No longer required.
This commit is contained in:
Ben Alex
parent
94e384b944
commit
e3dc29ae96
|
|
@ -1,434 +0,0 @@
|
||||||
/* Copyright 2004 Acegi Technology Pty Limited
|
|
||||||
*
|
|
||||||
* Licensed under the Apache License, Version 2.0 (the "License");
|
|
||||||
* you may not use this file except in compliance with the License.
|
|
||||||
* You may obtain a copy of the License at
|
|
||||||
*
|
|
||||||
* http://www.apache.org/licenses/LICENSE-2.0
|
|
||||||
*
|
|
||||||
* Unless required by applicable law or agreed to in writing, software
|
|
||||||
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
||||||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
||||||
* See the License for the specific language governing permissions and
|
|
||||||
* limitations under the License.
|
|
||||||
*/
|
|
||||||
|
|
||||||
package net.sf.acegisecurity.vote;
|
|
||||||
|
|
||||||
import junit.framework.TestCase;
|
|
||||||
|
|
||||||
import net.sf.acegisecurity.AccessDecisionManager;
|
|
||||||
import net.sf.acegisecurity.AccessDeniedException;
|
|
||||||
import net.sf.acegisecurity.ConfigAttributeDefinition;
|
|
||||||
import net.sf.acegisecurity.GrantedAuthority;
|
|
||||||
import net.sf.acegisecurity.GrantedAuthorityImpl;
|
|
||||||
import net.sf.acegisecurity.SecurityConfig;
|
|
||||||
import net.sf.acegisecurity.providers.TestingAuthenticationToken;
|
|
||||||
|
|
||||||
import org.springframework.context.support.ClassPathXmlApplicationContext;
|
|
||||||
|
|
||||||
import java.util.List;
|
|
||||||
import java.util.Vector;
|
|
||||||
|
|
||||||
|
|
||||||
/**
|
|
||||||
* Tests voter decision managers.
|
|
||||||
*
|
|
||||||
* @author Ben Alex
|
|
||||||
* @version $Id$
|
|
||||||
*/
|
|
||||||
public class VoterManagerTests extends TestCase {
|
|
||||||
//~ Instance fields ========================================================
|
|
||||||
|
|
||||||
private ClassPathXmlApplicationContext ctx;
|
|
||||||
|
|
||||||
//~ Constructors ===========================================================
|
|
||||||
|
|
||||||
public VoterManagerTests() {
|
|
||||||
super();
|
|
||||||
}
|
|
||||||
|
|
||||||
public VoterManagerTests(String arg0) {
|
|
||||||
super(arg0);
|
|
||||||
}
|
|
||||||
|
|
||||||
//~ Methods ================================================================
|
|
||||||
|
|
||||||
public final void setUp() throws Exception {
|
|
||||||
super.setUp();
|
|
||||||
ctx = new ClassPathXmlApplicationContext(
|
|
||||||
"/net/sf/acegisecurity/vote/applicationContext.xml");
|
|
||||||
}
|
|
||||||
|
|
||||||
public static void main(String[] args) {
|
|
||||||
junit.textui.TestRunner.run(VoterManagerTests.class);
|
|
||||||
}
|
|
||||||
|
|
||||||
public void testAbstractAccessDecisionManagerSetter()
|
|
||||||
throws Exception {
|
|
||||||
AffirmativeBased affirmative = new AffirmativeBased();
|
|
||||||
affirmative.setAllowIfAllAbstainDecisions(false);
|
|
||||||
assertTrue(!affirmative.isAllowIfAllAbstainDecisions());
|
|
||||||
affirmative.setAllowIfAllAbstainDecisions(true);
|
|
||||||
assertTrue(affirmative.isAllowIfAllAbstainDecisions());
|
|
||||||
}
|
|
||||||
|
|
||||||
public void testAbstractAccessDecisionManagerVoterListHandling()
|
|
||||||
throws Exception {
|
|
||||||
XVoter x = new XVoter();
|
|
||||||
List xVoterList = new Vector();
|
|
||||||
xVoterList.add(x);
|
|
||||||
|
|
||||||
AffirmativeBased affirmative = new AffirmativeBased();
|
|
||||||
affirmative.setDecisionVoters(xVoterList);
|
|
||||||
|
|
||||||
try {
|
|
||||||
