pcvolkmer/onkostar-plugin-dnpm
1
0
Fork 0
mirror of https://github.com/pcvolkmer/onkostar-plugin-dnpm.git synced 2025-07-05 02:22:54 +00:00
Code Issues Activity

refactor: use package name following Java guidelines

Browse Source
This commit is contained in:
Paul-Christian Volkmer
2024-09-21 22:10:24 +02:00
parent 93215825f5
commit cc27edc544
93 changed files with 199 additions and 200 deletions
Download Patch File Download Diff File Expand all files Collapse all files

74
src/main/java/dev/dnpm/security/PersonPoolBasedSecurityAspects.java Normal file
View File

@ -0,0 +1,74 @@
package dev.dnpm.security;
import de.itc.onkostar.api.Patient;
import de.itc.onkostar.api.Procedure;
import org.aspectj.lang.JoinPoint;
import org.aspectj.lang.annotation.AfterReturning;
import org.aspectj.lang.annotation.Aspect;
import org.aspectj.lang.annotation.Before;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;
import org.springframework.security.core.context.SecurityContextHolder;
import org.springframework.stereotype.Component;
import java.util.Arrays;
@Component
@Aspect
public class PersonPoolBasedSecurityAspects {
private final Logger logger = LoggerFactory.getLogger(this.getClass());
private final PersonPoolBasedPermissionEvaluator permissionEvaluator;
public PersonPoolBasedSecurityAspects(PersonPoolBasedPermissionEvaluator permissionEvaluator) {
this.permissionEvaluator = permissionEvaluator;
}
@AfterReturning(value = "@annotation(dev.dnpm.security.PersonPoolSecuredResult) ", returning = "patient")
public void afterPatient(Patient patient) {
if (
null != patient
&& ! permissionEvaluator.hasPermission(SecurityContextHolder.getContext().getAuthentication(), patient, PermissionType.READ_WRITE)
) {
logger.warn("Rückgabe von Patient blockiert: {}", patient.getId());
throw new IllegalSecuredObjectAccessException();
}
}
@AfterReturning(value = "@annotation(dev.dnpm.security.PersonPoolSecuredResult)", returning = "procedure")
public void afterProcedure(Procedure procedure) {
if (
null != procedure
&& ! permissionEvaluator.hasPermission(SecurityContextHolder.getContext().getAuthentication(), procedure, PermissionType.READ_WRITE)
) {
logger.warn("Rückgabe von Prozedur blockiert: {}", procedure.getId());
throw new IllegalSecuredObjectAccessException();
}
}
@Before(value = "@annotation(dev.dnpm.security.PersonPoolSecured)")
public void beforePatient(JoinPoint jp) {
Arrays.stream(jp.getArgs())
.filter(arg -> arg instanceof Patient)
.forEach(patient -> {
if (! permissionEvaluator.hasPermission(SecurityContextHolder.getContext().getAuthentication(), patient, PermissionType.READ_WRITE)) {
logger.warn("Zugriff auf Patient blockiert: {}", ((Patient)patient).getId());
throw new IllegalSecuredObjectAccessException();
}
});
}
@Before(value = "@annotation(dev.dnpm.security.PersonPoolSecured)")
public void beforeProcedure(JoinPoint jp) {
Arrays.stream(jp.getArgs())
.filter(arg -> arg instanceof Procedure)
.forEach(procedure -> {
if (! permissionEvaluator.hasPermission(SecurityContextHolder.getContext().getAuthentication(), procedure, PermissionType.READ_WRITE)) {
logger.warn("Zugriff auf Prozedur blockiert: {}", ((Procedure)procedure).getId());
throw new IllegalSecuredObjectAccessException();
}
});
}
}