/** * RoleManager.java * Author: Francesco Rosso (rosso@eurix.it) * * This file is part of PrestoPRIME Preservation Platform (P4). * * Copyright (C) 2009-2012 EURIX Srl, Torino, Italy * * This program is free software: you can redistribute it and/or modify * it under the terms of the GNU General Public License as published by * the Free Software Foundation, either version 3 of the License, or * (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program. If not, see <http://www.gnu.org/licenses/>. */ package eu.prestoprime.p4gui.services.auth; import java.io.IOException; import javax.servlet.http.HttpServletResponse; import org.apache.log4j.Logger; public abstract class RoleManager { public static Logger logger = Logger.getLogger(RoleManager.class); public static enum USER_ROLE { guest(0), consumer(1), producer(2), admin(3), superadmin(4); private int level; private USER_ROLE(int level) { this.level = level; } public int getLevel() { return level; } }; public static void checkRequestedRole(USER_ROLE requestedRole, USER_ROLE userRole, HttpServletResponse response) { if (requestedRole.getLevel() > userRole.getLevel()) { response.reset(); try { response.sendError(HttpServletResponse.SC_UNAUTHORIZED); } catch (IOException e) { try { response.sendRedirect("index.jsp"); } catch (IOException e1) { response.setStatus(HttpServletResponse.SC_UNAUTHORIZED); } } } } }