showavailablerolesdispatchaction.java

这是linux下ssl vpn的实现程序

/*
 *  SSL-Explorer
 *
 *  Copyright (C) 2003-2006 3SP LTD. All Rights Reserved
 *
 *  This program is free software; you can redistribute it and/or
 *  modify it under the terms of the GNU General Public License
 *  as published by the Free Software Foundation; either version 2 of
 *  the License, or (at your option) any later version.
 *  This program is distributed in the hope that it will be useful,
 *  but WITHOUT ANY WARRANTY; without even the implied warranty of
 *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 *  GNU General Public License for more details.
 *
 *  You should have received a copy of the GNU General Public
 *  License along with this program; if not, write to the Free Software
 *  Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
 */
			
package com.sslexplorer.security.actions;

import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

import org.apache.commons.logging.Log;
import org.apache.commons.logging.LogFactory;
import org.apache.struts.Globals;
import org.apache.struts.action.ActionForm;
import org.apache.struts.action.ActionForward;
import org.apache.struts.action.ActionMapping;
import org.apache.struts.action.ActionMessage;
import org.apache.struts.action.ActionMessages;

import com.sslexplorer.boot.Util;
import com.sslexplorer.core.CoreAttributeConstants;
import com.sslexplorer.core.CoreEvent;
import com.sslexplorer.core.CoreEventConstants;
import com.sslexplorer.core.CoreServlet;
import com.sslexplorer.policyframework.Permission;
import com.sslexplorer.policyframework.PolicyConstants;
import com.sslexplorer.policyframework.PolicyUtil;
import com.sslexplorer.security.Constants;
import com.sslexplorer.security.Role;
import com.sslexplorer.security.SessionInfo;
import com.sslexplorer.security.UserDatabase;
import com.sslexplorer.security.forms.ShowAvailableRolesForm;
import com.sslexplorer.table.actions.AbstractPagerAction;

/**
 * Implementation of an {@link AbstractPagerAction} that lists all of the
 * configured <i>Groups</i> (previously known as <i>Roles</i>).
 * <p> 
 * Depending onf the user database in use, different actions will be available
 * (edit. create or delete). 
 * <p>
 * With user databases that do not support account creation, the admin will
 * be able to use the edit function, but this will not allow any information
 * to be changed, only viewd.
 * 
 * @author Brett Smith <a href="mailto: [e-mail]">&lt;[e-mail]&gt;</a>
 * @version $Revision: 1.38 $
 */
public class ShowAvailableRolesDispatchAction extends AbstractPagerAction {
    final static Log log = LogFactory.getLog(ShowAvailableRolesDispatchAction.class);
    
    /**
     * Constructor.
     */
    public ShowAvailableRolesDispatchAction() {
        super(PolicyConstants.ROLES_RESOURCE_TYPE, new Permission[] {
                        PolicyConstants.PERM_CREATE,
                        PolicyConstants.PERM_EDIT,
                        PolicyConstants.PERM_DELETE
        });
    }

    /* (non-Javadoc)
     * @see org.apache.struts.actions.DispatchAction#unspecified(org.apache.struts.action.ActionMapping, org.apache.struts.action.ActionForm, javax.servlet.http.HttpServletRequest, javax.servlet.http.HttpServletResponse)
     */
    public ActionForward unspecified(ActionMapping mapping, ActionForm form, HttpServletRequest request,
                    HttpServletResponse response) throws Exception {
        return list(mapping, form, request, response);
    }

    /**
     * List of all the available roles.
     * 
     * @param mapping mapping
     * @param form form
     * @param request request
     * @param response response
     * @return forward
     * @throws Exception on any error
     */
    public ActionForward list(ActionMapping mapping, ActionForm form, HttpServletRequest request, HttpServletResponse response)
                    throws Exception {
        try {
            UserDatabase udb = CoreServlet.getServlet().getUserDatabase();
            Role[] roles = null;
            try {
                roles = udb.listAllRoles("*");
            } catch (Exception e) {
                log.error("Failed to get available roles.", e);
                ActionMessages errs = new ActionMessages();
                errs.add(Globals.ERROR_KEY, new ActionMessage("availableRoles.cannotListRoles", Util.getExceptionMessageChain(e)));
                saveErrors(request, errs);
                roles = new Role[0];
            }
            ((ShowAvailableRolesForm) form).initialize(roles, request.getSession());
            ActionMessages msgs = new ActionMessages();
            if (!udb.supportsAccountCreation()) {
                msgs.add(Globals.MESSAGE_KEY, new ActionMessage("availableRoles.noRoleCreation.text"));
            }
            if (msgs.size() > 0) {
                saveMessages(request, msgs);
            }
        } catch (Exception ex) {
            log.error("Failed to reset administration form", ex);
        }
        return mapping.findForward("success");
    }


