forked from community/device-mgt-core
Merge branch 'master' of https://github.com/wso2/carbon-device-mgt
hasuniea
9 years ago
commit
b17cc43476
@ -0,0 +1,61 @@
|
|||||||
|
/*
|
||||||
|
* Copyright (c) 2015, WSO2 Inc. (http://www.wso2.org) All Rights Reserved.
|
||||||
|
*
|
||||||
|
* WSO2 Inc. licenses this file to you under the Apache License,
|
||||||
|
* Version 2.0 (the "License"); you may not use this file except
|
||||||
|
* in compliance with the License.
|
||||||
|
* you may obtain a copy of the License at
|
||||||
|
*
|
||||||
|
* http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
*
|
||||||
|
* Unless required by applicable law or agreed to in writing,
|
||||||
|
* software distributed under the License is distributed on an
|
||||||
|
* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
|
||||||
|
* KIND, either express or implied. See the License for the
|
||||||
|
* specific language governing permissions and limitations
|
||||||
|
* under the License.
|
||||||
|
*/
|
||||||
|
|
||||||
|
package org.wso2.carbon.device.mgt.common.authorization;
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Custom exception class which wraps exceptions occurred inside DeviceAccessAuthorization service.
|
||||||
|
*/
|
||||||
|
public class DeviceAccessAuthorizationException extends Exception {
|
||||||
|
|
||||||
|
private static final long serialVersionUID = -3151279331929070297L;
|
||||||
|
|
||||||
|
private String errorMessage;
|
||||||
|
|
||||||
|
public String getErrorMessage() {
|
||||||
|
return errorMessage;
|
||||||
|
}
|
||||||
|
|
||||||
|
public void setErrorMessage(String errorMessage) {
|
||||||
|
this.errorMessage = errorMessage;
|
||||||
|
}
|
||||||
|
|
||||||
|
public DeviceAccessAuthorizationException(String msg, Exception nestedEx) {
|
||||||
|
super(msg, nestedEx);
|
||||||
|
setErrorMessage(msg);
|
||||||
|
}
|
||||||
|
|
||||||
|
public DeviceAccessAuthorizationException(String message, Throwable cause) {
|
||||||
|
super(message, cause);
|
||||||
|
setErrorMessage(message);
|
||||||
|
}
|
||||||
|
|
||||||
|
public DeviceAccessAuthorizationException(String msg) {
|
||||||
|
super(msg);
|
||||||
|
setErrorMessage(msg);
|
||||||
|
}
|
||||||
|
|
||||||
|
public DeviceAccessAuthorizationException() {
|
||||||
|
super();
|
||||||
|
}
|
||||||
|
|
||||||
|
public DeviceAccessAuthorizationException(Throwable cause) {
|
||||||
|
super(cause);
|
||||||
|
}
|
||||||
|
|
||||||
|
}
|
||||||
@ -0,0 +1,79 @@
|
|||||||
|
/*
|
||||||
|
* Copyright (c) 2015, WSO2 Inc. (http://www.wso2.org) All Rights Reserved.
|
||||||
|
*
|
||||||
|
* WSO2 Inc. licenses this file to you under the Apache License,
|
||||||
|
* Version 2.0 (the "License"); you may not use this file except
|
||||||
|
* in compliance with the License.
|
||||||
|
* you may obtain a copy of the License at
|
||||||
|
*
|
||||||
|
* http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
*
|
||||||
|
* Unless required by applicable law or agreed to in writing,
|
||||||
|
* software distributed under the License is distributed on an
|
||||||
|
* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
|
||||||
|
* KIND, either express or implied. See the License for the
|
||||||
|
* specific language governing permissions and limitations
|
||||||
|
* under the License.
|
||||||
|
*/
|
||||||
|
|
||||||
|
package org.wso2.carbon.device.mgt.common.authorization;
|
||||||
|
|
||||||
|
import org.wso2.carbon.device.mgt.common.DeviceIdentifier;
|
||||||
|
|
||||||
|
import java.util.List;
|
||||||
|
|
||||||
|
|
||||||
|
/**
|
||||||
|
* This represents the contract of DeviceAccessAuthorization service which will be used to check the authorization when
|
||||||
|
* accessing the device information and performing MDM operations on devices.
