "name";
|
||||
public static final String JSON_KEY_PATH = "path";
|
||||
public static final String JSON_KEY_CLEARED = "cleared";
|
||||
|
||||
/**
|
||||
* Logger that can be used by subclasses.
|
||||
@@ -113,4 +116,30 @@ public abstract class AbstractAuditWebScript extends DeclarativeWebScript
|
||||
String enableStr = req.getParameter(PARAM_ENABLED);
|
||||
return Boolean.parseBoolean(enableStr);
|
||||
}
|
||||
|
||||
protected Long getFromTime(WebScriptRequest req)
|
||||
{
|
||||
String timeStr = req.getParameter(PARAM_FROM_TIME);
|
||||
try
|
||||
{
|
||||
return Long.parseLong(timeStr);
|
||||
}
|
||||
catch (NumberFormatException e)
|
||||
{
|
||||
return null;
|
||||
}
|
||||
}
|
||||
|
||||
protected Long getToTime(WebScriptRequest req)
|
||||
{
|
||||
String timeStr = req.getParameter(PARAM_TO_TIME);
|
||||
try
|
||||
{
|
||||
return Long.parseLong(timeStr);
|
||||
}
|
||||
catch (NumberFormatException e)
|
||||
{
|
||||
return null;
|
||||
}
|
||||
}
|
||||
}
|
||||
|
@@ -0,0 +1,67 @@
|
||||
/*
|
||||
* Copyright (C) 2005-2010 Alfresco Software Limited.
|
||||
*
|
||||
* This file is part of Alfresco
|
||||
*
|
||||
* Alfresco is free software: you can redistribute it and/or modify
|
||||
* it under the terms of the GNU Lesser General Public License as published by
|
||||
* the Free Software Foundation, either version 3 of the License, or
|
||||
* (at your option) any later version.
|
||||
*
|
||||
* Alfresco is distributed in the hope that it will be useful,
|
||||
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||
* GNU Lesser General Public License for more details.
|
||||
*
|
||||
* You should have received a copy of the GNU Lesser General Public License
|
||||
* along with Alfresco. If not, see <http://www.gnu.org/licenses/>.
|
||||
*/
|
||||
package org.alfresco.repo.web.scripts.audit;
|
||||
|
||||
import java.util.HashMap;
|
||||
import java.util.Map;
|
||||
|
||||
import org.alfresco.service.cmr.audit.AuditService.AuditApplication;
|
||||
import org.springframework.extensions.webscripts.Cache;
|
||||
import org.springframework.extensions.webscripts.Status;
|
||||
import org.springframework.extensions.webscripts.WebScriptException;
|
||||
import org.springframework.extensions.webscripts.WebScriptRequest;
|
||||
|
||||
/**
|
||||
* @author Derek Hulley
|
||||
* @since 3.4
|
||||
*/
|
||||
public class AuditClearPost extends AbstractAuditWebScript
|
||||
{
|
||||
@Override
|
||||
protected Map<String, Object> executeImpl(WebScriptRequest req, Status status, Cache cache)
|
||||
{
|
||||
Map<String, Object> model = new HashMap<String, Object>(7);
|
||||
|
||||
String appName = getAppName(req);
|
||||
if (appName == null)
|
||||
{
|
||||
throw new WebScriptException(Status.STATUS_BAD_REQUEST, "audit.err.app.notProvided");
|
||||
}
|
||||
AuditApplication app = auditService.getAuditApplications().get(appName);
|
||||
if (app == null)
|
||||
{
|
||||
throw new WebScriptException(Status.STATUS_NOT_FOUND, "audit.err.app.notFound", appName);
|
||||
}
|
||||
// Get from/to times
|
||||
Long fromTime = getFromTime(req); // might be null
|
||||
Long toTime = getToTime(req); // might be null
|
||||
|
||||
// Clear
|
||||
int cleared = auditService.clearAudit(appName, fromTime, toTime);
|
||||
|
||||
model.put(JSON_KEY_CLEARED, cleared);
|
||||
|
||||
// Done
|
||||
if (logger.isDebugEnabled())
|
||||
{
|
||||
logger.debug("Result: \n\tRequest: " + req + "\n\tModel: " + model);
|
||||
}
|
||||
return model;
|
||||
}
|
||||
}
|
@@ -55,7 +55,7 @@ public class AuditControlGet extends AbstractAuditWebScript
|
||||
AuditApplication app = appsByName.get(appName);
|
||||
if (app == null)
|
||||
{
|
||||
throw new WebScriptException(Status.STATUS_NOT_FOUND, "audit.err.app.notFound", app);
|
||||
throw new WebScriptException(Status.STATUS_NOT_FOUND, "audit.err.app.notFound", appName);
|
||||
}
|
||||
// Discard all the other applications
|
||||
appsByName = Collections.singletonMap(appName, app);
|
||||
|
