1 /*******************************************************************************
\r
2 * ============LICENSE_START====================================================
\r
4 * * ===========================================================================
\r
5 * * Copyright © 2017 AT&T Intellectual Property. All rights reserved.
\r
6 * * Copyright © 2017 Amdocs
\r
7 * * ===========================================================================
\r
8 * * Licensed under the Apache License, Version 2.0 (the "License");
\r
9 * * you may not use this file except in compliance with the License.
\r
10 * * You may obtain a copy of the License at
\r
12 * * http://www.apache.org/licenses/LICENSE-2.0
\r
14 * * Unless required by applicable law or agreed to in writing, software
\r
15 * * distributed under the License is distributed on an "AS IS" BASIS,
\r
16 * * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
\r
17 * * See the License for the specific language governing permissions and
\r
18 * * limitations under the License.
\r
19 * * ============LICENSE_END====================================================
\r
21 * * ECOMP is a trademark and service mark of AT&T Intellectual Property.
\r
23 ******************************************************************************/
\r
24 package com.att.dao.aaf.hl;
\r
26 import com.att.authz.env.AuthzTrans;
\r
27 import com.att.authz.layer.Result;
\r
28 import com.att.authz.org.Executor;
\r
29 import com.att.dao.aaf.cass.NsDAO.Data;
\r
30 import com.att.dao.aaf.cass.NsSplit;
\r
32 public class CassExecutor implements Executor {
\r
36 private AuthzTrans trans;
\r
38 public CassExecutor(AuthzTrans trans, Function f) {
\r
45 public boolean hasPermission(String user, String ns, String type, String instance, String action) {
\r
46 return isGranted(user, ns, type, instance, action);
\r
50 public boolean inRole(String name) {
\r
51 Result<NsSplit> nss = q.deriveNsSplit(trans, name);
\r
52 if(nss.notOK())return false;
\r
53 return q.roleDAO.read(trans, nss.value.ns,nss.value.name).isOKhasData();
\r
56 public boolean isGranted(String user, String ns, String type, String instance, String action) {
\r
57 return q.isGranted(trans, user, ns, type, instance,action);
\r
61 public String namespace() throws Exception {
\r
62 Result<Data> res = q.validNSOfDomain(trans,trans.user());
\r
64 String user[] = trans.user().split("\\.");
\r
65 return user[user.length-1] + '.' + user[user.length-2];
\r
67 throw new Exception(res.status + ' ' + res.details);
\r
71 public String id() {
\r
72 return trans.user();
\r