Examples of org.jboss.security.acl.ACL

org.jboss.security.acl.ACL

This interface represents an Access Control List (ACL), a data structure used to protect access to resources. It is composed of entries, where each entry is represented by the ALCEntry class and represents the permissions assigned to a given identity.

When a client attempts to perform an operation on a resource, the ACL associated to the resource is used to verify if the client has enough permissions to perform that operation. In order to do that, the ACLEntry corresponding to the client's identity is retrieved and then the permission set contained in the entry is verified to decide if access should be granted or not.
@author Stefan Guilhen

         assertNull(this.strategy.getACL(this.resources[index]));


      // create ACLs for half of the resources.
      for (int index = 0; index < this.resources.length / 2; index++)
      {
         ACL acl = this.strategy.createACL(this.resources[index]);
         this.createdACLs.add(acl);
         assertNotNull(acl);
         assertEquals("Unexpected entries found", 0, acl.getEntries().size());
         assertEquals("Unexpected resource", this.resources[index], acl.getResource());
      }


      // assert no ACL still exists for the remaining resources.
      int index = (this.resources.length / 2) + 1;
      for (; index < this.resources.length; index++)

View Full Code Here

    * @throws Exception if an error occurs when running the test.
    */
   public void testACLUpdate() throws Exception
   {
      // create an empty ACL.
      ACL acl = this.strategy.createACL(this.resources[0]);
      this.createdACLs.add(acl);
      assertEquals("Unexpected entries found", 0, acl.getEntries().size());


      // add some entries to the ACL.
      int entriesNumber = 20;
      for (int i = 0; i < entriesNumber; i++)
      {
         ACLEntry entry = new ACLEntryImpl(BasicACLPermission.CREATE, IdentityFactory.createIdentity("Identity" + i));
         acl.addEntry(entry);
      }
      assertTrue("Failed to update the ACL", this.strategy.updateACL(acl));


      // retrieve the ACL again and check it has the added entries.
      acl = this.strategy.getACL(this.resources[0]);
      assertEquals("Invalid number of entries", entriesNumber, acl.getEntries().size());


      // now remove one of the entries.
      ACLEntry entry = acl.getEntries().iterator().next();
      acl.removeEntry(entry);
      assertTrue("Failed to update the ACL", this.strategy.updateACL(acl));


      // retrieve the ACL again and check it has one less entry.
      acl = this.strategy.getACL(this.resources[0]);
      assertEquals("Invalid number of entries", entriesNumber - 1, acl.getEntries().size());


      // assert that update fails for an ACL not managed by the strategy.
      Collection<ACLEntry> entries = new ArrayList<ACLEntry>();
      entries.add(new ACLEntryImpl(BasicACLPermission.UPDATE, IdentityFactory.createIdentity("Another Identity")));
      ACL otherACL = new ACLImpl(this.resources[1], entries);
      assertFalse(this.strategy.updateACL(otherACL));
   }

View Full Code Here

    * @throws Exception if an error occurs when running the test.
    */
   public void testIsGranted() throws Exception
   {
      // build the tested ACL.
      ACL acl = new ACLImpl(new TestResource(10), Arrays.asList(this.entries));
      assertEquals("Invalid number of entries", ACL_SIZE, acl.getEntries().size());


      // test the identity associated with a basic permission.
      assertTrue(acl.isGranted(BasicACLPermission.READ, this.identities[0]));
      assertFalse(acl.isGranted(BasicACLPermission.DELETE, this.identities[0]));
      assertFalse(acl.isGranted(new CompositeACLPermission(BasicACLPermission.CREATE, BasicACLPermission.UPDATE),
            this.identities[0]));


      // assert the empty permission is always granted.
      ACLPermission emptyPermission = new CompositeACLPermission();
      for (int i = 0; i < ACL_SIZE; i++)
         assertTrue(acl.isGranted(emptyPermission, this.identities[i]));


      // assert that identities[1] is only granted the empty permission.
      for (BasicACLPermission permission : BasicACLPermission.values())
         assertFalse(acl.isGranted(permission, this.identities[1]));
      assertFalse(acl.isGranted(new CompositeACLPermission(BasicACLPermission.values()), this.identities[1]));


      // test the identities associated to composite permissions.
      assertTrue(acl.isGranted(BasicACLPermission.READ, this.identities[2]));
      assertFalse(acl.isGranted(new CompositeACLPermission(BasicACLPermission.READ, BasicACLPermission.UPDATE),
            this.identities[2]));
      assertFalse(acl.isGranted(BasicACLPermission.CREATE, this.identities[2]));
      assertFalse(acl.isGranted(new CompositeACLPermission(BasicACLPermission.UPDATE, BasicACLPermission.DELETE),
            this.identities[2]));


      assertTrue(acl.isGranted(BasicACLPermission.CREATE, this.identities[3]));
      assertTrue(acl.isGranted(BasicACLPermission.UPDATE, this.identities[3]));
      assertTrue(acl.isGranted(new CompositeACLPermission(BasicACLPermission.CREATE, BasicACLPermission.DELETE),
            this.identities[3]));
      assertFalse(acl.isGranted(BasicACLPermission.READ, this.identities[3]));
      assertFalse(acl.isGranted(new CompositeACLPermission(BasicACLPermission.READ, BasicACLPermission.UPDATE),
            this.identities[3]));


      for (BasicACLPermission permission : BasicACLPermission.values())
         assertTrue(acl.isGranted(permission, this.identities[4]));
      assertTrue(acl.isGranted(new CompositeACLPermission(BasicACLPermission.READ), this.identities[4]));
      assertTrue(acl.isGranted(new CompositeACLPermission(BasicACLPermission.CREATE, BasicACLPermission.DELETE),
            this.identities[4]));
      assertTrue(acl.isGranted(new CompositeACLPermission(BasicACLPermission.CREATE, BasicACLPermission.UPDATE,
            BasicACLPermission.DELETE), this.identities[4]));
      assertTrue(acl.isGranted(new CompositeACLPermission(BasicACLPermission.values()), this.identities[4]));
   }

View Full Code Here

        registration.registerACL( localresource,
                                  entries );
    }


    public void removePermission(final UUID uuid) {
        ACL acl = this.strategy.getACL( new UUIDResource( uuid.toString() ) );
        this.strategy.removeACL( acl );
    }

View Full Code Here

TOP

Related Classes of org.jboss.security.acl.ACL

org.drools.repository.security.DroolsRepositoryACLManager

org.jboss.test.security.acl.ACLUnitTestCase

org.jboss.test.security.acl.JPAStrategyUnitTestCase

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.