Java PermissionDeniedException类代码示例

import com.google.gerrit.common.errors.PermissionDeniedException; //导入依赖的package包/类
@Override
protected void run() throws Failure {
  try {
    checkPermission();

    final CiQueryShell shell = factory.create(in, out);
    shell.setOutputFormat(format);
    if (query != null) {
      shell.execute(query);
    } else {
      shell.run();
    }
  } catch (PermissionDeniedException err) {
    throw new UnloggedFailure("fatal: " + err.getMessage());
  }
}
 

import com.google.gerrit.common.errors.PermissionDeniedException; //导入依赖的package包/类
protected abstract T updateProjectConfig(
ProjectConfig config, MetaDataUpdate md, boolean parentProjectUpdate)
throws IOException, NoSuchProjectException, ConfigInvalidException, OrmException,
    PermissionDeniedException, PermissionBackendException;
 

import com.google.gerrit.common.errors.PermissionDeniedException; //导入依赖的package包/类
@Override
public Response<ChangeInfo> apply(ProjectResource rsrc, ProjectAccessInput input)
    throws PermissionBackendException, PermissionDeniedException, IOException,
        ConfigInvalidException, OrmException, InvalidNameException, UpdateException,
        RestApiException {
  PermissionBackend.ForProject forProject =
      permissionBackend.user(rsrc.getUser()).project(rsrc.getNameKey());
  if (!check(forProject, ProjectPermission.READ_CONFIG)) {
    throw new PermissionDeniedException(RefNames.REFS_CONFIG + " not visible");
  }
  if (!check(forProject, ProjectPermission.WRITE_CONFIG)) {
    try {
      forProject.ref(RefNames.REFS_CONFIG).check(RefPermission.CREATE_CHANGE);
    } catch (AuthException denied) {
      throw new PermissionDeniedException("cannot create change for " + RefNames.REFS_CONFIG);
    }
  }

  MetaDataUpdate.User metaDataUpdateUser = metaDataUpdateFactory.get();
  List<AccessSection> removals = setAccess.getAccessSections(input.remove);
  List<AccessSection> additions = setAccess.getAccessSections(input.add);

  Project.NameKey newParentProjectName =
      input.parent == null ? null : new Project.NameKey(input.parent);

  try (MetaDataUpdate md = metaDataUpdateUser.create(rsrc.getNameKey())) {
    ProjectConfig config = ProjectConfig.read(md);

    setAccess.validateChanges(config, removals, additions);
    setAccess.applyChanges(config, removals, additions);
    try {
      setAccess.setParentName(
          rsrc.getUser().asIdentifiedUser(),
          config,
          rsrc.getNameKey(),
          newParentProjectName,
          false);
    } catch (AuthException e) {
      throw new IllegalStateException(e);
    }

    md.setMessage("Review access change");
    md.setInsertChangeId(true);
    Change.Id changeId = new Change.Id(seq.nextChangeId());
    RevCommit commit =
        config.commitToNewRef(
            md, new PatchSet.Id(changeId, Change.INITIAL_PATCH_SET_ID).toRefName());

    try (ObjectInserter objInserter = md.getRepository().newObjectInserter();
        ObjectReader objReader = objInserter.newReader();
        RevWalk rw = new RevWalk(objReader);
        BatchUpdate bu =
            updateFactory.create(db.get(), rsrc.getNameKey(), rsrc.getUser(), TimeUtil.nowTs())) {
      bu.setRepository(md.getRepository(), rw, objInserter);
      ChangeInserter ins = newInserter(changeId, commit);
      bu.insertChange(ins);
      bu.execute();
      return Response.created(jsonFactory.noOptions().format(ins.getChange()));
    }
  }
}
 

import com.google.gerrit.common.errors.PermissionDeniedException; //导入依赖的package包/类
/**
 * Assert that the current user is permitted to perform raw queries.
 * <p>
 * As the @RequireCapability guards at various entry points of internal
 * commands implicitly add administrators (which we want to avoid), we also
 * check permissions within QueryShell and grant access only to those who
 * canPerformRawQuery, regardless of whether they are administrators or not.
 *
 * @throws PermissionDeniedException
 */
private void checkPermission() throws PermissionDeniedException {
  if (!currentUser.getCapabilities().canAccessDatabase()) {
    throw new PermissionDeniedException(String.format(
        "%s does not have \"Access Database\" capability.",
        currentUser.getUserName()));
  }
}