org.nuiton.wikitty
Class WikittyServiceSecurity

java.lang.Object
  org.nuiton.wikitty.WikittyServiceSecurity

All Implemented Interfaces:

WikittyService

public class WikittyServiceSecurity
extends java.lang.Object
implements WikittyService

FIXME add security policy level two on wikittyAuthorisation to prevent writing

Version:

$Revision$ Last update: $Date$ by : $Author$

Author:

poussin

Nested Class Summary

Nested classes/interfaces inherited from interface org.nuiton.wikitty.WikittyService

WikittyService.ServiceListenerType

Field Summary

protected java.lang.String	appAdminGroupId cache de l'id du groupe AppAdmin
protected WikittyService	ws

Constructor Summary

WikittyServiceSecurity(WikittyService ws)

Method Summary

void	addWikittyServiceListener(WikittyServiceListener listener, WikittyService.ServiceListenerType type) Add new wikitty service listener.
protected boolean	canAdmin(java.lang.String securityToken, java.lang.String userId, java.lang.String extensionName, Wikitty wikitty)
boolean	canDelete(java.lang.String securityToken, java.lang.String wikittyId) Deprecated.
boolean	canRead(java.lang.String securityToken, java.lang.String wikittyId) Deprecated.
protected boolean	canRead(java.lang.String securityToken, java.lang.String userId, java.lang.String extensionName, Wikitty wikitty)
protected boolean	canWrite(java.lang.String securityToken, java.lang.String userId, java.lang.String extensionName, Wikitty wikitty)
boolean	canWrite(java.lang.String securityToken, Wikitty wikitty) Deprecated.
protected void	checkRestoreTree(java.lang.String securityToken, java.lang.String userId, WikittyTree tree)
protected void	checkRestoreTreeNode(java.lang.String securityToken, java.lang.String userId, WikittyTreeNode treeNode)
protected java.util.Collection<Wikitty>	checkStore(java.lang.String securityToken, java.util.Collection<Wikitty> wikitties)
protected void	checkStoreExtension(java.lang.String securityToken, java.util.Collection<WikittyExtension> exts)
void	clear(java.lang.String securityToken) Use with caution : It will delete ALL indexes from search engine !
void	delete(java.lang.String securityToken, java.util.Collection<java.lang.String> ids) Delete all object if id exists.
void	delete(java.lang.String securityToken, java.lang.String id) Delete object if id exists.
java.util.List<java.lang.String>	deleteTree(java.lang.String securityToken, java.lang.String treeNodeId) Delete specified tree node and all sub nodes.
PagedResult<java.lang.String>	findAllByCriteria(java.lang.String securityToken, Criteria criteria)
PagedResult<java.lang.String>	findAllByCriteria(java.lang.String securityToken, WikittyTransaction transaction, Criteria criteria)
Wikitty	findByCriteria(java.lang.String securityToken, Criteria criteria) Fist lonely (or first one) wikitty object that match criteria, if no wikitty found or first retrived is not authorized for the user return null
Wikitty	findByCriteria(java.lang.String securityToken, WikittyTransaction transaction, Criteria criteria) Fist lonely (or first one) wikitty object that match criteria, if no wikitty found or first retrived is not authorized for the user return null
java.util.List<java.lang.String>	getAllExtensionIds(java.lang.String securityToken) Return all extension id (ex: "extName[version])").
java.util.List<java.lang.String>	getAllExtensionsRequires(java.lang.String securityToken, java.lang.String extensionName) Return all extension id (ex: "extName[version])") where extensionName is required.
protected Wikitty	getAppAdminGroup(java.lang.String securityToken) get the wikitty with extension WikittyGroup that contains all app-admin.
protected java.lang.String	getUserId(java.lang.String securityToken) tell who own a token (who got this token after login).
protected boolean	isAdmin(java.lang.String securityToken, java.lang.String userId, Wikitty wikitty, java.lang.String extensionName)
protected boolean	isAppAdmin(java.lang.String securityToken, java.lang.String userId) check if a given user belong to the group of app-admins.
protected boolean	isMember(java.lang.String securityToken, java.lang.String userId, java.util.Set<java.lang.String> groupOrUser) Verifie recursivement si un utilisateur est dans un groupe qui peut etre constitue d'autre groupe ou d'utilisateur
protected boolean	isMember(java.lang.String securityToken, java.lang.String userId, Wikitty extensionRights, java.lang.String fqFieldName) isMember(String, String, Wikitty, String, boolean) with default value
protected boolean	isMember(java.lang.String securityToken, java.lang.String userId, Wikitty extensionRights, java.lang.String fqFieldName, boolean considerEmptyGroupAsMembership) check if a user is listed in a level of rights
