org.chorem.pollen.ui.security
Class AbstractPollenAuthorization

java.lang.Object
  org.apache.shiro.web.servlet.ServletContextSupport
      org.apache.shiro.web.servlet.AbstractFilter
          org.apache.shiro.web.servlet.NameableFilter
              org.apache.shiro.web.servlet.OncePerRequestFilter
                  org.apache.shiro.web.servlet.AdviceFilter
                      org.apache.shiro.web.filter.PathMatchingFilter
                          org.apache.shiro.web.filter.AccessControlFilter
                              org.apache.shiro.web.filter.authz.AuthorizationFilter
                                  org.chorem.pollen.ui.security.AbstractPollenAuthorization

All Implemented Interfaces:

javax.servlet.Filter, org.apache.shiro.util.Nameable, org.apache.shiro.web.filter.PathConfigProcessor

Direct Known Subclasses:

AdminUserRequired, PollCreatorAccessRequired, PollResultAccessRequired, PollVoteAccessRequired

public abstract class AbstractPollenAuthorization
extends org.apache.shiro.web.filter.authz.AuthorizationFilter

Field Summary

static Pattern

URI_PATTERN Pattern to detects uri from a pollen url : group 1 is action namespace group 2 is action name group 3 is pollUri group 4 is poll page (optional) group 5 is method (optional)

Fields inherited from class org.apache.shiro.web.filter.AccessControlFilter

DEFAULT_LOGIN_URL, GET_METHOD, POST_METHOD

Fields inherited from class org.apache.shiro.web.filter.PathMatchingFilter

appliedPaths, pathMatcher

Fields inherited from class org.apache.shiro.web.servlet.OncePerRequestFilter

ALREADY_FILTERED_SUFFIX

Fields inherited from class org.apache.shiro.web.servlet.AbstractFilter

filterConfig

Constructor Summary

protected

AbstractPollenAuthorization()

Method Summary

protected UserAccount	getPollenUserAccount(javax.servlet.ServletRequest request)
protected Poll	getPollIdSane(PollUri pollUri, PollenServiceContext serviceContext, javax.servlet.ServletRequest request)
protected PollUri	getPollUri(javax.servlet.ServletRequest request)
protected PollenServiceContext	getServiceContext(javax.servlet.ServletRequest request)
javax.servlet.ServletContext	getServletContext()
protected boolean	onAccessDenied(javax.servlet.ServletRequest request, javax.servlet.ServletResponse response)
protected void	registerError(javax.servlet.ServletRequest request, String errorMessage)

Methods inherited from class org.apache.shiro.web.filter.authz.AuthorizationFilter

getUnauthorizedUrl, setUnauthorizedUrl

Methods inherited from class org.apache.shiro.web.filter.AccessControlFilter

getLoginUrl, getSubject, isAccessAllowed, isLoginRequest, onAccessDenied, onPreHandle, redirectToLogin, saveRequest, saveRequestAndRedirectToLogin, setLoginUrl

Methods inherited from class org.apache.shiro.web.filter.PathMatchingFilter

getPathWithinApplication, isEnabled, pathsMatch, pathsMatch, preHandle, processPathConfig

Methods inherited from class org.apache.shiro.web.servlet.AdviceFilter

afterCompletion, cleanup, doFilterInternal, executeChain, postHandle

Methods inherited from class org.apache.shiro.web.servlet.OncePerRequestFilter

doFilter, getAlreadyFilteredAttributeName, isEnabled, isEnabled, setEnabled, shouldNotFilter

Methods inherited from class org.apache.shiro.web.servlet.NameableFilter

getName, setName, toStringBuilder

Methods inherited from class org.apache.shiro.web.servlet.AbstractFilter

destroy, getFilterConfig, getInitParam, init, onFilterConfigSet, setFilterConfig

Methods inherited from class org.apache.shiro.web.servlet.ServletContextSupport

getContextAttribute, getContextInitParam, removeContextAttribute, setContextAttribute, setServletContext, toString

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Field Detail

URI_PATTERN

public static final Pattern URI_PATTERN

Pattern to detects uri from a pollen url : group 1 is action namespace group 2 is action name group 3 is pollUri group 4 is poll page (optional) group 5 is method (optional)

Constructor Detail

AbstractPollenAuthorization

protected AbstractPollenAuthorization()

Method Detail

getServletContext

public javax.servlet.ServletContext getServletContext()

Overrides:

getServletContext in class org.apache.shiro.web.servlet.ServletContextSupport

getPollUri

protected PollUri getPollUri(javax.servlet.ServletRequest request)

getPollenUserAccount

protected UserAccount getPollenUserAccount(javax.servlet.ServletRequest request)

getPollIdSane

protected Poll getPollIdSane(PollUri pollUri,
                             PollenServiceContext serviceContext,
                             javax.servlet.ServletRequest request)

getServiceContext

protected PollenServiceContext getServiceContext(javax.servlet.ServletRequest request)

onAccessDenied

protected final boolean onAccessDenied(javax.servlet.ServletRequest request,
                                       javax.servlet.ServletResponse response)
                                throws IOException

Overrides:

onAccessDenied in class org.apache.shiro.web.filter.authz.AuthorizationFilter

Throws:

IOException

registerError

protected void registerError(javax.servlet.ServletRequest request,
                             String errorMessage)