org.sakaiproject.nakamura.files.search.MeManagerViewerSearchPropertyProvider.java Source code

Java tutorial

Introduction

Here is the source code for org.sakaiproject.nakamura.files.search.MeManagerViewerSearchPropertyProvider.java

Source

/**
 * Licensed to the Sakai Foundation (SF) under one
 * or more contributor license agreements. See the NOTICE file
 * distributed with this work for additional information
 * regarding copyright ownership. The SF licenses this file
 * to you under the Apache License, Version 2.0 (the
 * "License"); you may not use this file except in compliance
 * with the License. You may obtain a copy of the License at
 *
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing,
 * software distributed under the License is distributed on an
 * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
 * KIND, either express or implied. See the License for the
 * specific language governing permissions and limitations under the License.
 */
package org.sakaiproject.nakamura.files.search;

import com.google.common.base.Joiner;

import org.apache.commons.lang.StringUtils;
import org.apache.felix.scr.annotations.Component;
import org.apache.felix.scr.annotations.Properties;
import org.apache.felix.scr.annotations.Property;
import org.apache.felix.scr.annotations.Reference;
import org.apache.felix.scr.annotations.Service;
import org.apache.sling.api.SlingHttpServletRequest;
import org.apache.sling.api.request.RequestParameter;
import org.apache.solr.client.solrj.util.ClientUtils;
import org.sakaiproject.nakamura.api.connections.ConnectionManager;
import org.sakaiproject.nakamura.api.lite.Session;
import org.sakaiproject.nakamura.api.lite.StorageClientException;
import org.sakaiproject.nakamura.api.lite.StorageClientUtils;
import org.sakaiproject.nakamura.api.lite.accesscontrol.AccessDeniedException;
import org.sakaiproject.nakamura.api.lite.authorizable.Authorizable;
import org.sakaiproject.nakamura.api.lite.authorizable.AuthorizableManager;
import org.sakaiproject.nakamura.api.lite.authorizable.Group;
import org.sakaiproject.nakamura.api.lite.authorizable.User;
import org.sakaiproject.nakamura.api.search.solr.SolrSearchPropertyProvider;

import java.text.MessageFormat;
import java.util.HashSet;
import java.util.Map;
import java.util.Set;

/**
 * Provides properties to process the search
 *
 */
@Component(label = "FileSearchPropertyProvider", description = "Property provider for file searches")
@Service
@Properties({ @Property(name = "service.vendor", value = "The Sakai Foundation"),
        @Property(name = "sakai.search.provider", value = "MeManagerViewer") })
public class MeManagerViewerSearchPropertyProvider implements SolrSearchPropertyProvider {

    private static final String QUERY = " AND (content:({0}) OR filename:({0}) OR tag:({0}) OR description:({0}) OR path:({0}) OR ngram:({0}) OR edgengram:({0}))";

    @Reference
    protected ConnectionManager connectionManager;
    private static final int MAX_DEPTH = 6;

    public void loadUserProperties(SlingHttpServletRequest request, Map<String, String> propertiesMap) {

        final String user = getUser(request);

        if (User.ANON_USER.equals(user)) {
            // stop here, anonymous is not a manager or a viewer of anything
            return;
        }
        javax.jcr.Session jcrSession = request.getResourceResolver().adaptTo(javax.jcr.Session.class);
        Session session = StorageClientUtils.adaptToSession(jcrSession);
        int levels = 0;
        try {
            if (request.getParameter("levels") != null) {
                levels = Integer.parseInt(request.getParameter("levels"));
            }
        } catch (NumberFormatException nfe) {
            throw new IllegalArgumentException("The levels parameter must be parseable to an integer.");
        }
        final Set<String> viewerAndManagerPrincipals = getPrincipals(session, user, levels);
        if (!viewerAndManagerPrincipals.isEmpty()) {
            propertiesMap.put("au", Joiner.on(" OR ").join(viewerAndManagerPrincipals));
        }

        final Set<String> allViewerAndManagerPrincipals = getPrincipals(session, user, MAX_DEPTH);
        if (!allViewerAndManagerPrincipals.isEmpty()) {
            propertiesMap.put("all", Joiner.on(" OR ").join(allViewerAndManagerPrincipals));
        }

        String q = request.getParameter("q");
        if (!StringUtils.isBlank(q)) {
            propertiesMap.put("_q", MessageFormat.format(QUERY, q));
        }
    }

    /**
     * @param request
     * @return
     */
    protected static String getUser(final SlingHttpServletRequest request) {
        String user = request.getRemoteUser();
        final RequestParameter useridParam = request.getRequestParameter("userid");
        if (useridParam != null) {
            user = useridParam.getString();
        }
        return user;
    }

    /**
     * @param session
     * @param authorizable
     * @return An empty list if the user cannot be found. Values will be solr query escaped.
     */
    protected static Set<String> getPrincipals(final Session session, final String authorizable, int levels) {
        // put a limit on recursion
        if (levels > MAX_DEPTH) {
            levels = MAX_DEPTH;
        }
        final Set<String> viewerAndManagerPrincipals = new HashSet<String>();
        try {
            final AuthorizableManager authManager = session.getAuthorizableManager();
            final Authorizable anAuthorizable = authManager.findAuthorizable(authorizable);
            if (anAuthorizable != null) {
                if (levels > 0) {
                    levels--;
                    for (final String principal : anAuthorizable.getPrincipals()) {
                        if (!Group.EVERYONE.equals(principal)) {
                            viewerAndManagerPrincipals.addAll(getPrincipals(session, principal, levels));
                        }
                    }
                }
                viewerAndManagerPrincipals.add(ClientUtils.escapeQueryChars(authorizable));
                viewerAndManagerPrincipals.remove(Group.EVERYONE);
            }
        } catch (StorageClientException e) {
            throw new IllegalStateException(e);
        } catch (AccessDeniedException e) {
            // quietly trap access denied exceptions
        }
        return viewerAndManagerPrincipals;
    }

}