Merged V2.2 to HEAD

10955: Merged V2.1 to V2.2 10874: Fix for ETWOONE-296. 10914: Corrected fix for ETWOONE-296. git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@11201 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
2025-07-31 17:39:05 +00:00 · 2008-10-06 11:04:42 +00:00
parent 62c7b53c79
commit 9ed542fab1
7 changed files with 177 additions and 34 deletions
--- a/source/java/org/alfresco/repo/admin/patch/impl/SpacesStoreGuestPermissionPatch.java
+++ b/source/java/org/alfresco/repo/admin/patch/impl/SpacesStoreGuestPermissionPatch.java
@@ -0,0 +1,116 @@
+/*
+ * Copyright (C) 2005-2007 Alfresco Software Limited.
+ *
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation; either version 2
+ * of the License, or (at your option) any later version.
+
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+
+ * You should have received a copy of the GNU General Public License
+ * along with this program; if not, write to the Free Software
+ * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
+
+ * As a special exception to the terms and conditions of version 2.0 of 
+ * the GPL, you may redistribute this Program in connection with Free/Libre 
+ * and Open Source Software ("FLOSS") applications as described in Alfresco's 
+ * FLOSS exception.  You should have recieved a copy of the text describing 
+ * the FLOSS exception, and it is also available here: 
+ * http://www.alfresco.com/legal/licensing"
+ */
+package org.alfresco.repo.admin.patch.impl;
+
+import java.util.List;
+
+import org.alfresco.i18n.I18NUtil;
+import org.alfresco.model.ContentModel;
+import org.alfresco.repo.admin.patch.AbstractPatch;
+import org.alfresco.repo.importer.ImporterBootstrap;
+import org.alfresco.service.cmr.admin.PatchException;
+import org.alfresco.service.cmr.repository.ChildAssociationRef;
+import org.alfresco.service.cmr.repository.NodeRef;
+import org.alfresco.service.cmr.repository.StoreRef;
+import org.alfresco.service.cmr.security.PermissionService;
+import org.alfresco.service.namespace.QName;
+import org.alfresco.service.namespace.RegexQNamePattern;
+import org.apache.commons.logging.Log;
+import org.apache.commons.logging.LogFactory;
+
+/**
+ * Grant <b>Read</b> permission to <b>Guest</b> in <b>SpacesStore</b> root node.
+ * Fix for bug ETWOONE-163.
+ * <p>
+ * [KR] Now correctly applies modified permissions to immediate child nodes of the
+ * root node:
+ * <p>
+ * sys:system - Changed inherit=false, Added GROUP_EVERYONE=READ (to disallow guest)
+ * cm:categoryRoot - Removed guest=READ (as already inherits)
+ * 
+ * @author Arseny Kovalchuk
+ * @author kevinr
+ */
+public class SpacesStoreGuestPermissionPatch extends AbstractPatch
+{
+    private static Log logger = LogFactory.getLog(SpacesStoreGuestPermissionPatch.class);
+    
+    private static final String MSG_RESULT = "patch.spacesStoreGuestPermission.result";
+    
+    private PermissionService permissionService;
+    private ImporterBootstrap importerBootstrap;
+    
+    
+    public void setPermissionService(PermissionService permissionService)
+    {
+        this.permissionService = permissionService;
+    }
+    
+    public void setImporterBootstrap(ImporterBootstrap importerBootstrap)
+    {
+        this.importerBootstrap = importerBootstrap;
+    }
+
+    
+    @Override
+    protected String applyInternal() throws Exception
+    {
+        StoreRef store = importerBootstrap.getStoreRef();
+        if (store == null)
+        {
+            throw new PatchException("Bootstrap store has not been set");
+        }
+        
+        NodeRef rootRef = nodeService.getRootNode(store);
+        if (logger.isDebugEnabled())
+        {
+            logger.debug("Store Ref:" + store + " NodeRef: " + rootRef);
+        }
+        permissionService.setPermission(
+                rootRef, PermissionService.GUEST_AUTHORITY, PermissionService.READ, true);
+        
+        String sysQName = importerBootstrap.getConfiguration().getProperty("system.system_container.childname");
+        String catQName = "cm:categoryRoot";
+        List<ChildAssociationRef> refs = nodeService.getChildAssocs(
+                rootRef, ContentModel.ASSOC_CHILDREN, RegexQNamePattern.MATCH_ALL);
+        for (ChildAssociationRef ref : refs)
+        {
+            if (ref.getQName().equals(QName.createQName(sysQName, namespaceService)))
+            {
+                // found sys:system node
+                permissionService.setInheritParentPermissions(ref.getChildRef(), false);
+                permissionService.setPermission(
+                        ref.getChildRef(), PermissionService.ALL_AUTHORITIES, PermissionService.READ, true);
+            }
+            else if (ref.getQName().equals(QName.createQName(catQName, namespaceService)))
+            {
+                // found cm:categoryRoot node
+                permissionService.clearPermission(ref.getChildRef(), PermissionService.GUEST_AUTHORITY);
+            }
+        }
+        
+        return I18NUtil.getMessage(MSG_RESULT);
+    }
+}