View Javadoc

1   /**
2    * This file Copyright (c) 2010-2010 Magnolia International
3    * Ltd.  (http://www.magnolia-cms.com). All rights reserved.
4    *
5    *
6    * This file is dual-licensed under both the Magnolia
7    * Network Agreement and the GNU General Public License. 
8    * You may elect to use one or the other of these licenses.
9    *
10   * This file is distributed in the hope that it will be
11   * useful, but AS-IS and WITHOUT ANY WARRANTY; without even the
12   * implied warranty of MERCHANTABILITY or FITNESS FOR A
13   * PARTICULAR PURPOSE, TITLE, or NONINFRINGEMENT.
14   * Redistribution, except as permitted by whichever of the GPL
15   * or MNA you select, is prohibited.
16   *
17   * 1. For the GPL license (GPL), you can redistribute and/or
18   * modify this file under the terms of the GNU General
19   * Public License, Version 3, as published by the Free Software
20   * Foundation.  You should have received a copy of the GNU
21   * General Public License, Version 3 along with this program;
22   * if not, write to the Free Software Foundation, Inc., 51
23   * Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
24   *
25   * 2. For the Magnolia Network Agreement (MNA), this file
26   * and the accompanying materials are made available under the
27   * terms of the MNA which accompanies this distribution, and
28   * is available at http://www.magnolia-cms.com/mna.html
29   *
30   * Any modifications to this file must keep this entire header
31   * intact.
32   *
33   */
34  package info.magnolia.module.delta;
35  
36  import info.magnolia.cms.security.Role;
37  import info.magnolia.cms.security.RoleManager;
38  import info.magnolia.cms.security.SecuritySupport;
39  import info.magnolia.module.InstallContext;
40  
41  import javax.jcr.RepositoryException;
42  
43  /**
44   * @author zdenekskodik
45   * @version $Id$
46   */
47  public class RemovePermissionTask extends AbstractRepositoryTask {
48  
49      private final String roleName;
50      private final String workspaceName;
51      private final String pathToRemove;
52      private final long permission;
53  
54      public RemovePermissionTask(String taskName, String taskDescription, String roleName, String workspaceName, String pathToRemove, long permission) {
55          super(taskName, taskDescription);
56          this.roleName = roleName;
57          this.workspaceName = workspaceName;
58          this.pathToRemove = pathToRemove;
59          this.permission = permission;
60      }
61  
62      @Override
63      protected void doExecute(InstallContext ctx) throws RepositoryException, TaskExecutionException {
64          try {
65              final SecuritySupport securitySupport = SecuritySupport.Factory.getInstance();
66              final RoleManager roleManager = securitySupport.getRoleManager();
67              final Role role = roleManager.getRole(roleName);
68  
69              if (role != null) {
70                  role.removePermission(workspaceName, pathToRemove, permission);
71                  role.removePermission(workspaceName, pathToRemove + "/*", permission);
72              } else {
73                  ctx.warn("Role \"" + roleName + "\" not found, can't remove its ACL permission.");
74              }
75          } catch (UnsupportedOperationException e1) {
76              ctx.warn("Can't update role \"" + roleName + "\" due to an unsupported operation exception. This is most likely the case if the roles are managed externally.");
77          }
78      }
79  }