resource-registry/src/main/java/org/gcube/informationsystem/resourceregistry/contexts/security/QueryTemplatesSecurityContext.java

package org.gcube.informationsystem.resourceregistry.contexts.security;

import java.util.UUID;

import org.gcube.informationsystem.resourceregistry.api.exceptions.ResourceRegistryException;
import org.gcube.informationsystem.resourceregistry.contexts.ContextUtility;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;

/**
 * @author Luca Frosini (ISTI - CNR)
 */
public class QueryTemplatesSecurityContext extends SecurityContext {
	
	private static Logger logger = LoggerFactory.getLogger(SecurityContext.class);
	
	private static final String QUERY_TEMPLATES_SECURITY_CONTEXT;
	private static final UUID QUERY_TEMPLATES_SECURITY_CONTEXT_UUID;
	
	static {
		QUERY_TEMPLATES_SECURITY_CONTEXT = "dddddddd-dddd-dddd-dddd-dddddddddddd";
		QUERY_TEMPLATES_SECURITY_CONTEXT_UUID = UUID.fromString(QUERY_TEMPLATES_SECURITY_CONTEXT);
	}
	
	private static QueryTemplatesSecurityContext instance;
	
	public static QueryTemplatesSecurityContext getInstance() throws ResourceRegistryException {
		if(instance==null) {
			instance = new QueryTemplatesSecurityContext();
			ContextUtility contextUtility = ContextUtility.getInstance();
			contextUtility.addSecurityContext(QUERY_TEMPLATES_SECURITY_CONTEXT, instance);
		}
		return instance;
	}
	
	private QueryTemplatesSecurityContext() throws ResourceRegistryException {
		super(QUERY_TEMPLATES_SECURITY_CONTEXT_UUID, false);
	}
	
	@Override
	protected Role addExtraRules(Role role, PermissionMode permissionMode) {
		logger.trace("Adding extra rules for {}", role.getName());
		switch(permissionMode) {
			case WRITER:
				role.addRule(Rule.ResourceGeneric.CLUSTER, null, Role.PERMISSION_ALL);
				role.addRule(Rule.ResourceGeneric.SYSTEM_CLUSTERS, null, Role.PERMISSION_ALL);
				role.addRule(Rule.ResourceGeneric.CLASS, null, Role.PERMISSION_ALL);
				break;
			
			case READER:
				role.addRule(Rule.ResourceGeneric.CLUSTER, null, Role.PERMISSION_READ);
				role.addRule(Rule.ResourceGeneric.SYSTEM_CLUSTERS, null, Role.PERMISSION_READ);
				role.addRule(Rule.ResourceGeneric.CLASS, null, Role.PERMISSION_READ);
				break;
			
			default:
				break;
		}
		return role;
	}
	
}