| <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" |
| "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> |
| <html> |
| <head> |
| <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"/> |
| <title>Coverage Report</title> |
| <link title="Style" type="text/css" rel="stylesheet" href="css/main.css"/> |
| <script type="text/javascript" src="js/popup.js"></script> |
| </head> |
| <body> |
| <h5>Coverage Report - com.google.enterprise.adaptor.Acl</h5> |
| <div class="separator"> </div> |
| <table class="report"> |
| <thead><tr> <td class="heading">Classes in this File</td> <td class="heading"><a class="dfn" href="help.html" onclick="popupwindow('help.html'); return false;">Line Coverage</a></td> <td class="heading"><a class="dfn" href="help.html" onclick="popupwindow('help.html'); return false;">Branch Coverage</a></td> <td class="heading"><a class="dfn" href="help.html" onclick="popupwindow('help.html'); return false;">Complexity</a></td></tr></thead> |
| <tr><td><a href="com.google.enterprise.adaptor.Acl.html">Acl</a></td><td><table cellpadding="0px" cellspacing="0px" class="percentgraph"><tr class="percentgraph"><td align="right" class="percentgraph" width="40">0</td><td class="percentgraph"><div class="percentgraph"><div class="greenbar" style="width:100px"><span class="text">146/146</span></div></div></td></tr></table></td><td><table cellpadding="0px" cellspacing="0px" class="percentgraph"><tr class="percentgraph"><td align="right" class="percentgraph" width="40">3</td><td class="percentgraph"><div class="percentgraph"><div class="greenbar" style="width:97px"><span class="text">97/100</span></div></div></td></tr></table></td><td class="value"><span class="hidden">2.6666666666666665;</span>2.667</td></tr> |
| <tr><td><a href="com.google.enterprise.adaptor.Acl.html">Acl$1</a></td><td><table cellpadding="0px" cellspacing="0px" class="percentgraph"><tr class="percentgraph"><td align="right" class="percentgraph" width="40">0</td><td class="percentgraph"><div class="percentgraph"><div class="greenbar" style="width:100px"><span class="text">2/2</span></div></div></td></tr></table></td><td><table cellpadding="0px" cellspacing="0px" class="percentgraph"><tr class="percentgraph"><td align="right" class="percentgraph" width="40"><a class="dfn" href="help.html" onclick="popupwindow('help.html'); return false;">N/A</a></td><td class="percentgraph"><div class="percentgraph"><div class="na" style="width:100px"><span class="text"><a class="dfn" href="help.html" onclick="popupwindow('help.html'); return false;">N/A</a></span></div></div></td></tr></table></td><td class="value"><span class="hidden">2.6666666666666665;</span>2.667</td></tr> |
| <tr><td><a href="com.google.enterprise.adaptor.Acl.html">Acl$2</a></td><td><table cellpadding="0px" cellspacing="0px" class="percentgraph"><tr class="percentgraph"><td align="right" class="percentgraph" width="40">0</td><td class="percentgraph"><div class="percentgraph"><div class="greenbar" style="width:100px"><span class="text">2/2</span></div></div></td></tr></table></td><td><table cellpadding="0px" cellspacing="0px" class="percentgraph"><tr class="percentgraph"><td align="right" class="percentgraph" width="40"><a class="dfn" href="help.html" onclick="popupwindow('help.html'); return false;">N/A</a></td><td class="percentgraph"><div class="percentgraph"><div class="na" style="width:100px"><span class="text"><a class="dfn" href="help.html" onclick="popupwindow('help.html'); return false;">N/A</a></span></div></div></td></tr></table></td><td class="value"><span class="hidden">2.6666666666666665;</span>2.667</td></tr> |
| <tr><td><a href="com.google.enterprise.adaptor.Acl.html">Acl$BatchRetriever</a></td><td><table cellpadding="0px" cellspacing="0px" class="percentgraph"><tr class="percentgraph"><td align="right" class="percentgraph" width="40"><a class="dfn" href="help.html" onclick="popupwindow('help.html'); return false;">N/A</a></td><td class="percentgraph"><div class="percentgraph"><div class="na" style="width:100px"><span class="text"><a class="dfn" href="help.html" onclick="popupwindow('help.html'); return false;">N/A</a></span></div></div></td></tr></table></td><td><table cellpadding="0px" cellspacing="0px" class="percentgraph"><tr class="percentgraph"><td align="right" class="percentgraph" width="40"><a class="dfn" href="help.html" onclick="popupwindow('help.html'); return false;">N/A</a></td><td class="percentgraph"><div class="percentgraph"><div class="na" style="width:100px"><span class="text"><a class="dfn" href="help.html" onclick="popupwindow('help.html'); return false;">N/A</a></span></div></div></td></tr></table></td><td class="value"><span class="hidden">2.6666666666666665;</span>2.667</td></tr> |
| <tr><td><a href="com.google.enterprise.adaptor.Acl.html">Acl$Builder</a></td><td><table cellpadding="0px" cellspacing="0px" class="percentgraph"><tr class="percentgraph"><td align="right" class="percentgraph" width="40">0</td><td class="percentgraph"><div class="percentgraph"><div class="greenbar" style="width:100px"><span class="text">68/68</span></div></div></td></tr></table></td><td><table cellpadding="0px" cellspacing="0px" class="percentgraph"><tr class="percentgraph"><td align="right" class="percentgraph" width="40">0</td><td class="percentgraph"><div class="percentgraph"><div class="greenbar" style="width:100px"><span class="text">16/16</span></div></div></td></tr></table></td><td class="value"><span class="hidden">2.6666666666666665;</span>2.667</td></tr> |
| <tr><td><a href="com.google.enterprise.adaptor.Acl.html">Acl$CaseInsensitiveCmp</a></td><td><table cellpadding="0px" cellspacing="0px" class="percentgraph"><tr class="percentgraph"><td align="right" class="percentgraph" width="40">1</td><td class="percentgraph"><div class="percentgraph"><div class="greenbar" style="width:90px"><span class="text">9/10</span></div></div></td></tr></table></td><td><table cellpadding="0px" cellspacing="0px" class="percentgraph"><tr class="percentgraph"><td align="right" class="percentgraph" width="40">0</td><td class="percentgraph"><div class="percentgraph"><div class="greenbar" style="width:100px"><span class="text">2/2</span></div></div></td></tr></table></td><td class="value"><span class="hidden">2.6666666666666665;</span>2.667</td></tr> |
| <tr><td><a href="com.google.enterprise.adaptor.Acl.html">Acl$Decision</a></td><td><table cellpadding="0px" cellspacing="0px" class="percentgraph"><tr class="percentgraph"><td align="right" class="percentgraph" width="40">1</td><td class="percentgraph"><div class="percentgraph"><div class="greenbar" style="width:83px"><span class="text">5/6</span></div></div></td></tr></table></td><td><table cellpadding="0px" cellspacing="0px" class="percentgraph"><tr class="percentgraph"><td align="right" class="percentgraph" width="40">1</td><td class="percentgraph"><div class="percentgraph"><div class="greenbar" style="width:75px"><span class="text">3/4</span></div></div></td></tr></table></td><td class="value"><span class="hidden">2.6666666666666665;</span>2.667</td></tr> |
| <tr><td><a href="com.google.enterprise.adaptor.Acl.html">Acl$InheritanceType</a></td><td><table cellpadding="0px" cellspacing="0px" class="percentgraph"><tr class="percentgraph"><td align="right" class="percentgraph" width="40">0</td><td class="percentgraph"><div class="percentgraph"><div class="greenbar" style="width:100px"><span class="text">9/9</span></div></div></td></tr></table></td><td><table cellpadding="0px" cellspacing="0px" class="percentgraph"><tr class="percentgraph"><td align="right" class="percentgraph" width="40"><a class="dfn" href="help.html" onclick="popupwindow('help.html'); return false;">N/A</a></td><td class="percentgraph"><div class="percentgraph"><div class="na" style="width:100px"><span class="text"><a class="dfn" href="help.html" onclick="popupwindow('help.html'); return false;">N/A</a></span></div></div></td></tr></table></td><td class="value"><span class="hidden">2.6666666666666665;</span>2.667</td></tr> |
| <tr><td><a href="com.google.enterprise.adaptor.Acl.html">Acl$InheritanceType$1</a></td><td><table cellpadding="0px" cellspacing="0px" class="percentgraph"><tr class="percentgraph"><td align="right" class="percentgraph" width="40">0</td><td class="percentgraph"><div class="percentgraph"><div class="greenbar" style="width:100px"><span class="text">4/4</span></div></div></td></tr></table></td><td><table cellpadding="0px" cellspacing="0px" class="percentgraph"><tr class="percentgraph"><td align="right" class="percentgraph" width="40">0</td><td class="percentgraph"><div class="percentgraph"><div class="greenbar" style="width:100px"><span class="text">2/2</span></div></div></td></tr></table></td><td class="value"><span class="hidden">2.6666666666666665;</span>2.667</td></tr> |
| <tr><td><a href="com.google.enterprise.adaptor.Acl.html">Acl$InheritanceType$2</a></td><td><table cellpadding="0px" cellspacing="0px" class="percentgraph"><tr class="percentgraph"><td align="right" class="percentgraph" width="40">0</td><td class="percentgraph"><div class="percentgraph"><div class="greenbar" style="width:100px"><span class="text">4/4</span></div></div></td></tr></table></td><td><table cellpadding="0px" cellspacing="0px" class="percentgraph"><tr class="percentgraph"><td align="right" class="percentgraph" width="40">0</td><td class="percentgraph"><div class="percentgraph"><div class="greenbar" style="width:100px"><span class="text">2/2</span></div></div></td></tr></table></td><td class="value"><span class="hidden">2.6666666666666665;</span>2.667</td></tr> |
| <tr><td><a href="com.google.enterprise.adaptor.Acl.html">Acl$InheritanceType$3</a></td><td><table cellpadding="0px" cellspacing="0px" class="percentgraph"><tr class="percentgraph"><td align="right" class="percentgraph" width="40">0</td><td class="percentgraph"><div class="percentgraph"><div class="greenbar" style="width:100px"><span class="text">4/4</span></div></div></td></tr></table></td><td><table cellpadding="0px" cellspacing="0px" class="percentgraph"><tr class="percentgraph"><td align="right" class="percentgraph" width="40">0</td><td class="percentgraph"><div class="percentgraph"><div class="greenbar" style="width:100px"><span class="text">4/4</span></div></div></td></tr></table></td><td class="value"><span class="hidden">2.6666666666666665;</span>2.667</td></tr> |
| <tr><td><a href="com.google.enterprise.adaptor.Acl.html">Acl$InheritanceType$4</a></td><td><table cellpadding="0px" cellspacing="0px" class="percentgraph"><tr class="percentgraph"><td align="right" class="percentgraph" width="40">0</td><td class="percentgraph"><div class="percentgraph"><div class="greenbar" style="width:100px"><span class="text">3/3</span></div></div></td></tr></table></td><td><table cellpadding="0px" cellspacing="0px" class="percentgraph"><tr class="percentgraph"><td align="right" class="percentgraph" width="40"><a class="dfn" href="help.html" onclick="popupwindow('help.html'); return false;">N/A</a></td><td class="percentgraph"><div class="percentgraph"><div class="na" style="width:100px"><span class="text"><a class="dfn" href="help.html" onclick="popupwindow('help.html'); return false;">N/A</a></span></div></div></td></tr></table></td><td class="value"><span class="hidden">2.6666666666666665;</span>2.667</td></tr> |
| |
| </table> |
| <div class="separator"> </div> |
| <table cellspacing="0" cellpadding="0" class="src"> |
| <tr> <td class="numLine"> 1</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">// Copyright 2012 Google Inc. All Rights Reserved.</span></pre></td></tr> |
| <tr> <td class="numLine"> 2</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">//</span></pre></td></tr> |
| <tr> <td class="numLine"> 3</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">// Licensed under the Apache License, Version 2.0 (the "License");</span></pre></td></tr> |
| <tr> <td class="numLine"> 4</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">// you may not use this file except in compliance with the License.</span></pre></td></tr> |
| <tr> <td class="numLine"> 5</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">// You may obtain a copy of the License at</span></pre></td></tr> |
| <tr> <td class="numLine"> 6</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">//</span></pre></td></tr> |
| <tr> <td class="numLine"> 7</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">// http://www.apache.org/licenses/LICENSE-2.0</span></pre></td></tr> |
| <tr> <td class="numLine"> 8</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">//</span></pre></td></tr> |
| <tr> <td class="numLine"> 9</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">// Unless required by applicable law or agreed to in writing, software</span></pre></td></tr> |
| <tr> <td class="numLine"> 10</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">// distributed under the License is distributed on an "AS IS" BASIS,</span></pre></td></tr> |
| <tr> <td class="numLine"> 11</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.</span></pre></td></tr> |
| <tr> <td class="numLine"> 12</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">// See the License for the specific language governing permissions and</span></pre></td></tr> |
| <tr> <td class="numLine"> 13</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">// limitations under the License.</span></pre></td></tr> |
| <tr> <td class="numLine"> 14</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> </pre></td></tr> |
| <tr> <td class="numLine"> 15</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">package</span> com.google.enterprise.adaptor;</pre></td></tr> |
| <tr> <td class="numLine"> 16</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> </pre></td></tr> |
| <tr> <td class="numLine"> 17</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">import</span> com.google.common.collect.Sets;</pre></td></tr> |
| <tr> <td class="numLine"> 18</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> </pre></td></tr> |
| <tr> <td class="numLine"> 19</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">import</span> java.io.IOException;</pre></td></tr> |
| <tr> <td class="numLine"> 20</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">import</span> java.util.ArrayList;</pre></td></tr> |
| <tr> <td class="numLine"> 21</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">import</span> java.util.Arrays;</pre></td></tr> |
| <tr> <td class="numLine"> 22</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">import</span> java.util.Collection;</pre></td></tr> |
| <tr> <td class="numLine"> 23</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">import</span> java.util.Collections;</pre></td></tr> |
| <tr> <td class="numLine"> 24</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">import</span> java.util.Comparator;</pre></td></tr> |
| <tr> <td class="numLine"> 25</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">import</span> java.util.HashMap;</pre></td></tr> |
| <tr> <td class="numLine"> 26</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">import</span> java.util.HashSet;</pre></td></tr> |
| <tr> <td class="numLine"> 27</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">import</span> java.util.Locale;</pre></td></tr> |
| <tr> <td class="numLine"> 28</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">import</span> java.util.LinkedList;</pre></td></tr> |
| <tr> <td class="numLine"> 29</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">import</span> java.util.List;</pre></td></tr> |
| <tr> <td class="numLine"> 30</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">import</span> java.util.Map;</pre></td></tr> |
| <tr> <td class="numLine"> 31</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">import</span> java.util.Set;</pre></td></tr> |
| <tr> <td class="numLine"> 32</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">import</span> java.util.TreeSet;</pre></td></tr> |
| <tr> <td class="numLine"> 33</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">import</span> java.util.logging.Level;</pre></td></tr> |
| <tr> <td class="numLine"> 34</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">import</span> java.util.logging.Logger;</pre></td></tr> |
| <tr> <td class="numLine"> 35</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> </pre></td></tr> |
| <tr> <td class="numLine"> 36</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">/**</span></pre></td></tr> |
| <tr> <td class="numLine"> 37</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * Immutable access control list. For description of the semantics of the</span></pre></td></tr> |
| <tr> <td class="numLine"> 38</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * various fields, see {@link #isAuthorizedLocal isAuthorizedLocal} and</span></pre></td></tr> |
| <tr> <td class="numLine"> 39</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * {@link #isAuthorized isAuthorized}. Users and groups must not be {@code</span></pre></td></tr> |
| <tr> <td class="numLine"> 40</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * null}, {@code ""}, or have surrounding whitespace. These values are</span></pre></td></tr> |
| <tr> <td class="numLine"> 41</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * disallowed to prevent confusion since {@code null} doesn't make sense, {@code</span></pre></td></tr> |
| <tr> <td class="numLine"> 42</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * ""} would be ignored by the GSA, and surrounding whitespace is automatically</span></pre></td></tr> |
| <tr> <td class="numLine"> 43</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * trimmed by the GSA.</span></pre></td></tr> |
| <tr> <td class="numLine"> 44</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr> |
| <tr> <td class="numLineCover"> 45</td> <td class="nbHitsCovered"> 914</td> <td class="src"><pre class="src"> <span class="keyword">public</span> <span class="keyword">class</span> Acl {</pre></td></tr> |
| <tr> <td class="numLine"> 46</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">/**</span></pre></td></tr> |
| <tr> <td class="numLine"> 47</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * Empty convenience instance with all defaults used.</span></pre></td></tr> |
| <tr> <td class="numLine"> 48</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> *</span></pre></td></tr> |
| <tr> <td class="numLine"> 49</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * @see Builder#Acl.Builder()</span></pre></td></tr> |
| <tr> <td class="numLine"> 50</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr> |
| <tr> <td class="numLineCover"> 51</td> <td class="nbHitsCovered"> 1</td> <td class="src"><pre class="src"> <span class="keyword">public</span> <span class="keyword">static</span> <span class="keyword">final</span> Acl EMPTY = <span class="keyword">new</span> Acl.Builder().build();</pre></td></tr> |
| <tr> <td class="numLine"> 52</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">/**</span></pre></td></tr> |
| <tr> <td class="numLine"> 53</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * An almost-empty ACL that can be used instead of {@link #EMPTY} when sending</span></pre></td></tr> |
