com.ikon.module.jcr.JcrAuthModule.java Source code

Java tutorial

Introduction

Here is the source code for com.ikon.module.jcr.JcrAuthModule.java

Source

/**
 *  openkm, Open Document Management System (http://www.openkm.com)
 *  Copyright (c) 2006-2013  Paco Avila & Josep Llort
 *
 *  No bytes were intentionally harmed during the development of this application.
 *
 *  This program is free software; you can redistribute it and/or modify
 *  it under the terms of the GNU General Public License as published by
 *  the Free Software Foundation; either version 2 of the License, or
 *  (at your option) any later version.
 *
 *  This program is distributed in the hope that it will be useful,
 *  but WITHOUT ANY WARRANTY; without even the implied warranty of
 *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 *  GNU General Public License for more details.
 *
 *  You should have received a copy of the GNU General Public License along
 *  with this program; if not, write to the Free Software Foundation, Inc.,
 *  51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
 */

package com.ikon.module.jcr;

import java.util.ArrayList;
import java.util.HashMap;
import java.util.List;
import java.util.Map;
import java.util.UUID;

import javax.jcr.LoginException;
import javax.jcr.Node;
import javax.jcr.NodeIterator;
import javax.jcr.PropertyType;
import javax.jcr.Session;
import javax.jcr.SimpleCredentials;
import javax.jcr.Value;
import javax.jcr.ValueFormatException;

import org.apache.commons.lang.NotImplementedException;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;

import com.ikon.bean.Document;
import com.ikon.bean.Folder;
import com.ikon.bean.Mail;
import com.ikon.bean.Note;
import com.ikon.bean.Permission;
import com.ikon.bean.Property;
import com.ikon.bean.Repository;
import com.ikon.core.AccessDeniedException;
import com.ikon.core.Config;
import com.ikon.core.DatabaseException;
import com.ikon.core.PathNotFoundException;
import com.ikon.core.RepositoryException;
import com.ikon.module.AuthModule;
import com.ikon.module.common.CommonAuthModule;
import com.ikon.module.jcr.stuff.JCRUtils;
import com.ikon.module.jcr.stuff.JcrSessionManager;
import com.ikon.principal.PrincipalAdapterException;
import com.ikon.util.UserActivity;

public class JcrAuthModule implements AuthModule {
    private static Logger log = LoggerFactory.getLogger(JcrAuthModule.class);

    @Override
    public void login() throws RepositoryException, DatabaseException {
        Session session = null;

        try {
            session = JCRUtils.getSession();

            // Activity log
            UserActivity.log(session.getUserID(), "LOGIN", null, null, null);
        } catch (LoginException e) {
            throw new RepositoryException(e.getMessage(), e);
        } catch (javax.jcr.RepositoryException e) {
            throw new RepositoryException(e.getMessage(), e);
        } finally {
            JCRUtils.logout(session);
        }
    }

    @Override
    public String login(String user, String password)
            throws AccessDeniedException, RepositoryException, DatabaseException {
        String token = null;

        try {
            if (Config.SYSTEM_MAINTENANCE) {
                throw new AccessDeniedException("System under maintenance");
            } else {
                javax.jcr.Repository r = JcrRepositoryModule.getRepository();
                Session session = r.login(new SimpleCredentials(user, password.toCharArray()), null);
                token = UUID.randomUUID().toString();
                JcrSessionManager.getInstance().add(token, session);

                // Activity log
                UserActivity.log(session.getUserID(), "LOGIN", null, null, token);
            }
        } catch (LoginException e) {
            log.error(e.getMessage(), e);
            throw new AccessDeniedException(e.getMessage(), e);
        } catch (javax.jcr.RepositoryException e) {
            log.error(e.getMessage(), e);
            throw new RepositoryException(e.getMessage(), e);
        }

        return token;
    }

    @Override
    public void logout(String token) throws RepositoryException, DatabaseException {
        Session session = null;

        try {
            if (token == null) {
                session = JCRUtils.getSession();
            } else {
                session = JcrSessionManager.getInstance().get(token);
            }

            if (session != null) {
                // Activity log
                UserActivity.log(session.getUserID(), "LOGOUT", token, null, null);

