mirror of
https://github.com/Alfresco/alfresco-community-repo.git
synced 2025-06-30 18:15:39 +00:00
47b45d9ee1
- Clean up javadocs (remove uncommented parameters and fix method comments) - ALF-8996: Administrator users can disable themselves - Administrator users cannot be disabled (the repo ignores the request) - Administrator users cannot expire, be locked; they remain active no matter what - UI attempts to disable admin but the request just does nothing (UI could gray it out, I suppose) - (ALF-8805) ALF-9056: RINF 40: Fix XPath query to use selectNodes - Final (Team-introduced) Lucene query in PersonServiceImpl - Cleanup and better tests - Unit test template retrieval for user notification (not easy via UI) git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@28528 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
473 lines
13 KiB
Java
473 lines
13 KiB
Java
/*
|
|
* Copyright (C) 2005-2010 Alfresco Software Limited.
|
|
*
|
|
* This file is part of Alfresco
|
|
*
|
|
* Alfresco is free software: you can redistribute it and/or modify
|
|
* it under the terms of the GNU Lesser General Public License as published by
|
|
* the Free Software Foundation, either version 3 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* Alfresco is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU Lesser General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU Lesser General Public License
|
|
* along with Alfresco. If not, see <http://www.gnu.org/licenses/>.
|
|
*/
|
|
package org.alfresco.repo.security.authentication;
|
|
|
|
import java.util.Date;
|
|
|
|
import net.sf.acegisecurity.UserDetails;
|
|
import net.sf.acegisecurity.providers.dao.UsernameNotFoundException;
|
|
|
|
import org.alfresco.error.AlfrescoRuntimeException;
|
|
import org.springframework.dao.DataAccessException;
|
|
|
|
/**
|
|
* An authority DAO that has no implementation.
|
|
*
|
|
* By default it will throw an exception if any method is called.
|
|
*
|
|
* Any of the getter/setter methods can be enabled with a no action implementation.
|
|
*
|
|
* This can support deleting users via the UI for LDAP and NTLM. The Alfresco person object is deleted from the UI.
|
|
* The call to delete the user will return with no action.
|
|
*
|
|
* The following methods will always fail.
|
|
*
|
|
* getMD4HashedPassword(String userName)
|
|
* loadUserByUsername(String arg0)
|
|
* getSalt(UserDetails user)
|
|
*
|
|
* @author Andy Hind
|
|
*/
|
|
public class DefaultMutableAuthenticationDao implements MutableAuthenticationDao
|
|
{
|
|
private boolean allowCreateUser = false;
|
|
|
|
private boolean allowUpdateUser = false;
|
|
|
|
private boolean allowDeleteUser = false;
|
|
|
|
private boolean allowSetEnabled = false;
|
|
|
|
private boolean allowGetEnabled = false;
|
|
|
|
private boolean allowSetAccountExpires = false;
|
|
|
|
private boolean allowGetAccountHasExpired = false;
|
|
|
|
private boolean allowSetCredentialsExpire = false;
|
|
|
|
private boolean allowGetCredentialsExpire = false;
|
|
|
|
private boolean allowGetCredentialsHaveExpired = false;
|
|
|
|
private boolean allowSetAccountLocked = false;
|
|
|
|
private boolean allowGetAccountLocked = false;
|
|
|
|
private boolean allowSetAccountExpiryDate = false;
|
|
|
|
private boolean allowGetAccountExpiryDate = false;
