X-Git-Url: https://git.argeo.org/?a=blobdiff_plain;f=swt%2Forg.argeo.cms.e4%2Fsrc%2Forg%2Fargeo%2Fcms%2Fe4%2FPrivilegedJob.java;fp=swt%2Forg.argeo.cms.e4%2Fsrc%2Forg%2Fargeo%2Fcms%2Fe4%2FPrivilegedJob.java;h=89055d2ff8d51a37a777b85e18c510567e27d964;hb=7b242851c0094d13cbaca5b68261ad92c873a59f;hp=0000000000000000000000000000000000000000;hpb=dbb84b4ec2d313ec0724d035c32f482ac57974c5;p=lgpl%2Fargeo-commons.git

diff --git a/swt/org.argeo.cms.e4/src/org/argeo/cms/e4/PrivilegedJob.java b/swt/org.argeo.cms.e4/src/org/argeo/cms/e4/PrivilegedJob.java
new file mode 100644
index 000000000..89055d2ff
--- /dev/null
+++ b/swt/org.argeo.cms.e4/src/org/argeo/cms/e4/PrivilegedJob.java
@@ -0,0 +1,49 @@
+package org.argeo.cms.e4;
+
+import java.security.AccessControlContext;
+import java.security.AccessController;
+import java.security.PrivilegedAction;
+
+import javax.security.auth.Subject;
+
+import org.eclipse.core.runtime.IProgressMonitor;
+import org.eclipse.core.runtime.IStatus;
+import org.eclipse.core.runtime.jobs.Job;
+
+/**
+ * Propagate authentication to an eclipse job. Typically to execute a privileged
+ * action outside the UI thread
+ */
+public abstract class PrivilegedJob extends Job {
+	private final Subject subject;
+
+	public PrivilegedJob(String jobName) {
+		this(jobName, AccessController.getContext());
+	}
+
+	public PrivilegedJob(String jobName,
+			AccessControlContext accessControlContext) {
+		super(jobName);
+		subject = Subject.getSubject(accessControlContext);
+
+		// Must be called *before* the job is scheduled,
+		// it is required for the progress window to appear
+		setUser(true);
+	}
+
+	@Override
+	protected IStatus run(final IProgressMonitor progressMonitor) {
+		PrivilegedAction<IStatus> privilegedAction = new PrivilegedAction<IStatus>() {
+			public IStatus run() {
+				return doRun(progressMonitor);
+			}
+		};
+		return Subject.doAs(subject, privilegedAction);
+	}
+
+	/**
+	 * Implement here what should be executed with default context
+	 * authentication
+	 */
+	protected abstract IStatus doRun(IProgressMonitor progressMonitor);
+}