2 * This document is a part of the source code and related artifacts
3 * for CollectionSpace, an open source collections management system
4 * for museums and related institutions:
6 * http://www.collectionspace.org
7 * http://wiki.collectionspace.org
9 * Copyright 2009 University of California at Berkeley
11 * Licensed under the Educational Community License (ECL), Version 2.0.
12 * You may not use this file except in compliance with this License.
14 * You may obtain a copy of the ECL 2.0 License at
16 * https://source.collectionspace.org/collection-space/LICENSE.txt
18 * Unless required by applicable law or agreed to in writing, software
19 * distributed under the License is distributed on an "AS IS" BASIS,
20 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
21 * See the License for the specific language governing permissions and
22 * limitations under the License.
25 package org.collectionspace.services.authorization.storage;
27 import java.util.ArrayList;
28 import java.util.List;
29 import org.collectionspace.services.common.context.ServiceContext;
30 import org.collectionspace.services.common.security.SecurityUtils;
31 import org.collectionspace.services.common.storage.jpa.JpaDocumentFilter;
32 import org.slf4j.Logger;
33 import org.slf4j.LoggerFactory;
36 * PermissionJpaFilter is to build where clause for role queries
39 public class PermissionJpaFilter extends JpaDocumentFilter {
41 private final Logger logger = LoggerFactory.getLogger(PermissionJpaFilter.class);
44 * Instantiates a new permission jpa filter.
48 public PermissionJpaFilter(ServiceContext ctx) {
53 public List<ParamBinding> buildWhereForSearch(StringBuilder queryStrBldr) {
55 List<ParamBinding> paramList = new ArrayList<ParamBinding>();
57 String resName = null;
58 List<String> rn = getQueryParam(PermissionStorageConstants.Q_RESOURCE_NAME);
59 if (null != rn && rn.size() > 0) {
62 boolean csAdmin = SecurityUtils.isCSpaceAdmin();
64 queryStrBldr.append(addTenant(false, paramList));
66 if (null != resName && !resName.isEmpty()) {
68 queryStrBldr.append(" AND");
70 queryStrBldr.append(" WHERE");
72 queryStrBldr.append(" UPPER(a." + PermissionStorageConstants.RESOURCE_NAME + ")");
73 queryStrBldr.append(" LIKE");
74 queryStrBldr.append(" :" + PermissionStorageConstants.Q_RESOURCE_NAME);
75 paramList.add(new ParamBinding(PermissionStorageConstants.Q_RESOURCE_NAME, "%"
76 + resName.toUpperCase() + "%"));
79 if (logger.isDebugEnabled()) {
80 String query = queryStrBldr.toString();
81 logger.debug("query=" + query);
88 public List<ParamBinding> buildWhere(StringBuilder queryStrBldr) {
89 return new ArrayList<ParamBinding>();