/* 
    P/P   *  Method: net.sourceforge.pebble.web.action.AbstractFileAction__static_init
          */
     1  /*
     2   * Copyright (c) 2003-2006, Simon Brown
     3   * All rights reserved.
     4   *
     5   * Redistribution and use in source and binary forms, with or without
     6   * modification, are permitted provided that the following conditions are met:
     7   *
     8   *   - Redistributions of source code must retain the above copyright
     9   *     notice, this list of conditions and the following disclaimer.
    10   *
    11   *   - Redistributions in binary form must reproduce the above copyright
    12   *     notice, this list of conditions and the following disclaimer in
    13   *     the documentation and/or other materials provided with the
    14   *     distribution.
    15   *
    16   *   - Neither the name of Pebble nor the names of its contributors may
    17   *     be used to endorse or promote products derived from this software
    18   *     without specific prior written permission.
    19   *
    20   * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
    21   * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
    22   * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
    23   * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE
    24   * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
    25   * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
    26   * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
    27   * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
    28   * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
    29   * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
    30   * POSSIBILITY OF SUCH DAMAGE.
    31   */
    32  package net.sourceforge.pebble.web.action;
    33  
    34  import net.sourceforge.pebble.Constants;
    35  import net.sourceforge.pebble.domain.FileMetaData;
    36  
         /* 
    P/P   *  Method: void net.sourceforge.pebble.web.action.AbstractFileAction()
          */
    37  import javax.servlet.http.HttpServletRequest;
    38  
    39  /**
    40   * Superclass for file manipulation actions.
    41   *
    42   * @author    Simon Brown
    43   */
    44  public abstract class AbstractFileAction extends SecureAction {
    45  
    46    /**
    47     * Gets a list of all roles that are allowed to access this action.
    48     *
    49     * @return  an array of Strings representing role names
    50     * @param request
    51     */
    52    public String[] getRoles(HttpServletRequest request) {
             /* 
    P/P       *  Method: String[] getRoles(HttpServletRequest)
              * 
              *  Preconditions:
              *    request != null
              * 
              *  Presumptions:
              *    init'ed(net.sourceforge.pebble.Constants.BLOG_ADMIN_ROLE)
              *    init'ed(net.sourceforge.pebble.Constants.BLOG_CONTRIBUTOR_ROLE)
              *    init'ed(net.sourceforge.pebble.Constants.BLOG_OWNER_ROLE)
              * 
              *  Postconditions:
              *    return_value in Addr_Set{&new String[](getRoles#1),&new String[](getRoles#2),&new String[](getRoles#3),&new String[](getRoles#4),&new String[](getRoles#5)}
              *    new String[](getRoles#1) num objects <= 1
              *    new String[](getRoles#1).length == 1
              *    new String[](getRoles#1)[0] == net.sourceforge.pebble.Constants.BLOG_CONTRIBUTOR_ROLE
              *    (soft) init'ed(new String[](getRoles#1)[0])
              *    new String[](getRoles#2) num objects <= 1
              *    new String[](getRoles#2).length == 1
              *    new String[](getRoles#2)[0] == net.sourceforge.pebble.Constants.BLOG_CONTRIBUTOR_ROLE
              *    (soft) init'ed(new String[](getRoles#2)[0])
              *    new String[](getRoles#3) num objects <= 1
              *    ...
              * 
              *  Test Vectors:
              *    java.lang.String:equals(...)@57: {0}, {1}
              *    java.lang.String:equals(...)@59: {0}, {1}
              *    java.lang.String:equals(...)@61: {0}, {1}
              *    java.lang.String:equals(...)@63: {0}, {1}
              *    javax.servlet.http.HttpServletRequest:getParameter(...)@53: Addr_Set{null}, Inverse{null}
              */
    53      String type = request.getParameter("type");
    54  
    55      // the roles permitted to access this action depend on the
    56      // type of file that is being manipulated (viewed, edited, etc)
    57      if (type != null && type.equals(FileMetaData.BLOG_IMAGE)) {
    58        return new String[]{Constants.BLOG_CONTRIBUTOR_ROLE};
    59      } else if (type != null && type.equals(FileMetaData.BLOG_FILE)) {
    60        return new String[]{Constants.BLOG_CONTRIBUTOR_ROLE};
    61      } else if (type != null && type.equals(FileMetaData.THEME_FILE)) {
    62        return new String[]{Constants.BLOG_ADMIN_ROLE, Constants.BLOG_OWNER_ROLE};
    63      } else if (type != null && type.equals(FileMetaData.BLOG_DATA)) {
    64        return new String[]{Constants.BLOG_ADMIN_ROLE, Constants.BLOG_OWNER_ROLE};
    65      } else {
    66        return new String[]{};
    67      }
    68    }
    69  
    70  }