| <tr> <td class="numLine"> 54</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * ACLs to the GSA. This allows the GSA to distinguish between an empty ACL</span></pre></td></tr> |
| <tr> <td class="numLine"> 55</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * and a non-existant ACL.</span></pre></td></tr> |
| <tr> <td class="numLine"> 56</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr> |
| <tr> <td class="numLineCover"> 57</td> <td class="nbHitsCovered"> 1</td> <td class="src"><pre class="src"> <span class="keyword">static</span> <span class="keyword">final</span> Acl FAKE_EMPTY = <span class="keyword">new</span> Acl.Builder()</pre></td></tr> |
| <tr> <td class="numLine"> 58</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> .setDenyUsers(Arrays.asList(</pre></td></tr> |
| <tr> <td class="numLine"> 59</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">new</span> UserPrincipal(<span class="string">"google:fakeUserToPreventMissingAcl"</span>)))</pre></td></tr> |
| <tr> <td class="numLine"> 60</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> .build();</pre></td></tr> |
| <tr> <td class="numLine"> 61</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> </pre></td></tr> |
| <tr> <td class="numLineCover"> 62</td> <td class="nbHitsCovered"> 1</td> <td class="src"><pre class="src"> <span class="keyword">private</span> <span class="keyword">static</span> <span class="keyword">final</span> Logger log = Logger.getLogger(Acl.<span class="keyword">class</span>.getName());</pre></td></tr> |
| <tr> <td class="numLine"> 63</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> </pre></td></tr> |
| <tr> <td class="numLine"> 64</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">/** Locale used for case insensitivity related operations. */</span></pre></td></tr> |
| <tr> <td class="numLineCover"> 65</td> <td class="nbHitsCovered"> 1</td> <td class="src"><pre class="src"> <span class="keyword">private</span> <span class="keyword">static</span> <span class="keyword">final</span> Locale CASE_LOCALE = Locale.ENGLISH;</pre></td></tr> |
| <tr> <td class="numLine"> 66</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> </pre></td></tr> |
| <tr> <td class="numLine"> 67</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">private</span> <span class="keyword">final</span> Set<GroupPrincipal> permitGroups;</pre></td></tr> |
| <tr> <td class="numLine"> 68</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">private</span> <span class="keyword">final</span> Set<GroupPrincipal> denyGroups;</pre></td></tr> |
| <tr> <td class="numLine"> 69</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">private</span> <span class="keyword">final</span> Set<UserPrincipal> permitUsers;</pre></td></tr> |
| <tr> <td class="numLine"> 70</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">private</span> <span class="keyword">final</span> Set<UserPrincipal> denyUsers;</pre></td></tr> |
| <tr> <td class="numLine"> 71</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">private</span> <span class="keyword">final</span> DocId inheritFrom;</pre></td></tr> |
| <tr> <td class="numLine"> 72</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">private</span> <span class="keyword">final</span> String inheritFromFragment;</pre></td></tr> |
| <tr> <td class="numLine"> 73</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">private</span> <span class="keyword">final</span> InheritanceType inheritType;</pre></td></tr> |
| <tr> <td class="numLine"> 74</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">private</span> <span class="keyword">final</span> <span class="keyword">boolean</span> caseSensitive;</pre></td></tr> |
| <tr> <td class="numLine"> 75</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> </pre></td></tr> |
| <tr> <td class="numLine"> 76</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">private</span> Acl(Set<GroupPrincipal> permitGroups, Set<GroupPrincipal> denyGroups,</pre></td></tr> |
| <tr> <td class="numLine"> 77</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> Set<UserPrincipal> permitUsers, Set<UserPrincipal> denyUsers,</pre></td></tr> |
| <tr> <td class="numLine"> 78</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> DocId inheritFrom, String inheritFromFragment,</pre></td></tr> |
| <tr> <td class="numLineCover"> 79</td> <td class="nbHitsCovered"> 151</td> <td class="src"><pre class="src"> InheritanceType inheritType, <span class="keyword">boolean</span> caseSensitive) {</pre></td></tr> |
| <tr> <td class="numLineCover"> 80</td> <td class="nbHitsCovered"><a title="Line 80: Conditional coverage 100% (2/2)."> 151</a></td> <td class="src"><pre class="src"> <a title="Line 80: Conditional coverage 100% (2/2)."> <span class="keyword">if</span> (!caseSensitive) {</a></pre></td></tr> |
| <tr> <td class="numLineCover"> 81</td> <td class="nbHitsCovered"> 21</td> <td class="src"><pre class="src"> permitGroups = Collections.unmodifiableSet(cmpWrap(permitGroups));</pre></td></tr> |
| <tr> <td class="numLineCover"> 82</td> <td class="nbHitsCovered"> 21</td> <td class="src"><pre class="src"> denyGroups = Collections.unmodifiableSet(cmpWrap(denyGroups));</pre></td></tr> |
| <tr> <td class="numLineCover"> 83</td> <td class="nbHitsCovered"> 21</td> <td class="src"><pre class="src"> permitUsers = Collections.unmodifiableSet(cmpWrap(permitUsers));</pre></td></tr> |
| <tr> <td class="numLineCover"> 84</td> <td class="nbHitsCovered"> 21</td> <td class="src"><pre class="src"> denyUsers = Collections.unmodifiableSet(cmpWrap(denyUsers));</pre></td></tr> |
| <tr> <td class="numLine"> 85</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLineCover"> 86</td> <td class="nbHitsCovered"> 151</td> <td class="src"><pre class="src"> <span class="keyword">this</span>.permitGroups = permitGroups;</pre></td></tr> |
| <tr> <td class="numLineCover"> 87</td> <td class="nbHitsCovered"> 151</td> <td class="src"><pre class="src"> <span class="keyword">this</span>.denyGroups = denyGroups;</pre></td></tr> |
| <tr> <td class="numLineCover"> 88</td> <td class="nbHitsCovered"> 151</td> <td class="src"><pre class="src"> <span class="keyword">this</span>.permitUsers = permitUsers;</pre></td></tr> |
| <tr> <td class="numLineCover"> 89</td> <td class="nbHitsCovered"> 151</td> <td class="src"><pre class="src"> <span class="keyword">this</span>.denyUsers = denyUsers;</pre></td></tr> |
| <tr> <td class="numLineCover"> 90</td> <td class="nbHitsCovered"> 151</td> <td class="src"><pre class="src"> <span class="keyword">this</span>.inheritFrom = inheritFrom;</pre></td></tr> |
| <tr> <td class="numLineCover"> 91</td> <td class="nbHitsCovered"> 151</td> <td class="src"><pre class="src"> <span class="keyword">this</span>.inheritFromFragment = inheritFromFragment;</pre></td></tr> |
| <tr> <td class="numLineCover"> 92</td> <td class="nbHitsCovered"> 151</td> <td class="src"><pre class="src"> <span class="keyword">this</span>.inheritType = inheritType;</pre></td></tr> |
| <tr> <td class="numLineCover"> 93</td> <td class="nbHitsCovered"> 151</td> <td class="src"><pre class="src"> <span class="keyword">this</span>.caseSensitive = caseSensitive;</pre></td></tr> |
| <tr> <td class="numLineCover"> 94</td> <td class="nbHitsCovered"> 151</td> <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 95</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> </pre></td></tr> |
| <tr> <td class="numLine"> 96</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">private</span> <P <span class="keyword">extends</span> Principal> Set<P> cmpWrap(Set<P> unwrapped) {</pre></td></tr> |
| <tr> <td class="numLineCover"> 97</td> <td class="nbHitsCovered"> 90</td> <td class="src"><pre class="src"> Set<P> tmp = <span class="keyword">new</span> TreeSet<P>(<span class="keyword">new</span> CaseInsensitiveCmp<P>());</pre></td></tr> |
| <tr> <td class="numLineCover"> 98</td> <td class="nbHitsCovered"> 90</td> <td class="src"><pre class="src"> tmp.addAll(unwrapped);</pre></td></tr> |
| <tr> <td class="numLineCover"> 99</td> <td class="nbHitsCovered"> 90</td> <td class="src"><pre class="src"> <span class="keyword">return</span> tmp;</pre></td></tr> |
| <tr> <td class="numLine"> 100</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 101</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> </pre></td></tr> |
| <tr> <td class="numLineCover"> 102</td> <td class="nbHitsCovered"> 413</td> <td class="src"><pre class="src"> <span class="keyword">private</span> <span class="keyword">static</span> <span class="keyword">class</span> CaseInsensitiveCmp<P <span class="keyword">extends</span> Principal></pre></td></tr> |
| <tr> <td class="numLine"> 103</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">implements</span> Comparator<P> {</pre></td></tr> |
| <tr> <td class="numLine"> 104</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">/** Does not differentiate between UserPrincipal and GroupPrincipal */</span></pre></td></tr> |
| <tr> <td class="numLine"> 105</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">public</span> <span class="keyword">int</span> compare(P p1, P p2) {</pre></td></tr> |
| <tr> <td class="numLineCover"> 106</td> <td class="nbHitsCovered"> 233</td> <td class="src"><pre class="src"> String ns1 = p1.getNamespace().toLowerCase(CASE_LOCALE);</pre></td></tr> |
| <tr> <td class="numLineCover"> 107</td> <td class="nbHitsCovered"> 233</td> <td class="src"><pre class="src"> String ns2 = p2.getNamespace().toLowerCase(CASE_LOCALE);</pre></td></tr> |
| <tr> <td class="numLineCover"> 108</td> <td class="nbHitsCovered"> 233</td> <td class="src"><pre class="src"> <span class="keyword">int</span> nscmp = ns1.compareTo(ns2);</pre></td></tr> |
| <tr> <td class="numLineCover"> 109</td> <td class="nbHitsCovered"><a title="Line 109: Conditional coverage 100% (2/2)."> 233</a></td> <td class="src"><pre class="src"> <a title="Line 109: Conditional coverage 100% (2/2)."> <span class="keyword">if</span> (0 != nscmp) {</a></pre></td></tr> |
| <tr> <td class="numLineCover"> 110</td> <td class="nbHitsCovered"> 96</td> <td class="src"><pre class="src"> <span class="keyword">return</span> nscmp;</pre></td></tr> |
| <tr> <td class="numLine"> 111</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 112</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">// OK, same namespace</span></pre></td></tr> |
| <tr> <td class="numLine"> 113</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> </pre></td></tr> |
| <tr> <td class="numLineCover"> 114</td> <td class="nbHitsCovered"> 137</td> <td class="src"><pre class="src"> String n1 = p1.getName().toLowerCase(CASE_LOCALE);</pre></td></tr> |
| <tr> <td class="numLineCover"> 115</td> <td class="nbHitsCovered"> 137</td> <td class="src"><pre class="src"> String n2 = p2.getName().toLowerCase(CASE_LOCALE);</pre></td></tr> |
| <tr> <td class="numLineCover"> 116</td> <td class="nbHitsCovered"> 137</td> <td class="src"><pre class="src"> <span class="keyword">return</span> n1.compareTo(n2);</pre></td></tr> |
| <tr> <td class="numLine"> 117</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 118</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> </pre></td></tr> |
| <tr> <td class="numLine"> 119</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">public</span> <span class="keyword">boolean</span> equals(Object o) {</pre></td></tr> |
| <tr> <td class="numLineCover"> 120</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> <span class="keyword">return</span> o <span class="keyword">instanceof</span> CaseInsensitiveCmp;</span></pre></td></tr> |
| <tr> <td class="numLine"> 121</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 122</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 123</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> </pre></td></tr> |
| <tr> <td class="numLine"> 124</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">/**</span></pre></td></tr> |
| <tr> <td class="numLine"> 125</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * Returns immutable set of permitted groups.</span></pre></td></tr> |
| <tr> <td class="numLine"> 126</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr> |
| <tr> <td class="numLine"> 127</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">public</span> Set<GroupPrincipal> getPermitGroups() {</pre></td></tr> |
| <tr> <td class="numLineCover"> 128</td> <td class="nbHitsCovered"> 72</td> <td class="src"><pre class="src"> <span class="keyword">return</span> permitGroups;</pre></td></tr> |
| <tr> <td class="numLine"> 129</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 130</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> </pre></td></tr> |
| <tr> <td class="numLine"> 131</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">/**</span></pre></td></tr> |
| <tr> <td class="numLine"> 132</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * Returns immutable set of denied groups.</span></pre></td></tr> |
| <tr> <td class="numLine"> 133</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr> |
| <tr> <td class="numLine"> 134</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">public</span> Set<GroupPrincipal> getDenyGroups() {</pre></td></tr> |
| <tr> <td class="numLineCover"> 135</td> <td class="nbHitsCovered"> 70</td> <td class="src"><pre class="src"> <span class="keyword">return</span> denyGroups;</pre></td></tr> |
| <tr> <td class="numLine"> 136</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 137</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> </pre></td></tr> |
| <tr> <td class="numLine"> 138</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">/**</span></pre></td></tr> |
| <tr> <td class="numLine"> 139</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * Returns immutable set of permitted users.</span></pre></td></tr> |
| <tr> <td class="numLine"> 140</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr> |
| <tr> <td class="numLine"> 141</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">public</span> Set<UserPrincipal> getPermitUsers() {</pre></td></tr> |
| <tr> <td class="numLineCover"> 142</td> <td class="nbHitsCovered"> 73</td> <td class="src"><pre class="src"> <span class="keyword">return</span> permitUsers;</pre></td></tr> |
| <tr> <td class="numLine"> 143</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 144</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> </pre></td></tr> |
| <tr> <td class="numLine"> 145</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">/**</span></pre></td></tr> |
| <tr> <td class="numLine"> 146</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * Returns immutable set of denied users.</span></pre></td></tr> |
| <tr> <td class="numLine"> 147</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr> |
| <tr> <td class="numLine"> 148</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">public</span> Set<UserPrincipal> getDenyUsers() {</pre></td></tr> |
| <tr> <td class="numLineCover"> 149</td> <td class="nbHitsCovered"> 71</td> <td class="src"><pre class="src"> <span class="keyword">return</span> denyUsers;</pre></td></tr> |
| <tr> <td class="numLine"> 150</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 151</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> </pre></td></tr> |
| <tr> <td class="numLine"> 152</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">/**</span></pre></td></tr> |
| <tr> <td class="numLine"> 153</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * Returns immutable set of permitted users and groups.</span></pre></td></tr> |
| <tr> <td class="numLine"> 154</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr> |
| <tr> <td class="numLine"> 155</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">public</span> Set<Principal> getPermits() {</pre></td></tr> |
| <tr> <td class="numLineCover"> 156</td> <td class="nbHitsCovered"> 8</td> <td class="src"><pre class="src"> <span class="keyword">return</span> Sets.union(permitUsers, permitGroups);</pre></td></tr> |
| <tr> <td class="numLine"> 157</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 158</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> </pre></td></tr> |
| <tr> <td class="numLine"> 159</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">/**</span></pre></td></tr> |
| <tr> <td class="numLine"> 160</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * Returns immutable set of denied users and groups;</span></pre></td></tr> |
| <tr> <td class="numLine"> 161</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr> |
| <tr> <td class="numLine"> 162</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">public</span> Set<Principal> getDenies() {</pre></td></tr> |
| <tr> <td class="numLineCover"> 163</td> <td class="nbHitsCovered"> 8</td> <td class="src"><pre class="src"> <span class="keyword">return</span> Sets.union(denyUsers, denyGroups);</pre></td></tr> |
| <tr> <td class="numLine"> 164</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 165</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> </pre></td></tr> |
| <tr> <td class="numLine"> 166</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">/**</span></pre></td></tr> |
| <tr> <td class="numLine"> 167</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * Returns {@code DocId} these ACLs are inherited from. This is also known as</span></pre></td></tr> |
| <tr> <td class="numLine"> 168</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * the "parent's" ACLs. Note that the parent's {@code InheritanceType}</span></pre></td></tr> |
| <tr> <td class="numLine"> 169</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * determines how to combine results with this ACL.</span></pre></td></tr> |
| <tr> <td class="numLine"> 170</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> *</span></pre></td></tr> |
| <tr> <td class="numLine"> 171</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * @see #getInheritanceType</span></pre></td></tr> |
| <tr> <td class="numLine"> 172</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr> |
| <tr> <td class="numLine"> 173</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">public</span> DocId getInheritFrom() {</pre></td></tr> |
| <tr> <td class="numLineCover"> 174</td> <td class="nbHitsCovered"> 266</td> <td class="src"><pre class="src"> <span class="keyword">return</span> inheritFrom;</pre></td></tr> |
| <tr> <td class="numLine"> 175</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 176</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> </pre></td></tr> |
| <tr> <td class="numLine"> 177</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">/**</span></pre></td></tr> |
| <tr> <td class="numLine"> 178</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * Returns fragment, if there is one, that specifies which of the parent's</span></pre></td></tr> |
| <tr> <td class="numLine"> 179</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * ACLs is to to be inhertied from.</span></pre></td></tr> |
| <tr> <td class="numLine"> 180</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> *</span></pre></td></tr> |
