/*
JSPWiki - a JSP-based WikiWiki clone.
Licensed to the Apache Software Foundation (ASF) under one
or more contributor license agreements. See the NOTICE file
distributed with this work for additional information
regarding copyright ownership. The ASF licenses this file
to you under the Apache License, Version 2.0 (the
"License"); you may not use this file except in compliance
with the License. You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing,
software distributed under the License is distributed on an
"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
KIND, either express or implied. See the License for the
specific language governing permissions and limitations
under the License.
*/
package com.ecyrd.jspwiki.auth.permissions;
import java.security.Permission;
import java.security.PermissionCollection;
import java.util.Enumeration;
import java.util.Hashtable;
/**
* A collection of AllPermission objects.
* @author Andrew R. Jaquith
*/
public class AllPermissionCollection extends PermissionCollection
{
private static final long serialVersionUID = 1L;
private boolean m_notEmpty = false;
private boolean m_readOnly = false;
protected final Hashtable<Permission, Permission> m_permissions = new Hashtable<Permission, Permission>();
/**
* Adds an AllPermission object to this AllPermissionCollection. If this
* collection was previously marked read-only, or if the permission supplied
* is not of type {@link AllPermission}, a {@link SecurityException} is
* thrown.
* @see java.security.PermissionCollection#add(java.security.Permission)
*
* @param permission {@inheritDoc}
*/
@Override
public void add( Permission permission )
{
if ( !AllPermission.isJSPWikiPermission( permission ) )
{
throw new IllegalArgumentException(
"Permission must be of type com.ecyrd.jspwiki.permissions.*Permission." );
}
if ( m_readOnly )
{
throw new SecurityException( "attempt to add a Permission to a readonly PermissionCollection" );
}
m_notEmpty = true;
// This is a filthy hack, but it keeps us from having to write our own
// Enumeration implementation
m_permissions.put( permission, permission );
}
/**
* Returns an enumeration of all AllPermission objects stored in this
* collection.
* @see java.security.PermissionCollection#elements()
*
* @return {@inheritDoc}
*/
@Override
public Enumeration<Permission> elements()
{
return m_permissions.elements();
}
/**
* Iterates through the AllPermission objects stored by this
* AllPermissionCollection and determines if any of them imply a supplied
* Permission. If the Permission is not of type {@link AllPermission},
* {@link PagePermission} or {@link WikiPermission}, this method will
* return <code>false</code>. If none of the AllPermissions stored in
* this collection imply the permission, the method returns
* <code>false</code>; conversely, if one of the AllPermission objects
* implies the permission, the method returns <code>true</code>.
* @param permission the Permission to test. It may be any Permission type,
* but only the AllPermission, PagePermission or WikiPermission types are
* actually evaluated.
* @see java.security.PermissionCollection#implies(java.security.Permission)
*
* @return {@inheritDoc}
*/
public boolean implies( Permission permission )
{
// If nothing in the collection yet, fail fast
if ( !m_notEmpty )
{
return false;
}
// If not one of our permission types, it's not implied
if ( !AllPermission.isJSPWikiPermission( permission ) )
{
return false;
}
// Step through each AllPermission
Enumeration<Permission> permEnum = m_permissions.elements();
while( permEnum.hasMoreElements() )
{
Permission storedPermission = permEnum.nextElement();
if ( storedPermission.implies( permission ) )
{
return true;
}
}
return false;
}
/**
* {@inheritDoc}
*/
public boolean isReadOnly()
{
return m_readOnly;
}
/**
* @see java.security.PermissionCollection#setReadOnly()
*/
public void setReadOnly()
{
m_readOnly = true;
}
}