@@ -21,10 +21,13 @@ package org.alfresco.repo.web.scripts.audit;
|
||||
import java.util.Map;
|
||||
|
||||
import org.alfresco.repo.content.MimetypeMap;
|
||||
import org.alfresco.repo.security.authentication.AuthenticationException;
|
||||
import org.alfresco.repo.security.authentication.AuthenticationUtil;
|
||||
import org.alfresco.repo.security.authentication.AuthenticationUtil.RunAsWork;
|
||||
import org.alfresco.repo.web.scripts.BaseWebScriptTest;
|
||||
import org.alfresco.service.cmr.audit.AuditService;
|
||||
import org.alfresco.service.cmr.audit.AuditService.AuditApplication;
|
||||
import org.alfresco.service.cmr.security.AuthenticationService;
|
||||
import org.json.JSONArray;
|
||||
import org.json.JSONObject;
|
||||
import org.springframework.context.ApplicationContext;
|
||||
@@ -42,6 +45,7 @@ public class AuditWebScriptTest extends BaseWebScriptTest
|
||||
{
|
||||
private ApplicationContext ctx;
|
||||
private AuditService auditService;
|
||||
private AuthenticationService authenticationService;
|
||||
private String admin;
|
||||
private boolean globallyEnabled;
|
||||
|
||||
@@ -50,6 +54,7 @@ public class AuditWebScriptTest extends BaseWebScriptTest
|
||||
{
|
||||
super.setUp();
|
||||
ctx = getServer().getApplicationContext();
|
||||
authenticationService = (AuthenticationService) ctx.getBean("AuthenticationService");
|
||||
auditService = (AuditService) ctx.getBean("AuditService");
|
||||
admin = AuthenticationUtil.getAdminUserName();
|
||||
|
||||
@@ -205,4 +210,67 @@ public class AuditWebScriptTest extends BaseWebScriptTest
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
public void testClearAuditRepo() throws Exception
|
||||
{
|
||||
long now = System.currentTimeMillis();
|
||||
long future = Long.MAX_VALUE;
|
||||
|
||||
|
||||
boolean wasRepoEnabled = auditService.isAuditEnabled(APP_REPO_NAME, APP_REPO_PATH);
|
||||
boolean wasEnabled = auditService.isAuditEnabled();
|
||||
// We need to set this back after the test
|
||||
try
|
||||
{
|
||||
auditService.setAuditEnabled(true);
|
||||
auditService.enableAudit(APP_REPO_NAME, APP_REPO_PATH);
|
||||
|
||||
// Force a failed login
|
||||
RunAsWork<Void> failureWork = new RunAsWork<Void>()
|
||||
{
|
||||
@Override
|
||||
public Void doWork() throws Exception
|
||||
{
|
||||
try
|
||||
{
|
||||
authenticationService.authenticate("domino", "crud".toCharArray());
|
||||
fail("Failed to force authentication failure");
|
||||
}
|
||||
catch (AuthenticationException e)
|
||||
{
|
||||
// Expected
|
||||
}
|
||||
return null;
|
||||
}
|
||||
};
|
||||
AuthenticationUtil.runAs(failureWork, AuthenticationUtil.getSystemUserName());
|
||||
|
||||
// Delete audit entries that could not have happened
|
||||
String url = "/api/audit/clear/" + APP_REPO_NAME + "?fromTime=" + future;
|
||||
TestWebScriptServer.PostRequest req = new TestWebScriptServer.PostRequest(url, "", MimetypeMap.MIMETYPE_JSON);
|
||||
Response response = sendRequest(req, Status.STATUS_OK, admin);
|
||||
JSONObject json = new JSONObject(response.getContentAsString());
|
||||
int cleared = json.getInt(AbstractAuditWebScript.JSON_KEY_CLEARED);
|
||||
assertEquals("Could not have cleared more than 0", 0, cleared);
|
||||
|
||||
url = "/api/audit/clear/" + APP_REPO_NAME + "?fromTime=" + now + "&toTime=" + future;
|
||||
req = new TestWebScriptServer.PostRequest(url, "", MimetypeMap.MIMETYPE_JSON);
|
||||
response = sendRequest(req, Status.STATUS_OK, admin);
|
||||
json = new JSONObject(response.getContentAsString());
|
||||
cleared = json.getInt(AbstractAuditWebScript.JSON_KEY_CLEARED);
|
||||
assertTrue("Should have cleared at least 1 entry", cleared > 0);
|
||||
}
|
||||
finally
|
||||
{
|
||||
if (wasRepoEnabled)
|
||||
{
|
||||
auditService.enableAudit(APP_REPO_NAME, APP_REPO_PATH);
|
||||
}
|
||||
else
|
||||
{
|
||||
auditService.disableAudit(APP_REPO_NAME, APP_REPO_PATH);
|
||||
}
|
||||
auditService.setAuditEnabled(wasEnabled);
|
||||
}
|
||||
}
|
||||
}
|
||||
|
Reference in New Issue
Block a user