001/* 002 * (C) Copyright 2006-2010 Nuxeo SA (http://nuxeo.com/) and others. 003 * 004 * Licensed under the Apache License, Version 2.0 (the "License"); 005 * you may not use this file except in compliance with the License. 006 * You may obtain a copy of the License at 007 * 008 * http://www.apache.org/licenses/LICENSE-2.0 009 * 010 * Unless required by applicable law or agreed to in writing, software 011 * distributed under the License is distributed on an "AS IS" BASIS, 012 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 013 * See the License for the specific language governing permissions and 014 * limitations under the License. 015 * 016 * Contributors: 017 * bstefanescu 018 */ 019package org.nuxeo.ecm.webengine.security.guards; 020 021import java.security.Principal; 022 023import org.nuxeo.common.xmap.annotation.XObject; 024import org.nuxeo.ecm.core.api.NuxeoPrincipal; 025import org.nuxeo.ecm.webengine.model.Access; 026import org.nuxeo.ecm.webengine.security.Guard; 027import org.nuxeo.runtime.model.Adaptable; 028 029/** 030 * @author <a href="mailto:[email protected]">Bogdan Stefanescu</a> 031 */ 032@XObject("isAdministrator") 033public class IsAdministratorGuard implements Guard { 034 035 protected boolean isAdministrator; 036 037 public IsAdministratorGuard() { 038 isAdministrator = true; 039 } 040 041 public IsAdministratorGuard(String isAdministrator) { 042 this.isAdministrator = Boolean.parseBoolean(isAdministrator); 043 } 044 045 public IsAdministratorGuard(Access isAdministrator) { 046 this.isAdministrator = isAdministrator == Access.GRANT; 047 } 048 049 public boolean check(Adaptable context) { 050 Principal p = context.getAdapter(Principal.class); 051 if (p instanceof NuxeoPrincipal) { 052 return ((NuxeoPrincipal) p).isAdministrator() == isAdministrator; 053 } 054 return false; 055 } 056 057 public boolean isAdministrator() { 058 return isAdministrator; 059 } 060 061 public String toString() { 062 return "IS_ADMINISTRATOR[" + isAdministrator + "]"; 063 } 064 065}