protected boolean	isOwner(java.lang.String securityToken, java.lang.String userId, Wikitty wikitty, java.lang.String extensionName) true if given user is owner
protected boolean	isReader(java.lang.String securityToken, java.lang.String userId, Wikitty wikitty, java.lang.String extensionName)
protected boolean	isWriter(java.lang.String securityToken, java.lang.String userId, Wikitty wikitty, java.lang.String extensionName)
java.lang.String	login(java.lang.String login, java.lang.String password) Authenticate someone on WikittyService. securityToken returned must be used to call others methods
void	logout(java.lang.String securityToken) Unanthenticate someone by disabled securityToken
protected void	refuseUnauthorizedRead(java.lang.String securityToken, java.lang.String userId, Wikitty wikitty) throw an exception if read is not allowed
void	removeWikittyServiceListener(WikittyServiceListener listener, WikittyService.ServiceListenerType type) Remove wikitty service listener.
java.util.List<Wikitty>	restore(java.lang.String securityToken, java.util.List<java.lang.String> ids)
Wikitty	restore(java.lang.String securityToken, java.lang.String id)
java.util.List<Wikitty>	restore(java.lang.String securityToken, WikittyTransaction transaction, java.util.List<java.lang.String> ids) Restore wikitty using opened transaction.
java.util.Map<WikittyTreeNode,java.lang.Integer>	restoreChildren(java.lang.String securityToken, java.lang.String wikittyId, Criteria filter) Retrieve all wikitties children with count (no recursively) of an other one Wikitty reference by wikittyId MUST include the 'Node' extension
WikittyExtension	restoreExtension(java.lang.String securityToken, java.lang.String id) Load extension from id.
WikittyExtension	restoreExtension(java.lang.String securityToken, WikittyTransaction transaction, java.lang.String id) Action is done in transaction passed in argument.
protected Wikitty	restoreExtensionAuthorisation(java.lang.String securityToken, java.lang.String extensionName) restore the wikitty authorisation attached to given extension.
protected Wikitty	restoreExtensionAuthorisation(java.lang.String securityToken, WikittyExtension extension) restore the wikitty authorisation attached to given extension.
WikittyExtension	restoreExtensionLastVersion(java.lang.String securityToken, java.lang.String name) Search extension with name in last version.
WikittyExtension	restoreExtensionLastVersion(java.lang.String securityToken, WikittyTransaction transaction, java.lang.String name) Search extension with name in last version.
java.util.Map.Entry<WikittyTreeNode,java.lang.Integer>	restoreNode(java.lang.String securityToken, java.lang.String wikittyId, Criteria filter) Retrieve wikitty node with count.
WikittyTree	restoreTree(java.lang.String securityToken, java.lang.String wikittyId) Retrieve all wikitties children (recursively) of an other one Wikitty reference by wikittyId MUST include the 'Node' extension
Wikitty	restoreVersion(java.lang.String securityToken, java.lang.String wikittyId, java.lang.String version) Restore wikitty in specifique version.
UpdateResponse	store(java.lang.String securityToken, java.util.Collection<Wikitty> wikitties) Manage Update and creation.
UpdateResponse	store(java.lang.String securityToken, java.util.Collection<Wikitty> wikitties, boolean force) Manage Update and creation.
UpdateResponse	store(java.lang.String securityToken, Wikitty wikitty) Manage Update and creation.
UpdateResponse	store(java.lang.String securityToken, WikittyTransaction transaction, java.util.Collection<Wikitty> wikitties, boolean force) Manage Update and creation, action is done in transaction passed in argument.
UpdateResponse	storeExtension(java.lang.String securityToken, java.util.Collection<WikittyExtension> exts) Manage Update and creation.
UpdateResponse	storeExtension(java.lang.String securityToken, WikittyExtension ext) Manage Update and creation.
UpdateResponse	storeExtension(java.lang.String securityToken, WikittyTransaction transaction, java.util.Collection<WikittyExtension> exts) Manage Update and creation, action is done in transaction passed in argument
UpdateResponse	syncEngin(java.lang.String securityToken) Synchronise search engine with wikitty storage engine, i.e. clear and reindex all wikitties.
protected boolean	userIsAnonymousOrAppAdmin(java.lang.String securityToken, java.lang.String userId) if app-admin group exists, return true if given userId is app-admin if app-admin group doesn't exists, return true if user is anonymous

