/*
* This is part of Geomajas, a GIS framework, http://www.geomajas.org/.
*
* Copyright 2008-2011 Geosparc nv, http://www.geosparc.com/, Belgium.
*
* The program is available in open source according to the GNU Affero
* General Public License. All contributions in this program are covered
* by the Geomajas Contributors License Agreement. For full licensing
* details, see LICENSE.txt in the project root.
*/
package org.geomajas.test.security;
import com.vividsolutions.jts.geom.Coordinate;
import com.vividsolutions.jts.geom.Envelope;
import com.vividsolutions.jts.geom.Geometry;
import com.vividsolutions.jts.geom.GeometryFactory;
import com.vividsolutions.jts.geom.PrecisionModel;
import junit.framework.Assert;
import org.geomajas.command.CommandDispatcher;
import org.geomajas.command.CommandResponse;
import org.geomajas.global.ExceptionCode;
import org.geomajas.global.GeomajasException;
import org.geomajas.security.GeomajasSecurityException;
import org.geomajas.layer.VectorLayerService;
import org.geomajas.layer.bean.BeanLayer;
import org.geomajas.layer.feature.Feature;
import org.geomajas.layer.feature.InternalFeature;
import org.geomajas.layer.feature.attribute.StringAttribute;
import org.geomajas.plugin.staticsecurity.command.dto.LoginRequest;
import org.geomajas.plugin.staticsecurity.command.dto.LoginResponse;
import org.geomajas.security.SecurityManager;
import org.geomajas.service.DtoConverterService;
import org.geomajas.service.FilterService;
import org.geotools.referencing.CRS;
import org.junit.After;
import org.junit.Test;
import org.junit.runner.RunWith;
import org.opengis.filter.Filter;
import org.opengis.referencing.crs.CoordinateReferenceSystem;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.beans.factory.annotation.Qualifier;
import org.springframework.test.annotation.DirtiesContext;
import org.springframework.test.context.ContextConfiguration;
import org.springframework.test.context.junit4.SpringJUnit4ClassRunner;
import java.util.ArrayList;
import java.util.List;
/**
* Tests for proper application of security in {@link VectorLayerServiceInvisibleLayerTest}.
*
* @author Joachim Van der Auwera
*/
@RunWith(SpringJUnit4ClassRunner.class)
@ContextConfiguration(locations = {"/org/geomajas/spring/geomajasContext.xml",
"/org/geomajas/layer/bean/beanContext.xml", "/org/geomajas/layer/bean/layerBeans.xml",
"/org/geomajas/test/security/VectorLayerSecurityArea.xml"})
public class VectorLayerServiceVisibleAreaTest {
private static final String LAYER_ID = "beans";
private static final String STRING_ATTR = "stringAttr";
private static final double ALLOWANCE = .00000001;
@Autowired
private VectorLayerService layerService;
@Autowired
@Qualifier("beans")
private BeanLayer beanLayer;
@Autowired
private SecurityManager securityManager;
@Autowired
private CommandDispatcher commandDispatcher;
@Autowired
private DtoConverterService converterService;
@Autowired
private FilterService filterService;
@After
public void clearSecurityContext() {
securityManager.clearSecurityContext();
}
// assure we are logged in as a specific user to set correct authorizations
public void login(String name) {
LoginRequest request = new LoginRequest();
request.setLogin(name);
request.setPassword(name);
CommandResponse response = commandDispatcher.execute("command.staticsecurity.Login", request, null, "en");
Assert.assertFalse(response.isError());
Assert.assertTrue(response instanceof LoginResponse);
securityManager.createSecurityContext(((LoginResponse)response).getToken());
}
@Test
public void testGetFeaturesVisibleArea() throws Exception {
List<InternalFeature> features;
CoordinateReferenceSystem crs = beanLayer.getCrs();
login("luc");
features = layerService.getFeatures(LAYER_ID,crs, null, null, VectorLayerService.FEATURE_INCLUDE_NONE);
Assert.assertEquals(3, features.size());
login("marino");
features = layerService.getFeatures(LAYER_ID, crs, null, null, VectorLayerService.FEATURE_INCLUDE_NONE);
Assert.assertEquals(2, features.size());
int check = 0;
for (InternalFeature feature : features) {
check |= 1 << (Integer.parseInt(feature.getId()) - 1);
}
Assert.assertEquals(6, check);
}
@Test
public void testGetBoundsVisibleArea() throws Exception {
CoordinateReferenceSystem crs = beanLayer.getCrs();
Envelope envelope;
login("luc");
envelope = layerService.getBounds(LAYER_ID, crs, null);
Assert.assertEquals(0, envelope.getMinX(), ALLOWANCE);
Assert.assertEquals(0, envelope.getMinY(), ALLOWANCE);
Assert.assertEquals(7, envelope.getMaxX(), ALLOWANCE);
Assert.assertEquals(3, envelope.getMaxY(), ALLOWANCE);
login("marino");
envelope = layerService.getBounds(LAYER_ID, crs, null);
Assert.assertEquals(2, envelope.getMinX(), ALLOWANCE);
Assert.assertEquals(0, envelope.getMinY(), ALLOWANCE);
Assert.assertEquals(7, envelope.getMaxX(), ALLOWANCE);
Assert.assertEquals(3, envelope.getMaxY(), ALLOWANCE);
}
@Test
