/**
* Returns an internal folder to store all files deleted from a given folder. Provides fast access
* when searching for files deleted from a given folder.
*/
private Node legacyGetTrashFolderIdNode(
final Session session,
final PentahoJcrConstants pentahoJcrConstants,
final String origParentFolderPath)
throws RepositoryException {
// get folder id
String folderId = null;
if (session.itemExists(origParentFolderPath)) {
folderId = ((Node) session.getItem(origParentFolderPath)).getIdentifier();
} else {
throw new RuntimeException(
Messages.getInstance()
.getString("DefaultDeleteHelper.ERROR_0001_PATH_NOT_FOUND")); // $NON-NLS-1$
}
final String prefix = session.getNamespacePrefix(PentahoJcrConstants.PHO_NS) + ":";
Node trashInternalFolderNode = getOrCreateTrashInternalFolderNode(session, pentahoJcrConstants);
if (NodeHelper.hasNode(trashInternalFolderNode, prefix, folderId)) {
return NodeHelper.getNode(trashInternalFolderNode, prefix, folderId);
} else {
// if Trash Structure 1 (legacy) doesn't exist, no need to create it now
return null;
}
}
/** Tests that Session.getNamespacePrefix returns the session scoped mapping. */
public void testGetNamespacePrefix() throws RepositoryException {
String testPrefix = getUnusedPrefix();
// remap the jcr uri
session.setNamespacePrefix(testPrefix, NS_JCR_URI);
String prefix = session.getNamespacePrefix(NS_JCR_URI);
assertEquals(
"Session.getNamespacePrefix does not return the correct value.", testPrefix, prefix);
}
public void setRoleBindings(
Session session, ITenant tenant, String runtimeRoleName, List<String> logicalRoleNames)
throws NamespaceException, RepositoryException {
if (tenant == null) {
tenant = JcrTenantUtils.getTenant(runtimeRoleName, false);
runtimeRoleName = getPrincipalName(runtimeRoleName);
}
if (!TenantUtils.isAccessibleTenant(tenant)) {
throw new NotFoundException("Tenant " + tenant.getId() + " not found");
}
PentahoJcrConstants pentahoJcrConstants = new PentahoJcrConstants(session);
final String phoNsPrefix =
session.getNamespacePrefix(PentahoJcrConstants.PHO_NS) + ":"; // $NON-NLS-1$
final String onlyPentahoPattern = phoNsPrefix + "*"; // $NON-NLS-1$
Node runtimeRolesFolderNode = getRuntimeRolesFolderNode(session, tenant);
NodeIterator runtimeRoleNodes = runtimeRolesFolderNode.getNodes(onlyPentahoPattern);
int i = 0;
while (runtimeRoleNodes.hasNext()) {
runtimeRoleNodes.nextNode();
i++;
}
if (i == 0) {
// no bindings setup yet; install bootstrap bindings; bootstrapRoleBindings will now no longer
// be
// consulted
for (Map.Entry<String, List<String>> entry : bootstrapRoleBindings.entrySet()) {
JcrRoleAuthorizationPolicyUtils.internalSetBindings(
pentahoJcrConstants,
runtimeRolesFolderNode,
entry.getKey(),
entry.getValue(),
phoNsPrefix);
}
}
if (!isImmutable(runtimeRoleName)) {
JcrRoleAuthorizationPolicyUtils.internalSetBindings(
pentahoJcrConstants,
runtimeRolesFolderNode,
runtimeRoleName,
logicalRoleNames,
phoNsPrefix);
} else {
throw new RuntimeException(
Messages.getInstance()
.getString(
"JcrRoleAuthorizationPolicyRoleBindingDao.ERROR_0001_ATTEMPT_MOD_IMMUTABLE",
runtimeRoleName)); //$NON-NLS-1$
}
session.save();
Assert.isTrue(NodeHelper.hasNode(runtimeRolesFolderNode, phoNsPrefix, runtimeRoleName));
// update cache
String roleId = tenantedRoleNameUtils.getPrincipleId(tenant, runtimeRoleName);
cacheManager.putInRegionCache(LOGICAL_ROLE_BINDINGS_REGION, roleId, logicalRoleNames);
}
/**
* Test case for the scope of the local namespace mappings as specified in section 3.5.2
* Session-Local Mappings:
*
* <blockquote>
*
* The resulting mapping table applies only within the scope of that session
*
* </blockquote>
*
* <p>Also specified in the javadoc of {@link Session#setNamespacePrefix(String, String)}:
*
* <blockquote>
*
* The remapping only affects operations done through this <code>Session</code>. To clear all
* remappings, the client must acquire a new <code>Session</code>.
