Create the admin/showAuth page to replace admin/showids.jsp, edit/selfeditcheck.jsp and admin/checkblacklist.jsp
This commit is contained in:
j2blake
parent
c3ba76acdc
commit
ec690dd31f
5 changed files with 200 additions and 126 deletions
|
|
@ -0,0 +1,104 @@
|
|||
/* $This file is distributed under the terms of the license in /doc/license.txt$ */
|
||||
|
||||
package edu.cornell.mannlib.vitro.webapp.controller.admin;
|
||||
|
||||
import java.util.ArrayList;
|
||||
import java.util.HashMap;
|
||||
import java.util.List;
|
||||
import java.util.Map;
|
||||
|
||||
import javax.servlet.ServletContext;
|
||||
|
||||
import edu.cornell.mannlib.vedit.beans.LoginStatusBean;
|
||||
import edu.cornell.mannlib.vitro.webapp.auth.identifier.ActiveIdentifierBundleFactories;
|
||||
import edu.cornell.mannlib.vitro.webapp.auth.identifier.IdentifierBundle;
|
||||
import edu.cornell.mannlib.vitro.webapp.auth.identifier.RequestIdentifiers;
|
||||
import edu.cornell.mannlib.vitro.webapp.auth.identifier.common.HasAssociatedIndividual;
|
||||
import edu.cornell.mannlib.vitro.webapp.auth.policy.PolicyHelper;
|
||||
import edu.cornell.mannlib.vitro.webapp.auth.policy.ServletPolicyList;
|
||||
import edu.cornell.mannlib.vitro.webapp.auth.requestedAction.Actions;
|
||||
import edu.cornell.mannlib.vitro.webapp.auth.requestedAction.ifaces.RequestActionConstants;
|
||||
import edu.cornell.mannlib.vitro.webapp.auth.requestedAction.ifaces.RequestedAction;
|
||||
import edu.cornell.mannlib.vitro.webapp.auth.requestedAction.propstmt.EditObjPropStmt;
|
||||
import edu.cornell.mannlib.vitro.webapp.config.ConfigurationProperties;
|
||||
import edu.cornell.mannlib.vitro.webapp.controller.VitroRequest;
|
||||
import edu.cornell.mannlib.vitro.webapp.controller.freemarker.FreemarkerHttpServlet;
|
||||
import edu.cornell.mannlib.vitro.webapp.controller.freemarker.responsevalues.ResponseValues;
|
||||
import edu.cornell.mannlib.vitro.webapp.controller.freemarker.responsevalues.TemplateResponseValues;
|
||||
|
||||
/**
|
||||
* Show a summary of who is logged in and how they are to be treated by the
|
||||
* authorization system.
|
||||
*/
|
||||
public class ShowAuthController extends FreemarkerHttpServlet {
|
||||
|
||||
@Override
|
||||
protected Actions requiredActions(VitroRequest vreq) {
|
||||
return Actions.AUTHORIZED;
|
||||
}
|
||||
|
||||
@Override
|
||||
protected ResponseValues processRequest(VitroRequest vreq) {
|
||||
|
||||
Map<String, Object> body = new HashMap<String, Object>();
|
||||
|
||||
body.put("identifiers", RequestIdentifiers.getIdBundleForRequest(vreq));
|
||||
body.put("currentUser", LoginStatusBean.getCurrentUser(vreq));
|
||||
body.put("associatedIndividuals", getAssociatedIndividuals(vreq));
|
||||
body.put("factories", getIdentifierFactoryNames(vreq));
|
||||
body.put("policies", ServletPolicyList.getPolicies(vreq));
|
||||
body.put("matchingProperty", getMatchingProperty(vreq));
|
||||
|
||||
return new TemplateResponseValues("admin-showAuth.ftl", body);
|
||||
}
|
||||
|
||||
private List<String> getIdentifierFactoryNames(VitroRequest vreq) {
|
||||
ServletContext ctx = vreq.getSession().getServletContext();
|
||||
return ActiveIdentifierBundleFactories.getFactoryNames(ctx);
|
||||
}
|
||||
|
||||
private String getMatchingProperty(VitroRequest vreq) {
|
||||
return ConfigurationProperties.getBean(vreq).getProperty(
|
||||
"selfEditing.idMatchingProperty", "");
|
||||
}
|
||||
|
||||
private List<AssociatedIndividual> getAssociatedIndividuals(
|
||||
VitroRequest vreq) {
|
||||
List<AssociatedIndividual> list = new ArrayList<AssociatedIndividual>();
|
||||
IdentifierBundle ids = RequestIdentifiers.getIdBundleForRequest(vreq);
|
||||
for (String uri : HasAssociatedIndividual.getIndividualUris(ids)) {
|
||||
list.add(new AssociatedIndividual(uri, mayEditIndividual(vreq, uri)));
|
||||
}
|
||||
return list;
|
||||
}
|
||||
|
||||
/**
|
||||
* Is the current user authorized to edit an arbitrary object property on
|
||||
* this individual?
