RM-1572 (It's possible to file report to closed folder)

git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/modules/recordsmanagement/HEAD@74931 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261

rm-server/source/java/org/alfresco/module/org_alfresco_module_rm/action/impl/FileReportAction.java

@@ -21,6 +21,7 @@ package org.alfresco.module.org_alfresco_module_rm.action.impl;
 import org.alfresco.error.AlfrescoRuntimeException;
 import org.alfresco.model.ContentModel;
 import org.alfresco.module.org_alfresco_module_rm.action.RMActionExecuterAbstractBase;
+import org.alfresco.module.org_alfresco_module_rm.capability.CapabilityService;
 import org.alfresco.module.org_alfresco_module_rm.report.Report;
 import org.alfresco.module.org_alfresco_module_rm.report.ReportModel;
 import org.alfresco.module.org_alfresco_module_rm.report.ReportService;
@@ -30,6 +31,7 @@ import org.alfresco.repo.security.authentication.AuthenticationUtil;
 import org.alfresco.repo.security.authentication.AuthenticationUtil.RunAsWork;
 import org.alfresco.service.cmr.action.Action;
 import org.alfresco.service.cmr.repository.NodeRef;
+import org.alfresco.service.cmr.security.AccessStatus;
 import org.alfresco.service.namespace.QName;
 import org.apache.commons.lang.StringUtils;
 import org.springframework.extensions.surf.util.I18NUtil;
@@ -58,6 +60,9 @@ public class FileReportAction extends RMActionExecuterAbstractBase implements Re
     /** Report service */
     private ReportService reportService;
 
+    /** Capability service */
+    private CapabilityService capabilityService;
+
     /**
      * @return Report service
      */
@@ -66,6 +71,14 @@ public class FileReportAction extends RMActionExecuterAbstractBase implements Re
         return this.reportService;
     }
 
+    /**
+     * @return Capability service
+     */
+    protected CapabilityService getCapabilityService()
+    {
+        return this.capabilityService;
+    }
+
     /**
      * @param reportService report service
      */
@@ -74,6 +87,14 @@ public class FileReportAction extends RMActionExecuterAbstractBase implements Re
         this.reportService = reportService;
     }
 
+    /**
+     * @param capabilityService capability service
+     */
+    public void setCapabilityService(CapabilityService capabilityService)
+    {
+        this.capabilityService = capabilityService;
+    }
+
     /**
      * @see org.alfresco.repo.action.executer.ActionExecuterAbstractBase#executeImpl(org.alfresco.service.cmr.action.Action,
      *      org.alfresco.service.cmr.repository.NodeRef)
@@ -94,6 +115,9 @@ public class FileReportAction extends RMActionExecuterAbstractBase implements Re
         // get the destination
         final NodeRef destination = getDestination(action);
 
+        // Check the filing permission only capability for the destination
+        checkFilingPermissionOnlyCapability(destination);
+
         // generate the report
         final Report report = getReportService().generateReport(reportType, actionedUponNodeRef, mimetype);
 
@@ -112,6 +136,19 @@ public class FileReportAction extends RMActionExecuterAbstractBase implements Re
         action.setParameterValue(ActionExecuterAbstractBase.PARAM_RESULT, filedReportName);
     }
 
+    /**
+     * Checks if the destination is frozen, closed, cut off or not. In case if it is an exception will be thrown.
+     *
+     * @param nodeRef The destination node reference for which the capability should be checked
+     */
+    private void checkFilingPermissionOnlyCapability(NodeRef nodeRef)
+    {
+        if (AccessStatus.DENIED.equals(capabilityService.getCapability("FillingPermissionOnly").hasPermission(nodeRef)))
+        {
+            throw new AlfrescoRuntimeException("The destination is either frozen, closed or cut off!");
+        }
+    }
+
     /**
      * Retrieves the value of the given parameter. If the parameter has not been
      * passed from the UI an error will be thrown