JackrabbitAuthorizations.java

   1 /*
   2  * Copyright (C) 2007-2012 Mathieu Baudier
   3  *
   4  * Licensed under the Apache License, Version 2.0 (the "License");
   5  * you may not use this file except in compliance with the License.
   6  * You may obtain a copy of the License at
   7  *
   8  *         http://www.apache.org/licenses/LICENSE-2.0
   9  *
  10  * Unless required by applicable law or agreed to in writing, software
  11  * distributed under the License is distributed on an "AS IS" BASIS,
  12  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  13  * See the License for the specific language governing permissions and
  14  * limitations under the License.
  15  */
  16 package org.argeo.jackrabbit;
  17
  18 import java.security.Principal;
  19 import java.util.Arrays;
  20 import java.util.List;
  21
  22 import javax.jcr.RepositoryException;
  23 import javax.jcr.Session;
  24
  25 import org.apache.commons.logging.Log;
  26 import org.apache.commons.logging.LogFactory;
  27 import org.apache.jackrabbit.api.JackrabbitSession;
  28 import org.apache.jackrabbit.api.security.user.Authorizable;
  29 import org.apache.jackrabbit.api.security.user.UserManager;
  30 import org.argeo.ArgeoException;
  31 import org.argeo.jcr.security.JcrAuthorizations;
  32
  33 /** Apply authorizations to a Jackrabbit repository. */
  34 public class JackrabbitAuthorizations extends JcrAuthorizations {
  35         private final static Log log = LogFactory
  36                         .getLog(JackrabbitAuthorizations.class);
  37
  38         private List<String> groupPrefixes = Arrays
  39                         .asList(new String[] { "ROLE_" });// new ArrayList<String>();
  40
  41         @Override
  42         protected Principal getOrCreatePrincipal(Session session,
  43                         String principalName) throws RepositoryException {
  44                 UserManager um = ((JackrabbitSession) session).getUserManager();
  45                 Authorizable authorizable = um.getAuthorizable(principalName);
  46                 if (authorizable == null) {
  47                         groupPrefixes: for (String groupPrefix : groupPrefixes) {
  48                                 if (principalName.startsWith(groupPrefix)) {
  49                                         authorizable = um.createGroup(principalName);
  50                                         log.info("Created group " + principalName);
  51                                         break groupPrefixes;
  52                                 }
  53                         }
  54                         if (authorizable == null)
  55                                 throw new ArgeoException("Authorizable " + principalName
  56                                                 + " not found");
  57                 }
  58                 return authorizable.getPrincipal();
  59         }
  60
  61         public void setGroupPrefixes(List<String> groupsToCreate) {
  62                 this.groupPrefixes = groupsToCreate;
  63         }
  64 }