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

ws

protected WikittyService ws

appAdminGroupId

protected transient java.lang.String appAdminGroupId

cache de l'id du groupe AppAdmin

Constructor Detail

WikittyServiceSecurity

public WikittyServiceSecurity(WikittyService ws)

Method Detail

addWikittyServiceListener

public void addWikittyServiceListener(WikittyServiceListener listener,
                                      WikittyService.ServiceListenerType type)

Description copied from interface: WikittyService

Add new wikitty service listener. Warning, listener is referenced as WeakReference, but sure to another reference to work.

Specified by:

addWikittyServiceListener in interface WikittyService

Parameters:

listener - listener to add

type - type of event to listen

See Also:

WikittyService.ServiceListenerType

removeWikittyServiceListener

public void removeWikittyServiceListener(WikittyServiceListener listener,
                                         WikittyService.ServiceListenerType type)

Description copied from interface: WikittyService

Remove wikitty service listener. Warning, listener is referenced as WeakReference, but sure to another reference to work.

Specified by:

removeWikittyServiceListener in interface WikittyService

Parameters:

listener - listener to remove

type - type of event to listen

See Also:

WikittyService.ServiceListenerType

login

public java.lang.String login(java.lang.String login,
                              java.lang.String password)

Description copied from interface: WikittyService

Authenticate someone on WikittyService. securityToken returned must be used to call others methods

Specified by:

login in interface WikittyService

Parameters:

login - can be application specifique login, but best practice is to use email user

Returns:

return token securityToken

logout

public void logout(java.lang.String securityToken)

Description copied from interface: WikittyService

Unanthenticate someone by disabled securityToken

Specified by:

logout in interface WikittyService

Parameters:

securityToken - security token previously returned by login. If securityToken is not valid, this method do nothing

clear

public void clear(java.lang.String securityToken)

Description copied from interface: WikittyService

Use with caution : It will delete ALL indexes from search engine ! This operation should be disabled in production environment.

Specified by:

clear in interface WikittyService

Parameters:

securityToken - security token

userIsAnonymousOrAppAdmin

protected boolean userIsAnonymousOrAppAdmin(java.lang.String securityToken,
                                            java.lang.String userId)

if app-admin group exists, return true if given userId is app-admin if app-admin group doesn't exists, return true if user is anonymous

store

public UpdateResponse store(java.lang.String securityToken,
                            Wikitty wikitty)

Description copied from interface: WikittyService

Manage Update and creation.

Specified by:

store in interface WikittyService

Parameters:

securityToken - security token

wikitty - contains an id all the time.

Returns:

update response containing version and id of stored wikitty

store

public UpdateResponse store(java.lang.String securityToken,
                            java.util.Collection<Wikitty> wikitties)

Description copied from interface: WikittyService

Manage Update and creation.

Specified by:

store in interface WikittyService

Parameters:

securityToken - security token

wikitties - list of wikitty to be persisted

Returns:

update response containing version and id of stored wikitty

store

public UpdateResponse store(java.lang.String securityToken,
                            java.util.Collection<Wikitty> wikitties,
                            boolean force)

Description copied from interface: WikittyService

Manage Update and creation.

