mirror of
https://github.com/Alfresco/alfresco-community-repo.git
synced 2025-08-07 17:49:17 +00:00
ALF-3952 fix part 2: Search/Read Permissions Evaluation Performance
- added unit tests - updated ehcache cluster sample config git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@21434 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
This commit is contained in:
Steven Glover
@@ -497,6 +497,23 @@
|
|||||||
replicateAsynchronously = false"/>
|
replicateAsynchronously = false"/>
|
||||||
</cache>
|
</cache>
|
||||||
|
|
||||||
|
<cache
|
||||||
|
name="org.alfresco.cache.readersCache"
|
||||||
|
maxElementsInMemory="10000"
|
||||||
|
eternal="true"
|
||||||
|
overflowToDisk="false"
|
||||||
|
statistics="false"
|
||||||
|
>
|
||||||
|
|
||||||
|
<cacheEventListenerFactory
|
||||||
|
class="net.sf.ehcache.distribution.RMICacheReplicatorFactory"
|
||||||
|
properties="replicatePuts = false,
|
||||||
|
replicateUpdates = true,
|
||||||
|
replicateRemovals = true,
|
||||||
|
replicateUpdatesViaCopy = false,
|
||||||
|
replicateAsynchronously = false"/>
|
||||||
|
</cache>
|
||||||
|
|
||||||
<cache
|
<cache
|
||||||
name="org.alfresco.cache.nodeOwnerCache"
|
name="org.alfresco.cache.nodeOwnerCache"
|
||||||
maxElementsInMemory="20000"
|
maxElementsInMemory="20000"
|
||||||
|
|||||||
@@ -0,0 +1,686 @@
|
|||||||
|
package org.alfresco.repo.security.permissions.impl;
|
||||||
|
|
||||||
|
import java.io.Serializable;
|
||||||
|
import java.util.HashMap;
|
||||||
|
import java.util.Map;
|
||||||
|
import java.util.Random;
|
||||||
|
|
||||||
|
import javax.transaction.Status;
|
||||||
|
import javax.transaction.UserTransaction;
|
||||||
|
|
||||||
|
import junit.framework.TestCase;
|
||||||
|
|
||||||
|
import org.alfresco.model.ContentModel;
|
||||||
|
import org.alfresco.repo.avm.AVMNodeConverter;
|
||||||
|
import org.alfresco.repo.content.MimetypeMap;
|
||||||
|
import org.alfresco.repo.domain.node.NodeDAO;
|
||||||
|
import org.alfresco.repo.domain.permissions.AccessControlListDAO;
|
||||||
|
import org.alfresco.repo.domain.permissions.AclDAO;
|
||||||
|
import org.alfresco.repo.search.IndexerAndSearcher;
|
||||||
|
import org.alfresco.repo.search.impl.lucene.ADMLuceneIndexer;
|
||||||
|
import org.alfresco.repo.security.authentication.AuthenticationComponent;
|
||||||
|
import org.alfresco.repo.security.authentication.AuthenticationUtil;
|
||||||
|
import org.alfresco.repo.security.authentication.MutableAuthenticationDao;
|
||||||
|
import org.alfresco.repo.security.authority.AuthorityDAO;
|
||||||
|
import org.alfresco.repo.security.permissions.PermissionServiceSPI;
|
||||||
|
import org.alfresco.repo.transaction.RetryingTransactionHelper;
|
||||||
|
import org.alfresco.repo.transaction.RetryingTransactionHelper.RetryingTransactionCallback;
|
||||||
|
import org.alfresco.service.ServiceRegistry;
|
||||||
|
import org.alfresco.service.cmr.avm.AVMNodeDescriptor;
|
||||||
|
import org.alfresco.service.cmr.avm.AVMService;
|
||||||
|
import org.alfresco.service.cmr.dictionary.DictionaryService;
|
||||||
|
import org.alfresco.service.cmr.model.FileFolderService;
|
||||||
|
import org.alfresco.service.cmr.repository.ContentWriter;
|
||||||
|
import org.alfresco.service.cmr.repository.NodeRef;
|
||||||
|
import org.alfresco.service.cmr.repository.NodeService;
|
||||||
|
import org.alfresco.service.cmr.repository.StoreRef;
|
||||||
|
import org.alfresco.service.cmr.security.AuthorityService;
|
||||||
|
import org.alfresco.service.cmr.security.AuthorityType;
|
||||||
|
import org.alfresco.service.cmr.security.MutableAuthenticationService;
|
||||||
|
import org.alfresco.service.cmr.security.OwnableService;
|
||||||
|
import org.alfresco.service.cmr.security.PermissionService;
|
||||||
|
import org.alfresco.service.cmr.security.PersonService;
|
||||||
|
import org.alfresco.service.namespace.NamespacePrefixResolver;
|
||||||
|
import org.alfresco.service.namespace.NamespaceService;
|
||||||
|
import org.alfresco.service.namespace.QName;
|
||||||
|
import org.alfresco.service.transaction.TransactionService;
|
||||||
|
import org.alfresco.util.ApplicationContextHelper;
|
||||||
|
import org.alfresco.wcm.util.WCMUtil;
|
||||||
|
import org.alfresco.wcm.webproject.WebProjectService;
|
||||||
|
import org.springframework.context.ApplicationContext;
|
||||||
|
import org.springframework.orm.hibernate3.LocalSessionFactoryBean;
|
||||||
|
|
||||||
|
public class AbstractReadPermissionTest extends TestCase
|
||||||
|
{
|
||||||
|
protected static ApplicationContext applicationContext = ApplicationContextHelper.getApplicationContext();
|
||||||
|
|
||||||
|
protected static final String ROLE_AUTHENTICATED = "ROLE_AUTHENTICATED";
|
||||||
|
|
||||||
|
protected NodeService nodeService;
|
||||||
|
|
||||||
|
protected DictionaryService dictionaryService;
|
||||||
|
|
||||||
|
protected PermissionServiceSPI permissionService;
|
||||||
|
|
||||||
|
protected MutableAuthenticationService authenticationService;
|
||||||
|
|
||||||
|
protected MutableAuthenticationDao authenticationDAO;
|
||||||
|
|
||||||
|
protected LocalSessionFactoryBean sessionFactory;
|
||||||
|
|
||||||
|
protected NodeRef rootNodeRef;
|
||||||
|
|
||||||
|
protected NamespacePrefixResolver namespacePrefixResolver;
|
||||||
|
|
||||||
|
protected ServiceRegistry serviceRegistry;
|
||||||
|
|
||||||
|
protected NodeRef systemNodeRef;
|
||||||
|
|
||||||
|
protected AuthenticationComponent authenticationComponent;
|
||||||
|
|
||||||
|
protected ModelDAO permissionModelDAO;
|
||||||
|
|
||||||
|
protected PersonService personService;
|
||||||
|
|
||||||
|
protected AuthorityService authorityService;
|
||||||
|
|
||||||
|
protected AuthorityDAO authorityDAO;
|
||||||
|
|
||||||
|
protected NodeDAO nodeDAO;
|
||||||
|
|
||||||
|
protected AclDAO aclDaoComponent;
|
||||||
|
|
||||||
|
protected ADMLuceneIndexer admLuceneIndexer;
|
||||||
|
|
||||||
|
protected RetryingTransactionHelper retryingTransactionHelper;
|
||||||
|
|
||||||
|
protected TransactionService transactionService;
|
||||||
|
|
||||||
|
protected AccessControlListDAO accessControlListDao;
|
||||||
|
|
||||||
|
protected FileFolderService fileFolderService;
|
||||||
|
|
||||||
|
protected OwnableService ownableService;
|
||||||
|
|
||||||
|
protected UserTransaction testTX;