affirmative.setDecisionVoters(null);
|
|
||||||
fail("Should have thrown IllegalArgumentException as list null");
|
|
||||||
} catch (IllegalArgumentException expected) {
|
|
||||||
assertTrue(true);
|
|
||||||
}
|
|
||||||
|
|
||||||
List sampleList = new Vector();
|
|
||||||
|
|
||||||
try {
|
|
||||||
affirmative.setDecisionVoters(sampleList);
|
|
||||||
fail("Should have thrown IllegalArgumentException as list empty");
|
|
||||||
} catch (IllegalArgumentException expected) {
|
|
||||||
assertTrue(true);
|
|
||||||
}
|
|
||||||
|
|
||||||
sampleList.add(x); // valid (is AccessDecisionVoter)
|
|
||||||
sampleList.add("Hello world"); // invalid (not AccessDecisionVoter)
|
|
||||||
|
|
||||||
try {
|
|
||||||
affirmative.setDecisionVoters(sampleList);
|
|
||||||
fail(
|
|
||||||
"Should have thrown IllegalArgumentException as list has invalid entries");
|
|
||||||
} catch (IllegalArgumentException expected) {
|
|
||||||
assertTrue(true);
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
public void testAffirmative() throws Exception {
|
|
||||||
AffirmativeBased mgr = (AffirmativeBased) ctx.getBean(
|
|
||||||
"affirmativeBased");
|
|
||||||
ConfigAttributeDefinition config;
|
|
||||||
TestingAuthenticationToken auth;
|
|
||||||
|
|
||||||
auth = new TestingAuthenticationToken("test", "test",
|
|
||||||
new GrantedAuthority[] {new GrantedAuthorityImpl("ROLE_1"), new GrantedAuthorityImpl(
|
|
||||||
"ROLE_2"), new GrantedAuthorityImpl("ROLE_MAGIC")});
|
|
||||||
|
|
||||||
// Check if we'd be given access, even with a definite deny vote
|
|
||||||
config = new ConfigAttributeDefinition();
|
|
||||||
config.addConfigAttribute(new SecurityConfig("ROLE_2")); // grant
|
|
||||||
config.addConfigAttribute(new SecurityConfig("DENY_FOR_SURE")); // deny
|
|
||||||
mgr.decide(auth, null, config);
|
|
||||||
assertTrue(true);
|
|
||||||
|
|
||||||
// Check if we'd be denied access, with only one definite deny vote
|
|
||||||
config = new ConfigAttributeDefinition();
|
|
||||||
config.addConfigAttribute(new SecurityConfig("DENY_FOR_SURE")); // deny
|
|
||||||
|
|
||||||
try {
|
|
||||||
mgr.decide(auth, null, config);
|
|
||||||
fail("Should have thrown AccessDeniedException");
|
|
||||||
} catch (AccessDeniedException expected) {
|
|
||||||
assertTrue(true);
|
|
||||||
}
|
|
||||||
|
|
||||||
// Check if we'd get access if ROLE_2 was all that is acceptable
|
|
||||||
config = new ConfigAttributeDefinition();
|
|
||||||
config.addConfigAttribute(new SecurityConfig("ROLE_2")); // grant
|
|
||||||
mgr.decide(auth, null, config);
|
|
||||||
assertTrue(true);
|
|
||||||
|
|
||||||
// Check if we'd get access if YYYY was all that is acceptable
|
|
||||||
config = new ConfigAttributeDefinition();
|
|
||||||
config.addConfigAttribute(new SecurityConfig("YYYY")); // grant
|
|
||||||
mgr.decide(auth, null, config);
|
|
||||||
assertTrue(true);
|
|
||||||
|
|
||||||
// Check if we'd get access if everything was acceptable
|
|
||||||
config = new ConfigAttributeDefinition();
|
|
||||||
config.addConfigAttribute(new SecurityConfig("ROLE_1")); // grant and return
|
|
||||||
config.addConfigAttribute(new SecurityConfig("ROLE_2")); // not tested
|
|
||||||
config.addConfigAttribute(new SecurityConfig("XXXX")); // grant
|
|
||||||
config.addConfigAttribute(new SecurityConfig("YYYY")); // grant
|
|
||||||
mgr.decide(auth, null, config);
|
|
||||||
assertTrue(true);
|
|
||||||
|
|
||||||
// Check if we'd get denied access if ROLE_9 was acceptable
|
|
||||||
config = new ConfigAttributeDefinition();
