From 54fb8849152a3d91f7ba52aeeffb236f5e70fbdf Mon Sep 17 00:00:00 2001
From: Mathieu Baudier <mbaudier@argeo.org>
Date: Tue, 13 Nov 2018 15:55:30 +0100
Subject: [PATCH] Introduce Eclipse 4 UI-level authorizations

---
 org.argeo.cms.e4/e4xmi/cms-devops.e4xmi       |  5 ++
 .../org/argeo/cms/e4/addons/AuthAddon.java    | 77 +++++++++++++++++++
 .../cms/e4/handlers/OpenPerspective.java      |  5 +-
 3 files changed, 86 insertions(+), 1 deletion(-)
 create mode 100644 org.argeo.cms.e4/src/org/argeo/cms/e4/addons/AuthAddon.java

diff --git a/org.argeo.cms.e4/e4xmi/cms-devops.e4xmi b/org.argeo.cms.e4/e4xmi/cms-devops.e4xmi
index 8228d87b5..beff27d7c 100644
--- a/org.argeo.cms.e4/e4xmi/cms-devops.e4xmi
+++ b/org.argeo.cms.e4/e4xmi/cms-devops.e4xmi
@@ -3,6 +3,7 @@
   <children xsi:type="basic:TrimmedWindow" xmi:id="_Zdy6cKknEeObFrG_clJBYA" elementId="org.argeo.cms.e4.apps.admin.trimmedwindow.0" label="" x="10" y="10" width="500" height="500">
     <persistedState key="styleOverride" value="8"/>
     <tags>shellMaximized</tags>
+    <tags>auth.cn=admin,ou=roles,ou=node</tags>
     <children xsi:type="advanced:PerspectiveStack" xmi:id="_jXVqsCk4Eein5vuhpK-Dew" elementId="org.argeo.cms.e4.perspectivestack.0" selectedElement="_jvjWYCk4Eein5vuhpK-Dew">
       <children xsi:type="advanced:Perspective" xmi:id="_jvjWYCk4Eein5vuhpK-Dew" elementId="org.argeo.cms.e4.perspective.data" label="Data" iconURI="platform:/plugin/org.argeo.cms.ui.theme/icons/nodes.gif">
         <children xsi:type="basic:PartSashContainer" xmi:id="_h3tvMCkxEein5vuhpK-Dew" elementId="org.argeo.cms.e4.partsashcontainer.0" selectedElement="_0B9SECkxEein5vuhpK-Dew" horizontal="true">
@@ -30,6 +31,7 @@
         </children>
       </children>
       <children xsi:type="advanced:Perspective" xmi:id="_xOVlsDvOEeiF1foPJZSZkw" elementId="org.argeo.cms.e4.perspective.users" label="Users" iconURI="platform:/plugin/org.argeo.cms.ui.theme/icons/group.png">
+        <tags>auth.cn=admin,ou=roles,ou=node</tags>
         <children xsi:type="basic:PartSashContainer" xmi:id="_1tQoEDvOEeiF1foPJZSZkw" elementId="org.argeo.cms.e4.partsashcontainer.2" horizontal="true">
           <children xsi:type="basic:PartStack" xmi:id="_vtbKkDvkEeiF1foPJZSZkw" elementId="org.argeo.cms.e4.partstack.4" containerData="4000" selectedElement="_9gukYDvOEeiF1foPJZSZkw">
             <children xsi:type="basic:Part" xmi:id="_9gukYDvOEeiF1foPJZSZkw" elementId="org.argeo.cms.e4.part.users" containerData="" contributionURI="bundleclass://org.argeo.cms.e4/org.argeo.cms.e4.users.UsersView" label="Users" iconURI="platform:/plugin/org.argeo.cms.ui.theme/icons/person.png">
@@ -83,6 +85,7 @@
           <parameters xmi:id="_fXvRYDvrEeiF1foPJZSZkw" elementId="org.argeo.cms.e4.parameter.1" name="perspectiveId" value="org.argeo.cms.e4.perspective.files"/>
         </children>
         <children xsi:type="menu:HandledToolItem" xmi:id="_jCSQgDvrEeiF1foPJZSZkw" elementId="org.argeo.cms.e4.handledtoolitem.users" label="Users" iconURI="platform:/plugin/org.argeo.cms.ui.theme/icons/group.png" command="_AF1UsDvrEeiF1foPJZSZkw">
+          <tags>auth.cn=admin,ou=roles,ou=node</tags>
           <parameters xmi:id="_lu_uYDvrEeiF1foPJZSZkw" elementId="org.argeo.cms.e4.parameter.2" name="perspectiveId" value="org.argeo.cms.e4.perspective.users"/>
         </children>
         <children xsi:type="menu:HandledToolItem" xmi:id="_dhv80FhKEeiknZQLx-vtnA" elementId="org.argeo.cms.e4.handledtoolitem.monitoring" label="Monitoring" iconURI="platform:/plugin/org.argeo.cms.ui.theme/icons/bundles.gif" command="_AF1UsDvrEeiF1foPJZSZkw">
@@ -120,5 +123,7 @@
   <addons xmi:id="_XqkCRaknEeObFrG_clJBYA" elementId="org.eclipse.e4.ui.workbench.contexts.model" contributionURI="bundleclass://org.eclipse.e4.ui.workbench/org.eclipse.e4.ui.internal.workbench.addons.ContextProcessingAddon"/>
   <addons xmi:id="_XqkCRqknEeObFrG_clJBYA" elementId="org.eclipse.e4.ui.workbench.bindings.model" contributionURI="bundleclass://org.eclipse.e4.ui.workbench.swt/org.eclipse.e4.ui.workbench.swt.util.BindingProcessingAddon"/>
