Examples of SecurityRolesMetaData


Examples of org.jboss.metadata.javaee.spec.SecurityRolesMetaData

            }
        }
        // @DeclareRoles
        final List<AnnotationInstance> declareRolesAnnotations = index.getAnnotations(declareRoles);
        if (declareRolesAnnotations != null && declareRolesAnnotations.size() > 0) {
            SecurityRolesMetaData securityRoles = metaData.getSecurityRoles();
            if (securityRoles == null) {
               securityRoles = new SecurityRolesMetaData();
               metaData.setSecurityRoles(securityRoles);
            }
            for (final AnnotationInstance annotation : declareRolesAnnotations) {
                if (annotation.value() == null) {
                    throw new DeploymentUnitProcessingException("@DeclareRoles needs to specify role names on " + annotation.target());
                }
                for (String role : annotation.value().asStringArray()) {
                    SecurityRoleMetaData sr = new SecurityRoleMetaData();
                    sr.setRoleName(role);
                    securityRoles.add(sr);
                }
            }
        }
        // @MultipartConfig
        final List<AnnotationInstance> multipartConfigAnnotations = index.getAnnotations(multipartConfig);
View Full Code Here

Examples of org.jboss.metadata.javaee.spec.SecurityRolesMetaData

                context.addConstraint(constraint);
            }
        }

        // Security roles
        SecurityRolesMetaData roles = metaData.getSecurityRoles();
        if (roles != null) {
            for (SecurityRoleMetaData value : roles) {
                context.addSecurityRole(value.getRoleName());
            }
        }
View Full Code Here

Examples of org.jboss.metadata.javaee.spec.SecurityRolesMetaData

            ROOT_LOGGER.trace("Using security domain: " + securityDomain + " for EJB " + ejbComponent.getComponentName());
        }
        final String runAs = securityMetaData.getRunAs();
        // TODO - We should do something with DeclaredRoles although it never has much meaning in JBoss AS
        final String runAsPrincipal = securityMetaData.getRunAsPrincipal();
        final SecurityRolesMetaData securityRoles = securityMetaData.getSecurityRoles();
        Set<String> extraRoles = null;
        if (securityRoles != null)
            extraRoles = securityRoles.getSecurityRoleNamesByPrincipal(runAsPrincipal);
        return new SecurityContextInterceptor(securityManager, securityDomain, runAs, runAsPrincipal, extraRoles);
    }
View Full Code Here

Examples of org.jboss.metadata.javaee.spec.SecurityRolesMetaData

                    }
                }

                // get extra roles from role-mapping
                List<SecurityRoleMetaData> list = jbossMetaData.getAssemblyDescriptor().getAny(SecurityRoleMetaData.class);
                SecurityRolesMetaData securityRoles = new SecurityRolesMetaData();
                if (list != null) {
                    for (SecurityRoleMetaData securityRoleMetaData : list) {
                        securityRoles.add(securityRoleMetaData);
                    }
                }
                componentConfiguration.setSecurityRoles(securityRoles);
                if (principal != null)
                    componentConfiguration.setRunAsPrincipal(principal);
View Full Code Here

Examples of org.jboss.metadata.javaee.spec.SecurityRolesMetaData

      assertEquals("A 2nd test of the resource-env-ref tag", resenv2.getDescriptions().value()[0].value());
      assertEquals("javax.jms.Queue", resenv2.getType());
      assertEquals("queue/mdbtest", resenv2.getJndiName());
      assertEquals("queue/mdbtest", resenv2.getMappedName());

      SecurityRolesMetaData secRoles = jbossWeb.getSecurityRoles();
      assertEquals(6, secRoles.size());
      SecurityRoleMetaData role1 = secRoles.get("AuthorizedUser");
      assertNotNull(role1);
      assertEquals("security-role1", role1.getId());
      assertEquals("AuthorizedUser", role1.getRoleName());
      assertEquals("An AuthorizedUser is one with a valid username and password", getDescription(role1.getDescriptions()));
      assertEquals(null, role1.getPrincipals());
      SecurityRoleMetaData role2 = secRoles.get("ServletUserRole");
      assertEquals("security-role2", role2.getId());
      assertEquals("ServletUserRole", role2.getRoleName());
      assertEquals("A role used by the UserInRoleServlet", getDescription(role2.getDescriptions()));
      assertEquals(null, role2.getPrincipals());
      SecurityRoleMetaData role3 = secRoles.get("InternalUser");
      assertEquals("security-role3", role3.getId());
      assertEquals("InternalUser", role3.getRoleName());
      assertEquals("InternalUser is private app role", getDescription(role3.getDescriptions()));
      assertEquals(null, role3.getPrincipals());
      SecurityRoleMetaData role4 = secRoles.get("ExtraRole1");
      assertEquals("security-role4", role4.getId());
      assertEquals("ExtraRole1", role4.getRoleName());
      assertEquals("ExtraRole1 is an extra role added to a run-as principal", getDescription(role4.getDescriptions()));
      assertEquals(set("UnsecureRunAsServletWithPrincipalNameAndRolesPrincipal"), role4.getPrincipals());
      SecurityRoleMetaData role5 = secRoles.get("ExtraRole2");
      assertEquals("security-role5", role5.getId());
      assertEquals("ExtraRole2", role5.getRoleName());
      assertEquals("ExtraRole2 is an extra role added to a run-as principal", getDescription(role5.getDescriptions()));
      assertEquals(set("ExtraRole2Principal1", "ExtraRole2Principal2"), role5.getPrincipals());
      SecurityRoleMetaData role6 = secRoles.get("NonExistentRole");
      assertEquals("security-role6", role6.getId());
      assertEquals("NonExistentRole", role6.getRoleName());
      assertEquals("Role that does not exist", getDescription(role6.getDescriptions()));
      assertEquals(null, role6.getPrincipals());
View Full Code Here

