Metacat

import org.dataone.service.types.v1.AccessPolicy;

  /**

   * Set access for a given object using the object identifier and a Subject

   * under a given Session.

   * 

   * @param session - the Session object containing the credentials for the Subject

   * @param pid - the object identifier for the given object to apply the policy

   * @param policy - the access policy to be applied

   * 

   * @return true if the application of the policy succeeds

   * @throws InvalidToken

   * @throws ServiceFailure

   * @throws NotFound

   * @throws NotAuthorized

   * @throws NotImplemented

   * @throws InvalidRequest

   */

  public boolean setAccessPolicy(Session session, Identifier pid, 

      AccessPolicy accessPolicy) 

      throws InvalidToken, ServiceFailure, NotFound, NotAuthorized, 

      NotImplemented, InvalidRequest {

      boolean success = false;

      // get the subject

      Subject subject = session.getSubject();

      // are we allowed to do this?

      if (!isAuthorized(session, pid, Permission.CHANGE_PERMISSION)) {

          throw new NotAuthorized("4420", "not allowed by " + subject.getValue() + 

          " on " + pid.getValue());  

      }

      SystemMetadata systemMetadata = null;

      try {

          HazelcastService.getInstance().getSystemMetadataMap().lock(pid);

          systemMetadata = HazelcastService.getInstance().getSystemMetadataMap().get(pid);

      } catch (Exception e) {

          // convert Hazelcast RuntimeException to NotFound

          throw new NotFound("4400", "No record found for: " + pid);

      }

      // set the access policy

      systemMetadata.setAccessPolicy(accessPolicy);

      // update the system metadata

      try {

          // TODO: consult authoritative MN on current sysmeta serial version?

          systemMetadata.setSerialVersion(systemMetadata.getSerialVersion().add(BigInteger.ONE));

          systemMetadata.setDateSysMetadataModified(Calendar.getInstance().getTime());

          HazelcastService.getInstance().getSystemMetadataMap().put(systemMetadata.getIdentifier(), systemMetadata);

          HazelcastService.getInstance().getSystemMetadataMap().unlock(systemMetadata.getIdentifier());

      } catch (Exception e) {

          // convert Hazelcast RuntimeException to ServiceFailure

          throw new ServiceFailure("4430", e.getMessage());

      } finally {

          HazelcastService.getInstance().getSystemMetadataMap().unlock(systemMetadata.getIdentifier());

      }

    // TODO: how do we know if the map was persisted?

    success = true;

    return success;

  }