View Javadoc

1   /**
2    * This file Copyright (c) 2003-2010 Magnolia International
3    * Ltd.  (http://www.magnolia-cms.com). All rights reserved.
4    *
5    *
6    * This file is dual-licensed under both the Magnolia
7    * Network Agreement and the GNU General Public License.
8    * You may elect to use one or the other of these licenses.
9    *
10   * This file is distributed in the hope that it will be
11   * useful, but AS-IS and WITHOUT ANY WARRANTY; without even the
12   * implied warranty of MERCHANTABILITY or FITNESS FOR A
13   * PARTICULAR PURPOSE, TITLE, or NONINFRINGEMENT.
14   * Redistribution, except as permitted by whichever of the GPL
15   * or MNA you select, is prohibited.
16   *
17   * 1. For the GPL license (GPL), you can redistribute and/or
18   * modify this file under the terms of the GNU General
19   * Public License, Version 3, as published by the Free Software
20   * Foundation.  You should have received a copy of the GNU
21   * General Public License, Version 3 along with this program;
22   * if not, write to the Free Software Foundation, Inc., 51
23   * Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
24   *
25   * 2. For the Magnolia Network Agreement (MNA), this file
26   * and the accompanying materials are made available under the
27   * terms of the MNA which accompanies this distribution, and
28   * is available at http://www.magnolia-cms.com/mna.html
29   *
30   * Any modifications to this file must keep this entire header
31   * intact.
32   *
33   */
34  package info.magnolia.cms.security;
35  
36  import java.io.Serializable;
37  import java.util.List;
38  
39  import org.apache.commons.lang.StringUtils;
40  
41  
42  /**
43   * Default implementation for {@link AccessManager}.
44   * @version $Id: AccessManagerImpl.java 36890 2010-09-02 11:38:12Z pbaerfuss $
45   */
46  public class AccessManagerImpl implements AccessManager, Serializable {
47  
48      private static final long serialVersionUID = 222L;
49  
50      private List<Permission> userPermissions;
51  
52      public boolean isGranted(String path, long permissions) {
53          if (StringUtils.isEmpty(path)) {
54              path = "/"; //$NON-NLS-1$
55          }
56  
57          long currentPermission = getPermissions(path);
58          boolean granted = (currentPermission & permissions) == permissions;
59  
60          return granted;
61      }
62  
63      public void setPermissionList(List<Permission> permissions) {
64          this.userPermissions = permissions;
65      }
66  
67      public List<Permission> getPermissionList() {
68          return this.userPermissions;
69      }
70  
71      public long getPermissions(String path) {
72          if (userPermissions == null) {
73              return Permission.NONE;
74          }
75          long permission = 0;
76          int patternLength = 0;
77          for (Permission p : userPermissions) {
78              if (p.match(path)) {
79                  int l = p.getPattern().getLength();
80                  if (patternLength == l && (permission < p.getPermissions())) {
81                      permission = p.getPermissions();
82                  } else if (patternLength < l) {
83                      patternLength = l;
84                      permission = p.getPermissions();
85                  }
86              }
87          }
88          return permission;
89      }
90  }