in src/main/java/org/apache/sling/jcr/jackrabbit/accessmanager/post/AbstractGetAceServlet.java [50:88]
protected JsonObject internalGetAce(Session jcrSession, String resourcePath, String principalId) throws RepositoryException {
Principal principal = validateArgs(jcrSession, resourcePath, principalId);
Map<Principal, Map<DeclarationType, Set<String>>> principalToDeclaredAtPaths = new HashMap<>();
Map<String, List<AccessControlEntry>> effectivePathToEntriesMap = getAccessControlEntriesMap(jcrSession, resourcePath, principal, principalToDeclaredAtPaths);
if (effectivePathToEntriesMap == null || effectivePathToEntriesMap.isEmpty()) {
throw new ResourceNotFoundException(resourcePath, "No access control entries were found");
}
//make a temp map for quick lookup below
Set<RestrictionDefinition> supportedRestrictions = getRestrictionProvider().getSupportedRestrictions(resourcePath);
Map<String, RestrictionDefinition> srMap = new HashMap<>();
for (RestrictionDefinition restrictionDefinition : supportedRestrictions) {
srMap.put(restrictionDefinition.getName(), restrictionDefinition);
}
Map<Privilege, LocalPrivilege> privilegeToLocalPrivilegesMap = new HashMap<>();
for (List<AccessControlEntry> accessControlEntries : effectivePathToEntriesMap.values()) {
for (AccessControlEntry accessControlEntry : accessControlEntries) {
if (accessControlEntry instanceof JackrabbitAccessControlEntry) {
JackrabbitAccessControlEntry jrAccessControlEntry = (JackrabbitAccessControlEntry)accessControlEntry;
Privilege[] privileges = jrAccessControlEntry.getPrivileges();
if (privileges != null) {
processACE(srMap, jrAccessControlEntry, privileges, privilegeToLocalPrivilegesMap);
}
}
}
}
// combine any aggregates that are still valid
AccessControlManager acm = AccessControlUtil.getAccessControlManager(jcrSession);
Map<Privilege, Integer> privilegeLongestDepthMap = PrivilegesHelper.buildPrivilegeLongestDepthMap(acm.privilegeFromName(PrivilegeConstants.JCR_ALL));
PrivilegesHelper.consolidateAggregates(jcrSession, resourcePath, privilegeToLocalPrivilegesMap, privilegeLongestDepthMap);
// convert the data to JSON
JsonObjectBuilder principalObj = JsonConvert.convertToJson(principal, privilegeToLocalPrivilegesMap, -1);
addExtraInfo(principalObj, principal, principalToDeclaredAtPaths);
return principalObj.build();
}