|
||||||
|
|
||||||
|
protected AVMService fService;
|
||||||
|
protected IndexerAndSearcher fIndexerAndSearcher;
|
||||||
|
protected WebProjectService wpService;
|
||||||
|
|
||||||
|
protected boolean logToFile = false;
|
||||||
|
|
||||||
|
protected String[] webAuthorities = new String[] {"Web1", "Web2", "Web3", "Web4", "Web5"};
|
||||||
|
|
||||||
|
protected String[] authorities = new String[] {"Dynamic","1000","1001","Y","Z","X","10_1","avm","100","10","1","01","001","0001"};
|
||||||
|
|
||||||
|
protected String AVMStore = "main" + System.currentTimeMillis();
|
||||||
|
|
||||||
|
final int WEB_COUNT = 100;
|
||||||
|
|
||||||
|
protected final String TEST_RUN = ""+System.currentTimeMillis();
|
||||||
|
protected final String TEST_WEBPROJ_DNS = "testWP-"+TEST_RUN;
|
||||||
|
protected final String TEST_WEBPROJ_NAME = "testSandbox Web Project Display Name - "+TEST_RUN;
|
||||||
|
protected final String TEST_WEBPROJ_TITLE = "This is my title";
|
||||||
|
protected final String TEST_WEBPROJ_DESCRIPTION = "This is my description";
|
||||||
|
protected final String TEST_WEBPROJ_DEFAULT_WEBAPP = WCMUtil.DIR_ROOT;
|
||||||
|
protected final boolean TEST_WEBPROJ_USE_AS_TEMPLATE = true;
|
||||||
|
protected final boolean TEST_WEBPROJ_DONT_USE_AS_TEMPLATE = false;
|
||||||
|
|
||||||
|
protected class Counter
|
||||||
|
{
|
||||||
|
int i = 0;
|
||||||
|
void increment()
|
||||||
|
{
|
||||||
|
i++;
|
||||||
|
}
|
||||||
|
int count()
|
||||||
|
{
|
||||||
|
return i;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
protected int COUNT = 10;
|
||||||
|
protected Counter c01 = new Counter();
|
||||||
|
protected Counter c001 = new Counter();
|
||||||
|
protected Counter c0001 = new Counter();
|
||||||
|
|
||||||
|
private Map<QName, Serializable> createPersonProperties(String userName)
|
||||||
|
{
|
||||||
|
HashMap<QName, Serializable> properties = new HashMap<QName, Serializable>();
|
||||||
|
properties.put(ContentModel.PROP_USERNAME, userName);
|
||||||
|
return properties;
|
||||||
|
}
|
||||||
|
|
||||||
|
protected void createAuthentication(String name)
|
||||||
|
{
|
||||||
|
if(authenticationDAO.userExists(name))
|
||||||
|
{
|
||||||
|
authenticationService.deleteAuthentication(name);
|
||||||
|
}
|
||||||
|
authenticationService.createAuthentication(name, name.toCharArray());
|
||||||
|
if(personService.personExists(name))
|
||||||
|
{
|
||||||
|
personService.deletePerson(name);
|
||||||
|
}
|
||||||
|
personService.createPerson(createPersonProperties(name));
|
||||||
|
}
|
||||||
|
|
||||||
|
protected void createGroup(String name)
|
||||||
|
{
|
||||||
|
authorityService.createAuthority(AuthorityType.GROUP, name);
|
||||||
|
}
|
||||||
|
|
||||||
|
protected void runAs(String userName)
|
||||||
|
{
|
||||||
|
authenticationService.authenticate(userName, userName.toCharArray());
|
||||||
|
assertNotNull(authenticationService.getCurrentUserName());
|
||||||
|
// for(GrantedAuthority authority : woof.getAuthorities())
|
||||||
|
// {
|
||||||
|
// System.out.println("Auth = "+authority.getAuthority());
|
||||||
|
// }
|
||||||
|
|
||||||
|
}
|
||||||
|
|
||||||
|
protected NodeRef[] build1000Nodes(final String authority, final int returnNodes, final boolean inherit)
|
||||||
|
{
|
||||||
|
return build1000Nodes(authority, PermissionService.READ, returnNodes, inherit);
|
||||||
|
}
|
||||||
|
|
||||||
|
protected NodeRef[] buildOwnedNodes(final String authority, final int returnNodes)
|
||||||
|
{
|
||||||
|
runAs("admin");
|
||||||
|
|
||||||
|
final NodeRef[] nodes = new NodeRef[returnNodes];
|
||||||
|
|
||||||
|
RetryingTransactionCallback<Void> cb = new RetryingTransactionCallback<Void>()
|
||||||
|
{
|
||||||
|
public Void execute() throws Throwable
|
||||||
|
{
|
||||||
|
int i = 0;
|
||||||
|
int k = returnNodes > 0 ? 1000/returnNodes : 0;
|
||||||
|
String namePrefix = "simple" + System.currentTimeMillis();
|
||||||
|
|
||||||
|
NodeRef folder = fileFolderService.create(rootNodeRef, namePrefix, ContentModel.TYPE_FOLDER).getNodeRef();
|
||||||
|
|
||||||
|
NodeRef folder_1000 = fileFolderService.create(folder, namePrefix + "-1000-", ContentModel.TYPE_FOLDER).getNodeRef();
|
||||||
|
permissionService.setInheritParentPermissions(folder_1000, false);
|
||||||
|
permissionService.setPermission(folder_1000, authority, PermissionService.READ, true);
|
||||||
|
for(int j = 0; j < 1000; j++)
|
||||||
|
{
|
||||||
|
NodeRef file = fileFolderService.create(folder_1000, namePrefix + "-1000-"+j, ContentModel.TYPE_CONTENT).getNodeRef();
|
||||||
|
ownableService.setOwner(file, authority);
|
||||||
|
|
||||||
|
if(returnNodes > 0)
|
||||||
|
{
|
||||||
|
if(j % k == 0)
|
||||||
|
{
|
||||||
|
nodes[i++] = file;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
return null;
|
||||||
|
}
|
||||||
|
};
|
||||||
|
retryingTransactionHelper.doInTransaction(cb, false, false);
|
||||||
|
|
||||||
|
return nodes;
|
||||||
|
}
|
||||||
|
|
||||||
|
protected void buildNodes(final String user, final String permission, final int n, final boolean inherit)
|
||||||
|
{
|
||||||
|
RetryingTransactionCallback<Void> cb = new RetryingTransactionCallback<Void>()
|
||||||
|
{
|
||||||
|
public Void execute() throws Throwable
|
||||||
|
{
|
||||||
|
String namePrefix = "simple" + System.currentTimeMillis();
|
||||||
|
|
||||||
|
NodeRef folder = fileFolderService.create(rootNodeRef, namePrefix, ContentModel.TYPE_FOLDER).getNodeRef();
|
||||||
|
|
||||||
|
NodeRef folder_n = fileFolderService.create(folder, namePrefix + "-n", ContentModel.TYPE_FOLDER).getNodeRef();
|
||||||
|
permissionService.setInheritParentPermissions(folder_n, false);
|
||||||
|
permissionService.setPermission(folder_n, user, PermissionService.READ, true);
|
||||||
|
for(int j = 0; j < n; j++)
|
||||||
|
{
|
||||||
|
NodeRef file = fileFolderService.create(folder_n, namePrefix + "-n-"+j, ContentModel.TYPE_CONTENT).getNodeRef();
|
||||||
|
if(!inherit)
|
||||||
|
{
|
||||||
|
permissionService.setInheritParentPermissions(file, false);
|
||||||
|
if(permission != null)
|
||||||
|
{
|
||||||
|
permissionService.setPermission(file, user, permission, true);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
return null;
|
||||||
|
}
|
||||||
|
};
|
||||||
|
retryingTransactionHelper.doInTransaction(cb, false, false);
