admin.java

来自「一套JAVA的CA证书签发系统.」· Java 代码 · 共 110 行

/*************************************************************************
 *                                                                       *
 *  EJBCA: The OpenSource Certificate Authority                          *
 *                                                                       *
 *  This software is free software; you can redistribute it and/or       *
 *  modify it under the terms of the GNU Lesser General Public           *
 *  License as published by the Free Software Foundation; either         *
 *  version 2.1 of the License, or any later version.                    *
 *                                                                       *
 *  See terms of license at gnu.org.                                     *
 *                                                                       *
 *************************************************************************/
 
/*
 * Admin.java
 *
 * Created on den 25 august 2002, 10:02
 */

package se.anatom.ejbca.log;

import java.security.cert.X509Certificate;

import se.anatom.ejbca.authorization.AdminEntity;
import se.anatom.ejbca.authorization.AdminInformation;
import se.anatom.ejbca.util.CertTools;
/**
 *  This is a class containing information about the administrator or admin preforming the event. 
 *  Data contained in the class is preferbly
 *
 *  
 *
 * @author  TomSelleck
 */
public class Admin implements java.io.Serializable {
  
    // Public Constants
    // Indicates the type of administrator.
    public static final int TYPE_CLIENTCERT_USER       = 0;
    public static final int TYPE_PUBLIC_WEB_USER       = 1;
    public static final int TYPE_RACOMMANDLINE_USER    = 2;
    public static final int TYPE_CACOMMANDLINE_USER    = 3;   
    public static final int TYPE_BATCHCOMMANDLINE_USER = 4; 
    public static final int TYPE_INTERNALUSER          = 5;     

    public static final int SPECIAL_ADMIN_BOUNDRARY = 100;
    
    public static final String[] ADMINTYPETEXTS = {"CLIENTCERT","PUBLICWEBUSER","RACMDLINE","CACMDLINE","BATCHCMDLINE", "INTERNALUSER"};
        
    private int[] ADMINTYPETOADMINENTITY = {0, AdminEntity.SPECIALADMIN_PUBLICWEBUSER, AdminEntity.SPECIALADMIN_RACOMMANDLINEADMIN, 
                                               AdminEntity.SPECIALADMIN_CACOMMANDLINEADMIN, AdminEntity.SPECIALADMIN_BATCHCOMMANDLINEADMIN,
                                               AdminEntity.SPECIALADMIN_INTERNALUSER};
                                                         
    
    // Public Constructors
    public Admin(X509Certificate certificate){
      this.type=TYPE_CLIENTCERT_USER;
      this.data= certificate.getSerialNumber().toString(16) + ", " + CertTools.getIssuerDN(certificate);        
      this.certificate = certificate;
    }
    
    public Admin(int type, String ip){
      this.type=type;
      this.data=ip;  
    }
    
    public Admin(int type){
      this.type=type;
      this.data=null;    
    }

    // Public Methods    
    
    public int getAdminType(){
      return this.type;         
    }
    
    public String getAdminData(){
      return this.data;   
    }
        
    // Method that takes the internal data and returns a AdminInformation object required by the Authorization module.
    public AdminInformation getAdminInformation(){
       if(type == TYPE_CLIENTCERT_USER)
         return new AdminInformation(certificate);
       
       return new AdminInformation( ADMINTYPETOADMINENTITY[type]);
    }
    
    /**
     * Method thar returns the caid of the CA, the admin belongs to.
     * Doesn't work properly for public web and special users so use with care.
     */ 
    
    public int getCAId(){
      int returnval = ILogSessionLocal.INTERNALCAID;
      if(type==TYPE_CLIENTCERT_USER)
        returnval = CertTools.getIssuerDN(certificate).hashCode();
      return returnval;  
    }
    
    
    // Private Methods
    
    // Private fields
    private    int             type = 0;
    private    String          data = null;   
    private    X509Certificate certificate =null;
}