1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
|
/**
* ============LICENSE_START=======================================================
* org.onap.aai
* ================================================================================
* Copyright © 2017-2018 AT&T Intellectual Property. All rights reserved.
* ================================================================================
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
* ============LICENSE_END=========================================================
*/
package org.onap.aai.introspection.sideeffect;
import org.apache.commons.lang3.ObjectUtils;
import org.apache.tinkerpop.gremlin.structure.Vertex;
import org.onap.aai.exceptions.AAIException;
import org.onap.aai.introspection.Introspector;
import org.onap.aai.schema.enums.PropertyMetadata;
import org.onap.aai.serialization.db.DBSerializer;
import org.onap.aai.serialization.engines.TransactionalGraphEngine;
import org.springframework.util.CollectionUtils;
import java.util.Map.Entry;
import java.util.Optional;
public class OwnerCheck extends SideEffect {
public static final String READ_ONLY_SUFFIX = "_readOnly";
private static final String DATA_OWNER = "data-owner";
public OwnerCheck(Introspector obj, Vertex self, TransactionalGraphEngine dbEngine, DBSerializer serializer) {
super(obj, self, dbEngine, serializer);
}
@Override
protected void processURI(Optional<String> completeUri, Entry<String, String> entry)
throws AAIException {
if (!isAuthorized(serializer.getGroups(), self)) {
throw new AAIException("AAI_3304",
"Group(s) :" + serializer.getGroups() + " not authorized to perform function");
} //else skip processing because no required properties were specified
}
public static boolean isAuthorized(java.util.Set<String> groups, Vertex vertex) {
if (!CollectionUtils.isEmpty(groups)) {
Object dataOwnerProperty = vertex.property(DATA_OWNER).orElse(null);
if (ObjectUtils.isNotEmpty(dataOwnerProperty)) {
String dataOwner = dataOwnerProperty.toString();
String dataOwnerWithReadAccess = dataOwner + READ_ONLY_SUFFIX;
return groups.stream()
.anyMatch(group -> group.equals(dataOwner) || group.equals(dataOwnerWithReadAccess));
}
}
return true;
}
@Override
protected PropertyMetadata getPropertyMetadata() {
return PropertyMetadata.OWNER_CHECK;
}
@Override
protected boolean replaceWithWildcard() {
return false;
}
}
|
