ontomde-demos 2.0.0

data/demo/apache-struts-mesContacts/domain/src/main/java/service/ContactManager.java

@@ -0,0 +1,162 @@
+package service;
+
+import static xmda.annotationOntoMDE.OntoMDE.ZoneCode.code;
+import static xmda.annotationOntoMDE.OntoMDE.ZoneCode.imports;
+
+import java.util.ArrayList;
+import java.util.Collection;
+import java.util.Collections;
+import java.util.Comparator;
+import java.util.List;
+import java.util.Set;
+
+import xmda.annotationOntoMDE.OntoMDE;
+import baseTypes.LetterFilter;
+import domain.Category;
+import domain.Contact;
+import domain.ContactGroup;
+import domain.ContactRepository;
+import domain.dto.ContactDTO;
+
+/**
+ * @see <a href="../umldoc/_JcIB8DhVEd2Dg_DuOx74iA-content.html">UML documentation.</a>
+ */
+@javax.jws.WebService
+@OntoMDE(reverse = { imports }, uri = "ukb__JcIB8DhVEd2Dg_DuOx74iA")
+public class ContactManager implements service.ContactService {
+
+	/**
+	 * @param contactRepositoryId self-explanatory
+	 * @param phone self-explanatory
+	 * @return  self-explanatory
+	 */
+	@javax.jws.WebMethod
+	@OntoMDE(reverse = { code }, uri = "ukb__iVaB8DhQEd2Dg_DuOx74iA_implem")
+	public domain.dto.ContactDTO findContactByHomePhone(
+			@javax.jws.WebParam(name = "contactRepositoryId")
+			final java.lang.String contactRepositoryId,
+			@javax.jws.WebParam(name = "phone")
+			final java.lang.String phone) {
+		ContactDTO res = null;
+		ContactRepository repo = ContactRepository.find(Long
+				.parseLong(contactRepositoryId));
+		Set<Contact> contacts = repo.getContact();
+
+		for (Contact contact : contacts) {
+			if (contact.getHome().equalsIgnoreCase(phone)) {
+				res = contact.toContactDTO();
+				break;
+			}
+		}
+		return res;
+
+	}
+
+	/**
+	 * @param contactRepositoryId self-explanatory
+	 * @return  self-explanatory
+	 */
+	@javax.jws.WebMethod
+	@OntoMDE(reverse = { code }, uri = "ukb__-_h5gDhPEd2Dg_DuOx74iA_implem")
+	public java.util.List<domain.dto.ContactDTO> listAllContacts(
+			@javax.jws.WebParam(name = "contactRepositoryId")
+			final java.lang.String contactRepositoryId) {
+		ContactRepository repo = ContactRepository.find(Long
+				.parseLong(contactRepositoryId));
+		Set<Contact> contacts = repo.getContact();
+		List<ContactDTO> res = new ArrayList<ContactDTO>();
+		for (Contact contact : contacts) {
+			res.add(contact.toContactDTO());
+		}
+		Collections.sort(res, ContactDTOComparator);
+		return res;
+
+	}
+
+	/**
+	 * @param category self-explanatory
+	 * @param contactRepositoryId self-explanatory
+	 * @return  self-explanatory
+	 */
+	@javax.jws.WebMethod
+	@OntoMDE(reverse = { code }, uri = "ukb__iADs8DhkEd2zjtJrcVcbMw_implem")
+	public java.util.List<domain.dto.ContactDTO> listContactsByCategory(
+			@javax.jws.WebParam(name = "category")
+			final java.lang.String category,
+			@javax.jws.WebParam(name = "contactRepositoryId")
+			final java.lang.String contactRepositoryId) {
+		List<ContactDTO> res = new ArrayList<ContactDTO>();
+		ContactRepository repo = ContactRepository.find(Long
+				.parseLong(contactRepositoryId));
+		return toListContactDTO(serv.listContactsByCategory(repo, category,
+				null));
+
+	}
+
+	/**
+	 * @param group self-explanatory
+	 * @param contactRepositoryId self-explanatory