Specified by:

store in interface WikittyService

Parameters:

securityToken - security token

wikitties - list of wikitty to be persisted

force - boolean force non version version increment on saved wikitty or force version on wikitty creation (version 0.0)

Returns:

update response

store

public UpdateResponse store(java.lang.String securityToken,
                            WikittyTransaction transaction,
                            java.util.Collection<Wikitty> wikitties,
                            boolean force)

Description copied from interface: WikittyService

Manage Update and creation, action is done in transaction passed in argument.

Specified by:

store in interface WikittyService

Parameters:

securityToken - security token

transaction - transaction used to do the action (must not be null)

wikitties - list of wikitty to be persisted

force - boolean force non version version increment on saved wikitty or force version on wikitty creation (version 0.0)

Returns:

update response

checkStore

protected java.util.Collection<Wikitty> checkStore(java.lang.String securityToken,
                                                   java.util.Collection<Wikitty> wikitties)

restore

public Wikitty restore(java.lang.String securityToken,
                       java.lang.String id)

Specified by:

restore in interface WikittyService

Parameters:

securityToken - security token

id - object id to restore

Returns:

the corresponding object, or null if object doesn't exist, is deleted or you don't have authorisation (you can check authorisation before call restore with WikittyService.canRead(java.lang.String, java.lang.String)

restore

public java.util.List<Wikitty> restore(java.lang.String securityToken,
                                       java.util.List<java.lang.String> ids)

Specified by:

restore in interface WikittyService

Parameters:

securityToken - security token

ids - list of wikitty ids to restore

Returns:

list of corresponding wikitty, if one id is not valid (no object or deleted or no authorisation) this id is skip and result list have less elements than collection argument

restore

public java.util.List<Wikitty> restore(java.lang.String securityToken,
                                       WikittyTransaction transaction,
                                       java.util.List<java.lang.String> ids)

Description copied from interface: WikittyService

Restore wikitty using opened transaction.

Specified by:

restore in interface WikittyService

Parameters:

securityToken - security token

transaction - transaction to use

ids - list of wikitty ids to restore

Returns:

list of corresponding wikitty, if one id is not valid (no object or deleted or no authorisation) this id is skip and result list have less elements than collection argument

refuseUnauthorizedRead

protected void refuseUnauthorizedRead(java.lang.String securityToken,
                                      java.lang.String userId,
                                      Wikitty wikitty)

throw an exception if read is not allowed

canRead

protected boolean canRead(java.lang.String securityToken,
                          java.lang.String userId,
                          java.lang.String extensionName,
                          Wikitty wikitty)

canWrite

protected boolean canWrite(java.lang.String securityToken,
                           java.lang.String userId,
                           java.lang.String extensionName,
                           Wikitty wikitty)

canAdmin

protected boolean canAdmin(java.lang.String securityToken,
                           java.lang.String userId,
                           java.lang.String extensionName,
                           Wikitty wikitty)

delete

public void delete(java.lang.String securityToken,
                   java.lang.String id)

Description copied from interface: WikittyService

Delete object if id exists.

Specified by:

delete in interface WikittyService

Parameters:

securityToken - security token

id - object's id to remove

delete

public void delete(java.lang.String securityToken,
                   java.util.Collection<java.lang.String> ids)

Description copied from interface: WikittyService

Delete all object if id exists.

Specified by:

delete in interface WikittyService

Parameters:

securityToken - security token

ids - object's ids to remove

canWrite

@Deprecated
public boolean canWrite(java.lang.String securityToken,
                                   Wikitty wikitty)

Deprecated.

Description copied from interface: WikittyService

Verifie si l'utilisateur lie au securityToken a le droit d'ecrire le Wikitty passe en argument

Specified by:

canWrite in interface WikittyService

Parameters:

securityToken - le token de securite qui permet de retrouver l'utilisateur et ainsi verifier les droits

wikitty - le wikitty a sauver

Returns:

vrai si l'utilisateur peut sauver l'objet

canDelete

@Deprecated
public boolean canDelete(java.lang.String securityToken,
                                    java.lang.String wikittyId)

Deprecated.