|
||||||
|
}
|
||||||
|
|
||||||
|
protected NodeRef[] build1000Nodes(final String authority, final String permission, final int returnNodes, final boolean inherit)
|
||||||
|
{
|
||||||
|
runAs("admin");
|
||||||
|
|
||||||
|
final NodeRef[] nodes = new NodeRef[returnNodes];
|
||||||
|
|
||||||
|
RetryingTransactionCallback<Void> cb = new RetryingTransactionCallback<Void>()
|
||||||
|
{
|
||||||
|
public Void execute() throws Throwable
|
||||||
|
{
|
||||||
|
int i = 0;
|
||||||
|
int k = returnNodes > 0 ? 1000/returnNodes : 0;
|
||||||
|
String namePrefix = "simple" + System.currentTimeMillis();
|
||||||
|
|
||||||
|
NodeRef folder = fileFolderService.create(rootNodeRef, namePrefix, ContentModel.TYPE_FOLDER).getNodeRef();
|
||||||
|
|
||||||
|
NodeRef folder_1000 = fileFolderService.create(folder, namePrefix + "-1000-", ContentModel.TYPE_FOLDER).getNodeRef();
|
||||||
|
permissionService.setInheritParentPermissions(folder_1000, false);
|
||||||
|
permissionService.setPermission(folder_1000, authority, permission, true);
|
||||||
|
for(int j = 0; j < 1000; j++)
|
||||||
|
{
|
||||||
|
NodeRef file = fileFolderService.create(folder_1000, namePrefix + "-1000-"+j, ContentModel.TYPE_CONTENT).getNodeRef();
|
||||||
|
if(!inherit)
|
||||||
|
{
|
||||||
|
permissionService.setInheritParentPermissions(file, false);
|
||||||
|
permissionService.setPermission(file, authority, permission, true);
|
||||||
|
}
|
||||||
|
if(returnNodes > 0)
|
||||||
|
{
|
||||||
|
if(j % k == 0)
|
||||||
|
{
|
||||||
|
nodes[i++] = file;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
return null;
|
||||||
|
}
|
||||||
|
};
|
||||||
|
retryingTransactionHelper.doInTransaction(cb, false, false);
|
||||||
|
|
||||||
|
return nodes;
|
||||||
|
}
|
||||||
|
|
||||||
|
protected NodeRef[] build1000Nodes(final String authority, final String permission, final boolean inherit)
|
||||||
|
{
|
||||||
|
return build1000Nodes(authority, permission, 0, inherit);
|
||||||
|
}
|
||||||
|
|
||||||
|
protected void build1000NodesReadDenied(final String authority)
|
||||||
|
{
|
||||||
|
runAs("admin");
|
||||||
|
|
||||||
|
RetryingTransactionCallback<Void> cb = new RetryingTransactionCallback<Void>()
|
||||||
|
{
|
||||||
|
public Void execute() throws Throwable
|
||||||
|
{
|
||||||
|
String name = "simple" + System.currentTimeMillis();
|
||||||
|
|
||||||
|
NodeRef folder = fileFolderService.create(rootNodeRef, name, ContentModel.TYPE_FOLDER).getNodeRef();
|
||||||
|
|
||||||
|
NodeRef folder_1001 = fileFolderService.create(folder, name + "-1001", ContentModel.TYPE_FOLDER).getNodeRef();
|
||||||
|
permissionService.setPermission(folder_1001, authority, PermissionService.READ, true);
|
||||||
|
permissionService.setInheritParentPermissions(folder_1001, false);
|
||||||
|
for(int j = 0; j < 1000; j++)
|
||||||
|
{
|
||||||
|
NodeRef file = fileFolderService.create(folder_1001, name + "-1001-"+j, ContentModel.TYPE_CONTENT).getNodeRef();
|
||||||
|
permissionService.setInheritParentPermissions(file, false);
|
||||||
|
permissionService.setPermission(file, authority, PermissionService.READ, false);
|
||||||
|
}
|
||||||
|
|
||||||
|
return null;
|
||||||
|
}
|
||||||
|
};
|
||||||
|
retryingTransactionHelper.doInTransaction(cb, false, false);
|
||||||
|
}
|
||||||
|
|
||||||
|
protected void buildNodes()
|
||||||
|
{
|
||||||
|
final Random random = new Random(42);
|
||||||
|
|
||||||
|
runAs("admin");
|
||||||
|
|
||||||
|
permissionService.setPermission(rootNodeRef, PermissionService.ALL_AUTHORITIES, PermissionService.READ, true);
|
||||||
|
|
||||||
|
for(int ii = 0; ii < COUNT; ii++)
|
||||||
|
{
|
||||||
|
final String namePrefix = "name" + System.currentTimeMillis() + "-";
|
||||||
|
final int i = ii;
|
||||||
|
System.out.println("Loop " + i);
|
||||||
|
RetryingTransactionCallback<Void> cb = new RetryingTransactionCallback<Void>()
|
||||||
|
{
|
||||||
|
|
||||||
|
public Void execute() throws Throwable
|
||||||
|
{
|
||||||
|
NodeRef folder = fileFolderService.create(rootNodeRef, namePrefix + i, ContentModel.TYPE_FOLDER).getNodeRef();
|
||||||
|
|
||||||
|
NodeRef folder_1000 = fileFolderService.create(folder, namePrefix + "1000-"+i, ContentModel.TYPE_FOLDER).getNodeRef();
|
||||||
|
permissionService.setPermission(folder_1000, "1000", PermissionService.READ, true);
|
||||||
|
permissionService.setInheritParentPermissions(folder_1000, false);
|
||||||
|
for(int j = 0; j < 1000; j++)
|
||||||
|
{
|
||||||
|
NodeRef file = fileFolderService.create(folder_1000, namePrefix + "1000-"+i+"-"+j, ContentModel.TYPE_CONTENT).getNodeRef();
|
||||||
|
//permissionService.setInheritParentPermissions(file, false);
|
||||||
|
//permissionService.setPermission(file, "1000", PermissionService.READ, true);
|
||||||
|
}
|
||||||
|
|
||||||
|
NodeRef folder_100 = fileFolderService.create(folder, namePrefix + "100-"+i, ContentModel.TYPE_FOLDER).getNodeRef();
|
||||||
|
permissionService.setPermission(folder_100, "100", PermissionService.READ, true);
|
||||||
|
permissionService.setInheritParentPermissions(folder_100, false);
|
||||||
|
for(int j = 0; j < 100; j++)
|
||||||
|
{
|
||||||
|
NodeRef file = fileFolderService.create(folder_100, namePrefix + "100-"+i+"-"+j, ContentModel.TYPE_CONTENT).getNodeRef();
|
||||||
|
}
|
||||||
|
|
||||||
|
NodeRef folder_10 = fileFolderService.create(folder, namePrefix + "10-"+i, ContentModel.TYPE_FOLDER).getNodeRef();
|
||||||
|
permissionService.setPermission(folder_10, "10", PermissionService.READ, true);
|
||||||
|
permissionService.setInheritParentPermissions(folder_10, false);
|
||||||
|
for(int j = 0; j < 10; j++)
|
||||||
|
{
|
||||||
|
NodeRef file = fileFolderService.create(folder_10, namePrefix + "10-"+i+"-"+j, ContentModel.TYPE_CONTENT).getNodeRef();
|
||||||
|
}
|
||||||
|
|
||||||
|
NodeRef folder_10_1 = fileFolderService.create(folder, namePrefix + "10_1-"+i, ContentModel.TYPE_FOLDER).getNodeRef();
|
||||||
|
permissionService.setPermission(folder_10_1, "GROUP_X", PermissionService.READ, true);
|
||||||
|
permissionService.setInheritParentPermissions(folder_10_1, false);
|
||||||
|
for(int j = 0; j < 10; j++)
|
||||||
|
{
|
||||||
|
NodeRef file = fileFolderService.create(folder_10_1, "namePrefix + 10_1-"+i+"-"+j, ContentModel.TYPE_CONTENT).getNodeRef();
|
||||||
|
}
|
||||||
