testaccesscontroller.java

来自「jetspeed源代码」· Java 代码 · 共 343 行 · 第 1/2 页

        assertNotNull( "Getting security for " + userAllAnonViewSecurityRef.getParent(), Registry.getEntry( Registry.SECURITY, defaultSecurityRef.getParent()));

    }
        
    public void testRequiredActions() throws Exception
    {
        JetspeedUser adminUser = (JetspeedUser) JetspeedSecurity.getUser("admin");
        assertNotNull( "Getting admin user", adminUser);
        adminUser.setHasLoggedIn(Boolean.TRUE);
        
        JetspeedUser turbineUser = (JetspeedUser) JetspeedSecurity.getUser("turbine");
        assertNotNull( "Getting turbine user", turbineUser);
        turbineUser.setHasLoggedIn(Boolean.TRUE);
        
        JetspeedUser anonymousUser =  (JetspeedUser) JetspeedSecurity.getAnonymousUser();
        assertNotNull( "Getting anonymous user", anonymousUser);
        Entry adminEntry = createEntry( ADMIN_PORTLET, "ST_01.admin", adminSecurityRef);
        Entry userEntry = createEntry( USER_PORTLET, "ST_01.user", userSecurityRef);
        Entry allEntry = createEntry( ALL_PORTLET, "ST_01.all", defaultSecurityRef);
        Entry userAnonEntry = createEntry( USERANON_PORTLET, "ST_01.userAnon", userAllAnonViewSecurityRef);
        
        assertEquals( "Admin user has view access to " + ADMIN_PORTLET, true, JetspeedPortalAccessController.checkPermission( adminUser, adminEntry, "view"));
        assertEquals( "Turbine user DOES NOT have view access to " + ADMIN_PORTLET, false, JetspeedPortalAccessController.checkPermission( turbineUser, adminEntry, "view"));
        assertEquals( "Anonymous user DOES NOT have view access to " + ADMIN_PORTLET, false, JetspeedPortalAccessController.checkPermission( anonymousUser, adminEntry, "view"));
        
        assertEquals( "Admin user has view access to " + USER_PORTLET, true, JetspeedPortalAccessController.checkPermission( adminUser, userEntry, "view"));
        assertEquals( "Turbine user has view access to " + USER_PORTLET, true, JetspeedPortalAccessController.checkPermission( turbineUser, userEntry, "view"));
        assertEquals( "Anonymous user DOES NOT have view access to " + USER_PORTLET, false, JetspeedPortalAccessController.checkPermission( anonymousUser, userEntry, "view"));
        
        assertEquals( "Admin user has view access to " + ALL_PORTLET, true, JetspeedPortalAccessController.checkPermission( adminUser, allEntry, "view"));
        assertEquals( "Turbine user has view access to " + ALL_PORTLET, true, JetspeedPortalAccessController.checkPermission( turbineUser, allEntry, "view"));
        assertEquals( "Anonymous user has view access to " + ALL_PORTLET, true, JetspeedPortalAccessController.checkPermission( anonymousUser, allEntry, "view"));

        assertEquals( "Admin user has view access to " + USERANON_PORTLET, true, JetspeedPortalAccessController.checkPermission( adminUser, userAnonEntry, "view"));
        assertEquals( "Admin user has maximize access to " + USERANON_PORTLET, true, JetspeedPortalAccessController.checkPermission( turbineUser, userAnonEntry, "maximize"));
        assertEquals( "Anonymous user has view access to " + USERANON_PORTLET, true, JetspeedPortalAccessController.checkPermission( anonymousUser, userAnonEntry, "view"));
        assertEquals( "Anonymous user has maximize access to " + USERANON_PORTLET, false, JetspeedPortalAccessController.checkPermission( anonymousUser, userAnonEntry, "maximize"));
    }

	public void testRolesAndGroups() throws Exception
	{
		/*
		 * Create a security entry that looks look like the following
		 *
		 * <security-entry name="powerusers_all-anon_view">
		 *   <access action="*">
		 *     <allow-if group="apache" role="admin"/>
		 *   </access>
		 * </security-entry>
		 */
		
		assertEquals( "Using RegistryAccessController",
		"org.apache.jetspeed.services.security.registry.RegistryAccessController",
		JetspeedResources.getString("services.PortalAccessController.classname"));