*
* </blockquote>
*/
public void testScopeOfLocalNamepaceMappings() throws RepositoryException {
String before = session.getNamespacePrefix(NS_JCR_URI);
String after = before + "-changed";
// Change the prefix of a well-known namespace
session.setNamespacePrefix(after, NS_JCR_URI);
assertEquals(after, session.getNamespacePrefix(NS_JCR_URI));
// Check whether the mapping affects another session
Session another = getHelper().getReadOnlySession();
try {
assertEquals(
"Local namespace changes must not affect other sessions",
before,
another.getNamespacePrefix(NS_JCR_URI));
} finally {
another.logout();
}
}
/**
* Test case for the initial set of local namespace mappings as specified in section 3.5.2
* Session-Local Mappings:
*
* <blockquote>
*
* When a new session is acquired, the mappings present in the persistent namespace registry are
* copied to the local namespace mappings of that session.
*
* </blockquote>
*/
public void testInitialLocalNamespaceMappings() throws RepositoryException {
String[] uris = nsr.getURIs();
for (int i = 0; i < uris.length; i++) {
assertEquals(
"The initial local namespace prefix of \""
+ uris[i]
+ "\" must match the persistent registry mapping",
nsr.getPrefix(uris[i]),
session.getNamespacePrefix(uris[i]));
}
}
/**
* Test case for the unknown prefix behaviour specified in section 3.5.2 Session-Local Mappings:
*
* <blockquote>
*
* If a JCR method is passed a name or path containing a prefix which does not exist in the local
* mapping an exception is thrown.
*
* </blockquote>
*/
public void testExceptionOnUnknownPrefix() throws RepositoryException {
// Change the local prefix of of NS_JCR_URI
// NOTE: JCR 1.0 repositories will throw an exception on this
String before = session.getNamespacePrefix(NS_JCR_URI);
String after = before + "-changed";
session.setNamespacePrefix(after, NS_JCR_URI);
// Try to use the changed prefix
try {
session.propertyExists("/" + before + ":primaryType");
fail("A path with an unknown prefix must cause" + " an exception to be thrown");
} catch (RepositoryException expected) {
}
}
/**
* Test case for the automatic generation of a new local prefix for a registered namespace URI
* that doesn't have a local mapping, as specified in section 3.5.2 Session-Local Mappings:
*
* <blockquote>
*
* If a JCR method returns a name from the repository with a namespace URI for which no local
* mapping exists, a prefix is created automatically and a mapping between that prefix and the
* namespace URI in question is added to the set of local mappings. The new prefix must differ
* from those already present among the set of local mappings.
