KickJava   Java API By Example, From Geeks To Geeks.

Java > Open Source Codes > com > sun > enterprise > deployment > annotation > handlers > DenyAllHandler


1 /*
2  * The contents of this file are subject to the terms
3  * of the Common Development and Distribution License
4  * (the License). You may not use this file except in
5  * compliance with the License.
6  *
7  * You can obtain a copy of the license at
8  * https://glassfish.dev.java.net/public/CDDLv1.0.html or
9  * glassfish/bootstrap/legal/CDDLv1.0.txt.
10  * See the License for the specific language governing
11  * permissions and limitations under the License.
12  *
13  * When distributing Covered Code, include this CDDL
14  * Header Notice in each file and include the License file
15  * at glassfish/bootstrap/legal/CDDLv1.0.txt.
16  * If applicable, add the following below the CDDL Header,
17  * with the fields enclosed by brackets [] replaced by
18  * you own identifying information:
19  * "Portions Copyrighted [year] [name of copyright owner]"
20  *
21  * Copyright 2006 Sun Microsystems, Inc. All rights reserved.
22  */
23 package com.sun.enterprise.deployment.annotation.handlers;
24
25 import java.lang.annotation.Annotation JavaDoc;
26 import java.lang.annotation.ElementType JavaDoc;
27 import java.lang.reflect.AnnotatedElement JavaDoc;
28 import java.lang.reflect.Method JavaDoc;
29 import java.util.logging.Level JavaDoc;
30
31 import javax.annotation.security.DenyAll;
32 import javax.annotation.security.PermitAll;
33 import javax.annotation.security.RolesAllowed;
34
35 import com.sun.enterprise.deployment.EjbDescriptor;
36 import com.sun.enterprise.deployment.MethodDescriptor;
37 import com.sun.enterprise.deployment.MethodPermission;
38 import com.sun.enterprise.deployment.Role;
39 import com.sun.enterprise.deployment.annotation.AnnotationInfo;
40 import com.sun.enterprise.deployment.annotation.AnnotationProcessorException;
41 import com.sun.enterprise.deployment.annotation.HandlerProcessingResult;
42 import com.sun.enterprise.deployment.annotation.context.EjbContext;
43 import com.sun.enterprise.util.TypeUtil;
44
45 /**
46  * This handler is responsible for handling the javax.annotation.security.DenyAll.
47  *
48  * @author Shing Wai Chan
49  */
50 public class DenyAllHandler extends AbstractAttributeHandler {
51     
52     public DenyAllHandler() {
53     }
54     
55     /**
56      * @return the annoation type this annotation handler is handling
57      */
58     public Class JavaDoc<? extends Annotation JavaDoc> getAnnotationType() {
59         return DenyAll.class;
60     }
61
62     /**
63      * Process Annotation with given EjbContexts.
64      * @param ainfo
65      * @param ejbContexts
66      * @return HandlerProcessingResult
67      */
68     protected HandlerProcessingResult processAnnotation(AnnotationInfo ainfo,
69             EjbContext[] ejbContexts) throws AnnotationProcessorException {
70
71         AnnotatedElement JavaDoc ae = (AnnotatedElement JavaDoc)ainfo.getAnnotatedElement();
72         Method JavaDoc annMethod = (Method JavaDoc) ainfo.getAnnotatedElement();
73         if (ae.isAnnotationPresent(PermitAll.class) ||
74                 ae.isAnnotationPresent(RolesAllowed.class)) {
75             log(Level.SEVERE, ainfo,
76                 localStrings.getLocalString(
77                 "enterprise.deployment.annotation.handlers.inconsistentsecannotation",
78                 "This annotation is not consistent with other annotations. One cannot have more than one of @RolesAllowed, @PermitAll, @DenyAll in the same AnnotatedElement."));
79             return getDefaultFailedResult();
80         }
81
82         for (EjbContext ejbContext : ejbContexts) {
83             EjbDescriptor ejbDesc = ejbContext.getDescriptor();
84                 
85             for (Object JavaDoc next : ejbDesc.getSecurityBusinessMethodDescriptors()) {
86                 MethodDescriptor md = (MethodDescriptor)next;
87                 // override by xml
88 if (!hasMethodPermissionsFromDD(md, ejbDesc)) {
89                     Method JavaDoc m = md.getMethod(ejbDesc);
90                     if (TypeUtil.sameMethodSignature(m, annMethod)) {
91                         ejbDesc.addPermissionedMethod(
92                             MethodPermission.getExcludedMethodPermission(), md);
93                     }
94                 }
95             }
96         }
97
98         return getDefaultProcessedResult();
99     }
100 }
101
Popular Tags