Create the admin/showAuth page to replace admin/showids.jsp, edit/selfeditcheck.jsp and admin/checkblacklist.jsp
This commit is contained in:
j2blake
parent
c3ba76acdc
commit
ec690dd31f
5 changed files with 200 additions and 126 deletions
|
|
@ -1,27 +0,0 @@
|
|||
<%-- $This file is distributed under the terms of the license in /doc/license.txt$ --%>
|
||||
|
||||
<%@page
|
||||
import="edu.cornell.mannlib.vitro.webapp.auth.identifier.RequestIdentifiers"%>
|
||||
<%@page
|
||||
import="java.util.List"%>
|
||||
|
||||
<%-- doesn't use vitro:confirmAuthorization becuase the we want to be able to see IDs for any user. --%>
|
||||
<%-- uses "security through obscurity", and doesn't give away much information. --%>
|
||||
|
||||
<%
|
||||
List idb = RequestIdentifiers.getIdBundleForRequest(request);
|
||||
|
||||
out.write("<html><body>");
|
||||
out.write("<h2>Identifiers in effect: </h2>");
|
||||
out.write("<p>This is a utility that shows which identifiers are in effect.</p>\n");
|
||||
out.write("<table><tr><th>class</th><th>value</th></tr>\n");
|
||||
for( Object id : idb ){
|
||||
out.write( "<tr>" );
|
||||
out.write( "<td>" + id.getClass().getName() + "</td>");
|
||||
out.write( "<td>" + id.toString() + "</td>" );
|
||||
out.write( "</tr>\n" );
|
||||
}
|
||||
out.write("</table>\n");
|
||||
out.write("</body></html>");
|
||||
|
||||
%>
|
||||
22
webapp/web/css/showAuth.css
Normal file
22
webapp/web/css/showAuth.css
Normal file
|
|
@ -0,0 +1,22 @@
|
|||
/* $This file is distributed under the terms of the license in /doc/license.txt$ */
|
||||
|
||||
/* Styles for Freemarker template showAuth */
|
||||
|
||||
#show-auth * h3 {
|
||||
padding: 20px 0 12px 0;
|
||||
}
|
||||
#show-auth * caption {
|
||||
padding: 20px 0 12px 0;
|
||||
margin: 0;
|
||||
text-align: left;
|
||||
}
|
||||
#show-auth * th {
|
||||
padding: 4px 10px 4px 10px;
|
||||
border: 1px solid black;
|
||||
text-align: right;
|
||||
}
|
||||
#show-auth * td {
|
||||
padding: 4px 10px 4px 10px;
|
||||
text-align: left;
|
||||
border: 1px solid black;
|
||||
}
|
||||
|
|
@ -1,99 +0,0 @@
|
|||
<%-- $This file is distributed under the terms of the license in /doc/license.txt$ --%>
|
||||
|
||||
<%@ page import="edu.cornell.mannlib.vitro.webapp.edit.n3editing.processEdit.EditSubmission" %>
|
||||
<%@ page import="edu.cornell.mannlib.vitro.webapp.edit.n3editing.configuration.Field" %>
|
||||
<%@ page import="edu.cornell.mannlib.vitro.webapp.filters.VitroRequestPrep" %>
|
||||
<%@ page import="org.apache.commons.logging.Log" %>
|
||||
<%@ page import="org.apache.commons.logging.LogFactory" %>
|
||||
<%@ page import="java.io.StringReader" %>
|
||||
<%@ page import="java.util.*" %>
|
||||
<%@page import="edu.cornell.mannlib.vitro.webapp.auth.identifier.SelfEditingIdentifierFactory.NetId"%>
|
||||
<%@page import="edu.cornell.mannlib.vitro.webapp.auth.identifier.SelfEditingIdentifierFactory"%>
|
||||
<%@page import="edu.cornell.mannlib.vitro.webapp.auth.identifier.SelfEditingIdentifierFactory.SelfEditing"%>
|
||||
<%@page import="edu.cornell.mannlib.vitro.webapp.auth.identifier.ArrayIdentifierBundle"%>
|
||||
