1 /*******************************************************************************
\r
2 * ============LICENSE_START====================================================
\r
4 * * ===========================================================================
\r
5 * * Copyright © 2017 AT&T Intellectual Property. All rights reserved.
\r
6 * * ===========================================================================
\r
7 * * Licensed under the Apache License, Version 2.0 (the "License");
\r
8 * * you may not use this file except in compliance with the License.
\r
9 * * You may obtain a copy of the License at
\r
11 * * http://www.apache.org/licenses/LICENSE-2.0
\r
13 * * Unless required by applicable law or agreed to in writing, software
\r
14 * * distributed under the License is distributed on an "AS IS" BASIS,
\r
15 * * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
\r
16 * * See the License for the specific language governing permissions and
\r
17 * * limitations under the License.
\r
18 * * ============LICENSE_END====================================================
\r
20 * * ECOMP is a trademark and service mark of AT&T Intellectual Property.
\r
22 ******************************************************************************/
\r
23 package org.onap.aaf.dao.aaf.hl;
\r
25 import org.onap.aaf.authz.env.AuthzTrans;
\r
26 import org.onap.aaf.authz.layer.Result;
\r
27 import org.onap.aaf.authz.org.Executor;
\r
28 import org.onap.aaf.dao.aaf.cass.NsSplit;
\r
29 import org.onap.aaf.dao.aaf.cass.NsDAO.Data;
\r
31 public class CassExecutor implements Executor {
\r
35 private AuthzTrans trans;
\r
37 public CassExecutor(AuthzTrans trans, Function f) {
\r
44 public boolean hasPermission(String user, String ns, String type, String instance, String action) {
\r
45 return isGranted(user, ns, type, instance, action);
\r
49 public boolean inRole(String name) {
\r
50 Result<NsSplit> nss = q.deriveNsSplit(trans, name);
\r
51 if(nss.notOK())return false;
\r
52 return q.roleDAO.read(trans, nss.value.ns,nss.value.name).isOKhasData();
\r
55 public boolean isGranted(String user, String ns, String type, String instance, String action) {
\r
56 return q.isGranted(trans, user, ns, type, instance,action);
\r
60 public String namespace() throws Exception {
\r
61 Result<Data> res = q.validNSOfDomain(trans,trans.user());
\r
63 String user[] = trans.user().split("\\.");
\r
64 return user[user.length-1] + '.' + user[user.length-2];
\r
66 throw new Exception(res.status + ' ' + res.details);
\r
70 public String id() {
\r
71 return trans.user();
\r