                JcrSessionManager.getInstance().remove(token);
                session.logout();
            }
        } catch (LoginException e) {
            throw new RepositoryException(e.getMessage(), e);
        } catch (javax.jcr.RepositoryException e) {
            throw new RepositoryException(e.getMessage(), e);
        } finally {
            if (token == null)
                JCRUtils.logout(session);
        }
    }

    /**
     * Load user data
     */
    public static void loadUserData(Session session) throws DatabaseException, javax.jcr.RepositoryException {
        log.debug("loadUserData({}) -> {}", session.getUserID(), session);

        synchronized (session.getUserID()) {
            if (!session.itemExists("/" + Repository.TRASH + "/" + session.getUserID())) {
                log.info("Create {}/{}", Repository.TRASH, session.getUserID());
                Node okmTrash = session.getRootNode().getNode(Repository.TRASH);
                createBase(session, okmTrash);
                okmTrash.save();
            }

            if (!session.itemExists("/" + Repository.PERSONAL + "/" + session.getUserID())) {
                log.info("Create {}/{}", Repository.PERSONAL, session.getUserID());
                Node okmPersonal = session.getRootNode().getNode(Repository.PERSONAL);
                createBase(session, okmPersonal);
                okmPersonal.save();
            }

            if (!session.itemExists("/" + Repository.MAIL + "/" + session.getUserID())) {
                log.info("Create {}/{}", Repository.MAIL, session.getUserID());
                Node okmMail = session.getRootNode().getNode(Repository.MAIL);
                createBase(session, okmMail);
                okmMail.save();
            }
        }

        log.debug("loadUserData: void");
    }

    /**
     * Create base node
     */
    private static Node createBase(Session session, Node root) throws javax.jcr.RepositoryException {
        log.debug("createBase({}, {})", session, root);
        Node base = root.addNode(session.getUserID(), Folder.TYPE);

        // Add basic properties
        base.setProperty(Folder.AUTHOR, session.getUserID());
        base.setProperty(Folder.NAME, session.getUserID());
        base.setProperty(Property.KEYWORDS, new String[] {});
        base.setProperty(Property.CATEGORIES, new String[] {}, PropertyType.REFERENCE);

        // Auth info
        base.setProperty(Permission.USERS_READ, new String[] { session.getUserID() });
        base.setProperty(Permission.USERS_WRITE, new String[] { session.getUserID() });
        base.setProperty(Permission.USERS_DELETE, new String[] { session.getUserID() });
        base.setProperty(Permission.USERS_SECURITY, new String[] { session.getUserID() });
        base.setProperty(Permission.ROLES_READ, new String[] {});
        base.setProperty(Permission.ROLES_WRITE, new String[] {});
        base.setProperty(Permission.ROLES_DELETE, new String[] {});
        base.setProperty(Permission.ROLES_SECURITY, new String[] {});

        return base;
    }

    @Override
    public void grantUser(String token, String nodePath, String user, int permissions, boolean recursive)
            throws PathNotFoundException, AccessDeniedException, RepositoryException, DatabaseException {
        log.debug("grantUser({}, {}, {}, {})", new Object[] { nodePath, user, permissions, recursive });
        Node node = null;
        Session session = null;

        try {
            if (token == null) {
                session = JCRUtils.getSession();
            } else {
                session = JcrSessionManager.getInstance().get(token);
            }

            node = session.getRootNode().getNode(nodePath.substring(1));
            String property = null;

            if (permissions == Permission.READ) {
                property = Permission.USERS_READ;
            } else if (permissions == Permission.WRITE) {
                property = Permission.USERS_WRITE;
            } else if (permissions == Permission.DELETE) {
                property = Permission.USERS_DELETE;
            } else if (permissions == Permission.SECURITY) {
                property = Permission.USERS_SECURITY;
            }

            if (property != null) {
                synchronized (node) {
                    if (recursive) {
                        grantUserInDepth(node, user, property);
                    } else {
                        grantUser(node, user, property);
                    }
                }