| <tr> <td class="numLine"> 181</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * @see #getInheritanceType</span></pre></td></tr> |
| <tr> <td class="numLine"> 182</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr> |
| <tr> <td class="numLine"> 183</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">public</span> String getInheritFromFragment() {</pre></td></tr> |
| <tr> <td class="numLineCover"> 184</td> <td class="nbHitsCovered"> 54</td> <td class="src"><pre class="src"> <span class="keyword">return</span> inheritFromFragment;</pre></td></tr> |
| <tr> <td class="numLine"> 185</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 186</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> </pre></td></tr> |
| <tr> <td class="numLine"> 187</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">/**</span></pre></td></tr> |
| <tr> <td class="numLine"> 188</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * Returns the inheritance type used to combine authz decisions of these ACLs</span></pre></td></tr> |
| <tr> <td class="numLine"> 189</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * with its <em>child</em>. The inheritance type applies to the interaction</span></pre></td></tr> |
| <tr> <td class="numLine"> 190</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * between this ACL and any <em>children</em> it has.</span></pre></td></tr> |
| <tr> <td class="numLine"> 191</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> *</span></pre></td></tr> |
| <tr> <td class="numLine"> 192</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * @see #getInheritFrom</span></pre></td></tr> |
| <tr> <td class="numLine"> 193</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr> |
| <tr> <td class="numLine"> 194</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">public</span> InheritanceType getInheritanceType() {</pre></td></tr> |
| <tr> <td class="numLineCover"> 195</td> <td class="nbHitsCovered"> 129</td> <td class="src"><pre class="src"> <span class="keyword">return</span> inheritType;</pre></td></tr> |
| <tr> <td class="numLine"> 196</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 197</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> </pre></td></tr> |
| <tr> <td class="numLine"> 198</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">/**</span></pre></td></tr> |
| <tr> <td class="numLine"> 199</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * Says whether letter casing differentiates names during authorization.</span></pre></td></tr> |
| <tr> <td class="numLine"> 200</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr> |
| <tr> <td class="numLine"> 201</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">public</span> <span class="keyword">boolean</span> isEverythingCaseSensitive() {</pre></td></tr> |
| <tr> <td class="numLineCover"> 202</td> <td class="nbHitsCovered"> 64</td> <td class="src"><pre class="src"> <span class="keyword">return</span> caseSensitive;</pre></td></tr> |
| <tr> <td class="numLine"> 203</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 204</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> </pre></td></tr> |
| <tr> <td class="numLine"> 205</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">/**</span></pre></td></tr> |
| <tr> <td class="numLine"> 206</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * Says whether letter casing doesn't matter during authorization.</span></pre></td></tr> |
| <tr> <td class="numLine"> 207</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr> |
| <tr> <td class="numLine"> 208</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">public</span> <span class="keyword">boolean</span> isEverythingCaseInsensitive() {</pre></td></tr> |
| <tr> <td class="numLineCover"> 209</td> <td class="nbHitsCovered"><a title="Line 209: Conditional coverage 100% (2/2)."> 8</a></td> <td class="src"><pre class="src"> <a title="Line 209: Conditional coverage 100% (2/2)."> <span class="keyword">return</span> !caseSensitive;</a></pre></td></tr> |
| <tr> <td class="numLine"> 210</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 211</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> </pre></td></tr> |
| <tr> <td class="numLine"> 212</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">/**</span></pre></td></tr> |
| <tr> <td class="numLine"> 213</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * Determine if the provided {@code userIdentifier} belonging to {@code</span></pre></td></tr> |
| <tr> <td class="numLine"> 214</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * groups} is authorized, ignoring inheritance. Deny trumps permit,</span></pre></td></tr> |
| <tr> <td class="numLine"> 215</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * independent of how specific the rule is. So if a user is in permitUsers and</span></pre></td></tr> |
| <tr> <td class="numLine"> 216</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * one of the user's groups is in denyGroups, that user will be denied. If a</span></pre></td></tr> |
| <tr> <td class="numLine"> 217</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * user and his groups are unspecified in the ACL, then the response is</span></pre></td></tr> |
| <tr> <td class="numLine"> 218</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * indeterminate.</span></pre></td></tr> |
| <tr> <td class="numLine"> 219</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr> |
| <tr> <td class="numLine"> 220</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">public</span> AuthzStatus isAuthorizedLocal(AuthnIdentity userIdentity) {</pre></td></tr> |
| <tr> <td class="numLineCover"> 221</td> <td class="nbHitsCovered"> 57</td> <td class="src"><pre class="src"> UserPrincipal userIdentifier = userIdentity.getUser();</pre></td></tr> |
| <tr> <td class="numLine"> 222</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> Set<GroupPrincipal> commonGroups;</pre></td></tr> |
| <tr> <td class="numLineCover"> 223</td> <td class="nbHitsCovered"><a title="Line 223: Conditional coverage 100% (2/2)."> 57</a></td> <td class="src"><pre class="src"> <a title="Line 223: Conditional coverage 100% (2/2)."> <span class="keyword">if</span> (caseSensitive) {</a></pre></td></tr> |
| <tr> <td class="numLineCover"> 224</td> <td class="nbHitsCovered"> 54</td> <td class="src"><pre class="src"> commonGroups = <span class="keyword">new</span> HashSet<GroupPrincipal>(denyGroups);</pre></td></tr> |
| <tr> <td class="numLine"> 225</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> } <span class="keyword">else</span> {</pre></td></tr> |
| <tr> <td class="numLineCover"> 226</td> <td class="nbHitsCovered"> 3</td> <td class="src"><pre class="src"> commonGroups = cmpWrap(denyGroups);</pre></td></tr> |
| <tr> <td class="numLine"> 227</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 228</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> </pre></td></tr> |
| <tr> <td class="numLineCover"> 229</td> <td class="nbHitsCovered"> 57</td> <td class="src"><pre class="src"> Set<GroupPrincipal> userGroups = userIdentity.getGroups();</pre></td></tr> |
| <tr> <td class="numLineCover"> 230</td> <td class="nbHitsCovered"><a title="Line 230: Conditional coverage 100% (2/2)."> 57</a></td> <td class="src"><pre class="src"> <a title="Line 230: Conditional coverage 100% (2/2)."> <span class="keyword">if</span> (!caseSensitive) {</a></pre></td></tr> |
| <tr> <td class="numLineCover"> 231</td> <td class="nbHitsCovered"> 3</td> <td class="src"><pre class="src"> userGroups = Collections.unmodifiableSet(cmpWrap(userGroups));</pre></td></tr> |
| <tr> <td class="numLine"> 232</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 233</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> </pre></td></tr> |
| <tr> <td class="numLineCover"> 234</td> <td class="nbHitsCovered"> 57</td> <td class="src"><pre class="src"> commonGroups.retainAll(userGroups);</pre></td></tr> |
| <tr> <td class="numLineCover"> 235</td> <td class="nbHitsCovered"><a title="Line 235: Conditional coverage 100% (4/4) [each condition: 100%, 100%]."> 57</a></td> <td class="src"><pre class="src"> <a title="Line 235: Conditional coverage 100% (4/4) [each condition: 100%, 100%]."> <span class="keyword">if</span> (denyUsers.contains(userIdentifier) || !commonGroups.isEmpty()) {</a></pre></td></tr> |
| <tr> <td class="numLineCover"> 236</td> <td class="nbHitsCovered"> 17</td> <td class="src"><pre class="src"> <span class="keyword">return</span> AuthzStatus.DENY;</pre></td></tr> |
| <tr> <td class="numLine"> 237</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 238</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> </pre></td></tr> |
| <tr> <td class="numLineCover"> 239</td> <td class="nbHitsCovered"> 40</td> <td class="src"><pre class="src"> commonGroups.clear();</pre></td></tr> |
| <tr> <td class="numLineCover"> 240</td> <td class="nbHitsCovered"> 40</td> <td class="src"><pre class="src"> commonGroups.addAll(permitGroups);</pre></td></tr> |
| <tr> <td class="numLineCover"> 241</td> <td class="nbHitsCovered"> 40</td> <td class="src"><pre class="src"> commonGroups.retainAll(userGroups);</pre></td></tr> |
| <tr> <td class="numLineCover"> 242</td> <td class="nbHitsCovered"><a title="Line 242: Conditional coverage 100% (4/4) [each condition: 100%, 100%]."> 40</a></td> <td class="src"><pre class="src"> <a title="Line 242: Conditional coverage 100% (4/4) [each condition: 100%, 100%]."> <span class="keyword">if</span> (permitUsers.contains(userIdentifier) || !commonGroups.isEmpty()) {</a></pre></td></tr> |
| <tr> <td class="numLineCover"> 243</td> <td class="nbHitsCovered"> 21</td> <td class="src"><pre class="src"> <span class="keyword">return</span> AuthzStatus.PERMIT;</pre></td></tr> |
| <tr> <td class="numLine"> 244</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 245</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> </pre></td></tr> |
| <tr> <td class="numLineCover"> 246</td> <td class="nbHitsCovered"> 19</td> <td class="src"><pre class="src"> <span class="keyword">return</span> AuthzStatus.INDETERMINATE;</pre></td></tr> |
| <tr> <td class="numLine"> 247</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 248</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> </pre></td></tr> |
| <tr> <td class="numLine"> 249</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">/**</span></pre></td></tr> |
| <tr> <td class="numLine"> 250</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * Determine if the provided {@code userIdentity} belonging to {@code</span></pre></td></tr> |
| <tr> <td class="numLine"> 251</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * groups} is authorized for the provided {@code aclChain}. The chain should</span></pre></td></tr> |
| <tr> <td class="numLine"> 252</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * be in order of root to leaf; that means that the particular file or folder</span></pre></td></tr> |
| <tr> <td class="numLine"> 253</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * you are checking for authz will be at the end of the chain.</span></pre></td></tr> |
| <tr> <td class="numLine"> 254</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> *</span></pre></td></tr> |
| <tr> <td class="numLine"> 255</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * <p>If you have an ACL and wish to determine if a user is authorized, you</span></pre></td></tr> |
| <tr> <td class="numLine"> 256</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * should manually generate an aclChain by recursively retrieving the ACLs of</span></pre></td></tr> |
| <tr> <td class="numLine"> 257</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * the {@code inheritFrom} {@link DocId}. The ACL you started with should be</span></pre></td></tr> |
| <tr> <td class="numLine"> 258</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * at the end of the chain. Alternatively, you can use {@link</span></pre></td></tr> |
| <tr> <td class="numLine"> 259</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * #isAuthorizedBatch isAuthorizedBatch()}.</span></pre></td></tr> |
| <tr> <td class="numLine"> 260</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> *</span></pre></td></tr> |
| <tr> <td class="numLine"> 261</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * <p>If the entire chain has empty permit/deny sets, then the result is</span></pre></td></tr> |
| <tr> <td class="numLine"> 262</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * {@link AuthzStatus#INDETERMINATE}.</span></pre></td></tr> |
| <tr> <td class="numLine"> 263</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> *</span></pre></td></tr> |
| <tr> <td class="numLine"> 264</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * <p>The result of the entire chain is the non-local decision of the root.</span></pre></td></tr> |
| <tr> <td class="numLine"> 265</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * The non-local decision of any entry in the chain is the local decision of</span></pre></td></tr> |
| <tr> <td class="numLine"> 266</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * that entry (as calculated with {@link #isAuthorizedLocal</span></pre></td></tr> |
| <tr> <td class="numLine"> 267</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * isAuthorizedLocal()}) combined with the non-local decision of the next</span></pre></td></tr> |
| <tr> <td class="numLine"> 268</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * entry in the chain via the {@code InheritanceType} of the original entry.</span></pre></td></tr> |
| <tr> <td class="numLine"> 269</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * To repeat, the non-local decision of an entry is that entry's local</span></pre></td></tr> |
| <tr> <td class="numLine"> 270</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * decision combined using its {@code InheritanceType} with its child's</span></pre></td></tr> |
| <tr> <td class="numLine"> 271</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * non-local decision (which is recursive). Thus, if the root's inheritance</span></pre></td></tr> |
| <tr> <td class="numLine"> 272</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * type is {@link InheritanceType#PARENT_OVERRIDES} and its local decision is</span></pre></td></tr> |
| <tr> <td class="numLine"> 273</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * {@link AuthzStatus#DENY}, then independent of any decendant's local</span></pre></td></tr> |
| <tr> <td class="numLine"> 274</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * decision, the decision of the chain will be {@code DENY}.</span></pre></td></tr> |
| <tr> <td class="numLine"> 275</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> *</span></pre></td></tr> |
| <tr> <td class="numLine"> 276</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * <p>It should also be noted that the leaf's inheritance type does not matter</span></pre></td></tr> |
| <tr> <td class="numLine"> 277</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * and is ignored.</span></pre></td></tr> |
| <tr> <td class="numLine"> 278</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> *</span></pre></td></tr> |
| <tr> <td class="numLine"> 279</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * <p>It is very important to note that a completely empty ACL (one that has</span></pre></td></tr> |
| <tr> <td class="numLine"> 280</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * all defaults) is equivalent to having no ACLs. The GSA considers content</span></pre></td></tr> |
| <tr> <td class="numLine"> 281</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * from the Adaptor as public unless it provides an ACL. Thus, empty ACLs</span></pre></td></tr> |
| <tr> <td class="numLine"> 282</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * cause a document to become public and the GSA does not use ACLs when</span></pre></td></tr> |
| <tr> <td class="numLine"> 283</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * considering public documents (and all results are PERMIT). However, for</span></pre></td></tr> |
| <tr> <td class="numLine"> 284</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * non-Adaptor situations, you can get a document to be private and have no</span></pre></td></tr> |
| <tr> <td class="numLine"> 285</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * ACLs. In these situations the ACLs are checked, but the result is</span></pre></td></tr> |
| <tr> <td class="numLine"> 286</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * INDETERMINATE and different authz checks must be made.</span></pre></td></tr> |
| <tr> <td class="numLine"> 287</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> *</span></pre></td></tr> |
| <tr> <td class="numLine"> 288</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * @param userIdentity identity containing the user's username and all the</span></pre></td></tr> |
| <tr> <td class="numLine"> 289</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * groups the user belongs to</span></pre></td></tr> |
| <tr> <td class="numLine"> 290</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * @param aclChain ordered list of ACLs from root to leaf</span></pre></td></tr> |
| <tr> <td class="numLine"> 291</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * @throws IllegalArgumentException if the chain is empty, the first element</span></pre></td></tr> |
| <tr> <td class="numLine"> 292</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * of the chain's {@code getInheritFrom() != null}, or if any element but</span></pre></td></tr> |
| <tr> <td class="numLine"> 293</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * the first has {@code getInheritFrom() == null}.</span></pre></td></tr> |
| <tr> <td class="numLine"> 294</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * @see #isAuthorizedLocal</span></pre></td></tr> |
| <tr> <td class="numLine"> 295</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * @see InheritanceType</span></pre></td></tr> |
| <tr> <td class="numLine"> 296</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr> |
| <tr> <td class="numLine"> 297</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">public</span> <span class="keyword">static</span> AuthzStatus isAuthorized(AuthnIdentity userIdentity,</pre></td></tr> |
| <tr> <td class="numLine"> 298</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> List<Acl> aclChain) {</pre></td></tr> |
| <tr> <td class="numLine"> 299</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">// Check for completely broken chains. Users of the API should be aware</span></pre></td></tr> |
| <tr> <td class="numLine"> 300</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">// enough to easily prevent these from happening. These also don't directly</span></pre></td></tr> |
| <tr> <td class="numLine"> 301</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">// relate to a case on the GSA because the GSA is working more on the</span></pre></td></tr> |
| <tr> <td class="numLine"> 302</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">// isAuthorizedRecurse level.</span></pre></td></tr> |
