Metacat

import org.dataone.service.types.v1.AccessRule;

    private SystemMetadata makePublicIfNot(SystemMetadata sysmeta, Identifier pid) throws ServiceFailure, InvalidToken, NotFound, NotImplemented, InvalidRequest {

    	// check if it is publicly readable

		boolean isPublic = false;

		Subject publicSubject = new Subject();

		publicSubject.setValue(Constants.SUBJECT_PUBLIC);

		Session publicSession = new Session();

		publicSession.setSubject(publicSubject);

		AccessRule publicRule = new AccessRule();

		publicRule.addPermission(Permission.READ);

		publicRule.addSubject(publicSubject);

		// see if we need to add the rule

		try {

			isPublic = this.isAuthorized(publicSession, pid, Permission.READ);

		} catch (NotAuthorized na) {

			// well, certainly not authorized for public read!

		}

		if (!isPublic) {

			sysmeta.getAccessPolicy().addAllow(publicRule);

		}

		return sysmeta;

    }

		// ensure it is publicly readable

		sysmeta = makePublicIfNot(sysmeta, originalIdentifier);

				// ensure ORE is publicly readable

				oreSysMeta = makePublicIfNot(sysmeta, potentialOreIdentifier);

				// ensure all data objects allow public read

				List<String> pidsToSync = new ArrayList<String>();

				for (Identifier dataId: dataIdentifiers) {

					SystemMetadata dataSysMeta = this.getSystemMetadata(session, dataId);

					dataSysMeta = makePublicIfNot(dataSysMeta, dataId);

					this.updateSystemMetadata(dataSysMeta);

					pidsToSync.add(dataId.getValue());

				}

				SyncAccessPolicy sap = new SyncAccessPolicy();

				try {

					sap.sync(pidsToSync);

				} catch (Exception e) {

					// ignore

					logMetacat.warn("Error attempting to sync access for data objects when publishing package");

				}

					// should be done generating the ORE here, and the same permissions were used from the metadata object