ws/security/ResourceAccessStatement.java

a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster/**
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster *
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * Copyright (c) 2006 Sun Microsystems Inc. All Rights Reserved
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster *
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * The contents of this file are subject to the terms
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * of the Common Development and Distribution License
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * (the License). You may not use this file except in
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * compliance with the License.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster *
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * You can obtain a copy of the License at
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * https://opensso.dev.java.net/public/CDDLv1.0.html or
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * opensso/legal/CDDLv1.0.txt
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * See the License for the specific language governing
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * permission and limitations under the License.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster *
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * When distributing Covered Code, include this CDDL
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * Header Notice in each file and include the License file
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * at opensso/legal/CDDLv1.0.txt.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * If applicable, add the following below the CDDL Header,
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * with the fields enclosed by brackets [] replaced by
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * your own identifying information:
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * "Portions Copyrighted [year] [name of copyright owner]"
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster *
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * $Id: ResourceAccessStatement.java,v 1.2 2008/06/25 05:47:20 qcheng Exp $
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster *
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster */
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Fosterpackage com.sun.identity.liberty.ws.security;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Fosterimport com.sun.identity.liberty.ws.common.wsse.WSSEConstants;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Fosterimport com.sun.identity.liberty.ws.disco.EncryptedResourceID;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Fosterimport com.sun.identity.liberty.ws.disco.ResourceID;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Fosterimport com.sun.identity.saml.assertion.Subject;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Fosterimport com.sun.identity.saml.assertion.SubjectStatement;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Fosterimport com.sun.identity.saml.common.SAMLRequesterException;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Fosterimport com.sun.identity.saml.common.SAMLConstants;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Fosterimport com.sun.identity.saml.common.SAMLException;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Fosterimport com.sun.identity.saml.common.SAMLUtils;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Fosterimport org.w3c.dom.Element;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Fosterimport org.w3c.dom.Node;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Fosterimport org.w3c.dom.NodeList;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster/**
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * The <code>ResourceAccessStatement</code> class conveys information regarding
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * the accessing entities and the resource for which access is being attempted.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster *
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster * @supported.all.api
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster */
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Fosterpublic class ResourceAccessStatement extends SubjectStatement {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    /**
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * The Statement is an Resource Access Statement.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     */
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    public final static int RESOURCEACCESS_STATEMENT = 4;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    private ResourceID _resourceID = null;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    private EncryptedResourceID _encryptedResourceID = null;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    protected ProxySubject _proxySubject = null;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    protected SessionContext _sessionContext = null;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    /**
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * Constructs an <code>ResourceAccessStatement</code> object from a DOM
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * Element.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     *
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * @param element representing a DOM tree element
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * @throws SAMLException if there is an error in the sender or in the
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     *         element definition.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     */
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    public ResourceAccessStatement(Element element) throws SAMLException {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        // make sure input is not null
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        if (element == null) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            SAMLUtils.debug.message("ResourceAccessStatement: null input.");
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            throw new SAMLRequesterException(
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                    SAMLUtils.bundle.getString("nullInput"));
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        // check if it's an ResourceAccessStatement
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        boolean valid = SAMLUtils.checkStatement(element,
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                "ResourceAccessStatement");
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        if (!valid) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            SAMLUtils.debug.message("ResourceAccessStatement: Wrong input.");
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            throw new SAMLRequesterException(
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                    SAMLUtils.bundle.getString("wrongInput"));
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        //Handle the children elements of ResourceAccessStatement
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        NodeList nodes = element.getChildNodes();
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        int nodeCount = nodes.getLength();
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        if (nodeCount > 0) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            for (int i = 0; i < nodeCount; i++) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                Node currentNode = nodes.item(i);
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                if (currentNode.getNodeType() == Node.ELEMENT_NODE) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                    String tagName = currentNode.getLocalName();
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                    String tagNS = currentNode.getNamespaceURI();
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                    if ((tagName == null) || tagName.length() == 0 ||
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                            tagNS == null || tagNS.length() == 0) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                        if (SAMLUtils.debug.messageEnabled()) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                            SAMLUtils.debug.message("ResourceAccessStatement:" +
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                                    "The tag name or tag namespace of child" +
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                                    " element is either null or empty.");
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                        }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                        throw new SAMLRequesterException(
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                                SAMLUtils.bundle.getString("nullInput"));
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                    }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                    if (tagName.equals("Subject") &&
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                            tagNS.equals(
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                                    SAMLConstants.assertionSAMLNameSpaceURI)) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                        if (this._subject != null) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                            if (SAMLUtils.debug.messageEnabled()) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                                SAMLUtils.debug.message("ResourceAccess" +
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                                   "Statement:should only contain one subject");
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                            }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                            throw new SAMLRequesterException(
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                                    SAMLUtils.bundle.getString("oneElement"));
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                        } else {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                            this._subject = new Subject((Element) currentNode);
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                        }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                    } else if (tagName.equals("ResourceID") &&