+	 * @return  self-explanatory
+	 */
+	@javax.jws.WebMethod
+	@OntoMDE(reverse = { code }, uri = "ukb___I9VwDhkEd2zjtJrcVcbMw_implem")
+	public java.util.List<domain.dto.ContactDTO> listContactsByGroup(
+			@javax.jws.WebParam(name = "group")
+			final java.lang.String group,
+			@javax.jws.WebParam(name = "contactRepositoryId")
+			final java.lang.String contactRepositoryId) {
+		List<ContactDTO> res = new ArrayList<ContactDTO>();
+		ContactRepository repo = ContactRepository.find(Long
+				.parseLong(contactRepositoryId));
+
+		return toListContactDTO(serv.listContactsByGroup(repo, group, null));
+	}
+
+	/**
+	 * @param letterFilter self-explanatory
+	 * @param contactRepositoryId self-explanatory
+	 * @return  self-explanatory
+	 */
+	@javax.jws.WebMethod
+	@OntoMDE(reverse = { code }, uri = "ukb__Y2IUADhkEd2zjtJrcVcbMw_implem")
+	public java.util.List<domain.dto.ContactDTO> listContactsByLetter(
+			@javax.jws.WebParam(name = "letterFilter")
+			final baseTypes.LetterFilter letterFilter,
+			@javax.jws.WebParam(name = "contactRepositoryId")
+			final java.lang.String contactRepositoryId) {
+		ContactRepository repo = ContactRepository.find(Long
+				.parseLong(contactRepositoryId));
+
+		return toListContactDTO(serv.listContactsByLetter(repo.getContact(),
+				letterFilter));
+
+	}
+
+	/*XMDA_BEGIN_reverse="yes"_uri="ukb__JcIB8DhVEd2Dg_DuOx74iA__custom_code"_*/
+	static final Comparator<ContactDTO> ContactDTOComparator = new Comparator<ContactDTO>() {
+		public int compare(ContactDTO arg0, ContactDTO arg1) {
+			int nameComp = String.CASE_INSENSITIVE_ORDER.compare(
+					arg0.getName(), arg1.getName());
+			if (nameComp == 0) {
+				nameComp = String.CASE_INSENSITIVE_ORDER.compare(arg0
+						.getLastname(), arg1.getLastname());
+			}
+			return nameComp;
+		}
+	};
+
+	private List<ContactDTO> toListContactDTO(Collection<Contact> contacts) {
+		List<ContactDTO> res = new ArrayList<ContactDTO>();
+		if (contacts != null) {
+			for (Contact contact : contacts) {
+				res.add(contact.toContactDTO());
+			}
+		}
+		Collections.sort(res, ContactDTOComparator);
+		return res;
+	}
+
+	private static ContactManagerImpl serv = new ContactManagerImpl();
+	/*XMDA_END_uri="ukb__JcIB8DhVEd2Dg_DuOx74iA__custom_code"_*/
+
+}

data/demo/apache-struts-mesContacts/domain/src/main/java/service/ContactManagerImpl.java

@@ -0,0 +1,68 @@
+package service;
+
+import java.util.ArrayList;
+import java.util.Collection;
+import java.util.List;
+import java.util.Set;
+
+import baseTypes.LetterFilter;
+import domain.Category;
+import domain.Contact;
+import domain.ContactGroup;
+import domain.ContactRepository;
+
+public class ContactManagerImpl {
+	public Collection<Contact> listContactsByLetter(
+			Collection<Contact> contacts,
+			final baseTypes.LetterFilter letterFilter) {
+		List<Contact> res = new ArrayList<Contact>();
+		if (contacts != null) {
+			for (Contact contact : contacts) {
+				String firstLetter = contact.getName().substring(0, 1)
+						.toLowerCase();
+				if (letterFilter == null
+						|| firstLetter.equals(letterFilter.toString())
+						|| letterFilter.equals(LetterFilter._All)) {
+					res.add(contact);
+				}
+			}
+		}
+		return res;
+	}
+
+	public Collection<Contact> listContactsByGroup(ContactRepository repo,