                // Activity log
                UserActivity.log(session.getUserID(), "GRANT_USER", node.getUUID(), nodePath,
                        user + ", " + permissions);
            }
        } catch (javax.jcr.AccessDeniedException e) {
            log.warn(e.getMessage(), e);
            JCRUtils.discardsPendingChanges(node);
            throw new AccessDeniedException(e.getMessage(), e);
        } catch (javax.jcr.PathNotFoundException e) {
            log.warn(e.getMessage(), e);
            JCRUtils.discardsPendingChanges(node);
            throw new PathNotFoundException(e.getMessage(), e);
        } catch (javax.jcr.RepositoryException e) {
            log.error(e.getMessage(), e);
            JCRUtils.discardsPendingChanges(node);
            throw new RepositoryException(e.getMessage(), e);
        } finally {
            if (token == null)
                JCRUtils.logout(session);
        }

        log.debug("grantUser: void");
    }

    /**
     * Grant user
     */
    private void grantUser(Node node, String user, String property)
            throws ValueFormatException, PathNotFoundException, javax.jcr.RepositoryException {
        Value[] actualUsers = node.getProperty(property).getValues();
        ArrayList<String> newUsers = new ArrayList<String>();

        for (int i = 0; i < actualUsers.length; i++) {
            newUsers.add(actualUsers[i].getString());
        }

        // If the user isn't already granted add him
        if (!newUsers.contains(user)) {
            newUsers.add(user);
        }

        try {
            node.setProperty(property, (String[]) newUsers.toArray(new String[newUsers.size()]));
            node.save();
        } catch (javax.jcr.lock.LockException e) {
            log.warn("grantUser -> LockException : {}", node.getPath());
            JCRUtils.discardsPendingChanges(node);
        } catch (javax.jcr.AccessDeniedException e) {
            log.warn("grantUser -> AccessDeniedException : {}", node.getPath());
            JCRUtils.discardsPendingChanges(node);
        }
    }

    /**
     * Grant user recursively
     */
    private void grantUserInDepth(Node node, String user, String property)
            throws ValueFormatException, PathNotFoundException, javax.jcr.RepositoryException {
        if (node.isNodeType(Document.TYPE)) {
            grantUser(node, user, property);
        } else if (node.isNodeType(Folder.TYPE)) {
            grantUser(node, user, property);

            for (NodeIterator it = node.getNodes(); it.hasNext();) {
                Node child = it.nextNode();
                grantUserInDepth(child, user, property);
            }
        } else if (node.isNodeType(Mail.TYPE)) {
            grantUser(node, user, property);
        } else if (node.isNodeType(Note.LIST_TYPE)) {
            // Note nodes has no security
        }
    }

    @Override
    public void revokeUser(String token, String nodePath, String user, int permissions, boolean recursive)
            throws PathNotFoundException, AccessDeniedException, RepositoryException, DatabaseException {
        log.debug("revokeUser({}, {}, {}, {})", new Object[] { nodePath, user, permissions, recursive });
        Node node = null;
        Session session = null;

        try {
            if (token == null) {
                session = JCRUtils.getSession();
            } else {
                session = JcrSessionManager.getInstance().get(token);
            }

            node = session.getRootNode().getNode(nodePath.substring(1));
            String property = null;

            if (permissions == Permission.READ) {
                property = Permission.USERS_READ;
            } else if (permissions == Permission.WRITE) {
                property = Permission.USERS_WRITE;
            } else if (permissions == Permission.DELETE) {
                property = Permission.USERS_DELETE;
            } else if (permissions == Permission.SECURITY) {
                property = Permission.USERS_SECURITY;
            }

            if (property != null) {
                synchronized (node) {
                    if (recursive) {
                        revokeUserInDepth(node, user, property);
                    } else {
                        revokeUser(node, user, property);
                    }
                }

                // Activity log
                UserActivity.log(session.getUserID(), "REVOKE_USER", node.getUUID(), nodePath,
                        user + ", " + permissions);
            }
        } catch (javax.jcr.AccessDeniedException e) {
            log.warn(e.getMessage(), e);
            JCRUtils.discardsPendingChanges(node);
            throw new AccessDeniedException(e.getMessage(), e);
        } catch (javax.jcr.PathNotFoundException e) {
            log.warn(e.getMessage(), e);
            JCRUtils.discardsPendingChanges(node);
            throw new PathNotFoundException(e.getMessage(), e);
        } catch (javax.jcr.RepositoryException e) {
            log.error(e.getMessage(), e);
            JCRUtils.discardsPendingChanges(node);
            throw new RepositoryException(e.getMessage(), e);
        } finally {
            if (token == null)
                JCRUtils.logout(session);
        }

