AuthorizationManager.java

Violations

Source code

/*
 * hgcommons 9
 * Hammurapi Group Common Library
 * Copyright (C) 2003  Hammurapi Group
 *
 * This program is free software; you can redistribute it and/or
 * modify it under the terms of the GNU Lesser General Public
 * License as published by the Free Software Foundation; either
 * version 2 of the License, or (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 * Lesser General Public License for more details.
 *
 * You should have received a copy of the GNU Lesser General Public
 * License along with this library; if not, write to the Free Software
 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
 *
 * URL: http://www.hammurapi.biz/hammurapi-biz/ef/xmenu/hammurapi-group/products/products/hgcommons/index.html
 * e-Mail: support@hammurapi.biz
 */
package biz.hammurapi.authorization;

import java.security.AccessControlException;

/**
 * "Hub" class for authorization checks.
 * @author Pavel Vlasov
 * @revision $Revision$
 */
public class AuthorizationManager {
		
	public static boolean hasClassPermission(Class clazz, String action) {
		AuthorizationProvider provider =  (AuthorizationProvider) threadProvider.get();
		return provider==null ? true : provider.hasClassPermission(clazz, action);
	}
	
	public static void checkClassPermission(Class clazz, String action) throws AccessControlException {
		AuthorizationProvider provider =  (AuthorizationProvider) threadProvider.get();
		if (provider!=null) {
			provider.checkClassPermission(clazz, action);
		}
	}
	
	/**
	 * Authorization provider determines permission type from subject type
	 * @param instance
	 * @param action
	 * @return
	 */
	public static boolean hasObjectPermission(Object instance, String action) {
		AuthorizationProvider provider =  (AuthorizationProvider) threadProvider.get();
		return provider==null ? true : provider.hasInstancePermission(instance, action);
	}

	/**
	 * Authorization provider determines permission type from subject.
	 * @param instance
	 * @param action
	 * @return
	 */
	public static void checkInstancePermission(Object instance, String action) throws AccessControlException {
		AuthorizationProvider provider =  (AuthorizationProvider) threadProvider.get();
		if (provider!=null) {
			provider.checkInstancePermission(instance, action);
		}
	}
	
	/**
	 * Authorization provider determines permission type from className.
	 * This method is to be used from XSL stylesheets.
	 * @param subject
	 * @param action
	 * @return
	 */
	public static boolean hasClassPermission(String className, String action) {
		AuthorizationProvider provider =  (AuthorizationProvider) threadProvider.get();
		return provider==null ? true : provider.hasClassPermission(className, action);
	}

	
	private static InheritableThreadLocal threadProvider=new InheritableThreadLocal();
	
	public static void setThreadProvider(AuthorizationProvider provider) {
		threadProvider.set(provider);
	}	
		
}