testingpdp.java

一个完整的XACML工程,学习XACML技术的好例子!

/*
* Copyright (c) 2006, University of Kent
* All rights reserved.
*
* Redistribution and use in source and binary forms, with or without 
* modification, are permitted provided that the following conditions are met:
*
* Redistributions of source code must retain the above copyright notice, this 
* list of conditions and the following disclaimer.
* 
* Redistributions in binary form must reproduce the above copyright notice, 
* this list of conditions and the following disclaimer in the documentation 
* and/or other materials provided with the distribution. 
*
* 1. Neither the name of the University of Kent nor the names of its 
* contributors may be used to endorse or promote products derived from this 
* software without specific prior written permission. 
*
* 2. THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS  
* IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
* THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR 
* PURPOSE ARE DISCLAIMED. 
*
* 3. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE 
* LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR 
* CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF 
* SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS 
* INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN 
* CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) 
* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE 
* POSSIBILITY OF SUCH DAMAGE.
*
* 4. YOU AGREE THAT THE EXCLUSIONS IN PARAGRAPHS 2 AND 3 ABOVE ARE REASONABLE
* IN THE CIRCUMSTANCES.  IN PARTICULAR, YOU ACKNOWLEDGE (1) THAT THIS
* SOFTWARE HAS BEEN MADE AVAILABLE TO YOU FREE OF CHARGE, (2) THAT THIS
* SOFTWARE IS NOT "PRODUCT" QUALITY, BUT HAS BEEN PRODUCED BY A RESEARCH
* GROUP WHO DESIRE TO MAKE THIS SOFTWARE FREELY AVAILABLE TO PEOPLE WHO WISH
* TO USE IT, AND (3) THAT BECAUSE THIS SOFTWARE IS NOT OF "PRODUCT" QUALITY
* IT IS INEVITABLE THAT THERE WILL BE BUGS AND ERRORS, AND POSSIBLY MORE
* SERIOUS FAULTS, IN THIS SOFTWARE.
*
* 5. This license is governed, except to the extent that local laws
* necessarily apply, by the laws of England and Wales.
*/

/*
 * TestPDP.java
 *
 * Created on 11 December 2006, 18:53
 *
 * To change this template, choose Tools | Template Manager
 * and open the template in the editor.
 */

package issrg.xacml.test;


import issrg.xacml.*;
import issrg.web.service.PermisWebService;

import com.sun.xacml.ctx.*;
import com.sun.xacml.attr.*;

import java.io.*;
import java.util.*;
import java.net.URI;

import org.apache.commons.logging.Log;
import org.apache.commons.logging.LogFactory;
import org.apache.log4j.*;
/**
 *
 * @author ls97
 */
public class TestingPDP {
    
    private static Log logger = LogFactory.getLog(TestingPDP.class.getName());
    
    /** Creates a new instance of TestPDP */
    public TestingPDP() {
    }
    
    public void setLogLevel(String configFile) throws Exception {
        Logger root = Logger.getRootLogger();
        Logger log1,log2;    
        Appender appender;     
        Level level;
        log1 = Logger.getLogger(TestingPDP.class);
        log2 = Logger.getLogger(PermisWebService.class);
        String priority = "debug";
        String file = null;
        Layout layout = new PatternLayout("%d{dd MM yyyy HH:mm:ss} %-5p %c %x - %m%n");  
        String fileName = configFile;
        issrg.web.service.Config config = new issrg.web.service.Config();
        Properties props = new Properties();           
        try {
            InputStream in = new FileInputStream(config.getURL(fileName));
            props.load(in);
            in.close();
            priority = props.getProperty("log-level");
            file = props.getProperty("log-file");
            String lay = props.getProperty("layout");
            if (lay!=null) layout = new PatternLayout(lay);
            if (file==null) {
                appender = new WriterAppender(layout, System.out);
            } else {
                appender = new org.apache.log4j.FileAppender(layout, file);
            }   
        } catch (Exception e) {
            appender = new WriterAppender(layout, System.out);
        }
        root.removeAllAppenders();
        BasicConfigurator.configure(appender);
        level = Level.toLevel(priority.toUpperCase());
        log1.setLevel(level);
        log2.setLevel(level);
    }
    
    public static void main(String[] args) {
        TestingPDP test = new TestingPDP();
        
        String [] policy = {"C:\\home\\CVS\\test.txt"};
        issrg.xacml.PDPConfig config = new issrg.xacml.PDPConfig(policy);
        HashSet subjects = new HashSet(); 
	HashSet resources = new HashSet();
	HashSet actions = new HashSet();
	HashSet environment = new HashSet();

        try {
            test.setLogLevel("C:\\home\\CVS\\log.cfg");
            
            issrg.xacml.PDP pdp = new issrg.xacml.PDP(config);

            //create subject attributes
            HashSet attributes = new HashSet();
            URI idURI = new URI("permis:permisRole");
            URI typeURI = new URI("http://www.w3.org/2001/XMLSchema#string");
            AttributeValue attributeValue = 
	    AttributeFactory.createAttribute(typeURI, "student");
            Attribute subjectAttribute = new Attribute(idURI, null, null, attributeValue);
            attributes.add(subjectAttribute);
            com.sun.xacml.ctx.Subject subject = new com.sun.xacml.ctx.Subject(attributes);
            subjects.add(subject);
            logger.debug("subject is created");
            
            //create resource attributes
            idURI = new URI("urn:oasis:names:tc:xacml:1.0:resource:resource-id");
            typeURI = new URI("http://www.w3.org/2001/XMLSchema#string");
            attributeValue = 
	    AttributeFactory.createAttribute(typeURI, "cn=test target,o=university of kent,c=gb");
            Attribute resourceAttribute = new Attribute(idURI, null, null, attributeValue);
            resources.add(resourceAttribute);
            logger.debug("resource is created");
            
            //create action attributes
            idURI = new URI("urn:oasis:names:tc:xacml:1.0:action:action-id");
            typeURI = new URI("http://www.w3.org/2001/XMLSchema#string");
            attributeValue = 
	    AttributeFactory.createAttribute(typeURI, "print");
            Attribute actionAttribute = new Attribute(idURI, null, null, attributeValue);
            actions.add(actionAttribute);
            idURI = new URI("urn:oasis:names:tc:xacml:1.0:action:pages");
            typeURI = new URI("http://www.w3.org/2001/XMLSchema#integer");
            attributeValue = 
	    AttributeFactory.createAttribute(typeURI, "99");
            actionAttribute = new Attribute(idURI, null, null, attributeValue);
            actions.add(actionAttribute);
            logger.debug("action is created");
            
            //create environment attributes
            idURI = new URI("urn:oasis:names:tc:xacml:1.0:environment:balance.student[id(S)]");
            typeURI = new URI("http://www.w3.org/2001/XMLSchema#integer");
            attributeValue = 
	    AttributeFactory.createAttribute(typeURI, "100");
            Attribute environmentAttribute = new Attribute(idURI, null, null, attributeValue);
            environment.add(environmentAttribute);
            logger.debug("environment is created");
            
            com.sun.xacml.ctx.RequestCtx request = new com.sun.xacml.ctx.RequestCtx(subjects, resources, actions, environment);
            logger.debug("request context is created");
            
            com.sun.xacml.ctx.ResponseCtx response = pdp.evaluate(request);
            
            ByteArrayOutputStream byteStream = new ByteArrayOutputStream();
            response.encode(byteStream, new com.sun.xacml.Indenter());
            String res = byteStream.toString();
            logger.debug(res);
        } catch (Exception e) {
            System.out.println("error:"+e);
        }
    }    
}