        log.debug("revokeUser: void");
    }

    /**
     * Revoke user
     */
    private void revokeUser(Node node, String user, String property)
            throws ValueFormatException, PathNotFoundException, javax.jcr.RepositoryException {
        Value[] actualUsers = node.getProperty(property).getValues();
        List<String> newUsers = new ArrayList<String>();

        for (int i = 0; i < actualUsers.length; i++) {
            if (!actualUsers[i].getString().equals(user)) {
                newUsers.add(actualUsers[i].getString());
            }
        }

        try {
            node.setProperty(property, (String[]) newUsers.toArray(new String[newUsers.size()]));
            node.save();
        } catch (javax.jcr.lock.LockException e) {
            log.warn("revokeUser -> LockException : " + node.getPath());
            JCRUtils.discardsPendingChanges(node);
        } catch (javax.jcr.AccessDeniedException e) {
            log.warn("revokeUser -> AccessDeniedException : " + node.getPath());
            JCRUtils.discardsPendingChanges(node);
        }
    }

    /**
     * Revoke user recursively
     */
    private void revokeUserInDepth(Node node, String user, String property)
            throws ValueFormatException, PathNotFoundException, javax.jcr.RepositoryException {
        if (node.isNodeType(Document.TYPE)) {
            revokeUser(node, user, property);
        } else if (node.isNodeType(Folder.TYPE)) {
            revokeUser(node, user, property);

            for (NodeIterator it = node.getNodes(); it.hasNext();) {
                Node child = it.nextNode();
                revokeUserInDepth(child, user, property);
            }
        } else if (node.isNodeType(Mail.TYPE)) {
            revokeUser(node, user, property);
        } else if (node.isNodeType(Note.LIST_TYPE)) {
            // Note nodes has no security
        }
    }

    @Override
    public void grantRole(String token, String nodePath, String role, int permissions, boolean recursive)
            throws PathNotFoundException, AccessDeniedException, RepositoryException, DatabaseException {
        log.debug("grantRole({}, {}, {}, {})", new Object[] { nodePath, role, permissions, recursive });
        Node node = null;
        Session session = null;

        try {
            if (token == null) {
                session = JCRUtils.getSession();
            } else {
                session = JcrSessionManager.getInstance().get(token);
            }

            node = session.getRootNode().getNode(nodePath.substring(1));
            String property = null;

            if (permissions == Permission.READ) {
                property = Permission.ROLES_READ;
            } else if (permissions == Permission.WRITE) {
                property = Permission.ROLES_WRITE;
            } else if (permissions == Permission.DELETE) {
                property = Permission.ROLES_DELETE;
            } else if (permissions == Permission.SECURITY) {
                property = Permission.ROLES_SECURITY;
            }

            if (property != null) {
                synchronized (node) {
                    if (recursive) {
                        grantRoleInDepth(node, role, property);
                    } else {
                        grantRole(node, role, property);
                    }
                }

                // Activity log
                UserActivity.log(session.getUserID(), "GRANT_ROLE", node.getUUID(), nodePath,
                        role + ", " + permissions);
            }
        } catch (javax.jcr.AccessDeniedException e) {
            log.warn(e.getMessage(), e);
            JCRUtils.discardsPendingChanges(node);
            throw new AccessDeniedException(e.getMessage(), e);
        } catch (javax.jcr.PathNotFoundException e) {
            log.warn(e.getMessage(), e);
            JCRUtils.discardsPendingChanges(node);
            throw new PathNotFoundException(e.getMessage(), e);
        } catch (javax.jcr.RepositoryException e) {
            log.error(e.getMessage(), e);
            JCRUtils.discardsPendingChanges(node);
            throw new RepositoryException(e.getMessage(), e);
        } finally {
            if (token == null)
                JCRUtils.logout(session);
        }

        log.debug("grantRole: void");
    }

    /**
     * Grant role
     */
    private void grantRole(Node node, String role, String property)
            throws ValueFormatException, PathNotFoundException, javax.jcr.RepositoryException {
        Value[] actualRoles = node.getProperty(property).getValues();
        List<String> newRoles = new ArrayList<String>();

        for (int i = 0; i < actualRoles.length; i++) {
            newRoles.add(actualRoles[i].getString());
        }