   <addons xmi:id="_XqkCR6knEeObFrG_clJBYA" elementId="org.eclipse.e4.ui.workbench.handler.model" contributionURI="bundleclass://org.eclipse.e4.ui.workbench/org.eclipse.e4.ui.internal.workbench.addons.HandlerProcessingAddon"/>
+  <addons xmi:id="_8VnK8OdKEeijEOqYKRSeoQ" elementId="org.argeo.cms.e4.addon.0" contributionURI="bundleclass://org.argeo.cms.e4/org.argeo.cms.e4.addons.LocaleAddon"/>
+  <addons xmi:id="_-xeJYOdKEeijEOqYKRSeoQ" elementId="org.argeo.cms.e4.addon.1" contributionURI="bundleclass://org.argeo.cms.e4/org.argeo.cms.e4.addons.AuthAddon"/>
   <categories xmi:id="_MDkwUCqYEeidr6NYQH6GbQ" elementId="org.argeo.cms.e4.category.jcrBrowser" name="JCR Browser"/>
 </application:Application>
diff --git a/org.argeo.cms.e4/src/org/argeo/cms/e4/addons/AuthAddon.java b/org.argeo.cms.e4/src/org/argeo/cms/e4/addons/AuthAddon.java
new file mode 100644
index 000000000..6f03139ca
--- /dev/null
+++ b/org.argeo.cms.e4/src/org/argeo/cms/e4/addons/AuthAddon.java
@@ -0,0 +1,77 @@
+package org.argeo.cms.e4.addons;
+
+import java.util.Iterator;
+
+import javax.annotation.PostConstruct;
+
+import org.argeo.cms.auth.CurrentUser;
+import org.eclipse.e4.ui.model.application.MApplication;
+import org.eclipse.e4.ui.model.application.ui.MElementContainer;
+import org.eclipse.e4.ui.model.application.ui.MUIElement;
+import org.eclipse.e4.ui.model.application.ui.basic.MTrimBar;
+import org.eclipse.e4.ui.model.application.ui.basic.MTrimmedWindow;
+import org.eclipse.e4.ui.model.application.ui.basic.MWindow;
+
+public class AuthAddon {
+	public final static String AUTH = "auth.";
+
+	@PostConstruct
+	void init(MApplication application) {
+		Iterator<MWindow> windows = application.getChildren().iterator();
+		windows: while (windows.hasNext()) {
+			MWindow window = windows.next();
+			// main window
+			boolean windowVisible = process(window);
+			if (!windowVisible) {
+				windows.remove();
+				continue windows;
+			}
+			// trim bars
+			if (window instanceof MTrimmedWindow) {
+				Iterator<MTrimBar> trimBars = ((MTrimmedWindow) window).getTrimBars().iterator();
+				while (trimBars.hasNext()) {
+					MTrimBar trimBar = trimBars.next();
+					if (!process(trimBar)) {
+						trimBars.remove();
+					}
+				}
+			}
+		}
+	}
+
+	protected boolean process(MUIElement element) {
+		for (String tag : element.getTags()) {
+			if (tag.startsWith(AUTH)) {
+				String role = tag.substring(AUTH.length(), tag.length());
+				if (!CurrentUser.isInRole(role)) {
+					element.setVisible(false);
+					element.setToBeRendered(false);
+					return false;
+				}
+			}
+		}
+
+		// children
+		if (element instanceof MElementContainer) {
+			@SuppressWarnings("unchecked")
+			MElementContainer<? extends MUIElement> container = (MElementContainer<? extends MUIElement>) element;
+			Iterator<? extends MUIElement> children = container.getChildren().iterator();
+			while (children.hasNext()) {
+				MUIElement child = children.next();
+				boolean visible = process(child);
+				if (!visible)
+					children.remove();
+			}
+
+			for (Object child : container.getChildren()) {
+				if (child instanceof MUIElement) {
+					boolean visible = process((MUIElement) child);
+					if (!visible)
+						container.getChildren().remove(child);
+				}
+			}
+		}
+
+		return true;
+	}
+}
diff --git a/org.argeo.cms.e4/src/org/argeo/cms/e4/handlers/OpenPerspective.java b/org.argeo.cms.e4/src/org/argeo/cms/e4/handlers/OpenPerspective.java
index 3ab77e8d0..ac544b107 100644
--- a/org.argeo.cms.e4/src/org/argeo/cms/e4/handlers/OpenPerspective.java
+++ b/org.argeo.cms.e4/src/org/argeo/cms/e4/handlers/OpenPerspective.java
@@ -23,6 +23,9 @@ public class OpenPerspective {
 	public void execute(@Named("perspectiveId") String perspectiveId) {
 		List<MPerspective> perspectives = modelService.findElements(application, perspectiveId, MPerspective.class,
 				null);
-		partService.switchPerspective(perspectives.get(0));
+		if (perspectives.size() == 0)
+			return;
+		MPerspective perspective = perspectives.get(0);
+		partService.switchPerspective(perspective);
 	}
 }
-- 
2.30.2