acegi+ssh动态实现基于角色的权限管理(三)

DBFilterInvocationDefinationSource 实现AbstractFilterInvocationDefinitionSource ,从db获取资源信息

code:

public class DBFilterInvocationDefinationSource extends
  AbstractFilterInvocationDefinitionSource {
 private boolean convertUrlToLowercaseBeforeComparison = false;
 
 private boolean useAntPath = false;
 
 private AcegiCacheManager acegiCacheManager;
 
 //ant path
 private final PathMatcher pathMatcher=new AntPathMatcher();
 
 //perl5 path
 private final PatternMatcher patternMatcher = new Perl5Matcher();
 
 
 
 /**
  * 返回当前的url对应的role
  */
 @SuppressWarnings("unchecked")
 @Override
 public ConfigAttributeDefinition lookupAttributes(String url) {
  // TODO 自动生成方法存根
  acegiCacheManager.initResourceCache();
  
  if(isUseAntPath()){
   //第一个?标记索引
   int firstQuestionMarkIndex = url.lastIndexOf("?");
   
   if(firstQuestionMarkIndex != -1){
    url = url.substring(0, firstQuestionMarkIndex);
   }
  } 
   
   //获取所有的url
   List urls=acegiCacheManager.getUrlResString();
   
   //先顺序排列
   Collections.sort(urls);
   //然后倒叙排列
   Collections.reverse(urls);
   
   //将url在比较前都转换为小写
   if(convertUrlToLowercaseBeforeComparison){
    url = url.toLowerCase();
   }
   //授予权限操作
   GrantedAuthority authorities []= new GrantedAuthority[0];
   for (Iterator iter = urls.iterator(); iter.hasNext();) {
    String resString = (String) iter.next();
    boolean matched = false;
    //使用ant匹配url
    if(isUseAntPath()){
     matched = pathMatcher.match(resString, url);
    }else{
     //perl5编译url
     Pattern compiledPattern;
     Perl5Compiler compiler=new Perl5Compiler();
     try {
      compiledPattern = compiler.compile(resString, Perl5Compiler.READ_ONLY_MASK);
     } catch (MalformedPatternException e) {
      // TODO 自动生成 catch 块
      throw new IllegalArgumentException("资源字符串参数格式错误:"+resString,e);
     }
     matched = patternMatcher.matches(url, compiledPattern);
    }
    
    //匹配正确
    if(matched){
     ResourceDetails rd = acegiCacheManager.getAuthorityFromCache(resString);
     authorities = rd.getAuthorities();
     break;
    }
   }
   
   //配置res,role,权限大于0
   if(authorities.length>0){
    String authoritiesStr = " ";
    for (int i = 0; i < authorities.length; i++) {
     authoritiesStr += authorities[i].getAuthority()+",";
    }
    
    String authStr = authoritiesStr.substring(0,authoritiesStr.length()-1);
    ConfigAttributeEditor configAttrEditor =  new ConfigAttributeEditor();
    configAttrEditor.setAsText(authStr.trim());
    return (ConfigAttributeDefinition) configAttrEditor.getValue();
   }
   
  return null;
 }

 public Iterator getConfigAttributeDefinitions() {
  // TODO 自动生成方法存根
  return null;
 }

setter.....

学习springside的implements.

主要实现ConfigAttributeDefinition getAttributes(Object object),从db获取,

acegi默认从配置文件从取.

 

在更新users,role,authorities时,更新cache中的内容,需要自己实现cache策略,

为了使用hibernate的eventListener,把init的acegiCacheManager和update的acegiCacheManager分开写.

 <!-- set acegiCacheManagerTarget -->
 <bean id="acegiCacheManagerTarget" class="com.runsa.components.acegi.cache.impl.AcegiCacheManagerImpl">
  <property name="authoritiesService" ref="authoritiesService"/>
  <property name="usersService" ref="usersService"/>
  <property name="detailsServiceInCache" ref="detailsServiceInCache"/>
 </bean>

acegiCacheManager code:

public class AcegiCacheManagerImpl implements AcegiCacheManager {
 private static final Log logger = LogFactory.getLog(AcegiCacheManagerImpl.class);
 private boolean cacheInitialized = false;

 private UsersService usersService;
 
 private AuthoritiesService authoritiesService;
 
 private DetaisServiceInCache detailsServiceInCache;
 
 private ResourceCache resourceCache;
 