|
|
||||||
|
NodeRef folder_1 = fileFolderService.create(folder, namePrefix + "1"+i, ContentModel.TYPE_FOLDER).getNodeRef();
|
||||||
|
permissionService.setPermission(folder_1, "1", PermissionService.READ, true);
|
||||||
|
permissionService.setInheritParentPermissions(folder_1, false);
|
||||||
|
NodeRef file = fileFolderService.create(folder_1, namePrefix + "1-1-1", ContentModel.TYPE_CONTENT).getNodeRef();
|
||||||
|
|
||||||
|
double rn = random.nextDouble();
|
||||||
|
|
||||||
|
if(rn < 0.1)
|
||||||
|
{
|
||||||
|
NodeRef rf = fileFolderService.create(folder, namePrefix + "0.1", ContentModel.TYPE_CONTENT).getNodeRef();
|
||||||
|
//permissionService.setPermission(rf, "01", PermissionService.READ, true);
|
||||||
|
//permissionService.setInheritParentPermissions(rf, false);
|
||||||
|
c01.increment();
|
||||||
|
}
|
||||||
|
|
||||||
|
if(rn < 0.01)
|
||||||
|
{
|
||||||
|
NodeRef rf = fileFolderService.create(folder, namePrefix + "0.01", ContentModel.TYPE_CONTENT).getNodeRef();
|
||||||
|
//permissionService.setPermission(rf, "001", PermissionService.READ, true);
|
||||||
|
//permissionService.setInheritParentPermissions(rf, false);
|
||||||
|
c001.increment();
|
||||||
|
}
|
||||||
|
|
||||||
|
if(rn < 0.001)
|
||||||
|
{
|
||||||
|
NodeRef rf = fileFolderService.create(folder, namePrefix + "0.001", ContentModel.TYPE_CONTENT).getNodeRef();
|
||||||
|
//permissionService.setPermission(rf, "0001", PermissionService.READ, true);
|
||||||
|
//permissionService.setInheritParentPermissions(rf, false);
|
||||||
|
c0001.increment();
|
||||||
|
}
|
||||||
|
return null;
|
||||||
|
}
|
||||||
|
};
|
||||||
|
retryingTransactionHelper.doInTransaction(cb, false, false);
|
||||||
|
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
protected void setupBasicTree(final String authority) throws Exception
|
||||||
|
{
|
||||||
|
runAs("admin");
|
||||||
|
|
||||||
|
final String[] dirs = new String[] {"a", "a/b", "a/b/c", "a/b/c/d", "e", "e/f", "e/f/g", "e/f/g/h", "x", "x/y"};
|
||||||
|
|
||||||
|
for(int j = 0; j < dirs.length; j++)
|
||||||
|
{
|
||||||
|
String path = dirs[j];
|
||||||
|
String dir;
|
||||||
|
String file;
|
||||||
|
int k = path.lastIndexOf('/');
|
||||||
|
if(k == -1)
|
||||||
|
{
|
||||||
|
dir = "";
|
||||||
|
file = path;
|
||||||
|
}
|
||||||
|
else
|
||||||
|
{
|
||||||
|
dir = path.substring(0, k);
|
||||||
|
file = path.substring(k+1);
|
||||||
|
}
|
||||||
|
fService.createDirectory(AVMStore + ":/" + dir, file);
|
||||||
|
}
|
||||||
|
|
||||||
|
// fService.createDirectory("main:/", "a");
|
||||||
|
// fService.createDirectory("main:/a", "b");
|
||||||
|
// fService.createDirectory("main:/a/b", "c");
|
||||||
|
// fService.createDirectory("main:/", "d");
|
||||||
|
// fService.createDirectory("main:/d", "e");
|
||||||
|
// fService.createDirectory("main:/d/e", "f");
|
||||||
|
|
||||||
|
// desc = avmService.lookup(-1, storeName + ":/base");
|
||||||
|
// nodeRef = AVMNodeConverter.ToNodeRef(-1, desc.getPath());
|
||||||
|
// permissionService.setPermission(nodeRef, PermissionService.ALL_AUTHORITIES, PermissionService.ALL_PERMISSIONS, true);
|
||||||
|
// permissionService.deletePermission(nodeRef, PermissionService.ALL_AUTHORITIES, PermissionService.ALL_PERMISSIONS);
|
||||||
|
|
||||||
|
AVMNodeDescriptor nodeDesc = fService.lookup(-1, AVMStore + ":/");
|
||||||
|
NodeRef nodeRef = AVMNodeConverter.ToNodeRef(-1, nodeDesc.getPath());
|
||||||
|
//permissionService.setPermission(nodeRef, "1", PermissionService.READ, true);
|
||||||
|
|
||||||
|
// for(int ii = 0; ii < COUNT; ii++)
|
||||||
|
// {
|
||||||
|
// final int i = ii;
|
||||||
|
// final int j =
|
||||||
|
// if(ii % 100 == 0)
|
||||||
|
// {
|
||||||
|
// System.out.println("Loop " + i);
|
||||||
|
// }
|
||||||
|
RetryingTransactionCallback<Void> cb = new RetryingTransactionCallback<Void>()
|
||||||
|
{
|
||||||
|
public Void execute() throws Throwable
|
||||||
|
{
|
||||||
|
for(int i = 0; i < WEB_COUNT; i++)
|
||||||
|
{
|
||||||
|
if(i % 100 == 0)
|
||||||
|
{
|
||||||
|
System.out.println("Loop " + i);
|
||||||
|
}
|
||||||
|
int j = i % webAuthorities.length;
|
||||||
|
|
||||||
|
String dir = AVMStore + ":/" + dirs[i % 10];
|
||||||
|
String file = "foo" + i;
|
||||||
|
String path = dir + "/" + file;
|
||||||
|
|
||||||
|
fService.createFile(dir, file).close();
|
||||||
|
ContentWriter writer = fService.getContentWriter(path, true);
|
||||||
|
writer.setEncoding("UTF-8");
|
||||||
|
writer.setMimetype(MimetypeMap.MIMETYPE_TEXT_PLAIN);
|
||||||
|
//writer.putContent("I am " + path);
|
||||||
|
writer.putContent("I am main");
|
||||||
|
|
||||||
|
//String authority = webAuthorities[j];
|
||||||
|
NodeRef nodeRef = AVMNodeConverter.ToNodeRef(-1, path);
|
||||||
|
permissionService.setPermission(nodeRef, authority, PermissionService.READ, true);
|
||||||
|
permissionService.setInheritParentPermissions(nodeRef, false);
|
||||||
|
}
|
||||||
|
|
||||||
|
return null;
|
||||||
|
}
|
||||||
|
};
|
||||||
|
retryingTransactionHelper.doInTransaction(cb, false, false);
|
||||||
|
//}
|
||||||
|
|
||||||
|
// fService.createDirectory("main:/", "a");
|
||||||
|
// fService.createDirectory("main:/a", "b");
|
||||||
|
// fService.createDirectory("main:/a/b", "c");
|
||||||
|
// fService.createDirectory("main:/", "d");
|
||||||
|
// fService.createDirectory("main:/d", "e");
|
||||||
|
// fService.createDirectory("main:/d/e", "f");
|
||||||
|
//
|
||||||
|
// AVMNodeDescriptor nodeDesc = fService.lookup(-1, "main:/");
|
||||||
|
// NodeRef nodeRef = AVMNodeConverter.ToNodeRef(-1, nodeDesc.getPath());
|
||||||
|
// permissionService.setPermission(nodeRef, "1", PermissionService.READ, true);
|
||||||
|
|
||||||
|
// fService.createFile("main:/a/b/c", "foo").close();
|
||||||
|
// ContentWriter writer = fService.getContentWriter("main:/a/b/c/foo", true);
|
||||||
|
// writer.setEncoding("UTF-8");
|
||||||
|
// writer.setMimetype(MimetypeMap.MIMETYPE_TEXT_PLAIN);
|
||||||
|
// writer.putContent("I am main:/a/b/c/foo");
|
||||||
|
|
||||||
|
// AVMNodeDescriptor nodeDesc = fService.lookup(-1, "main:/a/b/c/foo");
|
||||||
|
// NodeRef nodeRef = AVMNodeConverter.ToNodeRef(-1, nodeDesc.getPath());
|
||||||
|
// permissionService.setPermission(nodeRef, "1", PermissionService.READ, true);
|
||||||
|
|
||||||
