Package org.exist.security

Examples of org.exist.security.SecurityManager

83
84
85
86
87
88
89
90
91
92
93
94
        final Subject currentUser = broker.getSubject();

        if(currentUser.hasGroup(groupName)) {
            return BooleanValue.TRUE;
        } else if(currentUser.hasDbaRole()) {
            final SecurityManager sm = broker.getBrokerPool().getSecurityManager();
            final Group group = sm.getGroup(groupName);
            return BooleanValue.valueOf(group != null);
        } else {
            throw new XPathException("You do not have permission to determine if the group exists");
        }
    }
View Full Code Here
295
296
297
298
299
300
301
302
303
304
305
306
  private Subject getUser(String user, String password, BrokerPool pool) throws XMLDBException {
    if (user == null) {
      user = SecurityManager.GUEST_USER;
      password = SecurityManager.GUEST_USER;
    }
    final SecurityManager securityManager = pool.getSecurityManager();
    try {
        return securityManager.authenticate(user, password);
  } catch (final AuthenticationException e) {
    throw new XMLDBException(ErrorCodes.PERMISSION_DENIED, e.getMessage(), e);
  }
  }
View Full Code Here
71
72
73
74
75
76
77
78
79
80
81
82
    @Override
    public Sequence eval(Sequence[] args, Sequence contextSequence) throws XPathException {
        final String groupName = args[0].getStringValue();

        //TODO replace with SecurityManager.getUsers(groupName)
        final SecurityManager manager = context.getBroker().getBrokerPool().getSecurityManager();
        final List<Account> users = manager.getGroupMembers(groupName);
        Collections.sort(users, new Comparator<Account>(){
            @Override
            public int compare(Account t, Account t1) {
                return t.getUsername().compareTo(t1.getUsername());
            }
View Full Code Here
91
92
93
94
95
96
97
98
99
100
101
102
103
104
      //get the username and password parameters
      final String userName = args[0].getStringValue();
      final String passwd = args[1].getStringValue();
     
      //try and validate the user and password
      final SecurityManager security = context.getBroker().getBrokerPool().getSecurityManager();
      Subject user;
      try {
        user = security.authenticate(userName, passwd);
      } catch (final AuthenticationException e) {
        logger.warn("Could not validate user " + userName + " ["+ e.getMessage() + "]");
        return BooleanValue.FALSE;
      }
//      why it was empty if user wasn't found??? -shabanovd
View Full Code Here
163
164
165
166
167
168
169
170
171
172
173
174
       
        try {
            Subject user;
         
            try {
              final SecurityManager sm = BrokerPool.getInstance().getSecurityManager();
              user = sm.authenticate(userName, password);
            } catch (final AuthenticationException e) {
                logger.error("Unable to authenticate user: " + userName + " " + getLocation());
                return BooleanValue.FALSE;
            } catch (final EXistException e) {
                logger.error("Unable to authenticate user: " + userName + " " + getLocation(), e);
View Full Code Here
46
47
48
49
50
51
52
53
54
55
56
57
       
        if(!xmldbURL.hasUserInfo()){
            return null;
        }
       
        final SecurityManager secman = pool.getSecurityManager();
        try {
            return secman.authenticate(xmldbURL.getUsername(), xmldbURL.getPassword());
    } catch (final AuthenticationException e) {
          return null;  // authentication is failed
    }
    }
View Full Code Here
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
    }

    @Override
    public void addAccount(final Account u) throws XMLDBException {
   
        final SecurityManager manager = pool.getSecurityManager();
       
        if(!manager.hasAdminPrivileges(user)) {
            throw new XMLDBException(ErrorCodes.PERMISSION_DENIED, " you are not allowed to change this user");
        }
       
        if(manager.hasAccount(u.getName())) {
            throw new XMLDBException(ErrorCodes.VENDOR_ERROR, "user " + u.getName() + " exists");
        }
       
        try {
            executeWithBroker(new BrokerOperation<Void>(){
                @Override
                public Void withBroker(DBBroker broker) throws XMLDBException, LockException, PermissionDeniedException, IOException, EXistException, TriggerException {
                    manager.addAccount(u);
                    return null;
                }
            });
        } catch(final Exception e) {
            throw new XMLDBException(ErrorCodes.PERMISSION_DENIED, e.getMessage(), e);
View Full Code Here
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
        }
    }