| <tr> <td class="numLineCover"> 303</td> <td class="nbHitsCovered"><a title="Line 303: Conditional coverage 100% (2/2)."> 35</a></td> <td class="src"><pre class="src"> <a title="Line 303: Conditional coverage 100% (2/2)."> <span class="keyword">if</span> (aclChain.size() < 1) {</a></pre></td></tr> |
| <tr> <td class="numLineCover"> 304</td> <td class="nbHitsCovered"> 1</td> <td class="src"><pre class="src"> <span class="keyword">throw</span> <span class="keyword">new</span> IllegalArgumentException(</pre></td></tr> |
| <tr> <td class="numLine"> 305</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="string">"aclChain must contain at least one ACL"</span>);</pre></td></tr> |
| <tr> <td class="numLine"> 306</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLineCover"> 307</td> <td class="nbHitsCovered"><a title="Line 307: Conditional coverage 100% (2/2)."> 34</a></td> <td class="src"><pre class="src"> <a title="Line 307: Conditional coverage 100% (2/2)."> <span class="keyword">if</span> (aclChain.get(0).getInheritFrom() != <span class="keyword">null</span>) {</a></pre></td></tr> |
| <tr> <td class="numLineCover"> 308</td> <td class="nbHitsCovered"> 1</td> <td class="src"><pre class="src"> <span class="keyword">throw</span> <span class="keyword">new</span> IllegalArgumentException(</pre></td></tr> |
| <tr> <td class="numLine"> 309</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="string">"Chain must start at the root, which must not have an inheritFrom"</span>);</pre></td></tr> |
| <tr> <td class="numLine"> 310</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLineCover"> 311</td> <td class="nbHitsCovered"><a title="Line 311: Conditional coverage 100% (2/2)."> 60</a></td> <td class="src"><pre class="src"> <a title="Line 311: Conditional coverage 100% (2/2)."> <span class="keyword">for</span> (<span class="keyword">int</span> i = 1; i < aclChain.size(); i++) {</a></pre></td></tr> |
| <tr> <td class="numLineCover"> 312</td> <td class="nbHitsCovered"><a title="Line 312: Conditional coverage 100% (2/2)."> 28</a></td> <td class="src"><pre class="src"> <a title="Line 312: Conditional coverage 100% (2/2)."> <span class="keyword">if</span> (aclChain.get(i).getInheritFrom() == <span class="keyword">null</span>) {</a></pre></td></tr> |
| <tr> <td class="numLineCover"> 313</td> <td class="nbHitsCovered"> 1</td> <td class="src"><pre class="src"> <span class="keyword">throw</span> <span class="keyword">new</span> IllegalArgumentException(</pre></td></tr> |
| <tr> <td class="numLine"> 314</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="string">"Each ACL in the chain except the first should have an "</span></pre></td></tr> |
| <tr> <td class="numLine"> 315</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> + <span class="string">"inheritFrom"</span>);</pre></td></tr> |
| <tr> <td class="numLine"> 316</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 317</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 318</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> </pre></td></tr> |
| <tr> <td class="numLine"> 319</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">// Check for broken chain constructions. These don't throw an exception to</span></pre></td></tr> |
| <tr> <td class="numLine"> 320</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">// 1) match the GSA's identical handling of these situations and 2) because</span></pre></td></tr> |
| <tr> <td class="numLine"> 321</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">// we don't want to throw an exception if the caller can't easily prevent</span></pre></td></tr> |
| <tr> <td class="numLine"> 322</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">// it from ever occuring.</span></pre></td></tr> |
| <tr> <td class="numLineCover"> 323</td> <td class="nbHitsCovered"><a title="Line 323: Conditional coverage 100% (2/2)."> 32</a></td> <td class="src"><pre class="src"> <a title="Line 323: Conditional coverage 100% (2/2)."> <span class="keyword">if</span> (aclChain.size() == 1) {</a></pre></td></tr> |
| <tr> <td class="numLineCover"> 324</td> <td class="nbHitsCovered"> 15</td> <td class="src"><pre class="src"> Acl acl = aclChain.get(0);</pre></td></tr> |
| <tr> <td class="numLineCover"> 325</td> <td class="nbHitsCovered"><a title="Line 325: Conditional coverage 100% (2/2)."> 15</a></td> <td class="src"><pre class="src"> <a title="Line 325: Conditional coverage 100% (2/2)."> <span class="keyword">if</span> (acl.equals(EMPTY)) {</a></pre></td></tr> |
| <tr> <td class="numLineCover"> 326</td> <td class="nbHitsCovered"> 2</td> <td class="src"><pre class="src"> log.log(Level.FINE, <span class="string">"Chain only has one ACL and it is empty. This "</span></pre></td></tr> |
| <tr> <td class="numLine"> 327</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> + <span class="string">"implies 'no ACLs.'"</span>);</pre></td></tr> |
| <tr> <td class="numLineCover"> 328</td> <td class="nbHitsCovered"> 2</td> <td class="src"><pre class="src"> <span class="keyword">return</span> AuthzStatus.INDETERMINATE;</pre></td></tr> |
| <tr> <td class="numLine"> 329</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 330</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLineCover"> 331</td> <td class="nbHitsCovered"><a title="Line 331: Conditional coverage 100% (2/2)."> 55</a></td> <td class="src"><pre class="src"> <a title="Line 331: Conditional coverage 100% (2/2)."> <span class="keyword">for</span> (<span class="keyword">int</span> i = 0; i < aclChain.size() - 1; i++) {</a></pre></td></tr> |
| <tr> <td class="numLineCover"> 332</td> <td class="nbHitsCovered"><a title="Line 332: Conditional coverage 100% (2/2)."> 26</a></td> <td class="src"><pre class="src"> <a title="Line 332: Conditional coverage 100% (2/2)."> <span class="keyword">if</span> (aclChain.get(i).getInheritanceType() == InheritanceType.LEAF_NODE) {</a></pre></td></tr> |
| <tr> <td class="numLineCover"> 333</td> <td class="nbHitsCovered"> 1</td> <td class="src"><pre class="src"> log.log(Level.WARNING, <span class="string">"Only the last ACL in a chain can have the "</span></pre></td></tr> |
| <tr> <td class="numLine"> 334</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> + <span class="string">"inheritance type LEAF"</span>);</pre></td></tr> |
| <tr> <td class="numLineCover"> 335</td> <td class="nbHitsCovered"> 1</td> <td class="src"><pre class="src"> <span class="keyword">return</span> AuthzStatus.INDETERMINATE;</pre></td></tr> |
| <tr> <td class="numLine"> 336</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 337</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLineCover"> 338</td> <td class="nbHitsCovered"> 29</td> <td class="src"><pre class="src"> AuthzStatus result = isAuthorizedRecurse(userIdentity, aclChain);</pre></td></tr> |
| <tr> <td class="numLineCover"> 339</td> <td class="nbHitsCovered"><a title="Line 339: Conditional coverage 100% (2/2)."> 29</a></td> <td class="src"><pre class="src"> <a title="Line 339: Conditional coverage 100% (2/2)."> <span class="keyword">return</span> (result == AuthzStatus.INDETERMINATE) ? AuthzStatus.DENY : result;</a></pre></td></tr> |
| <tr> <td class="numLine"> 340</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 341</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> </pre></td></tr> |
| <tr> <td class="numLine"> 342</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">private</span> <span class="keyword">static</span> AuthzStatus isAuthorizedRecurse(</pre></td></tr> |
| <tr> <td class="numLine"> 343</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">final</span> AuthnIdentity userIdentity, <span class="keyword">final</span> List<Acl> aclChain) {</pre></td></tr> |
| <tr> <td class="numLineCover"> 344</td> <td class="nbHitsCovered"><a title="Line 344: Conditional coverage 100% (2/2)."> 43</a></td> <td class="src"><pre class="src"> <a title="Line 344: Conditional coverage 100% (2/2)."> <span class="keyword">if</span> (aclChain.size() == 1) {</a></pre></td></tr> |
| <tr> <td class="numLineCover"> 345</td> <td class="nbHitsCovered"> 24</td> <td class="src"><pre class="src"> <span class="keyword">return</span> aclChain.get(0).isAuthorizedLocal(userIdentity);</pre></td></tr> |
| <tr> <td class="numLine"> 346</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLineCover"> 347</td> <td class="nbHitsCovered"> 19</td> <td class="src"><pre class="src"> Decision parentDecision = <span class="keyword">new</span> Decision() {</pre></td></tr> |
| <tr> <td class="numLine"> 348</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> @Override</pre></td></tr> |
| <tr> <td class="numLine"> 349</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">protected</span> AuthzStatus computeDecision() {</pre></td></tr> |
| <tr> <td class="numLineCover"> 350</td> <td class="nbHitsCovered"> 16</td> <td class="src"><pre class="src"> <span class="keyword">return</span> aclChain.get(0).isAuthorizedLocal(userIdentity);</pre></td></tr> |
| <tr> <td class="numLine"> 351</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 352</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> };</pre></td></tr> |
| <tr> <td class="numLineCover"> 353</td> <td class="nbHitsCovered"> 19</td> <td class="src"><pre class="src"> Decision childDecision = <span class="keyword">new</span> Decision() {</pre></td></tr> |
| <tr> <td class="numLine"> 354</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> @Override</pre></td></tr> |
| <tr> <td class="numLine"> 355</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">protected</span> AuthzStatus computeDecision() {</pre></td></tr> |
| <tr> <td class="numLine"> 356</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">// Recurse.</span></pre></td></tr> |
| <tr> <td class="numLineCover"> 357</td> <td class="nbHitsCovered"> 14</td> <td class="src"><pre class="src"> <span class="keyword">return</span> isAuthorizedRecurse(userIdentity,</pre></td></tr> |
| <tr> <td class="numLine"> 358</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> aclChain.subList(1, aclChain.size()));</pre></td></tr> |
| <tr> <td class="numLine"> 359</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 360</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> };</pre></td></tr> |
| <tr> <td class="numLineCover"> 361</td> <td class="nbHitsCovered"> 19</td> <td class="src"><pre class="src"> <span class="keyword">return</span> aclChain.get(0).getInheritanceType()</pre></td></tr> |
| <tr> <td class="numLine"> 362</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> .isAuthorized(childDecision, parentDecision);</pre></td></tr> |
| <tr> <td class="numLine"> 363</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 364</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> </pre></td></tr> |
| <tr> <td class="numLine"> 365</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">/**</span></pre></td></tr> |
| <tr> <td class="numLine"> 366</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * Check authz for many DocIds at once. This will only fetch ACL information</span></pre></td></tr> |
| <tr> <td class="numLine"> 367</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * for a DocId once, even when considering inheritFrom. It will then create</span></pre></td></tr> |
| <tr> <td class="numLine"> 368</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * the appropriate chains and call {@link #isAuthorized isAuthorized()}.</span></pre></td></tr> |
| <tr> <td class="numLine"> 369</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> *</span></pre></td></tr> |
| <tr> <td class="numLine"> 370</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * <p>If there is an inheritance cycle, an ACL for a DocId in {@code ids} was</span></pre></td></tr> |
| <tr> <td class="numLine"> 371</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * not returned by {@code retriever} when requested, or an inherited ACL was</span></pre></td></tr> |
| <tr> <td class="numLine"> 372</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * not returned by {@code retriever} when requested, its response will be</span></pre></td></tr> |
| <tr> <td class="numLine"> 373</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * {@link AuthzStatus#INDETERMINATE} for that DocId.</span></pre></td></tr> |
| <tr> <td class="numLine"> 374</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> *</span></pre></td></tr> |
| <tr> <td class="numLine"> 375</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * @param userIdentity identity containing the user's username and all the</span></pre></td></tr> |
| <tr> <td class="numLine"> 376</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * groups the user belongs to</span></pre></td></tr> |
| <tr> <td class="numLine"> 377</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * @param ids collection of DocIds that need authz performed</span></pre></td></tr> |
| <tr> <td class="numLine"> 378</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * @param retriever object to use to obtain an ACL for a given DocId</span></pre></td></tr> |
| <tr> <td class="numLine"> 379</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * @throws IOException if the retriever throws an IOException</span></pre></td></tr> |
| <tr> <td class="numLine"> 380</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr> |
| <tr> <td class="numLine"> 381</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">public</span> <span class="keyword">static</span> Map<DocId, AuthzStatus> isAuthorizedBatch(</pre></td></tr> |
| <tr> <td class="numLine"> 382</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> AuthnIdentity userIdentity, Collection<DocId> ids,</pre></td></tr> |
| <tr> <td class="numLine"> 383</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> BatchRetriever retriever) <span class="keyword">throws</span> IOException {</pre></td></tr> |
| <tr> <td class="numLineCover"> 384</td> <td class="nbHitsCovered"> 37</td> <td class="src"><pre class="src"> Map<DocId, Acl> acls = retrieveNecessaryAcls(ids, retriever);</pre></td></tr> |
| <tr> <td class="numLineCover"> 385</td> <td class="nbHitsCovered"> 36</td> <td class="src"><pre class="src"> Map<DocId, AuthzStatus> results</pre></td></tr> |
| <tr> <td class="numLine"> 386</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> = <span class="keyword">new</span> HashMap<DocId, AuthzStatus>(ids.size() * 2);</pre></td></tr> |
| <tr> <td class="numLineCover"> 387</td> <td class="nbHitsCovered"><a title="Line 387: Conditional coverage 100% (2/2)."> 36</a></td> <td class="src"><pre class="src"> <a title="Line 387: Conditional coverage 100% (2/2)."> <span class="keyword">for</span> (DocId docId : ids) {</a></pre></td></tr> |
| <tr> <td class="numLineCover"> 388</td> <td class="nbHitsCovered"> 38</td> <td class="src"><pre class="src"> List<Acl> chain = createChain(docId, acls);</pre></td></tr> |
| <tr> <td class="numLine"> 389</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> AuthzStatus result;</pre></td></tr> |
| <tr> <td class="numLineCover"> 390</td> <td class="nbHitsCovered"><a title="Line 390: Conditional coverage 100% (2/2)."> 38</a></td> <td class="src"><pre class="src"> <a title="Line 390: Conditional coverage 100% (2/2)."> <span class="keyword">if</span> (chain == <span class="keyword">null</span>) {</a></pre></td></tr> |
| <tr> <td class="numLine"> 391</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">// There was a cycle or other problem generating the chain.</span></pre></td></tr> |
| <tr> <td class="numLineCover"> 392</td> <td class="nbHitsCovered"> 8</td> <td class="src"><pre class="src"> result = AuthzStatus.INDETERMINATE;</pre></td></tr> |
| <tr> <td class="numLine"> 393</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> } <span class="keyword">else</span> {</pre></td></tr> |
| <tr> <td class="numLineCover"> 394</td> <td class="nbHitsCovered"> 30</td> <td class="src"><pre class="src"> result = isAuthorized(userIdentity, chain);</pre></td></tr> |
| <tr> <td class="numLine"> 395</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLineCover"> 396</td> <td class="nbHitsCovered"> 38</td> <td class="src"><pre class="src"> results.put(docId, result);</pre></td></tr> |
| <tr> <td class="numLineCover"> 397</td> <td class="nbHitsCovered"> 38</td> <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLineCover"> 398</td> <td class="nbHitsCovered"> 36</td> <td class="src"><pre class="src"> <span class="keyword">return</span> Collections.unmodifiableMap(results);</pre></td></tr> |
| <tr> <td class="numLine"> 399</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 400</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> </pre></td></tr> |
| <tr> <td class="numLine"> 401</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">private</span> <span class="keyword">static</span> Map<DocId, Acl> retrieveNecessaryAcls(Collection<DocId> ids,</pre></td></tr> |
| <tr> <td class="numLine"> 402</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> BatchRetriever retriever) <span class="keyword">throws</span> IOException {</pre></td></tr> |
| <tr> <td class="numLineCover"> 403</td> <td class="nbHitsCovered"> 37</td> <td class="src"><pre class="src"> Map<DocId, Acl> acls = <span class="keyword">new</span> HashMap<DocId, Acl>(ids.size() * 2);</pre></td></tr> |
| <tr> <td class="numLineCover"> 404</td> <td class="nbHitsCovered"> 37</td> <td class="src"><pre class="src"> Set<DocId> missingAcls = <span class="keyword">new</span> HashSet<DocId>();</pre></td></tr> |
| <tr> <td class="numLineCover"> 405</td> <td class="nbHitsCovered"> 37</td> <td class="src"><pre class="src"> Set<DocId> pendingRetrieval = <span class="keyword">new</span> HashSet<DocId>(ids);</pre></td></tr> |
| <tr> <td class="numLineCover"> 406</td> <td class="nbHitsCovered"> 37</td> <td class="src"><pre class="src"> Set<Acl> checkedAcl = <span class="keyword">new</span> HashSet<Acl>(ids.size() * 2);</pre></td></tr> |
| <tr> <td class="numLineCover"> 407</td> <td class="nbHitsCovered"> 37</td> <td class="src"><pre class="src"> Set<Acl> toProcess = <span class="keyword">new</span> HashSet<Acl>(ids.size() * 2);</pre></td></tr> |
| <tr> <td class="numLineCover"> 408</td> <td class="nbHitsCovered"><a title="Line 408: Conditional coverage 100% (2/2)."> 102</a></td> <td class="src"><pre class="src"> <a title="Line 408: Conditional coverage 100% (2/2)."> <span class="keyword">while</span> (!pendingRetrieval.isEmpty()) {</a></pre></td></tr> |
| <tr> <td class="numLineCover"> 409</td> <td class="nbHitsCovered"> 66</td> <td class="src"><pre class="src"> Map<DocId, Acl> returned = retriever.retrieveAcls(pendingRetrieval);</pre></td></tr> |
| <tr> <td class="numLineCover"> 410</td> <td class="nbHitsCovered"> 66</td> <td class="src"><pre class="src"> toProcess.clear();</pre></td></tr> |
| <tr> <td class="numLineCover"> 411</td> <td class="nbHitsCovered"><a title="Line 411: Conditional coverage 100% (2/2)."> 66</a></td> <td class="src"><pre class="src"> <a title="Line 411: Conditional coverage 100% (2/2)."> <span class="keyword">for</span> (Map.Entry<DocId, Acl> me : returned.entrySet()) {</a></pre></td></tr> |
