Examples of org.drools.guvnor.server.security.RoleBasedPermissionResolver

Package org.drools.guvnor.server.security

Examples of org.drools.guvnor.server.security.RoleBasedPermissionResolver

org.drools.guvnor.server.security.RoleBasedPermissionResolver
PermissionResolvers are chained together to resolve permission check, the check returns true if one of the PermissionResolvers in the chain returns true. This PermissionResolver resolves category-based permissions and package-based permissions. If the input is category-based request, the resolver returns true under following situations: 1. The user is admin Or 2. The user has at least one analyst role that has access to the requested category path. If the input is package-based request, the resolver returns true under following situations: 1. The user is admin Or 2. The user has one of the following roles package.admin|package.developer|package.readonly on the requested package, and requested role requires lower privilege than assigned role(I.e., package.admin>package.developer>package.readonly)

        // Mock up SEAM contexts
        Map<String, Object> application = new HashMap<String, Object>();
        Lifecycle.beginApplication( application );
        Lifecycle.beginCall();
        MockIdentity midentity = new MockIdentity();
        RoleBasedPermissionResolver resolver = new RoleBasedPermissionResolver();
        resolver.setEnableRoleBasedAuthorization( true );
        midentity.addPermissionResolver( resolver );


        Contexts.getSessionContext().set( "org.jboss.seam.security.roleBasedPermissionResolver",
                                          resolver );
        Contexts.getSessionContext().set( "org.jboss.seam.security.identity",
                                          midentity );
        Contexts.getSessionContext().set( "org.drools.guvnor.client.rpc.RepositoryService",
                                          impl );


        List<RoleBasedPermission> pbps = new ArrayList<RoleBasedPermission>();
        pbps.add( new RoleBasedPermission( "jervis",
                                           RoleTypes.PACKAGE_READONLY,
                                           "packagename",
                                           null ) );
        MockRoleBasedPermissionStore store = new MockRoleBasedPermissionStore( pbps );
        Contexts.getSessionContext().set( "org.drools.guvnor.server.security.RoleBasedPermissionStore",
                                          store );


        // Put permission list in session.
        RoleBasedPermissionManager testManager = new RoleBasedPermissionManager();
        testManager.create();
        Contexts.getSessionContext().set( "roleBasedPermissionManager",
                                          testManager );


        Capabilities c = impl.getUserCapabilities();
        assertTrue( c.list.size() == 1 );


        //now lets give them no permissions
        pbps.clear();
        try {
            impl.getUserCapabilities();
            fail( "should not be allowed as there are no permissions" );
        } catch ( AuthorizationException e ) {
            assertNotNull( e.getMessage() );
            assertTrue( midentity.loggoutCalled );
        }


        //now lets turn off the role based stuff
        resolver.setEnableRoleBasedAuthorization( false );
        impl.getUserCapabilities(); // should not blow up !


        Lifecycle.endApplication();
    }

View Full Code Here

            // Mock up SEAM contexts
            //            Map<String, Object> application = new HashMap<String, Object>();
            //            Lifecycle.beginApplication( application );
            //            Lifecycle.beginCall();
            MockIdentity midentity = new MockIdentity();
            RoleBasedPermissionResolver resolver = new RoleBasedPermissionResolver();
            resolver.setEnableRoleBasedAuthorization( true );
            midentity.addPermissionResolver( resolver );
            midentity.create();


            Contexts.getSessionContext().set( "org.jboss.seam.security.identity",
                                              midentity );

View Full Code Here

            // Mock up SEAM contexts
            Map<String, Object> application = new HashMap<String, Object>();
            Lifecycle.beginApplication( application );
            Lifecycle.beginCall();
            MockIdentity midentity = new MockIdentity();
            RoleBasedPermissionResolver resolver = new RoleBasedPermissionResolver();
            resolver.setEnableRoleBasedAuthorization( true );
            midentity.addPermissionResolver( resolver );
            midentity.create();


            Contexts.getSessionContext().set( "org.jboss.seam.security.identity",
                                              midentity );

View Full Code Here

            // Mock up SEAM contexts
            Map<String, Object> application = new HashMap<String, Object>();
            Lifecycle.beginApplication( application );
            Lifecycle.beginCall();
            MockIdentity midentity = new MockIdentity();
            RoleBasedPermissionResolver resolver = new RoleBasedPermissionResolver();
            resolver.setEnableRoleBasedAuthorization( false );
            midentity.addPermissionResolver( resolver );
            midentity.create();


