return FilterCreationUtil.createUndefined(prismContext); return FilterCreationUtil.createNone(prismContext); return FilterCreationUtil.createAll(prismContext); return evaluatedFilter; } else if (filter instanceof InOidFilter) { return FilterCreationUtil.createNone(prismContext); } else if (filter instanceof FullTextFilter) { return FilterCreationUtil.createNone(prismContext); // because full text search for 'no value' is meaningless } else { throw new IllegalArgumentException("Unknown filter to evaluate: " + filter);
public static ObjectFilter createUndefined(PrismContext prismContext) { return queryFactory(prismContext).createUndefined(); } }
return FilterCreationUtil.createNone(prismContext); } else if (subfilter instanceof AllFilter || subfilter instanceof UndefinedFilter) { ObjectFilter simplifiedSubfilter = simplify(subfilter, prismContext); if (simplifiedSubfilter instanceof NoneFilter) { return FilterCreationUtil.createNone(prismContext); } else if (simplifiedSubfilter == null || simplifiedSubfilter instanceof AllFilter) { return FilterCreationUtil.createAll(prismContext); } else if (simplifiedFilter.getConditions().size() == 1) { return simplifiedFilter.getConditions().iterator().next(); return FilterCreationUtil.createAll(prismContext); } else { ObjectFilter simplifiedSubfilter = simplify(subfilter, prismContext); return FilterCreationUtil.createNone(prismContext); } else { simplifiedFilter.addCondition(simplifiedSubfilter); return FilterCreationUtil.createNone(prismContext); } else if (simplifiedFilter.getConditions().size() == 1) { return simplifiedFilter.getConditions().iterator().next(); ObjectFilter simplifiedSubfilter = simplify(subfilter, prismContext); if (simplifiedSubfilter instanceof NoneFilter) { return FilterCreationUtil.createAll(prismContext); } else if (simplifiedSubfilter == null || simplifiedSubfilter instanceof AllFilter) { return FilterCreationUtil.createNone(prismContext);
@Test public void test198SearchNone() throws Exception { final String TEST_NAME = "test198SearchNone"; displayTestTitle(TEST_NAME); ObjectFilter attrFilter = FilterCreationUtil.createNone(prismContext); testSeachIterative(TEST_NAME, attrFilter, null, true, true, false); }
origFilter = FilterCreationUtil.createAll(prismContext);
membersFilter = FilterCreationUtil.createAll(prismContext); } else { membersFilter = FilterCreationUtil.createNone(prismContext);
private <C extends Containerable, O extends ObjectType> ObjectQuery preProcessSubobjectQuerySecurity(Class<C> containerType, Class<O> objectType, ObjectQuery origQuery, Task task, OperationResult result) throws SchemaException, ObjectNotFoundException, ExpressionEvaluationException, CommunicationException, ConfigurationException, SecurityViolationException { // Search containers is an operation on one object. Therefore even if it works with a search filter, it requires GET authorizations ObjectFilter secParentFilter = securityEnforcer.preProcessObjectFilter(ModelAuthorizationAction.AUTZ_ACTIONS_URLS_GET, null, objectType, null, null, null, null, task, result); if (secParentFilter == null || secParentFilter instanceof AllFilter) { return origQuery; // no need to update the query } ObjectFilter secChildFilter; if (secParentFilter instanceof NoneFilter) { secChildFilter = FilterCreationUtil.createNone(prismContext); } else { ObjectFilter origChildFilter = origQuery != null ? origQuery.getFilter() : null; ObjectFilter secChildFilterParentPart = prismContext.queryFactory().createExists(ItemName.fromQName(PrismConstants.T_PARENT), // fixme containerType, prismContext, secParentFilter); if (origChildFilter == null) { secChildFilter = secChildFilterParentPart; } else { secChildFilter = prismContext.queryFactory().createAnd(origChildFilter, secChildFilterParentPart); } } return updateObjectQuery(origQuery, secChildFilter); }
result.recordSuccess(); spec.setNoRoleTypes(); spec.setFilter(FilterCreationUtil.createNone(prismContext)); return spec; result.recordSuccess(); spec.setNoRoleTypes(); spec.setFilter(FilterCreationUtil.createNone(prismContext)); return spec; try { ObjectFilter filter = securityEnforcer.preProcessObjectFilter(ModelAuthorizationAction.AUTZ_ACTIONS_URLS_ASSIGN, AuthorizationPhaseType.REQUEST, targetType, focus, FilterCreationUtil.createAll(prismContext), null, orderConstraintsList, task, result); LOGGER.trace("assignableRoleSpec filter: {}", filter); spec.setFilter(filter);
private ObjectFilter processTenantFilter(MidPointPrincipal principal, Authorization autz, TenantSelectorType specTenant, AutzItemPaths queryItemsSpec, ObjectFilter origFilter) { ObjectFilter tenantFilter = null; if (BooleanUtils.isTrue(specTenant.isSameAsSubject())) { ObjectReferenceType subjectTenantRef = principal.getUser().getTenantRef(); if (subjectTenantRef == null || subjectTenantRef.getOid() == null) { LOGGER.trace(" subject tenant empty (none filter)"); tenantFilter = FilterCreationUtil.createNone(prismContext); } else { tenantFilter = prismContext.queryFor(ObjectType.class) .item(ObjectType.F_TENANT_REF).ref(subjectTenantRef.getOid()) .buildFilter(); } if (!BooleanUtils.isTrue(specTenant.isIncludeTenantOrg())) { ObjectFilter notTenantFilter = prismContext.queryFor(ObjectType.class) .not() .type(OrgType.class) .item(OrgType.F_TENANT).eq(true) .buildFilter(); tenantFilter = ObjectQueryUtil.filterAnd(tenantFilter, notTenantFilter, prismContext); } LOGGER.trace(" applying tenant filter {}", tenantFilter); } else { tenantFilter = FilterCreationUtil.createNone(prismContext); LOGGER.trace(" tenant authorization empty (none filter)"); } return tenantFilter; }
public static AllFilter createAll(PrismContext prismContext) { return queryFactory(prismContext).createAll(); }
autzObjSecurityFilter = FilterCreationUtil.createAll(prismContext); objSpecOrgRelationFilter = FilterCreationUtil.createNone(prismContext); applicable = false; } else { objSpecRoleRelationFilter = FilterCreationUtil.createNone(prismContext); applicable = false; } else { objSpecTenantFilter = FilterCreationUtil.createNone(prismContext); phase, getUsername(principal), prettyActionUrl(operationUrls), desc); NoneFilter secFilter = FilterCreationUtil.createNone(prismContext); traceFilter("secFilter", null, secFilter); return secFilter; NoneFilter secFilter = FilterCreationUtil.createNone(prismContext); traceFilter("secFilter", null, secFilter); return secFilter; securityFilterAllow = FilterCreationUtil.createAll(prismContext); } else if (securityFilterAllow == null) { NoneFilter secFilter = FilterCreationUtil.createNone(prismContext); traceFilter("secFilter", null, secFilter); return secFilter;
return filter.clone(); return FilterCreationUtil.createNone(prismContext);
public static NoneFilter createNone(PrismContext prismContext) { return queryFactory(prismContext).createNone(); }