org.filesys.server.auth.acl.IpAddressAccessControlParser Maven / Gradle / Ivy

Go to download
Show more of this group Show more artifacts with this name
Show all versions of jfileserver Show documentation
Java file server with SMB, FTP/FTPS and NFS support, virtual filesystems, database filesystems
The newest version!
/*
 * Copyright (C) 2006-2010 Alfresco Software Limited.
 *
 * This file is part of Alfresco
 *
 * Alfresco is free software: you can redistribute it and/or modify
 * it under the terms of the GNU Lesser General Public License as published by
 * the Free Software Foundation, either version 3 of the License, or
 * (at your option) any later version.
 *
 * Alfresco is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU Lesser General Public License for more details.
 *
 * You should have received a copy of the GNU Lesser General Public License
 * along with Alfresco. If not, see .
 */

package org.filesys.server.auth.acl;

import org.filesys.util.IPAddress;
import org.springframework.extensions.config.ConfigElement;

/**
 * Ip Address Access Control Parser Class
 *
 * @author gkspencer
 */
public class IpAddressAccessControlParser extends AccessControlParser {

    /**
     * Default constructor
     */
    public IpAddressAccessControlParser() {
    }

    /**
     * Return the parser type
     *
     * @return String
     */
    public String getType() {
        return "address";
    }

    /**
     * Validate the parameters and create an address access control
     *
     * @param params ConfigElement
     * @return AccessControl
     * @exception ACLParseException Error parsing the ACL
     */
    public AccessControl createAccessControl(ConfigElement params)
            throws ACLParseException {

        //	Get the access type
        int access = parseAccessType(params);

        //	Check if the single IP address format has been specified
        String val = params.getAttribute("ip");
        if (val != null) {

            //	Validate the parameters
            if (val.isEmpty() || (!IPAddress.isIPv4Address(val) && !IPAddress.isIPv6Address(val)))
                throw new ACLParseException("Invalid IP address, " + val);

            if (params.getAttributeCount() != 2)
                throw new ACLParseException("Invalid parameter(s) specified for address");

            // Strip the scope index from an IPv6 address
            int idx = val.indexOf( '%');
            if ( idx != -1)
                val = val.substring( 0, idx);

            //	Create a single TCP/IP address access control rule
            return new IpAddressAccessControl(val, null, getType(), access);
        }

        //	Check if a subnet address and mask have been specified
        val = params.getAttribute("subnet");
        if (val != null) {

            //	Get the network mask parameter
            String maskVal = params.getAttribute("mask");

            //	Validate the parameters
            if (maskVal.length() == 0 || maskVal == null)
                throw new ACLParseException("Invalid subnet/mask parameter");

            if (IPAddress.isNumericAddress(val) == false)
                throw new ACLParseException("Invalid subnet parameter, " + val);

            if (IPAddress.isNumericAddress(maskVal) == false)
                throw new ACLParseException("Invalid mask parameter, " + maskVal);

            //	Create a subnet address access control rule
            return new IpAddressAccessControl(val, maskVal, getType(), access);
        }

        //	Invalid parameters
        throw new ACLParseException("Unknown address parameter(s)");
    }
}