Package org.apache.shiro.authz

Examples of org.apache.shiro.authz.UnauthorizedException

536
537
538
539
540
541
542
543
    }

    protected void checkPermission(Permission permission, AuthorizationInfo info) {
        if (!isPermitted(permission, info)) {
            String msg = "User is not permitted [" + permission + "]";
            throw new UnauthorizedException(msg);
        }
    }
View Full Code Here
618
619
620
621
622
623
624
625
    }

    protected void checkRole(String role, AuthorizationInfo info) {
        if (!hasRole(role, info)) {
            String msg = "User does not have role [" + role + "]";
            throw new UnauthorizedException(msg);
        }
    }
View Full Code Here
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
      if (v.length == 3) {
        // 进行初次验证，确保shiro中用户的权限被初始化。
        if (!firstPermitted) {
          Subject subject = SecurityUtils.getSubject();
          if (!subject.isPermitted(p)){
            throw new UnauthorizedException("数据权限验证失败！");
          }
          firstPermitted = true;
        }
     
        try {
          // 把内部动态查询参数常量，logical放入request
          request.setAttribute(SecurityConstants.NEST_DYNAMIC_SEARCH_LOGICAL, logical);
          boolean checkResult = (check(request, response, method, v[0], v[2]) == true) ? true : false;
          if (!checkResult) {
            throw new UnauthorizedException("数据权限验证失败！");
          }
         
          if (checkResult == true && logical.equals(Logical.OR)) {
            return true;
          }
        } catch (Exception e) {
          logger.error(Exceptions.getStackTraceAsString(e));
          throw new UnauthorizedException("数据权限验证失败！");
        }
      }
    }
   
    return true;
View Full Code Here
45
46
47
48
49
50
51
52
   
    @Test
    public void testUnauthorizedRedirectsToHome_exception() throws Exception
    {
        mockAuthenticated();
        this.tester.startPage(new ExceptionalPage(new UnauthorizedException()));
        assertRedirectsToHome();
    }
View Full Code Here
60
61
62
63
64
65
66
67
68
69
70
    @Test
    public void testUnauthorizedRedirectsToHome_annotatedChild() throws Exception
    {
        mockAuthenticated();
        doThrow(new UnauthorizedException())
            .when(this.mockSubject).checkRole("test-role");
       
        this.tester.startPage(AnnotatedUnauthorizedChildPage.class);
        assertRedirectsToHome();
    }
View Full Code Here
78
79
80
81
82
83
84
85
86
87
88
    @Test
    public void testUnauthorizedRedirectsToHome_annotated() throws Exception
    {
        mockAuthenticated();
        doThrow(new UnauthorizedException())
            .when(this.mockSubject).checkRole("test-role");
       
        this.tester.startPage(AnnotatedUnauthorizedPage.class);
        assertRedirectsToHome();
    }
View Full Code Here
143
144
145
146
147
148
149
150
        Collection<Permission> perms = this.actionPermissionResolver.getPermissions(action);

        if (!subject.isPermittedAll(perms)) {
            String msg = createUnauthorizedMessage(subject, action, verbText);
            throw new UnauthorizedException(msg);
        }
    }
View Full Code Here
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
        if (roles.length == 1) {
            if (!getSubject().hasRole(roles[0])) {
                String msg = "Calling Subject does not have required role [" + roleId + "].  " +
                        "MethodInvocation denied.";
                throw new UnauthorizedException(msg);
            }
        }
        else {
            Set<String> rolesSet = new LinkedHashSet<String>(Arrays.asList(roles));
            if (!getSubject().hasAllRoles(rolesSet)) {
                String msg = "Calling Subject does not have required roles [" + roleId + "].  " +
                        "MethodInvocation denied.";
                throw new UnauthorizedException(msg);
            }
        }
    }
View Full Code Here
32
33
34
35
36
37
38
39
40
41
42
            Object permission = constructor.newInstance(new Object[] { ann.target(), ann.actions() });

            if (!getSubject().isPermitted((Permission) permission)) {
                String msg = "Calling Subject does not have required permission [" + permission + "].  " +
                        "Method invocation denied.";
                throw new UnauthorizedException(msg);
            }
        }
        catch (Exception ex) {
            throw new RuntimeException(ex);
        }
View Full Code Here
TOP

Related Classes of org.apache.shiro.authz.UnauthorizedException

  • com.ketayao.ketacustom.spring.DataControlInterceptor
  • com.sishuok.es.common.web.controller.permission.PermissionList
  • com.sishuok.es.sys.user.web.controller.UserOnlineController
  • com.tododev.shiro.GuiceAopTest$NoAop
  • fiftyfive.wicket.shiro.ShiroWicketPluginTest
  • org.apache.activemq.shiro.authz.AuthorizationFilter
  • org.apache.shiro.grails.annotations.LegacyPermissionAnnotationHandler
  • org.apache.shiro.grails.annotations.LegacyRoleAnnotationHandler
  • org.apache.shiro.realm.AuthorizingRealm
  • org.qi4j.library.shiro.concerns.SecurityConcern
    • Copyright © 2018 www.massapicom. All rights reserved.
    All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.