<%@page import="edu.cornell.mannlib.vitro.webapp.auth.identifier.IdentifierBundle"%>
|
||||
<%@page import="edu.cornell.mannlib.vitro.webapp.auth.identifier.RequestIdentifiers"%>
|
||||
<%@page import="java.io.IOException"%>
|
||||
<%@page import="edu.cornell.mannlib.vitro.webapp.auth.identifier.IdentifierBundleFactory"%>
|
||||
<%@page import="edu.cornell.mannlib.vitro.webapp.auth.policy.PolicyList"%>
|
||||
<%@page import="edu.cornell.mannlib.vitro.webapp.auth.policy.ServletPolicyList"%>
|
||||
<%@page import="edu.cornell.mannlib.vitro.webapp.auth.policy.ifaces.PolicyIface"%>
|
||||
<%@page import="edu.cornell.mannlib.vitro.webapp.auth.policy.SelfEditingPolicy"%>
|
||||
<%@page import="edu.cornell.mannlib.vitro.webapp.dao.WebappDaoFactory"%>
|
||||
<%@page import="edu.cornell.mannlib.vitro.webapp.auth.requestedAction.propstmt.AddObjectPropStmt"%>
|
||||
<%@page import="edu.cornell.mannlib.vitro.webapp.auth.policy.ifaces.PolicyDecision"%>
|
||||
<%@ taglib prefix="c" uri="http://java.sun.com/jstl/core" %>
|
||||
|
||||
|
||||
<h1>SelfEditing Sanity Check</h1>
|
||||
|
||||
<h3>Is there a self editing policy in the context?</h3>
|
||||
<%
|
||||
PolicyList spl = ServletPolicyList.getPolicies(application);
|
||||
SelfEditingPolicy sePolicy = null;
|
||||
ListIterator it = spl.listIterator();
|
||||
String found = "Could not find a SelfEditingPolicy";
|
||||
while(it.hasNext()){
|
||||
PolicyIface p = (PolicyIface)it.next();
|
||||
if( p instanceof SelfEditingPolicy ){
|
||||
found = "Found a SelfEditingPolicy";
|
||||
sePolicy = (SelfEditingPolicy)p;
|
||||
}
|
||||
}
|
||||
%>
|
||||
<%= found %>
|
||||
|
||||
<%--
|
||||
|
||||
<h3>Do you have a REMOTE_USER header from CUWebAuth?</h3>
|
||||
|
||||
<% String user = request.getHeader("REMOTE_USER");
|
||||
if( user != null && user.length() > 0){
|
||||
%> Found a remote user of <%= user %>. <%
|
||||
}else{
|
||||
%> Could not find a remote user. Maybe you are not logged into CUWebAutn? <%
|
||||
}
|
||||
%>
|
||||
<h3>Check if we can get a SelfEditingIdentifer for <%= user %></h3>
|
||||
<%
|
||||
SelfEditingIdentifierFactory.SelfEditing selfEditingId = null;
|
||||
IdentifierBundle ib = null;
|
||||
if( user != null && user.length() > 0){
|
||||
ib = RequestIdentifiers.getIdBundleForRequest(request);
|
||||
for( Object obj : ib){
|
||||
if( obj instanceof SelfEditingIdentifierFactory.SelfEditing )
|
||||
selfEditingId = (SelfEditingIdentifierFactory.SelfEditing) obj;
|
||||
}
|
||||
if( selfEditingId != null )
|
||||
found = "found a SelfEditingId " + selfEditingId.getValue();
|
||||
else
|
||||
found = "Cound not find a SelfEditingId";
|
||||
%>
|
||||
<%= found %>
|
||||
<%}else{%>
|
||||
Cannot check becaue user is <%= user %>.
|
||||
<%} %>
|
||||
|
||||
|
||||
<h3>Is that SelfEditingIdentifer blacklisted?</h3>
|
||||
<% if( user == null || user.length() == 0 ){ %>
|
||||
No REMOTE_USER to check
|
||||
<% }else if( selfEditingId == null ){ %>
|
||||
no SelfEditingId to check
|
||||
<% }else if( selfEditingId.getBlacklisted() != null){%>
|
||||
SelfEditingId blacklisted because of <%= selfEditingId.getBlacklisted() %>
|
||||
<% } else {%>
|
||||
SelfEditingId is not blacklisted.
