alfresco-community-repo/source/java/org/alfresco/repo/security/authentication/MutableAuthenticationServiceImpl.java
Kevin Roast 7f24c8c4e7 Merged V3.2E to HEAD
17246: ETHREEOH-3208: User profiles for users authenticated by immutable subsystems are now read only
         - Introduced MutableAuthenticationService interface, only implemented by Alfresco native authentication service
         - Split out those methods from AuthenticationService that mutate the user store and added isAuthenticationMutable()
         - Now both Alfresco Explorer and Share user profile / password edit link rendering is conditional on isAuthenticationMutable
         - Works with authentication chain containing mixture of internally and externally authenticated users
   17247: Fix failing unit tests
         - rm-public-services-security-context.xml needed to be brought in line with public-services-security-context.xml (and will forever more!)
   17248: ETHREEOH-1593: alfUser cookie value should be base 64 encoded to allow for non-ASCII characters
   17253: *RECORD ONLY* ETHREEOH-2885: web.xml must conform to the schema to work on JBoss

git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@18098 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
2010-01-18 15:32:57 +00:00

141 lines
4.8 KiB
Java

/*
* Copyright (C) 2005-2009 Alfresco Software Limited.
*
* This program is free software; you can redistribute it and/or
* modify it under the terms of the GNU General Public License
* as published by the Free Software Foundation; either version 2
* of the License, or (at your option) any later version.
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
* You should have received a copy of the GNU General Public License
* along with this program; if not, write to the Free Software
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
* As a special exception to the terms and conditions of version 2.0 of
* the GPL, you may redistribute this Program in connection with Free/Libre
* and Open Source Software ("FLOSS") applications as described in Alfresco's
* FLOSS exception. You should have received a copy of the text describing
* the FLOSS exception, and it is also available here:
* http://www.alfresco.com/legal/licensing"
*/
package org.alfresco.repo.security.authentication;
import org.alfresco.service.cmr.security.MutableAuthenticationService;
/**
* The default implementation of {@link MutableAuthenticationService}.
*
* @author dward
*/
public class MutableAuthenticationServiceImpl extends AuthenticationServiceImpl implements MutableAuthenticationService
{
/** The authentication dao. */
MutableAuthenticationDao authenticationDao;
/**
* Sets the authentication dao.
*
* @param authenticationDao
* the authentication dao
*/
public void setAuthenticationDao(MutableAuthenticationDao authenticationDao)
{
this.authenticationDao = authenticationDao;
}
/*
* (non-Javadoc)
* @see org.alfresco.service.cmr.security.MutableAuthenticationService#createAuthentication(java.lang.String,
* char[])
*/
public void createAuthentication(String userName, char[] password) throws AuthenticationException
{
this.authenticationDao.createUser(userName, password);
}
/*
* (non-Javadoc)
* @see org.alfresco.service.cmr.security.MutableAuthenticationService#updateAuthentication(java.lang.String,
* char[], char[])
*/
public void updateAuthentication(String userName, char[] oldPassword, char[] newPassword)
throws AuthenticationException
{
// Need to preserve the run-as user
String currentUser = AuthenticationUtil.getRunAsUser();
try
{
authenticate(userName, oldPassword);
}
finally
{
AuthenticationUtil.setRunAsUser(currentUser);
}
this.authenticationDao.updateUser(userName, newPassword);
}
/*
* (non-Javadoc)
* @see org.alfresco.service.cmr.security.MutableAuthenticationService#setAuthentication(java.lang.String, char[])
*/
public void setAuthentication(String userName, char[] newPassword) throws AuthenticationException
{
this.authenticationDao.updateUser(userName, newPassword);
}
/*
* (non-Javadoc)
* @see org.alfresco.service.cmr.security.MutableAuthenticationService#deleteAuthentication(java.lang.String)
*/
public void deleteAuthentication(String userName) throws AuthenticationException
{
this.authenticationDao.deleteUser(userName);
}
/*
* (non-Javadoc)
* @see
* org.alfresco.repo.security.authentication.AuthenticationServiceImpl#getAuthenticationEnabled(java.lang.String)
*/
@Override
public boolean getAuthenticationEnabled(String userName) throws AuthenticationException
{
return this.authenticationDao.getEnabled(userName);
}
/*
* (non-Javadoc)
* @see org.alfresco.service.cmr.security.MutableAuthenticationService#setAuthenticationEnabled(java.lang.String,
* boolean)
*/
public void setAuthenticationEnabled(String userName, boolean enabled) throws AuthenticationException
{
this.authenticationDao.setEnabled(userName, enabled);
}
/*
* (non-Javadoc)
* @see org.alfresco.repo.security.authentication.AuthenticationServiceImpl#authenticationExists(java.lang.String)
*/
@Override
public boolean authenticationExists(String userName)
{
return this.authenticationDao.userExists(userName);
}
/*
* (non-Javadoc)
* @see org.alfresco.service.cmr.security.MutableAuthenticationService#isAuthenticationMutable(java.lang.String)
*/
public boolean isAuthenticationMutable(String userName)
{
return authenticationExists(userName);
}
}