Java ExecutionContext.getHandler方法代码示例

import net.sourceforge.stripes.controller.ExecutionContext; //导入方法依赖的package包/类
public Resolution intercept(ExecutionContext context) throws Exception {
    logger.debug("Retrieving Stripes objects");
    ActionBeanContext actionContext = context.getActionBeanContext();
    ActionBean actionBean = context.getActionBean();
    Method handler = context.getHandler();

    logger.debug("Retrieving Servlet API objects");
    HttpServletRequest request = actionContext.getRequest();

    Dispatch dispatch = DispatcherUtil.getDispatch(request);

    if(SecurityLogic.isAllowed(request, dispatch, actionBean, handler)) {
        logger.debug("Security check passed.");
        return context.proceed();
    } else {
        return new ForbiddenAccessResolution();
    }
}
 

import net.sourceforge.stripes.controller.ExecutionContext; //导入方法依赖的package包/类
public Resolution intercept(ExecutionContext context) throws Exception {
    ActionBean actionBean = context.getActionBean();
    Method handler = context.getHandler();

    logger.debug("Checking guards on {}", handler);
    if(ButtonsLogic.doGuardsPass(actionBean, handler)) {
        return context.proceed();
    } else {
        logger.warn("Operation not permitted. Method: " + context.getHandler());
        if(actionBean instanceof Guarded) {
            return ((Guarded) actionBean).guardsFailed(handler);
        } else {
            return new ErrorResolution(CONFLICT);
        }
    }
}
 

import net.sourceforge.stripes.controller.ExecutionContext; //导入方法依赖的package包/类
public Resolution intercept(ExecutionContext context) throws Exception {
    if(context.getHandler() != null && context.getHandler().isAnnotationPresent(ControlsCache.class)) {
        return context.proceed();
    }
    HttpServletResponse response = context.getActionBeanContext().getResponse();
    // Avoid caching of dynamic pages
    //HTTP 1.0
    response.setHeader(ServletConstants.HTTP_PRAGMA, ServletConstants.HTTP_PRAGMA_NO_CACHE);
    response.setDateHeader(ServletConstants.HTTP_EXPIRES, 0);

    //HTTP 1.1
    response.addHeader(ServletConstants.HTTP_CACHE_CONTROL, ServletConstants.HTTP_CACHE_CONTROL_NO_CACHE);
    response.addHeader(ServletConstants.HTTP_CACHE_CONTROL, ServletConstants.HTTP_CACHE_CONTROL_NO_STORE);
    //response.addHeader(ServletConstants.HTTP_CACHE_CONTROL, ServletConstants.HTTP_CACHE_CONTROL_MUST_REVALIDATE);
    //response.addHeader(ServletConstants.HTTP_CACHE_CONTROL, ServletConstants.HTTP_CACHE_CONTROL_MAX_AGE + 0);

    return context.proceed();
}
 

import net.sourceforge.stripes.controller.ExecutionContext; //导入方法依赖的package包/类
public void assertAuthorized(final ExecutionContext context) throws AuthorizationException {
    super.assertAuthorized(new MethodInvocation() {
        @Override
        public Object proceed() throws Throwable {
            return null;
        }

        @Override
        public Method getMethod() {
            return context.getHandler();
        }

        @Override
        public Object[] getArguments() {
            return new Object[0];
        }

        @Override
        public Object getThis() {
            return context.getActionBean();
        }
    });
}
 

import net.sourceforge.stripes.controller.ExecutionContext; //导入方法依赖的package包/类
/**
 * Determine if the security manager allows access.
 * The return value of this method is the same as the result of
 * {@link SecurityManager#getAccessAllowed(ActionBean,Method) getAccessAllowed(ActionBean, Method)}
 * of the current security manager, unless there is nu security manager (in which case the event is allowed).
 *
 * @param executionContext the current execution context
 * @return whether or not the security manager allows access, if a decision can be made
 */
protected Boolean getAccessAllowed(ExecutionContext executionContext)
{
	LOG.debug("Checking access for " + executionContext + " at " + executionContext.getLifecycleStage());

	Boolean accessAllowed;
	if (securityManager == null)
	{
		LOG.debug("There is no security manager, so access is allowed by default.");
		accessAllowed = true;
	}
	else
	{
		ActionBean actionBean = executionContext.getActionBean();
		Method handler = executionContext.getHandler();
		accessAllowed = securityManager.getAccessAllowed(actionBean, handler);
		LOG.debug("Security manager returned access allowed: " + accessAllowed);
	}

	return accessAllowed;
}
 

import net.sourceforge.stripes.controller.ExecutionContext; //导入方法依赖的package包/类
public Resolution intercept(ExecutionContext context) throws Exception {
    logger.debug("Retrieving Stripes objects");
    ActionBean actionBean = context.getActionBean();
    Method handler = context.getHandler();

    logger.debug("Checking guards on {}", handler);
    if(ButtonsLogic.doGuardsPass(actionBean, handler)) {
        return context.proceed();
    } else {
        logger.warn("Operation not permitted.");
        return new ErrorResolution(CONFLICT);
    }
}
 

import net.sourceforge.stripes.controller.ExecutionContext; //导入方法依赖的package包/类
public Resolution intercept(ExecutionContext context) throws Exception {
    logger.debug("Retrieving Stripes objects");
    ActionBeanContext actionContext = context.getActionBeanContext();
    ActionBean actionBean = context.getActionBean();
    Method handler = context.getHandler();

    logger.debug("Retrieving Servlet API objects");
    HttpServletRequest request = actionContext.getRequest();

    Subject subject = SecurityUtils.getSubject();

    if (!SecurityLogic.satisfiesRequiresAdministrator(request, actionBean, handler)) {
        return new ForbiddenAccessResolution();
    }

    logger.debug("Checking page permissions");
    boolean isNotAdmin = !SecurityLogic.isAdministrator(request);
    if (isNotAdmin) {
        ServletContext servletContext = context.getActionBeanContext().getServletContext();
        Configuration configuration = (Configuration) servletContext.getAttribute(BaseModule.PORTOFINO_CONFIGURATION);
        Permissions permissions;
        Dispatch dispatch = DispatcherUtil.getDispatch(request);
        String resource;
        boolean allowed;
        if(dispatch != null) {
            logger.debug("The protected resource is a page action");
            resource = dispatch.getLastPageInstance().getPath();
            allowed = SecurityLogic.hasPermissions(configuration, dispatch, subject, handler);
        } else {
            logger.debug("The protected resource is a plain Stripes ActionBean");
            resource = request.getRequestURI();
            permissions = new Permissions();
            allowed = SecurityLogic.hasPermissions
                    (configuration, permissions, subject, handler, actionBean.getClass());
        }
        if(!allowed) {
            logger.info("Access to {} is forbidden", resource);
            return new ForbiddenAccessResolution();
        }
    }

    logger.debug("Security check passed.");
    return context.proceed();
}