Description copied from interface: WikittyService

Verifie que l'utilisateur associe au securityToken peut supprimer le wikitty dont on passe l'identifiant. Seul le propriétaire de l'objet ou un admin peut supprimer un objet. Si l'id de l'objet est invalide, la methode retourne true, car la suppression d'un id invalide ne fait rien

Specified by:

canDelete in interface WikittyService

Parameters:

securityToken - security token

wikittyId - wikitty id

Returns:

vrai le la suppression ne posera pas de probleme.

canRead

@Deprecated
public boolean canRead(java.lang.String securityToken,
                                  java.lang.String wikittyId)

Deprecated.

Description copied from interface: WikittyService

Un utilisateur peu lire un objet, s'il est Reader ou a defaut: - owner - AppAdmin - Admin - Writer

Specified by:

canRead in interface WikittyService

Parameters:

securityToken - security token

wikittyId - wikitty id

Returns:

vrai si l'utilisateur peut lire l'obbjet

getAllExtensionIds

public java.util.List<java.lang.String> getAllExtensionIds(java.lang.String securityToken)

Description copied from interface: WikittyService

Return all extension id (ex: "extName[version])").

Specified by:

getAllExtensionIds in interface WikittyService

Parameters:

securityToken - security token

Returns:

extension ids list

getAllExtensionsRequires

public java.util.List<java.lang.String> getAllExtensionsRequires(java.lang.String securityToken,
                                                                 java.lang.String extensionName)

Description copied from interface: WikittyService

Return all extension id (ex: "extName[version])") where extensionName is required.

Specified by:

getAllExtensionsRequires in interface WikittyService

Parameters:

securityToken - security token

extensionName - extension name

Returns:

extension id list

storeExtension

public UpdateResponse storeExtension(java.lang.String securityToken,
                                     WikittyExtension ext)

Description copied from interface: WikittyService

Manage Update and creation.

Specified by:

storeExtension in interface WikittyService

Parameters:

securityToken - security token

ext - extension to be persisted

Returns:

update response

checkStoreExtension

protected void checkStoreExtension(java.lang.String securityToken,
                                   java.util.Collection<WikittyExtension> exts)

storeExtension

public UpdateResponse storeExtension(java.lang.String securityToken,
                                     java.util.Collection<WikittyExtension> exts)

Description copied from interface: WikittyService

Manage Update and creation.

Specified by:

storeExtension in interface WikittyService

Parameters:

securityToken - security token

exts - list of wikitty extension to be persisted

Returns:

update response

storeExtension

public UpdateResponse storeExtension(java.lang.String securityToken,
                                     WikittyTransaction transaction,
                                     java.util.Collection<WikittyExtension> exts)

Description copied from interface: WikittyService

Manage Update and creation, action is done in transaction passed in argument

Specified by:

storeExtension in interface WikittyService

Parameters:

securityToken - security token

transaction - transaction used to do the action (must not be null)

exts - list of wikitty extension to be persisted

Returns:

update response

restoreExtension

public WikittyExtension restoreExtension(java.lang.String securityToken,
                                         java.lang.String id)

Description copied from interface: WikittyService

Load extension from id. Id is 'name[version]'.

Specified by:

restoreExtension in interface WikittyService

Parameters:

securityToken - security token

id - extension id to restore

Returns:

the corresponding object, exception if no such object found.

restoreExtension

public WikittyExtension restoreExtension(java.lang.String securityToken,
                                         WikittyTransaction transaction,
                                         java.lang.String id)

Description copied from interface: WikittyService

Action is done in transaction passed in argument.

Specified by:

restoreExtension in interface WikittyService

Parameters:

securityToken - security token

transaction - transaction used to do the action (must not be null)

Returns:

the corresponding object, exception if no such object found.

restoreExtensionLastVersion

public WikittyExtension restoreExtensionLastVersion(java.lang.String securityToken,
                                                    java.lang.String name)

Description copied from interface: WikittyService

Search extension with name in last version.