*
* </blockquote>
*/
public void testAutomaticNewLocalPrefix() throws RepositoryException {
Set prefixes = new HashSet(Arrays.asList(session.getNamespacePrefixes()));
prefixes.remove(session.getNamespacePrefix(NS_JCR_URI));
prefixes.remove(session.getNamespacePrefix(NS_NT_URI));
// Remove the local mapping of NS_JCR_URI
// NOTE: JCR 1.0 repositories will throw an exception on this
String before = session.getNamespacePrefix(NS_JCR_URI);
session.setNamespacePrefix(before, NS_NT_URI);
// Have the repository come up with a new prefix for this namespace
String name = session.getProperty("/{" + NS_JCR_URI + "}primaryType").getName();
int colon = name.indexOf(':');
String after = name.substring(0, colon);
assertFalse(
"Automatically created new local prefix of a namespace"
+ " must be different from the prefix that removed the mapping",
after.equals(before));
assertFalse(
"Automatically created new local prefix of a namespace"
+ " must be different from those already present",
prefixes.contains(after));
try {
assertEquals(
"The local namespace mappings must match the"
+ " automatically created new prefix of a namespace",
after,
session.getNamespacePrefix(NS_JCR_URI));
} catch (NamespaceException e) {
fail(
"Automatically created new prefix must be included in"
+ " the set of local namespace mappings");
}
}
/**
* Creates and/or returns an internal folder to store a single deleted file. This folder is
* uniquely named and thus prevents same-name sibling conflicts.
*
* @param fileId id of file to delete
*/
private Node getOrCreateTrashFileIdNode(
final Session session,
final PentahoJcrConstants pentahoJcrConstants,
final Serializable fileId)
throws RepositoryException {
final String prefix = session.getNamespacePrefix(PentahoJcrConstants.PHO_NS) + ":";
final String folderName = fileId.toString(); // $NON-NLS-1$
Node trashInternalFolderNode = getOrCreateTrashInternalFolderNode(session, pentahoJcrConstants);
if (NodeHelper.hasNode(trashInternalFolderNode, prefix, folderName)) {
return NodeHelper.getNode(trashInternalFolderNode, prefix, folderName);
} else {
return trashInternalFolderNode.addNode(
prefix + folderName, pentahoJcrConstants.getPHO_NT_INTERNALFOLDER());
}
}
public void defineNamespacePrefixes(Session session) throws RepositoryException {
final Iterator<NamespaceEntry[]> iter = this.namespaceTable.values().iterator();
while (iter.hasNext()) {
final NamespaceEntry[] entries = iter.next();
for (int i = 0; i < entries.length; i++) {
// the namespace prefixing is a little bit tricky:
String mappedPrefix = null;
// first, we check if the namespace is registered with a prefix
try {
mappedPrefix = session.getNamespacePrefix(entries[i].namespace);
} catch (NamespaceException ne) {
// the namespace is not registered yet, so we should do this
// can we directly use the desired prefix?
mappedPrefix = entries[i].prefix + "_new";
try {
session.getNamespaceURI(entries[i].prefix);
} catch (NamespaceException ne2) {
// as an exception occured we can directly use the new prefix
mappedPrefix = entries[i].prefix;
}
session
.getWorkspace()
.getNamespaceRegistry()
.registerNamespace(mappedPrefix, entries[i].namespace);
}
// do we have to remap?
if (mappedPrefix != null && !mappedPrefix.equals(entries[i].prefix)) {
// check if the prefix is already used?
