org.sakaiproject.coursemanagement.impl.aop.CourseManagementAdministrationAuthzAdvisor Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of coursemanagement-hibernate-impl Show documentation

The newest version!

/**********************************************************************************
 * $URL$
 * $Id$
 ***********************************************************************************
 *
 * Copyright (c) 2006, 2008 The Sakai Foundation
 *
 * Licensed under the Educational Community License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *       http://www.opensource.org/licenses/ECL-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 *
 **********************************************************************************/
package org.sakaiproject.coursemanagement.impl.aop;

import java.lang.reflect.Method;

import lombok.extern.slf4j.Slf4j;

import org.springframework.aop.MethodBeforeAdvice;

import org.sakaiproject.authz.api.SecurityService;
import org.sakaiproject.coursemanagement.api.CourseManagementService;
import org.sakaiproject.coursemanagement.impl.exception.PermissionException;

@Slf4j
public class CourseManagementAdministrationAuthzAdvisor implements MethodBeforeAdvice {
	SecurityService securityService;
	
	public void setSecurityService(SecurityService securityService) {
		this.securityService = securityService;
	}

	public void before(Method method, Object[] oa, Object obj) throws Throwable {
		if(log.isDebugEnabled()) log.debug("Checking authorization for CM Administration actions");

		// Check the special cm.admin and /cm/admin permission and entity reference. This check will allow
		// the super user to modify CM data, or code which uses a SecurityAdvisor to permit this security check.
		if(!securityService.unlock(CourseManagementService.SECURE_CM_ADMIN, CourseManagementService.ENTITY_CM_ADMIN)) {
			if(log.isDebugEnabled()) log.debug("Denying access to CM Administration on method " + method);
			throw new PermissionException("No permission to modify CM data");
		}

		if(log.isDebugEnabled()) log.debug("This user is permitted to use the CM Admin service");
	}
}