|
// fService.createFile("main:/a/b/c", "bar").close();
|
||||||
|
// writer = fService.getContentWriter("main:/a/b/c/bar", true);
|
||||||
|
// writer.setEncoding("UTF-8");
|
||||||
|
// writer.setMimetype(MimetypeMap.MIMETYPE_TEXT_PLAIN);
|
||||||
|
// writer.putContent("I am main:/a/b/c/bar");
|
||||||
|
|
||||||
|
// nodeDesc = fService.lookup(-1, "main:/a/b/c/foo");
|
||||||
|
// nodeRef = AVMNodeConverter.ToNodeRef(-1, nodeDesc.getPath());
|
||||||
|
// permissionService.setPermission(nodeRef, "1", PermissionService.READ, true);
|
||||||
|
|
||||||
|
fService.createSnapshot(AVMStore, null, null);
|
||||||
|
|
||||||
|
//testTX.commit();
|
||||||
|
}
|
||||||
|
|
||||||
|
protected void deleteAuthentication(String name)
|
||||||
|
{
|
||||||
|
if(authenticationDAO.userExists(name))
|
||||||
|
{
|
||||||
|
authenticationService.deleteAuthentication(name);
|
||||||
|
}
|
||||||
|
if(personService.personExists(name))
|
||||||
|
{
|
||||||
|
personService.deletePerson(name);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
public void setUp() throws Exception
|
||||||
|
{
|
||||||
|
super.setUp();
|
||||||
|
|
||||||
|
nodeService = (NodeService) applicationContext.getBean("nodeService");
|
||||||
|
dictionaryService = (DictionaryService) applicationContext.getBean(ServiceRegistry.DICTIONARY_SERVICE
|
||||||
|
.getLocalName());
|
||||||
|
permissionService = (PermissionServiceSPI) applicationContext.getBean("permissionService");
|
||||||
|
namespacePrefixResolver = (NamespacePrefixResolver) applicationContext
|
||||||
|
.getBean(ServiceRegistry.NAMESPACE_SERVICE.getLocalName());
|
||||||
|
authenticationService = (MutableAuthenticationService) applicationContext.getBean("authenticationService");
|
||||||
|
authenticationComponent = (AuthenticationComponent) applicationContext.getBean("authenticationComponent");
|
||||||
|
serviceRegistry = (ServiceRegistry) applicationContext.getBean(ServiceRegistry.SERVICE_REGISTRY);
|
||||||
|
permissionModelDAO = (ModelDAO) applicationContext.getBean("permissionsModelDAO");
|
||||||
|
personService = (PersonService) applicationContext.getBean("personService");
|
||||||
|
authorityService = (AuthorityService) applicationContext.getBean("authorityService");
|
||||||
|
authorityDAO = (AuthorityDAO) applicationContext.getBean("authorityDAO");
|
||||||
|
accessControlListDao = (AccessControlListDAO) applicationContext.getBean("admNodeACLDAO");
|
||||||
|
fileFolderService = (FileFolderService)applicationContext.getBean("fileFolderService");
|
||||||
|
|
||||||
|
authenticationComponent.setCurrentUser(authenticationComponent.getSystemUserName());
|
||||||
|
authenticationDAO = (MutableAuthenticationDao) applicationContext.getBean("authenticationDao");
|
||||||
|
nodeDAO = (NodeDAO) applicationContext.getBean("nodeDAO");
|
||||||
|
aclDaoComponent = (AclDAO) applicationContext.getBean("aclDAO");
|
||||||
|
|
||||||
|
retryingTransactionHelper = (RetryingTransactionHelper) applicationContext.getBean("retryingTransactionHelper");
|
||||||
|
|
||||||
|
transactionService = (TransactionService) applicationContext.getBean("transactionComponent");
|
||||||
|
|
||||||
|
ownableService = (OwnableService) applicationContext.getBean("ownableService");
|
||||||
|
|
||||||
|
testTX = transactionService.getUserTransaction();
|
||||||
|
testTX.begin();
|
||||||
|
|
||||||
|
StoreRef storeRef = nodeService.createStore(StoreRef.PROTOCOL_WORKSPACE, "Test_" + System.nanoTime());
|
||||||
|
rootNodeRef = nodeService.getRootNode(storeRef);
|
||||||
|
|
||||||
|
QName children = ContentModel.ASSOC_CHILDREN;
|
||||||
|
QName system = QName.createQName(NamespaceService.SYSTEM_MODEL_1_0_URI, "system");
|
||||||
|
QName container = ContentModel.TYPE_CONTAINER;
|
||||||
|
QName types = QName.createQName(NamespaceService.SYSTEM_MODEL_1_0_URI, "people");
|
||||||
|
|
||||||
|
// systemNodeRef = nodeService.createNode(rootNodeRef, children, system, container).getChildRef();
|
||||||
|
// NodeRef typesNodeRef = nodeService.createNode(systemNodeRef, children, types, container).getChildRef();
|
||||||
|
// Map<QName, Serializable> props = createPersonProperties("andy");
|
||||||
|
// nodeService.createNode(typesNodeRef, children, ContentModel.TYPE_PERSON, container, props).getChildRef();
|
||||||
|
// props = createPersonProperties("lemur");
|
||||||
|
// nodeService.createNode(typesNodeRef, children, ContentModel.TYPE_PERSON, container, props).getChildRef();
|
||||||
|
|
||||||
|
// create an authentication object e.g. the user
|
||||||
|
if(authenticationDAO.userExists("andy"))
|
||||||
|
{
|
||||||
|
authenticationService.deleteAuthentication("andy");
|
||||||
|
}
|
||||||
|
authenticationService.createAuthentication("andy", "andy".toCharArray());
|
||||||
|
|
||||||
|
if(authenticationDAO.userExists("lemur"))
|
||||||
|
{
|
||||||
|
authenticationService.deleteAuthentication("lemur");
|
||||||
|
}
|
||||||
|
authenticationService.createAuthentication("lemur", "lemur".toCharArray());
|
||||||
|
|
||||||
|
if(authenticationDAO.userExists(AuthenticationUtil.getAdminUserName()))
|
||||||
|
{
|
||||||
|
authenticationService.deleteAuthentication(AuthenticationUtil.getAdminUserName());
|
||||||
|
}
|
||||||
|
authenticationService.createAuthentication(AuthenticationUtil.getAdminUserName(), "admin".toCharArray());
|
||||||
|
|
||||||
|
authenticationComponent.clearCurrentSecurityContext();
|
||||||
|
|
||||||
|
fService = (AVMService)applicationContext.getBean("AVMService");
|
||||||
|
fIndexerAndSearcher = (IndexerAndSearcher)applicationContext.getBean("indexerAndSearcherFactory");
|
||||||
|
wpService = (WebProjectService)applicationContext.getBean("WebProjectService");
|
||||||
|
|
||||||
|
if (fService.getStore(AVMStore) != null)
|
||||||
|
{
|
||||||
|
fService.purgeStore(AVMStore);
|
||||||
|
}
|
||||||
|
fService.createStore(AVMStore);
|
||||||
|
|
||||||
|
for(String authority : authorities)
|
||||||
|
{
|
||||||
|
createAuthentication(authority);
|
||||||
|
}
|
||||||
|
|
||||||
|
for(String authority : webAuthorities)
|
||||||
|
{
|
||||||
|
createAuthentication(authority);
|
||||||
|
}
|
||||||
|
|
||||||
|
// TODO define permission group to include Read in permissionDefinitions
|
||||||
|
// assign user to new permission group - should be able to read any node?
