Spring 2020_02 примеры к 24 занятию (ACL)

2026-05-30 10:50:42 +00:00 · 2020-06-03 21:30:29 +03:00
parent a04fd32ac3
commit 7ee9b3d799
1 changed files with 42 additions and 0 deletions
@@ -0,0 +1,42 @@
+package ru.otus.spring.service;
+
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.security.acls.domain.BasePermission;
+import org.springframework.security.acls.domain.GrantedAuthoritySid;
+import org.springframework.security.acls.domain.ObjectIdentityImpl;
+import org.springframework.security.acls.domain.PrincipalSid;
+import org.springframework.security.acls.model.MutableAcl;
+import org.springframework.security.acls.model.MutableAclService;
+import org.springframework.security.acls.model.ObjectIdentity;
+import org.springframework.security.acls.model.Sid;
+import org.springframework.security.core.Authentication;
+import org.springframework.security.core.context.SecurityContextHolder;
+import org.springframework.stereotype.Service;
+import ru.otus.spring.model.NoticeMessage;
+import ru.otus.spring.repository.NoticeMessageRepository;
+
+@Service
+public class NoticeService {
+    @Autowired
+    protected MutableAclService mutableAclService;
+
+    @Autowired
+    private NoticeMessageRepository repository;
+
+    public void add( NoticeMessage noticeMessage ) {
+        repository.save( noticeMessage );
+        Authentication authentication = SecurityContextHolder.getContext().getAuthentication();
+        final Sid owner = new PrincipalSid( authentication );
+        ObjectIdentity oid = new ObjectIdentityImpl( noticeMessage.getClass(), noticeMessage.getId() );
+
+        final Sid admin = new GrantedAuthoritySid("ROLE_EDITOR");
+
+        MutableAcl acl = mutableAclService.createAcl( oid );
+        acl.setOwner( owner );
+        acl.insertAce( acl.getEntries().size(), BasePermission.ADMINISTRATION, admin, true );
+
+        mutableAclService.updateAcl( acl );
+
+
+    }
+}