|
|
||||||
config.addConfigAttribute(new SecurityConfig("ROLE_9")); // deny
|
|
||||||
|
|
||||||
try {
|
|
||||||
mgr.decide(auth, null, config);
|
|
||||||
fail("Should have thrown AccessDeniedException");
|
|
||||||
} catch (AccessDeniedException expected) {
|
|
||||||
assertTrue(true);
|
|
||||||
}
|
|
||||||
|
|
||||||
auth = new TestingAuthenticationToken("test", "test",
|
|
||||||
new GrantedAuthority[] {new GrantedAuthorityImpl("ROLE_1"), new GrantedAuthorityImpl(
|
|
||||||
"ROLE_2"),});
|
|
||||||
|
|
||||||
// Check if we'd get access if ROLE_1 and 2 was acceptable
|
|
||||||
config = new ConfigAttributeDefinition();
|
|
||||||
config.addConfigAttribute(new SecurityConfig("ROLE_1")); // grant and return
|
|
||||||
config.addConfigAttribute(new SecurityConfig("ROLE_2")); // not tested
|
|
||||||
mgr.decide(auth, null, config);
|
|
||||||
assertTrue(true);
|
|
||||||
|
|
||||||
// Check if we'd get granted access even if one returned deny
|
|
||||||
config = new ConfigAttributeDefinition();
|
|
||||||
config.addConfigAttribute(new SecurityConfig("ROLE_1")); // grant and return
|
|
||||||
config.addConfigAttribute(new SecurityConfig("ROLE_2")); // not tested
|
|
||||||
config.addConfigAttribute(new SecurityConfig("XXXX")); // deny
|
|
||||||
mgr.decide(auth, null, config);
|
|
||||||
assertTrue(true);
|
|
||||||
|
|
||||||
// Check if we'd get denied access if all returned deny
|
|
||||||
config = new ConfigAttributeDefinition();
|
|
||||||
config.addConfigAttribute(new SecurityConfig("YYYY")); // deny
|
|
||||||
|
|
||||||
try {
|
|
||||||
mgr.decide(auth, null, config);
|
|
||||||
fail("Should have thrown AccessDeniedException");
|
|
||||||
} catch (AccessDeniedException expected) {
|
|
||||||
assertTrue(true);
|
|
||||||
}
|
|
||||||
|
|
||||||
// Check if we'd be denied access if all abstained
|
|
||||||
config = new ConfigAttributeDefinition();
|
|
||||||
config.addConfigAttribute(new SecurityConfig("NONE_WILL_VOTE")); // abstain
|
|
||||||
|
|
||||||
try {
|
|
||||||
mgr.decide(auth, null, config);
|
|
||||||
fail("Should have thrown AccessDeniedException");
|
|
||||||
} catch (AccessDeniedException expected) {
|
|
||||||
assertTrue(true);
|
|
||||||
}
|
|
||||||
|
|
||||||
// Now check it works given we approve access if all abstain
|
|
||||||
mgr.setAllowIfAllAbstainDecisions(true);
|
|
||||||
mgr.decide(auth, null, config);
|
|
||||||
assertTrue(true);
|
|
||||||
}
|
|
||||||
|
|
||||||
public void testConsensus() throws Exception {
|
|
||||||
ConsensusBased mgr = (ConsensusBased) ctx.getBean("consensusBased");
|
|
||||||
ConfigAttributeDefinition config;
|
|
||||||
TestingAuthenticationToken auth;
|
|
||||||
|
|
||||||
auth = new TestingAuthenticationToken("test", "test",
|
|
||||||
new GrantedAuthority[] {new GrantedAuthorityImpl("ROLE_1"), new GrantedAuthorityImpl(
|
|
||||||
"ROLE_2"), new GrantedAuthorityImpl("ROLE_MAGIC")});
|
|
||||||
|
|
||||||
// Check if we'd be given access, even with a definite deny vote
|
|
||||||
config = new ConfigAttributeDefinition();
|
|
||||||
config.addConfigAttribute(new SecurityConfig("ROLE_2")); // grant
|
|
||||||
config.addConfigAttribute(new SecurityConfig("DENY_FOR_SURE")); // deny
|
|
||||||
mgr.decide(auth, null, config);
|
|
||||||
assertTrue(true);
|
|
||||||
|
|
||||||
// Check if we'd be denied access, with only one definite deny vote
|
|
||||||
config = new ConfigAttributeDefinition();
|
|
||||||
config.addConfigAttribute(new SecurityConfig("DENY_FOR_SURE")); // deny
|
|
