/**
* Get an array of all the collections that the current SWORD context will allow deposit onto in
* the given DSpace context
*
* <p>IF: the authenticated user is an administrator AND: (the on-behalf-of user is an
* administrator OR the on-behalf-of user is authorised to ADD OR the on-behalf-of user is null)
* OR IF: the authenticated user is authorised to ADD AND: (the on-behalf-of user is an
* administrator OR the on-behalf-of user is authorised to ADD OR the on-behalf-of user is null)
*
* @param swordContext
* @return the array of allowed collections
* @throws DSpaceSwordException
*/
public List<org.dspace.content.Collection> getAllowedCollections(
SwordContext swordContext, Community community) throws DSpaceSwordException {
// a collection is allowed if the following conditions are met
//
// - the authenticated user is an administrator
// -- the on-behalf-of user is an administrator
// -- the on-behalf-of user is authorised to ADD
// -- the on-behalf-of user is null
// - the authenticated user is authorised to ADD
// -- the on-behalf-of user is an administrator
// -- the on-behalf-of user is authorised to ADD
// -- the on-behalf-of user is null
try {
// get the context of the authenticated user
Context authContext = swordContext.getAuthenticatorContext();
// short cut by obtaining the collections to which the authenticated user can submit
org.dspace.content.Collection[] cols =
org.dspace.content.Collection.findAuthorized(authContext, community, Constants.ADD);
List<org.dspace.content.Collection> allowed = new ArrayList<org.dspace.content.Collection>();
// now find out if the obo user is allowed to submit to any of these collections
for (int i = 0; i < cols.length; i++) {
boolean oboAllowed = false;
// check for obo null
if (swordContext.getOnBehalfOf() == null) {
oboAllowed = true;
}
// if we have not already determined that the obo user is ok to submit, look up the READ
// policy on the
// community. THis will include determining if the user is an administrator.
if (!oboAllowed) {
oboAllowed =
AuthorizeManager.authorizeActionBoolean(
swordContext.getOnBehalfOfContext(), cols[i], Constants.ADD);
}
// final check to see if we are allowed to READ
if (oboAllowed) {
allowed.add(cols[i]);
}
}
return allowed;
} catch (SQLException e) {
log.error("Caught exception: ", e);
throw new DSpaceSwordException(e);
}
}
