/
PermissionsValidator.java
71 lines (64 loc) · 2.38 KB
/
PermissionsValidator.java
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
/*
* Copyright (c) 2015-2016 LabKey Corporation
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
package org.labkey.core.security.validators;
import org.labkey.api.admin.sitevalidation.SiteValidationProvider;
import org.labkey.api.admin.sitevalidation.SiteValidationResultList;
import org.labkey.api.data.Container;
import org.labkey.api.security.User;
import org.labkey.api.security.permissions.Permission;
import org.labkey.api.security.roles.EditorRole;
import org.labkey.api.security.roles.ReaderRole;
import java.util.Collections;
import java.util.HashSet;
import java.util.Set;
/**
* Validates appropriate container level permissions for the guest user.
*/
public class PermissionsValidator implements SiteValidationProvider
{
@Override
public String getName()
{
return "Permissions Validator";
}
@Override
public String getDescription()
{
return "Check that guest user permissions are set appropriately";
}
@Override
public boolean isSiteScope()
{
return false;
}
@Override
public SiteValidationResultList runValidation(Container c, User u)
{
SiteValidationResultList results = new SiteValidationResultList();
Set<Class<? extends Permission>> readerPermissions = new ReaderRole().getPermissions();
if (c.hasOneOf(User.guest, readerPermissions))
{
results.addInfo("Guest user has read permission for folder.");
}
Set<Class<? extends Permission>> editorPermissions = new HashSet<>(new EditorRole().getPermissions());
editorPermissions.removeAll(readerPermissions);
if (c.hasOneOf(User.guest, Collections.unmodifiableSet(editorPermissions)))
{
results.addWarn("Guest user has edit permission for folder.");
}
return results.nullIfEmpty();
}
}