||||||
|
|
||||||
try {
|
|
||||||
mgr.decide(auth, null, config);
|
|
||||||
fail("Should have thrown AccessDeniedException");
|
|
||||||
} catch (AccessDeniedException expected) {
|
|
||||||
assertTrue(true);
|
|
||||||
}
|
|
||||||
|
|
||||||
// Check if we'd get access if ROLE_2 was all that is acceptable
|
|
||||||
config = new ConfigAttributeDefinition();
|
|
||||||
config.addConfigAttribute(new SecurityConfig("ROLE_2")); // grant
|
|
||||||
mgr.decide(auth, null, config);
|
|
||||||
assertTrue(true);
|
|
||||||
|
|
||||||
// Check if we'd get access if YYYY was all that is acceptable
|
|
||||||
config = new ConfigAttributeDefinition();
|
|
||||||
config.addConfigAttribute(new SecurityConfig("YYYY")); // grant
|
|
||||||
mgr.decide(auth, null, config);
|
|
||||||
assertTrue(true);
|
|
||||||
|
|
||||||
// Check if we'd get access if everything was acceptable
|
|
||||||
config = new ConfigAttributeDefinition();
|
|
||||||
config.addConfigAttribute(new SecurityConfig("ROLE_1")); // grant and return
|
|
||||||
config.addConfigAttribute(new SecurityConfig("ROLE_2")); // not tested
|
|
||||||
config.addConfigAttribute(new SecurityConfig("XXXX")); // grant
|
|
||||||
config.addConfigAttribute(new SecurityConfig("YYYY")); // grant
|
|
||||||
mgr.decide(auth, null, config);
|
|
||||||
assertTrue(true);
|
|
||||||
|
|
||||||
// Check if we'd get denied access if ROLE_9 was acceptable
|
|
||||||
config = new ConfigAttributeDefinition();
|
|
||||||
config.addConfigAttribute(new SecurityConfig("ROLE_9")); // deny
|
|
||||||
|
|
||||||
try {
|
|
||||||
mgr.decide(auth, null, config);
|
|
||||||
fail("Should have thrown AccessDeniedException");
|
|
||||||
} catch (AccessDeniedException expected) {
|
|
||||||
assertTrue(true);
|
|
||||||
}
|
|
||||||
|
|
||||||
auth = new TestingAuthenticationToken("test", "test",
|
|
||||||
new GrantedAuthority[] {new GrantedAuthorityImpl("ROLE_1"), new GrantedAuthorityImpl(
|
|
||||||
"ROLE_2"),});
|
|
||||||
|
|
||||||
// Check if we'd get access if ROLE_1 and 2 was acceptable
|
|
||||||
config = new ConfigAttributeDefinition();
|
|
||||||
config.addConfigAttribute(new SecurityConfig("ROLE_1")); // grant and return
|
|
||||||
config.addConfigAttribute(new SecurityConfig("ROLE_2")); // not tested
|
|
||||||
mgr.decide(auth, null, config);
|
|
||||||
assertTrue(true);
|
|
||||||
|
|
||||||
// Check if we'd get granted access even if one returned deny
|
|
||||||
config = new ConfigAttributeDefinition();
|
|
||||||
config.addConfigAttribute(new SecurityConfig("ROLE_1")); // grant and return
|
|
||||||
config.addConfigAttribute(new SecurityConfig("ROLE_2")); // not tested
|
|
||||||
config.addConfigAttribute(new SecurityConfig("XXXX")); // deny
|
|
||||||
mgr.decide(auth, null, config);
|
|
||||||
assertTrue(true);
|
|
||||||
|
|
||||||
// Check if we'd get denied access if all returned deny
|
|
||||||
config = new ConfigAttributeDefinition();
|
|
||||||
config.addConfigAttribute(new SecurityConfig("XXXX")); // deny
|
|
||||||
|
|
||||||
try {
|
|
||||||
mgr.decide(auth, null, config);
|
|
||||||
fail("Should have thrown AccessDeniedException");
|
|
||||||
} catch (AccessDeniedException expected) {
|
|
||||||
assertTrue(true);
|
|
||||||
}
|
|
||||||
|
|
||||||
// Check if we'd get denied access if equal votes, after changing setting
|
|
||||||
assertTrue(mgr.isAllowIfEqualGrantedDeniedDecisions()); // check default
|
|
||||||
mgr.setAllowIfEqualGrantedDeniedDecisions(false);
|
|
||||||
config = new ConfigAttributeDefinition();
|
|
||||||
