Many resources are needed to download a project. Please understand that we have to compensate our server costs. Thank you in advance. Project price only 1 $
You can buy this project and download/modify it how often you want.
// Copyright (C) 2013 The Android Open Source Project
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
// http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.
package com.google.gerrit.server.account;
import com.google.gerrit.extensions.annotations.CapabilityScope;
import com.google.gerrit.extensions.annotations.RequiresAnyCapability;
import com.google.gerrit.extensions.annotations.RequiresCapability;
import com.google.gerrit.extensions.restapi.AuthException;
import com.google.gerrit.server.CurrentUser;
import com.google.inject.Provider;
import java.lang.annotation.Annotation;
import java.util.Arrays;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
public class CapabilityUtils {
private static final Logger log = LoggerFactory.getLogger(CapabilityUtils.class);
public static void checkRequiresCapability(
Provider userProvider, String pluginName, Class clazz) throws AuthException {
checkRequiresCapability(userProvider.get(), pluginName, clazz);
}
public static void checkRequiresCapability(CurrentUser user, String pluginName, Class clazz)
throws AuthException {
RequiresCapability rc = getClassAnnotation(clazz, RequiresCapability.class);
RequiresAnyCapability rac = getClassAnnotation(clazz, RequiresAnyCapability.class);
if (rc != null && rac != null) {
log.error(
"Class {} uses both @{} and @{}",
clazz.getName(),
RequiresCapability.class.getSimpleName(),
RequiresAnyCapability.class.getSimpleName());
throw new AuthException("cannot check capability");
}
CapabilityControl ctl = user.getCapabilities();
if (ctl.canAdministrateServer()) {
return;
}
checkRequiresCapability(ctl, pluginName, clazz, rc);
checkRequiresAnyCapability(ctl, pluginName, clazz, rac);
}
private static void checkRequiresCapability(
CapabilityControl ctl, String pluginName, Class clazz, RequiresCapability rc)
throws AuthException {
if (rc == null) {
return;
}
String capability = resolveCapability(pluginName, rc.value(), rc.scope(), clazz);
if (!ctl.canPerform(capability)) {
throw new AuthException(
String.format("Capability %s is required to access this resource", capability));
}
}
private static void checkRequiresAnyCapability(
CapabilityControl ctl, String pluginName, Class clazz, RequiresAnyCapability rac)
throws AuthException {
if (rac == null) {
return;
}
if (rac.value().length == 0) {
log.error(
"Class {} uses @{} with no capabilities listed",
clazz.getName(),
RequiresAnyCapability.class.getSimpleName());
throw new AuthException("cannot check capability");
}
for (String capability : rac.value()) {
capability = resolveCapability(pluginName, capability, rac.scope(), clazz);
if (ctl.canPerform(capability)) {
return;
}
}
throw new AuthException(
"One of the following capabilities is required to access this"
+ " resource: "
+ Arrays.asList(rac.value()));
}
private static String resolveCapability(
String pluginName, String capability, CapabilityScope scope, Class clazz)
throws AuthException {
if (pluginName != null
&& !"gerrit".equals(pluginName)
&& (scope == CapabilityScope.PLUGIN || scope == CapabilityScope.CONTEXT)) {
capability = String.format("%s-%s", pluginName, capability);
} else if (scope == CapabilityScope.PLUGIN) {
log.error(
"Class {} uses @{}(scope={}), but is not within a plugin",
clazz.getName(),
RequiresCapability.class.getSimpleName(),
CapabilityScope.PLUGIN.name());
throw new AuthException("cannot check capability");
}
return capability;
}
/**
* Find an instance of the specified annotation, walking up the inheritance tree if necessary.
*
* @param Annotation type to search for
* @param clazz root class to search, may be null
* @param annotationClass class object of Annotation subclass to search for
* @return the requested annotation or null if none
*/
private static T getClassAnnotation(
Class clazz, Class annotationClass) {
for (; clazz != null; clazz = clazz.getSuperclass()) {
T t = clazz.getAnnotation(annotationClass);
if (t != null) {
return t;
}
}
return null;
}
}