|
||||
*/
|
||||
private boolean mayEditIndividual(VitroRequest vreq, String individualUri) {
|
||||
RequestedAction action = new EditObjPropStmt(individualUri,
|
||||
RequestActionConstants.SOME_URI,
|
||||
RequestActionConstants.SOME_URI);
|
||||
return PolicyHelper.isAuthorizedForActions(vreq, action);
|
||||
}
|
||||
|
||||
public class AssociatedIndividual {
|
||||
private final String uri;
|
||||
private final boolean editable;
|
||||
|
||||
public AssociatedIndividual(String uri, boolean editable) {
|
||||
this.uri = uri;
|
||||
this.editable = editable;
|
||||
}
|
||||
|
||||
public String getUri() {
|
||||
return uri;
|
||||
}
|
||||
|
||||
public boolean isEditable() {
|
||||
return editable;
|
||||
}
|
||||
|
||||
}
|
||||
}
|
||||
|
|
@ -1,27 +0,0 @@
|
|||
<%-- $This file is distributed under the terms of the license in /doc/license.txt$ --%>
|
||||
|
||||
<%@page
|
||||
import="edu.cornell.mannlib.vitro.webapp.auth.identifier.RequestIdentifiers"%>
|
||||
<%@page
|
||||
import="java.util.List"%>
|
||||
|
||||
<%-- doesn't use vitro:confirmAuthorization becuase the we want to be able to see IDs for any user. --%>
|
||||
<%-- uses "security through obscurity", and doesn't give away much information. --%>
|
||||
|
||||
<%
|
||||
List idb = RequestIdentifiers.getIdBundleForRequest(request);
|
||||
|
||||
out.write("<html><body>");
|
||||
out.write("<h2>Identifiers in effect: </h2>");
|
||||
out.write("<p>This is a utility that shows which identifiers are in effect.</p>\n");
|
||||
out.write("<table><tr><th>class</th><th>value</th></tr>\n");
|
||||
for( Object id : idb ){
|
||||
out.write( "<tr>" );
|
||||
out.write( "<td>" + id.getClass().getName() + "</td>");
|
||||
out.write( "<td>" + id.toString() + "</td>" );
|
||||
out.write( "</tr>\n" );
|
||||
}
|
||||
out.write("</table>\n");
|
||||
out.write("</body></html>");
|
||||
|
||||
%>
|
||||
22
webapp/web/css/showAuth.css
Normal file
22
webapp/web/css/showAuth.css
Normal file
|
|
@ -0,0 +1,22 @@
|
|||
/* $This file is distributed under the terms of the license in /doc/license.txt$ */
|
||||
|
||||
/* Styles for Freemarker template showAuth */
|
||||
|
||||
#show-auth * h3 {
|
||||
padding: 20px 0 12px 0;
|
||||
}
|
||||
#show-auth * caption {
|
||||
padding: 20px 0 12px 0;
|
||||
margin: 0;
|
||||
text-align: left;
|
||||
}
|
||||
#show-auth * th {
|
||||
padding: 4px 10px 4px 10px;
|
||||
border: 1px solid black;
|
||||
text-align: right;
|
||||
}
|
||||
#show-auth * td {
|
||||
padding: 4px 10px 4px 10px;
|
||||
text-align: left;
|
||||
border: 1px solid black;
|
||||
}
|
||||
|
|
@ -1,99 +0,0 @@
|
|||
<%-- $This file is distributed under the terms of the license in /doc/license.txt$ --%>
|
||||
|
||||
<%@ page import="edu.cornell.mannlib.vitro.webapp.edit.n3editing.processEdit.EditSubmission" %>
|
||||
<%@ page import="edu.cornell.mannlib.vitro.webapp.edit.n3editing.configuration.Field" %>
|
||||
<%@ page import="edu.cornell.mannlib.vitro.webapp.filters.VitroRequestPrep" %>
|
||||
<%@ page import="org.apache.commons.logging.Log" %>
|
||||
<%@ page import="org.apache.commons.logging.LogFactory" %>
|
||||
<%@ page import="java.io.StringReader" %>
|
||||
