001/*
002 * (C) Copyright 2006-2008 Nuxeo SAS (http://nuxeo.com/) and contributors.
003 *
004 * All rights reserved. This program and the accompanying materials
005 * are made available under the terms of the GNU Lesser General Public License
006 * (LGPL) version 2.1 which accompanies this distribution, and is available at
007 * http://www.gnu.org/licenses/lgpl.html
008 *
009 * This library is distributed in the hope that it will be useful,
010 * but WITHOUT ANY WARRANTY; without even the implied warranty of
011 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
012 * Lesser General Public License for more details.
013 *
014 * Contributors:
015 *     bstefanescu
016 *
017 * $Id$
018 */
019
020package org.nuxeo.ecm.webengine.security.guards;
021
022import org.nuxeo.common.xmap.annotation.XContent;
023import org.nuxeo.common.xmap.annotation.XObject;
024import org.nuxeo.ecm.core.api.CoreSession;
025import org.nuxeo.ecm.core.api.DocumentModel;
026import org.nuxeo.ecm.webengine.security.Guard;
027import org.nuxeo.runtime.model.Adaptable;
028
029/**
030 * Check access against a built-in permission
031 *
032 * @author <a href="mailto:bs@nuxeo.com">Bogdan Stefanescu</a>
033 */
034@XObject("permission")
035public class PermissionGuard implements Guard {
036
037    @XContent
038    protected String perm;
039
040    protected PermissionGuard() {
041    }
042
043    public PermissionGuard(String perm) {
044        this.perm = perm;
045    }
046
047    public boolean check(Adaptable context) {
048        CoreSession session = context.getAdapter(CoreSession.class);
049        DocumentModel doc = context.getAdapter(DocumentModel.class);
050        return session.hasPermission(doc.getRef(), perm);
051    }
052
053    @Override
054    public String toString() {
055        return "PERM[" + perm + "]";
056    }
057
058}