| <tr> <td class="numLineCover"> 412</td> <td class="nbHitsCovered"><a title="Line 412: Conditional coverage 100% (2/2)."> 67</a></td> <td class="src"><pre class="src"> <a title="Line 412: Conditional coverage 100% (2/2)."> <span class="keyword">if</span> (me.getValue() == <span class="keyword">null</span>) {</a></pre></td></tr> |
| <tr> <td class="numLineCover"> 413</td> <td class="nbHitsCovered"> 1</td> <td class="src"><pre class="src"> <span class="keyword">throw</span> <span class="keyword">new</span> NullPointerException(</pre></td></tr> |
| <tr> <td class="numLine"> 414</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="string">"BatchRetriever returned null for a DocId"</span>);</pre></td></tr> |
| <tr> <td class="numLine"> 415</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLineCover"> 416</td> <td class="nbHitsCovered"> 66</td> <td class="src"><pre class="src"> DocId key = me.getKey();</pre></td></tr> |
| <tr> <td class="numLineCover"> 417</td> <td class="nbHitsCovered"><a title="Line 417: Conditional coverage 100% (4/4) [each condition: 100%, 100%]."> 66</a></td> <td class="src"><pre class="src"> <a title="Line 417: Conditional coverage 100% (4/4) [each condition: 100%, 100%]."> <span class="keyword">if</span> (acls.containsKey(key) || missingAcls.contains(key)) {</a></pre></td></tr> |
| <tr> <td class="numLine"> 418</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">// Don't replace previous results since we have already checked them.</span></pre></td></tr> |
| <tr> <td class="numLineCover"> 419</td> <td class="nbHitsCovered"> 1</td> <td class="src"><pre class="src"> <span class="keyword">continue</span>;</pre></td></tr> |
| <tr> <td class="numLine"> 420</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLineCover"> 421</td> <td class="nbHitsCovered"> 64</td> <td class="src"><pre class="src"> acls.put(key, me.getValue());</pre></td></tr> |
| <tr> <td class="numLine"> 422</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">// If we requested this ACL, follow its inheritance.</span></pre></td></tr> |
| <tr> <td class="numLineCover"> 423</td> <td class="nbHitsCovered"><a title="Line 423: Conditional coverage 100% (2/2)."> 64</a></td> <td class="src"><pre class="src"> <a title="Line 423: Conditional coverage 100% (2/2)."> <span class="keyword">if</span> (pendingRetrieval.contains(key)) {</a></pre></td></tr> |
| <tr> <td class="numLineCover"> 424</td> <td class="nbHitsCovered"> 63</td> <td class="src"><pre class="src"> toProcess.add(me.getValue());</pre></td></tr> |
| <tr> <td class="numLine"> 425</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLineCover"> 426</td> <td class="nbHitsCovered"> 64</td> <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 427</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">// Compute ACLs that we requested, but did not receive.</span></pre></td></tr> |
| <tr> <td class="numLineCover"> 428</td> <td class="nbHitsCovered"> 65</td> <td class="src"><pre class="src"> pendingRetrieval.removeAll(returned.keySet());</pre></td></tr> |
| <tr> <td class="numLineCover"> 429</td> <td class="nbHitsCovered"> 65</td> <td class="src"><pre class="src"> missingAcls.addAll(pendingRetrieval);</pre></td></tr> |
| <tr> <td class="numLine"> 430</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> </pre></td></tr> |
| <tr> <td class="numLineCover"> 431</td> <td class="nbHitsCovered"> 65</td> <td class="src"><pre class="src"> pendingRetrieval.clear();</pre></td></tr> |
| <tr> <td class="numLine"> 432</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> </pre></td></tr> |
| <tr> <td class="numLineCover"> 433</td> <td class="nbHitsCovered"><a title="Line 433: Conditional coverage 100% (2/2)."> 65</a></td> <td class="src"><pre class="src"> <a title="Line 433: Conditional coverage 100% (2/2)."> <span class="keyword">for</span> (Acl acl : toProcess) {</a></pre></td></tr> |
| <tr> <td class="numLine"> 434</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">// Follow the inheritance chain until it terminates.</span></pre></td></tr> |
| <tr> <td class="numLine"> 435</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">while</span> (<span class="keyword">true</span>) {</pre></td></tr> |
| <tr> <td class="numLineCover"> 436</td> <td class="nbHitsCovered"><a title="Line 436: Conditional coverage 100% (2/2)."> 66</a></td> <td class="src"><pre class="src"> <a title="Line 436: Conditional coverage 100% (2/2)."> <span class="keyword">if</span> (checkedAcl.contains(acl)) {</a></pre></td></tr> |
| <tr> <td class="numLine"> 437</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">// Already processed.</span></pre></td></tr> |
| <tr> <td class="numLineCover"> 438</td> <td class="nbHitsCovered"> 2</td> <td class="src"><pre class="src"> <span class="keyword">break</span>;</pre></td></tr> |
| <tr> <td class="numLine"> 439</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLineCover"> 440</td> <td class="nbHitsCovered"> 64</td> <td class="src"><pre class="src"> checkedAcl.add(acl);</pre></td></tr> |
| <tr> <td class="numLine"> 441</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> </pre></td></tr> |
| <tr> <td class="numLineCover"> 442</td> <td class="nbHitsCovered"> 64</td> <td class="src"><pre class="src"> DocId parent = acl.getInheritFrom();</pre></td></tr> |
| <tr> <td class="numLineCover"> 443</td> <td class="nbHitsCovered"><a title="Line 443: Conditional coverage 100% (2/2)."> 64</a></td> <td class="src"><pre class="src"> <a title="Line 443: Conditional coverage 100% (2/2)."> <span class="keyword">if</span> (parent == <span class="keyword">null</span>) {</a></pre></td></tr> |
| <tr> <td class="numLine"> 444</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">// Inheritance chain terminated; everything looks good.</span></pre></td></tr> |
| <tr> <td class="numLineCover"> 445</td> <td class="nbHitsCovered"> 30</td> <td class="src"><pre class="src"> <span class="keyword">break</span>;</pre></td></tr> |
| <tr> <td class="numLineCover"> 446</td> <td class="nbHitsCovered"><a title="Line 446: Conditional coverage 100% (2/2)."> 34</a></td> <td class="src"><pre class="src"> <a title="Line 446: Conditional coverage 100% (2/2)."> } <span class="keyword">else</span> <span class="keyword">if</span> (missingAcls.contains(parent)) {</a></pre></td></tr> |
| <tr> <td class="numLine"> 447</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">// Failed to retrieve parent, so give up.</span></pre></td></tr> |
| <tr> <td class="numLineCover"> 448</td> <td class="nbHitsCovered"> 1</td> <td class="src"><pre class="src"> <span class="keyword">break</span>;</pre></td></tr> |
| <tr> <td class="numLineCover"> 449</td> <td class="nbHitsCovered"><a title="Line 449: Conditional coverage 100% (2/2)."> 33</a></td> <td class="src"><pre class="src"> <a title="Line 449: Conditional coverage 100% (2/2)."> } <span class="keyword">else</span> <span class="keyword">if</span> (acls.containsKey(parent)) {</a></pre></td></tr> |
| <tr> <td class="numLine"> 450</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">// Already have the parent ACLs, so check parent.</span></pre></td></tr> |
| <tr> <td class="numLineCover"> 451</td> <td class="nbHitsCovered"> 3</td> <td class="src"><pre class="src"> acl = acls.get(parent);</pre></td></tr> |
| <tr> <td class="numLine"> 452</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> } <span class="keyword">else</span> {</pre></td></tr> |
| <tr> <td class="numLine"> 453</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">// Request parent ACLs.</span></pre></td></tr> |
| <tr> <td class="numLineCover"> 454</td> <td class="nbHitsCovered"> 30</td> <td class="src"><pre class="src"> pendingRetrieval.add(parent);</pre></td></tr> |
| <tr> <td class="numLineCover"> 455</td> <td class="nbHitsCovered"> 30</td> <td class="src"><pre class="src"> <span class="keyword">break</span>;</pre></td></tr> |
| <tr> <td class="numLine"> 456</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLineCover"> 457</td> <td class="nbHitsCovered"> 3</td> <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 458</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLineCover"> 459</td> <td class="nbHitsCovered"> 65</td> <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLineCover"> 460</td> <td class="nbHitsCovered"> 36</td> <td class="src"><pre class="src"> <span class="keyword">return</span> acls;</pre></td></tr> |
| <tr> <td class="numLine"> 461</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 462</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> </pre></td></tr> |
| <tr> <td class="numLine"> 463</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">private</span> <span class="keyword">static</span> List<Acl> createChain(DocId docId, Map<DocId, Acl> acls) {</pre></td></tr> |
| <tr> <td class="numLineCover"> 464</td> <td class="nbHitsCovered"> 38</td> <td class="src"><pre class="src"> List<Acl> chain = <span class="keyword">new</span> LinkedList<Acl>();</pre></td></tr> |
| <tr> <td class="numLineCover"> 465</td> <td class="nbHitsCovered"> 38</td> <td class="src"><pre class="src"> Set<Acl> used = <span class="keyword">new</span> HashSet<Acl>();</pre></td></tr> |
| <tr> <td class="numLineCover"> 466</td> <td class="nbHitsCovered"> 38</td> <td class="src"><pre class="src"> DocId cur = docId;</pre></td></tr> |
| <tr> <td class="numLineCover"> 467</td> <td class="nbHitsCovered"><a title="Line 467: Conditional coverage 100% (2/2)."> 102</a></td> <td class="src"><pre class="src"> <a title="Line 467: Conditional coverage 100% (2/2)."> <span class="keyword">while</span> (cur != <span class="keyword">null</span>) {</a></pre></td></tr> |
| <tr> <td class="numLineCover"> 468</td> <td class="nbHitsCovered"> 72</td> <td class="src"><pre class="src"> Acl acl = acls.get(cur);</pre></td></tr> |
| <tr> <td class="numLineCover"> 469</td> <td class="nbHitsCovered"><a title="Line 469: Conditional coverage 100% (2/2)."> 72</a></td> <td class="src"><pre class="src"> <a title="Line 469: Conditional coverage 100% (2/2)."> <span class="keyword">if</span> (acl == <span class="keyword">null</span>) {</a></pre></td></tr> |
| <tr> <td class="numLineCover"> 470</td> <td class="nbHitsCovered"><a title="Line 470: Conditional coverage 100% (2/2)."> 6</a></td> <td class="src"><pre class="src"> <a title="Line 470: Conditional coverage 100% (2/2)."> <span class="keyword">if</span> (chain.isEmpty()) {</a></pre></td></tr> |
| <tr> <td class="numLine"> 471</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">// The GSA turns this into a chain containing only an empty ACL (which</span></pre></td></tr> |
| <tr> <td class="numLine"> 472</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">// eventually becomes indeterminate), but we want this to be</span></pre></td></tr> |
| <tr> <td class="numLine"> 473</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">// indeterminate immediately because we do not have public/private</span></pre></td></tr> |
| <tr> <td class="numLine"> 474</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">// flags for documents and we don't want to accidentally cause a</span></pre></td></tr> |
| <tr> <td class="numLine"> 475</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">// document to become public.</span></pre></td></tr> |
| <tr> <td class="numLineCover"> 476</td> <td class="nbHitsCovered"> 2</td> <td class="src"><pre class="src"> log.log(Level.FINE, <span class="string">"Document does not seem to use ACLs: {0}"</span>, cur);</pre></td></tr> |
| <tr> <td class="numLine"> 477</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> } <span class="keyword">else</span> {</pre></td></tr> |
| <tr> <td class="numLineCover"> 478</td> <td class="nbHitsCovered"> 4</td> <td class="src"><pre class="src"> log.log(Level.WARNING, <span class="string">"Missing ACLs for document ''{0}'' inherited "</span></pre></td></tr> |
| <tr> <td class="numLine"> 479</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> + <span class="string">"from another document"</span>, cur);</pre></td></tr> |
| <tr> <td class="numLine"> 480</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLineCover"> 481</td> <td class="nbHitsCovered"> 6</td> <td class="src"><pre class="src"> <span class="keyword">return</span> <span class="keyword">null</span>;</pre></td></tr> |
| <tr> <td class="numLine"> 482</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLineCover"> 483</td> <td class="nbHitsCovered"><a title="Line 483: Conditional coverage 100% (2/2)."> 66</a></td> <td class="src"><pre class="src"> <a title="Line 483: Conditional coverage 100% (2/2)."> <span class="keyword">if</span> (used.contains(acl)) {</a></pre></td></tr> |
| <tr> <td class="numLineCover"> 484</td> <td class="nbHitsCovered"> 2</td> <td class="src"><pre class="src"> log.log(Level.WARNING, <span class="string">"Detected ACL cycle at ''{0}''"</span>, cur);</pre></td></tr> |
| <tr> <td class="numLineCover"> 485</td> <td class="nbHitsCovered"> 2</td> <td class="src"><pre class="src"> <span class="keyword">return</span> <span class="keyword">null</span>;</pre></td></tr> |
| <tr> <td class="numLine"> 486</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLineCover"> 487</td> <td class="nbHitsCovered"> 64</td> <td class="src"><pre class="src"> used.add(acl);</pre></td></tr> |
| <tr> <td class="numLineCover"> 488</td> <td class="nbHitsCovered"> 64</td> <td class="src"><pre class="src"> chain.add(0, acl);</pre></td></tr> |
| <tr> <td class="numLineCover"> 489</td> <td class="nbHitsCovered"> 64</td> <td class="src"><pre class="src"> cur = acl.getInheritFrom();</pre></td></tr> |
| <tr> <td class="numLineCover"> 490</td> <td class="nbHitsCovered"> 64</td> <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLineCover"> 491</td> <td class="nbHitsCovered"> 30</td> <td class="src"><pre class="src"> <span class="keyword">return</span> Collections.unmodifiableList(chain);</pre></td></tr> |
| <tr> <td class="numLine"> 492</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 493</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> </pre></td></tr> |
| <tr> <td class="numLine"> 494</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">/**</span></pre></td></tr> |
| <tr> <td class="numLine"> 495</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * Equality is determined if all the permit/deny sets are equal and the</span></pre></td></tr> |
| <tr> <td class="numLine"> 496</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * inheritance is equal.</span></pre></td></tr> |
| <tr> <td class="numLine"> 497</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr> |
| <tr> <td class="numLine"> 498</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> @Override</pre></td></tr> |
| <tr> <td class="numLine"> 499</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">public</span> <span class="keyword">boolean</span> equals(Object o) {</pre></td></tr> |
| <tr> <td class="numLineCover"> 500</td> <td class="nbHitsCovered"><a title="Line 500: Conditional coverage 100% (2/2)."> 62</a></td> <td class="src"><pre class="src"> <a title="Line 500: Conditional coverage 100% (2/2)."> <span class="keyword">if</span> (!(o <span class="keyword">instanceof</span> Acl)) {</a></pre></td></tr> |
| <tr> <td class="numLineCover"> 501</td> <td class="nbHitsCovered"> 1</td> <td class="src"><pre class="src"> <span class="keyword">return</span> <span class="keyword">false</span>;</pre></td></tr> |
| <tr> <td class="numLine"> 502</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLineCover"> 503</td> <td class="nbHitsCovered"><a title="Line 503: Conditional coverage 100% (2/2)."> 61</a></td> <td class="src"><pre class="src"> <a title="Line 503: Conditional coverage 100% (2/2)."> <span class="keyword">if</span> (<span class="keyword">this</span> == o) {</a></pre></td></tr> |
| <tr> <td class="numLineCover"> 504</td> <td class="nbHitsCovered"> 7</td> <td class="src"><pre class="src"> <span class="keyword">return</span> <span class="keyword">true</span>;</pre></td></tr> |
| <tr> <td class="numLine"> 505</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLineCover"> 506</td> <td class="nbHitsCovered"> 54</td> <td class="src"><pre class="src"> Acl a = (Acl) o;</pre></td></tr> |
| <tr> <td class="numLineCover"> 507</td> <td class="nbHitsUncovered"><a title="Line 507: Conditional coverage 91% (22/24) [each condition: 100%, 100%, 100%, 100%, 100%, 50%, 50%, 100%, 100%, 100%, 100%, 100%]."> 54</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 507: Conditional coverage 91% (22/24) [each condition: 100%, 100%, 100%, 100%, 100%, 50%, 50%, 100%, 100%, 100%, 100%, 100%]."> <span class="keyword">return</span> inheritType == a.inheritType</a></span></pre></td></tr> |
| <tr> <td class="numLine"> 508</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">// Handle null case.</span></pre></td></tr> |
| <tr> <td class="numLine"> 509</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> && (inheritFrom == a.inheritFrom</pre></td></tr> |
| <tr> <td class="numLine"> 510</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> || (inheritFrom != <span class="keyword">null</span> && inheritFrom.equals(a.inheritFrom)))</pre></td></tr> |
| <tr> <td class="numLine"> 511</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> && (inheritFromFragment == a.inheritFromFragment</pre></td></tr> |
| <tr> <td class="numLine"> 512</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> || (inheritFromFragment != <span class="keyword">null</span></pre></td></tr> |
| <tr> <td class="numLine"> 513</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> && inheritFromFragment.equals(a.inheritFromFragment)))</pre></td></tr> |
| <tr> <td class="numLine"> 514</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> && permitGroups.equals(a.permitGroups)</pre></td></tr> |
| <tr> <td class="numLine"> 515</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> && denyGroups.equals(a.denyGroups)</pre></td></tr> |
| <tr> <td class="numLine"> 516</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> && permitUsers.equals(a.permitUsers) && denyUsers.equals(a.denyUsers)</pre></td></tr> |
| <tr> <td class="numLine"> 517</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> && caseSensitive == a.caseSensitive;</pre></td></tr> |
| <tr> <td class="numLine"> 518</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 519</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> </pre></td></tr> |
| <tr> <td class="numLine"> 520</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">/**</span></pre></td></tr> |
| <tr> <td class="numLine"> 521</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * Returns a hash code for this object that agrees with {@code equals}.</span></pre></td></tr> |
| <tr> <td class="numLine"> 522</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr> |
| <tr> <td class="numLine"> 523</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> @Override</pre></td></tr> |
| <tr> <td class="numLine"> 524</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">public</span> <span class="keyword">int</span> hashCode() {</pre></td></tr> |
