edu.cornell.mannlib.vitro.webapp.auth.permissions.DisplayByRolePermission.java Source code

Introduction

Here is the source code for edu.cornell.mannlib.vitro.webapp.auth.permissions.DisplayByRolePermission.java

Source

/* $This file is distributed under the terms of the license in /doc/license.txt$ */

package edu.cornell.mannlib.vitro.webapp.auth.permissions;

import org.apache.commons.logging.Log;
import org.apache.commons.logging.LogFactory;

import edu.cornell.mannlib.vitro.webapp.auth.policy.bean.PropertyRestrictionBean;
import edu.cornell.mannlib.vitro.webapp.auth.requestedAction.RequestedAction;
import edu.cornell.mannlib.vitro.webapp.auth.requestedAction.display.DisplayDataProperty;
import edu.cornell.mannlib.vitro.webapp.auth.requestedAction.display.DisplayDataPropertyStatement;
import edu.cornell.mannlib.vitro.webapp.auth.requestedAction.display.DisplayObjectProperty;
import edu.cornell.mannlib.vitro.webapp.auth.requestedAction.display.DisplayObjectPropertyStatement;
import edu.cornell.mannlib.vitro.webapp.beans.BaseResourceBean.RoleLevel;
import edu.cornell.mannlib.vitro.webapp.beans.DataPropertyStatement;
import edu.cornell.mannlib.vitro.webapp.beans.Property;

/**
 * Is the user authorized to display properties that are marked as restricted to
 * a certain "Role Level"?
 */
public class DisplayByRolePermission extends Permission {
    private static final Log log = LogFactory.getLog(DisplayByRolePermission.class);

    public static final String NAMESPACE = "java:" + DisplayByRolePermission.class.getName() + "#";

    private final String roleName;
    private final RoleLevel roleLevel;

    public DisplayByRolePermission(String roleName, RoleLevel roleLevel) {
        super(NAMESPACE + roleName);

        if (roleName == null) {
            throw new NullPointerException("role may not be null.");
        }
        if (roleLevel == null) {
            throw new NullPointerException("roleLevel may not be null.");
        }

        this.roleName = roleName;
        this.roleLevel = roleLevel;
    }

    @Override
    public boolean isAuthorized(RequestedAction whatToAuth) {
        boolean result;

        if (whatToAuth instanceof DisplayDataProperty) {
            result = isAuthorized((DisplayDataProperty) whatToAuth);
        } else if (whatToAuth instanceof DisplayObjectProperty) {
            result = isAuthorized((DisplayObjectProperty) whatToAuth);
        } else if (whatToAuth instanceof DisplayDataPropertyStatement) {
            result = isAuthorized((DisplayDataPropertyStatement) whatToAuth);
        } else if (whatToAuth instanceof DisplayObjectPropertyStatement) {
            result = isAuthorized((DisplayObjectPropertyStatement) whatToAuth);
        } else {
            result = false;
        }

        if (result) {
            log.debug(this + " authorizes " + whatToAuth);
        } else {
            log.debug(this + " does not authorize " + whatToAuth);
        }

        return result;
    }

    /**
     * The user may see this data property if they are allowed to see its
     * predicate.
     */
    private boolean isAuthorized(DisplayDataProperty action) {
        String predicateUri = action.getDataProperty().getURI();
        return canDisplayPredicate(new Property(predicateUri));
    }

    /**
     * The user may see this object property if they are allowed to see its
     * predicate.
     */
    private boolean isAuthorized(DisplayObjectProperty action) {
        return canDisplayPredicate(action.getObjectProperty());
    }

    /**
     * The user may see this data property if they are allowed to see its
     * subject and its predicate.
     */
    private boolean isAuthorized(DisplayDataPropertyStatement action) {
        DataPropertyStatement stmt = action.getDataPropertyStatement();
        String subjectUri = stmt.getIndividualURI();
        String predicateUri = stmt.getDatapropURI();
        return canDisplayResource(subjectUri) && canDisplayPredicate(new Property(predicateUri));
    }

    /**
     * The user may see this data property if they are allowed to see its
     * subject, its predicate, and its object.
     */
    private boolean isAuthorized(DisplayObjectPropertyStatement action) {
        String subjectUri = action.getSubjectUri();
        String objectUri = action.getObjectUri();
        Property op = action.getProperty();
        return canDisplayResource(subjectUri) && canDisplayPredicate(op) && canDisplayResource(objectUri);
    }

    private boolean canDisplayResource(String resourceUri) {
        return PropertyRestrictionBean.getBean().canDisplayResource(resourceUri, this.roleLevel);
    }

    private boolean canDisplayPredicate(Property predicate) {
        return PropertyRestrictionBean.getBean().canDisplayPredicate(predicate, this.roleLevel);
    }

    @Override
    public String toString() {
        return "DisplayByRolePermission['" + roleName + "']";
    }

}