|
|
|
|
private boolean allowSetCredentialsExpiryDate = false;
|
|
|
|
private boolean allowGetCredentialsExpiryDate = false;
|
|
|
|
/**
|
|
* {@inheritDoc}
|
|
* <p/>
|
|
* If enabled does nothing
|
|
*
|
|
* @throws AlfrescoRuntimeException if the the operation is not allowed
|
|
*/
|
|
public void createUser(String userName, char[] rawPassword) throws AuthenticationException
|
|
{
|
|
if (!allowCreateUser)
|
|
{
|
|
throw new AlfrescoRuntimeException("Create User is not supported");
|
|
}
|
|
}
|
|
|
|
/**
|
|
* {@inheritDoc}
|
|
* <p/>
|
|
* If enabled does nothing
|
|
*
|
|
* @throws AlfrescoRuntimeException if the the operation is not allowed
|
|
*/
|
|
public void updateUser(String userName, char[] rawPassword) throws AuthenticationException
|
|
{
|
|
if (!allowUpdateUser)
|
|
{
|
|
throw new AlfrescoRuntimeException("Update user is not supported");
|
|
}
|
|
}
|
|
|
|
/**
|
|
* {@inheritDoc}
|
|
* <p/>
|
|
* If enabled does nothing
|
|
*
|
|
* @throws AlfrescoRuntimeException if the the operation is not allowed
|
|
*/
|
|
public void deleteUser(String userName) throws AuthenticationException
|
|
{
|
|
if (!allowDeleteUser)
|
|
{
|
|
throw new AlfrescoRuntimeException("Delete user is not supported");
|
|
}
|
|
}
|
|
|
|
/**
|
|
* {@inheritDoc}
|
|
*
|
|
* @return <tt>true</tt> always
|
|
*/
|
|
public boolean userExists(String userName)
|
|
{
|
|
// All users may exist
|
|
return true;
|
|
}
|
|
|
|
/**
|
|
* {@inheritDoc}
|
|
* <p/>
|
|
* If enabled does nothing
|
|
*
|
|
* @throws AlfrescoRuntimeException if the the operation is not allowed
|
|
*/
|
|
public void setEnabled(String userName, boolean enabled)
|
|
{
|
|
if (!allowSetEnabled)
|
|
{
|
|
throw new AlfrescoRuntimeException("Set enabled is not supported");
|
|
}
|
|
}
|
|
|
|
/**
|
|
* {@inheritDoc}
|
|
*
|
|
* @return <tt>true</tt> if enabled
|
|
*
|
|
* @throws AlfrescoRuntimeException if the the operation is not allowed
|
|
*/
|
|
public boolean getEnabled(String userName)
|
|
{
|
|
if (!allowGetEnabled)
|
|
{
|
|
throw new AlfrescoRuntimeException("Get enabled is not supported");
|
|
}
|
|
return true;
|
|
}
|
|
|
|
/**
|
|
* {@inheritDoc}
|
|
* <p/>
|
|
* If enabled does nothing
|
|
*
|
|
* @throws AlfrescoRuntimeException if the the operation is not allowed
|
|
*/
|
|
public void setAccountExpires(String userName, boolean expires)
|
|
{
|
|
if (!allowSetAccountExpires)
|
|
{
|
|
throw new AlfrescoRuntimeException("Set account expires is not supported");
|
|
}
|
|
}
|
|
|
|
/**
|
|
* {@inheritDoc}
|
|
*
|
|
* @return <tt>false</tt> if enabled
|
|
*
|
|
* @throws AlfrescoRuntimeException if the the operation is not allowed
|
|
*/
|
|
public boolean getAccountExpires(String userName)
|
|
{
|
|
if (!allowSetAccountExpires)
|
|
{
|
|
throw new AlfrescoRuntimeException("Get account expires is not supported");
|
|
}
|
|
return false;
|
|
}
|
|
|
|
/**
|
|
* {@inheritDoc}
|
|
*
|
|
* @return <tt>false</tt> if enabled
|
|
*
|
|
* @throws AlfrescoRuntimeException if the the operation is not allowed
|
|
*/
|
|
public boolean getAccountHasExpired(String userName)
|
|
{
|
|
if (!allowGetAccountHasExpired)
|
|
{
|
|
throw new AlfrescoRuntimeException("Get account has expired is not supported");
|
|
}
|
|
return false;
|
|
}
|
|
|
|
/**
|
|
* {@inheritDoc}
|
|
* <p/>
|