|
||||||
|
*/
|
||||||
|
public interface DeviceAccessAuthorizationService {
|
||||||
|
|
||||||
|
/**
|
||||||
|
* This method will check whether the currently logged-in user has the access to the device identified by the given
|
||||||
|
* DeviceIdentifier.
|
||||||
|
*
|
||||||
|
* @param deviceIdentifier - DeviceIdentifier of the device to be checked.
|
||||||
|
* @return Boolean authorization result.
|
||||||
|
* @throws DeviceAccessAuthorizationException if something goes wrong when checking the authorization.
|
||||||
|
*/
|
||||||
|
boolean isUserAuthorized(DeviceIdentifier deviceIdentifier) throws DeviceAccessAuthorizationException;
|
||||||
|
|
||||||
|
/**
|
||||||
|
* This method will check whether the currently logged-in user has the access to the devices identified by the given
|
||||||
|
* DeviceIdentifier list.
|
||||||
|
*
|
||||||
|
* @param deviceIdentifiers - List of DeviceIdentifiers to be checked for authorization.
|
||||||
|
* @return DeviceAuthorizationResult - Authorization result including the list of authorized devices &
|
||||||
|
* unauthorized devices.
|
||||||
|
* @throws DeviceAccessAuthorizationException if something goes wrong when checking the authorization.
|
||||||
|
*/
|
||||||
|
DeviceAuthorizationResult isUserAuthorized(List<DeviceIdentifier> deviceIdentifiers) throws
|
||||||
|
DeviceAccessAuthorizationException;
|
||||||
|
|
||||||
|
/**
|
||||||
|
* This method will check whether the given user has the access to the device identified by the given
|
||||||
|
* DeviceIdentifier.
|
||||||
|
*
|
||||||
|
* @param deviceIdentifier - DeviceIdentifier of the device to be checked.
|
||||||
|
* @param username - Username of the user to be checked for authorization.
|
||||||
|
* @return Boolean authorization result.
|
||||||
|
* @throws DeviceAccessAuthorizationException if something goes wrong when checking the authorization.
|
||||||
|
*/
|
||||||
|
boolean isUserAuthorized(DeviceIdentifier deviceIdentifier, String username) throws
|
||||||
|
DeviceAccessAuthorizationException;
|
||||||
|
|
||||||
|
/**
|
||||||
|
* This method will check whether the given user has the access to the devices identified by the given
|
||||||
|
* DeviceIdentifier list.
|
||||||
|
*
|
||||||
|
* @param deviceIdentifiers - List of DeviceIdentifiers to be checked for authorization.
|
||||||
|
* @param username - Username of the user to be checked for authorization.
|
||||||
|
* @return DeviceAuthorizationResult - Authorization result including the list of authorized devices &
|
||||||
|
* unauthorized devices.
|
||||||
|
* @throws DeviceAccessAuthorizationException if something goes wrong when checking the authorization.
|
||||||
|
*/
|
||||||
|
DeviceAuthorizationResult isUserAuthorized(List<DeviceIdentifier> deviceIdentifiers, String username) throws
|
||||||
|
DeviceAccessAuthorizationException;
|
||||||
|
|
||||||
|
}
|
||||||
@ -0,0 +1,58 @@
|
|||||||
|
/*
|
||||||
|
* Copyright (c) 2015, WSO2 Inc. (http://www.wso2.org) All Rights Reserved.
|
||||||
|
*
|
||||||
|
* WSO2 Inc. licenses this file to you under the Apache License,
|
||||||
|
* Version 2.0 (the "License"); you may not use this file except
|
||||||
|
* in compliance with the License.
|
||||||
|
* you may obtain a copy of the License at
|
||||||
|
*
|
||||||
|
* http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
*
|
||||||
|
* Unless required by applicable law or agreed to in writing,
|
||||||
|
* software distributed under the License is distributed on an
|
||||||
|
* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
|
||||||
|
* KIND, either express or implied. See the License for the
|
||||||
|
* specific language governing permissions and limitations
|
||||||
|
* under the License.