| <tr> <td class="numLineCover"> 525</td> <td class="nbHitsCovered"> 336</td> <td class="src"><pre class="src"> <span class="keyword">return</span> Arrays.hashCode(<span class="keyword">new</span> Object[] {</pre></td></tr> |
| <tr> <td class="numLine"> 526</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> permitGroups, denyGroups, permitUsers, denyUsers,</pre></td></tr> |
| <tr> <td class="numLine"> 527</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> inheritFrom, inheritFromFragment, inheritType, caseSensitive</pre></td></tr> |
| <tr> <td class="numLine"> 528</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> });</pre></td></tr> |
| <tr> <td class="numLine"> 529</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 530</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> </pre></td></tr> |
| <tr> <td class="numLine"> 531</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">/**</span></pre></td></tr> |
| <tr> <td class="numLine"> 532</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * Generates a string useful for debugging that contains users and groups</span></pre></td></tr> |
| <tr> <td class="numLine"> 533</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * along with inheritance information.</span></pre></td></tr> |
| <tr> <td class="numLine"> 534</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr> |
| <tr> <td class="numLine"> 535</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> @Override</pre></td></tr> |
| <tr> <td class="numLine"> 536</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">public</span> String toString() {</pre></td></tr> |
| <tr> <td class="numLineCover"> 537</td> <td class="nbHitsUncovered"><a title="Line 537: Conditional coverage 50% (1/2)."> 5</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 537: Conditional coverage 50% (1/2)."> <span class="keyword">return</span> <span class="string">"Acl(caseSensitive="</span> + caseSensitive</a></span></pre></td></tr> |
| <tr> <td class="numLine"> 538</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> + <span class="string">", inheritFrom="</span> + inheritFrom</pre></td></tr> |
| <tr> <td class="numLine"> 539</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> + (inheritFromFragment == <span class="keyword">null</span> ? <span class="string">""</span> : <span class="string">"#"</span> + inheritFromFragment)</pre></td></tr> |
| <tr> <td class="numLine"> 540</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> + <span class="string">", inheritType="</span> + inheritType</pre></td></tr> |
| <tr> <td class="numLine"> 541</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> + <span class="string">", permitGroups="</span> + permitGroups + <span class="string">", denyGroups="</span> + denyGroups</pre></td></tr> |
| <tr> <td class="numLine"> 542</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> + <span class="string">", permitUsers="</span> + permitUsers + <span class="string">", denyUsers="</span> + denyUsers + <span class="string">")"</span>;</pre></td></tr> |
| <tr> <td class="numLine"> 543</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 544</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> </pre></td></tr> |
| <tr> <td class="numLine"> 545</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">/**</span></pre></td></tr> |
| <tr> <td class="numLine"> 546</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * Batch retrieval of ACLs for efficent processing of many authz checks at</span></pre></td></tr> |
| <tr> <td class="numLine"> 547</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * once.</span></pre></td></tr> |
| <tr> <td class="numLine"> 548</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> *</span></pre></td></tr> |
| <tr> <td class="numLine"> 549</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * @see Acl#isAuthorizedBatch</span></pre></td></tr> |
| <tr> <td class="numLine"> 550</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr> |
| <tr> <td class="numLine"> 551</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">public</span> <span class="keyword">static</span> <span class="keyword">interface</span> BatchRetriever {</pre></td></tr> |
| <tr> <td class="numLine"> 552</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">/**</span></pre></td></tr> |
| <tr> <td class="numLine"> 553</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * Retrieve the ACLs for the requested DocIds. This method is permitted to</span></pre></td></tr> |
| <tr> <td class="numLine"> 554</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * return ACLs for DocIds not requested, but it should never provide a</span></pre></td></tr> |
| <tr> <td class="numLine"> 555</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * {@code null} value for a DocId's ACLs. If a DocId does not exist, then it</span></pre></td></tr> |
| <tr> <td class="numLine"> 556</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * should be missing in the returned map.</span></pre></td></tr> |
| <tr> <td class="numLine"> 557</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> *</span></pre></td></tr> |
| <tr> <td class="numLine"> 558</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * <p>This method should provide any ACLs for named resources (if any are in</span></pre></td></tr> |
| <tr> <td class="numLine"> 559</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * use, which is not the common case) in addition to any normal documents.</span></pre></td></tr> |
| <tr> <td class="numLine"> 560</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * For more information about named resources, see {@link</span></pre></td></tr> |
| <tr> <td class="numLine"> 561</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * DocIdPusher#pushNamedResources}.</span></pre></td></tr> |
| <tr> <td class="numLine"> 562</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> *</span></pre></td></tr> |
| <tr> <td class="numLine"> 563</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * @throws IOException if there was an error contacting the data store</span></pre></td></tr> |
| <tr> <td class="numLine"> 564</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr> |
| <tr> <td class="numLine"> 565</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">public</span> Map<DocId, Acl> retrieveAcls(Set<DocId> ids)</pre></td></tr> |
| <tr> <td class="numLine"> 566</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">throws</span> IOException;</pre></td></tr> |
| <tr> <td class="numLine"> 567</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 568</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> </pre></td></tr> |
| <tr> <td class="numLine"> 569</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">/**</span></pre></td></tr> |
| <tr> <td class="numLine"> 570</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * Mutable ACL for creating instances of {@link Acl}.</span></pre></td></tr> |
| <tr> <td class="numLine"> 571</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr> |
| <tr> <td class="numLine"> 572</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">public</span> <span class="keyword">static</span> <span class="keyword">class</span> Builder {</pre></td></tr> |
| <tr> <td class="numLineCover"> 573</td> <td class="nbHitsCovered"> 152</td> <td class="src"><pre class="src"> <span class="keyword">private</span> Set<GroupPrincipal> permitGroups = Collections.emptySet();</pre></td></tr> |
| <tr> <td class="numLineCover"> 574</td> <td class="nbHitsCovered"> 152</td> <td class="src"><pre class="src"> <span class="keyword">private</span> Set<GroupPrincipal> denyGroups = Collections.emptySet();</pre></td></tr> |
| <tr> <td class="numLineCover"> 575</td> <td class="nbHitsCovered"> 152</td> <td class="src"><pre class="src"> <span class="keyword">private</span> Set<UserPrincipal> permitUsers = Collections.emptySet();</pre></td></tr> |
| <tr> <td class="numLineCover"> 576</td> <td class="nbHitsCovered"> 152</td> <td class="src"><pre class="src"> <span class="keyword">private</span> Set<UserPrincipal> denyUsers = Collections.emptySet();</pre></td></tr> |
| <tr> <td class="numLine"> 577</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">private</span> DocId inheritFrom;</pre></td></tr> |
| <tr> <td class="numLine"> 578</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">private</span> String inheritFromFragment;</pre></td></tr> |
| <tr> <td class="numLineCover"> 579</td> <td class="nbHitsCovered"> 152</td> <td class="src"><pre class="src"> <span class="keyword">private</span> InheritanceType inheritType = InheritanceType.LEAF_NODE;</pre></td></tr> |
| <tr> <td class="numLineCover"> 580</td> <td class="nbHitsCovered"> 152</td> <td class="src"><pre class="src"> <span class="keyword">private</span> <span class="keyword">boolean</span> caseSensitive = <span class="keyword">true</span>;</pre></td></tr> |
| <tr> <td class="numLine"> 581</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> </pre></td></tr> |
| <tr> <td class="numLine"> 582</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">/**</span></pre></td></tr> |
| <tr> <td class="numLine"> 583</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * Create new empty builder. All sets are empty, inheritFrom is {@code</span></pre></td></tr> |
| <tr> <td class="numLine"> 584</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * null}, and inheritType is {@link InheritanceType#LEAF_NODE}.</span></pre></td></tr> |
| <tr> <td class="numLine"> 585</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr> |
| <tr> <td class="numLineCover"> 586</td> <td class="nbHitsCovered"> 218</td> <td class="src"><pre class="src"> <span class="keyword">public</span> Builder() {}</pre></td></tr> |
| <tr> <td class="numLine"> 587</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> </pre></td></tr> |
| <tr> <td class="numLine"> 588</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">/**</span></pre></td></tr> |
| <tr> <td class="numLine"> 589</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * Create and initialize builder with ACL information provided in {@code</span></pre></td></tr> |
| <tr> <td class="numLine"> 590</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * acl}.</span></pre></td></tr> |
| <tr> <td class="numLine"> 591</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr> |
| <tr> <td class="numLineCover"> 592</td> <td class="nbHitsCovered"> 43</td> <td class="src"><pre class="src"> <span class="keyword">public</span> Builder(Acl acl) {</pre></td></tr> |
| <tr> <td class="numLineCover"> 593</td> <td class="nbHitsCovered"> 43</td> <td class="src"><pre class="src"> permitGroups = sanitizeSet(acl.getPermitGroups());</pre></td></tr> |
| <tr> <td class="numLineCover"> 594</td> <td class="nbHitsCovered"> 43</td> <td class="src"><pre class="src"> denyGroups = sanitizeSet(acl.getDenyGroups());</pre></td></tr> |
| <tr> <td class="numLineCover"> 595</td> <td class="nbHitsCovered"> 43</td> <td class="src"><pre class="src"> permitUsers = sanitizeSet(acl.getPermitUsers());</pre></td></tr> |
| <tr> <td class="numLineCover"> 596</td> <td class="nbHitsCovered"> 43</td> <td class="src"><pre class="src"> denyUsers = sanitizeSet(acl.getDenyUsers());</pre></td></tr> |
| <tr> <td class="numLineCover"> 597</td> <td class="nbHitsCovered"> 43</td> <td class="src"><pre class="src"> inheritFrom = acl.getInheritFrom();</pre></td></tr> |
| <tr> <td class="numLineCover"> 598</td> <td class="nbHitsCovered"> 43</td> <td class="src"><pre class="src"> inheritFromFragment = acl.getInheritFromFragment();</pre></td></tr> |
| <tr> <td class="numLineCover"> 599</td> <td class="nbHitsCovered"> 43</td> <td class="src"><pre class="src"> inheritType = acl.getInheritanceType();</pre></td></tr> |
| <tr> <td class="numLineCover"> 600</td> <td class="nbHitsCovered"> 43</td> <td class="src"><pre class="src"> caseSensitive = acl.isEverythingCaseSensitive();</pre></td></tr> |
| <tr> <td class="numLineCover"> 601</td> <td class="nbHitsCovered"> 43</td> <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 602</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> </pre></td></tr> |
| <tr> <td class="numLine"> 603</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">private</span> <P <span class="keyword">extends</span> Principal> Set<P> sanitizeSet(Collection<P> set) {</pre></td></tr> |
| <tr> <td class="numLineCover"> 604</td> <td class="nbHitsCovered"><a title="Line 604: Conditional coverage 100% (2/2)."> 438</a></td> <td class="src"><pre class="src"> <a title="Line 604: Conditional coverage 100% (2/2)."> <span class="keyword">if</span> (set.isEmpty()) {</a></pre></td></tr> |
| <tr> <td class="numLineCover"> 605</td> <td class="nbHitsCovered"> 224</td> <td class="src"><pre class="src"> <span class="keyword">return</span> Collections.emptySet();</pre></td></tr> |
| <tr> <td class="numLine"> 606</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 607</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">// Check all the values to make sure they are valid.</span></pre></td></tr> |
| <tr> <td class="numLineCover"> 608</td> <td class="nbHitsCovered"><a title="Line 608: Conditional coverage 100% (2/2)."> 214</a></td> <td class="src"><pre class="src"> <a title="Line 608: Conditional coverage 100% (2/2)."> <span class="keyword">for</span> (P item : set) {</a></pre></td></tr> |
| <tr> <td class="numLineCover"> 609</td> <td class="nbHitsCovered"><a title="Line 609: Conditional coverage 100% (2/2)."> 371</a></td> <td class="src"><pre class="src"> <a title="Line 609: Conditional coverage 100% (2/2)."> <span class="keyword">if</span> (item == <span class="keyword">null</span>) {</a></pre></td></tr> |
| <tr> <td class="numLineCover"> 610</td> <td class="nbHitsCovered"> 1</td> <td class="src"><pre class="src"> <span class="keyword">throw</span> <span class="keyword">new</span> NullPointerException(<span class="string">"Entries in set may not be null"</span>);</pre></td></tr> |
| <tr> <td class="numLine"> 611</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 612</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 613</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">// Use TreeSets so that sets have predictable order when serializing.</span></pre></td></tr> |
| <tr> <td class="numLineCover"> 614</td> <td class="nbHitsCovered"> 213</td> <td class="src"><pre class="src"> <span class="keyword">return</span> Collections.unmodifiableSet(<span class="keyword">new</span> TreeSet<P>(set));</pre></td></tr> |
| <tr> <td class="numLine"> 615</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 616</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> </pre></td></tr> |
| <tr> <td class="numLine"> 617</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">/**</span></pre></td></tr> |
| <tr> <td class="numLine"> 618</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * Create immutable {@link Acl} instance of the current state.</span></pre></td></tr> |
| <tr> <td class="numLine"> 619</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr> |
| <tr> <td class="numLine"> 620</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">public</span> Acl build() {</pre></td></tr> |
| <tr> <td class="numLineCover"> 621</td> <td class="nbHitsCovered"> 151</td> <td class="src"><pre class="src"> <span class="keyword">return</span> <span class="keyword">new</span> Acl(permitGroups, denyGroups, permitUsers, denyUsers,</pre></td></tr> |
| <tr> <td class="numLine"> 622</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> inheritFrom, inheritFromFragment, inheritType, caseSensitive);</pre></td></tr> |
| <tr> <td class="numLine"> 623</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 624</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> </pre></td></tr> |
| <tr> <td class="numLine"> 625</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">/**</span></pre></td></tr> |
| <tr> <td class="numLine"> 626</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * Replace existing permit groups.</span></pre></td></tr> |
| <tr> <td class="numLine"> 627</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> *</span></pre></td></tr> |
| <tr> <td class="numLine"> 628</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * @return the same instance of the builder, for chaining calls</span></pre></td></tr> |
| <tr> <td class="numLine"> 629</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * @throws NullPointerException if the collection is {@code null} or</span></pre></td></tr> |
| <tr> <td class="numLine"> 630</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * contains {@code null}</span></pre></td></tr> |
| <tr> <td class="numLine"> 631</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * @throws IllegalArgumentException if the collection contains {@code ""}</span></pre></td></tr> |
| <tr> <td class="numLine"> 632</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * or a value that has leading or trailing whitespace</span></pre></td></tr> |
| <tr> <td class="numLine"> 633</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr> |
| <tr> <td class="numLine"> 634</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">public</span> Builder setPermitGroups(Collection<GroupPrincipal> permitGroups) {</pre></td></tr> |
| <tr> <td class="numLineCover"> 635</td> <td class="nbHitsCovered"> 46</td> <td class="src"><pre class="src"> <span class="keyword">this</span>.permitGroups = sanitizeSet(permitGroups);</pre></td></tr> |
| <tr> <td class="numLineCover"> 636</td> <td class="nbHitsCovered"> 46</td> <td class="src"><pre class="src"> <span class="keyword">return</span> <span class="keyword">this</span>;</pre></td></tr> |
| <tr> <td class="numLine"> 637</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 638</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> </pre></td></tr> |
| <tr> <td class="numLine"> 639</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">/**</span></pre></td></tr> |
| <tr> <td class="numLine"> 640</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * Replace existing deny groups.</span></pre></td></tr> |
| <tr> <td class="numLine"> 641</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> *</span></pre></td></tr> |
| <tr> <td class="numLine"> 642</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * @return the same instance of the builder, for chaining calls</span></pre></td></tr> |
| <tr> <td class="numLine"> 643</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * @throws NullPointerException if the collection is {@code null} or</span></pre></td></tr> |
| <tr> <td class="numLine"> 644</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * contains {@code null}</span></pre></td></tr> |
| <tr> <td class="numLine"> 645</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * @throws IllegalArgumentException if the collection contains {@code ""}</span></pre></td></tr> |
| <tr> <td class="numLine"> 646</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * or a value that has leading or trailing whitespace</span></pre></td></tr> |
| <tr> <td class="numLine"> 647</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr> |