        // If the role isn't already granted add him
        if (!newRoles.contains(role)) {
            newRoles.add(role);
        }

        try {
            node.setProperty(property, (String[]) newRoles.toArray(new String[newRoles.size()]));
            node.save();
        } catch (javax.jcr.lock.LockException e) {
            log.warn("grantRole -> LockException : {}", node.getPath());
            JCRUtils.discardsPendingChanges(node);
        } catch (javax.jcr.AccessDeniedException e) {
            log.warn("grantRole -> AccessDeniedException : {}", node.getPath());
            JCRUtils.discardsPendingChanges(node);
        }
    }

    /**
     * Grant role recursively
     */
    private void grantRoleInDepth(Node node, String role, String property)
            throws ValueFormatException, PathNotFoundException, javax.jcr.RepositoryException {
        if (node.isNodeType(Document.TYPE)) {
            grantRole(node, role, property);
        } else if (node.isNodeType(Folder.TYPE)) {
            grantRole(node, role, property);

            for (NodeIterator it = node.getNodes(); it.hasNext();) {
                Node child = it.nextNode();
                grantRoleInDepth(child, role, property);
            }
        } else if (node.isNodeType(Mail.TYPE)) {
            grantRole(node, role, property);
        } else if (node.isNodeType(Note.LIST_TYPE)) {
            // Note nodes has no security
        }
    }

    @Override
    public void revokeRole(String token, String nodePath, String role, int permissions, boolean recursive)
            throws PathNotFoundException, AccessDeniedException, RepositoryException, DatabaseException {
        log.debug("revokeRole({}, {}, {}, {})", new Object[] { nodePath, role, permissions, recursive });
        Node node = null;
        Session session = null;

        try {
            if (token == null) {
                session = JCRUtils.getSession();
            } else {
                session = JcrSessionManager.getInstance().get(token);
            }

            node = session.getRootNode().getNode(nodePath.substring(1));
            String property = null;

            if (permissions == Permission.READ) {
                property = Permission.ROLES_READ;
            } else if (permissions == Permission.WRITE) {
                property = Permission.ROLES_WRITE;
            } else if (permissions == Permission.DELETE) {
                property = Permission.ROLES_DELETE;
            } else if (permissions == Permission.SECURITY) {
                property = Permission.ROLES_SECURITY;
            }

            if (property != null) {
                synchronized (node) {
                    if (recursive) {
                        revokeRoleInDepth(node, role, property);
                    } else {
                        revokeRole(node, role, property);
                    }
                }

                // Activity log
                UserActivity.log(session.getUserID(), "REVOKE_ROLE", node.getUUID(), nodePath,
                        role + ", " + permissions);
            }
        } catch (javax.jcr.AccessDeniedException e) {
            log.warn(e.getMessage(), e);
            JCRUtils.discardsPendingChanges(node);
            throw new AccessDeniedException(e.getMessage(), e);
        } catch (javax.jcr.PathNotFoundException e) {
            log.warn(e.getMessage(), e);
            JCRUtils.discardsPendingChanges(node);
            throw new PathNotFoundException(e.getMessage(), e);
        } catch (javax.jcr.RepositoryException e) {
            log.error(e.getMessage(), e);
            JCRUtils.discardsPendingChanges(node);
            throw new RepositoryException(e.getMessage(), e);
        } finally {
            if (token == null)
                JCRUtils.logout(session);
        }

        log.debug("revokeRole: void");
    }

    /**
     * Revoke role
     */
    private void revokeRole(Node node, String role, String property)
            throws ValueFormatException, PathNotFoundException, javax.jcr.RepositoryException {
        Value[] actualRoles = node.getProperty(property).getValues();
        List<String> newRoles = new ArrayList<String>();

        for (int i = 0; i < actualRoles.length; i++) {
            if (!actualRoles[i].getString().equals(role)) {
                newRoles.add(actualRoles[i].getString());
            }
        }

        try {
            node.setProperty(property, (String[]) newRoles.toArray(new String[newRoles.size()]));
            node.save();
        } catch (javax.jcr.lock.LockException e) {
            log.warn("revokeRole -> LockException : " + node.getPath());
            JCRUtils.discardsPendingChanges(node);
        } catch (javax.jcr.AccessDeniedException e) {
            log.warn("revokeRole -> AccessDeniedException : " + node.getPath());
            JCRUtils.discardsPendingChanges(node);
        }
    }

