Subversion Repositories bacoAlunos

package pt.estgp.estgweb.filters.filters;

import org.apache.log4j.Logger;

import pt.estgp.estgweb.Globals;

import pt.estgp.estgweb.domain.UserSession;

import pt.estgp.estgweb.filters.chains.AdminControlFilter;

import pt.estgp.estgweb.filters.exceptions.AccessDeniedOperationException;

import pt.estgp.estgweb.filters.exceptions.NeedAuthenticationException;

import pt.estgp.estgweb.utils.ConfigProperties;

import pt.estgp.estgweb.utils.RoleManager;

import pt.utl.ist.berserk.ServiceRequest;

import pt.utl.ist.berserk.ServiceResponse;

import pt.utl.ist.berserk.logic.filterManager.FilterParameters;

import pt.utl.ist.berserk.logic.filterManager.exceptions.FilterException;

public class ParameterValuePrefixCheck extends AdminControlFilter {

    private static final 1.5.0/docs/api/java/util/logging/Logger.html">Logger logger = 1.5.0/docs/api/java/util/logging/Logger.html">Logger.getLogger(ParameterValuePrefixCheck.class);

    private static final 1.5.0/docs/api/java/lang/String.html">String ALL_ROLE = ConfigProperties.getProperty("user.super");

    public void execute(ServiceRequest request, ServiceResponse response)

            throws FilterException, 1.5.0/docs/api/java/lang/Exception.html">Exception

    {

    }

    public void execute(ServiceRequest request, ServiceResponse response, FilterParameters filterParameters) throws FilterException, 1.5.0/docs/api/java/lang/Exception.html">Exception

    {

        UserSession userSession = (UserSession) request.getServiceParameters().getParameter(Globals.USER_SESSION_KEY);

        if(userSession.getUser() == null)

        {

            logger.info("try access restricted area:" + request.getRequester());

            throw new NeedAuthenticationException();

        }

        if(RoleManager.hasRole(userSession.getUser(),ALL_ROLE) || userSession.getUser().isSuperuser())

            return;

        1.5.0/docs/api/java/lang/String.html">String parameterName = (1.5.0/docs/api/java/lang/String.html">String) filterParameters.getParameter(0);

        1.5.0/docs/api/java/lang/String.html">String parameterPrefix = (1.5.0/docs/api/java/lang/String.html">String) filterParameters.getParameter(1);

        if(filterParameters.getParameter(parameterName) != null)

        {

            1.5.0/docs/api/java/lang/String.html">String parameter = (1.5.0/docs/api/java/lang/String.html">String) filterParameters.getParameter(parameterName);

            if(parameter.startsWith(parameterPrefix))

            {

                return;

            }

        }

        throw new AccessDeniedOperationException("fail.prefix.parameter");

    }

}