SVN资源权限管理系统安全，流畅，极简的管理工具.rar

package org.svnadmin.service; import java.io.BufferedWriter; import java.io.File; import java.io.FileOutputStream; import java.io.IOException; import java.io.OutputStreamWriter; import java.util.ArrayList; import java.util.Iterator; import java.util.LinkedHashMap; import java.util.List; import java.util.Map; import javax.annotation.Resource; import org.apache.commons.lang.StringUtils; import org.apache.log4j.Logger; import org.springframework.stereotype.Service; import org.svnadmin.constant.Constants; import org.svnadmin.dao.PjAuthDao; import org.svnadmin.dao.PjDao; import org.svnadmin.dao.PjGrDao; import org.svnadmin.dao.PjGrUsrDao; import org.svnadmin.dao.UsrDao; import org.svnadmin.entity.Pj; import org.svnadmin.entity.PjAuth; import org.svnadmin.entity.PjGrUsr; import org.svnadmin.entity.Usr; import org.svnadmin.util.EncryptUtil; import org.svnadmin.util.I18N; /** * 导出svn配置信息服务层 * * @author <a href="mailto:yuanhuiwu@gmail.com">Huiwu Yuan</a> * @since 1.0 * */ @Service(SvnService.BEAN_NAME) public class SvnService { /** * Bean名称 */ public static final String BEAN_NAME = "svnService"; /** * 分隔符 */ private static final String SEP = System.getProperty("line.separator"); /** * 日志 */ private final Logger LOG = Logger.getLogger(this.getClass()); /** * 项目DAO */ @Resource(name = PjDao.BEAN_NAME) protected PjDao pjDao; /** * 用户DAO */ @Resource(name = UsrDao.BEAN_NAME) protected UsrDao usrDao; /** * 项目组DAO */ @Resource(name = PjGrDao.BEAN_NAME) protected PjGrDao pjGrDao; /** * 项目组用户DAO */ @Resource(name = PjGrUsrDao.BEAN_NAME) protected PjGrUsrDao pjGrUsrDao; /** * 项目权限DAO */ @Resource(name = PjAuthDao.BEAN_NAME) protected PjAuthDao pjAuthDao; /** * 导出到配置文件 * * @param pj * 项目id */ public synchronized void exportConfig(String pj) { this.exportConfig(this.pjDao.get(pj)); } /** * 导出到配置文件 * * @param pj * 项目 */ public synchronized void exportConfig(Pj pj) { if (pj == null) { return; } File parent = new File(pj.getPath()); if (!parent.exists() || !parent.isDirectory()) { throw new RuntimeException(I18N.getLbl("svn.notFoundResp", "找不到仓库 路径{0}",new Object[]{pj.getPath()})); } if (Constants.HTTP.equalsIgnoreCase(pj.getType())) {// HTTP(单库) SVNPath this.exportHTTP(pj); } else if (Constants.HTTP_MUTIL.equalsIgnoreCase(pj.getType())) {// HTTP(多库) // SVNParentPath File root = new File(pj.getPath()).getParentFile(); this.exportHTTPMutil(root); } else if (Constants.SVN.equalsIgnoreCase(pj.getType())) {// SVN this.exportSVN(pj); } } /** * 导出svn协议的配置信息 * * @param pj * 项目 */ private void exportSVN(Pj pj) { // 项目的用户 List<Usr> usrList = this.usrDao.getList(pj.getPj()); // 项目的用户组 Map<String, List<PjGrUsr>> pjGrUsrMap = this.getPjGrUsrs(pj.getPj()); // 项目的权限 Map<String, List<PjAuth>> pjAuthMap = this.getPjAuths(pj.getPj()); this.exportSvnConf(pj); this.exportPasswdSVN(pj, usrList); this.exportAuthz(pj, pjGrUsrMap, pjAuthMap); } /** * 导出http(单库)的配置信息 * * @param pj * 项目 */ private void exportHTTP(Pj pj) { // 项目的用户 List<Usr> usrList = this.usrDao.getList(pj.getPj()); // 项目的用户组 Map<String, List<PjGrUsr>> pjGrUsrMap = this.getPjGrUsrs(pj.getPj()); // 项目的权限 Map<String, List<PjAuth>> pjAuthMap = this.getPjAuths(pj.getPj()); this.exportSVNPathConf(pj); this.exportPasswdHTTP(pj, usrList); this.exportAuthz(pj, pjGrUsrMap, pjAuthMap); } /** * 导出http(多库)的配置信息 * * @param root * svn root */ private void