git.aero2k.de Git - tmp/jakarta-migration.git/blob

   1 /**
   2  *  This document is a part of the source code and related artifacts
   3  *  for CollectionSpace, an open source collections management system
   4  *  for museums and related institutions:
   5
   6  *  http://www.collectionspace.org
   7  *  http://wiki.collectionspace.org
   8
   9  *  Copyright 2009 University of California at Berkeley
  10
  11  *  Licensed under the Educational Community License (ECL), Version 2.0.
  12  *  You may not use this file except in compliance with this License.
  13
  14  *  You may obtain a copy of the ECL 2.0 License at
  15
  16  *  https://source.collectionspace.org/collection-space/LICENSE.txt
  17
  18  *  Unless required by applicable law or agreed to in writing, software
  19  *  distributed under the License is distributed on an "AS IS" BASIS,
  20  *  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  21  *  See the License for the specific language governing permissions and
  22  *  limitations under the License.
  23  */
  24 package org.collectionspace.services.authorization.test;
  25
  26 //import java.util.ArrayList;
  27 //import java.util.List;
  28 import java.util.ArrayList;
  29 import java.util.List;
  30 import org.collectionspace.services.authorization.ActionType;
  31 import org.slf4j.Logger;
  32 import org.slf4j.LoggerFactory;
  33 //import org.collectionspace.services.client.test.BaseServiceTest;
  34 import org.collectionspace.services.authorization.AuthZ;
  35 import org.collectionspace.services.authorization.CSpaceAction;
  36 import org.collectionspace.services.authorization.Permission;
  37 import org.collectionspace.services.authorization.PermissionAction;
  38 import org.collectionspace.services.authorization.PermissionException;
  39 import org.collectionspace.services.authorization.PermissionRole;
  40 import org.collectionspace.services.authorization.PermissionsList;
  41 import org.collectionspace.services.authorization.PermissionsRolesList;
  42 import org.collectionspace.services.authorization.RoleValue;
  43 import org.collectionspace.services.authorization.URIResourceImpl;
  44 import org.springframework.transaction.TransactionStatus;
  45 import org.testng.annotations.BeforeClass;
  46
  47 /**
  48  *
  49  * @author
  50  */
  51 public class AuthorizationSeedTest extends AbstractAuthorizationTestImpl {
  52
  53     final Logger logger = LoggerFactory.getLogger(AuthorizationSeedTest.class);
  54
  55     @BeforeClass(alwaysRun = true)
  56     public void seedData() {
  57         setup();
  58         TransactionStatus status = beginTransaction("seedData");
  59         try {
  60             AuthorizationGen authzGen = new AuthorizationGen();
  61             authzGen.genPermissions();
  62             authzGen.genPermissionsRoles();
  63             seedRoles();
  64             seedPermissions();
  65         } catch (Exception ex) {
  66             rollbackTransaction(status);
  67             ex.printStackTrace();
  68             throw new RuntimeException(ex);
  69         }
  70         commitTransaction(status);
  71     }
  72
  73     public void seedRoles() throws Exception {
  74         //Should this test really be empty?
  75     }
  76
  77     public void seedPermissions() throws Exception {
  78         PermissionsList pcList =
  79                 (PermissionsList) fromFile(PermissionsList.class, baseDir +
  80                 AbstractAuthorizationTestImpl.testDataDir + "test-permissions.xml");
  81         logger.info("read permissions from "
  82                 + baseDir + AbstractAuthorizationTestImpl.testDataDir + "test-permissions.xml");
  83         PermissionsRolesList pcrList =
  84                 (PermissionsRolesList) fromFile(PermissionsRolesList.class, baseDir +
  85                 AbstractAuthorizationTestImpl.testDataDir + "test-permissions-roles.xml");
  86         logger.info("read permissions-roles from "
  87                 + baseDir + AbstractAuthorizationTestImpl.testDataDir + "test-permissions.xml");
  88         AuthZ authZ = AuthZ.get();
  89         for (Permission p : pcList.getPermissions()) {
  90             if (logger.isDebugEnabled()) {
  91                 logger.debug("adding permission for res=" + p.getResourceName());
  92             }
  93             for (PermissionRole pr : pcrList.getPermissionRoles()) {
  94                 if (pr.getPermissions().get(0).getPermissionId().equals(p.getCsid())) {
  95                     addPermissionsForUri(p, pr);
  96                 }
  97             }
  98         }
  99     }
 100
 101         /**
 102      * addPermissionsForUri add permissions from given permission configuration
 103      * with assumption that resource is of type URI
 104      * @param permission configuration
 105      */
 106     //FIXME this method should be in the restful web service resource of authz
 107     private void addPermissionsForUri(Permission perm,
 108             PermissionRole permRole) throws PermissionException {
 109         List<String> principals = new ArrayList<String>();
 110         if (!perm.getCsid().equals(permRole.getPermissions().get(0).getPermissionId())) {
 111             throw new IllegalArgumentException("permission ids do not"
 112                     + " match for role=" + permRole.getRoles().get(0).getRoleName()
 113                     + " with permissionId=" + permRole.getPermissions().get(0).getPermissionId()
 114                     + " for permission with csid=" + perm.getCsid());
 115         }
 116         for (RoleValue roleValue : permRole.getRoles()) {
 117             principals.add(roleValue.getRoleName());
 118         }
 119         List<PermissionAction> permActions = perm.getActions();
 120         for (PermissionAction permAction : permActions) {
 121             CSpaceAction action = getAction(permAction.getName());
 122             URIResourceImpl uriRes = new URIResourceImpl(perm.getTenantId(),
 123                     perm.getResourceName(), action);
 124             AuthZ.get().addPermissions(uriRes, principals.toArray(new String[0]));
 125         }
 126     }
 127
 128
 129     /**
 130      * getAction is a convenience method to get corresponding action for
 131      * given ActionType
 132      * @param action
 133      * @return
 134      */
 135     private CSpaceAction getAction(ActionType action) {
 136         if (ActionType.CREATE.equals(action)) {
 137             return CSpaceAction.CREATE;
 138         } else if (ActionType.READ.equals(action)) {
 139             return CSpaceAction.READ;
 140         } else if (ActionType.UPDATE.equals(action)) {
 141             return CSpaceAction.UPDATE;
 142         } else if (ActionType.DELETE.equals(action)) {
 143             return CSpaceAction.DELETE;
 144         } else if (ActionType.SEARCH.equals(action)) {
 145             return CSpaceAction.SEARCH;
 146         } else if (ActionType.ADMIN.equals(action)) {
 147             return CSpaceAction.ADMIN;
 148         } else if (ActionType.START.equals(action)) {
 149             return CSpaceAction.START;
 150         } else if (ActionType.STOP.equals(action)) {
 151             return CSpaceAction.STOP;
 152         }
 153         throw new IllegalArgumentException("action = " + action.toString());
 154     }
 155 }