config.addConfigAttribute(new SecurityConfig("ROLE_1")); // grant
|
|
||||||
config.addConfigAttribute(new SecurityConfig("DENY_FOR_SURE")); // deny
|
|
||||||
|
|
||||||
try {
|
|
||||||
mgr.decide(auth, null, config);
|
|
||||||
fail("Should have thrown AccessDeniedException");
|
|
||||||
} catch (AccessDeniedException expected) {
|
|
||||||
assertTrue(true);
|
|
||||||
}
|
|
||||||
|
|
||||||
// Check if we'd be denied access if all abstained
|
|
||||||
config = new ConfigAttributeDefinition();
|
|
||||||
config.addConfigAttribute(new SecurityConfig("NONE_WILL_VOTE")); // abstain
|
|
||||||
|
|
||||||
try {
|
|
||||||
mgr.decide(auth, null, config);
|
|
||||||
fail("Should have thrown AccessDeniedException");
|
|
||||||
} catch (AccessDeniedException expected) {
|
|
||||||
assertTrue(true);
|
|
||||||
}
|
|
||||||
|
|
||||||
// Now check it works given we approve access if all abstain
|
|
||||||
mgr.setAllowIfAllAbstainDecisions(true);
|
|
||||||
mgr.decide(auth, null, config);
|
|
||||||
assertTrue(true);
|
|
||||||
}
|
|
||||||
|
|
||||||
public void testUnanimous() throws Exception {
|
|
||||||
UnanimousBased mgr = (UnanimousBased) ctx.getBean("unanimousBased");
|
|
||||||
ConfigAttributeDefinition config;
|
|
||||||
TestingAuthenticationToken auth;
|
|
||||||
|
|
||||||
auth = new TestingAuthenticationToken("test", "test",
|
|
||||||
new GrantedAuthority[] {new GrantedAuthorityImpl("ROLE_1"), new GrantedAuthorityImpl(
|
|
||||||
"ROLE_2"), new GrantedAuthorityImpl("ROLE_MAGIC")});
|
|
||||||
|
|
||||||
// Check if we'd be denied access, with only one definite deny vote and many affirmative
|
|
||||||
config = new ConfigAttributeDefinition();
|
|
||||||
config.addConfigAttribute(new SecurityConfig("DENY_FOR_SURE")); // deny
|
|
||||||
config.addConfigAttribute(new SecurityConfig("ROLE_2")); // grant
|
|
||||||
config.addConfigAttribute(new SecurityConfig("ROLE_1")); // grant
|
|
||||||
|
|
||||||
try {
|
|
||||||
mgr.decide(auth, null, config);
|
|
||||||
fail("Should have thrown AccessDeniedException");
|
|
||||||
} catch (AccessDeniedException expected) {
|
|
||||||
assertTrue(true);
|
|
||||||
}
|
|
||||||
|
|
||||||
// Check if we'd get access if ROLE_2 was all that is required
|
|
||||||
config = new ConfigAttributeDefinition();
|
|
||||||
config.addConfigAttribute(new SecurityConfig("ROLE_2")); // grant
|
|
||||||
mgr.decide(auth, null, config);
|
|
||||||
assertTrue(true);
|
|
||||||
|
|
||||||
// Check if we'd get access if YYYY was all that is required
|
|
||||||
config = new ConfigAttributeDefinition();
|
|
||||||
config.addConfigAttribute(new SecurityConfig("YYYY")); // grant
|
|
||||||
mgr.decide(auth, null, config);
|
|
||||||
assertTrue(true);
|
|
||||||
|
|
||||||
// Check if we'd get access if everything was required
|
|
||||||
config = new ConfigAttributeDefinition();
|
|
||||||
config.addConfigAttribute(new SecurityConfig("ROLE_1")); // grant
|
|
||||||
config.addConfigAttribute(new SecurityConfig("ROLE_2")); // grant
|
|
||||||
config.addConfigAttribute(new SecurityConfig("XXXX")); // grant
|
|
||||||
config.addConfigAttribute(new SecurityConfig("YYYY")); // grant
|
|
||||||
mgr.decide(auth, null, config);
|
|
||||||
assertTrue(true);
|
|
||||||
|
|
||||||
// Check if we'd get denied access if ROLE_9 was required
|
|
||||||
config = new ConfigAttributeDefinition();
|
|
||||||
config.addConfigAttribute(new SecurityConfig("ROLE_9")); // deny
|
|
||||||
|
|
||||||
try {
|
|
||||||
mgr.decide(auth, null, config);
|
|
||||||
