    001    //$HeadURL: https://svn.wald.intevation.org/svn/deegree/base/branches/2.4_testing/src/org/deegree/portal/standard/security/control/StoreSecuredObjectsListener.java $
    002    /*----------------------------------------------------------------------------
    003     This file is part of deegree, http://deegree.org/
    004     Copyright (C) 2001-2009 by:
    005       Department of Geography, University of Bonn
    006     and
    007       lat/lon GmbH
    008
    009     This library is free software; you can redistribute it and/or modify it under
    010     the terms of the GNU Lesser General Public License as published by the Free
    011     Software Foundation; either version 2.1 of the License, or (at your option)
    012     any later version.
    013     This library is distributed in the hope that it will be useful, but WITHOUT
    014     ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
    015     FOR A PARTICULAR PURPOSE. See the GNU Lesser General Public License for more
    016     details.
    017     You should have received a copy of the GNU Lesser General Public License
    018     along with this library; if not, write to the Free Software Foundation, Inc.,
    019     59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
    020
    021     Contact information:
    022
    023     lat/lon GmbH
    024     Aennchenstr. 19, 53177 Bonn
    025     Germany
    026     http://lat-lon.de/
    027
    028     Department of Geography, University of Bonn
    029     Prof. Dr. Klaus Greve
    030     Postfach 1147, 53001 Bonn
    031     Germany
    032     http://www.geographie.uni-bonn.de/deegree/
    033
    034     e-mail: info@deegree.org
    035    ----------------------------------------------------------------------------*/
    036    package org.deegree.portal.standard.security.control;
    037
    038    import java.util.ArrayList;
    039    import java.util.HashMap;
    040    import java.util.HashSet;
    041    import java.util.Iterator;
    042    import java.util.Map;
    043    import java.util.Set;
    044
    045    import org.deegree.enterprise.control.AbstractListener;
    046    import org.deegree.enterprise.control.FormEvent;
    047    import org.deegree.enterprise.control.RPCException;
    048    import org.deegree.enterprise.control.RPCMember;
    049    import org.deegree.enterprise.control.RPCMethodCall;
    050    import org.deegree.enterprise.control.RPCParameter;
    051    import org.deegree.enterprise.control.RPCStruct;
    052    import org.deegree.enterprise.control.RPCWebEvent;
    053    import org.deegree.framework.log.ILogger;
    054    import org.deegree.framework.log.LoggerFactory;
    055    import org.deegree.i18n.Messages;
    056    import org.deegree.security.GeneralSecurityException;
    057    import org.deegree.security.drm.SecurityAccessManager;
    058    import org.deegree.security.drm.SecurityTransaction;
    059    import org.deegree.security.drm.model.SecuredObject;
    060
    061    /**
    062     * This <code>Listener</code> reacts on 'storeSecuredObjects' events, extracts the contained
    063     * Layer/FeatureType definitions and updates the <code>SecurityManager</code> accordingly.