|
* If enabled does nothing
|
|
*
|
|
* @throws AlfrescoRuntimeException if the the operation is not allowed
|
|
*/
|
|
public void setCredentialsExpire(String userName, boolean expires)
|
|
{
|
|
if (!allowSetCredentialsExpire)
|
|
{
|
|
throw new AlfrescoRuntimeException("Set credentials expire is not supported");
|
|
}
|
|
}
|
|
|
|
/**
|
|
* {@inheritDoc}
|
|
*
|
|
* @return <tt>false</tt> if enabled
|
|
*
|
|
* @throws AlfrescoRuntimeException if the the operation is not allowed
|
|
*/
|
|
public boolean getCredentialsExpire(String userName)
|
|
{
|
|
if (!allowGetCredentialsExpire)
|
|
{
|
|
throw new AlfrescoRuntimeException("Get credentials expire is not supported");
|
|
}
|
|
return false;
|
|
}
|
|
|
|
/**
|
|
* {@inheritDoc}
|
|
*
|
|
* @return <tt>false</tt> if enabled
|
|
*
|
|
* @throws AlfrescoRuntimeException if the the operation is not allowed
|
|
*/
|
|
public boolean getCredentialsHaveExpired(String userName)
|
|
{
|
|
if (!allowGetCredentialsHaveExpired)
|
|
{
|
|
throw new AlfrescoRuntimeException("Get credentials have expired is not supported");
|
|
}
|
|
return false;
|
|
}
|
|
|
|
/**
|
|
* {@inheritDoc}
|
|
* <p/>
|
|
* If enabled does nothing
|
|
*
|
|
* @throws AlfrescoRuntimeException if the the operation is not allowed
|
|
*/
|
|
public void setLocked(String userName, boolean locked)
|
|
{
|
|
if (!allowSetAccountLocked)
|
|
{
|
|
throw new AlfrescoRuntimeException("Set account locked is not supported");
|
|
}
|
|
}
|
|
|
|
/**
|
|
* {@inheritDoc}
|
|
* <p/>
|
|
* If enabled does nothing
|
|
*
|
|
* @throws AlfrescoRuntimeException if the the operation is not allowed
|
|
*/
|
|
@Override
|
|
public boolean getLocked(String userName)
|
|
{
|
|
if (!allowGetAccountLocked)
|
|
{
|
|
throw new AlfrescoRuntimeException("Get account locked is not supported");
|
|
}
|
|
return false;
|
|
}
|
|
|
|
/**
|
|
* @see #getLocked(String)
|
|
*/
|
|
public boolean getAccountlocked(String userName)
|
|
{
|
|
return getLocked(userName);
|
|
}
|
|
|
|
/**
|
|
* {@inheritDoc}
|
|
* <p/>
|
|
* If enabled does nothing
|
|
*
|
|
* @throws AlfrescoRuntimeException if the the operation is not allowed
|
|
*/
|
|
public void setAccountExpiryDate(String userName, Date exipryDate)
|
|
{
|
|
if (!allowSetAccountExpiryDate)
|
|
{
|
|
throw new AlfrescoRuntimeException("Set account expiry date is not supported");
|
|
}
|
|
}
|
|
|
|
/**
|
|
* {@inheritDoc}
|
|
* <p/>
|
|
* @return <tt>null</tt> if enabled
|
|
*
|
|
* @throws AlfrescoRuntimeException if the the operation is not allowed
|
|
*/
|
|
public Date getAccountExpiryDate(String userName)
|
|
{
|
|
if (!allowGetAccountExpiryDate)
|
|
{
|
|
throw new AlfrescoRuntimeException("Get account expiry date is not supported");
|
|
}
|
|
return null;
|
|
}
|
|
|
|
/**
|
|
* {@inheritDoc}
|
|
* <p/>
|
|
* If enabled does nothing
|
|
*
|
|
* @throws AlfrescoRuntimeException if the the operation is not allowed
|
|
*/
|
|
public void setCredentialsExpiryDate(String userName, Date exipryDate)
|
|
{
|
|
if (!allowSetCredentialsExpiryDate)
|
|
{
|
|
throw new AlfrescoRuntimeException("Set credentials expiry date is not supported");
|
|
}
|
|
}
|
|
|
|
/**
|
|
* {@inheritDoc}
|
|
* <p/>
|
|
* @return <tt>null</tt> if enabled
|
|
*
|
|
* @throws AlfrescoRuntimeException if the the operation is not allowed