 /**
  * 根据资源串获取资源
  */
 public ResourceDetails getAuthorityFromCache(String resString) {
  // TODO 自动生成方法存根
  return resourceCache.getAuthorityFromCache(resString);
 }

 /**
  * 获取所有的url资源
  */
 public List getUrlResString() {
  // TODO 自动生成方法存根
  return resourceCache.getUrlResStrings();
 }
 
 /**
  * 获取所有的function资源
  */
 public List getFunctions(){
  return resourceCache.getFunctions();
 }
 
 /**
  * 获取所有的Components资源
  */
 public List getComponents(){
  return resourceCache.getComponents();
 }
 
 /**
  * 初始化resourceCache
  */
 @SuppressWarnings("unchecked")
 public void initResourceCache() {
  // TODO 自动生成方法存根
  if(!cacheInitialized){
   synchronized (this) {
    List<Authorities> resources=authoritiesService.findAll();
    for (Iterator iter = resources.iterator(); iter.hasNext();) {
     Authorities auth = (Authorities) iter.next();
     detailsServiceInCache.resourceDetailsInCache(auth);
    }
    cacheInitialized = true;
   }
  }
 }
 
 /**
  * 初始化userCache
  */
 @SuppressWarnings("unchecked")
 public void initUserCache(){
  List <Users>users = usersService.findAll();
  for (Iterator iter = users.iterator(); iter.hasNext();) {
   Users user = (Users) iter.next();
   detailsServiceInCache.userDetailsInCache(user);
  }
 }
 
 
 /**
  * 刷新cache缓存
  */
 public void refreshResourceCache(){
  cacheInitialized = false;
  try {
   detailsServiceInCache.removeAllResourceInCache();
  } catch (Exception e) {
   // TODO 自动生成 catch 块
   logger.error("remove cache from resourceCache error", e);
  }
  initResourceCache();
 }

 

setter...........

 

update的acgeiCacheManager,更新缓存信息

<!-- set hibernate listener -->
 <!-- set updateAcegiCache -->
 <bean id="updateAcegiCache" class="com.runsa.components.acegi.cache.impl.UpdateAcegiCachempl">
  <property name="detailsServiceInCache" ref="detailsServiceInCache"/>
 </bean>

code:

/**
 * @author 叶天兵
 *
 */
public class UpdateAcegiCachempl  implements UpdateAcegiCache{
 private DetaisServiceInCache detailsServiceInCache;
 
 private ResourceCache resourceCache;
 
 private UserCache userCache;
 

 /**
  * 修改User时修改userCache
  * @return
  */
 public void modifyUserInCache(Users user,String orgUserName){
  UserDetails ud=userCache.getUserFromCache(orgUserName);
  if(ud!=null){
   userCache.removeUserFromCache(orgUserName);
   detailsServiceInCache.userDetailsInCache(user);
  }
 }
 
 /**
  * 修改Authorities时修改resourceCache
  */
 public void modifyAuthritiesInCache(Authorities auth,String orgResource){
  ResourceDetails rd = resourceCache.getAuthorityFromCache(orgResource);
  if(rd!=null){
   resourceCache.removeAuthorityFromCache(orgResource);
   detailsServiceInCache.resourceDetailsInCache(auth);
  }
 }
 
 /**
  * 修改Role 时修改userCache和resourceCahce
  */
 @SuppressWarnings("unchecked")
 public void modifyRoleInCache(Role role,String orgRoleName){
  Set <Users>users = new HashSet<Users>(0);
  for (Iterator iter = role.getUserRoles().iterator(); iter.hasNext();) {
   UserRole userRole = (UserRole) iter.next();
   users.add(userRole.getUsers());
  }
  for (Iterator iter = users.iterator(); iter.hasNext();) {
   Users user = (Users) iter.next();
   detailsServiceInCache.userDetailsInCache(user);
  }
  for (Iterator iter = users.iterator(); iter.hasNext();) {
   Authorities auth = (Authorities) iter.next();
   detailsServiceInCache.resourceDetailsInCache(auth);
  }
 }
 
