Package com.agiletec.aps.system.services.authorization

Examples of com.agiletec.aps.system.services.authorization.IAuthorizationManager

95
96
97
98
99
100
101
102
103
104
105
106
107
   * Returns allowed groups
   * @param reqCtx The request context
   * @return allowed groups
   */
  private Collection<String> getAllowedGroups(RequestContext reqCtx) {
    IAuthorizationManager authManager = (IAuthorizationManager) ApsWebApplicationUtils.getBean(SystemConstants.AUTHORIZATION_SERVICE, reqCtx.getRequest());
    UserDetails currentUser = (UserDetails) reqCtx.getRequest().getSession().getAttribute(SystemConstants.SESSIONPARAM_CURRENT_USER);
    List<Group> groups = authManager.getGroupsOfUser(currentUser);
    Set<String> allowedGroup = new HashSet<String>();
    Iterator<Group> iter = groups.iterator();
    while (iter.hasNext()) {
      Group group = iter.next();
      allowedGroup.add(group.getName());
View Full Code Here
34
35
36
37
38
39
40
41
42
43
44
45
46
*/
public abstract class AbstractSurveyWondenInterceptor extends AbstractInterceptor {
 
  protected String checkSurveyGroup(SurveyRecord survey, HttpServletRequest request) {
    UserDetails currentUser = (UserDetails) request.getSession().getAttribute(SystemConstants.SESSIONPARAM_CURRENT_USER);
    IAuthorizationManager authManager = (IAuthorizationManager) ApsWebApplicationUtils.getBean(SystemConstants.AUTHORIZATION_SERVICE, ServletActionContext.getRequest());
    if (!survey.getGroupName().equals(Group.FREE_GROUP_NAME)
        && !authManager.isAuthOnGroup(currentUser, Group.ADMINS_GROUP_NAME)
        && !authManager.isAuthOnGroup(currentUser, survey.getGroupName())) {
      return "userNotAllowedToSurvey";
    }
    return null;
  }
View Full Code Here
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
      throw new ApsSystemException("Error sending emails", t);
    }
  }

  public List<ContentMailInfo> getContentsToNotifyToUser(UserDetails user, List<ContentMailInfo> contentsToNotify) {
    IAuthorizationManager authManager = this.getAuthorizationManager();
    if (authManager.isAuthOnGroup(user, Group.ADMINS_GROUP_NAME)) {
      return contentsToNotify;
    } else {
      List<ContentMailInfo> contentsToNotifyToUser = new ArrayList<ContentMailInfo>();
      boolean onlyOwner = this.getConfig().isOnlyOwner();
      for (ContentMailInfo info : contentsToNotify) {
        String mainGroup = info.getMainGroup();
        boolean allowedContent = authManager.isAuthOnGroup(user, mainGroup);
        if (!allowedContent && !onlyOwner && info.getGroups()!=null) {
          for (String group : info.getGroups()) {
            if (authManager.isAuthOnGroup(user, group)) {
              allowedContent = true;
              break;
            }
          }
        }
View Full Code Here
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
      this._mailSenderScheduler = null;
    }
  }