String oldUri = null;
try {
oldUri = session.getNamespaceURI(entries[i].prefix);
session.setNamespacePrefix(entries[i].prefix + "_old", oldUri);
} catch (NamespaceException ne) {
// ignore: prefix is not used
}
// finally set prefix
session.setNamespacePrefix(entries[i].prefix, entries[i].namespace);
}
}
}
}
protected Map<String, List<String>> getRoleBindings(Session session, ITenant tenant)
throws RepositoryException {
Map<String, List<String>> map = new HashMap<String, List<String>>();
if (tenant == null) {
tenant = JcrTenantUtils.getTenant();
}
if (!TenantUtils.isAccessibleTenant(tenant)) {
return map;
}
PentahoJcrConstants pentahoJcrConstants = new PentahoJcrConstants(session);
final String phoNsPrefix =
session.getNamespacePrefix(PentahoJcrConstants.PHO_NS) + ":"; // $NON-NLS-1$
final String onlyPentahoPattern = phoNsPrefix + "*"; // $NON-NLS-1$
Node runtimeRolesFolderNode = getRuntimeRolesFolderNode(session, tenant);
NodeIterator runtimeRoleNodes = runtimeRolesFolderNode.getNodes(onlyPentahoPattern);
if (!runtimeRoleNodes.hasNext()) {
// no bindings setup yet; fall back on bootstrap bindings
map.putAll(bootstrapRoleBindings);
} else {
while (runtimeRoleNodes.hasNext()) {
Node runtimeRoleNode = runtimeRoleNodes.nextNode();
if (runtimeRoleNode.hasProperty(pentahoJcrConstants.getPHO_BOUNDROLES())) {
// get clean runtime role name
String runtimeRoleName =
JcrStringHelper.fileNameDecode(
runtimeRoleNode.getName().substring(phoNsPrefix.length()));
// get logical role names
List<String> logicalRoleNames = new ArrayList<String>();
Value[] values =
runtimeRoleNode.getProperty(pentahoJcrConstants.getPHO_BOUNDROLES()).getValues();
for (Value value : values) {
logicalRoleNames.add(value.getString());
}
map.put(runtimeRoleName, logicalRoleNames);
}
}
}
// add all immutable bindings
map.putAll(immutableRoleBindingNames);
return map;
}
// returns encoded path
private String getOriginalParentFolderPath(
final Session session,
final PentahoJcrConstants pentahoJcrConstants,
final Node trashFileNode,
final boolean relative)
throws RepositoryException {
if (trashFileNode.getParent().hasProperty(pentahoJcrConstants.getPHO_ORIGPARENTFOLDERPATH())) {
String relPath =
trashFileNode
.getParent()
.getProperty(pentahoJcrConstants.getPHO_ORIGPARENTFOLDERPATH())
.getString();
return relative ? relPath : pathConversionHelper.relToAbs(relPath);
} else {
// legacy mode
final String prefix = session.getNamespacePrefix(PentahoJcrConstants.PHO_NS);
String originalParentFolderId =
trashFileNode.getParent().getParent().getName().substring(prefix.length() + 1);
String absPath = session.getNodeByIdentifier(originalParentFolderId).getPath();
return relative ? pathConversionHelper.absToRel(absPath) : absPath;
}
}
@Test
public void shouldAddNodeTypesAndNamespaces() throws Exception {
File file = new File("src/test/resources/config/configRepository.xml");
assertThat(file.exists(), is(true));
assertThat(file.canRead(), is(true));
assertThat(file.isFile(), is(true));
configuration.loadFrom("src/test/resources/config/configRepository.xml");
// Verify that the configration was loaded correctly ...
assertThat(configuration.repository("Car Repository").getSource(), is("Cars"));
// ModeShapeConfiguration.ConfigurationDefinition content1 =
// configuration.getConfigurationDefinition();
// Subgraph subgraph1 = content1.graph().getSubgraphOfDepth(6).at("/");
// Load the node types from the CND file, and save the configuration ...
InputStream nodeTypes = getClass().getResourceAsStream("/tck/tck_test_types.cnd");
configuration.repository("Car Repository").addNodeTypes(nodeTypes);
configuration.save();
// ModeShapeConfiguration.ConfigurationDefinition content2 =
// configuration.getConfigurationDefinition();
// Subgraph subgraph2 = content2.graph().getSubgraphOfDepth(6).at("/");
// Verify there were no problems loading the CND file ...
assertThat(configuration.getProblems().isEmpty(), is(true));
assertThat(
configuration
.getConfigurationDefinition()
.getContext()
.getNamespaceRegistry()
.isRegisteredNamespaceUri("http://www.modeshape.org/test/1.0"),
is(true));
// Verify that the graph has been updated correctly ...
