mirror of
				https://github.com/Alfresco/alfresco-community-repo.git
				synced 2025-10-29 15:21:53 +00:00 
			
		
		
		
	17475: ETHREEOH-3295: Fix to AuthorityMigrationPatch
      - Forces transaction retry if worker thread reaches child authority before a parent authority
      - Tested on Kev's 3.1.1 repository with ~20,000 bulk loaded users and ~2,000 Share sites
      - Now completes in 5 minutes as opposed to 45
   17461: ETHREEOH-3268: Added MutableAuthenticationService.isAuthenticationCreationAllowed () to allow conditional display of external user invitation UI
   17450: ETHREEOH-2762: Correction to previous fix. Do not generate new name when working copy copied back on check in.
   17440: ETHREEOH-3295: Fixed logging in FixNameCrcValuesPatch
   17439: ETHREEOH-2762: Improved behaviour when a working copy is copied
      - Working copy aspect already removed the working copy aspect on copy
      - Now derives a new name from the node checked out from and a UUID, preserving the extension
   17438: ETHREEOH-2690: Fix sequencing of jgroups system property setting
      - declared dependency between internalEHCacheManager and jgroupsPropertySetter
   17436: ETHREEOH-3295: Further performance improvements to AuthorityMigrationPatch
      - authority created at same time as all its parent associations to save lots of reindexing, as per LDAP sync
      - multi-threaded BatchProcessor (as used by LDAP sync, FixNameCrcValuesPatch) used to process work in 2 threads in batches of 20, report progress every 100 entries and handle transaction retries
      - BatchProcessor now promoted to its own package
   17394: Fix for license issue in local enterprise builds.
      - Replace Community with Enterprise in version.properties during enterprise war building
   17365: ETHREEOH-3229: Visited and fixed all SearchService result set leaks
   17362: ETHREEOH-3254: Eliminate needless ping to LDAP server in LDAPAuthenticationComponentImpl.implementationAllowsGuestLogin()
   17348: ETHREEOH-3003: Fix NPE in Hyperic when LicenseDescriptor has null fields
   17316: Merged V3.1 to V3.2
      17315: ETHREEOH-3092: PersonService won't let you create duplicate persons anymore.
      17314: ETHREEOH-3158: Fix RepoServerMgmt to work with external authentication methods
         - AuthenticationService.getCurrentTicket / getNewTicket now call pre authentication check before issuing a new ticket, thus still allowing ticket enforcement when external authentication is in use.
      17312: ETHREEOH-3219: Enable resolution of JMX server password file path on JBoss 5
      17299: Merged V3.2 to V3.1 (Record only)
         17297: ETHREEOH-1593: Changed name of username cookie and fixed login.jsp to decode it properly
         17248: ETHREEOH-1593: alfUser cookie value should be base 64 encoded to allow for non-ASCII characters
   17297: ETHREEOH-1593: Changed name of username cookie and fixed login.jsp to decode it properly
      - thanks Kev!
   17292: ETHREEOH-1842: Ticket association with HttpSession IDs tracked so that we don't invalidate a ticket in use by multiple sessions prematurely
      - AuthenticationService validate, getCurrentTicket, etc. methods now take optional sessionId arguments
   17269: Fix failing unit test
      - reinstate original behaviour of AbstractChainingAuthenticationService.getAuthenticationEnabled()
   17268: Fix InvitationService
      - Runs as system to do privileged AuthenticationService actions
git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@18105 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
		
	
		
			
				
	
	
		
			210 lines
		
	
	
		
			7.4 KiB
		
	
	
	
		
			Java
		
	
	
	
	
	
			
		
		
	
	
			210 lines
		
	
	
		
			7.4 KiB
		
	
	
	
		
			Java
		
	
	
