Java Session.getRoles方法代码示例

import org.apache.directory.fortress.core.model.Session; //导入方法依赖的package包/类
/**
 * This loads the set of user's activated roles into a local page variable.  It is used for deactivate combo
 * box.
 */
private void loadActivatedRoleSets()
{
    Session session = SecUtils.getSession( this );
    if ( session != null )
    {
        LOG.info( "get assigned roles for user: " + session.getUserId() );
        try
        {
            inactiveRoles = reviewMgr.assignedRoles( session.getUser() );
            // remove inactiveRoles already activated:
            for ( UserRole activatedRole : session.getRoles() )
            {
                inactiveRoles.remove( activatedRole );
            }
            LOG.info( "user: " + session.getUserId() + " inactiveRoles for activate list: " + inactiveRoles );
            activeRoles = session.getRoles();
        }
        catch ( org.apache.directory.fortress.core.SecurityException se )
        {
            String error = "SecurityException getting assigned inactiveRoles for user: " + session.getUserId();
            LOG.error( error );
        }
    }
}
 

import org.apache.directory.fortress.core.model.Session; //导入方法依赖的package包/类
/**
 * Call the AccessMgr createSession API passing a single Role for activation.  Successful RBAC Session should
 * contains same Role activated.
 *
 * @param userId  Case insensitive userId.
 * @param password Password is case sensitive, clear text but is stored in directory as hashed value.
 * @param role contains role name of Role targeted for Activation.
 */
public static void createSessionsWithRole(String userId, String password, String role)
{
    String szLocation = ".createSessionsWithRole";
    try
    {
        // Instantiate the AccessMgr implementation which perform runtime RBAC operations.
        AccessMgr accessMgr = AccessMgrFactory.createInstance(TestUtils.getContext());

        // The User entity is used to pass data into the createSession API.
        User user = new User(userId, password, role);

        // The API will authenticate the User password, evaluate password policies and perform Role activations.
        Session session = accessMgr.createSession(user, false);

        // createSession will throw SecurityException if fails thus the Session should never be null.
        assertNotNull(session);

        // do some validations
        // Get the User's activated Roles.
        List<UserRole> sessRoles = session.getRoles();
        assertTrue(szLocation + " userId [" + userId + "]  with roles failed role check", sessRoles.contains(new UserRole(role)));
        LOG.info(szLocation + "  userId [" + userId + "] successful");
    }
    catch (SecurityException ex)
    {
        LOG.error(szLocation + " userId [" + userId + "]  caught SecurityException rc=" + ex.getErrorId() + ", msg=" + ex.getMessage(), ex);
        fail(ex.getMessage());
    }
}
 

import org.apache.directory.fortress.core.model.Session; //导入方法依赖的package包/类
/**
 * @param msg
 * @param uArray
 * @param rArray
 */
public static void createSessions( String msg, String[][] uArray, String[][] rArray )
{
    LogUtil.logIt( msg );
    try
    {
        AccessMgr accessMgr = AccessMgrFactory.createInstance( TestUtils.getContext() );
        for ( String[] usr : uArray )
        {
            User user = UserTestData.getUser( usr );
            Session session = accessMgr.createSession( user, false );
            assertNotNull( session );
            String userId = accessMgr.getUserId( session );
            assertTrue( CLS_NM + ".createSessions failed compare found userId [" + userId + "] valid userId ["
                + UserTestData.getUserId( usr ) + "]", userId.equalsIgnoreCase( UserTestData.getUserId( usr ) ) );
            UserTestData.assertEquals( user, usr );
            List<UserRole> uRoles = session.getRoles();
            assertNotNull( uRoles );
            assertEquals( CLS_NM + ".createSessions user role check failed list size user [" + user.getUserId()
                + "]", rArray.length, uRoles.size() );
            for ( String[] rle : rArray )
            {
                assertTrue( CLS_NM + ".createSessions failed role search USER [" + user.getUserId() + "] ROLE1 ["
                    + RoleTestData.getName( rle ) + "] should be present",
                    uRoles.contains( RoleTestData.getUserRole( UserTestData.getUserId( usr ), rle ) ) );
            }