<%@ page import="java.util.*" %>
|
||||
<%@page import="edu.cornell.mannlib.vitro.webapp.auth.identifier.SelfEditingIdentifierFactory.NetId"%>
|
||||
<%@page import="edu.cornell.mannlib.vitro.webapp.auth.identifier.SelfEditingIdentifierFactory"%>
|
||||
<%@page import="edu.cornell.mannlib.vitro.webapp.auth.identifier.SelfEditingIdentifierFactory.SelfEditing"%>
|
||||
<%@page import="edu.cornell.mannlib.vitro.webapp.auth.identifier.ArrayIdentifierBundle"%>
|
||||
<%@page import="edu.cornell.mannlib.vitro.webapp.auth.identifier.IdentifierBundle"%>
|
||||
<%@page import="edu.cornell.mannlib.vitro.webapp.auth.identifier.RequestIdentifiers"%>
|
||||
<%@page import="java.io.IOException"%>
|
||||
<%@page import="edu.cornell.mannlib.vitro.webapp.auth.identifier.IdentifierBundleFactory"%>
|
||||
<%@page import="edu.cornell.mannlib.vitro.webapp.auth.policy.PolicyList"%>
|
||||
<%@page import="edu.cornell.mannlib.vitro.webapp.auth.policy.ServletPolicyList"%>
|
||||
<%@page import="edu.cornell.mannlib.vitro.webapp.auth.policy.ifaces.PolicyIface"%>
|
||||
<%@page import="edu.cornell.mannlib.vitro.webapp.auth.policy.SelfEditingPolicy"%>
|
||||
<%@page import="edu.cornell.mannlib.vitro.webapp.dao.WebappDaoFactory"%>
|
||||
<%@page import="edu.cornell.mannlib.vitro.webapp.auth.requestedAction.propstmt.AddObjectPropStmt"%>
|
||||
<%@page import="edu.cornell.mannlib.vitro.webapp.auth.policy.ifaces.PolicyDecision"%>
|
||||
<%@ taglib prefix="c" uri="http://java.sun.com/jstl/core" %>
|
||||
|
||||
|
||||
<h1>SelfEditing Sanity Check</h1>
|
||||
|
||||
<h3>Is there a self editing policy in the context?</h3>
|
||||
<%
|
||||
PolicyList spl = ServletPolicyList.getPolicies(application);
|
||||
SelfEditingPolicy sePolicy = null;
|
||||
ListIterator it = spl.listIterator();
|
||||
String found = "Could not find a SelfEditingPolicy";
|
||||
while(it.hasNext()){
|
||||
PolicyIface p = (PolicyIface)it.next();
|
||||
if( p instanceof SelfEditingPolicy ){
|
||||
found = "Found a SelfEditingPolicy";
|
||||
sePolicy = (SelfEditingPolicy)p;
|
||||
}
|
||||
}
|
||||
%>
|
||||
<%= found %>
|
||||
|
||||
<%--
|
||||
|
||||
<h3>Do you have a REMOTE_USER header from CUWebAuth?</h3>
|
||||
|
||||
<% String user = request.getHeader("REMOTE_USER");
|
||||
if( user != null && user.length() > 0){
|
||||
%> Found a remote user of <%= user %>. <%
|
||||
}else{
|
||||
%> Could not find a remote user. Maybe you are not logged into CUWebAutn? <%
|
||||
}
|
||||
%>
|
||||
<h3>Check if we can get a SelfEditingIdentifer for <%= user %></h3>
|
||||
<%
|
||||
SelfEditingIdentifierFactory.SelfEditing selfEditingId = null;
|
||||
IdentifierBundle ib = null;
|
||||
if( user != null && user.length() > 0){
|
||||
ib = RequestIdentifiers.getIdBundleForRequest(request);
|
||||
for( Object obj : ib){
|
||||
if( obj instanceof SelfEditingIdentifierFactory.SelfEditing )
|
||||
selfEditingId = (SelfEditingIdentifierFactory.SelfEditing) obj;
|
||||
}
|
||||
if( selfEditingId != null )
|
||||
found = "found a SelfEditingId " + selfEditingId.getValue();
|
||||
else
|
||||
found = "Cound not find a SelfEditingId";
|
||||
%>
|
||||
<%= found %>
|
||||
<%}else{%>
|
||||
Cannot check becaue user is <%= user %>.