| <tr> <td class="numLine"> 648</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">public</span> Builder setDenyGroups(Collection<GroupPrincipal> denyGroups) {</pre></td></tr> |
| <tr> <td class="numLineCover"> 649</td> <td class="nbHitsCovered"> 47</td> <td class="src"><pre class="src"> <span class="keyword">this</span>.denyGroups = sanitizeSet(denyGroups);</pre></td></tr> |
| <tr> <td class="numLineCover"> 650</td> <td class="nbHitsCovered"> 47</td> <td class="src"><pre class="src"> <span class="keyword">return</span> <span class="keyword">this</span>;</pre></td></tr> |
| <tr> <td class="numLine"> 651</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 652</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> </pre></td></tr> |
| <tr> <td class="numLine"> 653</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">/**</span></pre></td></tr> |
| <tr> <td class="numLine"> 654</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * Replace existing permit users.</span></pre></td></tr> |
| <tr> <td class="numLine"> 655</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> *</span></pre></td></tr> |
| <tr> <td class="numLine"> 656</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * @return the same instance of the builder, for chaining calls</span></pre></td></tr> |
| <tr> <td class="numLine"> 657</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * @throws NullPointerException if the collection is {@code null} or</span></pre></td></tr> |
| <tr> <td class="numLine"> 658</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * contains {@code null}</span></pre></td></tr> |
| <tr> <td class="numLine"> 659</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * @throws IllegalArgumentException if the collection contains {@code ""}</span></pre></td></tr> |
| <tr> <td class="numLine"> 660</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * or a value that has leading or trailing whitespace</span></pre></td></tr> |
| <tr> <td class="numLine"> 661</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr> |
| <tr> <td class="numLine"> 662</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">public</span> Builder setPermitUsers(Collection<UserPrincipal> permitUsers) {</pre></td></tr> |
| <tr> <td class="numLineCover"> 663</td> <td class="nbHitsCovered"> 58</td> <td class="src"><pre class="src"> <span class="keyword">this</span>.permitUsers = sanitizeSet(permitUsers);</pre></td></tr> |
| <tr> <td class="numLineCover"> 664</td> <td class="nbHitsCovered"> 57</td> <td class="src"><pre class="src"> <span class="keyword">return</span> <span class="keyword">this</span>;</pre></td></tr> |
| <tr> <td class="numLine"> 665</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 666</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> </pre></td></tr> |
| <tr> <td class="numLine"> 667</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">/**</span></pre></td></tr> |
| <tr> <td class="numLine"> 668</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * Replace existing deny users.</span></pre></td></tr> |
| <tr> <td class="numLine"> 669</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> *</span></pre></td></tr> |
| <tr> <td class="numLine"> 670</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * @return the same instance of the builder, for chaining calls</span></pre></td></tr> |
| <tr> <td class="numLine"> 671</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * @throws NullPointerException if the collection is {@code null} or</span></pre></td></tr> |
| <tr> <td class="numLine"> 672</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * contains {@code null}</span></pre></td></tr> |
| <tr> <td class="numLine"> 673</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * @throws IllegalArgumentException if the collection contains {@code ""}</span></pre></td></tr> |
| <tr> <td class="numLine"> 674</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * or a value that has leading or trailing whitespace</span></pre></td></tr> |
| <tr> <td class="numLine"> 675</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr> |
| <tr> <td class="numLine"> 676</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">public</span> Builder setDenyUsers(Collection<UserPrincipal> denyUsers) {</pre></td></tr> |
| <tr> <td class="numLineCover"> 677</td> <td class="nbHitsCovered"> 49</td> <td class="src"><pre class="src"> <span class="keyword">this</span>.denyUsers = sanitizeSet(denyUsers);</pre></td></tr> |
| <tr> <td class="numLineCover"> 678</td> <td class="nbHitsCovered"> 49</td> <td class="src"><pre class="src"> <span class="keyword">return</span> <span class="keyword">this</span>;</pre></td></tr> |
| <tr> <td class="numLine"> 679</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 680</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> </pre></td></tr> |
| <tr> <td class="numLine"> 681</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">/**</span></pre></td></tr> |
| <tr> <td class="numLine"> 682</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * Replace existing permit users and groups.</span></pre></td></tr> |
| <tr> <td class="numLine"> 683</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> *</span></pre></td></tr> |
| <tr> <td class="numLine"> 684</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * @return the same instance of the builder, for chaining calls</span></pre></td></tr> |
| <tr> <td class="numLine"> 685</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * @throws NullPointerException if the collection is {@code null} or</span></pre></td></tr> |
| <tr> <td class="numLine"> 686</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * contains {@code null}</span></pre></td></tr> |
| <tr> <td class="numLine"> 687</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * @throws IllegalArgumentException if the collection contains {@code ""}</span></pre></td></tr> |
| <tr> <td class="numLine"> 688</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * or a value that has leading or trailing whitespace</span></pre></td></tr> |
| <tr> <td class="numLine"> 689</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr> |
| <tr> <td class="numLine"> 690</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">public</span> Builder setPermits(Collection<Principal> permits) {</pre></td></tr> |
| <tr> <td class="numLineCover"> 691</td> <td class="nbHitsCovered"> 16</td> <td class="src"><pre class="src"> Collection<GroupPrincipal> groups = <span class="keyword">new</span> ArrayList<GroupPrincipal>();</pre></td></tr> |
| <tr> <td class="numLineCover"> 692</td> <td class="nbHitsCovered"> 16</td> <td class="src"><pre class="src"> Collection<UserPrincipal> users = <span class="keyword">new</span> ArrayList<UserPrincipal>();</pre></td></tr> |
| <tr> <td class="numLineCover"> 693</td> <td class="nbHitsCovered"><a title="Line 693: Conditional coverage 100% (2/2)."> 16</a></td> <td class="src"><pre class="src"> <a title="Line 693: Conditional coverage 100% (2/2)."> <span class="keyword">for</span> (Principal principal : permits) {</a></pre></td></tr> |
| <tr> <td class="numLineCover"> 694</td> <td class="nbHitsCovered"><a title="Line 694: Conditional coverage 100% (2/2)."> 57</a></td> <td class="src"><pre class="src"> <a title="Line 694: Conditional coverage 100% (2/2)."> <span class="keyword">if</span> (principal.isGroup()) {</a></pre></td></tr> |
| <tr> <td class="numLineCover"> 695</td> <td class="nbHitsCovered"> 41</td> <td class="src"><pre class="src"> groups.add((GroupPrincipal) principal);</pre></td></tr> |
| <tr> <td class="numLine"> 696</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> } <span class="keyword">else</span> {</pre></td></tr> |
| <tr> <td class="numLineCover"> 697</td> <td class="nbHitsCovered"> 16</td> <td class="src"><pre class="src"> users.add((UserPrincipal) principal);</pre></td></tr> |
| <tr> <td class="numLine"> 698</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 699</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLineCover"> 700</td> <td class="nbHitsCovered"> 16</td> <td class="src"><pre class="src"> Set<GroupPrincipal> sanitizedGroups = sanitizeSet(groups);</pre></td></tr> |
| <tr> <td class="numLineCover"> 701</td> <td class="nbHitsCovered"> 16</td> <td class="src"><pre class="src"> Set<UserPrincipal> sanitizedUsers = sanitizeSet(users);</pre></td></tr> |
| <tr> <td class="numLineCover"> 702</td> <td class="nbHitsCovered"> 16</td> <td class="src"><pre class="src"> <span class="keyword">this</span>.permitGroups = sanitizedGroups;</pre></td></tr> |
| <tr> <td class="numLineCover"> 703</td> <td class="nbHitsCovered"> 16</td> <td class="src"><pre class="src"> <span class="keyword">this</span>.permitUsers = sanitizedUsers;</pre></td></tr> |
| <tr> <td class="numLineCover"> 704</td> <td class="nbHitsCovered"> 16</td> <td class="src"><pre class="src"> <span class="keyword">return</span> <span class="keyword">this</span>;</pre></td></tr> |
| <tr> <td class="numLine"> 705</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 706</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> </pre></td></tr> |
| <tr> <td class="numLine"> 707</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">/**</span></pre></td></tr> |
| <tr> <td class="numLine"> 708</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * Replace existing deny users and groups.</span></pre></td></tr> |
| <tr> <td class="numLine"> 709</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> *</span></pre></td></tr> |
| <tr> <td class="numLine"> 710</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * @return the same instance of the builder, for chaining calls</span></pre></td></tr> |
| <tr> <td class="numLine"> 711</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * @throws NullPointerException if the collection is {@code null} or</span></pre></td></tr> |
| <tr> <td class="numLine"> 712</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * contains {@code null}</span></pre></td></tr> |
| <tr> <td class="numLine"> 713</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * @throws IllegalArgumentException if the collection contains {@code ""}</span></pre></td></tr> |
| <tr> <td class="numLine"> 714</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * or a value that has leading or trailing whitespace</span></pre></td></tr> |
| <tr> <td class="numLine"> 715</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr> |
| <tr> <td class="numLine"> 716</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">public</span> Builder setDenies(Collection<Principal> denies) {</pre></td></tr> |
| <tr> <td class="numLineCover"> 717</td> <td class="nbHitsCovered"> 17</td> <td class="src"><pre class="src"> Collection<GroupPrincipal> groups = <span class="keyword">new</span> ArrayList<GroupPrincipal>();</pre></td></tr> |
| <tr> <td class="numLineCover"> 718</td> <td class="nbHitsCovered"> 17</td> <td class="src"><pre class="src"> Collection<UserPrincipal> users = <span class="keyword">new</span> ArrayList<UserPrincipal>();</pre></td></tr> |
| <tr> <td class="numLineCover"> 719</td> <td class="nbHitsCovered"><a title="Line 719: Conditional coverage 100% (2/2)."> 17</a></td> <td class="src"><pre class="src"> <a title="Line 719: Conditional coverage 100% (2/2)."> <span class="keyword">for</span> (Principal principal : denies) {</a></pre></td></tr> |
| <tr> <td class="numLineCover"> 720</td> <td class="nbHitsCovered"><a title="Line 720: Conditional coverage 100% (2/2)."> 36</a></td> <td class="src"><pre class="src"> <a title="Line 720: Conditional coverage 100% (2/2)."> <span class="keyword">if</span> (principal.isGroup()) {</a></pre></td></tr> |
| <tr> <td class="numLineCover"> 721</td> <td class="nbHitsCovered"> 22</td> <td class="src"><pre class="src"> groups.add((GroupPrincipal) principal);</pre></td></tr> |
| <tr> <td class="numLine"> 722</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> } <span class="keyword">else</span> {</pre></td></tr> |
| <tr> <td class="numLineCover"> 723</td> <td class="nbHitsCovered"> 14</td> <td class="src"><pre class="src"> users.add((UserPrincipal) principal);</pre></td></tr> |
| <tr> <td class="numLine"> 724</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 725</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLineCover"> 726</td> <td class="nbHitsCovered"> 17</td> <td class="src"><pre class="src"> Set<GroupPrincipal> sanitizedGroups = sanitizeSet(groups);</pre></td></tr> |
| <tr> <td class="numLineCover"> 727</td> <td class="nbHitsCovered"> 17</td> <td class="src"><pre class="src"> Set<UserPrincipal> sanitizedUsers = sanitizeSet(users);</pre></td></tr> |
| <tr> <td class="numLineCover"> 728</td> <td class="nbHitsCovered"> 17</td> <td class="src"><pre class="src"> <span class="keyword">this</span>.denyGroups = sanitizedGroups;</pre></td></tr> |
| <tr> <td class="numLineCover"> 729</td> <td class="nbHitsCovered"> 17</td> <td class="src"><pre class="src"> <span class="keyword">this</span>.denyUsers = sanitizedUsers;</pre></td></tr> |
| <tr> <td class="numLineCover"> 730</td> <td class="nbHitsCovered"> 17</td> <td class="src"><pre class="src"> <span class="keyword">return</span> <span class="keyword">this</span>;</pre></td></tr> |
| <tr> <td class="numLine"> 731</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 732</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> </pre></td></tr> |
| <tr> <td class="numLine"> 733</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">/**</span></pre></td></tr> |
| <tr> <td class="numLine"> 734</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * Set {@code DocId} to inherit ACLs from. This is also known as the</span></pre></td></tr> |
| <tr> <td class="numLine"> 735</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * "parent's" ACLs. Note that the parent's {@code InheritanceType}</span></pre></td></tr> |
| <tr> <td class="numLine"> 736</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * determines how to combine results with this ACL.</span></pre></td></tr> |
| <tr> <td class="numLine"> 737</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> *</span></pre></td></tr> |
| <tr> <td class="numLine"> 738</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * @return the same instance of the builder, for chaining calls</span></pre></td></tr> |
| <tr> <td class="numLine"> 739</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * @see #setInheritanceType</span></pre></td></tr> |
| <tr> <td class="numLine"> 740</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr> |
| <tr> <td class="numLine"> 741</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">public</span> Builder setInheritFrom(DocId inheritFrom) {</pre></td></tr> |
| <tr> <td class="numLineCover"> 742</td> <td class="nbHitsCovered"> 48</td> <td class="src"><pre class="src"> <span class="keyword">this</span>.inheritFrom = inheritFrom;</pre></td></tr> |
| <tr> <td class="numLineCover"> 743</td> <td class="nbHitsCovered"> 48</td> <td class="src"><pre class="src"> <span class="keyword">this</span>.inheritFromFragment = <span class="keyword">null</span>;</pre></td></tr> |
| <tr> <td class="numLineCover"> 744</td> <td class="nbHitsCovered"> 48</td> <td class="src"><pre class="src"> <span class="keyword">return</span> <span class="keyword">this</span>;</pre></td></tr> |
| <tr> <td class="numLine"> 745</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 746</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> </pre></td></tr> |
| <tr> <td class="numLine"> 747</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">/**</span></pre></td></tr> |
| <tr> <td class="numLine"> 748</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * Set the parent to inherit ACLs from. </span></pre></td></tr> |
| <tr> <td class="numLine"> 749</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * Note that the parent's {@code InheritanceType}</span></pre></td></tr> |
| <tr> <td class="numLine"> 750</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * determines how to combine results with this ACL.</span></pre></td></tr> |
| <tr> <td class="numLine"> 751</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * <p></span></pre></td></tr> |
| <tr> <td class="numLine"> 752</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * The fragment facilitates a single parent {@code DocId}</span></pre></td></tr> |
| <tr> <td class="numLine"> 753</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * having multiple ACLs to inherit from. For example</span></pre></td></tr> |
| <tr> <td class="numLine"> 754</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * a single parent DocId could have ACLs that are to be inherited</span></pre></td></tr> |
| <tr> <td class="numLine"> 755</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * by sub-folder {@code DocId} instances and different</span></pre></td></tr> |
| <tr> <td class="numLine"> 756</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * ACLs that are to be inherited by children files.</span></pre></td></tr> |
| <tr> <td class="numLine"> 757</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * The fragment allows specifying which of the parent's ACLs</span></pre></td></tr> |
| <tr> <td class="numLine"> 758</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * is to be inherited from.</span></pre></td></tr> |
| <tr> <td class="numLine"> 759</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> *</span></pre></td></tr> |
| <tr> <td class="numLine"> 760</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * @return the same instance of the builder, for chaining calls</span></pre></td></tr> |
| <tr> <td class="numLine"> 761</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * @see #setInheritanceType</span></pre></td></tr> |
| <tr> <td class="numLine"> 762</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr> |
| <tr> <td class="numLine"> 763</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">public</span> Builder setInheritFrom(DocId inheritFrom, String fragment) {</pre></td></tr> |
| <tr> <td class="numLineCover"> 764</td> <td class="nbHitsCovered"> 9</td> <td class="src"><pre class="src"> <span class="keyword">this</span>.inheritFrom = inheritFrom;</pre></td></tr> |
| <tr> <td class="numLineCover"> 765</td> <td class="nbHitsCovered"> 9</td> <td class="src"><pre class="src"> <span class="keyword">this</span>.inheritFromFragment = fragment;</pre></td></tr> |
| <tr> <td class="numLineCover"> 766</td> <td class="nbHitsCovered"> 9</td> <td class="src"><pre class="src"> <span class="keyword">return</span> <span class="keyword">this</span>;</pre></td></tr> |
| <tr> <td class="numLine"> 767</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 768</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> </pre></td></tr> |
| <tr> <td class="numLine"> 769</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">/**</span></pre></td></tr> |
| <tr> <td class="numLine"> 770</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * Set the type of inheritance of ACL information used to combine authz</span></pre></td></tr> |
| <tr> <td class="numLine"> 771</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * decisions of these ACLs with its <em>child</em>. The inheritance type</span></pre></td></tr> |