|
||||
<% } %>
|
||||
|
||||
<h3>Can an object property be edited with this SelfEditingId and Policy?</h3>
|
||||
<% if( user == null || selfEditingId == null ){ %>
|
||||
No
|
||||
<% }else{
|
||||
AddObjectPropStmt whatToAuth = new AddObjectPropStmt(
|
||||
selfEditingId.getValue(),"http://mannlib.cornell.edu/fine#prp999" ,"http://mannlib.cornell.edu/fine#prp999");
|
||||
PolicyDecision pdecison = sePolicy.isAuthorized(ib, whatToAuth);
|
||||
%> The policy decision was <%= pdecison %>
|
||||
|
||||
<% } %>
|
||||
--%>
|
||||
|
|
@ -0,0 +1,74 @@
|
|||
<#-- $This file is distributed under the terms of the license in /doc/license.txt$ -->
|
||||
|
||||
<#-- Template viewing the authorization mechanisms: current identifiers, factories, policies, etc. -->
|
||||
|
||||
${stylesheets.add('<link rel="stylesheet" href="${urls.base}/css/showAuth.css" />')}
|
||||
|
||||
<h2>Authorization Info</h2>
|
||||
|
||||
<section id="show-auth" role="region">
|
||||
<#if currentUser?has_content>
|
||||
<table summary="Information about the current user" style="border: 1">
|
||||
<caption>Current user</caption>
|
||||
<tr><th>URI:</th><td>${currentUser.URI}</td></tr>
|
||||
<tr><th>First name:</th><td>${currentUser.firstName}</td></tr>
|
||||
<tr><th>Last name:</th><td>${currentUser.lastName}</td></tr>
|
||||
<tr><th>Username:</th><td>${currentUser.username}</td></tr>
|
||||
<tr><th>Login count:</th><td>${currentUser.loginCount}</td></tr>
|
||||
<tr><th>Role:</th><td>${currentUser.roleURI}</td></tr>
|
||||
</table>
|
||||
<#else>
|
||||
<h3>Not logged in</h3>
|
||||
</#if>
|
||||
|
||||
<table summary="VIVO revision's levels table">
|
||||
<caption>Identifiers:</caption>
|
||||
<#list identifiers as identifier>
|
||||
<tr>
|
||||
<td>${identifier}</td>
|
||||
</tr>
|
||||
</#list>
|
||||
</table>
|
||||
|
||||
<table summary="Associated Individuals">
|
||||
<caption>AssociatedIndividuals:
|
||||
<#if matchingProperty??>
|
||||
(match by <pre>${matchingProperty}</pre>)
|
||||
<#else>
|
||||
(matching property is not defined)
|
||||
</#if>
|
||||
</caption>
|
||||
<#if associatedIndividuals?has_content>
|
||||
<#list associatedIndividuals as associatedIndividual>
|
||||
<tr>
|
||||
<td>${associatedIndividual.uri}</td>
|
||||
<#if associatedIndividual.editable>
|
||||
<td>May edit</td>
|
||||
<#else>
|
||||
<td>May not edit</td>
|
||||
</#if>
|
||||
</tr>
|
||||
</#list>
|
||||
<#else>
|
||||
<tr><td>none</td></tr>
|
||||
</#if>
|
||||
</table>
|
||||
|
||||
<table summary="Active Identifier Factories">
|
||||
<caption>Identifier factories:</caption>
|
||||
<#list factories as factory>
|
||||
<tr>
|
||||
<td>${factory}</td>
|
||||
</tr>
|
||||
</#list>
|
||||
</table>
|
||||
|
||||
<table summary="Policies">
|
||||
<caption>Policies:</caption>
|
||||
<#list policies as policy>
|
||||
<tr>
|
||||
<td>${policy}</td>
|
||||
</tr>
|
||||
</#list>
|
||||
</table>
|
||||
</section>
|
||||
Loading…
Add table
Add a link
Reference in a new issue