Examples of org.jboss.metadata.javaee.spec.SecurityRolesMetaData

   {
      // original
      JBoss50MetaData original = new JBoss50MetaData();
      JBossAssemblyDescriptorMetaData assembly = new JBossAssemblyDescriptorMetaData();
      original.setAssemblyDescriptor(assembly);
      SecurityRolesMetaData roles = new SecurityRolesMetaData();
      assembly.setSecurityRoles(roles);
     
      SecurityRoleMetaData role = new SecurityRoleMetaData();
      role.setRoleName("original.only.Role");
      role.setPrincipals(java.util.Collections.singleton("original"));
      roles.add(role);
      role = new SecurityRoleMetaData();
      role.setRoleName("overriden.Role");
      HashSet<String> principals = new HashSet<String>();
      principals.add("original1");
      principals.add("original2");
      role.setPrincipals(principals);
      roles.add(role);
     
      // override
      JBoss50MetaData override = new JBoss50MetaData();
      assembly = new JBossAssemblyDescriptorMetaData();
      override.setAssemblyDescriptor(assembly);
      roles = new SecurityRolesMetaData();
      assembly.setSecurityRoles(roles);
     
      role = new SecurityRoleMetaData();
      role.setRoleName("override.only.Role");
      role.setPrincipals(java.util.Collections.singleton("override"));
      roles.add(role);
      role = new SecurityRoleMetaData();
      role.setRoleName("overriden.Role");
      principals = new HashSet<String>();
      principals.add("original1");
      principals.add("override1");
      principals.add("override2");
      role.setPrincipals(principals);
      roles.add(role);
     
      // merge
      JBoss50MetaData merged = new JBoss50MetaData();
      merged.merge(override, original);     
      assembly = merged.getAssemblyDescriptor();
      assertNotNull(assembly);
      roles = assembly.getSecurityRoles();
      assertNotNull(roles);
      assertEquals(3, roles.size());
     
      role = roles.get("original.only.Role");
      assertNotNull(role);
      assertEquals("original.only.Role", role.getRoleName());
      assertNotNull(role.getPrincipals());
      assertEquals(1, role.getPrincipals().size());
      assertTrue(role.getPrincipals().contains("original"));
     
      role = roles.get("override.only.Role");
      assertNotNull(role);
      assertEquals("override.only.Role", role.getRoleName());
      assertNotNull(role.getPrincipals());
      assertEquals(1, role.getPrincipals().size());
      assertTrue(role.getPrincipals().contains("override"));
     
      role = roles.get("overriden.Role");
      assertNotNull(role);
      assertEquals("overriden.Role", role.getRoleName());
      assertNotNull(role.getPrincipals());
      // shouldn't there be 3? missing original2?
      assertEquals(4, role.getPrincipals().size());
View Full Code Here

Examples of org.jboss.metadata.javaee.spec.SecurityRolesMetaData

      EarMetaData specMetaData = unmarshal();
      JBossAppMetaData jbossMetaData = unmarshal("Ear4x_testJBossSecurityRoles.xml", JBossAppMetaData.class, null);
      JBossAppMetaData metaData = new JBossAppMetaData();
      metaData.merge(jbossMetaData, specMetaData);