| <tr> <td class="numLine"> 772</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * applies to the interaction between this ACL and any <em>children</em> it</span></pre></td></tr> |
| <tr> <td class="numLine"> 773</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * has.</span></pre></td></tr> |
| <tr> <td class="numLine"> 774</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> *</span></pre></td></tr> |
| <tr> <td class="numLine"> 775</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * @return the same instance of the builder, for chaining calls</span></pre></td></tr> |
| <tr> <td class="numLine"> 776</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * @throws NullPointerException if {@code inheritType} is {@code null}</span></pre></td></tr> |
| <tr> <td class="numLine"> 777</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * @see #setInheritFrom</span></pre></td></tr> |
| <tr> <td class="numLine"> 778</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr> |
| <tr> <td class="numLine"> 779</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">public</span> Builder setInheritanceType(InheritanceType inheritType) {</pre></td></tr> |
| <tr> <td class="numLineCover"> 780</td> <td class="nbHitsCovered"><a title="Line 780: Conditional coverage 100% (2/2)."> 42</a></td> <td class="src"><pre class="src"> <a title="Line 780: Conditional coverage 100% (2/2)."> <span class="keyword">if</span> (inheritType == <span class="keyword">null</span>) {</a></pre></td></tr> |
| <tr> <td class="numLineCover"> 781</td> <td class="nbHitsCovered"> 1</td> <td class="src"><pre class="src"> <span class="keyword">throw</span> <span class="keyword">new</span> NullPointerException();</pre></td></tr> |
| <tr> <td class="numLine"> 782</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLineCover"> 783</td> <td class="nbHitsCovered"> 41</td> <td class="src"><pre class="src"> <span class="keyword">this</span>.inheritType = inheritType;</pre></td></tr> |
| <tr> <td class="numLineCover"> 784</td> <td class="nbHitsCovered"> 41</td> <td class="src"><pre class="src"> <span class="keyword">return</span> <span class="keyword">this</span>;</pre></td></tr> |
| <tr> <td class="numLine"> 785</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 786</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> </pre></td></tr> |
| <tr> <td class="numLine"> 787</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">public</span> Builder setEverythingCaseSensitive() {</pre></td></tr> |
| <tr> <td class="numLineCover"> 788</td> <td class="nbHitsCovered"> 4</td> <td class="src"><pre class="src"> caseSensitive = <span class="keyword">true</span>;</pre></td></tr> |
| <tr> <td class="numLineCover"> 789</td> <td class="nbHitsCovered"> 4</td> <td class="src"><pre class="src"> <span class="keyword">return</span> <span class="keyword">this</span>;</pre></td></tr> |
| <tr> <td class="numLine"> 790</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 791</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> </pre></td></tr> |
| <tr> <td class="numLine"> 792</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">public</span> Builder setEverythingCaseInsensitive() {</pre></td></tr> |
| <tr> <td class="numLineCover"> 793</td> <td class="nbHitsCovered"> 15</td> <td class="src"><pre class="src"> caseSensitive = <span class="keyword">false</span>;</pre></td></tr> |
| <tr> <td class="numLineCover"> 794</td> <td class="nbHitsCovered"> 15</td> <td class="src"><pre class="src"> <span class="keyword">return</span> <span class="keyword">this</span>;</pre></td></tr> |
| <tr> <td class="numLine"> 795</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 796</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 797</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> </pre></td></tr> |
| <tr> <td class="numLine"> 798</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">/**</span></pre></td></tr> |
| <tr> <td class="numLine"> 799</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * The rule for combining a parent's authz response with its child's. This is</span></pre></td></tr> |
| <tr> <td class="numLine"> 800</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * stored as part of the parent's ACLs.</span></pre></td></tr> |
| <tr> <td class="numLine"> 801</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr> |
| <tr> <td class="numLineCover"> 802</td> <td class="nbHitsCovered"> 6</td> <td class="src"><pre class="src"> <span class="keyword">public</span> <span class="keyword">static</span> enum InheritanceType {</pre></td></tr> |
| <tr> <td class="numLine"> 803</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">/**</span></pre></td></tr> |
| <tr> <td class="numLine"> 804</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * The child's authz result is used, unless it is indeterminate, in which</span></pre></td></tr> |
| <tr> <td class="numLine"> 805</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * case this ACL's authz result is used.</span></pre></td></tr> |
| <tr> <td class="numLine"> 806</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr> |
| <tr> <td class="numLineCover"> 807</td> <td class="nbHitsCovered"> 1</td> <td class="src"><pre class="src"> CHILD_OVERRIDES(<span class="string">"child-overrides"</span>) {</pre></td></tr> |
| <tr> <td class="numLine"> 808</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> @Override</pre></td></tr> |
| <tr> <td class="numLine"> 809</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> AuthzStatus isAuthorized(Decision child, Decision parent) {</pre></td></tr> |
| <tr> <td class="numLineCover"> 810</td> <td class="nbHitsCovered"><a title="Line 810: Conditional coverage 100% (2/2)."> 19</a></td> <td class="src"><pre class="src"> <a title="Line 810: Conditional coverage 100% (2/2)."> <span class="keyword">if</span> (child.getStatus() == AuthzStatus.INDETERMINATE) {</a></pre></td></tr> |
| <tr> <td class="numLineCover"> 811</td> <td class="nbHitsCovered"> 10</td> <td class="src"><pre class="src"> <span class="keyword">return</span> parent.getStatus();</pre></td></tr> |
| <tr> <td class="numLine"> 812</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLineCover"> 813</td> <td class="nbHitsCovered"> 9</td> <td class="src"><pre class="src"> <span class="keyword">return</span> child.getStatus();</pre></td></tr> |
| <tr> <td class="numLine"> 814</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 815</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> },</pre></td></tr> |
| <tr> <td class="numLine"> 816</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">/**</span></pre></td></tr> |
| <tr> <td class="numLine"> 817</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * This ACL's authz result is used, unless it is indeterminate, in which</span></pre></td></tr> |
| <tr> <td class="numLine"> 818</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * case the child's authz result is used.</span></pre></td></tr> |
| <tr> <td class="numLine"> 819</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr> |
| <tr> <td class="numLineCover"> 820</td> <td class="nbHitsCovered"> 1</td> <td class="src"><pre class="src"> PARENT_OVERRIDES(<span class="string">"parent-overrides"</span>) {</pre></td></tr> |
| <tr> <td class="numLine"> 821</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> @Override</pre></td></tr> |
| <tr> <td class="numLine"> 822</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> AuthzStatus isAuthorized(Decision child, Decision parent) {</pre></td></tr> |
| <tr> <td class="numLineCover"> 823</td> <td class="nbHitsCovered"><a title="Line 823: Conditional coverage 100% (2/2)."> 13</a></td> <td class="src"><pre class="src"> <a title="Line 823: Conditional coverage 100% (2/2)."> <span class="keyword">if</span> (parent.getStatus() == AuthzStatus.INDETERMINATE) {</a></pre></td></tr> |
| <tr> <td class="numLineCover"> 824</td> <td class="nbHitsCovered"> 4</td> <td class="src"><pre class="src"> <span class="keyword">return</span> child.getStatus();</pre></td></tr> |
| <tr> <td class="numLine"> 825</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLineCover"> 826</td> <td class="nbHitsCovered"> 9</td> <td class="src"><pre class="src"> <span class="keyword">return</span> parent.getStatus();</pre></td></tr> |
| <tr> <td class="numLine"> 827</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 828</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> },</pre></td></tr> |
| <tr> <td class="numLine"> 829</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">/**</span></pre></td></tr> |
| <tr> <td class="numLine"> 830</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * The user is denied, unless both this ACL and the child's authz result is</span></pre></td></tr> |
| <tr> <td class="numLine"> 831</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * permit.</span></pre></td></tr> |
| <tr> <td class="numLine"> 832</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr> |
| <tr> <td class="numLineCover"> 833</td> <td class="nbHitsCovered"> 1</td> <td class="src"><pre class="src"> AND_BOTH_PERMIT(<span class="string">"and-both-permit"</span>) {</pre></td></tr> |
| <tr> <td class="numLine"> 834</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> @Override</pre></td></tr> |
| <tr> <td class="numLine"> 835</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> AuthzStatus isAuthorized(Decision child, Decision parent) {</pre></td></tr> |
| <tr> <td class="numLineCover"> 836</td> <td class="nbHitsCovered"><a title="Line 836: Conditional coverage 100% (4/4) [each condition: 100%, 100%]."> 14</a></td> <td class="src"><pre class="src"> <a title="Line 836: Conditional coverage 100% (4/4) [each condition: 100%, 100%]."> <span class="keyword">if</span> (parent.getStatus() == AuthzStatus.PERMIT</a></pre></td></tr> |
| <tr> <td class="numLine"> 837</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> && child.getStatus() == AuthzStatus.PERMIT) {</pre></td></tr> |
| <tr> <td class="numLineCover"> 838</td> <td class="nbHitsCovered"> 2</td> <td class="src"><pre class="src"> <span class="keyword">return</span> AuthzStatus.PERMIT;</pre></td></tr> |
| <tr> <td class="numLine"> 839</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLineCover"> 840</td> <td class="nbHitsCovered"> 12</td> <td class="src"><pre class="src"> <span class="keyword">return</span> AuthzStatus.DENY;</pre></td></tr> |
| <tr> <td class="numLine"> 841</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 842</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> },</pre></td></tr> |
| <tr> <td class="numLine"> 843</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">/**</span></pre></td></tr> |
| <tr> <td class="numLine"> 844</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * The ACL should never have a child and thus the inheritance type is</span></pre></td></tr> |
| <tr> <td class="numLine"> 845</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * unnecessary. If a child inherits from this ACL then the result is deny.</span></pre></td></tr> |
| <tr> <td class="numLine"> 846</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr> |
| <tr> <td class="numLineCover"> 847</td> <td class="nbHitsCovered"> 1</td> <td class="src"><pre class="src"> LEAF_NODE(<span class="string">"leaf-node"</span>) {</pre></td></tr> |
| <tr> <td class="numLine"> 848</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> @Override</pre></td></tr> |
| <tr> <td class="numLine"> 849</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> AuthzStatus isAuthorized(Decision child, Decision parent) {</pre></td></tr> |
| <tr> <td class="numLineCover"> 850</td> <td class="nbHitsCovered"> 9</td> <td class="src"><pre class="src"> log.log(Level.WARNING, <span class="string">"Illegal ACL information. A LEAF_NODE is the "</span></pre></td></tr> |
| <tr> <td class="numLine"> 851</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> + <span class="string">"parent of another node."</span>);</pre></td></tr> |
| <tr> <td class="numLineCover"> 852</td> <td class="nbHitsCovered"> 9</td> <td class="src"><pre class="src"> <span class="keyword">return</span> AuthzStatus.DENY;</pre></td></tr> |
| <tr> <td class="numLine"> 853</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 854</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> },</pre></td></tr> |
| <tr> <td class="numLine"> 855</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> ;</pre></td></tr> |
| <tr> <td class="numLine"> 856</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> </pre></td></tr> |
| <tr> <td class="numLine"> 857</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">private</span> <span class="keyword">final</span> String commonForm;</pre></td></tr> |
| <tr> <td class="numLine"> 858</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> </pre></td></tr> |
| <tr> <td class="numLineCover"> 859</td> <td class="nbHitsCovered"> 4</td> <td class="src"><pre class="src"> <span class="keyword">private</span> InheritanceType(String commonForm) {</pre></td></tr> |
| <tr> <td class="numLineCover"> 860</td> <td class="nbHitsCovered"> 4</td> <td class="src"><pre class="src"> <span class="keyword">this</span>.commonForm = commonForm;</pre></td></tr> |
| <tr> <td class="numLineCover"> 861</td> <td class="nbHitsCovered"> 4</td> <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 862</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> </pre></td></tr> |
| <tr> <td class="numLine"> 863</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">/**</span></pre></td></tr> |
| <tr> <td class="numLine"> 864</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * The identifier used to represent enum value during communication with the</span></pre></td></tr> |
| <tr> <td class="numLine"> 865</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * GSA.</span></pre></td></tr> |
| <tr> <td class="numLine"> 866</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr> |
| <tr> <td class="numLine"> 867</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> String getCommonForm() {</pre></td></tr> |
| <tr> <td class="numLineCover"> 868</td> <td class="nbHitsCovered"> 10</td> <td class="src"><pre class="src"> <span class="keyword">return</span> commonForm;</pre></td></tr> |
| <tr> <td class="numLine"> 869</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 870</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> </pre></td></tr> |
| <tr> <td class="numLine"> 871</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">/**</span></pre></td></tr> |
| <tr> <td class="numLine"> 872</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * Combine the result of a child and a parent.</span></pre></td></tr> |
| <tr> <td class="numLine"> 873</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr> |
| <tr> <td class="numLine"> 874</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">abstract</span> AuthzStatus isAuthorized(Decision child, Decision parent);</pre></td></tr> |
| <tr> <td class="numLine"> 875</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 876</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> </pre></td></tr> |
| <tr> <td class="numLine"> 877</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">/**</span></pre></td></tr> |
| <tr> <td class="numLine"> 878</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * Lazy-computing of AuthzStatus.</span></pre></td></tr> |
| <tr> <td class="numLine"> 879</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr> |
| <tr> <td class="numLineCover"> 880</td> <td class="nbHitsCovered"> 110</td> <td class="src"><pre class="src"> <span class="keyword">abstract</span> <span class="keyword">static</span> <span class="keyword">class</span> Decision {</pre></td></tr> |
| <tr> <td class="numLine"> 881</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">private</span> AuthzStatus status;</pre></td></tr> |
| <tr> <td class="numLine"> 882</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> </pre></td></tr> |
| <tr> <td class="numLine"> 883</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">public</span> AuthzStatus getStatus() {</pre></td></tr> |
| <tr> <td class="numLineCover"> 884</td> <td class="nbHitsCovered"><a title="Line 884: Conditional coverage 100% (2/2)."> 84</a></td> <td class="src"><pre class="src"> <a title="Line 884: Conditional coverage 100% (2/2)."> <span class="keyword">if</span> (status == <span class="keyword">null</span>) {</a></pre></td></tr> |
| <tr> <td class="numLineCover"> 885</td> <td class="nbHitsCovered"> 66</td> <td class="src"><pre class="src"> status = computeDecision();</pre></td></tr> |
| <tr> <td class="numLineCover"> 886</td> <td class="nbHitsUncovered"><a title="Line 886: Conditional coverage 50% (1/2)."> 66</a></td> <td class="src"><pre class="src"><span class="srcUncovered"> <a title="Line 886: Conditional coverage 50% (1/2)."> <span class="keyword">if</span> (status == <span class="keyword">null</span>) {</a></span></pre></td></tr> |
| <tr> <td class="numLineCover"> 887</td> <td class="nbHitsUncovered"> 0</td> <td class="src"><pre class="src"><span class="srcUncovered"> <span class="keyword">throw</span> <span class="keyword">new</span> AssertionError();</span></pre></td></tr> |
| <tr> <td class="numLine"> 888</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 889</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLineCover"> 890</td> <td class="nbHitsCovered"> 84</td> <td class="src"><pre class="src"> <span class="keyword">return</span> status;</pre></td></tr> |
| <tr> <td class="numLine"> 891</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 892</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> </pre></td></tr> |
| <tr> <td class="numLine"> 893</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment">/**</span></pre></td></tr> |
| <tr> <td class="numLine"> 894</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * Compute the actual decision. The response will be cached, so this will be</span></pre></td></tr> |
| <tr> <td class="numLine"> 895</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * called at most once.</span></pre></td></tr> |
| <tr> <td class="numLine"> 896</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> *</span></pre></td></tr> |
| <tr> <td class="numLine"> 897</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> * @return a non-{@code null} authz status</span></pre></td></tr> |
| <tr> <td class="numLine"> 898</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="comment"> */</span></pre></td></tr> |
| <tr> <td class="numLine"> 899</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> <span class="keyword">protected</span> <span class="keyword">abstract</span> AuthzStatus computeDecision();</pre></td></tr> |
| <tr> <td class="numLine"> 900</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| <tr> <td class="numLine"> 901</td> <td class="nbHits"> </td> |
| <td class="src"><pre class="src"> }</pre></td></tr> |
| </table> |
| |
| <div class="footer">Report generated by <a href="http://cobertura.sourceforge.net/" target="_top">Cobertura</a> 1.9.4.1.</div> |
| </body> |
| </html> |