+			final String group, final Collection contactsToSort) {
+		List<Contact> res = new ArrayList<Contact>();
+		Set<ContactGroup> groups = repo.getGroups();
+		for (ContactGroup groupRepo : groups) {
+			if (groupRepo.getName().equalsIgnoreCase(group)) {
+				Set<Contact> contacts = groupRepo.getContacts();
+				for (Contact contact : contacts) {
+					res.add(contact);
+				}
+			}
+		}
+		if (contactsToSort != null) {
+			res.retainAll(contactsToSort);
+		}
+		return res;
+	}
+
+	public Collection<Contact> listContactsByCategory(ContactRepository repo,
+			final String category, final Collection contactsToSort) {
+		List<Contact> res = new ArrayList<Contact>();
+		Set<Category> categories = repo.getCategories();
+		for (Category cat : categories) {
+			if (cat.getName().equalsIgnoreCase(category)) {
+				Set<Contact> contacts = cat.getContacts();
+				for (Contact contact : contacts) {
+					res.add(contact);
+				}
+			}
+		}
+		if (contactsToSort != null) {
+			res.retainAll(contactsToSort);
+		}
+		return res;
+	}
+}

data/demo/apache-struts-mesContacts/domain/src/main/java/xmda/security/GlobalComputedAccessControlCriteria.java

@@ -0,0 +1,29 @@
+package xmda.security;
+
+import xmda.annotationOntoMDE.OntoMDE;
+
+/**
+ * This enum contains a list of all computed access control criteria.
+ *
+ * Generic examples of access control:
+ * * userIsManagerForThisObject
+ * * userOwnsThisObject
+ * * userIsOnDuty
+ *
+ * AccessControl criteria are computed in the context of one class instance of the model and one user. (ex: User Martin accessing contract number 3003).
+ *
+ * Some criteria migth not need to know what object is beeing accessed (example: userIsOnDuty). Some other will need to know what object is access (Is martin a manager for contract 42000 ?, Does Martin owns product number 13239 ?)
+ *
+ * This list is defined at design time because these rules criteria are implemented usign an algorithm (model query, date computation, ...) that require some coding and optimisation at developpement time. It is however possible to add RESERVED elements for future extension (RESERVED1, RESERVED2, ...).
+ * @see <a href="../umldoc/_N9poNz0-Ed2SuOkT56DHAg-content.html">UML documentation.</a>
+ */
+@OntoMDE(reverse = {}, uri = "ukb__N9poNz0-Ed2SuOkT56DHAg")
+public enum GlobalComputedAccessControlCriteria implements
+		xmda.java.JavaEnumSig {
+	TEST;
+
+	/*XMDA_BEGIN_reverse="no"_uri="ukb__N9poNz0-Ed2SuOkT56DHAg__custom_code"_*/
+	// Please use this area for out-of-model code.
+	/*XMDA_END_uri="ukb__N9poNz0-Ed2SuOkT56DHAg__custom_code"_*/
+
+}

data/demo/apache-struts-mesContacts/domain/src/main/java/xmda/security/GlobalComputedAccessControlCriteria.java.mda

@@ -0,0 +1,37 @@
+package xmda.security;
+import xmda.annotationOntoMDE.OntoMDE;
+import static xmda.annotationOntoMDE.OntoMDE.ZoneCode.*;
+    /**
+   * This enum contains a list of all computed access control criteria.
+   *
+   * Generic examples of access control:
+   * * userIsManagerForThisObject
+   * * userOwnsThisObject
+   * * userIsOnDuty
+   *
+   * AccessControl criteria are computed in the context of one class instance of the model and one user. (ex: User Martin accessing contract number 3003).