|
||||
<%} %>
|
||||
|
||||
|
||||
<h3>Is that SelfEditingIdentifer blacklisted?</h3>
|
||||
<% if( user == null || user.length() == 0 ){ %>
|
||||
No REMOTE_USER to check
|
||||
<% }else if( selfEditingId == null ){ %>
|
||||
no SelfEditingId to check
|
||||
<% }else if( selfEditingId.getBlacklisted() != null){%>
|
||||
SelfEditingId blacklisted because of <%= selfEditingId.getBlacklisted() %>
|
||||
<% } else {%>
|
||||
SelfEditingId is not blacklisted.
|
||||
<% } %>
|
||||
|
||||
<h3>Can an object property be edited with this SelfEditingId and Policy?</h3>
|
||||
<% if( user == null || selfEditingId == null ){ %>
|
||||
No
|
||||
<% }else{
|
||||
AddObjectPropStmt whatToAuth = new AddObjectPropStmt(
|
||||
selfEditingId.getValue(),"http://mannlib.cornell.edu/fine#prp999" ,"http://mannlib.cornell.edu/fine#prp999");
|
||||
PolicyDecision pdecison = sePolicy.isAuthorized(ib, whatToAuth);
|
||||
%> The policy decision was <%= pdecison %>
|
||||
|
||||
<% } %>
|
||||
--%>
|
||||
|
|
@ -0,0 +1,74 @@
|
|||
<#-- $This file is distributed under the terms of the license in /doc/license.txt$ -->
|
||||
|
||||
<#-- Template viewing the authorization mechanisms: current identifiers, factories, policies, etc. -->
|
||||
|
||||
${stylesheets.add('<link rel="stylesheet" href="${urls.base}/css/showAuth.css" />')}
|
||||
|
||||
<h2>Authorization Info</h2>
|
||||
|
||||
<section id="show-auth" role="region">
|
||||
<#if currentUser?has_content>
|
||||
<table summary="Information about the current user" style="border: 1">
|
||||
<caption>Current user</caption>
|
||||
<tr><th>URI:</th><td>${currentUser.URI}</td></tr>
|
||||
<tr><th>First name:</th><td>${currentUser.firstName}</td></tr>
|
||||
<tr><th>Last name:</th><td>${currentUser.lastName}</td></tr>
|
||||
<tr><th>Username:</th><td>${currentUser.username}</td></tr>
|
||||
<tr><th>Login count:</th><td>${currentUser.loginCount}</td></tr>
|
||||
<tr><th>Role:</th><td>${currentUser.roleURI}</td></tr>
|
||||
</table>
|
||||
<#else>
|
||||
<h3>Not logged in</h3>
|
||||
</#if>
|
||||
|
||||
<table summary="VIVO revision's levels table">
|
||||
<caption>Identifiers:</caption>
|
||||
<#list identifiers as identifier>
|
||||
<tr>
|
||||
<td>${identifier}</td>
|
||||
</tr>
|
||||
</#list>
|
||||
</table>
|
||||
|
||||
<table summary="Associated Individuals">
|
||||
<caption>AssociatedIndividuals:
|
||||
<#if matchingProperty??>
|
||||
(match by <pre>${matchingProperty}</pre>)
|
||||
<#else>
|
||||
(matching property is not defined)
|
||||
</#if>
|
||||
</caption>
|
||||
<#if associatedIndividuals?has_content>
|
||||
<#list associatedIndividuals as associatedIndividual>
|
||||
<tr>
|
||||
<td>${associatedIndividual.uri}</td>
|
||||
<#if associatedIndividual.editable>
|
||||
<td>May edit</td>
|
||||
<#else>
|
||||
<td>May not edit</td>
|
||||
</#if>
|
||||
</tr>
|
||||
</#list>
|
||||
<#else>
|
||||
<tr><td>none</td></tr>
|
||||
</#if>
|
||||
</table>
|
||||
|
||||
<table summary="Active Identifier Factories">
|
||||
<caption>Identifier factories:</caption>
|
||||
<#list factories as factory>
|
||||
<tr>
|
||||
<td>${factory}</td>
|
||||
</tr>
|
||||
</#list>
|
||||
</table>
|
||||
|
||||
<table summary="Policies">
|
||||
<caption>Policies:</caption>
|
||||
<#list policies as policy>
|
||||
<tr>
|
||||
<td>${policy}</td>
|
||||
</tr>
|
||||
</#list>
|
||||
</table>
|
||||
</section>
|
||||
Loading…
Add table
Reference in a new issue