org.sonar.server.user.UserSession Maven / Gradle / Ivy
/*
* SonarQube
* Copyright (C) 2009-2017 SonarSource SA
* mailto:info AT sonarsource DOT com
*
* This program is free software; you can redistribute it and/or
* modify it under the terms of the GNU Lesser General Public
* License as published by the Free Software Foundation; either
* version 3 of the License, or (at your option) any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
* Lesser General Public License for more details.
*
* You should have received a copy of the GNU Lesser General Public License
* along with this program; if not, write to the Free Software Foundation,
* Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
*/
package org.sonar.server.user;
import java.util.Collection;
import java.util.List;
import javax.annotation.CheckForNull;
import org.sonar.db.component.ComponentDto;
import org.sonar.db.organization.OrganizationDto;
import org.sonar.db.permission.OrganizationPermission;
import org.sonar.db.user.GroupDto;
public interface UserSession {
/**
* Login of the authenticated user. Returns {@code null}
* if {@link #isLoggedIn()} is {@code false}.
*/
@CheckForNull
String getLogin();
/**
* Name of the authenticated user. Returns {@code null}
* if {@link #isLoggedIn()} is {@code false}.
*/
@CheckForNull
String getName();
/**
* Database ID of the authenticated user. Returns {@code null}
* if {@link #isLoggedIn()} is {@code false}.
*/
@CheckForNull
Integer getUserId();
/**
* The groups that the logged-in user is member of. An empty
* collection is returned if {@link #isLoggedIn()} is {@code false}.
*/
Collection getGroups();
/**
* Whether the user is logged-in or anonymous.
*/
boolean isLoggedIn();
/**
* Whether the user has root privileges. If {@code true}, then user automatically
* benefits from all the permissions on all organizations and projects.
*/
boolean isRoot();
/**
* Ensures that {@link #isRoot()} returns {@code true} otherwise throws a
* {@link org.sonar.server.exceptions.ForbiddenException}.
*/
UserSession checkIsRoot();
/**
* Ensures that user is logged in otherwise throws {@link org.sonar.server.exceptions.UnauthorizedException}.
*/
UserSession checkLoggedIn();
/**
* Returns {@code true} if the permission is granted on the organization, otherwise {@code false}.
*
* If the organization does not exist, then returns {@code false}.
*
* Always returns {@code true} if {@link #isRoot()} is {@code true}, even if
* organization does not exist.
*/
boolean hasPermission(OrganizationPermission permission, OrganizationDto organization);
boolean hasPermission(OrganizationPermission permission, String organizationUuid);
/**
* Ensures that {@link #hasPermission(OrganizationPermission, OrganizationDto)} is {@code true},
* otherwise throws a {@link org.sonar.server.exceptions.ForbiddenException}.
*/
UserSession checkPermission(OrganizationPermission permission, OrganizationDto organization);
UserSession checkPermission(OrganizationPermission permission, String organizationUuid);
/**
* Returns {@code true} if the permission is granted to user on the component,
* otherwise {@code false}.
*
* If the component does not exist, then returns {@code false}.
*
* Always returns {@code true} if {@link #isRoot()} is {@code true}, even if
* component does not exist.
*
* If the permission is not granted, then the organization permission is _not_ checked.
*
* @param component non-null component.
* @param permission project permission as defined by {@link org.sonar.core.permission.ProjectPermissions}
*/
boolean hasComponentPermission(String permission, ComponentDto component);
/**
* Using {@link #hasComponentPermission(String, ComponentDto)} is recommended
* because it does not have to load project if the referenced component
* is not a project.
*
* @deprecated use {@link #hasComponentPermission(String, ComponentDto)} instead
*/
@Deprecated
boolean hasComponentUuidPermission(String permission, String componentUuid);
/**
* Return the subset of specified components which the user has granted permission.
* An empty list is returned if input is empty or if no components are allowed to be
* accessed.
* If the input is ordered, then the returned components are in the same order.
* The duplicated components are returned duplicated too.
*/
List keepAuthorizedComponents(String permission, Collection components);
/**
* Ensures that {@link #hasComponentPermission(String, ComponentDto)} is {@code true},
* otherwise throws a {@link org.sonar.server.exceptions.ForbiddenException}.
*/
UserSession checkComponentPermission(String projectPermission, ComponentDto component);
/**
* Ensures that {@link #hasComponentUuidPermission(String, String)} is {@code true},
* otherwise throws a {@link org.sonar.server.exceptions.ForbiddenException}.
*
* @deprecated use {@link #checkComponentPermission(String, ComponentDto)} instead
*/
@Deprecated
UserSession checkComponentUuidPermission(String permission, String componentUuid);
/**
* Whether user can administrate system, for example for using cross-organizations services
* like update center, system info or management of users.
*
* Returns {@code true} if:
*
* - {@link #isRoot()} is {@code true}
* - organization feature is disabled and user is administrator of the (single) default organization
*
*/
boolean isSystemAdministrator();
/**
* Ensures that {@link #isSystemAdministrator()} is {@code true},
* otherwise throws {@link org.sonar.server.exceptions.ForbiddenException}.
*/
UserSession checkIsSystemAdministrator();
}