fail("Should have thrown AccessDeniedException");
|
|
||||||
} catch (AccessDeniedException expected) {
|
|
||||||
assertTrue(true);
|
|
||||||
}
|
|
||||||
|
|
||||||
auth = new TestingAuthenticationToken("test", "test",
|
|
||||||
new GrantedAuthority[] {new GrantedAuthorityImpl("ROLE_1"), new GrantedAuthorityImpl(
|
|
||||||
"ROLE_2"),});
|
|
||||||
|
|
||||||
// Check if we'd get access if ROLE_1 and 2 was required
|
|
||||||
config = new ConfigAttributeDefinition();
|
|
||||||
config.addConfigAttribute(new SecurityConfig("ROLE_1")); // grant
|
|
||||||
config.addConfigAttribute(new SecurityConfig("ROLE_2")); // grant
|
|
||||||
mgr.decide(auth, null, config);
|
|
||||||
assertTrue(true);
|
|
||||||
|
|
||||||
// Check if we'd get denied access if all any return deny at all
|
|
||||||
config = new ConfigAttributeDefinition();
|
|
||||||
config.addConfigAttribute(new SecurityConfig("ROLE_1")); // grant
|
|
||||||
config.addConfigAttribute(new SecurityConfig("ROLE_2")); // grant
|
|
||||||
config.addConfigAttribute(new SecurityConfig("XXXX")); // deny
|
|
||||||
|
|
||||||
try {
|
|
||||||
mgr.decide(auth, null, config);
|
|
||||||
fail("Should have thrown AccessDeniedException");
|
|
||||||
} catch (AccessDeniedException expected) {
|
|
||||||
assertTrue(true);
|
|
||||||
}
|
|
||||||
|
|
||||||
// Check if we'd be denied access if all abstained
|
|
||||||
config = new ConfigAttributeDefinition();
|
|
||||||
config.addConfigAttribute(new SecurityConfig("NONE_WILL_VOTE")); // abstain
|
|
||||||
|
|
||||||
try {
|
|
||||||
mgr.decide(auth, null, config);
|
|
||||||
fail("Should have thrown AccessDeniedException");
|
|
||||||
} catch (AccessDeniedException expected) {
|
|
||||||
assertTrue(true);
|
|
||||||
}
|
|
||||||
|
|
||||||
// Now check it works given we approve access if all abstain
|
|
||||||
mgr.setAllowIfAllAbstainDecisions(true);
|
|
||||||
mgr.decide(auth, null, config);
|
|
||||||
assertTrue(true);
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
@ -1,78 +0,0 @@
|
||||||
/* Copyright 2004 Acegi Technology Pty Limited
|
|
||||||
*
|
|
||||||
* Licensed under the Apache License, Version 2.0 (the "License");
|
|
||||||
* you may not use this file except in compliance with the License.
|
|
||||||
* You may obtain a copy of the License at
|
|
||||||
*
|
|
||||||
* http://www.apache.org/licenses/LICENSE-2.0
|
|
||||||
*
|
|
||||||
* Unless required by applicable law or agreed to in writing, software
|
|
||||||
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
||||||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
||||||
* See the License for the specific language governing permissions and
|
|
||||||
* limitations under the License.
|
|
||||||
*/
|
|
||||||
|
|
||||||
package net.sf.acegisecurity.vote;
|
|
||||||
|
|
||||||
import net.sf.acegisecurity.Authentication;
|
|
||||||
import net.sf.acegisecurity.ConfigAttribute;
|
|
||||||
import net.sf.acegisecurity.ConfigAttributeDefinition;
|
|
||||||
|
|
||||||
import org.aopalliance.intercept.MethodInvocation;
|
|
||||||
|
|
||||||
import java.util.Iterator;
|
|
||||||
|
|
||||||
|
|
||||||
/**
|
|
||||||
* Implementation of an {@link AccessDecisionVoter} for unit testing.
|
|
||||||
*
|
|
||||||
* <p>
|
|
||||||
* If the {@link ConfigAttribute#getAttribute()} has a value of
|
|
||||||
* <code>XXXX</code>, a granted authority that equals <code>ROLE_MAGIC</code>
|
|
||||||
* will cause a grant vote. The voter will abstain if there is no
|
|
||||||
* configuration attribute named <code>XXXX</code>.