	
	
	
| /*
 | |
|  * Copyright (C) 2005-2007 Alfresco Software Limited.
 | |
|  *
 | |
|  * This program is free software; you can redistribute it and/or
 | |
|  * modify it under the terms of the GNU General Public License
 | |
|  * as published by the Free Software Foundation; either version 2
 | |
|  * of the License, or (at your option) any later version.
 | |
| 
 | |
|  * This program is distributed in the hope that it will be useful,
 | |
|  * but WITHOUT ANY WARRANTY; without even the implied warranty of
 | |
|  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 | |
|  * GNU General Public License for more details.
 | |
| 
 | |
|  * You should have received a copy of the GNU General Public License
 | |
|  * along with this program; if not, write to the Free Software
 | |
|  * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
 | |
| 
 | |
|  * As a special exception to the terms and conditions of version 2.0 of 
 | |
|  * the GPL, you may redistribute this Program in connection with Free/Libre 
 | |
|  * and Open Source Software ("FLOSS") applications as described in Alfresco's 
 | |
|  * FLOSS exception.  You should have recieved a copy of the text describing 
 | |
|  * the FLOSS exception, and it is also available here: 
 | |
|  * http://www.alfresco.com/legal/licensing"
 | |
|  */
 | |
| package org.alfresco.jcr.util;
 | |
| 
 | |
| import java.lang.reflect.InvocationHandler;
 | |
| import java.lang.reflect.InvocationTargetException;
 | |
| import java.lang.reflect.Method;
 | |
| import java.lang.reflect.Proxy;
 | |
| 
 | |
| import javax.jcr.AccessDeniedException;
 | |
| import javax.jcr.RepositoryException;
 | |
| import javax.jcr.lock.LockException;
 | |
| import javax.jcr.nodetype.ConstraintViolationException;
 | |
| import javax.jcr.nodetype.NoSuchNodeTypeException;
 | |
| 
 | |
| import org.alfresco.error.AlfrescoRuntimeException;
 | |
| import org.alfresco.jcr.session.SessionImpl;
 | |
| import org.alfresco.repo.node.integrity.IntegrityException;
 | |
| import org.alfresco.service.cmr.dictionary.InvalidTypeException;
 | |
| import org.alfresco.service.cmr.lock.NodeLockedException;
 | |
| import org.alfresco.service.cmr.security.AuthenticationService;
 | |
| 
 | |
| 
 | |
| /**
 | |
|  * Factory for creating a JCR Session Context Proxy
 | |
|  * 
 | |
|  * The Session Context Proxy is responsible for ensuring that the appropriate Alfresco
 | |
|  * Repository context is setup when a method is executed within a JCR session.  For
 | |
|  * example, the appropriate authenticated user is validated.
 | |
|  * 
 | |
|  * @author David Caruana
 | |
|  *
 | |
|  */
 | |
| public class JCRProxyFactory
 | |
| {
 | |
|     
 | |
|     /**
 | |
|      * Create a Session Context Proxy
 | |
|      * 
 | |
|      * @param target  target object to wrap
 | |
|      * @param proxyInterface  the proxy interface to export
 | |
|      * @param context  the session context
 | |
|      * @return  the proxied target
 | |
|      */
 | |
|     public static Object create(Object target, Class proxyInterface, SessionImpl context)
 | |
|     {
 | |
|         InvocationHandler handler = new SessionContextInvocationHandler(target, context);
 | |
|         return Proxy.newProxyInstance(proxyInterface.getClassLoader(), new Class[]{proxyInterface}, handler);
 | |
|     }
 | |
| 
 | |
| 
 | |
|     /**
 | |
|      * Session Context Invocation Handler
 | |
|      * 
 | |
|      * @author David Caruana
 | |
|      */
 | |
|     private static class SessionContextInvocationHandler implements InvocationHandler
 | |
|     {
 | |
|         private Object target;
 | |
|         private SessionImpl session;
 | |
|         private AuthenticationService authenticationService;
 | |
| 
 | |
|         /**
 | |
|          * Constuct.
 | |
|          * 
 | |
|          * @param instance  the object instance holding the method
 | |
|          * @param delegateMethod  the method to invoke
 | |
|          */
 | |
|         private SessionContextInvocationHandler(Object target, SessionImpl context)
 | |
|         {
 | |
|             this.target = target;
 | |
|             this.session = context;
 | |
|             this.authenticationService = session.getRepositoryImpl().getServiceRegistry().getAuthenticationService();
 | |
|         }
 | |
|         
 | |
|         /* (non-Javadoc)
 | |
|          * @see java.lang.reflect.InvocationHandler#invoke(java.lang.Object, java.lang.reflect.Method, java.lang.Object[])
