/*
* Copyright (c) 1998-2011 Caucho Technology -- all rights reserved
*
* This file is part of Resin(R) Open Source
*
* Each copy or derived work must preserve the copyright notice and this
* notice unmodified.
*
* Resin Open Source is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation; either version 2 of the License, or
* (at your option) any later version.
*
* Resin Open Source is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE, or any warranty
* of NON-INFRINGEMENT. See the GNU General Public License for more
* details.
*
* You should have received a copy of the GNU General Public License
* along with Resin Open Source; if not, write to the
*
* Free Software Foundation, Inc.
* 59 Temple Place, Suite 330
* Boston, MA 02111-1307 USA
*
* @author Scott Ferguson
*/
package com.caucho.config.gen;
import javax.annotation.security.DenyAll;
import javax.annotation.security.PermitAll;
import javax.annotation.security.RolesAllowed;
import javax.annotation.security.RunAs;
import javax.enterprise.inject.spi.AnnotatedMethod;
import com.caucho.inject.Module;
/**
* Aspect factory for generating @Asynchronous aspects.
*/
@Module
public class SecurityFactory<X>
extends AbstractAspectFactory<X>
{
private final RunAs _classRunAs;
private final RolesAllowed _classRolesAllowed;
private final PermitAll _classPermitAll;
private final DenyAll _classDenyAll;
public SecurityFactory(AspectBeanFactory<X> beanFactory,
AspectFactory<X> next)
{
super(beanFactory, next);
_classRunAs = beanFactory.getBeanType().getAnnotation(RunAs.class);
_classRolesAllowed = beanFactory.getBeanType().getAnnotation(RolesAllowed.class);
_classPermitAll = beanFactory.getBeanType().getAnnotation(PermitAll.class);
_classDenyAll = beanFactory.getBeanType().getAnnotation(DenyAll.class);
}
/**
* Creates an aspect for interception if the method should be intercepted.
*/
@Override
public AspectGenerator<X> create(AnnotatedMethod<? super X> method,
boolean isEnhanced)
{
RunAs runAs = method.getAnnotation(RunAs.class);
if (runAs == null)
runAs = _classRunAs;
String runAsName = null;
if (runAs != null)
runAsName = runAs.value();
RolesAllowed rolesAllowed = method.getAnnotation(RolesAllowed.class);
if (rolesAllowed == null)
rolesAllowed = _classRolesAllowed;
String []roleNames = null;
if (rolesAllowed != null)
roleNames = rolesAllowed.value();
PermitAll permitAll = method.getAnnotation(PermitAll.class);
if (permitAll != null || _classPermitAll != null)
roleNames = null;
DenyAll denyAll = method.getAnnotation(DenyAll.class);
if (denyAll != null || _classDenyAll != null)
roleNames = new String[0];
if (roleNames != null || runAs != null) {
AspectGenerator<X> next = super.create(method, true);
return new SecurityGenerator<X>(this, method, next, roleNames, runAsName);
}
else
return super.create(method, isEnhanced);
}
}