com.uid2.shared.auth.AclSnapshot Maven / Gradle / Ivy

Go to download
package com.uid2.shared.auth;

import com.uid2.shared.model.EncryptionKey;
import com.uid2.shared.store.ACLMode.MissingAclMode;
import com.uid2.shared.store.IKeysAclSnapshot;

import java.util.Map;

public class AclSnapshot implements IKeysAclSnapshot {
    private final Map acls;

    public AclSnapshot(Map acls) {
        this.acls = acls;
    }

    public boolean canClientAccessKey(ClientKey clientKey, EncryptionKey key) {
        // Old method, this will return true if there is no ACL for a key
        return canClientAccessKey(clientKey, key, MissingAclMode.ALLOW_ALL);
    }

    @Override
    public boolean canClientAccessKey(ClientKey clientKey, EncryptionKey key, MissingAclMode accessMethod) {
        if(clientKey.getSiteId() == key.getSiteId()) return true;

        EncryptionKeyAcl acl = acls.get(key.getSiteId());

        // No ACL: everyone has access to the site keys
        if(acl == null) {
            return accessMethod == MissingAclMode.ALLOW_ALL;
        }

        return acl.canBeAccessedBySite(clientKey.getSiteId());
    }

    public Map getAllAcls() {
        return acls;
    }
}