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                            tagNS.equals(WSSEConstants.NS_DISCO)) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                        if (_resourceID != null ||
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                                _encryptedResourceID != null) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                            if (SAMLUtils.debug.messageEnabled()) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                                SAMLUtils.debug.message("ResourceAccess"+
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                                        "Statement: should at most " +
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                                        "contain one ResourceIDGroup.");
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                            }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                            throw new SAMLRequesterException(
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                                    SAMLUtils.bundle.getString("oneElement"));
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                        }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                        try {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                            _resourceID = new ResourceID((Element)currentNode);
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                        } catch (Exception ex) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                            throw new SAMLRequesterException(ex.getMessage());
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                        }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                    } else if (tagName.equals("EncryptedResourceID") &&
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                            tagNS.equals(WSSEConstants.NS_DISCO)) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                        if (_resourceID != null ||
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                                _encryptedResourceID != null) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                            if (SAMLUtils.debug.messageEnabled()) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                                SAMLUtils.debug.message("ResourceAccess"+
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                                        "Statement: should at most " +
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                                        "contain one ResourceIDGroup.");
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                            }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                            throw new SAMLRequesterException(
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                                    SAMLUtils.bundle.getString("oneElement"));
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                        }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                        try {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                            _encryptedResourceID =
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                                 new EncryptedResourceID((Element)currentNode);
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                        } catch (Exception ex) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                            throw new SAMLRequesterException(ex.getMessage());
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                        }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                    } else if (tagName.equals("ProxySubject") &&
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                            tagNS.equals(WSSEConstants.NS_SEC)) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                        if (_proxySubject != null) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                            if (SAMLUtils.debug.messageEnabled()) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                                SAMLUtils.debug.message("ResourceAccess"+
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                                        "Statement: should at most " +
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                                        "contain one ProxySubject.");
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                            }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                            throw new SAMLRequesterException(
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                                    SAMLUtils.bundle.getString("oneElement"));
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                        } else {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                            _proxySubject = new ProxySubject((Element)
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                            currentNode);
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                        }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                    } else if (tagName.equals("SessionContext") &&
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                            tagNS.equals(WSSEConstants.NS_SEC)) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                        if (_sessionContext != null) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                            if (SAMLUtils.debug.messageEnabled()) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                                SAMLUtils.debug.message("ResourceAccess"+
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                                        "Statement: should at most " +
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                                        "contain one SessionContext.");
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                            }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                            throw new SAMLRequesterException(
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                                    SAMLUtils.bundle.getString("oneElement"));
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                        } else {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                            _sessionContext = new SessionContext((Element)
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                            currentNode);
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                        }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                    } else {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                        if (SAMLUtils.debug.messageEnabled()) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                            SAMLUtils.debug.message("ResourceAccessStatement:"+
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                                    "Wrong element " + tagName + "included.");
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                        }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                        throw new SAMLRequesterException(
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                                SAMLUtils.bundle.getString("wrongInput"));
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                    }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                } // end of if (currentNode.getNodeType() == Node.ELEMENT_NODE)
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            } // end of for loop
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        }  // end of if (nodeCount > 0)
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        // check if the subject is null
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        if (this._subject == null) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            if (SAMLUtils.debug.messageEnabled()) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                SAMLUtils.debug.message("ResourceAccessStatement should " +
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                        "contain one subject.");
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            throw new SAMLRequesterException(
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                    SAMLUtils.bundle.getString("missingElement"));
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    /**
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * Constructs a <code>ResourceAccessStatement</code> object from a
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * <code>String</code> object and a <code>Subject</code>.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     *
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * @param resourceID <code>String</code>.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * @param subject <code>Subject</code> object.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * @throws SAMLException if subject is null.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     */
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    public ResourceAccessStatement(String resourceID,
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            Subject subject) throws SAMLException {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        // check if the subject is null
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        if (subject == null) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            if (SAMLUtils.debug.messageEnabled()) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                SAMLUtils.debug.message("ResourceAccessStatement: should" +
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                        " contain one subject.");
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            throw new SAMLRequesterException(
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                    SAMLUtils.bundle.getString("oneElement"));
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        } else {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            this._subject = subject;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        _resourceID = new ResourceID(resourceID);
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    /**
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * Constructs a <code>ResourceAccessStatement</code> object from a
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * <code>String</code> object, <code>ProxySubject</code> object and