    /**
     * Create a new role.
     * 
     * @param mapping mapping
     * @param form form
     * @param request request
     * @param response response
     * @return forward
     * @throws Exception on any error
     */
    public ActionForward create(ActionMapping mapping, ActionForm form, HttpServletRequest request, HttpServletResponse response)
                    throws Exception {
        return mapping.findForward("create");
    }

    /**
     * Edit an existing role.
     * 
     * @param mapping mapping
     * @param form form
     * @param request request
     * @param response response
     * @return forward
     * @throws Exception on any error
     */
    public ActionForward edit(ActionMapping mapping, ActionForm form, HttpServletRequest request, HttpServletResponse response)
                    throws Exception {
        Role r = CoreServlet.getServlet().getUserDatabase().getRole(((ShowAvailableRolesForm)form).getSelectedItem());
        request.setAttribute(Constants.EDITING_ITEM, r);
        return mapping.findForward("edit");
    }

    /**
     * Confirm deletion of an existing role.
     * 
     * @param mapping mapping
     * @param form form
     * @param request request
     * @param response response
     * @return forward
     * @throws Exception on any error
     */
    public ActionForward confirmRoleDeletion(ActionMapping mapping, ActionForm form, HttpServletRequest request, HttpServletResponse response)
    throws Exception {
		PolicyUtil.checkPermission(PolicyConstants.ROLES_RESOURCE_TYPE, PolicyConstants.PERM_DELETE, request);
		String rolename = request.getParameter("rolename");
		if (rolename == null) {
			ActionMessages mesgs = new ActionMessages();
			mesgs.add(Globals.ERROR_KEY, new ActionMessage("availableRoles.singleRoleNotSelected"));
			saveErrors(request, mesgs);
			return list(mapping, form, request, response);
		} else {
			return mapping.findForward("confirmRoleDeletion");
		}
    }

    /**
     * Delete an existing role.
     * 
     * @param mapping mapping
     * @param form form
     * @param request request
     * @param response response
     * @return forward
     * @throws Exception on any error
     */
    public ActionForward delete(ActionMapping mapping, ActionForm form, HttpServletRequest request, HttpServletResponse response)
                    throws Exception {
    	PolicyUtil.checkPermission(PolicyConstants.ROLES_RESOURCE_TYPE, PolicyConstants.PERM_DELETE, request);
    	UserDatabase udb = CoreServlet.getServlet().getUserDatabase();
        String rolename = request.getParameter("rolename"); 
        Role role = udb.getRole(rolename);
        SessionInfo info = this.getSessionInfo();
        try {
            // Revoke all polices from the user
            CoreServlet.getServlet().getPolicyDatabase().revokeAllPoliciesFromPrincipal(role);
            
  			udb.deleteRole(rolename);
  			CoreServlet.getServlet().fireCoreEvent(
  							new CoreEvent(this, CoreEventConstants.ROLE_REMOVED, role, info)
  									.addAttribute(CoreAttributeConstants.EVENT_ATTR_PRINCIPAL_ID, rolename));
  			return mapping.findForward("refresh");
  		} catch (Exception e) {
  			throw e;
  		}
  		// return list(mapping, form, request, response);
    }

    /* (non-Javadoc)
     * @see com.sslexplorer.core.actions.CoreAction#getNavigationContext(org.apache.struts.action.ActionMapping, org.apache.struts.action.ActionForm, javax.servlet.http.HttpServletRequest, javax.servlet.http.HttpServletResponse)
     */
    public int getNavigationContext(ActionMapping mapping, ActionForm form, HttpServletRequest request, HttpServletResponse response) {
        return SessionInfo.MANAGEMENT_CONSOLE_CONTEXT;
    }
}