    064     *
    065     * Access constraints:
    066     * <ul>
    067     * <li>only users that have the 'SEC_ADMIN'-role are allowed</li>
    068     * </ul>
    069     *
    070     * @author <a href="mschneider@lat-lon.de">Markus Schneider </a>
    071     * @author last edited by: $Author: mschneider $
    072     *
    073     * @version $Revision: 18195 $, $Date: 2009-06-18 17:55:39 +0200 (Do, 18. Jun 2009) $
    074     */
    075    public class StoreSecuredObjectsListener extends AbstractListener {
    076
    077        private static final ILogger LOG = LoggerFactory.getLogger( StoreSecuredObjectsListener.class );
    078
    079        /*
    080         * (non-Javadoc)
    081         *
    082         * @see org.deegree.enterprise.control.WebListener#actionPerformed(org.deegree.enterprise.control.FormEvent)
    083         */
    084        @Override
    085        public void actionPerformed( FormEvent event ) {
    086
    087            // keys are Strings (types), values are ArrayLists (which contain Strings)
    088            Map<String,ArrayList<String>> newObjectTypes = new HashMap<String,ArrayList<String>>();
    089            // keys are Strings (types), values are ArrayLists (which contain Integers)
    090            Map<String,ArrayList<Integer>> oldObjectTypes = new HashMap<String, ArrayList<Integer>>();
    091
    092            SecurityAccessManager manager = null;
    093            SecurityTransaction transaction = null;
    094
    095            try {
    096                RPCWebEvent ev = (RPCWebEvent) event;
    097                RPCMethodCall rpcCall = ev.getRPCMethodCall();
    098                RPCParameter[] params = rpcCall.getParameters();
    099
    100                for ( int i = 0; i < params.length; i++ ) {
    101                    if ( !( params[0].getValue() instanceof RPCStruct ) ) {
    102                        throw new RPCException( Messages.getMessage( "IGEO_STD_SEC_MISSING_STRUCT" ) );
    103                    }
    104                    RPCStruct struct = (RPCStruct) params[i].getValue();
    105
    106                    // extract details of one SecuredObject
    107                    RPCMember idRPC = struct.getMember( "id" );
    108                    RPCMember nameRPC = struct.getMember( "name" );
    109                    RPCMember typeRPC = struct.getMember( "type" );
    110
    111                    int id;
    112                    String name = null;
    113                    String type = null;
    114
    115                    // extract id
    116                    if ( idRPC == null ) {
    117                        throw new RPCException( Messages.getMessage( "IGEO_STD_SEC_MISSING_MEMBER", "object", "id" ) );
    118                    }
    119                    if ( !( idRPC.getValue() instanceof String ) ) {
    120                        throw new RPCException( Messages.getMessage( "IGEO_STD_SEC_WRONG_MEMBER", "id", "string" ) );
    121                    }
    122                    try {
    123                        id = Integer.parseInt( ( (String) idRPC.getValue() ) );
    124                    } catch ( NumberFormatException e ) {
    125                        throw new RPCException( Messages.getMessage( "IGEO_STD_SEC_WRONG_MEMBER", "id", "integer" ) );
    126                    }
    127                    // extract name
    128                    if ( nameRPC != null ) {
    129                        if ( !( nameRPC.getValue() instanceof String ) ) {
    130                            throw new RPCException( Messages.getMessage( "IGEO_STD_SEC_WRONG_MEMBER", "name", "string" ) );
    131                        }
    132                        name = (String) nameRPC.getValue();
    133                    }
    134                    // extract type
    135                    if ( typeRPC != null ) {
    136                        if ( !( typeRPC.getValue() instanceof String ) ) {
    137                            throw new RPCException( Messages.getMessage( "IGEO_STD_SEC_WRONG_MEMBER", "type", "string" ) );
    138                        }
    139                        type = (String) typeRPC.getValue();
    140
    141                    }
    142                    if ( name == null ) {
    143                        throw new GeneralSecurityException( Messages.getMessage( "IGEO_STD_SEC_MISSING_MEMBER",
    144                                                                                 "SecuredObject", "name" ) );
    145                    }
    146                    if ( type == null ) {
    147                        throw new GeneralSecurityException( Messages.getMessage( "IGEO_STD_SEC_MISSING_MEMBER",
    148                                                                                 "SecuredObject", "type" ) );
    149                    }
    150
    151                    // new or existing SecuredObject?
