Commit
… and present in the DB Signed-off-by: dseurotech <[email protected]>
- Loading branch information
There are no files selected for viewing
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,143 @@ | ||
| /******************************************************************************* | ||
| * Copyright (c) 2016, 2022 Eurotech and/or its affiliates and others | ||
| * | ||
| * This program and the accompanying materials are made | ||
| * available under the terms of the Eclipse Public License 2.0 | ||
| * which is available at https://www.eclipse.org/legal/epl-2.0/ | ||
| * | ||
| * SPDX-License-Identifier: EPL-2.0 | ||
| * | ||
| * Contributors: | ||
| * Eurotech - initial API and implementation | ||
| *******************************************************************************/ | ||
| package org.eclipse.kapua.service.authorization.domain.shiro; | ||
|
|
||
| import org.eclipse.kapua.KapuaException; | ||
| import org.eclipse.kapua.commons.populators.DataPopulator; | ||
| import org.eclipse.kapua.model.domain.Actions; | ||
| import org.eclipse.kapua.model.domain.Domain; | ||
| import org.eclipse.kapua.service.authorization.access.AccessPermissionRepository; | ||
| import org.eclipse.kapua.service.authorization.domain.DomainRepository; | ||
| import org.eclipse.kapua.service.authorization.role.RolePermissionRepository; | ||
| import org.eclipse.kapua.storage.TxContext; | ||
| import org.eclipse.kapua.storage.TxManager; | ||
| import org.slf4j.Logger; | ||
| import org.slf4j.LoggerFactory; | ||
|
|
||
| import javax.inject.Inject; | ||
| import java.util.EnumSet; | ||
| import java.util.List; | ||
| import java.util.Map; | ||
| import java.util.Set; | ||
|
|
||
| public class DomainsAligner implements DataPopulator { | ||
| private final TxManager txManager; | ||
| private final DomainRepository domainRepository; | ||
| private final AccessPermissionRepository accessPermissionRepository; | ||
| private final RolePermissionRepository rolePermissionRepository; | ||
| private final Set<Domain> knownDomains; | ||
| private final Logger logger = LoggerFactory.getLogger(this.getClass()); | ||
|
Check warning on line 39 in service/security/shiro/src/main/java/org/eclipse/kapua/service/authorization/domain/shiro/DomainsAligner.java
|
||
|
|
||
| @Inject | ||
| public DomainsAligner(TxManager txManager, | ||
| DomainRepository domainRepository, | ||
| AccessPermissionRepository accessPermissionRepository, RolePermissionRepository rolePermissionRepository, | ||
| Set<Domain> knownDomains) { | ||
| this.txManager = txManager; | ||
| this.domainRepository = domainRepository; | ||
| this.accessPermissionRepository = accessPermissionRepository; | ||
| this.rolePermissionRepository = rolePermissionRepository; | ||
| this.knownDomains = knownDomains; | ||
| } | ||
|
Check warning on line 51 in service/security/shiro/src/main/java/org/eclipse/kapua/service/authorization/domain/shiro/DomainsAligner.java
|
||
|
|
||
| @Override | ||
| public void populate() { | ||
| // logger.info("Domain alignment commencing. Found {} domain declarations in wiring", knownDomains.size()); | ||
| // final Map<String, Domain> knownDomainsByName = knownDomains | ||
| // .stream() | ||
| // .collect(Collectors.toMap(d -> d.getName(), d -> d)); | ||
| // final List<String> declaredDomainsNotInDb = new ArrayList<>(knownDomainsByName.keySet()); | ||
| // try { | ||
| // KapuaSecurityUtils.doPrivileged(() -> { | ||
| // txManager.execute(tx -> { | ||
| // final List<org.eclipse.kapua.service.authorization.domain.Domain> dbDomainEntries = domainRepository.query(tx, new DomainQueryImpl()).getItems(); | ||
| // logger.info("Found {} domain declarations in database", dbDomainEntries.size()); | ||
| // | ||
| // for (final org.eclipse.kapua.service.authorization.domain.Domain dbDomainEntry : dbDomainEntries) { | ||
| // if (!knownDomainsByName.containsKey(dbDomainEntry.getName())) { | ||
| // //Leave it be. As we share the database with other components, it might have been created by such components and be hidden from us | ||
| // logger.warn("Domain '{}' is only present in the database but has no current declaration! Details: {}", dbDomainEntry.getName(), dbDomainEntry.getDomain()); | ||
| // continue; | ||
| // } | ||
| // //Good news, it's both declared in wiring and present in the db! | ||
| // declaredDomainsNotInDb.remove(dbDomainEntry.getName()); | ||
| // //Trigger fetch of Actions collection from db, otherwise the toString would not show the details | ||
| // dbDomainEntry.getActions(); | ||
| // final Domain wiredDomain = knownDomainsByName.get(dbDomainEntry.getName()); | ||
| // if (dbDomainEntry.getDomain().equals(wiredDomain)) { | ||
| // //We are happy! | ||
| // logger.debug("Domain '{}' is ok: {}", dbDomainEntry.getName(), dbDomainEntry.getDomain()); | ||
| // continue; | ||
| // } | ||
| // //Align them! | ||
