Metacat

import org.dataone.service.types.v1.Person;

import org.dataone.service.types.v1.SubjectInfo;

    // for the "Verified" symbolic user

    Subject verifiedSubject = new Subject();

	verifiedSubject.setValue(Constants.SUBJECT_VERIFIED_USER);

	List<Subject> subjects = new ArrayList<Subject>();

	if (session != null) {

		// primary subject

		Subject subject = session.getSubject();

		if (subject != null) {

			subjects.add(subject);

		}

		// details about the subject

		SubjectInfo subjectInfo = session.getSubjectInfo();

		if (subjectInfo != null) {

			// find subjectInfo for the primary subject

			List<Person> personList = subjectInfo.getPersonList();

			List<Group> groupList = subjectInfo.getGroupList();

			if (personList != null) {

				for (Person p : personList) {

					  // for every person listed (isVerified is transitive)

						logMetacat.debug("checking person");

						logMetacat.debug("p.getVerified(): " + p.getVerified());

						if (p.getVerified() != null && p.getVerified()) {

							// add the verified symbolic user

							if (!subjects.contains(verifiedSubject)) {

								subjects.add(verifiedSubject);

							}

						}

						// add the equivalent identities

						List<Subject> equivList = p.getEquivalentIdentityList();

						if (equivList != null) {

							for (Subject equivSubject : equivList) {

								subjects.add(equivSubject);

								// find that entry

								for (Person equivPerson: personList) {

									if (equivSubject.equals(equivPerson.getSubject())) {

										// transitive group membership

										if (equivPerson.getIsMemberOfList() != null) {

											for (Subject equivGroup: equivPerson.getIsMemberOfList()) {

												subjects.add(equivGroup);

											}

										}

										// TODO: is verified transitive?

										if (equivPerson.getVerified() != null && equivPerson.getVerified()) {

											// add the verified symbolic user

											if (!subjects.contains(verifiedSubject)) {

												subjects.add(verifiedSubject);

											}

										}

									}

								}

							}

						}

						// add the groups they are a member of

						List<Subject> memberOfList = p.getIsMemberOfList();

						if (memberOfList != null) {

							for (Subject g : memberOfList) {

								subjects.add(g);

							}

						}

						// look at all the Groups to see if this person has membership defined there

						if (groupList != null) {

							for (Group group: groupList) {

								if (group.getHasMemberList() != null) {

									for (Subject member: group.getHasMemberList()) {

										// is the person a member?

										if (member.equals(p.getSubject())) {

											// add this group as a subject to check if it is not already there

											if (!subjects.contains(group.getSubject())) {

												subjects.add(group.getSubject());

											}

										}

									}

								}

							}

						}

						break;

				}

			}

		}

		// add the authenticated symbolic since we have a session

		Subject authenticatedSubject = new Subject();

		authenticatedSubject.setValue(Constants.SUBJECT_AUTHENTICATED_USER);

		subjects.add(authenticatedSubject);

	}

    // add public subject for everyone

    Subject publicSubject = new Subject();

    publicSubject.setValue(Constants.SUBJECT_PUBLIC);

    subjects.add(publicSubject);