View Javadoc

1   /**
2    * This file Copyright (c) 2003-2010 Magnolia International
3    * Ltd.  (http://www.magnolia-cms.com). All rights reserved.
4    *
5    *
6    * This file is dual-licensed under both the Magnolia
7    * Network Agreement and the GNU General Public License.
8    * You may elect to use one or the other of these licenses.
9    *
10   * This file is distributed in the hope that it will be
11   * useful, but AS-IS and WITHOUT ANY WARRANTY; without even the
12   * implied warranty of MERCHANTABILITY or FITNESS FOR A
13   * PARTICULAR PURPOSE, TITLE, or NONINFRINGEMENT.
14   * Redistribution, except as permitted by whichever of the GPL
15   * or MNA you select, is prohibited.
16   *
17   * 1. For the GPL license (GPL), you can redistribute and/or
18   * modify this file under the terms of the GNU General
19   * Public License, Version 3, as published by the Free Software
20   * Foundation.  You should have received a copy of the GNU
21   * General Public License, Version 3 along with this program;
22   * if not, write to the Free Software Foundation, Inc., 51
23   * Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
24   *
25   * 2. For the Magnolia Network Agreement (MNA), this file
26   * and the accompanying materials are made available under the
27   * terms of the MNA which accompanies this distribution, and
28   * is available at http://www.magnolia-cms.com/mna.html
29   *
30   * Any modifications to this file must keep this entire header
31   * intact.
32   *
33   */
34  package info.magnolia.cms.security;
35  
36  import info.magnolia.cms.security.auth.Entity;
37  import info.magnolia.cms.security.auth.GroupList;
38  import info.magnolia.cms.security.auth.RoleList;
39  import info.magnolia.context.MgnlContext;
40  
41  import java.util.Collection;
42  import java.util.Iterator;
43  import java.util.Set;
44  import java.io.Serializable;
45  
46  import javax.security.auth.Subject;
47  
48  import org.slf4j.Logger;
49  import org.slf4j.LoggerFactory;
50  
51  
52  /**
53   * A user which is not stored in Magnolia. For instance a user stored in LDAP or AD.
54   * @version $Revision:2558 $ ($Author:scharles $)
55   */
56  public class ExternalUser extends AbstractUser implements Serializable {
57      private static final Logger log = LoggerFactory.getLogger(ExternalUser.class);
58  
59      /**
60       * User properties.
61       */
62      private Entity userDetails;
63  
64      /**
65       * User roles.
66       */
67      private RoleList roleList;
68  
69      /**
70       * User groups.
71       */
72      private GroupList groupList;
73  
74      /**
75       * @param subject as created by login module
76       */
77      protected ExternalUser(Subject subject) {
78          final Set<Entity> principalDetails = subject.getPrincipals(Entity.class);
79          final Iterator<Entity> entityIterator = principalDetails.iterator();
80          this.userDetails = entityIterator.next();
81  
82          final Set<RoleList> principalRoles = subject.getPrincipals(RoleList.class);
83          final Iterator<RoleList> roleListIterator = principalRoles.iterator();
84          this.roleList = roleListIterator.next();
85  
86          final Set<GroupList> principalGroups = subject.getPrincipals(GroupList.class);
87          final Iterator<GroupList> groupListIterator = principalGroups.iterator();
88          this.groupList = groupListIterator.next();
89      }
90  
91      public boolean hasRole(String roleName) {
92          return this.roleList.has(roleName);
93      }
94  
95      public void removeRole(String roleName) {
96          throw new UnsupportedOperationException("not implemented for this ExternalUser");
97      }
98  
99      public void addRole(String roleName) {
100         throw new UnsupportedOperationException("not implemented for this ExternalUser");
101     }
102 
103     /**
104      * Is this user in a specified group?
105      * @return true if in group
106      */
107     public boolean inGroup(String groupName) {
108         return this.groupList.has(groupName);
109     }
110 
111     /**
112      * Remove a group. Implementation is optional
113      */
114     public void removeGroup(String groupName) throws UnsupportedOperationException {
115         throw new UnsupportedOperationException("not implemented for this ExternalUser");
116     }
117 
118     /**
119      * Adds this user to a group. Implementation is optional
120      */
121     public void addGroup(String groupName) throws UnsupportedOperationException {
122         throw new UnsupportedOperationException("not implemented for this ExternalUser");
123     }
124 
125     public boolean isEnabled() {
126         return true;
127     }
128 
129     public void setEnabled(boolean enabled) {
130     }
131 
132     public String getLanguage() {
133         String language = (String) this.userDetails.getProperty(Entity.LANGUAGE);
134         if (null == language) {
135             language = MgnlContext.getSystemContext().getLocale().getLanguage();
136         }
137         return language;
138     }
139 
140     public String getName() {
141         return (String) this.userDetails.getProperty(Entity.NAME);
142     }
143 
144     public String getPassword() {
145         return (String) this.userDetails.getProperty(Entity.PASSWORD);
146     }
147 
148     public String getProperty(String propertyName) {
149         throw new UnsupportedOperationException("not implemented for this ExternalUser");
150     }
151 
152     public void setProperty(String propertyName, String value) {
153         throw new UnsupportedOperationException("not implemented for this ExternalUser");
154     }
155 
156     public Collection<String> getGroups() {
157         return this.groupList.getList();
158     }
159 
160     public Collection<String> getAllGroups() {
161         return this.getGroups();
162     }
163 
164     public Collection<String> getRoles() {
165         return this.roleList.getList();
166     }
167 
168     public Collection<String> getAllRoles() {
169         return this.getRoles();
170     }
171 }