      SecurityRolesMetaData secRoles = metaData.getSecurityRoles();
      assertNotNull(secRoles);
      assertEquals(4, secRoles.size());
      // VP
      SecurityRoleMetaData VP = secRoles.get("VP");
      assertNotNull(VP);
      assertEquals("VP", VP.getRoleName());
      assertNull(VP.getPrincipals());
      // Employee
      SecurityRoleMetaData Employee = secRoles.get("Employee");
      assertNotNull(Employee);
      assertEquals("Employee", Employee.getRoleName());
      assertEquals(2, Employee.getPrincipals().size());
      Set<String> principals = Employee.getPrincipals();
      HashSet<String> expected = new HashSet<String>();
      expected.add("javajoe");
      expected.add("j2ee");
      assertEquals(expected, principals);
      // Manager
      SecurityRoleMetaData Manager = secRoles.get("Manager");
      assertNotNull(Manager);
      assertEquals("Manager", Manager.getRoleName());
      assertEquals(1, Manager.getPrincipals().size());
      String[] principalsArray = new String[0];
      principalsArray = Manager.getPrincipals().toArray(principalsArray);
      assertEquals("javajoe", principalsArray[0]);
      // Administrator
      SecurityRoleMetaData Administrator = secRoles.get("Administrator");
      assertNotNull(Administrator);
      assertEquals("Administrator", Administrator.getRoleName());
      assertEquals(1, Administrator.getPrincipals().size());
      principalsArray = new String[0];
      principalsArray = Administrator.getPrincipals().toArray(principalsArray);
      assertEquals("j2ee", principalsArray[0]);

      Set<String> j2eeRoles = secRoles.getSecurityRoleNamesByPrincipal("j2ee");
      HashSet<String> expectedj2eeRoles = new HashSet<String>();
      expectedj2eeRoles.add("Employee");
      expectedj2eeRoles.add("Administrator");
      assertEquals(expectedj2eeRoles, j2eeRoles);
      Set<String> javajoeRoles = secRoles.getSecurityRoleNamesByPrincipal("javajoe");
      HashSet<String> expectedjavajoeRoles = new HashSet<String>();
      expectedjavajoeRoles.add("Employee");
      expectedjavajoeRoles.add("Manager");
      assertEquals(expectedjavajoeRoles, javajoeRoles);

      SecurityRolesMetaData j2eeRolesMD = secRoles.getSecurityRolesByPrincipal("j2ee");
      assertEquals(2, j2eeRolesMD.size());
      Employee = j2eeRolesMD.get("Employee");
      assertNotNull(Employee);
      assertEquals("Employee", Employee.getRoleName());
      principals = Employee.getPrincipals();
      assertEquals(2, principals.size());
      assertEquals(expected, principals);
View Full Code Here

Examples of org.jboss.metadata.javaee.spec.SecurityRolesMetaData

      assertEquals(ModuleType.Web, web1.getType());
      assertEquals("WEB-INF/alt-web.xml", web1.getAlternativeDD());
      WebModuleMetaData wm1 = (WebModuleMetaData) web1.getValue();
      assertEquals("/web1", wm1.getContextRoot());

      SecurityRolesMetaData roles = metaData.getSecurityRoles();
      assertEquals(2, roles.size());
      SecurityRoleMetaData r0 = roles.get("role0");
      assertEquals("security-role0", r0.getId());
      assertEquals("The 0 security role", r0.getDescriptions().value()[0].value());
      SecurityRoleMetaData r1 = roles.get("role1");
      assertEquals("security-role1", r1.getId());
      assertEquals("The 1 security role", r1.getDescriptions().value()[0].value());
   }
View Full Code Here

Examples of org.jboss.metadata.javaee.spec.SecurityRolesMetaData

      assertNotNull("no application exceptions defined", assembly.getApplicationExceptions());
      assertEquals(1, assembly.getApplicationExceptions().size());
      System.out.println(assembly.getContainerTransactionsByEjbName("MyStatelessBean"));

      // @DeclareRoles
      SecurityRolesMetaData securityRoles = assembly.getSecurityRoles();
      assertNotNull(securityRoles);
      assertEquals(2, securityRoles.size());
      SecurityRoleMetaData role1 = securityRoles.get("Role1");
      assertNotNull(role1);
      assertEquals("Role1", role1.getRoleName());
      SecurityRoleMetaData role2 = securityRoles.get("Role2");
      assertNotNull(role2);
      assertEquals("Role2", role2.getRoleName());

      // @DenyAll
      // cls.getDeclaredMethods is un-ordered, so we must use bestMatch
View Full Code Here

Examples of org.jboss.metadata.javaee.spec.SecurityRolesMetaData

      assertModules(ear);     
   }

   protected void assertSecurityRoles(JBossAppMetaData ear)
   {
      SecurityRolesMetaData roles = ear.getSecurityRoles();
      assertEquals("There are 2 roles", 2, roles.size());
      SecurityRoleMetaData role0 = roles.get("role0");
      assertEquals("security-role0", role0.getId());
      assertEquals("role0", role0.getName());
      assertEquals("The 0 security role", role0.getDescriptions().value()[0].value());
      SecurityRoleMetaData role1 = roles.get("role1");
      assertEquals("security-role1", role1.getId());
      assertEquals("role1", role1.getName());
      assertEquals("The 1 security role", role1.getDescriptions().value()[0].value());
      if(hasJBossAppOverride)
      {
View Full Code Here
TOP
Copyright © 2018 www.massapi.com. All rights reserved.
All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.