exportHTTPMutil(File root) { String svnRoot = StringUtils.replace(root.getAbsolutePath(), "\\", "/"); if (!svnRoot.endsWith("/")) { svnRoot += "/"; } // 和这个项目在同一个父目录的所有项目的用户 List<Usr> usrList = this.usrDao.getListByRootPath(svnRoot); // 和这个项目在同一个父目录的所有项目的用户组 Map<String, List<PjGrUsr>> pjGrUsrMap = this .getPjGrUsrsByRootPath(svnRoot); // 和这个项目在同一个父目录的所有项目的权限 Map<String, List<PjAuth>> pjAuthMap = this .getPjAuthsByRootPath(svnRoot); this.exportSVNParentPathConf(root); this.exportPasswdHTTPMutil(root, usrList); this.exportAuthzHTTPMutil(root, pjGrUsrMap, pjAuthMap); } /** * 获取有相同svn root的项目的权限列表 * * @param rootPath * svn root * @return 有相同svn root的项目的权限列表 */ private Map<String, List<PjAuth>> getPjAuthsByRootPath(String rootPath) { Map<String, List<PjAuth>> results = new LinkedHashMap<String, List<PjAuth>>();// <res,List<PjAuth>> List<PjAuth> pjAuthList = this.pjAuthDao.getListByRootPath(rootPath); // 格式化返回数据 for (PjAuth pjAuth : pjAuthList) { List<PjAuth> authList = results.get(pjAuth.getRes()); if (authList == null) { authList = new ArrayList<PjAuth>(); results.put(pjAuth.getRes(), authList); } authList.add(pjAuth); } return results; } /** * 获取项目的权限列表 * * @param pj * 项目 * @return 项目的权限列表 */ private Map<String, List<PjAuth>> getPjAuths(String pj) { Map<String, List<PjAuth>> results = new LinkedHashMap<String, List<PjAuth>>();// <res,List<PjAuth>> List<PjAuth> pjAuthList = this.pjAuthDao.getList(pj); // 格式化返回数据 for (PjAuth pjAuth : pjAuthList) { List<PjAuth> authList = results.get(pjAuth.getRes()); if (authList == null) { authList = new ArrayList<PjAuth>(); results.put(pjAuth.getRes(), authList); } authList.add(pjAuth); } return results; } /** * 获取项目的组列表 * * @param pj * 项目 * @return 项目的组列表 */ private Map<String, List<PjGrUsr>> getPjGrUsrs(String pj) { Map<String, List<PjGrUsr>> results = new LinkedHashMap<String, List<PjGrUsr>>();// <gr,List<PjGrUsr>> List<PjGrUsr> pjGrUsrs = this.pjGrUsrDao.getList(pj); // 格式化返回数据 for (PjGrUsr pjGrUsr : pjGrUsrs) { List<PjGrUsr> grUsrList = results.get(pjGrUsr.getGr()); if (grUsrList == null) { grUsrList = new ArrayList<PjGrUsr>(); results.put(pjGrUsr.getGr(), grUsrList); } grUsrList.add(pjGrUsr); } return results; } /** * 获取有相同svn root的项目的权限列表 * * @param rootPath * svn root * @return 有相同svn root的项目的权限列表 */ private Map<String, List<PjGrUsr>> getPjGrUsrsByRootPath(String rootPath) { Map<String, List<PjGrUsr>> results = new LinkedHashMap<String, List<PjGrUsr>>();// <pj_gr,List<PjGrUsr>> List<PjGrUsr> pjGrUsrs = this.pjGrUsrDao.getListByRootPath(rootPath); // 格式化返回数据 for (PjGrUsr pjGrUsr : pjGrUsrs) { String key = pjGrUsr.getPj() + "_" + pjGrUsr.getGr(); List<PjGrUsr> grUsrList = results.get(key);// 项目ID_组ID see: Issue 4 if (grUsrList == null) { grUsrList = new ArrayList<PjGrUsr>(); results.put(key, grUsrList); } grUsrList.add(pjGrUsr); } return results; } /** * 输出http多库方式的密码文件 * * @param root * svn root * @param usrList * 所有用户列表 */ private void exportPasswdHTTPMutil(File root, List<Usr> usrList) { File outFile = new File(root, "passwd.http"); StringBuffer contents = new StringBuffer(); for (Usr usr : usrList) { // 采用SHA加密 // http://httpd.apache.org/docs/2.2/misc/password_encryptions.html String shaPsw = "{SHA}" + EncryptUtil .encriptSHA1(EncryptUtil.decrypt(usr.getPsw())); contents.append(usr.getUsr()).append(":").append(shaPsw) .append(SEP); } this.write(outFile, contents.toString