/* * Copyright (C) 2005-2013 Alfresco Software Limited. * * This file is part of Alfresco * * Alfresco is free software: you can redistribute it and/or modify * it under the terms of the GNU Lesser General Public License as published by * the Free Software Foundation, either version 3 of the License, or * (at your option) any later version. * * Alfresco is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU Lesser General Public License for more details. * * You should have received a copy of the GNU Lesser General Public License * along with Alfresco. If not, see . */ package org.alfresco.repo.rule; import java.util.Set; import org.alfresco.module.org_alfresco_module_rm.fileplan.FilePlanService; import org.alfresco.module.org_alfresco_module_rm.model.RecordsManagementModel; import org.alfresco.module.org_alfresco_module_rm.security.FilePlanAuthenticationService; import org.alfresco.repo.security.authentication.AuthenticationUtil; import org.alfresco.repo.security.authentication.AuthenticationUtil.RunAsWork; import org.alfresco.service.cmr.repository.NodeRef; import org.alfresco.service.cmr.repository.NodeService; import org.alfresco.service.cmr.rule.Rule; import org.alfresco.service.namespace.QName; /** * Extended rule service implementation. * * @author Roy Wetherall * @since 2.1 */ public class ExtendedRuleServiceImpl extends RuleServiceImpl { private boolean runAsRmAdmin = true; private FilePlanService filePlanService; private FilePlanAuthenticationService filePlanAuthenticationService; protected NodeService nodeService; public void setRunAsRmAdmin(boolean runAsRmAdmin) { this.runAsRmAdmin = runAsRmAdmin; } public void setFilePlanAuthenticationService(FilePlanAuthenticationService filePlanAuthenticationService) { this.filePlanAuthenticationService = filePlanAuthenticationService; } public void setNodeService2(NodeService nodeService) { this.nodeService = nodeService; } public void setFilePlanService(FilePlanService filePlanService) { this.filePlanService = filePlanService; } @Override public void saveRule(final NodeRef nodeRef, final Rule rule) { if (filePlanService.isFilePlanComponent(nodeRef) == true && runAsRmAdmin == true) { AuthenticationUtil.runAsSystem(new RunAsWork() { @Override public Void doWork() throws Exception { ExtendedRuleServiceImpl.super.saveRule(nodeRef, rule); return null; } }); } else { super.saveRule(nodeRef, rule); } } @Override public void removeRule(final NodeRef nodeRef, final Rule rule) { if (filePlanService.isFilePlanComponent(nodeRef) == true && runAsRmAdmin == true) { AuthenticationUtil.runAsSystem(new RunAsWork() { @Override public Void doWork() throws Exception { ExtendedRuleServiceImpl.super.removeRule(nodeRef, rule); return null; } }); } else { super.removeRule(nodeRef, rule); } } @Override public void executeRule(final Rule rule, final NodeRef nodeRef, final Set executedRules) { QName typeQName = nodeService.getType(nodeRef); // The dispositionSchedule node will not be executed by rules if (filePlanService.isFilePlanComponent(nodeRef) == true && typeQName.equals(RecordsManagementModel.TYPE_DISPOSITION_SCHEDULE) == false && isFilePlanComponentRule(rule) == true && runAsRmAdmin == true) { String user = AuthenticationUtil.getFullyAuthenticatedUser(); try { AuthenticationUtil.setFullyAuthenticatedUser(filePlanAuthenticationService.getRmAdminUserName()); ExtendedRuleServiceImpl.super.executeRule(rule, nodeRef, executedRules); } finally { AuthenticationUtil.setFullyAuthenticatedUser(user); } } else { // just execute the rule as the current user super.executeRule(rule, nodeRef, executedRules); } } private boolean isFilePlanComponentRule(Rule rule) { NodeRef nodeRef = getOwningNodeRef(rule); return filePlanService.isFilePlanComponent(nodeRef); } }