            // now try negative test case:
            try
            {
                User userBad = new User( user.getUserId(), "badpw" );
                accessMgr.createSession( userBad, false );
                fail( CLS_NM + ".createSessions failed negative test" );
            }
            catch ( SecurityException se )
            {
                assertTrue( CLS_NM + "createSessions excep id check", se.getErrorId() == GlobalErrIds.USER_PW_INVLD );
                // pass
            }
        }
        LOG.debug( "createSessions successful" );
    }
    catch ( SecurityException ex )
    {
        LOG.error(
            "createSessions: failed with SecurityException rc=" + ex.getErrorId() + ", msg="
                + ex.getMessage(), ex );
        fail( ex.getMessage() );
    }
}
 

import org.apache.directory.fortress.core.model.Session; //导入方法依赖的package包/类
/**
 * @param msg
 * @param uArray
 * @param rArray
 */
public static void createSessionsTrusted( String msg, String[][] uArray, String[][] rArray )
{
    LogUtil.logIt( msg );
    try
    {
        AccessMgr accessMgr = AccessMgrFactory.createInstance( TestUtils.getContext() );
        for ( String[] usr : uArray )
        {
            User user = UserTestData.getUser( usr );
            Session session = accessMgr.createSession( user, true );
            assertNotNull( session );
            String userId = accessMgr.getUserId( session );
            assertTrue( CLS_NM + ".createSessionsTrusted failed compare found userId [" + userId
                + "] valid userId [" + UserTestData.getUserId( usr ) + "]",
                userId.equalsIgnoreCase( UserTestData.getUserId( usr ) ) );
            UserTestData.assertEquals( user, usr );
            List<UserRole> uRoles = session.getRoles();
            assertNotNull( uRoles );
            assertEquals(
                CLS_NM + ".createSessionsTrusted user role check failed list size user [" + user.getUserId() + "]",
                rArray.length, uRoles.size() );
            for ( String[] rle : rArray )
            {
                assertTrue( CLS_NM + ".createSessionsTrusted failed role search USER [" + user.getUserId()
                    + "] ROLE1 [" + RoleTestData.getName( rle ) + "] should be present",
                    uRoles.contains( RoleTestData.getUserRole( UserTestData.getUserId( usr ), rle ) ) );
            }

            // now try negative test case:
            try
            {
                User badUser = new User( user.getUserId() + "wrong" );
                accessMgr.createSession( badUser, true );
                fail( CLS_NM + ".createSessionsTrusted failed negative test" );
            }
            catch ( SecurityException se )
            {
                assertTrue( CLS_NM + "createSessionsTrusted excep id check",
                    se.getErrorId() == GlobalErrIds.USER_NOT_FOUND );
                // pass
            }
        }
        LOG.debug( "createSessionsTrusted successful" );
    }
    catch ( SecurityException ex )
    {
        LOG.error( "createSessionsTrusted: failed with SecurityException rc=" + ex.getErrorId()
            + ", msg=" + ex.getMessage(), ex );
        fail( ex.getMessage() );
    }
}
 