|
|
||||||
* </p>
|
|
||||||
*
|
|
||||||
* <p>
|
|
||||||
* All comparisons are case sensitive.
|
|
||||||
* </p>
|
|
||||||
*
|
|
||||||
* @author Ben Alex
|
|
||||||
* @version $Id$
|
|
||||||
*/
|
|
||||||
public class XVoter implements AccessDecisionVoter {
|
|
||||||
//~ Methods ================================================================
|
|
||||||
|
|
||||||
public boolean supports(ConfigAttribute attribute) {
|
|
||||||
if ("XXXX".equals(attribute.getAttribute())) {
|
|
||||||
return true;
|
|
||||||
} else {
|
|
||||||
return false;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
public int vote(Authentication authentication, MethodInvocation invocation,
|
|
||||||
ConfigAttributeDefinition config) {
|
|
||||||
int result = ACCESS_ABSTAIN;
|
|
||||||
Iterator iter = config.getConfigAttributes();
|
|
||||||
|
|
||||||
while (iter.hasNext()) {
|
|
||||||
ConfigAttribute attribute = (ConfigAttribute) iter.next();
|
|
||||||
|
|
||||||
if (this.supports(attribute)) {
|
|
||||||
result = ACCESS_DENIED;
|
|
||||||
|
|
||||||
for (int i = 0; i < authentication.getAuthorities().length;
|
|
||||||
i++) {
|
|
||||||
if ("ROLE_MAGIC".equals(
|
|
||||||
authentication.getAuthorities()[i].getAuthority())) {
|
|
||||||
return ACCESS_GRANTED;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
return result;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
@ -1,78 +0,0 @@
|
||||||
/* Copyright 2004 Acegi Technology Pty Limited
|
|
||||||
*
|
|
||||||
* Licensed under the Apache License, Version 2.0 (the "License");
|
|
||||||
* you may not use this file except in compliance with the License.
|
|
||||||
* You may obtain a copy of the License at
|
|
||||||
*
|
|
||||||
* http://www.apache.org/licenses/LICENSE-2.0
|
|
||||||
*
|
|
||||||
* Unless required by applicable law or agreed to in writing, software
|
|
||||||
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
||||||
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
||||||
* See the License for the specific language governing permissions and
|
|
||||||
* limitations under the License.
|
|
||||||
*/
|
|
||||||
|
|
||||||
package net.sf.acegisecurity.vote;
|
|
||||||
|
|
||||||
import net.sf.acegisecurity.Authentication;
|
|
||||||
import net.sf.acegisecurity.ConfigAttribute;
|
|
||||||
import net.sf.acegisecurity.ConfigAttributeDefinition;
|
|
||||||
|
|
||||||
import org.aopalliance.intercept.MethodInvocation;
|
|
||||||
|
|
||||||
import java.util.Iterator;
|
|
||||||
|
|
||||||
|
|
||||||
/**
|
|
||||||
* Implementation of an {@link AccessDecisionVoter} for unit testing.
|
|
||||||
*
|
|
||||||
* <p>
|
|
||||||
* If the {@link ConfigAttribute#getAttribute()} has a value of
|
|
||||||
* <code>YYYY</code>, a granted authority that equals <code>ROLE_MAGIC</code>
|
|
||||||
* will cause a grant vote. The voter will abstain if there is no
|
|
||||||
* configuration attribute named <code>YYYY</code>.
|
|
||||||
* </p>
|
|
||||||
*
|
|
||||||
* <p>
|
|
||||||
* All comparisons are case sensitive.