|
|
*/
|
|
public Date getCredentialsExpiryDate(String userName)
|
|
{
|
|
if (!allowGetCredentialsExpiryDate)
|
|
{
|
|
throw new AlfrescoRuntimeException("Get credentials expiry date is not supported");
|
|
}
|
|
return null;
|
|
}
|
|
|
|
/**
|
|
* @throws AlfrescoRuntimeException always
|
|
*/
|
|
public String getMD4HashedPassword(String userName)
|
|
{
|
|
throw new AlfrescoRuntimeException("Not implemented");
|
|
}
|
|
|
|
/**
|
|
* @throws AlfrescoRuntimeException always
|
|
*/
|
|
public UserDetails loadUserByUsername(String arg0) throws UsernameNotFoundException, DataAccessException
|
|
{
|
|
throw new AlfrescoRuntimeException("Not implemented");
|
|
}
|
|
|
|
/**
|
|
* @throws AlfrescoRuntimeException always
|
|
*/
|
|
public Object getSalt(UserDetails user)
|
|
{
|
|
throw new AlfrescoRuntimeException("Not implemented");
|
|
}
|
|
|
|
|
|
// -------- //
|
|
// Bean IOC //
|
|
// -------- //
|
|
|
|
public void setAllowCreateUser(boolean allowCreateUser)
|
|
{
|
|
this.allowCreateUser = allowCreateUser;
|
|
}
|
|
|
|
public void setAllowDeleteUser(boolean allowDeleteUser)
|
|
{
|
|
this.allowDeleteUser = allowDeleteUser;
|
|
}
|
|
|
|
public void setAllowGetAccountExpiryDate(boolean allowGetAccountExpiryDate)
|
|
{
|
|
this.allowGetAccountExpiryDate = allowGetAccountExpiryDate;
|
|
}
|
|
|
|
public void setAllowGetAccountHasExpired(boolean allowGetAccountHasExpired)
|
|
{
|
|
this.allowGetAccountHasExpired = allowGetAccountHasExpired;
|
|
}
|
|
|
|
public void setAllowGetAccountLocked(boolean allowGetAccountLocked)
|
|
{
|
|
this.allowGetAccountLocked = allowGetAccountLocked;
|
|
}
|
|
|
|
public void setAllowGetCredentialsExpire(boolean allowGetCredentialsExpire)
|
|
{
|
|
this.allowGetCredentialsExpire = allowGetCredentialsExpire;
|
|
}
|
|
|
|
public void setAllowGetCredentialsExpiryDate(boolean allowGetCredentialsExpiryDate)
|
|
{
|
|
this.allowGetCredentialsExpiryDate = allowGetCredentialsExpiryDate;
|
|
}
|
|
|
|
public void setAllowGetCredentialsHaveExpired(boolean allowGetCredentialsHaveExpired)
|
|
{
|
|
this.allowGetCredentialsHaveExpired = allowGetCredentialsHaveExpired;
|
|
}
|
|
|
|
public void setAllowGetEnabled(boolean allowGetEnabled)
|
|
{
|
|
this.allowGetEnabled = allowGetEnabled;
|
|
}
|
|
|
|
public void setAllowSetAccountExpires(boolean allowSetAccountExpires)
|
|
{
|
|
this.allowSetAccountExpires = allowSetAccountExpires;
|
|
}
|
|
|
|
public void setAllowSetAccountExpiryDate(boolean allowSetAccountExpiryDate)
|
|
{
|
|
this.allowSetAccountExpiryDate = allowSetAccountExpiryDate;
|
|
}
|
|
|
|
public void setAllowSetAccountLocked(boolean allowSetAccountLocked)
|
|
{
|
|
this.allowSetAccountLocked = allowSetAccountLocked;
|
|
}
|
|
|
|
public void setAllowSetCredentialsExpire(boolean allowSetCredentialsExpire)
|
|
{
|
|
this.allowSetCredentialsExpire = allowSetCredentialsExpire;
|
|
}
|
|
|
|
public void setAllowSetCredentialsExpiryDate(boolean allowSetCredentialsExpiryDate)
|
|
{
|
|
this.allowSetCredentialsExpiryDate = allowSetCredentialsExpiryDate;
|
|
}
|
|
|
|
public void setAllowSetEnabled(boolean allowSetEnabled)
|
|
{
|
|
this.allowSetEnabled = allowSetEnabled;
|
|
}
|
|
|
|
public void setAllowUpdateUser(boolean allowUpdateUser)
|
|
{
|
|
this.allowUpdateUser = allowUpdateUser;
|
|
}
|
|
}
|