Put extends BaseCommand { @Override public void cmdExecute(final Message clientMessage, final ServerConnection serverConnection, final SecurityService securityService, long start) throws IOException, InterruptedException { Part regionNamePart = null, keyPart = null, valuePart = null, callbackArgPart = null; String regionName = null; Object callbackArg = null, key = null; Part eventPart = null; String errMessage = ""; CachedRegionHelper crHelper = serverConnection.getCachedRegionHelper(); CacheServerStats stats = serverConnection.getCacheServerStats(); serverConnection.setAsTrue(REQUIRES_RESPONSE); { long oldStart = start; start = DistributionStats.getStatTime(); stats.incReadPutRequestTime(start - oldStart); } regionNamePart = clientMessage.getPart(0); keyPart = clientMessage.getPart(1); valuePart = clientMessage.getPart(2); eventPart = clientMessage.getPart(3); if (clientMessage.getNumberOfParts() > 4) { callbackArgPart = clientMessage.getPart(4); try { callbackArg = callbackArgPart.getObject(); } catch (Exception e) { writeException(clientMessage, e, false, serverConnection); serverConnection.setAsTrue(RESPONDED); return; } } regionName = regionNamePart.getCachedString(); try { key = keyPart.getStringOrObject(); } catch (Exception e) { writeException(clientMessage, e, false, serverConnection); serverConnection.setAsTrue(RESPONDED); return; } if (logger.isTraceEnabled()) { logger.trace("{}: Received put request ({} bytes) from {} for region {} key {} value {}", serverConnection.getName(), clientMessage.getPayloadLength(), serverConnection.getSocketString(), regionName, key, valuePart); } if (key == null || regionName == null) { if (key == null) { logger.warn("{} The input key for the put request is null", serverConnection.getName()); errMessage = "The input key for the put request is null"; } if (regionName == null) { logger.warn("{} The input region name for the put request is null", serverConnection.getName()); errMessage = "The input region name for the put request is null"; } writeErrorResponse(clientMessage, MessageType.PUT_DATA_ERROR, errMessage, serverConnection); serverConnection.setAsTrue(RESPONDED); return; } LocalRegion region = (LocalRegion) serverConnection.getCache().getRegion(regionName); if (region == null) { String reason = ": Region was not found during put request"; writeRegionDestroyedEx(clientMessage, regionName, reason, serverConnection); serverConnection.setAsTrue(RESPONDED); return; } if (valuePart.isNull() && region.containsKey(key)) { logger.info("{}: Attempted to put a null value for existing key {}", serverConnection.getName(), key); errMessage = "Attempted to put a null value for existing key %s"; writeErrorResponse(clientMessage, MessageType.PUT_DATA_ERROR, errMessage, serverConnection); serverConnection.setAsTrue(RESPONDED); return; } ByteBuffer eventIdPartsBuffer = ByteBuffer.wrap(eventPart.getSerializedForm()); long threadId = EventID.readEventIdPartsFromOptmizedByteArray(eventIdPartsBuffer); long sequenceId = EventID.readEventIdPartsFromOptmizedByteArray(eventIdPartsBuffer); EventID eventId = new EventID(serverConnection.getEventMemberIDByteArray(), threadId, sequenceId); try { byte[] value = valuePart.getSerializedForm(); boolean isObject = valuePart.isObject(); securityService.authorize(Resource.DATA, Operation.WRITE, regionName, key); AuthorizeRequest authzRequest = serverConnection.getAuthzRequest(); if (authzRequest != null) { if (DynamicRegionFactory.regionIsDynamicRegionList(regionName)) { authzRequest.createRegionAuthorize((String) key); } else if (!region.isUsedForMetaRegion()) { PutOperationContext putContext = authzRequest.putAuthorize(regionName, key, value, isObject, callbackArg); value = putContext.getSerializedValue(); isObject = putContext.isObject(); callbackArg = putContext.getCallbackArg(); } } boolean result = false; if (value == null) { result = region.basicBridgeCreate(key, null, true, callbackArg, serverConnection.getProxyID(), true, new EventIDHolder(eventId), false); } else { result = region.basicBridgePut(key, value, null, isObject, callbackArg, serverConnection.getProxyID(), true, new EventIDHolder(eventId)); } if (result) { serverConnection.setModificationInfo(true, regionName, key); } else { String message = "%s: Failed to put entry for region %s key %s value %s"; String s = String.format(message, serverConnection.getName(), regionName, key, valuePart); logger.info(s); throw new Exception(s); } } catch (RegionDestroyedException rde) { writeException(clientMessage, rde, false, serverConnection); serverConnection.setAsTrue(RESPONDED); return; } catch (ResourceException re) { writeException(clientMessage, re, false, serverConnection); serverConnection.setAsTrue(RESPONDED); return; } catch (Exception ce) { checkForInterrupt(serverConnection, ce); writeException(clientMessage, ce, false, serverConnection); serverConnection.setAsTrue(RESPONDED); if (ce instanceof GemFireSecurityException) { if (logger.isDebugEnabled()) { logger.debug("{}: Unexpected Security exception", serverConnection.getName(), ce); } } else { logger.warn(String.format("%s: Unexpected Exception", serverConnection.getName()), ce); } return; } finally { long oldStart = start; start = DistributionStats.getStatTime(); stats.incProcessPutTime(start - oldStart); } writeReply(clientMessage, serverConnection); serverConnection.setAsTrue(RESPONDED); if (logger.isDebugEnabled()) { logger.debug("{}: Sent put response back to {} for region {} key {} value {}", serverConnection.getName(), serverConnection.getSocketString(), regionName, key, valuePart); } stats.incWritePutResponseTime(DistributionStats.getStatTime() - start); }  static Command getCommand(); @Override void cmdExecute(final Message clientMessage, final ServerConnection serverConnection,
      final SecurityService securityService, long start);  }
@Test public void noSecurityShouldSucceed() throws Exception { when(this.securityService.isClientSecurityRequired()).thenReturn(false); this.put.cmdExecute(this.message, this.serverConnection, this.securityService, 0); verify(this.replyMessage).send(this.serverConnection); }
@Test public void integratedSecurityShouldSucceedIfAuthorized() throws Exception { when(this.securityService.isClientSecurityRequired()).thenReturn(true); when(this.securityService.isIntegratedSecurity()).thenReturn(true); this.put.cmdExecute(this.message, this.serverConnection, this.securityService, 0); verify(this.securityService).authorize(Resource.DATA, Operation.WRITE, REGION_NAME, KEY); verify(this.replyMessage).send(this.serverConnection); }
@Test public void integratedSecurityShouldThrowIfNotAuthorized() throws Exception { when(this.securityService.isClientSecurityRequired()).thenReturn(true); when(this.securityService.isIntegratedSecurity()).thenReturn(true); doThrow(new NotAuthorizedException("")).when(this.securityService).authorize(Resource.DATA, Operation.WRITE, REGION_NAME, KEY); this.put.cmdExecute(this.message, this.serverConnection, this.securityService, 0); verify(this.securityService).authorize(Resource.DATA, Operation.WRITE, REGION_NAME, KEY); verify(this.errorResponseMessage).send(this.serverConnection); }
@Test public void oldSecurityShouldSucceedIfAuthorized() throws Exception { when(this.securityService.isClientSecurityRequired()).thenReturn(true); when(this.securityService.isIntegratedSecurity()).thenReturn(false); this.put.cmdExecute(this.message, this.serverConnection, this.securityService, 0); ArgumentCaptor<byte[]> argument = ArgumentCaptor.forClass(byte[].class); verify(this.replyMessage).addBytesPart(argument.capture()); assertThat(argument.getValue()).isEqualTo(OK_BYTES); verify(this.authzRequest).putAuthorize(eq(REGION_NAME), eq(KEY), eq(VALUE), eq(true), eq(CALLBACK_ARG)); verify(this.replyMessage).send(this.serverConnection); }
@Test public void oldSecurityShouldFailIfNotAuthorized() throws Exception { when(this.securityService.isClientSecurityRequired()).thenReturn(true); when(this.securityService.isIntegratedSecurity()).thenReturn(false); doThrow(new NotAuthorizedException("")).when(this.authzRequest).putAuthorize(eq(REGION_NAME), eq(KEY), eq(VALUE), eq(true), eq(CALLBACK_ARG)); this.put.cmdExecute(this.message, this.serverConnection, this.securityService, 0); verify(this.authzRequest).putAuthorize(eq(REGION_NAME), eq(KEY), eq(VALUE), eq(true), eq(CALLBACK_ARG)); ArgumentCaptor<NotAuthorizedException> argument = ArgumentCaptor.forClass(NotAuthorizedException.class); verify(this.errorResponseMessage).addObjPart(argument.capture()); assertThat(argument.getValue()).isExactlyInstanceOf(NotAuthorizedException.class); verify(this.errorResponseMessage).send(this.serverConnection); }