com.kero.security.core.scheme.ClassAccessScheme Maven / Gradle / Ivy

Go to download
Show more of this group Show more artifacts with this name
Show all versions of kero-security Show documentation
Kero-Security is a library for statically controlling access to properties of objects / classes.
There is a newer version: 0.1.39
package com.kero.security.core.scheme;

import java.util.Collection;
import java.util.HashMap;
import java.util.HashSet;
import java.util.Map;
import java.util.Set;

import org.slf4j.Logger;
import org.slf4j.LoggerFactory;

import com.kero.security.core.access.Access;
import com.kero.security.core.agent.KeroAccessAgent;
import com.kero.security.core.config.PreparedAccessConfiguration;
import com.kero.security.core.config.PreparedAccessConfigurationImpl;
import com.kero.security.core.config.action.Action;
import com.kero.security.core.config.action.ActionDeny;
import com.kero.security.core.config.action.ActionGrant;
import com.kero.security.core.property.LocalProperty;
import com.kero.security.core.property.Property;
import com.kero.security.core.role.Role;
import com.kero.security.core.scheme.exception.AccessSchemePrepareException;

public class ClassAccessScheme implements AccessScheme {

	protected static Logger LOGGER = LoggerFactory.getLogger("Kero-Security");
	
	protected Class type;
	protected String name;
	
	protected Access defaultAccess = Access.UNKNOWN;
	
	protected Map localProperties = new HashMap<>();
	
	protected KeroAccessAgent agent;
	
	protected boolean inherit = true;
	
	public ClassAccessScheme() {
	
	}
	
	public ClassAccessScheme(KeroAccessAgent agent, String name, Class type) {

		this.agent = agent;
		this.name = name;
		this.type = type;
	}

	public PreparedAccessConfiguration prepareAccessConfiguration(Collection rolesArg) {
		
		Set roles = new HashSet<>(rolesArg);
	
		LOGGER.debug("Prepare access configuration for \""+this.name+"\" roles: "+roles);
		
		Map preparedActions = new HashMap<>();

		Set properties = collectProperties();
		
			properties.forEach((property)-> {
	
				preparedActions.put(property.getName(), property.prepare(roles));
			});

		Action defaultAction = determineDefaultAction(roles);
		
		return new PreparedAccessConfigurationImpl(this, preparedActions, defaultAction);
	}
	
	protected Action determineDefaultAction(Collection roles) {
		
		Access defaultAccess = determineDefaultAccess();
	
		if(defaultAccess == Access.GRANT) {
			
			return new ActionGrant(this, roles);
		}
		else if(defaultAccess == Access.DENY) {
			
			return new ActionDeny(this);
		}
		
		throw new AccessSchemePrepareException("Can't prepare default access for: \""+this.name+"\". Your Kero-Security configuration is bad, if you see this exception.");
	}
	
	public Set collectProperties() {
	
		Map props = new HashMap<>();
		
		for(Property prop : getLocalProperties()) {
			
			props.put(prop.getName(), prop);
		}
		
		if(this.isInherit()) {
			
			Set parentProps = this.getParent().collectProperties();
			
			parentProps.forEach(prop -> props.putIfAbsent(prop.getName(), prop));
		}
		
		return new HashSet<>(props.values());
	}
	
	public Access determineDefaultAccess() {
		
		Access access = findDefaultAccess();
		
		if(access == Access.UNKNOWN) {
			
			access = agent.getDefaultAccess();
		}
		
		return access;
	}
	
	protected Access findDefaultAccess() {
		
		if(this.hasDefaultAccess()) return this.getDefaultAccess();
		
		if(!this.inherit) return Access.UNKNOWN;
		
		return getParent().determineDefaultAccess();
	}

	@Override
	public Property createLocalProperty(String name) {
		
		LOGGER.debug("Creating property: \""+name+"\" for scheme: \""+this.name+"\"");
		
		Property prop = new LocalProperty(this, name);
		
		localProperties.put(name, prop);
		
		return prop;
	}

	@Override
	public boolean hasLocalProperty(String name) {
		
		return localProperties.containsKey(name);
	}

	@Override
	public Property getLocalProperty(String name) {
		
		return localProperties.get(name);
	}
	
	@Override
	public Set getLocalProperties() {
		
		return new HashSet<>(localProperties.values());
	}

	@Override
	public void setDefaultAccess(Access access) {
	
		this.defaultAccess = access;
	}

	@Override
	public boolean hasDefaultAccess() {
	
		return this.defaultAccess != Access.UNKNOWN;
	}

	@Override
	public Access getDefaultAccess() {
		
		return this.defaultAccess;
	}

	@Override
	public Class getTypeClass() {
		
		return this.type;
	}
	
	@Override
	public KeroAccessAgent getAgent() {
		
		return this.agent;
	}
	
	@Override
	public String getName() {
		
		return this.name;
	}
	
	@Override
	public void setInherit(boolean i) {
		
		this.inherit = i;
	}
	
	@Override
	public boolean isInherit() {
		
		return this.inherit;
	}
}