org.molgenis.bootstrap.populate.PermissionPopulator Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of molgenis-bootstrap Show documentation

Application bootstrapper.

The newest version!

package org.molgenis.bootstrap.populate;

import static com.google.common.collect.Multimaps.filterEntries;
import static java.util.Objects.requireNonNull;

import com.google.common.collect.Multimap;
import java.util.Collection;
import org.molgenis.data.security.permission.PermissionService;
import org.molgenis.data.security.permission.model.Permission;
import org.molgenis.security.core.PermissionSet;
import org.molgenis.util.Pair;
import org.springframework.context.ApplicationContext;
import org.springframework.security.acls.model.ObjectIdentity;
import org.springframework.security.acls.model.Sid;
import org.springframework.stereotype.Component;
import org.springframework.transaction.annotation.Transactional;

/**
 * Discovers {@link PermissionRegistry application system permission registries} and populates
 * permissions.
 */
@Component
public class PermissionPopulator {
  private final PermissionService permissionService;

  PermissionPopulator(PermissionService permissionService) {
    this.permissionService = requireNonNull(permissionService);
  }

  @Transactional
  public void populate(ApplicationContext applicationContext) {
    Collection registries =
        applicationContext.getBeansOfType(PermissionRegistry.class).values();
    registries.forEach(this::populate);
  }

  private void populate(PermissionRegistry systemPermissionRegistry) {
    Multimap> systemPermissions =
        systemPermissionRegistry.getPermissions();

    Multimap> newSystemPermissions =
        filterEntries(
            systemPermissions,
            entry -> entry != null && isNewPermission(entry.getKey(), entry.getValue()));

    newSystemPermissions.asMap().forEach(this::populate);
  }

  private boolean isNewPermission(
      ObjectIdentity objectIdentity, Pair permission) {
    return !permissionService.exists(objectIdentity, permission.getB());
  }

  private void populate(ObjectIdentity objectIdentity, Collection> pairs) {
    pairs.forEach(
        pair ->
            permissionService.createPermission(
                Permission.create(objectIdentity, pair.getB(), pair.getA())));
  }
}