@DirtiesContext
public void testSaveOrUpdateUpdateArea() throws Exception {
Filter filter;
List<InternalFeature> oldFeatures;
List<InternalFeature> newFeatures;
InternalFeature feature;
CoordinateReferenceSystem crs = beanLayer.getCrs();
login("marino");
// should be able to update feature "2"
filter = filterService.createFidFilter(new String[]{"2"});
oldFeatures = layerService.getFeatures(LAYER_ID, crs, filter, null,
VectorLayerService.FEATURE_INCLUDE_ATTRIBUTES);
Assert.assertEquals(1, oldFeatures.size());
feature = oldFeatures.get(0);
newFeatures = new ArrayList<InternalFeature>();
feature = feature.clone();
newFeatures.add(feature);
feature.getAttributes().put(STRING_ATTR, new StringAttribute("changed"));
layerService.saveOrUpdate(LAYER_ID, crs, oldFeatures, newFeatures);
// should not be able to update feature "3"
filter = filterService.createFidFilter(new String[]{"3"});
oldFeatures = layerService.getFeatures(LAYER_ID, crs, filter, null,
VectorLayerService.FEATURE_INCLUDE_ATTRIBUTES);
Assert.assertEquals(1, oldFeatures.size());
feature = oldFeatures.get(0);
newFeatures = new ArrayList<InternalFeature>();
feature = feature.clone();
newFeatures.add(feature);
feature.getAttributes().put(STRING_ATTR, new StringAttribute("changed"));
try {
layerService.saveOrUpdate(LAYER_ID, crs, oldFeatures, newFeatures);
Assert.fail("update area not checked when updating");
} catch (GeomajasException ge) {
Assert.assertEquals(ExceptionCode.FEATURE_UPDATE_PROHIBITED, ge.getExceptionCode());
}
}
@Test
@DirtiesContext
public void testSaveOrUpdateDeleteArea() throws Exception {
Filter filter;
List<InternalFeature> oldFeatures;
List<InternalFeature> newFeatures;
InternalFeature feature;
CoordinateReferenceSystem crs = beanLayer.getCrs();
login("marino");
// should not be able to delete feature "2"
filter = filterService.createFidFilter(new String[]{"2"});
oldFeatures = layerService.getFeatures(LAYER_ID, crs, filter, null,
VectorLayerService.FEATURE_INCLUDE_ATTRIBUTES);
Assert.assertEquals(1, oldFeatures.size());
feature = oldFeatures.get(0);
newFeatures = new ArrayList<InternalFeature>();
try {
layerService.saveOrUpdate(LAYER_ID, crs, oldFeatures, newFeatures);
Assert.fail("delete area not checked");
} catch (GeomajasException ge) {
Assert.assertEquals(ExceptionCode.FEATURE_DELETE_PROHIBITED, ge.getExceptionCode());
}
// should be able to delete feature "1"
filter = filterService.createFidFilter(new String[]{"3"});
oldFeatures = layerService.getFeatures(LAYER_ID, crs, filter, null,
VectorLayerService.FEATURE_INCLUDE_ATTRIBUTES);
Assert.assertEquals(1, oldFeatures.size());
feature = oldFeatures.get(0);
newFeatures = new ArrayList<InternalFeature>();
layerService.saveOrUpdate(LAYER_ID, crs, oldFeatures, newFeatures);
filter = filterService.createFidFilter(new String[]{"3"});
oldFeatures = layerService.getFeatures(LAYER_ID,
crs, filter, null, VectorLayerService.FEATURE_INCLUDE_ATTRIBUTES);
Assert.assertEquals(0, oldFeatures.size());
}
@Test
@DirtiesContext
public void testSaveOrUpdateCreateArea() throws Exception {
Filter filter;
List<InternalFeature> oldFeatures;
List<InternalFeature> newFeatures;
InternalFeature feature;
CoordinateReferenceSystem crs = beanLayer.getCrs();
GeometryFactory geometryFactory = new GeometryFactory(new PrecisionModel());
Geometry geometry;
login("marino");
// verify failing
oldFeatures = new ArrayList<InternalFeature>();
newFeatures = new ArrayList<InternalFeature>();
feature = converterService.toInternal(new Feature());
feature.setId("4");
feature.setLayer(beanLayer);
// feature needs a geometry or exceptions all over
geometry = geometryFactory.createPoint(new Coordinate(5.5, 5.5));
feature.setGeometry(geometry);
newFeatures.add(feature);
try {
layerService.saveOrUpdate(LAYER_ID, crs, oldFeatures, newFeatures);
Assert.fail("create area not checked");
} catch (GeomajasSecurityException gse) {
Assert.assertEquals(ExceptionCode.FEATURE_CREATE_PROHIBITED, gse.getExceptionCode());
}
filter = filterService.createFidFilter(new String[]{"4"});
oldFeatures = layerService.getFeatures(LAYER_ID,
crs, filter, null, VectorLayerService.FEATURE_INCLUDE_ATTRIBUTES);
Assert.assertEquals(0, oldFeatures.size());
// verify success
oldFeatures = new ArrayList<InternalFeature>();
newFeatures = new ArrayList<InternalFeature>();
feature = converterService.toInternal(new Feature());
feature.setId("4");
feature.setLayer(beanLayer);
// feature needs a geometry or exceptions all over
geometry = geometryFactory.createPoint(new Coordinate(1.5, 1.5));
feature.setGeometry(geometry);
newFeatures.add(feature);
layerService.saveOrUpdate(LAYER_ID, crs, oldFeatures, newFeatures);
filter = filterService.createFidFilter(new String[]{"4"});
oldFeatures = layerService.getFeatures(LAYER_ID,
crs, filter, null, VectorLayerService.FEATURE_INCLUDE_ATTRIBUTES);
Assert.assertEquals(1, oldFeatures.size());
}
}