From 41cffba4298d61383d0dd99857429960a4ca3d44 Mon Sep 17 00:00:00 2001 From: James Moger <james.moger@gitblit.com> Date: Fri, 04 Nov 2011 23:00:19 -0400 Subject: [PATCH] Refinements to search dialog and null checks in cell renderers --- src/com/gitblit/wicket/AuthorizationStrategy.java | 36 ++++++++++++++++++++---------------- 1 files changed, 20 insertions(+), 16 deletions(-) diff --git a/src/com/gitblit/wicket/AuthorizationStrategy.java b/src/com/gitblit/wicket/AuthorizationStrategy.java index 892153e..452215a 100644 --- a/src/com/gitblit/wicket/AuthorizationStrategy.java +++ b/src/com/gitblit/wicket/AuthorizationStrategy.java @@ -22,10 +22,12 @@ import com.gitblit.GitBlit; import com.gitblit.Keys; -import com.gitblit.wicket.models.UserModel; +import com.gitblit.models.UserModel; +import com.gitblit.wicket.pages.BasePage; import com.gitblit.wicket.pages.RepositoriesPage; -public class AuthorizationStrategy extends AbstractPageAuthorizationStrategy implements IUnauthorizedComponentInstantiationListener { +public class AuthorizationStrategy extends AbstractPageAuthorizationStrategy implements + IUnauthorizedComponentInstantiationListener { public AuthorizationStrategy() { } @@ -33,25 +35,31 @@ @SuppressWarnings({ "unchecked", "rawtypes" }) @Override protected boolean isPageAuthorized(Class pageClass) { + if (RepositoriesPage.class.equals(pageClass)) { + // allow all requests to get to the RepositoriesPage with its inline + // authentication form + return true; + } + if (BasePage.class.isAssignableFrom(pageClass)) { - boolean authenticateView = GitBlit.self().settings().getBoolean(Keys.web.authenticateViewPages, true); - boolean authenticateAdmin = GitBlit.self().settings().getBoolean(Keys.web.authenticateAdminPages, true); - boolean allowAdmin = GitBlit.self().settings().getBoolean(Keys.web.allowAdministration, true); - - GitBlitWebSession session = GitBlitWebSession.get(); + boolean authenticateView = GitBlit.getBoolean(Keys.web.authenticateViewPages, true); + boolean authenticateAdmin = GitBlit.getBoolean(Keys.web.authenticateAdminPages, true); + boolean allowAdmin = GitBlit.getBoolean(Keys.web.allowAdministration, true); + + GitBlitWebSession session = GitBlitWebSession.get(); if (authenticateView && !session.isLoggedIn()) { // authentication required return false; } - + UserModel user = session.getUser(); - if (pageClass.isAnnotationPresent(AdminPage.class)) { + if (pageClass.isAnnotationPresent(RequiresAdminRole.class)) { // admin page if (allowAdmin) { if (authenticateAdmin) { // authenticate admin if (user != null) { - return user.canAdmin(); + return user.canAdmin; } return false; } else { @@ -59,7 +67,7 @@ return true; } } else { - //admin prohibited + // admin prohibited return false; } } @@ -70,11 +78,7 @@ @Override public void onUnauthorizedInstantiation(Component component) { if (component instanceof BasePage) { - GitBlitWebSession session = GitBlitWebSession.get(); - if (!session.isLoggedIn()) - throw new RestartResponseAtInterceptPageException(LoginPage.class); - else - throw new RestartResponseAtInterceptPageException(RepositoriesPage.class); + throw new RestartResponseAtInterceptPageException(RepositoriesPage.class); } } } -- Gitblit v1.9.1