...
An example of a repository service that provides user management of access control list features for the repository objects is shown below. An interface for this service is described as follows:
Code Block | ||||||
---|---|---|---|---|---|---|
| ||||||
public interface IAclManagerRepositorySecurityManager extends IRepositoryService { /** public List<IUser> getUsers() *throws GetKettleException; the Permissions of apublic repository object. *void setUsers(List<IUser> users) throws KettleException; public *ObjectId @param Object Id of the repository object * @param forceParentInheriting retrieve the effective ACLs as if 'inherit from parent' were true * * @return The permissions. * @throws KettleException in case something goes horribly wrong */ public ObjectAcl getAcl(ObjectId id, boolean forceParentInheritinggetUserID(String login) throws KettleException; public void delUser(ObjectId id_user) throws KettleException; public void delUser(String name) throws KettleException; public ObjectId[] getUserIDs() throws KettleException; public void saveUserInfo(IUser user) throws KettleException; public void renameUser(ObjectId id_user, String newname) throws KettleException; /**public IUser constructUser() *throws SetKettleException; the Permissions of apublic repository element. *void updateUser(IUser user) throws KettleException; public *void @param Acl object that needs to be set. * @param Object Id of a file for which the acl are being set. * * @throws KettleException in case something goes horribly wrong */deleteUsers(List<IUser> users) throws KettleException; public IUser loadUserInfo(String username) throws KettleException; public boolean void setAcl(ObjectId id, ObjectAcl aclObjectisManaged() throws KettleException; } |
In a repository's implementation the service implementation was instantiated and and the service was registered with repository.
Code Block | ||||||
---|---|---|---|---|---|---|
| ||||||
IAclManager aclImpl securityProvider = new AclManagerImpl(); registerRepositoryService(IAclManagerKettleDatabaseRepositorySecurityProvider(this, repositoryMeta, userinfo); // We need to add services in the list in the order of dependencies registerRepositoryService(RepositorySecurityManager.class, aclImplsecurityProvider); |
RegisiterRepositoryService is a convenience method. All it does is adding the service interface and its implementation in a map. Once the services are registered you can the retrieve the service by calling the getService method in the Repository API
Associating UISupport to a repository service
If the new The RepositorySecurityManager service has a UI component associated with it, you will be it. So it is required to create a UISupport class and register it in the UISupportRegistry class.
Creating UISupport
The IAclManager service has a UI component and for that a A UISupport class was created for RepositorySecurityManager service that extends the AbstractRepositoryExplorerUISupport class and implements the setup method.
Code Block | ||||||
---|---|---|---|---|---|---|
| ||||||
public class ManageUserUISupport extends AbstractRepositoryExplorerUISupport{ @Override protected void setup() { SecurityController securityController = new SecurityController(); overlayscontrollerNames.add(new DefaultXulOverlay((securityController.getName()); handlers.add(securityController); overlays.add(new RepositoryExplorerDefaultXulOverlay("org/pentaho/di/ui/repository/repositoryexplorer/xul/aclsecurity-enabled-layout-overlay.xul", RepositoryExplorer.class)); //$NON-NLS-1$ PermissionsController permissionsController = new PermissionsController(); controllerNames.add(permissionsController.getName()); handlers.add(permissionsController); } |
In the setup method all overlays or/and event handlers that this service provides were added. Finally, the UI Support class must be registered.
...
The UISupport class must register with its corresponding service interface to get consumed correctly.
Code Block | ||||||
---|---|---|---|---|---|---|
| ||||||
UISupportRegistery.getInstance().registerUISupport(IAclManagerRepositorySecurityManager.class, AclUISupportManageUserUISupport.class); |
Consuming UISupport classes
The UISupport classes give you an opportunity to enable, disable, add, or remove section(s) of UI based on the services offered by a given repository. For example, if a repository does not support access control on its objects user managements feature then the UI will never expose these features. Currently, the UI Support objects are being consumed by the Repository Explorer.
...