org.jahia.bin.filters

Class ContentManagerAccessCheckFilter

java.lang.Object

org.jahia.bin.filters.ContentManagerAccessCheckFilter

All Implemented Interfaces:

EventListener, javax.servlet.Filter, org.springframework.context.ApplicationListener<JahiaTemplateManagerService.TemplatePackageRedeployedEvent>

public class ContentManagerAccessCheckFilter
extends Object
implements javax.servlet.Filter, org.springframework.context.ApplicationListener<JahiaTemplateManagerService.TemplatePackageRedeployedEvent>

Protects access to the content manager and content picker by enforcing permission checks and validating parameters.

Author:

Sergiy Shyrkov

Constructor Summary

Constructors

Constructor and Description
ContentManagerAccessCheckFilter()

Method Summary

Modifier and Type	Method and Description
protected boolean	checkConfig(javax.servlet.http.HttpServletRequest request)
protected boolean	checkWorkspace(javax.servlet.http.HttpServletRequest request)
void	destroy()
void	doFilter(javax.servlet.ServletRequest servletRequest, javax.servlet.ServletResponse servletResponse, javax.servlet.FilterChain chain)
static JahiaTemplatesPackage	getCurrentSiteTemplatePackage(javax.servlet.http.HttpServletRequest request) Returns the template package of the current site, based on the information provided when the Content Manager window was called.
protected JahiaUser	getCurrentUser()
protected Map<String,String>	getMapping()
protected static JCRSiteNode	getSite(javax.servlet.http.HttpServletRequest request)
void	init(javax.servlet.FilterConfig filterConfig)
protected boolean	isAllowed(String permission, JCRNodeWrapper site)
protected boolean	isContentPicker(javax.servlet.http.HttpServletRequest request)
void	onApplicationEvent(JahiaTemplateManagerService.TemplatePackageRedeployedEvent event)
void	setDefaultContentManager(String defaultContentManager)
void	setDefaultContentPicker(String defaultContentPicker)
void	setRequireAuthenticatedUser(boolean requireAuthenticatedUser)
void	setSettingsBean(SettingsBean settingsBean)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

ContentManagerAccessCheckFilter

public ContentManagerAccessCheckFilter()

Method Detail

getCurrentSiteTemplatePackage

public static JahiaTemplatesPackage getCurrentSiteTemplatePackage(javax.servlet.http.HttpServletRequest request)

Returns the template package of the current site, based on the information provided when the Content Manager window was called. If no site information was provided, the template package of the default site it returned. If there is no default site, null is returned.

Parameters:

request - current HTTP request object

Returns:

the template package of the current site, based on the information provided when the Content Manager window was called. If no site information was provided, the template package of the default site it returned. If there is no default site, null is returned

checkConfig

protected boolean checkConfig(javax.servlet.http.HttpServletRequest request)

checkWorkspace

protected boolean checkWorkspace(javax.servlet.http.HttpServletRequest request)

destroy

public void destroy()

Specified by:

destroy in interface javax.servlet.Filter

doFilter

public void doFilter(javax.servlet.ServletRequest servletRequest,
                     javax.servlet.ServletResponse servletResponse,
                     javax.servlet.FilterChain chain)
              throws IOException,
                     javax.servlet.ServletException

Specified by:

doFilter in interface javax.servlet.Filter

Throws:

IOException

javax.servlet.ServletException

getCurrentUser

protected JahiaUser getCurrentUser()

getMapping

protected Map<String,String> getMapping()

getSite

protected static JCRSiteNode getSite(javax.servlet.http.HttpServletRequest request)

init

public void init(javax.servlet.FilterConfig filterConfig)
          throws javax.servlet.ServletException

Specified by:

init in interface javax.servlet.Filter

Throws:

javax.servlet.ServletException

isAllowed

protected boolean isAllowed(String permission,
                            JCRNodeWrapper site)

isContentPicker

protected boolean isContentPicker(javax.servlet.http.HttpServletRequest request)

onApplicationEvent

public void onApplicationEvent(JahiaTemplateManagerService.TemplatePackageRedeployedEvent event)

Specified by:

onApplicationEvent in interface org.springframework.context.ApplicationListener<JahiaTemplateManagerService.TemplatePackageRedeployedEvent>

setDefaultContentManager

public void setDefaultContentManager(String defaultContentManager)

setDefaultContentPicker

public void setDefaultContentPicker(String defaultContentPicker)

setRequireAuthenticatedUser

public void setRequireAuthenticatedUser(boolean requireAuthenticatedUser)

setSettingsBean

public void setSettingsBean(SettingsBean settingsBean)