[jboss-cvs] jboss-seam/examples/seamspace/resources/META-INF ...

[Shane Bryzak]

  User: sbryzak2
  Date: 07/03/09 05:43:54

  Modified:    examples/seamspace/resources/META-INF  security-rules.drl
  Log:
  JBSEAM-888
  
  Revision  Changes    Path
  1.14      +24 -31    jboss-seam/examples/seamspace/resources/META-INF/security-rules.drl
  
  (In the diff below, changes in quantity of whitespace are not shown.)
  
  Index: security-rules.drl
  ===================================================================
  RCS file: /cvsroot/jboss/jboss-seam/examples/seamspace/resources/META-INF/security-rules.drl,v
  retrieving revision 1.13
  retrieving revision 1.14
  diff -u -b -r1.13 -r1.14
  --- security-rules.drl	14 Feb 2007 07:17:10 -0000	1.13
  +++ security-rules.drl	9 Mar 2007 10:43:54 -0000	1.14
  @@ -24,80 +24,73 @@
     no-loop
     activation-group "permissions"
   when
  -  c: PermissionCheck(name == "memberImage", action == "view", granted == false)
  -  img: MemberImage()
  -  eval( img.getMember().getPicture() == img )
  +  check: PermissionCheck(name == "memberImage", action == "view", granted == false)
  +  image: MemberImage()
  +  eval( image.getMember().getPicture() == image )
   then
  -  c.grant();
  -  modify(c);
  +  check.grant();
   end;
   
   rule RestrictCommentPage
     no-loop
     activation-group "permissions"
   when
  -  c: PermissionCheck(name == "/comment.xhtml", action == "render", granted == false)
  +  check: PermissionCheck(name == "/comment.xhtml", action == "render", granted == false)
     Role(name == "user")
   then
  -  c.grant();
  -  modify(c);
  +  check.grant();
   end;
   
   rule CreateBlogComment
     no-loop
     activation-group "permissions"
   when
  -  c: PermissionCheck(name == "blog", action == "createComment", granted == false)
  +  check: PermissionCheck(name == "blog", action == "createComment", granted == false)
     Role(name == "user")
   then
  -  c.grant();
  -  modify(c);
  +  check.grant();
   end;
   
   rule CreateBlog
     no-loop
     activation-group "permissions"
   when
  -  c: PermissionCheck(name == "blog", action == "create", granted == false)
  -  Principal(nm : name)
  -  Member(username == nm)
  +  check: PermissionCheck(name == "blog", action == "create", granted == false)
  +  Principal(name : name)
  +  Member(username == name)
   then
  -  c.grant();
  -  modify(c);
  +  check.grant();
   end;
   
   rule InsertMemberBlog
     no-loop
     activation-group "permissions"  
   when
  -  c: PermissionCheck(name == "memberBlog", action == "insert", granted == false)
  -  Principal(nm : name)
  -  MemberBlog(mbr : member -> (mbr.getUsername().equals(nm)))
  +  check: PermissionCheck(name == "memberBlog", action == "insert", granted == false)
  +  Principal(name : name)
  +  MemberBlog(member : member -> (member.getUsername().equals(name)))
   then
  -  c.grant();
  -  modify(c);
  +  check.grant();
   end;
   
   rule CreateFriendComment
     no-loop
     activation-group "permissions"
   when
  -  c: PermissionCheck(name == "friendComment", action == "create", granted == false)
  -  Principal(nm : name)
  -  MemberFriend(authorized == true, f : friend -> (f.getUsername().equals(nm)))
  +  check: PermissionCheck(name == "friendComment", action == "create", granted == false)
  +  Principal(name : name)
  +  MemberFriend(authorized == true, f : friend -> (f.getUsername().equals(name)))
   then
  -  c.grant();
  -  modify(c);
  +  check.grant();
   end;
   
   rule CreateFriendRequest
     no-loop
     activation-group "permissions"
   when
  -  c: PermissionCheck(name == "friendRequest", action == "create", granted == false)
  -  Principal(nm : name)
  -  not MemberFriend(f : friend -> (f.getUsername().equals(nm)))
  +  check: PermissionCheck(name == "friendRequest", action == "create", granted == false)
  +  Principal(name : name)
  +  not MemberFriend(f : friend -> (f.getUsername().equals(name)))
   then
  -  c.grant();
  -  modify(c);
  +  check.grant();
   end;