logauthorization.java

JAVA做的J2EE下CA认证系统 基于EJB开发

/*************************************************************************
 *                                                                       *
 *  EJBCA: The OpenSource Certificate Authority                          *
 *                                                                       *
 *  This software is free software; you can redistribute it and/or       *
 *  modify it under the terms of the GNU Lesser General Public           *
 *  License as published by the Free Software Foundation; either         *
 *  version 2.1 of the License, or any later version.                    *
 *                                                                       *
 *  See terms of license at gnu.org.                                     *
 *                                                                       *
 *************************************************************************/
 
package se.anatom.ejbca.webdist.loginterface;

import java.io.Serializable;
import java.util.ArrayList;
import java.util.Collection;
import java.util.Iterator;

import se.anatom.ejbca.authorization.AuthorizationDeniedException;
import se.anatom.ejbca.authorization.AvailableAccessRules;
import se.anatom.ejbca.authorization.IAuthorizationSessionLocal;
import se.anatom.ejbca.log.Admin;
import se.anatom.ejbca.log.LogConstants;
import se.anatom.ejbca.log.LogEntry;

/**
 * A class that looks up the which modules a administrator have right to view.
 * This is done by looking up an administrators privileges in the tree and returning a string to be used in SQL-queries.
 * 
 * @version $Id: LogAuthorization.java,v 1.10 2005/05/09 15:41:24 anatom Exp $
 */
public class LogAuthorization implements Serializable {
    
  
    
    /** Creates a new instance of LogAuthorization. */
    public LogAuthorization(Admin administrator, IAuthorizationSessionLocal authorizationsession) {
       this.administrator = administrator;
       this.authorizationsession = authorizationsession;
    }

    
    
    /**
     * Method that checks the administrators view log privileges to the different modules and returns a string that should be used in where clause of SQL queries.
     *
     * @return a string of log module privileges that should be used in the where clause of SQL queries.
     */
    public String getViewLogRights() {      
      if(querystring == null){
        querystring = "";  
        boolean first = true;
        boolean authorized = false;
        
        for(int i = 0 ; i < LogEntry.MODULETEXTS.length; i++){
          authorized = false; 
          String resource = AvailableAccessRules.VIEWLOGACCESSRULES[i];
          try{ 
            authorized = this.authorizationsession.isAuthorizedNoLog(administrator,resource);
          }catch(AuthorizationDeniedException e){} 
          if(authorized){
            if(first){
              querystring = "(";
              first = false;
            }
            else
             querystring += " OR ";
             
            querystring += "module=" + i;
          }  
        }
       
       if(!querystring.equals(""))
        querystring += ")";
        
     }   
              
      return querystring; 
    } 
    
    /**
     * Method that checks the administrators view log privileges to the different CAs and returns a string that should be used in where clause of SQL queries.
     *
     * @return a string of log module privileges that should be used in the where clause of SQL queries.
     */
    public String getCARights(){
      if(caidstring == null){
        caidstring = "";
        
        Iterator iter = this.authorizationsession.getAuthorizedCAIds(administrator).iterator();
         
        try{ 
          this.authorizationsession.isAuthorizedNoLog(administrator, "/super_administrator");
          caidstring = " caid = " + LogConstants.INTERNALCAID;       
        }catch(AuthorizationDeniedException e){} 
      
        
        while(iter.hasNext()){
          if(caidstring.equals(""))
            caidstring = " caid = " + ((Integer) iter.next()).toString();   
          else    
            caidstring = caidstring + " OR caid = " + ((Integer) iter.next()).toString(); 
        }                
          
      }  
      
      return caidstring;   
    }
    
    public void clear(){
      this.querystring = null;
      this.caidstring = null;
      this.authorizedmodules = null;
    }
    
    public Collection getAuthorizedModules(){    
       if(authorizedmodules == null){
	     authorizedmodules = new ArrayList();
	     
	     for(int i=0; i < AvailableAccessRules.VIEWLOGACCESSRULES.length; i++){
	     	 try{
	     	 	this.authorizationsession.isAuthorizedNoLog(administrator,AvailableAccessRules.VIEWLOGACCESSRULES[i]);
				authorizedmodules.add(new Integer(i));
	         }catch(AuthorizationDeniedException ade){}  
	     }	             
      }    
       return authorizedmodules;
    }
 
    
    
    // Private fields.
    private String querystring = null;
    private String caidstring = null;
    private Collection authorizedmodules = null;
    private IAuthorizationSessionLocal authorizationsession;
    private Admin administrator;

}