            Contexts.getSessionContext().set( "org.jboss.seam.security.identity",
                                              midentity );

View Full Code Here

            // Mock up SEAM contexts
            Map<String, Object> application = new HashMap<String, Object>();
            Lifecycle.beginApplication( application );
            Lifecycle.beginCall();
            MockIdentity midentity = new MockIdentity();
            RoleBasedPermissionResolver resolver = new RoleBasedPermissionResolver();
            resolver.setEnableRoleBasedAuthorization( true );
            midentity.addPermissionResolver( resolver );
            midentity.create();


            Contexts.getSessionContext().set( "org.jboss.seam.security.identity",
                                              midentity );

View Full Code Here

            // Mock up SEAM contexts
            Map<String, Object> application = new HashMap<String, Object>();
            Lifecycle.beginApplication( application );
            Lifecycle.beginCall();
            MockIdentity midentity = new MockIdentity();
            RoleBasedPermissionResolver resolver = new RoleBasedPermissionResolver();
            resolver.setEnableRoleBasedAuthorization( true );
            midentity.addPermissionResolver( resolver );
            midentity.create();


            Contexts.getSessionContext().set( "org.jboss.seam.security.identity",
                                              midentity );

View Full Code Here

            // Mock up SEAM contexts
            Map<String, Object> application = new HashMap<String, Object>();
            Lifecycle.beginApplication( application );
            Lifecycle.beginCall();
            MockIdentity midentity = new MockIdentity();
            RoleBasedPermissionResolver resolver = new RoleBasedPermissionResolver();
            resolver.setEnableRoleBasedAuthorization( true );
            midentity.addPermissionResolver( resolver );
            midentity.create();


            Contexts.getSessionContext().set( "org.jboss.seam.security.identity",
                                              midentity );

View Full Code Here

            // Mock up SEAM contexts
            Map<String, Object> application = new HashMap<String, Object>();
            Lifecycle.beginApplication( application );
            Lifecycle.beginCall();
            MockIdentity midentity = new MockIdentity();
            RoleBasedPermissionResolver resolver = new RoleBasedPermissionResolver();
            resolver.setEnableRoleBasedAuthorization( true );
            midentity.addPermissionResolver( resolver );
            midentity.create();


            Contexts.getSessionContext().set( "org.jboss.seam.security.identity",
                                              midentity );

View Full Code Here

            // Mock up SEAM contexts
            Map<String, Object> application = new HashMap<String, Object>();
            Lifecycle.beginApplication( application );
            Lifecycle.beginCall();
            MockIdentity midentity = new MockIdentity();
            RoleBasedPermissionResolver resolver = new RoleBasedPermissionResolver();
            resolver.setEnableRoleBasedAuthorization( true );
            midentity.addPermissionResolver( resolver );
            midentity.create();


            Contexts.getSessionContext().set( "org.jboss.seam.security.identity",
                                              midentity );

View Full Code Here

        // Mock up SEAM contexts
        Map<String, Object> application = new HashMap<String, Object>();
        Lifecycle.beginApplication( application );
        Lifecycle.beginCall();
        MockIdentity midentity = new MockIdentity();
        RoleBasedPermissionResolver resolver = new RoleBasedPermissionResolver();
        resolver.setEnableRoleBasedAuthorization( true );
        midentity.addPermissionResolver( resolver );
        midentity.create();


        Contexts.getSessionContext().set( "org.jboss.seam.security.identity",
                                          midentity );

View Full Code Here

0 1 2 3 4 5 6 7 8

TOP

Related Classes of org.drools.guvnor.server.security.RoleBasedPermissionResolver

org.drools.guvnor.server.GuvnorTestBase

org.drools.guvnor.server.RepositoryCategoryOperationsTest

org.drools.guvnor.server.RepositoryQueryAndFindTest

org.drools.guvnor.server.security.rules.CategoryPathTypePermissionRule

org.drools.guvnor.server.security.rules.PackageNameTypeConverter

org.drools.guvnor.server.security.rules.PackagePermissionRule

org.drools.guvnor.server.security.rules.PackageUUIDTypePermissionRule

org.drools.guvnor.server.security.rules.PermissionRuleObjectConverter

org.drools.guvnor.server.security.SecurityServiceImplTest

org.drools.guvnor.server.ServiceImplementation

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.