ModeShapeConfiguration.ConfigurationDefinition content =
configuration.getConfigurationDefinition();
Subgraph subgraph = content.graph().getSubgraphOfDepth(6).at("/");
assertThat(
subgraph.getNode("/mode:repositories").getChildren(), hasChild(segment("Car Repository")));
assertThat(subgraph.getNode("/mode:repositories/Car Repository"), is(notNullValue()));
assertThat(
subgraph.getNode("/mode:repositories/Car Repository"),
hasProperty(ModeShapeLexicon.SOURCE_NAME, "Cars"));
assertThat(
subgraph.getNode("/mode:repositories/Car Repository").getChildren(),
hasChild(segment("mode:options")));
assertThat(
subgraph.getNode("/mode:repositories/Car Repository/jcr:nodeTypes"), is(notNullValue()));
// for (Location child : subgraph.getNode("/mode:repositories/Car
// Repository/mode:nodeTypes").getChildren()) {
// System.out.println(child.getPath().getLastSegment().getString(context().getNamespaceRegistry()));
// }
assertThat(
subgraph.getNode("/mode:repositories/Car Repository/jcr:nodeTypes").getChildren(),
hasChildren(
segment("modetest:noSameNameSibs"),
segment("modetest:referenceableUnstructured"),
segment("modetest:nodeWithMandatoryProperty"),
segment("modetest:nodeWithMandatoryChild"),
segment("modetest:unorderableUnstructured")));
assertThat(
subgraph.getNode("/mode:repositories/Car Repository/mode:namespaces"), is(notNullValue()));
// Check that the namespace in the CND file was persisted correctly ...
assertThat(
subgraph.getNode("/mode:repositories/Car Repository/mode:namespaces").getChildren(),
hasChild(segment("modetest")));
assertThat(
subgraph.getNode("/mode:repositories/Car Repository/mode:namespaces/modetest"),
hasProperty(ModeShapeLexicon.URI, "http://www.modeshape.org/test/1.0"));
// Initialize IDTrust and a policy file (which defines the "modeshape-jcr" login config name)
JaasTestUtil.initJaas("security/jaas.conf.xml");
// Create and start the engine ...
engine = configuration.build();
engine.start();
Repository repository = engine.getRepository("Car Repository");
assertThat(repository, is(notNullValue()));
// Create a session, authenticating using one of the usernames defined by our JAAS policy
// file(s) ...
Session session = null;
try {
session = repository.login(new SimpleCredentials("superuser", "superuser".toCharArray()));
// Check that the namespace showed up ...
assertThat(session.getNamespacePrefix("http://www.modeshape.org/test/1.0"), is("modetest"));
// Check that some of the node types showed up ...
NodeTypeManager ntm = session.getWorkspace().getNodeTypeManager();
assertThat(
ntm.getNodeType("modetest:noSameNameSibs"), is(notNullValue())); // throws exception
assertThat(
ntm.getNodeType("modetest:referenceableUnstructured"),
is(notNullValue())); // throws exception
assertThat(
ntm.getNodeType("modetest:nodeWithMandatoryProperty"),
is(notNullValue())); // throws exception
assertThat(
ntm.getNodeType("modetest:nodeWithMandatoryChild"),
is(notNullValue())); // throws exception
assertThat(
ntm.getNodeType("modetest:unorderableUnstructured"),
is(notNullValue())); // throws exception
} finally {
if (session != null) session.logout();
}
}
@Override
public List<String> getBoundLogicalRoleNames(
Session session, ITenant tenant, List<String> runtimeRoleNames)
throws NamespaceException, RepositoryException {
if ((tenant == null) || (tenant.getId() == null)) {
return getBoundLogicalRoleNames(session, runtimeRoleNames);
}
if (!TenantUtils.isAccessibleTenant(tenant)) {
return new ArrayList<String>();
