    001    //$HeadURL: https://svn.wald.intevation.org/svn/deegree/base/branches/2.4_testing/src/org/deegree/security/owsrequestvalidator/wfs/AbstractWFSRequestValidator.java $
    002    /*----------------------------------------------------------------------------
    003     This file is part of deegree, http://deegree.org/
    004     Copyright (C) 2001-2009 by:
    005       Department of Geography, University of Bonn
    006     and
    007       lat/lon GmbH
    008
    009     This library is free software; you can redistribute it and/or modify it under
    010     the terms of the GNU Lesser General Public License as published by the Free
    011     Software Foundation; either version 2.1 of the License, or (at your option)
    012     any later version.
    013     This library is distributed in the hope that it will be useful, but WITHOUT
    014     ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
    015     FOR A PARTICULAR PURPOSE. See the GNU Lesser General Public License for more
    016     details.
    017     You should have received a copy of the GNU Lesser General Public License
    018     along with this library; if not, write to the Free Software Foundation, Inc.,
    019     59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
    020
    021     Contact information:
    022
    023     lat/lon GmbH
    024     Aennchenstr. 19, 53177 Bonn
    025     Germany
    026     http://lat-lon.de/
    027
    028     Department of Geography, University of Bonn
    029     Prof. Dr. Klaus Greve
    030     Postfach 1147, 53001 Bonn
    031     Germany
    032     http://www.geographie.uni-bonn.de/deegree/
    033
    034     e-mail: info@deegree.org
    035    ----------------------------------------------------------------------------*/
    036    package org.deegree.security.owsrequestvalidator.wfs;
    037
    038    import java.io.IOException;
    039    import java.io.StringReader;
    040    import java.util.List;
    041
    042    import org.deegree.framework.log.ILogger;
    043    import org.deegree.framework.log.LoggerFactory;
    044    import org.deegree.framework.xml.XMLFragment;
    045    import org.deegree.i18n.Messages;
    046    import org.deegree.model.filterencoding.AbstractFilter;
    047    import org.deegree.model.filterencoding.ComplexFilter;
    048    import org.deegree.model.filterencoding.FilterConstructionException;
    049    import org.deegree.model.filterencoding.Literal;
    050    import org.deegree.model.filterencoding.LogicalOperation;
    051    import org.deegree.model.filterencoding.Operation;
    052    import org.deegree.model.filterencoding.OperationDefines;
    053    import org.deegree.model.filterencoding.PropertyIsCOMPOperation;
    054    import org.deegree.model.filterencoding.PropertyName;
    055    import org.deegree.ogcwebservices.InvalidParameterValueException;
    056    import org.deegree.security.owsproxy.Condition;
    057    import org.deegree.security.owsproxy.OperationParameter;
    058    import org.deegree.security.owsrequestvalidator.Policy;
    059    import org.deegree.security.owsrequestvalidator.RequestValidator;
    060    import org.xml.sax.SAXException;
    061
    062    /**
    063     *
    064     *
    065     * @author <a href="mailto:poth@lat-lon.de">Andreas Poth </a>
    066     * @author last edited by: $Author: mschneider $
    067     *
    068     * @version $Revision: 18195 $, $Date: 2009-06-18 17:55:39 +0200 (Do, 18. Jun 2009) $
    069     */
    070    abstract class AbstractWFSRequestValidator extends RequestValidator {
    071
    072        private static final ILogger LOG = LoggerFactory.getLogger( AbstractWFSRequestValidator.class );
    073
    074        // known condition parameter
    075        private static final String FEATURETYPES = "featureTypes";
    076
    077        private static final String PROPERTY_INSTANCEFILTER = "instanceFilter";
    078
    079        /**
    080         * @param policy
    081         */
    082        public AbstractWFSRequestValidator( Policy policy ) {
    083            super( policy );
    084        }
    085
    086        /**
    087         * validates if the requested info featuretypes are valid against the policy/condition. If the
    088         * passed user <> null this is checked against the user- and rights-management system/repository
    089         *
    090         * @param condition
    091         * @param featureTypes
    092         * @throws InvalidParameterValueException
    093         */
    094        protected void validateFeatureTypes( Condition condition, String[] featureTypes )
    095                                throws InvalidParameterValueException {
    096
    097            OperationParameter op = condition.getOperationParameter( FEATURETYPES );
    098
    099            if ( op == null ) {
    100                LOG.logWarning( "Did you forget to add a featureTypes parameter to the precondition?" );
    101                return;
    102            }
    103
    104            // version is valid because no restrictions are made
    105            if ( op.isAny() )
    106                return;
    107
    108            List<String> validLayers = op.getValues();
    109            if ( op.isUserCoupled() ) {
    110                userCoupled = true;
    111            } else {
    112                for ( int i = 0; i < featureTypes.length; i++ ) {
    113                    LOG.logDebug( "validating feature type: ", featureTypes[i] );
    114                    if ( !validLayers.contains( featureTypes[i] ) ) {
    115                        String s = Messages.getMessage( "OWSPROXY_NOT_ALLOWED_FEATURETYPE", "access", featureTypes[i] );
    116                        throw new InvalidParameterValueException( s );
    117                    }
    118                }
    119            }
    120        }
    121
    122        /**
    123         *
    124         * @param operation
    125         * @return the filter defined for the given operation or <code>null</code> if no such filter
    126         *         is defined.
    127         * @throws IOException
    128         * @throws SAXException
    129         * @throws FilterConstructionException
    130         */
    131        protected ComplexFilter extractInstanceFilter( Operation operation )
    132                                throws SAXException, IOException, FilterConstructionException {
    133            ComplexFilter filter = null;
    134            if ( operation.getOperatorId() == OperationDefines.AND ) {
    135                List<Operation> arguments = ( (LogicalOperation) operation ).getArguments();
    136                for ( int i = 0; i < arguments.size(); i++ ) {
    137                    Operation op = arguments.get( i );
    138                    if ( op.getOperatorId() == OperationDefines.PROPERTYISEQUALTO ) {
    139                        PropertyName pn = (PropertyName) ( (PropertyIsCOMPOperation) op ).getFirstExpression();
    140                        if ( PROPERTY_INSTANCEFILTER.equals( pn.getValue().getAsString() ) ) {
    141                            Literal literal = (Literal) ( (PropertyIsCOMPOperation) op ).getSecondExpression();
    142                            StringReader sr = new StringReader( literal.getValue() );
    143                            XMLFragment xml = new XMLFragment( sr, XMLFragment.DEFAULT_URL );
    144                            filter = (ComplexFilter) AbstractFilter.buildFromDOM( xml.getRootElement(), false );
    145                        }
    146                    }
    147                }
    148            } else if ( operation.getOperatorId() == OperationDefines.PROPERTYISEQUALTO ) {
    149                PropertyName pn = (PropertyName) ( (PropertyIsCOMPOperation) operation ).getFirstExpression();
    150                if ( PROPERTY_INSTANCEFILTER.equals( pn.getValue().getAsString() ) ) {
    151                    Literal literal = (Literal) ( (PropertyIsCOMPOperation) operation ).getSecondExpression();
    152                    StringReader sr = new StringReader( literal.getValue() );
    153                    XMLFragment xml = new XMLFragment( sr, XMLFragment.DEFAULT_URL );
    154                    filter = (ComplexFilter) AbstractFilter.buildFromDOM( xml.getRootElement(), false );
    155                }
    156            }
    157            return filter;
    158        }
    159    }