    /**
     * Revoke role recursively
     */
    private void revokeRoleInDepth(Node node, String role, String property)
            throws ValueFormatException, PathNotFoundException, javax.jcr.RepositoryException {
        if (node.isNodeType(Document.TYPE)) {
            revokeRole(node, role, property);
        } else if (node.isNodeType(Folder.TYPE)) {
            revokeRole(node, role, property);

            for (NodeIterator it = node.getNodes(); it.hasNext();) {
                Node child = it.nextNode();
                revokeRoleInDepth(child, role, property);
            }
        } else if (node.isNodeType(Mail.TYPE)) {
            revokeRole(node, role, property);
        } else if (node.isNodeType(Note.LIST_TYPE)) {
            // Note nodes has no security
        }
    }

    @Override
    public HashMap<String, Integer> getGrantedUsers(String token, String nodePath)
            throws PathNotFoundException, AccessDeniedException, RepositoryException, DatabaseException {
        log.debug("getGrantedUsers({})", nodePath);
        HashMap<String, Integer> users = new HashMap<String, Integer>();
        Session session = null;

        try {
            if (token == null) {
                session = JCRUtils.getSession();
            } else {
                session = JcrSessionManager.getInstance().get(token);
            }

            Node node = session.getRootNode().getNode(nodePath.substring(1));
            Value[] usersRead = node.getProperty(Permission.USERS_READ).getValues();

            for (int i = 0; i < usersRead.length; i++) {
                users.put(usersRead[i].getString(), new Integer(Permission.READ));
            }

            Value[] usersWrite = node.getProperty(Permission.USERS_WRITE).getValues();

            for (int i = 0; i < usersWrite.length; i++) {
                Integer previous = (Integer) users.get(usersWrite[i].getString());

                if (previous != null) {
                    users.put(usersWrite[i].getString(), new Integer(previous.byteValue() | Permission.WRITE));
                } else {
                    users.put(usersWrite[i].getString(), new Integer(Permission.WRITE));
                }
            }

            Value[] usersDelete = node.getProperty(Permission.USERS_DELETE).getValues();

            for (int i = 0; i < usersDelete.length; i++) {
                Integer previous = (Integer) users.get(usersDelete[i].getString());

                if (previous != null) {
                    users.put(usersDelete[i].getString(), new Integer(previous.byteValue() | Permission.DELETE));
                } else {
                    users.put(usersDelete[i].getString(), new Integer(Permission.DELETE));
                }
            }

            Value[] usersSecurity = node.getProperty(Permission.USERS_SECURITY).getValues();

            for (int i = 0; i < usersSecurity.length; i++) {
                Integer previous = (Integer) users.get(usersSecurity[i].getString());

                if (previous != null) {
                    users.put(usersSecurity[i].getString(),
                            new Integer(previous.byteValue() | Permission.SECURITY));
                } else {
                    users.put(usersSecurity[i].getString(), new Integer(Permission.SECURITY));
                }
            }
        } catch (javax.jcr.PathNotFoundException e) {
            log.warn(e.getMessage(), e);
            throw new PathNotFoundException(e.getMessage(), e);
        } catch (javax.jcr.RepositoryException e) {
            log.error(e.getMessage(), e);
            throw new RepositoryException(e.getMessage(), e);
        } finally {
            if (token == null)
                JCRUtils.logout(session);
        }

        log.debug("getGrantedUsers: {}", users);
        return users;
    }

    @Override
    public Map<String, Integer> getGrantedRoles(String token, String nodePath)
            throws PathNotFoundException, AccessDeniedException, RepositoryException, DatabaseException {
        log.debug("getGrantedRoles({})", nodePath);
        Map<String, Integer> roles = new HashMap<String, Integer>();
        Session session = null;

        try {
            if (token == null) {
                session = JCRUtils.getSession();
            } else {
                session = JcrSessionManager.getInstance().get(token);
            }

            Node node = session.getRootNode().getNode(nodePath.substring(1));
            Value[] rolesRead = node.getProperty(Permission.ROLES_READ).getValues();

            for (int i = 0; i < rolesRead.length; i++) {
                roles.put(rolesRead[i].getString(), new Integer(Permission.READ));
            }

