As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.
public void updateUser(String userName, char[] rawPassword) throws AuthenticationException { NodeRef userRef = getUserOrNull(userName); if (userRef == null) { throw new AuthenticationException("User name does not exist: " + userName); } Map<QName, Serializable> properties = nodeService.getProperties(userRef); String salt = null; // GUID.generate(); properties.remove(ContentModel.PROP_SALT); properties.put(ContentModel.PROP_SALT, salt); properties.remove(ContentModel.PROP_PASSWORD); properties.put(ContentModel.PROP_PASSWORD, passwordEncoder.encodePassword(new String(rawPassword), salt)); nodeService.setProperties(userRef, properties); } public NodeRef getUserOrNull(String searchUserName) { if (searchUserName == null || searchUserName.length() == 0) { return null; } SearchParameters sp = new SearchParameters(); sp.setLanguage(SearchService.LANGUAGE_LUCENE); sp.setQuery("@usr\\:username:\"" + StringUtils.delete(searchUserName, "\"") + "\""); try { sp.addStore(tenantService.getName(searchUserName, STOREREF_USERS)); } catch (AlfrescoRuntimeException e) { return null; // no such tenant or tenant not enabled } sp.excludeDataInTheCurrentTransaction(false); ResultSet rs = null; try { rs = searchService.query(sp); NodeRef returnRef = null; for (ResultSetRow row : rs) { final NodeRef nodeRef = row.getNodeRef(); if (nodeService.exists(nodeRef)) { String realUserName = DefaultTypeConverter.INSTANCE.convert(String.class, nodeService.getProperty(nodeRef, ContentModel.PROP_USER_USERNAME)); if(userNameMatcher.matches(realUserName, searchUserName)) { if (returnRef == null) { returnRef = nodeRef; } else { try { this.retryingTransactionHelper.doInTransaction(new RetryingTransactionHelper.RetryingTransactionCallback<Object>() { public Object execute() throws Throwable { // Delete the extra user node references RepositoryAuthenticationDao.this.nodeService.deleteNode(nodeRef); return null; } }, false, true); } catch (InvalidNodeRefException exception) { // Ignore this exception as the node has already been deleted } } } } } return returnRef; } finally { if (rs != null) { rs.close(); } } }
public void process(NodeDescription person) throws Throwable { PropertyMap personProperties = person.getProperties(); String personName = (String) personProperties.get(ContentModel.PROP_USERNAME); Set<String> zones = ChainingUserRegistrySynchronizer.this.authorityService .getAuthorityZones(personName); if (zones == null) { // The person did not exist at all if (ChainingUserRegistrySynchronizer.logger.isDebugEnabled()) { ChainingUserRegistrySynchronizer.logger.debug("Creating user '" + personName + "'"); } ChainingUserRegistrySynchronizer.this.personService.createPerson(personProperties, zoneSet); } else if (zones.contains(zoneId)) { // The person already existed in this zone: update the person if (ChainingUserRegistrySynchronizer.logger.isDebugEnabled()) { ChainingUserRegistrySynchronizer.logger.debug("Updating user '" + personName + "'"); } ChainingUserRegistrySynchronizer.this.personService.setPersonProperties(personName, personProperties, false); } else { // Check whether the user is in any of the authentication chain zones Set<String> intersection = new TreeSet<String>(zones); intersection.retainAll(allZoneIds); if (intersection.size() == 0) { // The person exists, but not in a zone that's in the authentication chain. May be due // to upgrade or zone changes. Let's re-zone them if (ChainingUserRegistrySynchronizer.logger.isWarnEnabled()) { ChainingUserRegistrySynchronizer.logger.warn("Updating user '" + personName + "'. This user will in future be assumed to originate from user registry '" + zone + "'."); } ChainingUserRegistrySynchronizer.this.authorityService.removeAuthorityFromZones(personName, zones); ChainingUserRegistrySynchronizer.this.authorityService.addAuthorityToZones(personName, zoneSet); ChainingUserRegistrySynchronizer.this.personService.setPersonProperties(personName, personProperties); } else { // Check whether the user is in any of the higher priority authentication chain zones intersection.retainAll(visitedZoneIds); if (intersection.size() > 0) { // A person that exists in a different zone with higher precedence - ignore return; } // The person existed, but in a zone with lower precedence if (ChainingUserRegistrySynchronizer.logger.isWarnEnabled()) { ChainingUserRegistrySynchronizer.logger .warn("Recreating occluded user '" + personName + "'. This user was previously created through synchronization with a lower priority user registry."); } ChainingUserRegistrySynchronizer.this.personService.deletePerson(personName); ChainingUserRegistrySynchronizer.this.personService.createPerson(personProperties, zoneSet); } } // Maintain associations Set<String> parents = groupAssocsToCreate.get(personName); if (parents != null && !parents.isEmpty()) { if (ChainingUserRegistrySynchronizer.logger.isDebugEnabled()) { for (String groupName : parents) { ChainingUserRegistrySynchronizer.logger.debug("Adding '" + ChainingUserRegistrySynchronizer.this.authorityService.getShortName(personName) + "' to group '" + ChainingUserRegistrySynchronizer.this.authorityService.getShortName(groupName) + "'"); } } ChainingUserRegistrySynchronizer.this.authorityService.addAuthority(parents, personName); } Set<String> parentsToDelete = groupAssocsToDelete.get(personName); if (parentsToDelete != null && !parentsToDelete.isEmpty()) { for (String parent : parentsToDelete) { if (ChainingUserRegistrySynchronizer.logger.isDebugEnabled()) { ChainingUserRegistrySynchronizer.logger .debug("Removing '" + ChainingUserRegistrySynchronizer.this.authorityService .getShortName(personName) + "' from group '" + ChainingUserRegistrySynchronizer.this.authorityService .getShortName(parent) + "'"); } ChainingUserRegistrySynchronizer.this.authorityService.removeAuthority(parent, personName); } } synchronized (this) { // Maintain the last modified date Date personLastModified = person.getLastModified(); if (personLastModified != null) { this.latestTime = Math.max(this.latestTime, personLastModified.getTime()); } } } }
