/* * Hibernate, Relational Persistence for Idiomatic Java * * Copyright (c) 2008, Red Hat Middleware LLC or third-party contributors as * indicated by the @author tags or express copyright attribution * statements applied by the authors. All third-party contributions are * distributed under license by Red Hat Middleware LLC. * * This copyrighted material is made available to anyone wishing to use, modify, * copy, or redistribute it subject to the terms and conditions of the GNU * Lesser General Public License, as published by the Free Software Foundation. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY * or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Lesser General Public License * for more details. * * You should have received a copy of the GNU Lesser General Public License * along with this distribution; if not, write to: * Free Software Foundation, Inc. * 51 Franklin Street, Fifth Floor * Boston, MA 02110-1301 USA * */ package org.hibernate.secure; import javax.security.jacc.EJBMethodPermission; import org.hibernate.cfg.Configuration; import org.hibernate.cfg.Environment; import org.hibernate.event.Initializable; import org.hibernate.event.PreLoadEvent; import org.hibernate.event.PreLoadEventListener; /** * Check security before any load * * @author <a href="mailto:kabir.khan@jboss.org">Kabir Khan</a> * @version $Revision: 8702 $ */ public class JACCPreLoadEventListener implements PreLoadEventListener, Initializable, JACCSecurityListener { private String contextID; public void onPreLoad(PreLoadEvent event) { EJBMethodPermission loadPermission = new EJBMethodPermission( event.getPersister().getEntityName(), HibernatePermission.READ, null, null ); JACCPermissions.checkPermission( event.getEntity().getClass(), contextID, loadPermission ); } public void initialize(Configuration cfg){ contextID = cfg.getProperty(Environment.JACC_CONTEXTID); } }