            Value[] rolesWrite = node.getProperty(Permission.ROLES_WRITE).getValues();

            for (int i = 0; i < rolesWrite.length; i++) {
                Integer previous = (Integer) roles.get(rolesWrite[i].getString());

                if (previous != null) {
                    roles.put(rolesWrite[i].getString(), new Integer(previous.intValue() | Permission.WRITE));
                } else {
                    roles.put(rolesWrite[i].getString(), new Integer(Permission.WRITE));
                }
            }

            Value[] rolesDelete = node.getProperty(Permission.ROLES_DELETE).getValues();

            for (int i = 0; i < rolesDelete.length; i++) {
                Integer previous = (Integer) roles.get(rolesDelete[i].getString());

                if (previous != null) {
                    roles.put(rolesDelete[i].getString(), new Integer(previous.intValue() | Permission.DELETE));
                } else {
                    roles.put(rolesDelete[i].getString(), new Integer(Permission.DELETE));
                }
            }

            Value[] rolesSecurity = node.getProperty(Permission.ROLES_SECURITY).getValues();

            for (int i = 0; i < rolesSecurity.length; i++) {
                Integer previous = (Integer) roles.get(rolesSecurity[i].getString());

                if (previous != null) {
                    roles.put(rolesSecurity[i].getString(), new Integer(previous.intValue() | Permission.SECURITY));
                } else {
                    roles.put(rolesSecurity[i].getString(), new Integer(Permission.SECURITY));
                }
            }
        } catch (javax.jcr.PathNotFoundException e) {
            log.warn(e.getMessage(), e);
            throw new PathNotFoundException(e.getMessage(), e);
        } catch (javax.jcr.RepositoryException e) {
            log.error(e.getMessage(), e);
            throw new RepositoryException(e.getMessage(), e);
        } finally {
            if (token == null)
                JCRUtils.logout(session);
        }

        log.debug("getGrantedRoles: {}", roles);
        return roles;
    }

    /**
     *  View user session info
     */
    public void view(String token) throws RepositoryException, DatabaseException {
        Session session = null;

        try {
            if (token == null) {
                session = JCRUtils.getSession();
            } else {
                session = JcrSessionManager.getInstance().get(token);
            }

            String[] atributes = session.getAttributeNames();
            log.info("** ATRIBUTES **");
            for (int i = 0; i < atributes.length; i++) {
                log.info(atributes[i] + " -> " + session.getAttribute(atributes[i]));
            }

            String[] lockTokens = session.getLockTokens();
            log.info("** LOCK TOKENS **");
            for (int i = 0; i < lockTokens.length; i++) {
                log.info(lockTokens[i]);
            }
        } catch (LoginException e) {
            log.error(e.getMessage(), e);
            throw new RepositoryException(e.getMessage(), e);
        } catch (javax.jcr.RepositoryException e) {
            log.error(e.getMessage(), e);
            throw new RepositoryException(e.getMessage(), e);
        } finally {
            if (token == null)
                JCRUtils.logout(session);
        }
    }

    @Override
    public List<String> getUsers(String token) throws PrincipalAdapterException {
        return CommonAuthModule.getUsers(token);
    }

    @Override
    public List<String> getRoles(String token) throws PrincipalAdapterException {
        return CommonAuthModule.getRoles(token);
    }

    @Override
    public List<String> getUsersByRole(String token, String role) throws PrincipalAdapterException {
        return CommonAuthModule.getUsersByRole(token, role);
    }

    @Override
    public List<String> getRolesByUser(String token, String user) throws PrincipalAdapterException {
        return CommonAuthModule.getRolesByUser(token, user);
    }

    @Override
    public String getMail(String token, String user) throws PrincipalAdapterException {
        return CommonAuthModule.getMail(token, user);
    }

    @Override
    public String getName(String token, String user) throws PrincipalAdapterException {
        return CommonAuthModule.getName(token, user);
    }

    @Override
    public void changeSecurity(String token, String nodePath, Map<String, Integer> grantUsers,
            Map<String, Integer> revokeUsers, Map<String, Integer> grantRoles, Map<String, Integer> revokeRoles,
            boolean recursive)
            throws PathNotFoundException, AccessDeniedException, RepositoryException, DatabaseException {
        throw new NotImplementedException("changeSecurity");
    }
}