com.floragunn.searchguard.configuration.ActionGroupHolder Maven / Gradle / Ivy

Go to download
Show more of this group Show more artifacts with this name
Show all versions of search-guard-6 Show documentation
Provide access control related features for Elasticsearch 6
The newest version!
/*
 * Copyright 2015-2017 floragunn GmbH
 * 
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 * 
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 * 
 */

package com.floragunn.searchguard.configuration;

import java.util.Collections;
import java.util.HashSet;
import java.util.List;
import java.util.Set;

import org.elasticsearch.common.settings.Settings;

import com.floragunn.searchguard.support.ConfigConstants;

public class ActionGroupHolder {

    final ConfigurationRepository configurationRepository;

    public ActionGroupHolder(final ConfigurationRepository configurationRepository) {
        this.configurationRepository = configurationRepository;
    }

    public Set getGroupMembers(final String groupname) {

        final Settings actionGroups = getSettings();
        
        if (actionGroups == null) {
            return Collections.emptySet();
        }

        return resolve(actionGroups, groupname);
    }

    private Set resolve(final Settings actionGroups, final String entry) {

        final Set ret = new HashSet();
        // SG5 format, plain array
        List en = actionGroups.getAsList(entry);
        if (en.isEmpty()) {
        	// try SG6 format including readonly and permissions key
        	en = actionGroups.getAsList(entry +"." + ConfigConstants.CONFIGKEY_ACTION_GROUPS_PERMISSIONS);
        }
        for (String string: en) {
            if (actionGroups.names().contains(string)) {
                ret.addAll(resolve(actionGroups,string));
            } else {
                ret.add(string);
            }
        }
        return ret;
    }
    
    public Set resolvedActions(final List actions) {
        final Set resolvedActions = new HashSet();
        for (String string: actions) {
            final Set groups = getGroupMembers(string);
            if (groups.isEmpty()) {
                resolvedActions.add(string);
            } else {
                resolvedActions.addAll(groups);
            }
        }

        return resolvedActions;
    }

    private Settings getSettings() {
        return configurationRepository.getConfiguration(ConfigConstants.CONFIGNAME_ACTION_GROUPS);
    }
}