X-Git-Url: http://git.argeo.org/?a=blobdiff_plain;f=org.argeo.cms%2Fsrc%2Forg%2Fargeo%2Fcms%2FAbstractCmsEntryPoint.java;h=a9ad03a12470055dfac85116237bf5f825235dcc;hb=0b3ea4f2c08f00100e962272bf21f4f32346fd61;hp=9a7f6412e862a5b219df558932fe5b6952606f92;hpb=ba85380c1db977b0d9ea3182d1383956a8b80679;p=lgpl%2Fargeo-commons.git

diff --git a/org.argeo.cms/src/org/argeo/cms/AbstractCmsEntryPoint.java b/org.argeo.cms/src/org/argeo/cms/AbstractCmsEntryPoint.java
index 9a7f6412e..a9ad03a12 100644
--- a/org.argeo.cms/src/org/argeo/cms/AbstractCmsEntryPoint.java
+++ b/org.argeo.cms/src/org/argeo/cms/AbstractCmsEntryPoint.java
@@ -1,5 +1,7 @@
 package org.argeo.cms;
 
+import java.security.AccessControlContext;
+import java.security.PrivilegedAction;
 import java.util.HashMap;
 import java.util.Locale;
 import java.util.Map;
@@ -13,6 +15,9 @@ import javax.jcr.Session;
 import javax.jcr.nodetype.NodeType;
 import javax.security.auth.Subject;
 import javax.security.auth.login.LoginException;
+import javax.security.auth.x500.X500Principal;
+import javax.servlet.http.HttpServletRequest;
+import javax.servlet.http.HttpSession;
 
 import org.apache.commons.logging.Log;
 import org.apache.commons.logging.LogFactory;
@@ -34,10 +39,10 @@ import org.eclipse.swt.widgets.Shell;
 
 /** Manages history and navigation */
 public abstract class AbstractCmsEntryPoint extends AbstractEntryPoint
-		implements CmsSession {
+		implements CmsView {
 	private final Log log = LogFactory.getLog(AbstractCmsEntryPoint.class);
 
-	private final Subject subject = new Subject();
+	private final Subject subject;
 
 	private final Repository repository;
 	private final String workspace;
@@ -62,19 +67,32 @@ public abstract class AbstractCmsEntryPoint extends AbstractEntryPoint
 		this.defaultPath = defaultPath;
 		this.factoryProperties = new HashMap<String, String>(factoryProperties);
 
-		// Initial login
-		try {
-			new ArgeoLoginContext(KernelHeader.LOGIN_CONTEXT_USER, subject)
-					.login();
-		} catch (LoginException e) {
-			if (log.isTraceEnabled())
-				log.trace("Cannot authenticate user", e);
+		// load context from session
+		HttpServletRequest httpRequest = RWT.getRequest();
+		final HttpSession httpSession = httpRequest.getSession();
+		AccessControlContext acc = (AccessControlContext) httpSession
+				.getAttribute(KernelHeader.ACCESS_CONTROL_CONTEXT);
+		if (acc != null
+				&& Subject.getSubject(acc).getPrincipals(X500Principal.class)
+						.size() == 1) {
+			subject = Subject.getSubject(acc);
+		} else {
+			subject = new Subject();
+
+			// Initial login
 			try {
-				new ArgeoLoginContext(KernelHeader.LOGIN_CONTEXT_ANONYMOUS,
-						subject).login();
-			} catch (LoginException eAnonymous) {
-				throw new ArgeoException("Cannot initialize subject",
-						eAnonymous);
+				new ArgeoLoginContext(KernelHeader.LOGIN_CONTEXT_USER, subject)
+						.login();
+			} catch (LoginException e) {
+				// if (log.isTraceEnabled())
+				// log.trace("Cannot authenticate user", e);
+				try {
+					new ArgeoLoginContext(KernelHeader.LOGIN_CONTEXT_ANONYMOUS,
+							subject).login();
+				} catch (LoginException eAnonymous) {
+					throw new ArgeoException("Cannot initialize subject",
+							eAnonymous);
+				}
 			}
 		}
 		authChange();
@@ -103,14 +121,20 @@ public abstract class AbstractCmsEntryPoint extends AbstractEntryPoint
 	}
 