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * a <code>Subject</code>.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     *
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * @param resourceID <code>String</code>.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * @param proxySubject <code>ProxySubject</code> object.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * @param subject <code>Subject</code> object.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * @throws SAMLException if subject is null.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     */
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    public ResourceAccessStatement(String resourceID,
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            ProxySubject proxySubject,
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            Subject subject) throws SAMLException {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        if (subject == null) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            if (SAMLUtils.debug.messageEnabled()) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                SAMLUtils.debug.message("ResourceAccessStatement: should" +
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                        " contain one subject.");
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            throw new SAMLRequesterException(
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                    SAMLUtils.bundle.getString("oneElement"));
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        } else {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            this._subject = subject;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        _resourceID = new ResourceID(resourceID);
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        _proxySubject = proxySubject;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    /**
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * Constructs a <code>ResourceAccessStatement</code> object from a
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * <code>String</code> object, <code>ProxySubject</code> object, a
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * <code>SessionContext</code> object and a <code>Subject</code>.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     *
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * @param resourceID resource ID.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * @param proxySubject <code>ProxySubject</code> object.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * @param sessionContext <code>SessionContext</code> object.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * @param subject <code>Subject</code> object.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * @throws SAMLException if subject is null.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     */
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    public ResourceAccessStatement(String resourceID,
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            ProxySubject proxySubject,
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            SessionContext sessionContext,
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            Subject subject) throws SAMLException {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        // check if the subject is null
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        if (subject == null) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            if (SAMLUtils.debug.messageEnabled()) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                SAMLUtils.debug.message("ResourceAccessStatement: should" +
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                        " contain one subject.");
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            throw new SAMLRequesterException(
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                    SAMLUtils.bundle.getString("oneElement"));
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        } else {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            this._subject = subject;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        _resourceID = new ResourceID(resourceID);
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        _proxySubject = proxySubject;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        _sessionContext = sessionContext;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    /**
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * Constructs a <code>ResourceAccessStatement</code> object from a
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * <code>ResourceID</code> object, <code>ProxySubject</code> object, a
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * <code>SessionContext</code> object and a <code>Subject</code>.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     *
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * @param resourceID resource ID.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * @param proxySubject <code>ProxySubject</code> object.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * @param sessionContext <code>SessionContext</code> object.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * @param subject <code>Subject</code> object.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * @throws SAMLException if subject is null.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     */
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    public ResourceAccessStatement(ResourceID resourceID,
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            ProxySubject proxySubject,
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            SessionContext sessionContext,
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            Subject subject) throws SAMLException {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        // check if the subject is null
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        if (subject == null) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            if (SAMLUtils.debug.messageEnabled()) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                SAMLUtils.debug.message("ResourceAccessStatement: should" +
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                        " contain one subject.");
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            throw new SAMLRequesterException(
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                    SAMLUtils.bundle.getString("oneElement"));
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        } else {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            this._subject = subject;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        _resourceID = resourceID;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        _proxySubject = proxySubject;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        _sessionContext = sessionContext;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    /**
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * Constructs a <code>ResourceAccessStatement</code> object from a
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * <code>EncryptedResourceID</code> object, <code>ProxySubject</code>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * object, a <code>SessionContext</code> object and a <code>Subject</code>.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     *
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * @param encryptedResourceID the encrypted resource ID.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * @param proxySubject <code>ProxySubject</code> object.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * @param sessionContext <code>SessionContext</code> object.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * @param subject <code>Subject</code> object.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * @throws SAMLException if subject is null.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     */
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    public ResourceAccessStatement(EncryptedResourceID encryptedResourceID,
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            ProxySubject proxySubject,
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            SessionContext sessionContext,
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            Subject subject) throws SAMLException {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        // check if the subject is null
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        if (subject == null) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            if (SAMLUtils.debug.messageEnabled()) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                SAMLUtils.debug.message("ResourceAccessStatement: should" +
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                        " contain one subject.");
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            throw new SAMLRequesterException(
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                    SAMLUtils.bundle.getString("oneElement"));
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        } else {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            this._subject = subject;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        _encryptedResourceID = encryptedResourceID;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        _proxySubject = proxySubject;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        _sessionContext = sessionContext;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    /**
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * Gets the <code>ResourceID</code> from this
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * <code>ResourceAccessStatement</code> object.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * @return resource ID
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     */
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    public String getResourceID() {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        return _resourceID == null ? null : _resourceID.getResourceID();
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    /**
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * Gets the <code>ResourceID</code> object from this
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * <code>ResourceAccessStatement</code> object.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * @return resource ID
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     */
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    public ResourceID getResourceIDObject() {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        return _resourceID;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    /**
