/** * Copyright (c) 2000-present Liferay, Inc. All rights reserved. * * This library is free software; you can redistribute it and/or modify it under * the terms of the GNU Lesser General Public License as published by the Free * Software Foundation; either version 2.1 of the License, or (at your option) * any later version. * * This library is distributed in the hope that it will be useful, but WITHOUT * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS * FOR A PARTICULAR PURPOSE. See the GNU Lesser General Public License for more * details. */ package com.liferay.sync.web.internal.portlet; import com.liferay.portal.kernel.security.auth.PrincipalException; import com.liferay.portal.kernel.theme.ThemeDisplay; import com.liferay.portal.kernel.util.ParamUtil; import com.liferay.portal.kernel.util.WebKeys; import com.liferay.sync.constants.SyncPortletKeys; import com.liferay.sync.model.SyncDevice; import javax.portlet.ActionRequest; import javax.portlet.ActionResponse; import javax.portlet.Portlet; import org.osgi.service.component.annotations.Component; /** * @author Jonathan McCann */ @Component( immediate = true, property = { "com.liferay.portlet.add-default-resource=true", "com.liferay.portlet.css-class-wrapper=portlet-sync-devices", "com.liferay.portlet.display-category=category.hidden", "com.liferay.portlet.preferences-owned-by-group=true", "com.liferay.portlet.private-request-attributes=false", "com.liferay.portlet.private-session-attributes=false", "com.liferay.portlet.render-weight=50", "com.liferay.portlet.use-default-template=true", "javax.portlet.display-name=My Sync Devices", "javax.portlet.expiration-cache=0", "javax.portlet.init-param.template-path=/", "javax.portlet.init-param.view-template=/devices.jsp", "javax.portlet.name=" + SyncPortletKeys.SYNC_DEVICES_PORTLET, "javax.portlet.resource-bundle=content.Language", "javax.portlet.security-role-ref=power-user,user", "javax.portlet.supports.mime-type=text/html" }, service = Portlet.class ) public class SyncDevicesPortlet extends BaseSyncPortlet { @Override public void deleteDevice( ActionRequest actionRequest, ActionResponse actionResponse) throws Exception { ThemeDisplay themeDisplay = (ThemeDisplay)actionRequest.getAttribute( WebKeys.THEME_DISPLAY); long syncDeviceId = ParamUtil.getLong(actionRequest, "syncDeviceId"); checkSyncDevice(syncDeviceId, themeDisplay.getUserId()); super.deleteDevice(actionRequest, actionResponse); } @Override public void updateDevice( ActionRequest actionRequest, ActionResponse actionResponse) throws Exception { ThemeDisplay themeDisplay = (ThemeDisplay)actionRequest.getAttribute( WebKeys.THEME_DISPLAY); long syncDeviceId = ParamUtil.getLong(actionRequest, "syncDeviceId"); checkSyncDevice(syncDeviceId, themeDisplay.getUserId()); super.updateDevice(actionRequest, actionResponse); } protected void checkSyncDevice(long syncDeviceId, long userId) throws Exception { SyncDevice syncDevice = syncDeviceLocalService.getSyncDevice( syncDeviceId); if (userId != syncDevice.getUserId()) { throw new PrincipalException(); } } }