    @Override
    public void addGroup(final Group group) throws XMLDBException {
        final SecurityManager manager = pool.getSecurityManager();
   
        if(!manager.hasAdminPrivileges(user)) {
            throw new XMLDBException(ErrorCodes.PERMISSION_DENIED, " you are not allowed to add role");
        }

        if(manager.hasGroup(group.getName())) {
            throw new XMLDBException(ErrorCodes.VENDOR_ERROR, "group '" + group.getName() + "' exists");
        }
   
        try {
            executeWithBroker(new BrokerOperation<Void>(){
                @Override
                public Void withBroker(DBBroker broker) throws XMLDBException, LockException, PermissionDeniedException, IOException, EXistException, TriggerException {
                    manager.addGroup(group);
                    return null;
                }
            });
        } catch(final Exception e) {
            throw new XMLDBException(ErrorCodes.PERMISSION_DENIED, e.getMessage(), e);
View Full Code Here
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
        }
    }

    @Override
    public void setUserPrimaryGroup(final String username, final String groupName) throws XMLDBException {
        final SecurityManager manager = pool.getSecurityManager();
   
        if(!manager.hasGroup(groupName)) {
            throw new XMLDBException(ErrorCodes.PERMISSION_DENIED, "Group '" + groupName + "' does not exist!");
        }
       
        if(!manager.hasAdminPrivileges(user)) {
            throw new XMLDBException(ErrorCodes.PERMISSION_DENIED, "Not allowed to modify user");
        }
   
        try {
            executeWithBroker(new BrokerOperation<Void>(){
                @Override
                public Void withBroker(final DBBroker broker) throws XMLDBException, LockException, PermissionDeniedException, IOException, EXistException, TriggerException {
                    final Account account = manager.getAccount(username);
                    final Group group = manager.getGroup(groupName);
                    account.setPrimaryGroup(group);
                    manager.updateAccount(account);
                    return null;
                }
            });
        } catch(final Exception e) {
            throw new XMLDBException(ErrorCodes.PERMISSION_DENIED, e.getMessage(), e);
View Full Code Here
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
                        public Void modify(DocumentImpl document) throws PermissionDeniedException, SyntaxException, LockException {
                            if(!document.getPermissions().validate(user, Permission.WRITE)) {
                                throw new PermissionDeniedException("User is not allowed to lock resource " + resourceId);
                            }

                            final SecurityManager manager = broker.getBrokerPool().getSecurityManager();
                            if(!(user.equals(u) || manager.hasAdminPrivileges(user))) {
                                throw new PermissionDeniedException("User " + user.getName() + " is not allowed to lock resource '" + resourceId + "' for user " + u.getName());
                            }

                            final Account lockOwner = document.getUserLock();

                            if(lockOwner != null) {
                                if(lockOwner.equals(u)) {
                                    return null;
                                } else if(!manager.hasAdminPrivileges(user)) {
                                    throw new PermissionDeniedException("Resource '" + resourceId + "' is already locked by user " + lockOwner.getName());
                                }
                            }

                            document.setUserLock(u);
View Full Code Here
TOP

Related Classes of org.exist.security.SecurityManager

  • org.exist.config.ConfigurationDocumentTrigger
  • org.exist.dom.DocumentImpl
  • org.exist.dom.DocumentImplTest
  • org.exist.http.servlets.BasicAuthenticator
  • org.exist.http.servlets.DigestAuthenticator
  • org.exist.protocolhandler.embedded.EmbeddedUser
  • org.exist.scheduler.Job
  • org.exist.security.realm.ldap.xquery.AccountFunctions
  • org.exist.webdav.ExistResource
  • org.exist.xmldb.DatabaseImpl
    • Copyright © 2018 www.massapicom. All rights reserved.
    All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.