| // alignDomains(tx, dbDomainEntry, wiredDomain); | ||
| // } | ||
| // createMissingDomains(tx, declaredDomainsNotInDb, knownDomainsByName); | ||
| // logger.info("Domain alignment complete!"); | ||
| // return null; | ||
| // }); | ||
| // }); | ||
| // } catch (KapuaException e) { | ||
| // throw new RuntimeException(e); | ||
| // } | ||
| } | ||
|
Check warning on line 93 in service/security/shiro/src/main/java/org/eclipse/kapua/service/authorization/domain/shiro/DomainsAligner.java
|
||
|
|
||
| private void createMissingDomains(TxContext tx, List<String> declaredDomainsNotInDb, Map<String, Domain> knownDomainsByName) throws KapuaException { | ||
| if (declaredDomainsNotInDb.size() > 0) { | ||
| logger.info("Found {} declared domains that have no counterpart in the database!", declaredDomainsNotInDb.size()); | ||
|
Check warning on line 97 in service/security/shiro/src/main/java/org/eclipse/kapua/service/authorization/domain/shiro/DomainsAligner.java
|
||
| //Create wired domains not present in the db | ||
| for (final String declaredOnlyName : declaredDomainsNotInDb) { | ||
| final Domain expected = knownDomainsByName.get(declaredOnlyName); | ||
| createDomainInDb(tx, expected); | ||
| } | ||
|
Check warning on line 102 in service/security/shiro/src/main/java/org/eclipse/kapua/service/authorization/domain/shiro/DomainsAligner.java
|
||
| } | ||
| } | ||
|
Check warning on line 104 in service/security/shiro/src/main/java/org/eclipse/kapua/service/authorization/domain/shiro/DomainsAligner.java
|
||
|
|
||
| private void createDomainInDb(TxContext tx, Domain expected) throws KapuaException { | ||
| logger.info("To be added: {}", expected); | ||
| final org.eclipse.kapua.service.authorization.domain.Domain newEntity = new DomainImpl(); | ||
| newEntity.setName(expected.getName()); | ||
| newEntity.setActions(expected.getActions()); | ||
| newEntity.setGroupable(expected.getGroupable()); | ||
| newEntity.setServiceName(expected.getServiceName()); | ||
| domainRepository.create(tx, newEntity); | ||
| } | ||
|
Check warning on line 114 in service/security/shiro/src/main/java/org/eclipse/kapua/service/authorization/domain/shiro/DomainsAligner.java
|
||
|
|
||
| private void alignDomains(TxContext tx, org.eclipse.kapua.service.authorization.domain.Domain dbDomainEntry, Domain wiredDomain) throws KapuaException { | ||
| logger.error("Domain mismatch for name '{}'! Details:" + | ||
|
Check warning on line 117 in service/security/shiro/src/main/java/org/eclipse/kapua/service/authorization/domain/shiro/DomainsAligner.java
|
||
| "\n\tDb entry: '{}', " + | ||
| "\n\texpected: '{}'", | ||
| dbDomainEntry.getName(), | ||
| dbDomainEntry.getDomain(), | ||
|
Check warning on line 121 in service/security/shiro/src/main/java/org/eclipse/kapua/service/authorization/domain/shiro/DomainsAligner.java
|
||
| wiredDomain); | ||
|
|
||
| final EnumSet<Actions> actionsInExcessOnTheDb = EnumSet.copyOf(dbDomainEntry.getActions()); | ||
| actionsInExcessOnTheDb.removeAll(wiredDomain.getActions()); | ||
| removeActionsInExcess(tx, dbDomainEntry.getName(), actionsInExcessOnTheDb); | ||
|
Check warning on line 126 in service/security/shiro/src/main/java/org/eclipse/kapua/service/authorization/domain/shiro/DomainsAligner.java
|
||
| //Remove the action from the domain. Thank you JPA for autoupdating the entity on transaction close | ||
| dbDomainEntry.getActions().removeAll(actionsInExcessOnTheDb); | ||
|
Check warning on line 128 in service/security/shiro/src/main/java/org/eclipse/kapua/service/authorization/domain/shiro/DomainsAligner.java
|
||
|
|
||
| final EnumSet<Actions> actionsMissingInTheDb = EnumSet.copyOf(wiredDomain.getActions()); | ||
| actionsMissingInTheDb.removeAll(dbDomainEntry.getActions()); | ||
|
Check warning on line 131 in service/security/shiro/src/main/java/org/eclipse/kapua/service/authorization/domain/shiro/DomainsAligner.java
|
||
| //Add the actions to the domain. Thank you JPA for autoupdating the entity on transaction close | ||
| dbDomainEntry.getActions().addAll(actionsMissingInTheDb); | ||
| } | ||
|
Check warning on line 134 in service/security/shiro/src/main/java/org/eclipse/kapua/service/authorization/domain/shiro/DomainsAligner.java
|
||
|
|
||
| private void removeActionsInExcess(TxContext tx, String domainName, EnumSet<Actions> actionsInExcessOnTheDb) throws KapuaException { | ||
| for (final Actions actionToDelete : actionsInExcessOnTheDb) { | ||
| logger.info("Removing action '{}' from domain '{}'", actionToDelete, domainName); | ||
| accessPermissionRepository.deleteAllByDomainAndAction(tx, domainName, actionToDelete); | ||
| rolePermissionRepository.deleteAllByDomainAndAction(tx, domainName, actionToDelete); | ||
| } | ||
| } | ||
|
Check warning on line 142 in service/security/shiro/src/main/java/org/eclipse/kapua/service/authorization/domain/shiro/DomainsAligner.java
|
||
| } | ||