Specified by:

restoreExtensionLastVersion in interface WikittyService

Parameters:

securityToken - security token

name - extension name

Returns:

the corresponding object, exception if no such object found.

restoreExtensionLastVersion

public WikittyExtension restoreExtensionLastVersion(java.lang.String securityToken,
                                                    WikittyTransaction transaction,
                                                    java.lang.String name)

Description copied from interface: WikittyService

Search extension with name in last version.

Specified by:

restoreExtensionLastVersion in interface WikittyService

Parameters:

securityToken - security token

transaction - transaction used to do the action (must not be null)

name - extension name

Returns:

the corresponding object, exception if no such object found.

findAllByCriteria

public PagedResult<java.lang.String> findAllByCriteria(java.lang.String securityToken,
                                                       Criteria criteria)

Specified by:

findAllByCriteria in interface WikittyService

Parameters:

securityToken - security token

Returns:

findAllByCriteria

public PagedResult<java.lang.String> findAllByCriteria(java.lang.String securityToken,
                                                       WikittyTransaction transaction,
                                                       Criteria criteria)

Specified by:

findAllByCriteria in interface WikittyService

Parameters:

securityToken - security token

Returns:

findByCriteria

public Wikitty findByCriteria(java.lang.String securityToken,
                              Criteria criteria)

Description copied from interface: WikittyService

Fist lonely (or first one) wikitty object that match criteria, if no wikitty found or first retrived is not authorized for the user return null

Specified by:

findByCriteria in interface WikittyService

Parameters:

securityToken - security token

Returns:

wikitty object or null

restoreTree

public WikittyTree restoreTree(java.lang.String securityToken,
                               java.lang.String wikittyId)

Description copied from interface: WikittyService

Retrieve all wikitties children (recursively) of an other one Wikitty reference by wikittyId MUST include the 'Node' extension

Specified by:

restoreTree in interface WikittyService

Parameters:

securityToken - security token

Returns:

checkRestoreTree

protected void checkRestoreTree(java.lang.String securityToken,
                                java.lang.String userId,
                                WikittyTree tree)

checkRestoreTreeNode

protected void checkRestoreTreeNode(java.lang.String securityToken,
                                    java.lang.String userId,
                                    WikittyTreeNode treeNode)

restoreNode

public java.util.Map.Entry<WikittyTreeNode,java.lang.Integer> restoreNode(java.lang.String securityToken,
                                                                          java.lang.String wikittyId,
                                                                          Criteria filter)

Description copied from interface: WikittyService

Retrieve wikitty node with count. Wikitty reference by wikittyId MUST include the 'Node' extension.

Specified by:

restoreNode in interface WikittyService

Parameters:

securityToken - security token

Returns:

restoreChildren

public java.util.Map<WikittyTreeNode,java.lang.Integer> restoreChildren(java.lang.String securityToken,
                                                                        java.lang.String wikittyId,
                                                                        Criteria filter)

Description copied from interface: WikittyService

Retrieve all wikitties children with count (no recursively) of an other one Wikitty reference by wikittyId MUST include the 'Node' extension

Specified by:

restoreChildren in interface WikittyService

Parameters:

securityToken - security token

Returns:

deleteTree

public java.util.List<java.lang.String> deleteTree(java.lang.String securityToken,
                                                   java.lang.String treeNodeId)

Description copied from interface: WikittyService

Delete specified tree node and all sub nodes.

Specified by:

deleteTree in interface WikittyService

Parameters:

securityToken - security token

treeNodeId - tree node id to delete

Returns:

delete wikitty ids

restoreVersion

public Wikitty restoreVersion(java.lang.String securityToken,
                              java.lang.String wikittyId,
                              java.lang.String version)

Description copied from interface: WikittyService

Restore wikitty in specifique version. Authorisation is checked on last version even for previous wikitty version

Specified by:

restoreVersion in interface WikittyService

Parameters:

securityToken - security token

findByCriteria

public Wikitty findByCriteria(java.lang.String securityToken,
                              WikittyTransaction transaction,
                              Criteria criteria)

Description copied from interface: WikittyService

Fist lonely (or first one) wikitty object that match criteria, if no wikitty found or first retrived is not authorized for the user return null

Specified by:

findByCriteria in interface WikittyService

Parameters:

securityToken - security token

Returns:

wikitty object or null

syncEngin

public UpdateResponse syncEngin(java.lang.String securityToken)

Description copied from interface: WikittyService

Synchronise search engine with wikitty storage engine, i.e. clear and reindex all wikitties.