		SecurityEntry paav = createSecurityEntry( "powerusers_all-anon_view", "apache", "admin", null, "*");
		Registry.addEntry(Registry.SECURITY, (RegistryEntry) paav);
		assertNotNull( "Getting powerusers_all-anon_view" , Registry.getEntry( Registry.SECURITY, "powerusers_all-anon_view"));
		
		SecurityEntry secEntry = (SecurityEntry) Registry.getEntry( Registry.SECURITY, "powerusers_all-anon_view");
		Vector accessVector = secEntry.getAccesses();
		
		for (Iterator it = accessVector.iterator(); it.hasNext();)
		{
			SecurityAccess access = (SecurityAccess) it.next(); 
			System.out.println("Action:" + access.getAction().toString());
			
			Vector allAllows = access.getAllAllows();
			for (Iterator it1 = allAllows.iterator(); it1.hasNext();)
			{
				SecurityAllow allow = (SecurityAllow) it1.next(); 
				System.out.println("Allow group: " + allow.getGroup() + ", role: " + allow.getRole() + ", user: " + allow.getUser());				
			}
		}		
		
		SecurityReference secRef = new BaseSecurityReference();
		secRef.setParent("powerusers_all-anon_view");
		Entry adminEntry = createEntry(ADMIN_PORTLET, "ST_01.apache.admin", secRef);
				
		JetspeedUser turbineUser = (JetspeedUser) JetspeedSecurity.getUser("turbine");
		assertNotNull( "Getting turbine user", turbineUser);
		turbineUser.setHasLoggedIn(Boolean.TRUE);

		try
		{
			JetspeedGroupManagement.joinGroup("turbine", "apache", "admin");
		}
		catch (Exception e)
		{
			e.printStackTrace();			
		}
		
		assertEquals( "Turbine user has view access to " + ADMIN_PORTLET, true, JetspeedPortalAccessController.checkPermission( turbineUser, adminEntry, "view"));

		try
		{
			JetspeedGroupManagement.unjoinGroup("turbine", "apache", "admin");
		}
		catch (Exception e)
		{
			e.printStackTrace();
		}

		assertEquals( "Turbine user has no view access to " + ADMIN_PORTLET, false, JetspeedPortalAccessController.checkPermission( turbineUser, adminEntry, "view"));		
	}

	/*
     * Setup Turbine environment
     */
    
    /*
     * Configuration object to run Turbine outside a servlet container
     * ( uses turbine.properties )
     */
    private static TurbineConfig config = null;
    
    /*
     * Sets up TurbineConfig using the system property:
     * <pre>turbine.properties</pre>
     */
    static
    {
        try
        {
            config = new TurbineConfig( "webapp", "/WEB-INF/conf/TurbineResources.properties");
            config.init();
        }
        catch (Exception e)
        {
            fail(StringUtils.stackTrace(e));
        }
    }
    
    private PsmlEntry createEntry(String parent, String entryId, SecurityReference security)
    {
        PsmlEntry entry = new PsmlEntry();
        entry.setParent( parent);
        if (entryId != null)
            entry.setId( entryId);
        if (security != null)
            entry.setSecurityRef( security);
        return entry;
    }

    private SecurityEntry createSecurityEntry( String name, String group, String role, String user, String action)
    {
        Vector allowVector = null;
        if (role != null || group != null || user != null)
        {
            BaseSecurityAllow allowElement = new BaseSecurityAllow();
            allowElement.setRole(role);
            allowElement.setGroup(group);
            allowElement.setUser(user);
            allowVector = new Vector();
            allowVector.addElement(allowElement);
        }
        
        BaseSecurityAccess accessElement  = new BaseSecurityAccess();
        accessElement.setAction(action);
        accessElement.setAllows( allowVector );
        Vector accessVector = new Vector();
        accessVector.addElement(accessElement);
        
        BaseSecurityEntry securityEntry = new BaseSecurityEntry();
        securityEntry.setName(name);
        securityEntry.setAccesses( accessVector);
        return securityEntry;
    }
    
}