|
|
||||||
* </p>
|
|
||||||
*
|
|
||||||
* @author Ben Alex
|
|
||||||
* @version $Id$
|
|
||||||
*/
|
|
||||||
public class YVoter implements AccessDecisionVoter {
|
|
||||||
//~ Methods ================================================================
|
|
||||||
|
|
||||||
public boolean supports(ConfigAttribute attribute) {
|
|
||||||
if ("YYYY".equals(attribute.getAttribute())) {
|
|
||||||
return true;
|
|
||||||
} else {
|
|
||||||
return false;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
public int vote(Authentication authentication, MethodInvocation invocation,
|
|
||||||
ConfigAttributeDefinition config) {
|
|
||||||
int result = ACCESS_ABSTAIN;
|
|
||||||
Iterator iter = config.getConfigAttributes();
|
|
||||||
|
|
||||||
while (iter.hasNext()) {
|
|
||||||
ConfigAttribute attribute = (ConfigAttribute) iter.next();
|
|
||||||
|
|
||||||
if (this.supports(attribute)) {
|
|
||||||
result = ACCESS_DENIED;
|
|
||||||
|
|
||||||
for (int i = 0; i < authentication.getAuthorities().length;
|
|
||||||
i++) {
|
|
||||||
if ("ROLE_MAGIC".equals(
|
|
||||||
authentication.getAuthorities()[i].getAuthority())) {
|
|
||||||
return ACCESS_GRANTED;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
return result;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
@ -1,61 +0,0 @@
|
||||||
<?xml version="1.0" encoding="UTF-8"?>
|
|
||||||
<!DOCTYPE beans PUBLIC "-//SPRING//DTD BEAN//EN" "http://www.springframework.org/dtd/spring-beans.dtd">
|
|
||||||
<!--
|
|
||||||
* The Acegi Security System for Spring is published under the terms
|
|
||||||
* of the Apache Software License.
|
|
||||||
* $Id$
|
|
||||||
-->
|
|
||||||
|
|
||||||
<beans>
|
|
||||||
|
|
||||||
<!-- ~~~~~~~~~~~~~~~~~~~~ AUTHORIZATION DEFINITIONS ~~~~~~~~~~~~~~~~~~~ -->
|
|
||||||
|
|
||||||
<!-- An access decision voter that reads ROLE_* configuaration settings -->
|
|
||||||
<bean id="roleVoter" class="net.sf.acegisecurity.vote.RoleVoter"/>
|
|
||||||
|
|
||||||
<!-- An access decision voter that reads XXXX configuaration settings -->
|
|
||||||
<bean id="xVoter" class="net.sf.acegisecurity.vote.XVoter"/>
|
|
||||||
|
|
||||||
<!-- An access decision voter that reads YYYY configuaration settings -->
|
|
||||||
<bean id="yVoter" class="net.sf.acegisecurity.vote.YVoter"/>
|
|
||||||
|
|
||||||
<!-- An access decision voter that reads DENY_FOR_SURE configuaration settings -->
|
|
||||||
<bean id="denyVoter" class="net.sf.acegisecurity.vote.DenyVoter"/>
|
|
||||||
|
|
||||||
<bean id="unanimousBased" class="net.sf.acegisecurity.vote.UnanimousBased">
|
|
||||||
<property name="allowIfAllAbstainDecisions"><value>false</value></property>
|
|
||||||
<property name="decisionVoters">
|
|
||||||
<list>
|
|
||||||
<ref bean="roleVoter"/>
|
|
||||||
<ref bean="denyVoter"/>
|
|
||||||
<ref bean="xVoter"/>
|
|
||||||
<ref bean="yVoter"/>
|
|
||||||
</list>
|
|
||||||
</property>
|
|
||||||
</bean>
|
|
||||||
|
|
||||||
<bean id="affirmativeBased" class="net.sf.acegisecurity.vote.AffirmativeBased">
|
|
||||||
<property name="allowIfAllAbstainDecisions"><value>false</value></property>
|
|
||||||
<property name="decisionVoters">
|
|
||||||
<list>
|
|
||||||
<ref bean="roleVoter"/>
|
|
||||||
<ref bean="denyVoter"/>
|
|
||||||
<ref bean="xVoter"/>
|
|
||||||
<ref bean="yVoter"/>
|
|
||||||
</list>
|
|
||||||
</property>
|
|
||||||
</bean>
|
|
||||||
|
|
||||||
<bean id="consensusBased" class="net.sf.acegisecurity.vote.ConsensusBased">
|
|
||||||
<property name="allowIfAllAbstainDecisions"><value>false</value></property>
|
|
||||||
<property name="allowIfEqualGrantedDeniedDecisions"><value>true</value></property>
|
|
||||||
<property name="decisionVoters">
|
|
||||||
<list>
|
|
||||||
<ref bean="roleVoter"/>
|
|
||||||
<ref bean="denyVoter"/>
|
|
||||||
<ref bean="xVoter"/>
|
|
||||||
<ref bean="yVoter"/>
|
|
||||||
</list>
|
|
||||||
</property>
|
|
||||||
</bean>
|
|
||||||
</beans>
|
|
||||||
Loading…
Reference in New Issue