}
final List<String> uncachedRuntimeRoleNames = new ArrayList<String>();
final Set<String> cachedBoundLogicalRoleNames = new HashSet<String>();
for (String runtimeRoleName : runtimeRoleNames) {
String roleName = tenantedRoleNameUtils.getPrincipleName(runtimeRoleName);
String roleId = tenantedRoleNameUtils.getPrincipleId(tenant, runtimeRoleName);
Object fromRegionCache =
cacheManager.getFromRegionCache(LOGICAL_ROLE_BINDINGS_REGION, roleId);
if (fromRegionCache != null) {
cachedBoundLogicalRoleNames.addAll((Collection<String>) fromRegionCache);
} else {
uncachedRuntimeRoleNames.add(roleName);
}
}
if (uncachedRuntimeRoleNames.isEmpty()) {
// no need to hit the repo
return new ArrayList<String>(cachedBoundLogicalRoleNames);
}
PentahoJcrConstants pentahoJcrConstants = new PentahoJcrConstants(session);
final String phoNsPrefix =
session.getNamespacePrefix(PentahoJcrConstants.PHO_NS) + ":"; // $NON-NLS-1$
final String onlyPentahoPattern = phoNsPrefix + "*"; // $NON-NLS-1$
HashMultimap<String, String> boundLogicalRoleNames = HashMultimap.create();
Node runtimeRolesFolderNode = getRuntimeRolesFolderNode(session, tenant);
NodeIterator runtimeRoleNodes = runtimeRolesFolderNode.getNodes(onlyPentahoPattern);
if (!runtimeRoleNodes.hasNext()) {
// no bindings setup yet; fall back on bootstrap bindings
for (String runtimeRoleName : uncachedRuntimeRoleNames) {
String roleId = tenantedRoleNameUtils.getPrincipleId(tenant, runtimeRoleName);
if (bootstrapRoleBindings.containsKey(runtimeRoleName)) {
boundLogicalRoleNames.putAll(roleId, bootstrapRoleBindings.get(runtimeRoleName));
}
}
} else {
for (String runtimeRoleName : uncachedRuntimeRoleNames) {
if (NodeHelper.hasNode(runtimeRolesFolderNode, phoNsPrefix, runtimeRoleName)) {
Node runtimeRoleFolderNode =
NodeHelper.getNode(runtimeRolesFolderNode, phoNsPrefix, runtimeRoleName);
if (runtimeRoleFolderNode.hasProperty(pentahoJcrConstants.getPHO_BOUNDROLES())) {
Value[] values =
runtimeRoleFolderNode
.getProperty(pentahoJcrConstants.getPHO_BOUNDROLES())
.getValues();
String roleId = tenantedRoleNameUtils.getPrincipleId(tenant, runtimeRoleName);
for (Value value : values) {
boundLogicalRoleNames.put(roleId, value.getString());
}
}
}
}
}
// now add in immutable bound logical role names
for (String runtimeRoleName : uncachedRuntimeRoleNames) {
if (immutableRoleBindings.containsKey(runtimeRoleName)) {
String roleId = tenantedRoleNameUtils.getPrincipleId(tenant, runtimeRoleName);
boundLogicalRoleNames.putAll(roleId, immutableRoleBindingNames.get(runtimeRoleName));
}
}
// update cache
Map<String, Collection<String>> stringCollectionMap = boundLogicalRoleNames.asMap();
for (Entry<String, Collection<String>> stringCollectionEntry : stringCollectionMap.entrySet()) {
cacheManager.putInRegionCache(
LOGICAL_ROLE_BINDINGS_REGION,
stringCollectionEntry.getKey(),
stringCollectionEntry.getValue());
}
// now add in those runtime roles that have no bindings to the cache
for (String runtimeRoleName : uncachedRuntimeRoleNames) {
String roleId = tenantedRoleNameUtils.getPrincipleId(tenant, runtimeRoleName);
if (cacheManager.getFromRegionCache(LOGICAL_ROLE_BINDINGS_REGION, roleId) == null) {
cacheManager.putInRegionCache(
LOGICAL_ROLE_BINDINGS_REGION, roleId, Collections.emptyList());
}
}
// combine cached findings plus ones from repo
Set<String> res = new HashSet<String>();
res.addAll(cachedBoundLogicalRoleNames);
res.addAll(boundLogicalRoleNames.values());
return new ArrayList<String>(res);
}