MQDestinationPermission.java

/*
 * Copyright (c) 2000, 2017 Oracle and/or its affiliates. All rights reserved.
 * Copyright (c) 2021, 2022 Contributors to the Eclipse Foundation
 * Copyright (c) 2020 Payara Services Ltd.
 *
 * This program and the accompanying materials are made available under the
 * terms of the Eclipse Public License v. 2.0, which is available at
 * http://www.eclipse.org/legal/epl-2.0.
 *
 * This Source Code may also be made available under the following Secondary
 * Licenses when the conditions for such availability set forth in the
 * Eclipse Public License v. 2.0 are satisfied: GNU General Public License,
 * version 2 with the GNU Classpath Exception, which is available at
 * https://www.gnu.org/software/classpath/license.html.
 *
 * SPDX-License-Identifier: EPL-2.0 OR GPL-2.0 WITH Classpath-exception-2.0
 */

package com.sun.messaging.jmq.auth.jaas;

import java.util.StringTokenizer;
import java.io.ObjectInputStream;
import java.io.IOException;
import java.io.ObjectOutputStream;
import java.security.Permission;

/**
 *
 * MQ destination permission class
 */

public class MQDestinationPermission extends Permission {

    private static final long serialVersionUID = -2435224016059811024L;

    private static final int PRODUCE = 0x1;
    private static final int CONSUME = 0x2;
    private static final int BROWSE = 0x4;
    private static final int NONE = 0x0;

    private transient boolean wildcard = false;
    private transient boolean isQueue = false;
    private transient String destName = null;
    private transient int mask = NONE;

    private String actions = null;

    public MQDestinationPermission(String name, String actions) {
        super(name);
        init(name, actions);
    }

    private void init(String name, String actions) {
        if (name == null) {
            throw new NullPointerException("name null");
        }

        if (name.trim().startsWith(PermissionFactory.DEST_QUEUE_PREFIX)) {
            isQueue = true;
            destName = name.trim().substring(PermissionFactory.DEST_QUEUE_PREFIX.length()).trim();
        } else if (name.trim().startsWith(PermissionFactory.DEST_TOPIC_PREFIX)) {
            isQueue = false;
            destName = name.trim().substring(PermissionFactory.DEST_TOPIC_PREFIX.length()).trim();
        } else {
            throw new IllegalArgumentException("invalid name " + name);
        }

        int len = destName.length();
        if (len == 1 && destName.equals("*")) {
            wildcard = true;
        }

        if (actions == null) {
            throw new NullPointerException("actions null");
        }

        mask = computeMask(actions);

    }

    public int getMask() {
        return mask;
    }

    private int computeMask(String actions) {

        int mask = NONE;

        StringTokenizer token = new StringTokenizer(actions, ",", false);
        String t = null;
        while (token.hasMoreElements()) {
            t = token.nextToken().trim().toLowerCase();

            int i = 0;
            while (i < t.length()) {
                if (!Character.isSpaceChar(t.charAt(i++))) {
                    break;
                }
            }
            if (i > 0) {
                t = t.substring(i - 1);
            }

            i = t.length() - 1;
            while (i != -1) {
                if (!Character.isSpaceChar(t.charAt(i))) {
                    break;
                }
                i--;
            }
            if (i < t.length() - 1) {
                t = t.substring(0, i + 1);
            }

            if (t.equals(PermissionFactory.ACTION_PRODUCE)) {
                mask |= PRODUCE;
            } else if (t.equals(PermissionFactory.ACTION_CONSUME)) {
                mask |= CONSUME;
            } else if (t.equals(PermissionFactory.ACTION_BROWSE)) {
                mask |= BROWSE;
            }
        }
        if (mask == NONE) {
            throw new IllegalArgumentException("invalid actions " + actions);
        }

        return mask;
    }

    @Override
    public boolean implies(Permission p) {
        if (!(p instanceof MQDestinationPermission)) {
            return false;
        }

        MQDestinationPermission that = (MQDestinationPermission) p;

        if (this.isQueue != that.isQueue) {
            return false;
        }

        return ((this.mask & that.mask) == that.mask) && impliesDestName(that);

    }

    private boolean impliesDestName(MQDestinationPermission that) {

        if (this.wildcard) {
            return true;
        }
        if (that.wildcard) {
            return false;
        }

        return this.destName.equals(that.destName);
    }

    @Override
    public boolean equals(Object obj) {
        if (obj == this) {
            return true;
        }

        if (!(obj instanceof MQDestinationPermission)) {
            return false;
        }

        if (obj.getClass() != getClass()) {
            return false;
        }

        MQDestinationPermission that = (MQDestinationPermission) obj;

        return ((this.mask == that.mask) && (this.isQueue == that.isQueue) && (this.destName.equals(that.destName)));
    }

    @Override
    public int hashCode() {
        return this.getName().hashCode();
    }

    @Override
    public String getActions() {
        if (actions != null) {
            return actions;
        }

        StringBuilder s = new StringBuilder();
        boolean comma = false;

        if ((mask & PRODUCE) == PRODUCE) {
            comma = true;
            s.append(PermissionFactory.ACTION_PRODUCE);
        }
        if ((mask & CONSUME) == CONSUME) {
            if (comma) {
                s.append(',');
            }
            comma = true;
            s.append(PermissionFactory.ACTION_CONSUME);
        }
        if ((mask & BROWSE) == BROWSE) {
            if (comma) {
                s.append(',');
            }
            comma = true;
            s.append(PermissionFactory.ACTION_BROWSE);
        }

        return s.toString();
    }

    private void writeObject(ObjectOutputStream s) throws IOException {
        if (actions == null) {
            getActions();
        }
        s.defaultWriteObject();
    }

    private void readObject(ObjectInputStream s) throws IOException, ClassNotFoundException {
        s.defaultReadObject();
        init(getName(), actions);
    }
}