import org.apache.directory.fortress.core.model.Session; //导入方法依赖的package包/类
/**
 *
 * @param msg
 * @param uArray
 * @param dsdArray
 */
public static void createSessionsDSD( String msg, String[][] uArray, String[][] dsdArray )
{
    LogUtil.logIt( msg );
    try
    {
        AccessMgr accessMgr = AccessMgrFactory.createInstance( TestUtils.getContext() );
        int i = 0;
        for ( String[] usr : uArray )
        {
            SDSet dsd = RoleTestData.getSDSet( dsdArray[i++] );
            User user = UserTestData.getUser( usr );
            Session session = accessMgr.createSession( user, false );
            assertNotNull( session );
            String userId = accessMgr.getUserId( session );
            assertTrue( CLS_NM + ".createSessionsDSD failed compare found userId [" + userId + "] valid userId ["
                + UserTestData.getUserId( usr ) + "]", userId.equalsIgnoreCase( UserTestData.getUserId( usr ) ) );
            UserTestData.assertEquals( user, usr );
            List<UserRole> uRoles = session.getRoles();
            assertNotNull( uRoles );
            // was the number of members in test DSD greater than the cardinality?
            if ( dsd.getMembers().size() < dsd.getCardinality() )
            {
                assertEquals(
                    CLS_NM + ".createSessionsDSD role list size check failed user-role user [" + user.getUserId()
                        + "]", dsd.getMembers().size(), uRoles.size() );
            }
            else
            {
                assertEquals(
                    CLS_NM + ".createSessionsDSD role cardinality check failed user-role list size user ["
                        + user.getUserId() + "] dsd set [" + dsd.getName() + "] card [" + dsd.getCardinality()
                        + "] listsize [" + uRoles.size() + "]", dsd.getCardinality() - 1, uRoles.size() );
            }
        }
        LOG.debug( "createSessionsDSD successful" );
    }
    catch ( SecurityException ex )
    {
        LOG.error( "createSessionsDSD: failed with SecurityException rc=" + ex.getErrorId() + ", msg="
            + ex.getMessage(), ex );
        fail( ex.getMessage() );
    }
}
 

import org.apache.directory.fortress.core.model.Session; //导入方法依赖的package包/类
/**
 * Calls AccessMgr createSession API.  Will check to ensure the RBAC Session contains the expected number of Roles
 * activated.
 *
 * @param userId  Case insensitive userId.
 * @param password Password is case sensitive, clear text but is stored in directory as hashed value.
 * @param expectedRoles integer contains the expected number of Roles in the Session.
 */
public static void createSession(String userId, String password, int expectedRoles)
{
    String szLocation = ".createSession";
    try
    {
        // Instantiate the AccessMgr implementation which perform runtime RBAC operations.
        AccessMgr accessMgr = AccessMgrFactory.createInstance(TestUtils.getContext());

        // The User entity is used to pass data into the createSession API.
        User user = new User(userId, password);

        // This API will return a Session object that contains the User's activated Roles and other info.
        Session session = accessMgr.createSession(user, false);

        // createSession will throw SecurityException if fails thus the Session should never be null.
        assertNotNull(session);

        // Pull the userId from the Session.
        String sessUserId = accessMgr.getUserId(session);
        assertTrue(szLocation + " failed compare found userId in session [" + sessUserId + "] valid userId [" + userId + "]", userId.equalsIgnoreCase(sessUserId));

        // Get the User's activated Roles.
        List<UserRole> uRoles = session.getRoles();

        // do some validations
        assertNotNull(uRoles);
        assertEquals(szLocation + " user role check failed list size user [" + user.getUserId() + "]", expectedRoles, uRoles.size());
        // now try negative test case:
        try
        {
            // this better fail
            User userBad = new User(user.getUserId(), "badpw");

            // The API will authenticate the User password, evaluate password policies and perform Role activations.
            accessMgr.createSession(userBad, false);
            fail(szLocation + " userId [" + userId + "]  failed negative test");
        }
        catch (PasswordException pe)
        {
            assertTrue(szLocation + " userId [" + userId + "]  excep id check", pe.getErrorId() == GlobalErrIds.USER_PW_INVLD);
            // pass
        }
        catch (SecurityException se)
        {
            fail(szLocation + " userId [" + userId + "]  failed with unexpected errorId" + se.getErrorId() + " msg=" + se.getMessage());
            // pass
        }
        LOG.info(szLocation + " userId [" + userId + "] successful");
    }
    catch (SecurityException ex)
    {
        LOG.error(szLocation + " userId [" + userId + "]  caught SecurityException rc=" + ex.getErrorId() + ", msg=" + ex.getMessage(), ex);
        fail(ex.getMessage());
    }
}