com.googlecode.psiprobe.tools.SecurityUtils.java Source code

Introduction

Here is the source code for com.googlecode.psiprobe.tools.SecurityUtils.java

Source

/*
 * Licensed under the GPL License.  You may not use this file except in
 * compliance with the License.  You may obtain a copy of the License at
 *
 *     http://www.gnu.org/licenses/old-licenses/gpl-2.0.html
 *
 * THIS PACKAGE IS PROVIDED "AS IS" AND WITHOUT ANY EXPRESS OR IMPLIED
 * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF
 * MERCHANTIBILITY AND FITNESS FOR A PARTICULAR PURPOSE.
 */
package com.googlecode.psiprobe.tools;

import javax.servlet.ServletContext;
import javax.servlet.http.HttpServletRequest;
import org.springframework.security.GrantedAuthority;
import org.springframework.security.context.SecurityContextHolder;

/**
 * 
 * @author Vlad Ilyushchenko
 * @author Mark Lewis
 */
public class SecurityUtils {

    private SecurityUtils() {
    }

    public static boolean hasAttributeValueRole(ServletContext servletContext, HttpServletRequest request) {
        String[] privilegedRoles = getPrivilegedRoles(servletContext).split(",");
        for (int i = 0; i < privilegedRoles.length; i++) {
            String privilegedRole = privilegedRoles[i];
            if (userHasRole(privilegedRole)) {
                return true;
            }
        }
        return false;
    }

    private static boolean userHasRole(String privilegedRole) {
        GrantedAuthority[] authorities = SecurityContextHolder.getContext().getAuthentication().getAuthorities();

        boolean result = false;
        for (int i = 0; i < authorities.length; i++) {
            if (privilegedRole.equals(authorities[i].getAuthority())) {
                result = true;
                break;
            }
        }
        return result;
    }

    private static boolean userHasRole(String privilegedRole, HttpServletRequest request) {
        return request.isUserInRole(privilegedRole);
    }

    private static String getPrivilegedRoles(ServletContext servletContext) {
        return servletContext.getInitParameter("attribute.value.roles");
    }

}