feedownervoter.java.svn-base

google的开源项目

package com.google.code.rsser.web.security;

import org.apache.log4j.Logger;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.security.Authentication;
import org.springframework.security.ConfigAttribute;
import org.springframework.security.ConfigAttributeDefinition;
import org.springframework.security.intercept.web.FilterInvocation;
import org.springframework.security.vote.AccessDecisionVoter;
import org.springframework.web.bind.ServletRequestUtils;

import com.google.code.rsser.model.Feed;
import com.google.code.rsser.model.User;
import com.google.code.rsser.service.FeedService;
import com.google.code.rsser.service.UserService;

public class FeedOwnerVoter implements AccessDecisionVoter {

	private static final String REQUEST_FEED_ID = "feedId";
	
	private Logger logger = Logger.getLogger(FeedOwnerVoter.class);

	@Autowired
	private UserService userService;
	
	@Autowired
	private FeedService feedService;
	
	public int vote(Authentication authentication, Object object, ConfigAttributeDefinition cad) {
        FilterInvocation filter = (FilterInvocation) object;
        
        int id = ServletRequestUtils.getIntParameter(filter.getRequest(), REQUEST_FEED_ID, 0);
		
        Feed feed = feedService.get(id);
        User user = userService.getCurrent();
        
        if (feed != null && user.getFeedsSubscribed().contains(feed)) {
        	if (logger.isDebugEnabled()) {
        		logger.debug("Access granted for user [" + user + "] to feed [" + feed + "]");
        	}
        	
        	return ACCESS_GRANTED;
        } else {
        	if (logger.isDebugEnabled()) {
        		logger.debug("Access abstained for user [" + user + "] to feed [" + feed + "]");
        	}
        	
        	return ACCESS_ABSTAIN;
        }
	}

	public boolean supports(ConfigAttribute attribute) {
		return Roles.ROLE_FEED_OWNER.equals(attribute.getAttribute());
	}

	public boolean supports(Class clazz) {
		return true;
	}

}