com.liferay.portal.security.permission.PermissionConverterImpl Maven / Gradle / Ivy

Show more of this group Show more artifacts with this name
Show all versions of portal-impl Show documentation
Contains implementation for the portal services.
There is a newer version: 7.0.0-nightly
/**
 * Copyright (c) 2000-2013 Liferay, Inc. All rights reserved.
 *
 * This library is free software; you can redistribute it and/or modify it under
 * the terms of the GNU Lesser General Public License as published by the Free
 * Software Foundation; either version 2.1 of the License, or (at your option)
 * any later version.
 *
 * This library is distributed in the hope that it will be useful, but WITHOUT
 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
 * FOR A PARTICULAR PURPOSE. See the GNU Lesser General Public License for more
 * details.
 */

package com.liferay.portal.security.permission;

import com.liferay.portal.kernel.dao.orm.QueryUtil;
import com.liferay.portal.kernel.exception.PortalException;
import com.liferay.portal.kernel.exception.SystemException;
import com.liferay.portal.model.Permission;
import com.liferay.portal.model.ResourceAction;
import com.liferay.portal.model.ResourceConstants;
import com.liferay.portal.model.ResourcePermission;
import com.liferay.portal.model.ResourceTypePermission;
import com.liferay.portal.model.Role;
import com.liferay.portal.model.RoleConstants;
import com.liferay.portal.model.impl.PermissionImpl;
import com.liferay.portal.service.ResourceActionLocalServiceUtil;
import com.liferay.portal.service.ResourceBlockLocalServiceUtil;
import com.liferay.portal.service.ResourcePermissionLocalServiceUtil;
import com.liferay.portal.service.ResourceTypePermissionLocalServiceUtil;
import com.liferay.portal.service.RoleLocalServiceUtil;

import java.util.ArrayList;
import java.util.List;

/**
 * @author Michael C. Han
 */
public class PermissionConverterImpl implements PermissionConverter {

	@Override
	public List convertPermissions(long roleId)
		throws PortalException, SystemException {

		return convertPermissions(roleId, null);
	}

	@Override
	public List convertPermissions(
			long roleId, PermissionConversionFilter permissionConversionFilter)
		throws PortalException, SystemException {

		Role role = RoleLocalServiceUtil.getRole(roleId);

		return convertPermissions(role, permissionConversionFilter);
	}

	@Override
	public List convertPermissions(Role role)
		throws SystemException {

		return convertPermissions(role, null);
	}

	@Override
	public List convertPermissions(
			Role role, PermissionConversionFilter permissionConversionFilter)
		throws SystemException {

		int[] scopes = new int[0];

		if (role.getType() == RoleConstants.TYPE_REGULAR) {
			scopes = new int[] {
				ResourceConstants.SCOPE_COMPANY, ResourceConstants.SCOPE_GROUP};
		}
		else if ((role.getType() == RoleConstants.TYPE_ORGANIZATION) ||
				 (role.getType() == RoleConstants.TYPE_PROVIDER) ||
				 (role.getType() == RoleConstants.TYPE_SITE)) {

			scopes = new int[] {ResourceConstants.SCOPE_GROUP_TEMPLATE};
		}

		List permissions = new ArrayList();

		List resourcePermissions =
			ResourcePermissionLocalServiceUtil.getRoleResourcePermissions(
				role.getRoleId(), scopes, QueryUtil.ALL_POS, QueryUtil.ALL_POS);

		for (ResourcePermission resourcePermission : resourcePermissions) {
			if ((permissionConversionFilter != null) &&
				!permissionConversionFilter.accept(role, resourcePermission)) {

				continue;
			}

			List resourceActions =
				ResourceActionLocalServiceUtil.getResourceActions(
					resourcePermission.getName());

			for (ResourceAction resourceAction : resourceActions) {
				if (ResourcePermissionLocalServiceUtil.hasActionId(
						resourcePermission, resourceAction)) {

					Permission permission = new PermissionImpl();

					permission.setName(resourcePermission.getName());
					permission.setScope(resourcePermission.getScope());
					permission.setPrimKey(resourcePermission.getPrimKey());
					permission.setActionId(resourceAction.getActionId());

					permissions.add(permission);
				}
			}
		}

		List resourceTypePermissions =
			ResourceTypePermissionLocalServiceUtil.
				getRoleResourceTypePermissions(role.getRoleId());

		for (ResourceTypePermission resourceTypePermission :
				resourceTypePermissions) {

			if ((permissionConversionFilter != null) &&
				!permissionConversionFilter.accept(
					role, resourceTypePermission)) {

				continue;
			}

			List actionIds = ResourceBlockLocalServiceUtil.getActionIds(
				resourceTypePermission.getName(),
				resourceTypePermission.getActionIds());

			for (String actionId : actionIds) {
				Permission permission = new PermissionImpl();

				permission.setName(resourceTypePermission.getName());

				if (role.getType() == RoleConstants.TYPE_REGULAR) {
					if (resourceTypePermission.isCompanyScope()) {
						permission.setScope(ResourceConstants.SCOPE_COMPANY);
					}
					else {
						permission.setScope(ResourceConstants.SCOPE_GROUP);
					}
				}
				else {
					permission.setScope(ResourceConstants.SCOPE_GROUP_TEMPLATE);
				}

				permission.setPrimKey(
					String.valueOf(resourceTypePermission.getGroupId()));

				permission.setActionId(actionId);

				permissions.add(permission);
			}
		}

		return permissions;
	}

}