File D:\maven-qcr-plugin-testsunitaires\qcr4java\jenkins-master\target\site\qc\core\src\main\java\hudson\security\AccessDeniedHandlerImpl.java.html

1 /*
2 * The MIT License
3 *
4 * Copyright (c) 2004-2009, Sun Microsystems, Inc., Kohsuke Kawaguchi
5 *
6 * Permission is hereby granted, free of charge, to any person obtaining a copy
7 * of this software and associated documentation files (the "Software"), to deal
8 * in the Software without restriction, including without limitation the rights
9 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
10 * copies of the Software, and to permit persons to whom the Software is
11 * furnished to do so, subject to the following conditions:
12 *
13 * The above copyright notice and this permission notice shall be included in
14 * all copies or substantial portions of the Software.
15 *
16 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
17 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
18 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
19 * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
20 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
21 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
22 * THE SOFTWARE.
23 */
24 package hudson.security;
25
26 import jenkins.model.Jenkins;
27 import org.acegisecurity.AccessDeniedException;
28 import org.acegisecurity.ui.AccessDeniedHandler;
29 import org.kohsuke.stapler.Stapler;
30
31 import javax.servlet.ServletException;
32 import javax.servlet.ServletRequest;
33 import javax.servlet.ServletResponse;
34 import javax.servlet.ServletConfig;
35 import javax.servlet.ServletContext;
36 import javax.servlet.http.HttpServletRequest;
37 import javax.servlet.http.HttpServletResponse;
38 import java.io.IOException;
39 import java.util.Enumeration;
40 import java.util.Vector;
41
42 /**
43 * Handles {@link AccessDeniedException} happened during request processing.
44 * Specifically, send 403 error code and the login page.
45 *
46 * @author Kohsuke Kawaguchi
47 */
48 public class AccessDeniedHandlerImpl implements AccessDeniedHandler {
49 public void handle(ServletRequest request, ServletResponse response, AccessDeniedException accessDeniedException) throws IOException, ServletException {
50 HttpServletRequest req = (HttpServletRequest) request;
51 HttpServletResponse rsp = (HttpServletResponse) response;
52
53 rsp.setStatus(HttpServletResponse.SC_FORBIDDEN);
54 req.setAttribute("exception",accessDeniedException);
55 Stapler stapler = new Stapler();
56 stapler.init(new ServletConfig() {
57 public String getServletName() {
58 return "Stapler";
59 }
60
61 public ServletContext getServletContext() {
62 return Jenkins.getInstance().servletContext;
63 }
64
65 public String getInitParameter(String name) {
66 return null;
67 }
68
69 public Enumeration getInitParameterNames() {
70 return new Vector().elements();
71 }
72 });
73
74 stapler.invoke(req,rsp, Jenkins.getInstance(),"/accessDenied");
75 }
76 }
77