    152                    if ( id == -1 ) {
    153                        ArrayList<String> list = newObjectTypes.get( type );
    154                        if ( list == null ) {
    155                            list = new ArrayList<String>( 20 );
    156                            newObjectTypes.put( type, list );
    157                        }
    158                        list.add( name );
    159                    } else {
    160                        ArrayList<Integer> list = oldObjectTypes.get( type );
    161                        if ( list == null ) {
    162                            list = new ArrayList<Integer>( 20 );
    163                            oldObjectTypes.put( type, list );
    164                        }
    165                        list.add( new Integer( id ) );
    166                    }
    167                }
    168
    169                // get Transaction and perform access check
    170                manager = SecurityAccessManager.getInstance();
    171                transaction = SecurityHelper.acquireTransaction( this );
    172                SecurityHelper.checkForAdminRole( transaction );
    173
    174                // remove deleted Layers
    175                SecuredObject[] obsoleteLayers = getObjectsToDelete(
    176                                                                     oldObjectTypes.get( ClientHelper.TYPE_LAYER ),
    177                                                                     transaction.getAllSecuredObjects( ClientHelper.TYPE_LAYER ) );
    178                for ( int i = 0; i < obsoleteLayers.length; i++ ) {
    179                    transaction.deregisterSecuredObject( obsoleteLayers[i] );
    180                }
    181
    182                // register new Layers
    183                ArrayList newLayerList = newObjectTypes.get( ClientHelper.TYPE_LAYER );
    184                if ( newLayerList != null ) {
    185                    Iterator it = newLayerList.iterator();
    186                    while ( it.hasNext() ) {
    187                        String name = (String) it.next();
    188                        transaction.registerSecuredObject( ClientHelper.TYPE_LAYER, name, name );
    189                    }
    190                }
    191
    192                // remove deleted FeatureTypes
    193                SecuredObject[] obsoleteFeatureTypes = getObjectsToDelete(
    194                                                                           oldObjectTypes.get( ClientHelper.TYPE_FEATURETYPE ),
    195                                                                           transaction.getAllSecuredObjects( ClientHelper.TYPE_FEATURETYPE ) );
    196                for ( int i = 0; i < obsoleteFeatureTypes.length; i++ ) {
    197                    transaction.deregisterSecuredObject( obsoleteFeatureTypes[i] );
    198                }
    199
    200                // register new FeatureTypes
    201                ArrayList newFeatureTypeList = newObjectTypes.get( ClientHelper.TYPE_FEATURETYPE );
    202                if ( newFeatureTypeList != null ) {
    203                    Iterator it = newFeatureTypeList.iterator();
    204                    while ( it.hasNext() ) {
    205                        String name = (String) it.next();
    206                        transaction.registerSecuredObject( ClientHelper.TYPE_FEATURETYPE, name, name );
    207                    }
    208                }
    209
    210                manager.commitTransaction( transaction );
    211                transaction = null;
    212
    213                getRequest().setAttribute( "MESSAGE", Messages.getMessage( "IGEO_STD_SEC_SUCCESS_INITSECOBJEDITOR" ) );
    214            } catch ( RPCException e ) {
    215                getRequest().setAttribute( "SOURCE", this.getClass().getName() );
    216                getRequest().setAttribute( "MESSAGE", Messages.getMessage( "IGEO_STD_SEC_ERROR_CHANGE_REQ", e.getMessage() ) );
    217                setNextPage( "error.jsp" );
    218                LOG.logError( e.getMessage(), e );
    219            } catch ( GeneralSecurityException e ) {
    220                getRequest().setAttribute( "SOURCE", this.getClass().getName() );
    221                getRequest().setAttribute( "MESSAGE", Messages.getMessage( "IGEO_STD_SEC_ERROR_CHANGE", e.getMessage() ) );
    222                setNextPage( "error.jsp" );
    223                LOG.logError( e.getMessage(), e );
    224            } finally {
    225                if ( manager != null && transaction != null ) {
    226                    try {
    227                        manager.abortTransaction( transaction );
    228                    } catch ( GeneralSecurityException ex ) {
    229                        LOG.logError( ex.getMessage() );
    230                    }
    231                }
    232            }
    233        }
    234
    235        private SecuredObject[] getObjectsToDelete( ArrayList<Integer> remainingObjects, SecuredObject[] presentObjects ) {
    236            Set<Integer> lookup = new HashSet<Integer>();
    237            ArrayList<SecuredObject> deleteList = new ArrayList<SecuredObject>( 10 );
    238            if ( remainingObjects != null ) {
    239                lookup = new HashSet<Integer>( remainingObjects );
    240            }
    241            for ( int i = 0; i < presentObjects.length; i++ ) {
    242                if ( !lookup.contains( new Integer( presentObjects[i].getID() ) ) ) {
    243                    deleteList.add( presentObjects[i] );
    244                }
    245            }
    246            return deleteList.toArray( new SecuredObject[deleteList.size()] );
    247        }
    248    }