01: /*
02: * JBoss, Home of Professional Open Source
03: * Copyright 2005, JBoss Inc., and individual contributors as indicated
04: * by the @authors tag. See the copyright.txt in the distribution for a
05: * full listing of individual contributors.
06: *
07: * This is free software; you can redistribute it and/or modify it
08: * under the terms of the GNU Lesser General Public License as
09: * published by the Free Software Foundation; either version 2.1 of
10: * the License, or (at your option) any later version.
11: *
12: * This software is distributed in the hope that it will be useful,
13: * but WITHOUT ANY WARRANTY; without even the implied warranty of
14: * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
15: * Lesser General Public License for more details.
16: *
17: * You should have received a copy of the GNU Lesser General Public
18: * License along with this software; if not, write to the Free
19: * Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA
20: * 02110-1301 USA, or see the FSF site: http://www.fsf.org.
21: */
22: package org.jbpm.security;
23:
24: import java.security.Permission;
25:
26: import org.jbpm.JbpmContext;
27:
28: /**
29: * provides helper methods to access the authentication and authorization
30: * services.
31: */
32: public abstract class SecurityHelper {
33:
34: /**
35: * helper method to look up the authenticated actorId in the current
36: * jbpm context.
37: */
38: public static String getAuthenticatedActorId() {
39: String actorId = null;
40: JbpmContext jbpmContext = JbpmContext.getCurrentJbpmContext();
41: if (jbpmContext != null) {
42: AuthenticationService authenticationService = jbpmContext
43: .getServices().getAuthenticationService();
44: if (authenticationService != null) {
45: actorId = authenticationService.getActorId();
46: }
47: }
48: return actorId;
49: }
50:
51: /**
52: * helper method to check the permissions of a jbpm secured operation.
53: */
54: public static void checkPermission(Permission permission) {
55: JbpmContext jbpmContext = JbpmContext.getCurrentJbpmContext();
56: if (jbpmContext != null) {
57: AuthorizationService authorizationService = jbpmContext
58: .getServices().getAuthorizationService();
59: if (authorizationService != null) {
60: authorizationService.checkPermission(permission);
61: }
62: }
63: }
64: }
|