org.jboss.as.cli.accesscontrol.HostServerOperationAccess Maven / Gradle / Ivy

Go to download
Show more of this group Show more artifacts with this name
Show all versions of wildfly-cli
The newest version!
/*
 * JBoss, Home of Professional Open Source.
 * Copyright 2013, Red Hat, Inc., and individual contributors
 * as indicated by the @author tags. See the copyright.txt file in the
 * distribution for a full listing of individual contributors.
 *
 * This is free software; you can redistribute it and/or modify it
 * under the terms of the GNU Lesser General Public License as
 * published by the Free Software Foundation; either version 2.1 of
 * the License, or (at your option) any later version.
 *
 * This software is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
 * Lesser General Public License for more details.
 *
 * You should have received a copy of the GNU Lesser General Public
 * License along with this software; if not, write to the Free
 * Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA
 * 02110-1301 USA, or see the FSF site: http://www.fsf.org.
 */

package org.jboss.as.cli.accesscontrol;

import java.util.ArrayList;
import java.util.Collection;
import java.util.Collections;
import java.util.HashMap;
import java.util.List;
import java.util.Map;

import org.jboss.as.cli.CommandContext;
import org.jboss.as.cli.Util;
import org.jboss.as.cli.operation.OperationRequestAddress;
import org.jboss.as.cli.operation.impl.DefaultOperationRequestAddress;
import org.jboss.as.controller.client.ModelControllerClient;

/**
 * @author Alexey Loubyansky
 *
 */
public class HostServerOperationAccess extends BaseOperationAccessRequirement {

    private int lastCheckedServer;
    private Map> toCheck;
    private Map> allowed;

    public HostServerOperationAccess(CommandContext ctx, String address, String operation) {
        this(address, operation);
        ctx.addEventListener(this);
    }

    HostServerOperationAccess(String address, String operation) {
        super(address, operation);
    }

    HostServerOperationAccess(String operation) {
        super(operation);
    }

    HostServerOperationAccess(OperationRequestAddress address, String operation) {
        super(address, operation);
    }

    @Override
    public void resetState() {
        lastCheckedServer = 0;
        toCheck = null;
        allowed = null;
    }

    public Collection getAllowedHosts(CommandContext ctx) {
        if(allowed == null) {
            initAllowedLists(ctx);
        }
        return allowed.keySet();
    }

    public Collection getAllowedServers(CommandContext ctx, String host) {
        if(allowed == null) {
            initAllowedLists(ctx);
        }
        final List servers = allowed.get(host);
        return servers == null ? Collections.emptyList() : servers;
    }

    protected void initAllowedLists(CommandContext ctx) {
        if(ctx.getConfig().isAccessControl()) {
            if(!isSatisfied(ctx)) {
                allowed = Collections.emptyMap();
            } else {
                completeAccessCheck(ctx);
            }
        } else {
            final ModelControllerClient client = ctx.getModelControllerClient();
            allowed = new HashMap>();
            final OperationRequestAddress hostAddress = new DefaultOperationRequestAddress();
            hostAddress.toNodeType(Util.HOST);
            final List hosts = Util.getNodeNames(client, null, Util.HOST);
            for(String host : hosts) {
                hostAddress.toNode(host);
                final List servers = Util.getNodeNames(client, hostAddress, Util.SERVER);
                if(!servers.isEmpty()) {
                    allowed.put(host, servers);
                }
            }
        }
    }

    protected void completeAccessCheck(CommandContext ctx) {

        final ModelControllerClient client = ctx.getModelControllerClient();
        allowed = new HashMap>();
        final OperationRequestAddress hostAddress = new DefaultOperationRequestAddress();
        hostAddress.toNodeType(Util.HOST);
        final String[] parent = new String[4];
        parent[0] = Util.HOST;
        parent[2] = Util.SERVER;
        for(Map.Entry> entry : toCheck.entrySet()) {
            final String host = entry.getKey();
            hostAddress.toNode(host);
            List servers = entry.getValue();
            List allowedServers = null;
            int i = 0;
            if(servers == null) {
                servers = Util.getNodeNames(client, hostAddress, Util.SERVER);
            } else {
                allowedServers = new ArrayList();
                allowed.put(host, allowedServers);
                allowedServers.add(servers.get(lastCheckedServer));
                i = lastCheckedServer + 1;
            }
            parent[1] = host;
            while(i < servers.size()) {
                final String server = servers.get(i++);
                parent[3] = server;
                if(CLIAccessControl.isExecute(client, parent, address, operation)) {
                    if(allowedServers == null) {
                        allowedServers = new ArrayList();
                        allowed.put(host, allowedServers);
                    }
                    allowedServers.add(server);
                }
            }
        }
    }

    @Override
    protected boolean checkAccess(CommandContext ctx) {

        final ModelControllerClient client = ctx.getModelControllerClient();
        final List hosts = Util.getNodeNames(client, null, Util.HOST);
        if(hosts.isEmpty()) {
            return false;
        }

        final OperationRequestAddress hostAddress = new DefaultOperationRequestAddress();
        hostAddress.toNodeType(Util.HOST);
        final String[] parent = new String[4];
        parent[0] = Util.HOST;
        parent[2] = Util.SERVER;
        toCheck = new HashMap>();
        boolean satisfied = false;
        for(String host : hosts) {
            if (!satisfied) {
                lastCheckedServer = 0;
                hostAddress.toNode(host);
                parent[1] = host;
                final List servers = Util.getNodeNames(client, hostAddress, Util.SERVER);
                for (String server : servers) {
                    parent[3] = server;
                    if (CLIAccessControl.isExecute(client, parent, address, operation)) {
                        toCheck.put(host, servers);
                        satisfied = true;
                        break;
                    }
                    ++lastCheckedServer;
                }
            } else {
                toCheck.put(host, null);
            }
        }
        return satisfied;
    }
}