 /**
  * User授予角色时修改userCache
  */
 public void addRoleInCache(Users user){
  detailsServiceInCache.userDetailsInCache(user);
 }
 
 /**
  * Role授予资源权限时更改resourceCache
  */
 public void addAuthInCache(Authorities auth){
  detailsServiceInCache.resourceDetailsInCache(auth);
 }
 
 /**
  * 移除User时修改userCahce
  */
 public void removeUserInCache(String userName){
  userCache.removeUserFromCache(userName);
 }
 
 /**
  * 移除Resource时修改resourceCache
  */
 public void removeResourceInCache(String orgResource){
  resourceCache.removeAuthorityFromCache(orgResource);
 }
 
 /**
  * 移除Role修改userCache和ResourceCache
  */
 public void removeRole(Role role){
  for (Iterator iter = role.getUserRoles().iterator(); iter.hasNext();) {
   Users user = (Users) iter.next();
   userCache.removeUserFromCache(user.getUserName());
  }
  for (Iterator iter = role.getRoleAuths().iterator(); iter.hasNext();) {
   Authorities auth = (Authorities) iter.next();
   resourceCache.removeAuthorityFromCache(auth.getAuthProtected());
  }
 }

 /**
  * @param detailsServiceInCache 要设置的 detailsServiceInCache
  */
 public void setDetailsServiceInCache(DetaisServiceInCache detailsServiceInCache) {
  this.detailsServiceInCache = detailsServiceInCache;
  this.resourceCache = detailsServiceInCache.getResourceCache();
  this.userCache = detailsServiceInCache.getUserCache();
 }

 

缓存实现者:

<!-- set detailsServiceInCache -->
 <bean id="detailsServiceInCache" class="com.runsa.components.acegi.cache.impl.DetailsServiceInCacheImpl">
  <property name="resourceCache" ref="resourceCache"/>
  <property name="userCache" ref="userCache"/>
 </bean>

code:

public class DetailsServiceInCacheImpl implements DetaisServiceInCache {
 private ResourceCache resourceCache;
 
 private UserCache userCache;
 
 /**
  * 获取响应的resource(authorities)放置于resourceCache中
  * @param auth
  */
 @SuppressWarnings({ "unchecked", "unused" })
 public void resourceDetailsInCache(Authorities auths) {
  // TODO 自动生成方法存根
  //获取authorities中的role集合
  List <Role>roleList=new ArrayList<Role>();
  for (Iterator iter = auths.getRoleAuths().iterator(); iter.hasNext();) {
   RoleAuth roleAuth = (RoleAuth) iter.next();
   roleList.add(roleAuth.getRole());
  }
  GrantedAuthority authorities[] = roleToAuthorities(roleList);
  ResourceDetails rd=new Resource(auths.getAuthProtected(),auths.getAuthtype().getTypeId(),authorities);
  resourceCache.putAuthorityInCache(rd);
 }

 /**
  * 获取user相应的权限并放置于userCache中
  * @param user
  */
 @SuppressWarnings({ "unchecked", "unused" })
 public void userDetailsInCache(Users user) {
  // TODO 自动生成方法存根
  //获取users中的role集合
  List <Role>roleList=new ArrayList<Role>();
  for (Iterator iter = user.getUserRoles().iterator(); iter.hasNext();) {
   UserRole userRole = (UserRole) iter.next();
   roleList.add(userRole.getRole());
  }
  GrantedAuthority authorities[]=roleToAuthorities(user.getUserRoles());
  UserDetails ud=new User(user.getUserName(),user.getUserPass(),user.isEnabled(),
    true,true,true,authorities);
  userCache.putUserInCache(ud);
 }

 /**
  * 将角色role转换为权限数组GrantedAuthority
  * @param roles
  * @return
  */
 public GrantedAuthority[] roleToAuthorities(Collection roles) {
  // TODO 自动生成方法存根
  List<GrantedAuthority> authorities =new ArrayList<GrantedAuthority>();
  for (Iterator iter = roles.iterator(); iter.hasNext();) {
   Role role = (Role) iter.next();
   GrantedAuthority ga=new GrantedAuthorityImpl(role.getRoleName());
   authorities.add(ga);
  }
  return authorities.toArray(new GrantedAuthority[0]);
 }

 

setter....