org.esfinge.guardian.abac.authorizer.RuleAuthorizer Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of ABAC Show documentation

The newest version!

package org.esfinge.guardian.abac.authorizer;

import org.apache.el.lang.EvaluationContext;
import org.esfinge.guardian.abac.annotation.authorization.Rule;
import org.esfinge.guardian.abac.el.ELUtils;
import org.esfinge.guardian.abac.exception.MalformedELException;
import org.esfinge.guardian.authorizer.Authorizer;
import org.esfinge.guardian.context.AuthorizationContext;

public class RuleAuthorizer implements Authorizer {

	@Override
	public Boolean authorize(AuthorizationContext context, Rule rule) {
		
		EvaluationContext elContext = ELUtils.buildEvaluationContext(context);
		
		String ruleExpr = "#{" + rule.value() + "}";
		boolean ruleEval;
		try {
			ruleEval = (Boolean) ELUtils.evaluateExpression(elContext, ruleExpr);
		} catch(Exception e) {
			throw new MalformedELException("Why don't you check this rule: " + rule.value(), e);
		}
		
		if (!ruleEval) {
			return false;
		} 
		return true;
	}
}