|
||||||
|
|
||||||
|
createGroup("X");
|
||||||
|
authorityService.addAuthority(authorityService.getName(AuthorityType.GROUP, "X"), "10_1");
|
||||||
|
|
||||||
|
authenticationComponent.clearCurrentSecurityContext();
|
||||||
|
}
|
||||||
|
|
||||||
|
protected void tearDown() throws Exception
|
||||||
|
{
|
||||||
|
// if(fService.getStore(AVMStore) != null)
|
||||||
|
// {
|
||||||
|
// fService.purgeStore(AVMStore);
|
||||||
|
// }
|
||||||
|
// for(String authority : authorities)
|
||||||
|
// {
|
||||||
|
// deleteAuthentication(authority);
|
||||||
|
// }
|
||||||
|
// for(String authority : webAuthorities)
|
||||||
|
// {
|
||||||
|
// deleteAuthentication(authority);
|
||||||
|
// }
|
||||||
|
|
||||||
|
if ((testTX.getStatus() == Status.STATUS_ACTIVE) || (testTX.getStatus() == Status.STATUS_MARKED_ROLLBACK))
|
||||||
|
{
|
||||||
|
testTX.rollback();
|
||||||
|
}
|
||||||
|
AuthenticationUtil.clearCurrentSecurityContext();
|
||||||
|
super.tearDown();
|
||||||
|
}
|
||||||
|
|
||||||
|
}
|
||||||
@@ -0,0 +1,455 @@
|
|||||||
|
package org.alfresco.repo.security.permissions.impl;
|
||||||
|
|
||||||
|
import org.alfresco.model.ContentModel;
|
||||||
|
import org.alfresco.repo.avm.AVMNodeConverter;
|
||||||
|
import org.alfresco.repo.security.authentication.AuthenticationUtil;
|
||||||
|
import org.alfresco.repo.transaction.RetryingTransactionHelper.RetryingTransactionCallback;
|
||||||
|
import org.alfresco.service.cmr.repository.NodeRef;
|
||||||
|
import org.alfresco.service.cmr.repository.StoreRef;
|
||||||
|
import org.alfresco.service.cmr.search.ResultSet;
|
||||||
|
import org.alfresco.service.cmr.search.SearchParameters;
|
||||||
|
import org.alfresco.service.cmr.search.SearchService;
|
||||||
|
import org.alfresco.service.cmr.security.PermissionService;
|
||||||
|
import org.alfresco.service.namespace.QName;
|
||||||
|
|
||||||
|
// Unit tests for ALF-3952 "Search/Read Permissions Evaluation Performance"
|
||||||
|
public class ReadPermissionTest extends AbstractReadPermissionTest
|
||||||
|
{
|
||||||
|
// public void testDynamicAuthority() throws Exception
|
||||||
|
// {
|
||||||
|
// SearchParameters sp;
|
||||||
|
// ResultSet results;
|
||||||
|
//
|
||||||
|
// buildNodes("1001", null, 10, false);
|
||||||
|
//
|
||||||
|
// runAs("1001");
|
||||||
|
//
|
||||||
|
// sp = new SearchParameters();
|
||||||
|
// sp.addStore(rootNodeRef.getStoreRef());
|
||||||
|
// sp.setLanguage(SearchService.LANGUAGE_LUCENE);
|
||||||
|
// sp.setQuery("TYPE:\"cm:content\"");
|
||||||
|
// sp.setMaxItems(Integer.MAX_VALUE);
|
||||||
|
// sp.setMaxPermissionChecks(Integer.MAX_VALUE);
|
||||||
|
// sp.setMaxPermissionCheckTimeMillis(Integer.MAX_VALUE);
|
||||||
|
// results = serviceRegistry.getSearchService().query(sp);
|
||||||
|
// int length = results.length();
|
||||||
|
// results.close();
|
||||||
|
//
|
||||||
|
// assertEquals(10, length);
|
||||||
|
// }
|
||||||
|
|
||||||
|
public void testAdminCanRead()
|
||||||
|
{
|
||||||
|
buildNodes("1001", "Read", 10, true);
|
||||||
|
|
||||||
|
SearchParameters sp;
|
||||||
|
ResultSet results;
|
||||||
|
|
||||||
|
runAs("admin");
|
||||||
|
|
||||||
|
sp = new SearchParameters();
|
||||||
|
sp.addStore(rootNodeRef.getStoreRef());
|
||||||
|
sp.setLanguage(SearchService.LANGUAGE_LUCENE);
|
||||||
|
sp.setQuery("TYPE:\"cm:content\"");
|
||||||
|
sp.setMaxItems(Integer.MAX_VALUE);
|
||||||
|
sp.setMaxPermissionChecks(Integer.MAX_VALUE);
|
||||||
|
sp.setMaxPermissionCheckTimeMillis(Integer.MAX_VALUE);
|
||||||
|
results = serviceRegistry.getSearchService().query(sp);
|
||||||
|
results.setBulkFetch(false);
|
||||||
|
assertEquals(10, results.length());
|
||||||
|
results.close();
|
||||||
|
}
|
||||||
|
|
||||||
|
public void testAVM() throws Exception
|
||||||
|
{
|
||||||
|
try
|
||||||
|
{
|
||||||
|
runAs("admin");
|
||||||
|
|
||||||
|
setupBasicTree("Web1");
|
||||||
|
|
||||||
|
runAs("Web1");
|
||||||
|
|
||||||
|
StoreRef storeRef = AVMNodeConverter.ToStoreRef(AVMStore);
|
||||||
|
long start;
|
||||||
|
long end;
|
||||||
|
SearchParameters sp;
|
||||||
|
ResultSet results;
|
||||||
|
|
||||||
|
// Text index
|
||||||
|
sp = new SearchParameters();
|
||||||
|
sp.addStore(storeRef);
|
||||||
|
sp.setLanguage(SearchService.LANGUAGE_LUCENE);
|
||||||
|
sp.setQuery("TYPE:\"cm:content\"");
|
||||||
|
sp.setMaxItems(Integer.MAX_VALUE);
|
||||||
|
sp.setMaxPermissionChecks(Integer.MAX_VALUE);
|
||||||
|
sp.setMaxPermissionCheckTimeMillis(Integer.MAX_VALUE);
|
||||||
|
start = System.nanoTime();
|
||||||
|
results = serviceRegistry.getSearchService().query(sp);
|
||||||
|
assertEquals(WEB_COUNT, results.length());
|
||||||
|
results.close();
|
||||||
|
end = System.nanoTime();
|
||||||
|
System.out.println("AVM in "+((end-start)/1e9));
|
||||||
|
|
||||||
|
sp = new SearchParameters();
|
||||||
|
sp.addStore(storeRef);
|
||||||
|
sp.setLanguage(SearchService.LANGUAGE_LUCENE);
|
||||||
|
// sp.setQuery("TEXT:\"I am\"");
|
||||||
|
sp.setQuery("TYPE:\"cm:content\"");
|
||||||
|
sp.setMaxItems(Integer.MAX_VALUE);
|
||||||
|
sp.setMaxPermissionChecks(Integer.MAX_VALUE);
|
||||||
|
sp.setMaxPermissionCheckTimeMillis(Integer.MAX_VALUE);
|
||||||
|
start = System.nanoTime();
|
||||||
|
results = serviceRegistry.getSearchService().query(sp);
|
||||||
|
assertEquals(WEB_COUNT, results.length());
|
||||||
|
results.close();
|
||||||
|
end = System.nanoTime();
|
||||||
|
System.out.println("AVM in "+((end-start)/1e9));
|
||||||
|
|
||||||
|
}
|
||||||
|
catch (Exception e)
|
||||||
|
{
|
||||||
|
e.printStackTrace();
|
||||||
|
throw e;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
public void testReadDeny()
|
||||||
|
{
|
||||||
|
SearchParameters sp;
|
||||||
|
ResultSet results;
|
||||||
|
|
||||||
|
build1000NodesReadDenied("1001");
|
||||||
|
|
||||||
|
runAs("1001");
|
||||||
|
|
||||||
|
sp = new SearchParameters();
|
||||||
|
sp.addStore(rootNodeRef.getStoreRef());
|
||||||
|
sp.setLanguage(SearchService.LANGUAGE_LUCENE);
|
||||||
|
sp.setQuery("TYPE:\"cm:content\"");
|
||||||
|
sp.setMaxItems(Integer.MAX_VALUE);
|
||||||
|
sp.setMaxPermissionChecks(Integer.MAX_VALUE);
|
||||||
|
sp.setMaxPermissionCheckTimeMillis(Integer.MAX_VALUE);
|
||||||
|
results = serviceRegistry.getSearchService().query(sp);
|
||||||
|
int length = results.length();
|
||||||
|
results.close();
|
||||||
|
|
||||||
|
assertEquals(0, length);
|
||||||
|
}
|
||||||
|
|
||||||
|
public void testNoRead()
|
||||||
|
{
|
||||||
|
SearchParameters sp;
|
||||||
|
ResultSet results;