 	@Override
-	protected final void createContents(Composite parent) {
-		try {
-			getShell().getDisplay().setData(CmsSession.KEY, this);
-
-			createUi(parent);
-		} catch (Exception e) {
-			throw new CmsException("Cannot create entrypoint contents", e);
-		}
+	protected final void createContents(final Composite parent) {
+		getShell().getDisplay().setData(CmsView.KEY, this);
+		Subject.doAs(subject, new PrivilegedAction<Void>() {
+			@Override
+			public Void run() {
+				try {
+					createUi(parent);
+				} catch (Exception e) {
+					throw new CmsException("Cannot create entrypoint contents",
+							e);
+				}
+				return null;
+			}
+		});
 	}
 
 	/** Create UI */
@@ -140,7 +164,7 @@ public abstract class AbstractCmsEntryPoint extends AbstractEntryPoint
 	public void navigateTo(String state) {
 		exception = null;
 		String title = setState(state);
-		refresh();
+		doRefresh();
 		if (browserNavigation != null)
 			browserNavigation.pushState(state, title);
 	}
@@ -152,43 +176,80 @@ public abstract class AbstractCmsEntryPoint extends AbstractEntryPoint
 
 	@Override
 	public void authChange() {
-		try {
-			String currentPath = null;
-			if (node != null)
-				currentPath = node.getPath();
-			JcrUtils.logoutQuietly(session);
+		Subject.doAs(subject, new PrivilegedAction<Void>() {
 
-			session = repository.login(workspace);
-			if (currentPath != null)
-				node = session.getNode(currentPath);
+			@Override
+			public Void run() {
+				try {
+					String currentPath = null;
+					if (node != null)
+						currentPath = node.getPath();
+					JcrUtils.logoutQuietly(session);
+
+					session = repository.login(workspace);
+					if (currentPath != null)
+						try {
+							node = session.getNode(currentPath);
+						} catch (Exception e) {
+							try {
+								// TODO find a less hacky way to log out
+								new ArgeoLoginContext(
+										KernelHeader.LOGIN_CONTEXT_ANONYMOUS,
+										subject).logout();
+								new ArgeoLoginContext(
+										KernelHeader.LOGIN_CONTEXT_ANONYMOUS,
+										subject).login();
+							} catch (LoginException eAnonymous) {
+								throw new ArgeoException(
+										"Cannot reset to anonymous", eAnonymous);
+							}
+							JcrUtils.logoutQuietly(session);
+							session = repository.login(workspace);
+							navigateTo("~");
+							throw e;
+						}
+
+					// refresh UI
+					doRefresh();
+				} catch (RepositoryException e) {
+					throw new CmsException("Cannot perform auth change", e);
+				}
+				return null;
+			}
 
-			// refresh UI
-			refresh();
-		} catch (RepositoryException e) {
-			throw new CmsException("Cannot perform auth change", e);
-		}
+		});
 
 	}
 
 	@Override
-	public void exception(Throwable e) {
-		this.exception = e;
+	public void exception(final Throwable e) {
+		AbstractCmsEntryPoint.this.exception = e;
 		log.error("Unexpected exception in CMS", e);
-		refresh();
+		doRefresh();
 	}
 
-	@Override
-	public Object local(Msg msg) {
-		String key = msg.getId();
-		int lastDot = key.lastIndexOf('.');
-		String className = key.substring(0, lastDot);
-		String fieldName = key.substring(lastDot + 1);
-		Locale locale = RWT.getLocale();
-		ResourceBundle rb = ResourceBundle.getBundle(className, locale,
-				msg.getClassLoader());
-		return rb.getString(fieldName);
+	protected void doRefresh() {
+		Subject.doAs(subject, new PrivilegedAction<Void>() {
+			@Override
+			public Void run() {
+				refresh();
+				return null;
+			}
+		});
 	}
 
+	// @Override
+	// public Object local(Msg msg) {
+	// String key = msg.getId();
+	// int lastDot = key.lastIndexOf('.');
+	// String className = key.substring(0, lastDot);
+	// String fieldName = key.substring(lastDot + 1);
+	// Locale locale = RWT.getLocale();
+	// ResourceBundle rb = ResourceBundle.getBundle(className, locale,
+	// msg.getClassLoader());
+	// return rb.getString(fieldName);
+	// }
+
 	/** Sets the state of the entry point and retrieve the related JCR node. */
 	protected synchronized String setState(String newState) {
 		String previousState = this.state;