FileDocCategorySizeDatePackage
ASSecurityRoleMapping.javaAPI DocGlassfish v2 API7928Fri May 04 22:35:18 BST 2007com.sun.enterprise.tools.verifier.tests.web.ias

ASSecurityRoleMapping

public class ASSecurityRoleMapping extends com.sun.enterprise.tools.verifier.tests.web.WebTest implements com.sun.enterprise.tools.verifier.tests.web.WebCheck

Fields Summary
Constructors Summary
Methods Summary
public Resultcheck(WebBundleDescriptor descriptor)


	Result result = getInitializedResult();
	WebComponentNameConstructor compName = new WebComponentNameConstructor(descriptor);
        SecurityRoleMapping[] secRoleMapp = descriptor.getIasWebApp().getSecurityRoleMapping();
        String roleName;
        String prinNames[];
        String grpNames[];
	boolean oneFailed = false;

        //System.out.println(">>>>>>>>>>>>> count of refs are "+ejbRefs.length);
	if (secRoleMapp !=null && secRoleMapp.length > 0) {
	    for (int rep=0; rep<secRoleMapp.length; rep++ ) {

                roleName=secRoleMapp[rep].getRoleName();
                prinNames=secRoleMapp[rep].getPrincipalName();
                grpNames=secRoleMapp[rep].getGroupName();

                if(validRoleName(roleName,descriptor)){

                  result.passed(smh.getLocalString
					  (getClass().getName() + ".passed",
					   "PASSED [AS-WEB security-role-mapping] role-name [ {0} ] properly defined in the war file.",
					   new Object[] {roleName}));

                  }else{

                  result.failed(smh.getLocalString
					   (getClass().getName() + ".failed",
					    "FAILED [AS-WEB security-role-mapping] role-name [ {0} ] is not valid, either empty or not defined in web.xml.",
					    new Object[] {roleName}));
                  oneFailed = true;

                  }

                if (prinNames !=null && prinNames.length > 0) {
                  String prinName;
                  for (int rep1=0; rep1<prinNames.length; rep1++ ) {
                      // <addition> srini@sun.com Bug : 4699658
                      //prinName = prinNames[rep1];
                      prinName = prinNames[rep1].trim();
                      // </addition>
                      if(prinName !=null && ! "".equals(prinName)){

                      result.passed(smh.getLocalString
					  (getClass().getName() + ".passed1",
					   "PASSED [AS-WEB security-role-mapping] principal-name [ {0} ] properly defined in the war file.",
					   new Object[] {prinName}));
                      }else{

                      result.failed(smh.getLocalString
					   (getClass().getName() + ".failed1",
					    "FAILED [AS-WEB security-role-mapping] principal-name [ {0} ] cannot be empty string.",
					    new Object[] {prinName}));
                      oneFailed = true;

                      }
                    }
                }

                if (grpNames !=null && grpNames.length > 0) {
                  String grpName;
                  for (int rep1=0; rep1<grpNames.length; rep1++ ) {
                      // <addition> srini@sun.com Bug : 4699658
                      //grpName =grpNames[rep1];
                      grpName =grpNames[rep1].trim();
                      // </addition>
                      if(grpName !=null && ! "".equals(grpName)){
                      result.passed(smh.getLocalString
					  (getClass().getName() + ".passed2",
					   "PASSED [AS-WEB security-role-mapping] group-name [ {0} ] properly defined in the war file.",
					   new Object[] {grpName}));

                      }else{

                      result.failed(smh.getLocalString
					   (getClass().getName() + ".failed2",
					    "FAILED [AS-WEB security-role-mapping] group-name [ {0} ] cannot be an empty string.",
					    new Object[] {grpName}));
                      oneFailed = true;

                      }
                    }
                }

	      }
         } else {
	    result.notApplicable(smh.getLocalString
				 (getClass().getName() + ".notApplicable",
				  "NOT APPLICABLE [AS-WEB sun-web-app] security-role-mapping element not defined in the web archive [ {0} ].",
				  new Object[] {descriptor.getName()}));
	    return result;
	}

	if (oneFailed){
		result.setStatus(Result.FAILED);
        } else {
                result.setStatus(Result.PASSED);
		result.passed
		    (smh.getLocalString
		     (getClass().getName() + ".passed3",
		      "PASSED [AS-WEB sun-web-app] security-role-mapping element(s) are valid within the web archive [ {0} ].",
                            new Object[] {descriptor.getName()} ));
        }
	return result;
    
booleanvalidRoleName(java.lang.String roleName, WebBundleDescriptor descriptor)

          boolean valid=false;
          if (roleName != null && roleName.length() != 0) {
              Enumeration roles = descriptor.getSecurityRoles();
                    // test the sec roles in this .war
                    while (roles!=null && roles.hasMoreElements()) {
                        SecurityRoleDescriptor roleDesc = (SecurityRoleDescriptor) roles.nextElement();
                        String thisRoleName = roleDesc.getName();
			if (roleName.equals(thisRoleName)) {
                            valid = true;
                            break;
                        }
                    }
                    // to-do vkv#
                    //## roles related to application also needs to be checked, although present application
                    //##descriptor dont have seperate sec roles data-structure, so leaving it for time

          }
          return valid;