|
||||||
|
|
||||||
|
build1000Nodes("1001", PermissionService.WRITE, true);
|
||||||
|
|
||||||
|
runAs("1001");
|
||||||
|
|
||||||
|
sp = new SearchParameters();
|
||||||
|
sp.addStore(rootNodeRef.getStoreRef());
|
||||||
|
sp.setLanguage(SearchService.LANGUAGE_LUCENE);
|
||||||
|
sp.setQuery("TYPE:\"cm:content\"");
|
||||||
|
sp.setMaxItems(Integer.MAX_VALUE);
|
||||||
|
sp.setMaxPermissionChecks(Integer.MAX_VALUE);
|
||||||
|
sp.setMaxPermissionCheckTimeMillis(Integer.MAX_VALUE);
|
||||||
|
results = serviceRegistry.getSearchService().query(sp);
|
||||||
|
int length = results.length();
|
||||||
|
results.close();
|
||||||
|
|
||||||
|
assertEquals(0, length);
|
||||||
|
}
|
||||||
|
|
||||||
|
protected void buildContainers(final String username, final String permission)
|
||||||
|
{
|
||||||
|
runAs("admin");
|
||||||
|
|
||||||
|
RetryingTransactionCallback<Void> cb = new RetryingTransactionCallback<Void>()
|
||||||
|
{
|
||||||
|
public Void execute() throws Throwable
|
||||||
|
{
|
||||||
|
int i = 0;
|
||||||
|
String namePrefix = "simple" + System.currentTimeMillis();
|
||||||
|
|
||||||
|
NodeRef n1 = nodeService.createNode(rootNodeRef, ContentModel.ASSOC_CHILDREN, QName.createQName("{test}01"),
|
||||||
|
ContentModel.TYPE_CONTAINER).getChildRef();
|
||||||
|
permissionService.setPermission(n1, username, permission, true);
|
||||||
|
|
||||||
|
return null;
|
||||||
|
}
|
||||||
|
};
|
||||||
|
retryingTransactionHelper.doInTransaction(cb, false, false);
|
||||||
|
}
|
||||||
|
|
||||||
|
public void testNodeOwner()
|
||||||
|
{
|
||||||
|
SearchParameters sp;
|
||||||
|
ResultSet results;
|
||||||
|
|
||||||
|
buildOwnedNodes("1001", 0);
|
||||||
|
|
||||||
|
runAs(AuthenticationUtil.getAdminUserName());
|
||||||
|
runAs("1001");
|
||||||
|
|
||||||
|
sp = new SearchParameters();
|
||||||
|
sp.addStore(rootNodeRef.getStoreRef());
|
||||||
|
sp.setLanguage(SearchService.LANGUAGE_LUCENE);
|
||||||
|
sp.setQuery("PATH:\"//*\"");
|
||||||
|
sp.setMaxItems(Integer.MAX_VALUE);
|
||||||
|
sp.setMaxPermissionChecks(Integer.MAX_VALUE);
|
||||||
|
sp.setMaxPermissionCheckTimeMillis(Integer.MAX_VALUE);
|
||||||
|
results = serviceRegistry.getSearchService().query(sp);
|
||||||
|
int length = results.length();
|
||||||
|
results.close();
|
||||||
|
|
||||||
|
assertEquals(1001, length); // folder + children
|
||||||
|
}
|
||||||
|
|
||||||
|
public void testChangePermissions()
|
||||||
|
{
|
||||||
|
SearchParameters sp;
|
||||||
|
ResultSet results;
|
||||||
|
|
||||||
|
NodeRef[] nodes = build1000Nodes("1001", 4, false);
|
||||||
|
|
||||||
|
runAs("1001");
|
||||||
|
|
||||||
|
sp = new SearchParameters();
|
||||||
|
sp.addStore(rootNodeRef.getStoreRef());
|
||||||
|
sp.setLanguage(SearchService.LANGUAGE_LUCENE);
|
||||||
|
sp.setQuery("TYPE:\"cm:content\"");
|
||||||
|
sp.setMaxItems(Integer.MAX_VALUE);
|
||||||
|
sp.setMaxPermissionChecks(Integer.MAX_VALUE);
|
||||||
|
sp.setMaxPermissionCheckTimeMillis(Integer.MAX_VALUE);
|
||||||
|
results = serviceRegistry.getSearchService().query(sp);
|
||||||
|
int length = results.length();
|
||||||
|
results.close();
|
||||||
|
|
||||||
|
assertEquals(1000, length);
|
||||||
|
|
||||||
|
for(int i = 0; i < 4; i++)
|
||||||
|
{
|
||||||
|
permissionService.deletePermission(nodes[i], "1001", PermissionService.READ);
|
||||||
|
}
|
||||||
|
|
||||||
|
//setPermission(nodes[0], "10", permission, allow)
|
||||||
|
|
||||||
|
sp = new SearchParameters();
|
||||||
|
sp.addStore(rootNodeRef.getStoreRef());
|
||||||
|
sp.setLanguage(SearchService.LANGUAGE_LUCENE);
|
||||||
|
sp.setQuery("TYPE:\"cm:content\"");
|
||||||
|
sp.setMaxItems(Integer.MAX_VALUE);
|
||||||
|
sp.setMaxPermissionChecks(Integer.MAX_VALUE);
|
||||||
|
sp.setMaxPermissionCheckTimeMillis(Integer.MAX_VALUE);
|
||||||
|
results = serviceRegistry.getSearchService().query(sp);
|
||||||
|
length = results.length();
|
||||||
|
results.close();
|
||||||
|
|
||||||
|
assertEquals(1000-4, length);
|
||||||
|
}
|
||||||
|
|
||||||
|
public void testQueryReadPermission()
|
||||||
|
{
|
||||||
|
buildNodes();
|
||||||
|
|
||||||
|
SearchParameters sp;
|
||||||
|
ResultSet results;
|
||||||
|
|
||||||
|
runAs("1000");
|
||||||
|
|
||||||
|
sp = new SearchParameters();
|
||||||
|
sp.addStore(rootNodeRef.getStoreRef());
|
||||||
|
sp.setLanguage(SearchService.LANGUAGE_LUCENE);
|
||||||
|
sp.setQuery("TYPE:\"cm:content\"");
|
||||||
|
sp.setMaxItems(Integer.MAX_VALUE);
|
||||||
|
sp.setMaxPermissionChecks(Integer.MAX_VALUE);
|
||||||
|
sp.setMaxPermissionCheckTimeMillis(Integer.MAX_VALUE);
|
||||||
|
results = serviceRegistry.getSearchService().query(sp);
|
||||||
|
results.setBulkFetch(false);
|
||||||
|
assertEquals(1000*COUNT, results.length());
|
||||||
|
results.close();
|
||||||
|
|
||||||
|
sp = new SearchParameters();
|
||||||
|
sp.addStore(rootNodeRef.getStoreRef());
|
||||||
|
sp.setLanguage(SearchService.LANGUAGE_LUCENE);
|
||||||
|
sp.setQuery("TYPE:\"cm:content\"");
|
||||||
|
sp.setMaxItems(Integer.MAX_VALUE);
|
||||||
|
sp.setMaxPermissionChecks(Integer.MAX_VALUE);
|
||||||
|
sp.setMaxPermissionCheckTimeMillis(Integer.MAX_VALUE);
|
||||||
|
results = serviceRegistry.getSearchService().query(sp);
|
||||||
|
results.setBulkFetch(false);
|
||||||
|
assertEquals(1000*COUNT, results.length());
|
||||||
|
results.close();
|
||||||
|
|
||||||
|
runAs("100");
|
||||||
|
|
||||||
|
sp = new SearchParameters();
|
||||||
|
sp.addStore(rootNodeRef.getStoreRef());
|
||||||
|
sp.setLanguage(SearchService.LANGUAGE_LUCENE);
|
||||||
|
sp.setQuery("TYPE:\"cm:content\"");
|
||||||
|
sp.setMaxItems(Integer.MAX_VALUE);
|
||||||
|
sp.setMaxPermissionChecks(Integer.MAX_VALUE);
|
||||||
|
sp.setMaxPermissionCheckTimeMillis(Integer.MAX_VALUE);
|
||||||
|
results = serviceRegistry.getSearchService().query(sp);
|
||||||
|
results.setBulkFetch(false);
|
||||||
|
assertEquals(100*COUNT, results.length());
|
||||||
|
results.close();
|
||||||
|
|
||||||
|
sp = new SearchParameters();
|
||||||
|
sp.addStore(rootNodeRef.getStoreRef());
|
||||||
|
sp.setLanguage(SearchService.LANGUAGE_LUCENE);
|
||||||
|
sp.setQuery("TYPE:\"cm:content\"");
|
||||||
|
sp.setMaxItems(Integer.MAX_VALUE);
|
||||||
|
sp.setMaxPermissionChecks(Integer.MAX_VALUE);
|
||||||
|
sp.setMaxPermissionCheckTimeMillis(Integer.MAX_VALUE);
|
||||||
|
results = serviceRegistry.getSearchService().query(sp);
|
||||||
|
results.setBulkFetch(false);
|
||||||
|
assertEquals(100*COUNT, results.length());
|
||||||
|
results.close();
|
||||||
|
|
||||||
|
runAs("10");
|
||||||
