001: /* ====================================================================
002: * The Jcorporate Apache Style Software License, Version 1.2 05-07-2002
003: *
004: * Copyright (c) 1995-2002 Jcorporate Ltd. All rights reserved.
005: *
006: * Redistribution and use in source and binary forms, with or without
007: * modification, are permitted provided that the following conditions
008: * are met:
009: *
010: * 1. Redistributions of source code must retain the above copyright
011: * notice, this list of conditions and the following disclaimer.
012: *
013: * 2. Redistributions in binary form must reproduce the above copyright
014: * notice, this list of conditions and the following disclaimer in
015: * the documentation and/or other materials provided with the
016: * distribution.
017: *
018: * 3. The end-user documentation included with the redistribution,
019: * if any, must include the following acknowledgment:
020: * "This product includes software developed by Jcorporate Ltd.
021: * (http://www.jcorporate.com/)."
022: * Alternately, this acknowledgment may appear in the software itself,
023: * if and wherever such third-party acknowledgments normally appear.
024: *
025: * 4. "Jcorporate" and product names such as "Expresso" must
026: * not be used to endorse or promote products derived from this
027: * software without prior written permission. For written permission,
028: * please contact info@jcorporate.com.
029: *
030: * 5. Products derived from this software may not be called "Expresso",
031: * or other Jcorporate product names; nor may "Expresso" or other
032: * Jcorporate product names appear in their name, without prior
033: * written permission of Jcorporate Ltd.
034: *
035: * 6. No product derived from this software may compete in the same
036: * market space, i.e. framework, without prior written permission
037: * of Jcorporate Ltd. For written permission, please contact
038: * partners@jcorporate.com.
039: *
040: * THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESSED OR IMPLIED
041: * WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
042: * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
043: * DISCLAIMED. IN NO EVENT SHALL JCORPORATE LTD OR ITS CONTRIBUTORS
044: * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
045: * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED
046: * TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF
047: * USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
048: * ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
049: * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT
050: * OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
051: * SUCH DAMAGE.
052: * ====================================================================
053: *
054: * This software consists of voluntary contributions made by many
055: * individuals on behalf of the Jcorporate Ltd. Contributions back
056: * to the project(s) are encouraged when you make modifications.
057: * Please send them to support@jcorporate.com. For more information
058: * on Jcorporate Ltd. and its products, please see
059: * <http://www.jcorporate.com/>.
060: *
061: * Portions of this software are based upon other open source
062: * products and are subject to their respective licenses.
063: */
064:
065: package com.jcorporate.expresso.core.controller;
066:
067: import com.jcorporate.expresso.core.db.DBConnection;
068: import com.jcorporate.expresso.core.db.DBConnectionPool;
069: import com.jcorporate.expresso.core.db.DBException;
070: import com.jcorporate.expresso.core.dbobj.SecuredDBObject;
071: import com.jcorporate.expresso.services.dbobj.ControllerSecurity;
072:
073: /**
074: * Controller that uses security if the security system is available.
075: * <p>There are a class of controllers that are unique in that they need
076: * database security working ONLY if the database has already been
077: * set up. Otherwise, data components need to be able to be installed, tables
078: * created etc.</p>
079: * <p>This base class fills the gap by checking to see if there are available
080: * connections to the database, checks normal ControllerSecurity if the connections
081: * are up and running, but automatically returns true to stateAllowed() queries
082: * if there is no up and runnin persistence layer. [Or there is a problem
083: * accessing ControllerSecurity]</p>
084: *
085: * @author Michael Rimov
086: */
087: abstract public class SecureIfSetController extends DBController {
088:
089: /**
090: * Default constructor.
091: */
092: public SecureIfSetController() {
093:
094: }
095:
096: /**
097: * Similar to DBController's EXCEPT that if there is no installed Database
098: * connections then the state is allowed. This is useful for setup user
099: * interfaces such as DBCreate.
100: *
101: * @param newState the state being transferred to.
102: * @param params the state parameters
103: * @return true if the state is allowed
104: * @throws com.jcorporate.expresso.core.controller.ControllerException
105: * upon
106: * error
107: */
108: public boolean stateAllowed(String newState,
109: ControllerRequest params)
110: throws com.jcorporate.expresso.core.controller.ControllerException {
111: if (isDBConnectionAvailable(params.getDataContext())) {
112: return super .stateAllowed(newState, params);
113: } else {
114: return true;
115: }
116: }
117:
118: /**
119: * Is a proper database connection available. Specific checks vary with
120: * the implementation version of Expresso.
121: *
122: * @param dataContext the datacontext to check
123: * @return true if a DBConnection appears to be set up and available.
124: */
125: public boolean isDBConnectionAvailable(String dataContext) {
126: try {
127: DBConnectionPool pool = DBConnectionPool
128: .getInstance(dataContext);
129: DBConnection connection = pool
130: .getConnection("Security Check");
131: try {
132: ControllerSecurity cs = new ControllerSecurity(
133: SecuredDBObject.SYSTEM_ACCOUNT);
134: cs.setDataContext(dataContext);
135: cs.count();
136: } finally {
137: if (connection != null) {
138: connection.release();
139: }
140: }
141: } catch (DBException ex) {
142: return false;
143: }
144:
145: return true;
146: }
147:
148: }
|