| // Copyright (C) 2013 The Android Open Source Project |
| // |
| // Licensed under the Apache License, Version 2.0 (the "License"); |
| // you may not use this file except in compliance with the License. |
| // You may obtain a copy of the License at |
| // |
| // http://www.apache.org/licenses/LICENSE-2.0 |
| // |
| // Unless required by applicable law or agreed to in writing, software |
| // distributed under the License is distributed on an "AS IS" BASIS, |
| // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| // See the License for the specific language governing permissions and |
| // limitations under the License. |
| |
| package com.google.gerrit.server.extensions.webui; |
| |
| import static com.google.gerrit.extensions.conditions.BooleanCondition.and; |
| import static com.google.gerrit.extensions.conditions.BooleanCondition.or; |
| import static java.util.stream.Collectors.toList; |
| |
| import com.google.common.base.Predicate; |
| import com.google.common.collect.Streams; |
| import com.google.gerrit.common.Nullable; |
| import com.google.gerrit.extensions.api.access.GlobalOrPluginPermission; |
| import com.google.gerrit.extensions.conditions.BooleanCondition; |
| import com.google.gerrit.extensions.registration.DynamicMap; |
| import com.google.gerrit.extensions.restapi.RestCollection; |
| import com.google.gerrit.extensions.restapi.RestResource; |
| import com.google.gerrit.extensions.restapi.RestView; |
| import com.google.gerrit.extensions.webui.PrivateInternals_UiActionDescription; |
| import com.google.gerrit.extensions.webui.UiAction; |
| import com.google.gerrit.extensions.webui.UiAction.Description; |
| import com.google.gerrit.server.CurrentUser; |
| import com.google.gerrit.server.permissions.GlobalPermission; |
| import com.google.gerrit.server.permissions.PermissionBackend; |
| import com.google.gerrit.server.permissions.PermissionBackendCondition; |
| import com.google.gerrit.server.permissions.PermissionBackendException; |
| import com.google.inject.Inject; |
| import com.google.inject.Provider; |
| import com.google.inject.Singleton; |
| import java.util.Iterator; |
| import java.util.List; |
| import java.util.Objects; |
| import java.util.Set; |
| import org.slf4j.Logger; |
| import org.slf4j.LoggerFactory; |
| |
| @Singleton |
| public class UiActions { |
| private static final Logger log = LoggerFactory.getLogger(UiActions.class); |
| |
| public static Predicate<UiAction.Description> enabled() { |
| return UiAction.Description::isEnabled; |
| } |
| |
| private final PermissionBackend permissionBackend; |
| private final Provider<CurrentUser> userProvider; |
| |
| @Inject |
| UiActions(PermissionBackend permissionBackend, Provider<CurrentUser> userProvider) { |
| this.permissionBackend = permissionBackend; |
| this.userProvider = userProvider; |
| } |
| |
| public <R extends RestResource> Iterable<UiAction.Description> from( |
| RestCollection<?, R> collection, R resource) { |
| return from(collection.views(), resource); |
| } |
| |
| public <R extends RestResource> Iterable<UiAction.Description> from( |
| DynamicMap<RestView<R>> views, R resource) { |
| List<UiAction.Description> descs = |
| Streams.stream(views) |
| .map(e -> describe(e, resource)) |
| .filter(Objects::nonNull) |
| .collect(toList()); |
| |
| List<PermissionBackendCondition> conds = |
| Streams.concat( |
| descs.stream().flatMap(u -> Streams.stream(visibleCondition(u))), |
| descs.stream().flatMap(u -> Streams.stream(enabledCondition(u)))) |
| .collect(toList()); |
| permissionBackend.bulkEvaluateTest(conds); |
| |
| return descs.stream().filter(u -> u.isVisible()).collect(toList()); |
| } |
| |
| private static Iterable<PermissionBackendCondition> visibleCondition(Description u) { |
| return u.getVisibleCondition().children(PermissionBackendCondition.class); |
| } |
| |
| private static Iterable<PermissionBackendCondition> enabledCondition(Description u) { |
| return u.getEnabledCondition().children(PermissionBackendCondition.class); |
| } |
| |
| @Nullable |
| private <R extends RestResource> UiAction.Description describe( |
| DynamicMap.Entry<RestView<R>> e, R resource) { |
| int d = e.getExportName().indexOf('.'); |
| if (d < 0) { |
| return null; |
| } |
| |
| RestView<R> view; |
| try { |
| view = e.getProvider().get(); |
| } catch (RuntimeException err) { |
| log.error( |
| String.format("error creating view %s.%s", e.getPluginName(), e.getExportName()), err); |
| return null; |
| } |
| |
| if (!(view instanceof UiAction)) { |
| return null; |
| } |
| |
| UiAction.Description dsc = ((UiAction<R>) view).getDescription(resource); |
| if (dsc == null) { |
| return null; |
| } |
| |
| Set<GlobalOrPluginPermission> globalRequired; |
| try { |
| globalRequired = GlobalPermission.fromAnnotation(e.getPluginName(), view.getClass()); |
| } catch (PermissionBackendException err) { |
| log.error( |
| String.format("exception testing view %s.%s", e.getPluginName(), e.getExportName()), err); |
| return null; |
| } |
| if (!globalRequired.isEmpty()) { |
| PermissionBackend.WithUser withUser = permissionBackend.user(userProvider); |
| Iterator<GlobalOrPluginPermission> i = globalRequired.iterator(); |
| BooleanCondition p = withUser.testCond(i.next()); |
| while (i.hasNext()) { |
| p = or(p, withUser.testCond(i.next())); |
| } |
| dsc.setVisible(and(p, dsc.getVisibleCondition())); |
| } |
| |
| String name = e.getExportName().substring(d + 1); |
| PrivateInternals_UiActionDescription.setMethod(dsc, e.getExportName().substring(0, d)); |
| PrivateInternals_UiActionDescription.setId( |
| dsc, "gerrit".equals(e.getPluginName()) ? name : e.getPluginName() + '~' + name); |
| return dsc; |
| } |
| } |