|
|
||||||
|
sp = new SearchParameters();
|
||||||
|
sp.addStore(rootNodeRef.getStoreRef());
|
||||||
|
sp.setLanguage(SearchService.LANGUAGE_LUCENE);
|
||||||
|
sp.setQuery("TYPE:\"cm:content\"");
|
||||||
|
sp.setMaxItems(Integer.MAX_VALUE);
|
||||||
|
sp.setMaxPermissionChecks(Integer.MAX_VALUE);
|
||||||
|
sp.setMaxPermissionCheckTimeMillis(Integer.MAX_VALUE);
|
||||||
|
results = serviceRegistry.getSearchService().query(sp);
|
||||||
|
results.setBulkFetch(false);
|
||||||
|
assertEquals(10*COUNT, results.length());
|
||||||
|
results.close();
|
||||||
|
|
||||||
|
sp = new SearchParameters();
|
||||||
|
sp.addStore(rootNodeRef.getStoreRef());
|
||||||
|
sp.setLanguage(SearchService.LANGUAGE_LUCENE);
|
||||||
|
sp.setQuery("TYPE:\"cm:content\"");
|
||||||
|
sp.setMaxItems(Integer.MAX_VALUE);
|
||||||
|
sp.setMaxPermissionChecks(Integer.MAX_VALUE);
|
||||||
|
sp.setMaxPermissionCheckTimeMillis(Integer.MAX_VALUE);
|
||||||
|
results = serviceRegistry.getSearchService().query(sp);
|
||||||
|
results.setBulkFetch(false);
|
||||||
|
assertEquals(10*COUNT, results.length());
|
||||||
|
results.close();
|
||||||
|
|
||||||
|
// test user member of group with read permission can read
|
||||||
|
runAs("10_1");
|
||||||
|
|
||||||
|
sp = new SearchParameters();
|
||||||
|
sp.addStore(rootNodeRef.getStoreRef());
|
||||||
|
sp.setLanguage(SearchService.LANGUAGE_LUCENE);
|
||||||
|
sp.setQuery("TYPE:\"cm:content\"");
|
||||||
|
sp.setMaxItems(Integer.MAX_VALUE);
|
||||||
|
sp.setMaxPermissionChecks(Integer.MAX_VALUE);
|
||||||
|
sp.setMaxPermissionCheckTimeMillis(Integer.MAX_VALUE);
|
||||||
|
results = serviceRegistry.getSearchService().query(sp);
|
||||||
|
results.setBulkFetch(false);
|
||||||
|
assertEquals(10*COUNT, results.length());
|
||||||
|
results.close();
|
||||||
|
|
||||||
|
runAs("1");
|
||||||
|
|
||||||
|
sp = new SearchParameters();
|
||||||
|
sp.addStore(rootNodeRef.getStoreRef());
|
||||||
|
sp.setLanguage(SearchService.LANGUAGE_LUCENE);
|
||||||
|
sp.setQuery("TYPE:\"cm:content\"");
|
||||||
|
sp.setMaxItems(Integer.MAX_VALUE);
|
||||||
|
sp.setMaxPermissionChecks(Integer.MAX_VALUE);
|
||||||
|
sp.setMaxPermissionCheckTimeMillis(Integer.MAX_VALUE);
|
||||||
|
results = serviceRegistry.getSearchService().query(sp);
|
||||||
|
results.setBulkFetch(false);
|
||||||
|
assertEquals(COUNT, results.length());
|
||||||
|
results.close();
|
||||||
|
|
||||||
|
sp = new SearchParameters();
|
||||||
|
sp.addStore(rootNodeRef.getStoreRef());
|
||||||
|
sp.setLanguage(SearchService.LANGUAGE_LUCENE);
|
||||||
|
sp.setQuery("TYPE:\"cm:content\"");
|
||||||
|
sp.setMaxItems(Integer.MAX_VALUE);
|
||||||
|
sp.setMaxPermissionChecks(Integer.MAX_VALUE);
|
||||||
|
sp.setMaxPermissionCheckTimeMillis(Integer.MAX_VALUE);
|
||||||
|
results = serviceRegistry.getSearchService().query(sp);
|
||||||
|
results.setBulkFetch(false);
|
||||||
|
assertEquals(COUNT, results.length());
|
||||||
|
results.close();
|
||||||
|
|
||||||
|
runAs("01");
|
||||||
|
|
||||||
|
sp = new SearchParameters();
|
||||||
|
sp.addStore(rootNodeRef.getStoreRef());
|
||||||
|
sp.setLanguage(SearchService.LANGUAGE_LUCENE);
|
||||||
|
sp.setQuery("TYPE:\"cm:content\"");
|
||||||
|
sp.setMaxItems(Integer.MAX_VALUE);
|
||||||
|
sp.setMaxPermissionChecks(Integer.MAX_VALUE);
|
||||||
|
sp.setMaxPermissionCheckTimeMillis(Integer.MAX_VALUE);
|
||||||
|
results = serviceRegistry.getSearchService().query(sp);
|
||||||
|
results.setBulkFetch(false);
|
||||||
|
assertEquals(c01.count(), results.length());
|
||||||
|
results.close();
|
||||||
|
|
||||||
|
sp = new SearchParameters();
|
||||||
|
sp.addStore(rootNodeRef.getStoreRef());
|
||||||
|
sp.setLanguage(SearchService.LANGUAGE_LUCENE);
|
||||||
|
sp.setQuery("TYPE:\"cm:content\"");
|
||||||
|
sp.setMaxItems(Integer.MAX_VALUE);
|
||||||
|
sp.setMaxPermissionChecks(Integer.MAX_VALUE);
|
||||||
|
sp.setMaxPermissionCheckTimeMillis(Integer.MAX_VALUE);
|
||||||
|
results = serviceRegistry.getSearchService().query(sp);
|
||||||
|
results.setBulkFetch(false);
|
||||||
|
assertEquals(c01.count(), results.length());
|
||||||
|
results.close();
|
||||||
|
|
||||||
|
runAs("001");
|
||||||
|
|
||||||
|
sp = new SearchParameters();
|
||||||
|
sp.addStore(rootNodeRef.getStoreRef());
|
||||||
|
sp.setLanguage(SearchService.LANGUAGE_LUCENE);
|
||||||
|
sp.setQuery("TYPE:\"cm:content\"");
|
||||||
|
sp.setMaxItems(Integer.MAX_VALUE);
|
||||||
|
sp.setMaxPermissionChecks(Integer.MAX_VALUE);
|
||||||
|
sp.setMaxPermissionCheckTimeMillis(Integer.MAX_VALUE);
|
||||||
|
results = serviceRegistry.getSearchService().query(sp);
|
||||||
|
results.setBulkFetch(false);
|
||||||
|
assertEquals(c001.count(), results.length());
|
||||||
|
results.close();
|
||||||
|
|
||||||
|
sp = new SearchParameters();
|
||||||
|
sp.addStore(rootNodeRef.getStoreRef());
|
||||||
|
sp.setLanguage(SearchService.LANGUAGE_LUCENE);
|
||||||
|
sp.setQuery("TYPE:\"cm:content\"");
|
||||||
|
sp.setMaxItems(Integer.MAX_VALUE);
|
||||||
|
sp.setMaxPermissionChecks(Integer.MAX_VALUE);
|
||||||
|
sp.setMaxPermissionCheckTimeMillis(Integer.MAX_VALUE);
|
||||||
|
results = serviceRegistry.getSearchService().query(sp);
|
||||||
|
results.setBulkFetch(false);
|
||||||
|
assertEquals(c001.count(), results.length());
|
||||||
|
results.close();
|
||||||
|
|
||||||
|
runAs("0001");
|
||||||
|
|
||||||
|
sp = new SearchParameters();
|
||||||
|
sp.addStore(rootNodeRef.getStoreRef());
|
||||||
|
sp.setLanguage(SearchService.LANGUAGE_LUCENE);
|
||||||
|
sp.setQuery("TYPE:\"cm:content\"");
|
||||||
|
sp.setMaxItems(Integer.MAX_VALUE);
|
||||||
|
sp.setMaxPermissionChecks(Integer.MAX_VALUE);
|
||||||
|
sp.setMaxPermissionCheckTimeMillis(Integer.MAX_VALUE);
|
||||||
|
results = serviceRegistry.getSearchService().query(sp);
|
||||||
|
results.setBulkFetch(false);
|
||||||
|
assertEquals(c0001.count(), results.length());
|
||||||
|
results.close();
|
||||||
|
|
||||||
|
sp = new SearchParameters();
|
||||||
|
sp.addStore(rootNodeRef.getStoreRef());
|
||||||
|
sp.setLanguage(SearchService.LANGUAGE_LUCENE);
|
||||||
|
sp.setQuery("TYPE:\"cm:content\"");
|
||||||
|
sp.setMaxItems(Integer.MAX_VALUE);
|
||||||
|
sp.setMaxPermissionChecks(Integer.MAX_VALUE);
|
||||||
|
sp.setMaxPermissionCheckTimeMillis(Integer.MAX_VALUE);
|
||||||
|
results = serviceRegistry.getSearchService().query(sp);
|
||||||
|
results.setBulkFetch(false);
|
||||||
|
assertEquals(c0001.count(), results.length());
|
||||||
|
results.close();
|
||||||
|
}
|
||||||
|
}
|
||||||
Reference in New Issue
Block a user