Docjar: A Java Source and Docuemnt Enginecom.*    java.*    javax.*    org.*    all    new    plug-in

Quick Search    Search Deep

com.obinary.cms.admin
Class SessionAccessControl  view SessionAccessControl download SessionAccessControl.java

java.lang.Object
  extended bycom.obinary.cms.admin.SessionAccessControl

public class SessionAccessControl
extends java.lang.Object

Re-implement this class once jcr AccessManager is implemented


Field Summary
private static java.lang.String ACL_ROLES_REPOSITORY
           
private static java.lang.String ACL_USERS_REPOSITORY
           
private static java.lang.String ACL_WEBSITE_REPOSITORY
           
static int ROLES_REPOSITORY
           
private static java.lang.String ROLES_REPOSITORY_TICKET
           
static int USERS_REPOSITORY
           
private static java.lang.String USERS_REPOSITORY_TICKET
           
static int WEBSITE_REPOSITORY
           
private static java.lang.String WEBSITE_REPOSITORY_TICKET
           
 
Constructor Summary
SessionAccessControl()
           
 
Method Summary
static void createMasterTicket(javax.servlet.http.HttpServletRequest request)
          Deprecated. master ticket is creted by the system startup
static void createRolesRepositoryTicket(javax.servlet.http.HttpServletRequest request)
          create user ticket and set ACL (user + group) in the session
static void createTicket(javax.servlet.http.HttpServletRequest request)
          create user ticket and set ACL (user + group) in the session
static void createUsersRepositoryTicket(javax.servlet.http.HttpServletRequest request)
          create user ticket and set ACL (user + group) in the session
static Ticket getMasterTicket(javax.servlet.http.HttpServletRequest request)
          gets the master ticket which has been created on server startup
private static Ticket getRolesRepositoryTicket(javax.servlet.http.HttpServletRequest request)
           
static Ticket getTicket(javax.servlet.http.HttpServletRequest request)
           gets the ticket creted while login, creates a new ticket if not existing
static Ticket getTicket(javax.servlet.http.HttpServletRequest request, int type)
           gets the ticket creted while login, creates a new ticket if not existing
static Node getUserNode(javax.servlet.http.HttpServletRequest request)
           
private static Ticket getUserRepositoryTicket(javax.servlet.http.HttpServletRequest request)
           
static boolean isValidSession(javax.servlet.http.HttpServletRequest request)
           
private static void updateACL(Node userNode, java.util.ArrayList userACL, int type)
          Adds user acl of the specified user to the given userACL
private static void updateRolesACL(Node userNode, java.util.ArrayList groupACL)
          Adds group acl of the specified user to the given groupACL
 
Methods inherited from class java.lang.Object
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait
 

Field Detail

WEBSITE_REPOSITORY_TICKET

private static final java.lang.String WEBSITE_REPOSITORY_TICKET
See Also:
Constant Field Values

USERS_REPOSITORY_TICKET

private static final java.lang.String USERS_REPOSITORY_TICKET
See Also:
Constant Field Values

ROLES_REPOSITORY_TICKET

private static final java.lang.String ROLES_REPOSITORY_TICKET
See Also:
Constant Field Values

ACL_USERS_REPOSITORY

private static final java.lang.String ACL_USERS_REPOSITORY
See Also:
Constant Field Values

ACL_ROLES_REPOSITORY

private static final java.lang.String ACL_ROLES_REPOSITORY
See Also:
Constant Field Values

ACL_WEBSITE_REPOSITORY

private static final java.lang.String ACL_WEBSITE_REPOSITORY
See Also:
Constant Field Values

WEBSITE_REPOSITORY

public static final int WEBSITE_REPOSITORY
See Also:
Constant Field Values

USERS_REPOSITORY

public static final int USERS_REPOSITORY
See Also:
Constant Field Values

ROLES_REPOSITORY

public static final int ROLES_REPOSITORY
See Also:
Constant Field Values
Constructor Detail

SessionAccessControl

public SessionAccessControl()
Method Detail

getTicket

public static Ticket getTicket(javax.servlet.http.HttpServletRequest request)
                        throws LoginException,
                               AccessDeniedException,
                               RepositoryException

gets the ticket creted while login, creates a new ticket if not existing


getTicket

public static Ticket getTicket(javax.servlet.http.HttpServletRequest request,
                               int type)
                        throws LoginException,
                               AccessDeniedException,
                               RepositoryException

gets the ticket creted while login, creates a new ticket if not existing


getUserRepositoryTicket

private static Ticket getUserRepositoryTicket(javax.servlet.http.HttpServletRequest request)
                                       throws LoginException,
                                              AccessDeniedException,
                                              RepositoryException

getRolesRepositoryTicket

private static Ticket getRolesRepositoryTicket(javax.servlet.http.HttpServletRequest request)
                                        throws LoginException,
                                               AccessDeniedException,
                                               RepositoryException

getMasterTicket

public static Ticket getMasterTicket(javax.servlet.http.HttpServletRequest request)
                              throws LoginException

gets the master ticket which has been created on server startup


createMasterTicket

public static void createMasterTicket(javax.servlet.http.HttpServletRequest request)
                               throws LoginException
Deprecated. master ticket is creted by the system startup


createTicket

public static void createTicket(javax.servlet.http.HttpServletRequest request)
                         throws LoginException,
                                AccessDeniedException,
                                RepositoryException

create user ticket and set ACL (user + group) in the session


createUsersRepositoryTicket

public static void createUsersRepositoryTicket(javax.servlet.http.HttpServletRequest request)
                                        throws LoginException,
                                               AccessDeniedException,
                                               RepositoryException

create user ticket and set ACL (user + group) in the session


createRolesRepositoryTicket

public static void createRolesRepositoryTicket(javax.servlet.http.HttpServletRequest request)
                                        throws LoginException,
                                               AccessDeniedException,
                                               RepositoryException

create user ticket and set ACL (user + group) in the session


getUserNode

public static Node getUserNode(javax.servlet.http.HttpServletRequest request)
                        throws LoginException,
                               AccessDeniedException,
                               RepositoryException

isValidSession

public static boolean isValidSession(javax.servlet.http.HttpServletRequest request)

updateACL

private static void updateACL(Node userNode,
                              java.util.ArrayList userACL,
                              int type)

Adds user acl of the specified user to the given userACL


updateRolesACL

private static void updateRolesACL(Node userNode,
                                   java.util.ArrayList groupACL)

Adds group acl of the specified user to the given groupACL