 | |
|          */
 | |
|         public Object invoke(Object proxy, Method method, Object[] args) throws Throwable
 | |
|         {
 | |
|             // Handle Object level methods
 | |
|             if (method.getName().equals("toString"))
 | |
|             {
 | |
|                 return toString();
 | |
|             }
 | |
|             else if (method.getName().equals("hashCode"))
 | |
|             {
 | |
|                 return hashCode();
 | |
|             }
 | |
|             else if (method.getName().equals("equals"))
 | |
|             {
 | |
|                 if (Proxy.isProxyClass(args[0].getClass()))
 | |
|                 {
 | |
|                     return equals(Proxy.getInvocationHandler(args[0]));
 | |
|                 }
 | |
|                 return false;
 | |
|             }
 | |
| 
 | |
|             try
 | |
|             {
 | |
|                 // establish authentication context 
 | |
|                 String username = authenticationService.getCurrentUserName();
 | |
| 
 | |
|                 try
 | |
|                 {
 | |
|                     // setup authentication context, if one does not exist (for example, in remote case)
 | |
|                     if (!method.getName().equals("logout"))
 | |
|                     {
 | |
|                         if (username == null)
 | |
|                         {
 | |
|                             authenticationService.validate(session.getTicket(), null);
 | |
|                         }
 | |
|                     }
 | |
| 
 | |
|                     // invoke underlying service
 | |
|                     return method.invoke(target, args);
 | |
|                 }
 | |
|                 catch (InvocationTargetException e)
 | |
|                 {
 | |
|                     Throwable cause = e.getCause();
 | |
|                     throw cause;
 | |
|                 }
 | |
|                 finally
 | |
|                 {
 | |
|                     // cleanup authentication context (only if one didn't exist before)
 | |
|                     if (username == null)
 | |
|                     {
 | |
|                         authenticationService.clearCurrentSecurityContext();
 | |
|                     }
 | |
|                 }
 | |
|             }
 | |
|             catch(Throwable cause)
 | |
|             {
 | |
|                 // Map Alfresco exceptions to JCR exceptions
 | |
|                 if (cause instanceof IntegrityException)
 | |
|                 {
 | |
|                     throw new ConstraintViolationException(cause);
 | |
|                 }
 | |
|                 else if (cause instanceof NodeLockedException)
 | |
|                 {
 | |
|                     throw new LockException(cause);
 | |
|                 }
 | |
|                 else if (cause instanceof InvalidTypeException)
 | |
|                 {
 | |
|                     throw new NoSuchNodeTypeException(cause);
 | |
|                 }
 | |
|                 else if (cause instanceof org.alfresco.repo.security.permissions.AccessDeniedException)
 | |
|                 {
 | |
|                     throw new AccessDeniedException(cause);
 | |
|                 }
 | |
|                 else if (cause instanceof AlfrescoRuntimeException)
 | |
|                 {
 | |
|                     throw new RepositoryException(cause);
 | |
|                 }
 | |
|                 throw cause;
 | |
|             }
 | |
|         }
 | |
|     
 | |
|         @Override
 | |
|         public boolean equals(Object obj)
 | |
|         {
 | |
|             if (obj == this)
 | |
|             {
 | |
|                 return true;
 | |
|             }
 | |
|             else if (obj == null || !(obj instanceof SessionContextInvocationHandler))
 | |
|             {
 | |
|                 return false;
 | |
|             }
 | |
|             SessionContextInvocationHandler other = (SessionContextInvocationHandler)obj;
 | |
|             return target.equals(other.target);
 | |
|         }
 | |
|     
 | |
|         @Override
 | |
|         public int hashCode()
 | |
|         {
 | |
|             return target.hashCode();
 | |
|         }
 | |
|     
 | |
|         @Override
 | |
|         public String toString()
 | |
|         {
 | |
|             return target.toString();
 | |
|         }
 | |
|     }
 | |
| 
 | |
| }
 |