+   *
+   * Some criteria migth not need to know what object is beeing accessed (example: userIsOnDuty). Some other will need to know what object is access (Is martin a manager for contract 42000 ?, Does Martin owns product number 13239 ?)
+   *
+   * This list is defined at design time because these rules criteria are implemented usign an algorithm (model query, date computation, ...) that require some coding and optimisation at developpement time. It is however possible to add RESERVED elements for future extension (RESERVED1, RESERVED2, ...).
+   * @see <a href="../umldoc/_N9poNz0-Ed2SuOkT56DHAg-content.html">UML documentation.</a>
+    */
+@OntoMDE(reverse={nothing},uri="ukb__N9poNz0-Ed2SuOkT56DHAg")
+public enum GlobalComputedAccessControlCriteria
+implements xmda.java.JavaEnumSig{
+/* TODO: null_literal literal  added by generator to work around a bug in hibernate which crash when an enum has no literal.*/
+null_literal
+;
+
+
+
+
+
+/*XMDA_BEGIN_reverse="no"_uri="ukb__N9poNz0-Ed2SuOkT56DHAg__custom_code"_*/
+// Please use this area for out-of-model code.
+
+/*XMDA_END_uri="ukb__N9poNz0-Ed2SuOkT56DHAg__custom_code"_*/
+
+
+
+}

data/demo/apache-struts-mesContacts/domain/src/main/java/xmda/security/ProviderImpl.java

@@ -0,0 +1,303 @@
+package xmda.security;
+
+import java.lang.reflect.Method;
+import java.util.ArrayList;
+import java.util.List;
+import java.util.Set;
+
+import org.springframework.security.GrantedAuthority;
+import org.springframework.security.GrantedAuthorityImpl;
+import org.springframework.security.context.SecurityContextHolder;
+import org.springframework.security.userdetails.User;
+import org.springframework.security.userdetails.UserDetails;
+
+import administration.BusinessGroup;
+import administration.SecureField;
+import administration.SecureMethod;
+import administration.SecurityRole;
+import domain.Customer;
+
+public class ProviderImpl implements Provider {
+
+	public static final boolean GRANT_ACCESS = true;
+	public static final boolean DENY_ACCESS = false;
+
+	private static final boolean securityIsDisabled = System
+			.getProperty("webapp.security.mode") != null
+			&& System.getProperty("webapp.security.mode").equalsIgnoreCase(
+					"disable");
+
+	public static boolean getSecurityIsDisabled() {
+		return securityIsDisabled;
+	}
+
+	private Object principalObject;
+
+	public UserDetails loadUser(String userName) {
+
+		List<Customer> users = Customer.findAll((Customer) null);
+		UserDetails userToIdentify = null;
+
+		for (Customer user : users) {
+			if (userName != null && userName.equalsIgnoreCase(user.getName())) {
+				userToIdentify = new User(user.getName(), "", true, true, true,
+						true, retrieveAuthorities(user));
+				break;
+			}
+		}
+
+		principalObject = userToIdentify;
+		return userToIdentify;
+	}
+
+	private static GrantedAuthority[] retrieveAuthorities(Customer user) {
+
+		GrantedAuthority[] authorities = null;
+		List<SecurityRole> userRoles = new ArrayList<SecurityRole>();
+
+		if (user != null && user.getUserGroup() != null) {
+			Set<BusinessGroup> groups = user.getUserGroup();
+			for (BusinessGroup group : groups) {
+				userRoles.addAll(group.getGroupRole());
+			}
+			authorities = new GrantedAuthority[userRoles.size()];
+			for (int i = 0; i < userRoles.size(); i++) {
+				authorities[i] = new GrantedAuthorityImpl(userRoles.get(i)
