mirror of
https://github.com/google/nomulus.git
synced 2025-05-02 13:07:50 +02:00
5b444d93fb
RDAP filters some contact data when the request is not authenticated as coming from a user associated with the registrar owning the contact. This CL adds an exception for admin users, which for the App Engine Users API are defined as App Engine project viewers. This means that the registry team will always get all information when logged in. This will also be useful when building tools that use RDAP output. ------------- Created by MOE: https://github.com/google/moe MOE_MIGRATED_REVID=168293820
62 lines
1.9 KiB
Java
62 lines
1.9 KiB
Java
// Copyright 2017 The Nomulus Authors. All Rights Reserved.
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
|
|
package google.registry.rdap;
|
|
|
|
import com.google.auto.value.AutoValue;
|
|
import com.google.common.collect.ImmutableList;
|
|
import google.registry.model.ImmutableObject;
|
|
|
|
/** Authorization information for RDAP data access. */
|
|
@AutoValue
|
|
public abstract class RdapAuthorization extends ImmutableObject {
|
|
|
|
enum Role {
|
|
ADMINISTRATOR,
|
|
REGISTRAR,
|
|
PUBLIC
|
|
}
|
|
|
|
/** The role to be used for access. */
|
|
public abstract Role role();
|
|
|
|
/** The registrar client IDs for which access is granted (used only if the role is REGISTRAR. */
|
|
public abstract ImmutableList<String> clientIds();
|
|
|
|
static RdapAuthorization create(Role role, String clientId) {
|
|
return new AutoValue_RdapAuthorization(role, ImmutableList.of(clientId));
|
|
}
|
|
|
|
static RdapAuthorization create(Role role, ImmutableList<String> clientIds) {
|
|
return new AutoValue_RdapAuthorization(role, clientIds);
|
|
}
|
|
|
|
boolean isAuthorizedForClientId(String clientId) {
|
|
switch (role()) {
|
|
case ADMINISTRATOR:
|
|
return true;
|
|
case REGISTRAR:
|
|
return clientIds().contains(clientId);
|
|
default:
|
|
return false;
|
|
}
|
|
}
|
|
|
|
public static final RdapAuthorization PUBLIC_AUTHORIZATION =
|
|
create(Role.PUBLIC, ImmutableList.<String>of());
|
|
|
|
public static final RdapAuthorization ADMINISTRATOR_AUTHORIZATION =
|
|
create(Role.ADMINISTRATOR, ImmutableList.<String>of());
|
|
}
|
|
|