Specified by:

syncEngin in interface WikittyService

Parameters:

securityToken - security token

Returns:

update response

getUserId

protected java.lang.String getUserId(java.lang.String securityToken)

tell who own a token (who got this token after login).

Parameters:

securityToken - the token whose owner will be returned

Returns:

a wikitty Id (wikitty has extension WikittyUser)

isReader

protected boolean isReader(java.lang.String securityToken,
                           java.lang.String userId,
                           Wikitty wikitty,
                           java.lang.String extensionName)

Parameters:

securityToken -

userId -

wikitty -

extensionName - may be null

Returns:

isWriter

protected boolean isWriter(java.lang.String securityToken,
                           java.lang.String userId,
                           Wikitty wikitty,
                           java.lang.String extensionName)

Parameters:

securityToken -

userId -

wikitty -

extensionName - may be null

Returns:

isAdmin

protected boolean isAdmin(java.lang.String securityToken,
                          java.lang.String userId,
                          Wikitty wikitty,
                          java.lang.String extensionName)

Parameters:

securityToken -

userId -

wikitty -

extensionName - may be null

Returns:

isOwner

protected boolean isOwner(java.lang.String securityToken,
                          java.lang.String userId,
                          Wikitty wikitty,
                          java.lang.String extensionName)

true if given user is owner

Parameters:

securityToken -

userId -

wikitty -

extensionName - may be null

Returns:

isMember

protected boolean isMember(java.lang.String securityToken,
                           java.lang.String userId,
                           Wikitty extensionRights,
                           java.lang.String fqFieldName)

isMember(String, String, Wikitty, String, boolean) with default value

isMember

protected boolean isMember(java.lang.String securityToken,
                           java.lang.String userId,
                           Wikitty extensionRights,
                           java.lang.String fqFieldName,
                           boolean considerEmptyGroupAsMembership)

check if a user is listed in a level of rights

Parameters:

securityToken -

userId - the userId to look for

extensionRights - a wikitty with WikittyAuthorisation as extension OR meta-extension

fqFieldName - the field to look into, it should be one of the field of extension WikittyAuthorisation it has to be a FQN and may contain an extension-name if using meta-extension

considerEmptyGroupAsMembership - if true, an empty field value will be considered as "every-one is in the group". Most of the time, it will be false but true should be passed for "reader" level because user has right to read if he belongs to "reader" OR if reader is empty

Returns:

true if userId appear in the single/list of group/user of given field

isAppAdmin

protected boolean isAppAdmin(java.lang.String securityToken,
                             java.lang.String userId)

check if a given user belong to the group of app-admins.

getAppAdminGroup

protected Wikitty getAppAdminGroup(java.lang.String securityToken)

get the wikitty with extension WikittyGroup that contains all app-admin.

isMember

protected boolean isMember(java.lang.String securityToken,
                           java.lang.String userId,
                           java.util.Set<java.lang.String> groupOrUser)

Verifie recursivement si un utilisateur est dans un groupe qui peut etre constitue d'autre groupe ou d'utilisateur

Parameters:

userId - l'utilisateur recherche

groupOrUser - la liste des id d'utilisateurs ou d'autres groupes

Returns:

vrai si userId est retrouve, false sinon

restoreExtensionAuthorisation

protected Wikitty restoreExtensionAuthorisation(java.lang.String securityToken,
                                                WikittyExtension extension)

restore the wikitty authorisation attached to given extension.

Returns:

a wikitty with WikittyAuthorisation extension, or null if given extension has no security policy attached

restoreExtensionAuthorisation

protected Wikitty restoreExtensionAuthorisation(java.lang.String securityToken,
                                                java.lang.String extensionName)

restore the wikitty authorisation attached to given extension.

Returns:

a wikitty with WikittyAuthorisation extension, or null if given extension has no security policy attached