01: /*
02: * This file is part of DrFTPD, Distributed FTP Daemon.
03: *
04: * DrFTPD is free software; you can redistribute it and/or modify
05: * it under the terms of the GNU General Public License as published by
06: * the Free Software Foundation; either version 2 of the License, or
07: * (at your option) any later version.
08: *
09: * DrFTPD is distributed in the hope that it will be useful,
10: * but WITHOUT ANY WARRANTY; without even the implied warranty of
11: * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12: * GNU General Public License for more details.
13: *
14: * You should have received a copy of the GNU General Public License
15: * along with DrFTPD; if not, write to the Free Software
16: * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
17: */
18: package org.drftpd.permissions;
19:
20: import org.drftpd.usermanager.Entity;
21: import java.util.Collection;
22: import java.util.Iterator;
23:
24: /**
25: * @author mog
26: * @version $Id: Permission.java 1513 2006-10-13 22:41:08Z tdsoul $
27: */
28: public class Permission {
29: private Collection<String> _users;
30: private boolean _invert = false;
31:
32: public Permission(Collection<String> users) {
33: _users = users;
34: }
35:
36: public Permission(Collection<String> users, boolean invert) {
37: this (users);
38: _invert = invert;
39: }
40:
41: public boolean check(Entity user) {
42: boolean allow = false;
43:
44: for (Iterator<String> iter = _users.iterator(); iter.hasNext();) {
45: String aclUser = (String) iter.next();
46: allow = true;
47:
48: if (aclUser.charAt(0) == '!') {
49: allow = false;
50: aclUser = aclUser.substring(1);
51: }
52:
53: if (aclUser.equals("*")) {
54: return allow;
55: } else if (aclUser.charAt(0) == '-') {
56: //USER
57: if (aclUser.substring(1).equals(user.getName())) {
58: return allow;
59: }
60:
61: continue;
62: } else if (aclUser.charAt(0) == '=') {
63: //GROUP
64: if (user.isMemberOf(aclUser.substring(1))) {
65: return allow;
66: }
67: } else {
68: //FLAG, we don't have flags, we have groups and that's the same but multiple letters
69: if (user.isMemberOf(aclUser)) {
70: return allow;
71: }
72: }
73: }
74:
75: // didn't match..
76: return _invert ? (!allow) : false;
77: }
78: }
|