1. Project Clover database Sat Feb 2 2019 06:45:20 CET
  2. Package org.xwiki.rendering.internal.macro.velocity

File VelocityMacroPermissionPolicy.java

 

Coverage histogram

../../../../../../img/srcFileCovDistChart10.png
0% of files have more coverage

Code metrics

0
1
1
1
51
19
1
1
1
1
1

Classes

Class Line # Actions
VelocityMacroPermissionPolicy 44 1 0% 1 0
1.0100%
 

Contributing tests

This file is covered by 22 tests. .

Source view

1    /*
2    * See the NOTICE file distributed with this work for additional
3    * information regarding copyright ownership.
4    *
5    * This is free software; you can redistribute it and/or modify it
6    * under the terms of the GNU Lesser General Public License as
7    * published by the Free Software Foundation; either version 2.1 of
8    * the License, or (at your option) any later version.
9    *
10    * This software is distributed in the hope that it will be useful,
11    * but WITHOUT ANY WARRANTY; without even the implied warranty of
12    * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
13    * Lesser General Public License for more details.
14    *
15    * You should have received a copy of the GNU Lesser General Public
16    * License along with this software; if not, write to the Free
17    * Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA
18    * 02110-1301 USA, or see the FSF site: http://www.fsf.org.
19    */
20    package org.xwiki.rendering.internal.macro.velocity;
21   
22    import javax.inject.Named;
23    import javax.inject.Singleton;
24   
25    import org.xwiki.component.annotation.Component;
26    import org.xwiki.rendering.macro.script.AbstractScriptMacroPermissionPolicy;
27    import org.xwiki.rendering.macro.script.ScriptMacroParameters;
28    import org.xwiki.rendering.transformation.MacroTransformationContext;
29    import org.xwiki.security.authorization.Right;
30   
31    /**
32    * Decide if velocity script execution is allowed. Allow execution if one of the following conditions is met:
33    * <ul>
34    * <li>if the macro transformation context is <strong>not</strong> restricted</li>
35    * <li>if the current document has script rights</li>
36    * </ul>
37    *
38    * @version $Id: 0583b871566f7000fc5967b4e9845f0b2a1e8e10 $
39    * @since 4.2M1
40    */
41    @Component
42    @Named("velocity")
43    @Singleton
 
44    public class VelocityMacroPermissionPolicy extends AbstractScriptMacroPermissionPolicy
45    {
 
46  262477 toggle @Override
47    public boolean hasPermission(ScriptMacroParameters parameters, MacroTransformationContext context)
48    {
49  262625 return !context.getTransformationContext().isRestricted() && getAuthorizationManager().hasAccess(Right.SCRIPT);
50    }
51    }