  protected List<UserDetails> findContentOperators() throws ApsSystemException {
    IAuthorizationManager authManager = this.getAuthorizationManager();
    IUserManager userManager = this.getUserManager();
    IUserProfileManager profileManager = this.getProfileManager();
    List<UserDetails> systemUsers = userManager.getUsers();
    List<UserDetails> allowedUsers = new ArrayList<UserDetails>();
    for (UserDetails user : systemUsers){
      user.addAutorities(this.getRoleManager().getAuthorizationsByUser(user));
      if (authManager.isAuthOnPermission(user, Permission.SUPERVISOR) || authManager.isAuthOnPermission(user, "editContents")) {
        try {
          AbstractUser userDetails = (AbstractUser) user;
          IUserProfile profile = profileManager.getProfile(userDetails.getUsername());
          userDetails.setProfile(profile);
        } catch (Throwable t) {
View Full Code Here
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
    UserDetails user = null;
        IApiTokenizerManager tokenizerManager =
                (IApiTokenizerManager) ApsWebApplicationUtils.getBean(JpTokenApiSystemConstants.TOKENIZER_MANAGER, request);
        IAuthenticationProviderManager authenticationProvider =
                (IAuthenticationProviderManager) ApsWebApplicationUtils.getBean(SystemConstants.AUTHENTICATION_PROVIDER_MANAGER, request);
        IAuthorizationManager authorizationManager =
                (IAuthorizationManager) ApsWebApplicationUtils.getBean(SystemConstants.AUTHORIZATION_SERVICE, request);
        try {
            String username = tokenizerManager.getUser(entandoApiToken);
            user = authenticationProvider.getUser(username);
            if (null != user) {
                properties.put(SystemConstants.API_USER_PARAMETER, user);
            } else if (apiMethod.getRequiredAuth()) {
        throw new ApiException(IApiErrorCodes.API_AUTHENTICATION_REQUIRED, "Invalid or missing user for token '" + entandoApiToken + "'", Response.Status.UNAUTHORIZED);
      }
        } catch (Exception e) {
            if (apiMethod.getRequiredAuth()) {
                throw new ApiException(IApiErrorCodes.API_AUTHENTICATION_REQUIRED, "Authentication Required", Response.Status.UNAUTHORIZED);
            }
        }
        if (null == user && (apiMethod.getRequiredAuth() || null != apiMethod.getRequiredPermission())) {
            throw new ApiException(IApiErrorCodes.API_AUTHENTICATION_REQUIRED, "Authentication Required", Response.Status.UNAUTHORIZED);
        } else if (null != user && null != apiMethod.getRequiredPermission()
                && !authorizationManager.isAuthOnPermission(user, apiMethod.getRequiredPermission())) {
            throw new ApiException(IApiErrorCodes.API_AUTHORIZATION_REQUIRED, "Authorization Required", Response.Status.UNAUTHORIZED);
        }
  }
View Full Code Here
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
  public int doStartTag() throws JspException {
    RequestContext reqCtx = (RequestContext) this.pageContext.getRequest().getAttribute(RequestContext.REQCTX);
    ApsSystemUtils.getLogger().trace("EventsOfDayTag Invoked");
    try {
      this._calMan = (ICalendarManager) ApsWebApplicationUtils.getBean(CalendarConstants.CALENDAR_MANAGER, this.pageContext);
      IAuthorizationManager authorizatorManager = (IAuthorizationManager)
          ApsWebApplicationUtils.getBean(SystemConstants.AUTHORIZATION_SERVICE, this.pageContext);
      this.extractRequiredDate();
      UserDetails currentUser = (UserDetails) reqCtx.getRequest().getSession().getAttribute(SystemConstants.SESSIONPARAM_CURRENT_USER);
      if (authorizatorManager.isAuthOnGroup(currentUser, Group.ADMINS_GROUP_NAME)) {
        this.setAllowedGroups(null);
      } else {
        List<Group> userGroups = authorizatorManager.getUserGroups(currentUser);
        Set allowedGroup = new HashSet();
        allowedGroup.add(Group.FREE_GROUP_NAME);
        for (Group group : userGroups) {
          allowedGroup.add(group.getName());
        }
View Full Code Here
TOP

Related Classes of com.agiletec.aps.system.services.authorization.IAuthorizationManager

  • com.agiletec.plugins.jpcalendar.aps.tags.EventsOfDayTag
  • com.agiletec.plugins.jpcontentnotifier.aps.system.services.contentnotifier.ContentNotifierManager
  • com.agiletec.plugins.jpfacetnav.aps.system.services.content.showlet.FacetNavHelper
  • com.agiletec.plugins.jpsurvey.aps.internalservlet.system.AbstractSurveyWondenInterceptor
  • org.entando.entando.plugins.jptokenapi.aps.system.server.ApiRestServer
    • Copyright © 2018 www.massapicom. All rights reserved.
    All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.