+						.getRoleName());
+			}
+		}
+
+		for (GrantedAuthority auth : authorities) {
+		}
+
+		return authorities;
+		//		return new GrantedAuthority[] {new GrantedAuthorityImpl("USER_TEST")};
+
+	}
+
+	public boolean hasViewRights(String fieldName) {
+
+		boolean isViewable = true;
+		if (!securityIsDisabled) {
+
+			principalObject = SecurityContextHolder.getContext()
+					.getAuthentication().getPrincipal();
+
+			if (principalObject instanceof UserDetails) {
+
+				UserDetails principal = (UserDetails) principalObject;
+
+				SecureField toSecure = null;
+
+				GrantedAuthority[] grantedRoles = principal.getAuthorities();
+
+				List<SecureField> fieldList = SecureField
+						.findAll((SecureField) null);
+
+				for (SecureField field : fieldList) {
+					if (field.getDefinition() == null) {
+						System.out
+								.println("Secured field skipped. missing getDefinition()");
+						continue;
+					}
+
+					String enumField = field.getDefinition().ownerClass
+							.getCanonicalName()
+							+ "." + field.getDefinition().propertyName;
+
+					if (fieldName.equalsIgnoreCase(enumField)) {
+						toSecure = field;
+						break;
+					}
+				}
+
+				if (toSecure != null) {
+
+					if (toSecure.getDefinition().isSecured) {
+						isViewable = false;
+						Set<SecurityRole> securityRoles = toSecure
+								.getSecureFieldRoles();
+						for (SecurityRole sRole : securityRoles) {
+							for (GrantedAuthority authority : grantedRoles) {
+								if (authority.getAuthority().equalsIgnoreCase(
+										sRole.getRoleName())) {
+									isViewable = true;
+								}
+							}
+
+						}
+					}
+				} else {
+
+					// Erreur, le nom du champ a �t� modifi� sur la JSP
+
+				}
+			}
+		}
+
+		return isViewable;
+
+	}
+
+	/*
+	 * Method called by pointcut @Before on method annotated @Secure Must return
+	 * true for access to be granted.
+	 * 
+	 * @see xmda.security.Provider#hasMethodAccess(java.lang.String,
+	 *      java.lang.Object)
+	 * 
+	 * @param signature name of the method called @param target object being
+	 * accessed @return true if access granted, false if access denied.
+	 */
+	public boolean hasMethodAccess(final String signature, final Object target) {
+		System.out.println("hasMethodAccess ??");
+		if (securityIsDisabled) {
+			// Server is in securityIsDisabled debug mode.
+			// Allow access
+			System.out.println("granted: WARNING SERVER IN NO SECURITY MODE");
+			return GRANT_ACCESS;
+		}
+
+		// user principal
+		principalObject = SecurityContextHolder.getContext()
+				.getAuthentication().getPrincipal();
+		if (!(principalObject instanceof UserDetails)) {
+			System.out
+					.println("denied: Access denied because of Internal error. Bad principalObject returned by principalObject");
+			return DENY_ACCESS;
+		}
+		UserDetails principal = (UserDetails) principalObject;
+
+		boolean hasAcces = false;
+
+		// Example: com.xyz.Aclass.doThat
+
+		// STEP 1: look for role granting this method.
+		boolean foundSecureMethod = false;
+		Set<SecurityRole> okRole = getGrantingRoles(target, signature);
+		if (okRole.isEmpty()) {
+			System.out
+					.println("denied: access denied because no possible role/SecureMethod grant found (foundSecureMethod="
+							+ foundSecureMethod + ")");
+			return DENY_ACCESS;
+		}
+		// STEP 2: check if SecureMethods found match user authorization.