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * Gets the <code>EncryptedResourceID</code> object from this
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * <code>ResourceAccessStatement</code> object.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * @return encrypted resource ID
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     */
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    public EncryptedResourceID getEncryptedResourceID() {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        return _encryptedResourceID;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    /**
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * Sets the <code>ResourceID</code> for this
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * <code>ResourceAccessStatement</code> object.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     *
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * @param resourceID Resource ID.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * @return true if the operation is successful. Otherwise return false.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     */
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    public boolean setResourceID(String resourceID) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        if (resourceID == null) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            if (SAMLUtils.debug.messageEnabled()) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                SAMLUtils.debug.message("ResourceAccessStatement: " +
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                        "setResourceID:Input is null.");
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            return false;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        _resourceID = new ResourceID(resourceID);
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        return true;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    /**
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * Sets the <code>ResourceID</code> for this
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * <code>ResourceAccessStatement</code> object.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     *
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * @param resourceID Resource ID.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     */
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    public void setResourceID(ResourceID resourceID) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        _resourceID = resourceID;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    /**
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * Sets the <code>EncryptedResourceID</code> for this
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * <code>ResourceAccessStatement</code> object.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     *
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * @param resourceID encrypted Resource ID.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     */
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    public void setEncryptedResourceID(EncryptedResourceID resourceID) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        _encryptedResourceID = resourceID;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    /**
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * Returns the type of the Statement.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     *
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * @return An integer which represents <code>ResourceAccessStatement</code>
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * internally.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     */
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    public int getStatementType() {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        return RESOURCEACCESS_STATEMENT;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    /**
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * Sets the <code>SessionContext</code> for this
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * <code>ResourceAccessStatement</code> object.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     *
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * @param sessionContext Session context object
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * @return true if the operation is successful. Otherwise return false.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     */
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    public boolean setSessionContext(SessionContext sessionContext) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        if (sessionContext == null) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            if (SAMLUtils.debug.messageEnabled()) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                SAMLUtils.debug.message("ResourceAccessStatement: " +
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                        "setSessionContext: Input is null.");
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            return false;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        _sessionContext = sessionContext;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        return true;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    /**
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * Gets the <code>SessionContext</code> from this
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * <code>ResourceAccessStatement</code> object.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     *
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * @return <code>SessionContext</code>.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     */
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    public SessionContext getSessionContext() {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        return _sessionContext;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    /**
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * Returns the <code>ProxySubject</code> in the
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * <code>ResourceAccessStatement</code>.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     *
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * @return <code>ProxySubject</code>.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     */
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    public ProxySubject getProxySubject() {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        return _proxySubject;
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    /**
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * Returns a String representation of the
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * <code>ResourceAccessStatement</code>.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     *
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * @return A String representation of the
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     *         <code>ResourceAccessStatement</code> element.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     */
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    public String toString()  {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        return toString(true, false);
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    /**
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * Returns a String representation of the
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * <code>ResourceAccessStatement</code>.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     *
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * @param includeNS Determines whether or not the namespace qualifier is
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     *        prepended  to the Element when converted.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * @param declareNS Determines whether or not the namespace is declared
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     *        within the Element.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     * @return A string representation of the
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     *         <code>ResourceAccessStatement</code> element.
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster     */
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    public  String  toString(boolean includeNS, boolean declareNS)  {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        StringBuffer result = new StringBuffer(1000);
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        result.append("<").append(WSSEConstants.TAG_SEC + ":").
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                append(WSSEConstants.TAG_RESOURCEACCESSSTATEMENT).append(" ").
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                append(WSSEConstants.TAG_XML_SEC).append("=").
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                append("\"").append(WSSEConstants.NS_SEC).append("\"");
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        result.append(">\n").append(this._subject.toString(includeNS, true));
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        if (_resourceID != null) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            result.append(_resourceID);
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        } else if (_encryptedResourceID != null) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            result.append(_encryptedResourceID);
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        if (_proxySubject!=null) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            result.append(_proxySubject.toString(includeNS, true));
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            if (_sessionContext!=null) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                try {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                    result.append(
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                            _sessionContext.toXMLString(includeNS, true));
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                } catch (Exception e) {
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster            }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        result.append("</").append(WSSEConstants.TAG_SEC + ":").
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster                append(WSSEConstants.TAG_RESOURCEACCESSSTATEMENT).append(">\n");
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster        return(result.toString());
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster    }
a688bcbb4bcff5398fdd29b86f83450257dc0df4Allan Foster}