Many resources are needed to download a project. Please understand that we have to compensate our server costs. Thank you in advance.
Project price only 1 $
You can buy this project and download/modify it how often you want.
com.liferay.sharing.internal.security.permission.SharingPermissionImpl Maven / Gradle / Ivy
/**
* SPDX-FileCopyrightText: (c) 2000 Liferay, Inc. https://liferay.com
* SPDX-License-Identifier: LGPL-2.1-or-later OR LicenseRef-Liferay-DXP-EULA-2.0.0-2023-06
*/
package com.liferay.sharing.internal.security.permission;
import com.liferay.asset.kernel.model.AssetEntry;
import com.liferay.asset.kernel.service.AssetEntryLocalService;
import com.liferay.osgi.service.tracker.collections.map.ServiceTrackerMap;
import com.liferay.osgi.service.tracker.collections.map.ServiceTrackerMapFactory;
import com.liferay.petra.function.transform.TransformUtil;
import com.liferay.petra.string.StringBundler;
import com.liferay.petra.string.StringPool;
import com.liferay.portal.kernel.exception.PortalException;
import com.liferay.portal.kernel.exception.SystemException;
import com.liferay.portal.kernel.model.ClassName;
import com.liferay.portal.kernel.security.auth.PrincipalException;
import com.liferay.portal.kernel.security.permission.ActionKeys;
import com.liferay.portal.kernel.security.permission.PermissionChecker;
import com.liferay.portal.kernel.service.ClassNameLocalService;
import com.liferay.sharing.model.SharingEntry;
import com.liferay.sharing.security.permission.SharingEntryAction;
import com.liferay.sharing.security.permission.SharingPermission;
import com.liferay.sharing.security.permission.SharingPermissionChecker;
import com.liferay.sharing.service.SharingEntryLocalService;
import java.util.Collection;
import java.util.Collections;
import org.osgi.framework.BundleContext;
import org.osgi.service.component.annotations.Activate;
import org.osgi.service.component.annotations.Component;
import org.osgi.service.component.annotations.Deactivate;
import org.osgi.service.component.annotations.Reference;
/**
* @author Adolfo Pérez
*/
@Component(service = SharingPermission.class)
public class SharingPermissionImpl implements SharingPermission {
@Override
public void check(
PermissionChecker permissionChecker, long classNameId, long classPK,
long groupId, Collection sharingEntryActions)
throws PortalException {
if (!contains(
permissionChecker, classNameId, classPK, groupId,
sharingEntryActions)) {
ClassName className = _classNameLocalService.fetchByClassNameId(
classNameId);
String resourceName = String.valueOf(classNameId);
if (className != null) {
resourceName = className.getClassName();
}
throw new PrincipalException.MustHavePermission(
permissionChecker.getUserId(), resourceName, classPK,
TransformUtil.transformToArray(
sharingEntryActions, SharingEntryAction::getActionId,
String.class));
}
}
@Override
public void checkManageCollaboratorsPermission(
PermissionChecker permissionChecker, long classNameId, long classPK,
long groupId)
throws PortalException {
if (!containsManageCollaboratorsPermission(
permissionChecker, classNameId, classPK, groupId)) {
throw new PrincipalException(
StringBundler.concat(
"User ", permissionChecker.getUserId(),
" does not have permission to manage collaborators of ",
"entry with class name ", classNameId, " and class PK ",
classPK));
}
}
@Override
public void checkSharePermission(
PermissionChecker permissionChecker, long classNameId, long classPK,
long groupId)
throws PortalException {
if (!containsSharePermission(
permissionChecker, classNameId, classPK, groupId)) {
throw new PrincipalException(
StringBundler.concat(
"User ", permissionChecker.getUserId(),
" does not have permission to share ", classNameId,
StringPool.SPACE, classPK));
}
}
@Override
public boolean contains(
PermissionChecker permissionChecker, long classNameId, long classPK,
long groupId, Collection sharingEntryActions)
throws PortalException {
SharingPermissionChecker sharingPermissionChecker = null;
try {
ClassName className = _classNameLocalService.fetchByClassNameId(
classNameId);
if (className == null) {
throw new PrincipalException(
"Sharing permission checker is null for class name ID " +
classNameId);
}
sharingPermissionChecker = _serviceTrackerMap.getService(
className.getValue());
}
catch (PortalException portalException) {
throw new SystemException(portalException);
}
if (sharingPermissionChecker == null) {
throw new PrincipalException(
"Sharing permission checker is null for class name ID " +
classNameId);
}
if (sharingPermissionChecker.hasPermission(
permissionChecker, classPK, groupId, sharingEntryActions)) {
return true;
}
for (SharingEntryAction sharingEntryAction : sharingEntryActions) {
if (!_sharingEntryLocalService.hasShareableSharingPermission(
permissionChecker.getUserId(), classNameId, classPK,
sharingEntryAction)) {
return false;
}
}
return true;
}
@Override
public boolean containsManageCollaboratorsPermission(
PermissionChecker permissionChecker, long classNameId, long classPK,
long groupId)
throws PortalException {
if (permissionChecker.isGroupAdmin(groupId)) {
return true;
}
AssetEntry assetEntry = _assetEntryLocalService.fetchEntry(
classNameId, classPK);
if (assetEntry == null) {
return false;
}
if (assetEntry.getUserId() == permissionChecker.getUserId()) {
return true;
}
SharingEntry sharingEntry = _sharingEntryLocalService.fetchSharingEntry(
permissionChecker.getUserId(), classNameId, classPK);
if ((sharingEntry != null) && sharingEntry.isShareable() &&
contains(
permissionChecker, sharingEntry.getClassNameId(),
sharingEntry.getClassPK(), sharingEntry.getGroupId(),
Collections.singletonList(SharingEntryAction.UPDATE))) {
return true;
}
return false;
}
@Override
public boolean containsSharePermission(
PermissionChecker permissionChecker, long classNameId, long classPK,
long groupId) {
AssetEntry assetEntry = _assetEntryLocalService.fetchEntry(
classNameId, classPK);
if (assetEntry == null) {
return false;
}
if (permissionChecker.isOmniadmin() ||
permissionChecker.isCompanyAdmin() ||
permissionChecker.isGroupAdmin(groupId) ||
permissionChecker.hasOwnerPermission(
permissionChecker.getCompanyId(), assetEntry.getClassName(),
classPK, assetEntry.getUserId(), ActionKeys.VIEW)) {
return true;
}
SharingEntry sharingEntry = _sharingEntryLocalService.fetchSharingEntry(
permissionChecker.getUserId(), classNameId, classPK);
if ((sharingEntry != null) && sharingEntry.isShareable()) {
return true;
}
return false;
}
@Activate
protected void activate(BundleContext bundleContext) {
_serviceTrackerMap = ServiceTrackerMapFactory.openSingleValueMap(
bundleContext, SharingPermissionChecker.class,
"(model.class.name=*)",
(serviceReference, emitter) -> emitter.emit(
(String)serviceReference.getProperty("model.class.name")));
}
@Deactivate
protected void deactivate() {
_serviceTrackerMap.close();
}
@Reference
private AssetEntryLocalService _assetEntryLocalService;
@Reference
private ClassNameLocalService _classNameLocalService;
private ServiceTrackerMap
_serviceTrackerMap;
@Reference
private SharingEntryLocalService _sharingEntryLocalService;
}