+		filterOutNotGrantedRole(principal, okRole);
+		if (okRole.isEmpty()) {
+			System.out
+					.println("denied: access denied because user has no eligible role");
+			return DENY_ACCESS;
+		}
+		if (containsRoleNotRequiringComputedAccessControlCriteria(okRole)) {
+			System.out
+					.println("Access granted trough role with computed criteria");
+			return GRANT_ACCESS;
+		}
+
+		Set<GlobalComputedAccessControlCriteria> requiredGrants = getRequiredGrants(okRole);
+
+		Set<xmda.security.GlobalComputedAccessControlCriteria> grants = getGrantedCriteria(
+				target, principal);
+		if (grants.isEmpty()) {
+			System.out
+					.println("denied: access denied because computed grants is empty");
+			return DENY_ACCESS;
+		}
+		grants.retainAll(requiredGrants);
+		if (grants.isEmpty()) {
+			System.out
+					.println("denied: access denied because computed grants is empty do not match required grants");
+			return DENY_ACCESS;
+		}
+		System.out.println("granted: access granted");
+		return GRANT_ACCESS;
+	}
+
+	private Set<SecurityRole> getGrantingRoles(final Object target,
+			final String signature) {
+		String completeSignature = target.getClass().getCanonicalName() + "."
+				+ signature;
+		Set<SecurityRole> okRole = new java.util.HashSet<SecurityRole>();
+		List<SecureMethod> methods = SecureMethod.findAll((SecureMethod) null);
+		// for (SecureMethod method : methods) {
+		// String enumMethod = method.getSignature().ownerClass
+		// .getCanonicalName()
+		// + "." + method.getSignature().operationName;
+		// if (completeSignature.equals(enumMethod)) {
+		// okRole.addAll(method.getSecureMethodRoles());
+		// break;
+		// }
+		// }
+		return okRole;
+	}
+
+	private void filterOutNotGrantedRole(UserDetails principal,
+			Set<SecurityRole> okRole) {
+		GrantedAuthority[] authorities = principal.getAuthorities();
+		role_loop: for (SecurityRole role : okRole) {
+			for (GrantedAuthority authority : authorities) {
+				if (authority.getAuthority().equals(role.getRoleName())) {
+					// we keep this role
+					continue role_loop;
+				}
+			}
+			// We have reach the end of the authority loop and role was not
+			// granted.
+			// Let's remove it from our ok list
+			okRole.remove(role);
+		}
+	}
+
+	private boolean containsRoleNotRequiringComputedAccessControlCriteria(
+			Set<SecurityRole> okRole) {
+		for (SecurityRole role : okRole) {
+			if (role.getRequiredComputedAccessRight() == null) {
+				// we found one role does not require computation.
+				return true;
+			}
+		}
+		return false;
+	}
+
+	public static final String COMPUTE_ACCESS_CONTROL_GRANT_METHOD_NAME = "getComputedAccessControlGrant";
+
+	private boolean containsGrantedComputedAccessControlCriteria(
+			Set<SecurityRole> okRole, Object target, UserDetails principal) {
+		return true;
+
+	}
+
+	private Set<xmda.security.GlobalComputedAccessControlCriteria> getRequiredGrants(
+			Set<SecurityRole> okRole) {
+		Set<xmda.security.GlobalComputedAccessControlCriteria> grants = new java.util.HashSet<xmda.security.GlobalComputedAccessControlCriteria>();
+		for (SecurityRole role : okRole) {
+			grants.add(role.getRequiredComputedAccessRight());
+		}
+		return grants;
+	}
+
+	private Set<xmda.security.GlobalComputedAccessControlCriteria> getGrantedCriteria(
+			Object target, UserDetails principal) {
+		String longClassName = target.getClass().getName();
+
+		try {
+			Class<?> targetClass = Class.forName(longClassName);
+			Method method = targetClass
+					.getMethod(COMPUTE_ACCESS_CONTROL_GRANT_METHOD_NAME,
+							UserDetails.class);
+			if (method == null) {
+				System.out.println("Missing method "
+						+ COMPUTE_ACCESS_CONTROL_GRANT_METHOD_NAME
+						+ " in class " + longClassName);
+			}
+			return (Set<xmda.security.GlobalComputedAccessControlCriteria>) method
+					.invoke(target, principal);
+		} catch (Exception e) {
+			System.out.println("ERROR" + e);
+			e.printStackTrace();
+		}
+		// deny access
+		return new java.util.HashSet<xmda.security.GlobalComputedAccessControlCriteria>();
+	}
+
+}