|
||||||
|
*/
|
||||||
|
|
||||||
|
package org.wso2.carbon.device.mgt.common.authorization;
|
||||||
|
|
||||||
|
import org.wso2.carbon.device.mgt.common.DeviceIdentifier;
|
||||||
|
|
||||||
|
import java.util.ArrayList;
|
||||||
|
import java.util.List;
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Represents a DeviceAuthorizationResult including a list of authorized devices and a list of unauthorized devices.
|
||||||
|
*/
|
||||||
|
public class DeviceAuthorizationResult {
|
||||||
|
|
||||||
|
private List<DeviceIdentifier> authorizedDevices = new ArrayList<>();
|
||||||
|
private List<DeviceIdentifier> unauthorizedDevices = new ArrayList<>();
|
||||||
|
|
||||||
|
public List<DeviceIdentifier> getAuthorizedDevices() {
|
||||||
|
return authorizedDevices;
|
||||||
|
}
|
||||||
|
|
||||||
|
public void setAuthorizedDevices(List<DeviceIdentifier> authorizedDevices) {
|
||||||
|
this.authorizedDevices = authorizedDevices;
|
||||||
|
}
|
||||||
|
|
||||||
|
public void setUnauthorizedDevices(
|
||||||
|
List<DeviceIdentifier> unauthorizedDevices) {
|
||||||
|
this.unauthorizedDevices = unauthorizedDevices;
|
||||||
|
}
|
||||||
|
|
||||||
|
public void addAuthorizedDevice(DeviceIdentifier deviceIdentifier) {
|
||||||
|
authorizedDevices.add(deviceIdentifier);
|
||||||
|
}
|
||||||
|
|
||||||
|
public List<DeviceIdentifier> getUnauthorizedDevices() {
|
||||||
|
return unauthorizedDevices;
|
||||||
|
}
|
||||||
|
|
||||||
|
public void addUnauthorizedDevice(DeviceIdentifier deviceIdentifier) {
|
||||||
|
unauthorizedDevices.add(deviceIdentifier);
|
||||||
|
}
|
||||||
|
}
|
||||||
@ -0,0 +1,262 @@
|
|||||||
|
/*
|
||||||
|
* Copyright (c) 2015, WSO2 Inc. (http://www.wso2.org) All Rights Reserved.
|
||||||
|
*
|
||||||
|
* WSO2 Inc. licenses this file to you under the Apache License,
|
||||||
|
* Version 2.0 (the "License"); you may not use this file except
|
||||||
|
* in compliance with the License.
|
||||||
|
* you may obtain a copy of the License at
|
||||||
|
*
|
||||||
|
* http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
*
|
||||||
|
* Unless required by applicable law or agreed to in writing,
|
||||||
|
* software distributed under the License is distributed on an
|
||||||
|
* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
|
||||||
|
* KIND, either express or implied. See the License for the
|
||||||
|
* specific language governing permissions and limitations
|
||||||
|
* under the License.
|
||||||
|
*/
|
||||||
|
|
||||||
|
package org.wso2.carbon.device.mgt.core.authorization;
|
||||||
|
|
||||||
|
import org.apache.commons.logging.Log;
|
||||||
|
import org.apache.commons.logging.LogFactory;
|
||||||
|
import org.wso2.carbon.context.PrivilegedCarbonContext;
|
||||||
|
import org.wso2.carbon.device.mgt.common.Device;
|
||||||
|
import org.wso2.carbon.device.mgt.common.DeviceIdentifier;
|
||||||
|
import org.wso2.carbon.device.mgt.common.DeviceManagementException;
|
||||||
|
import org.wso2.carbon.device.mgt.common.EnrolmentInfo;
|
||||||
|
import org.wso2.carbon.device.mgt.common.authorization.DeviceAccessAuthorizationException;
|
||||||
|
import org.wso2.carbon.device.mgt.common.authorization.DeviceAccessAuthorizationService;
|
||||||
|
import org.wso2.carbon.device.mgt.common.authorization.DeviceAuthorizationResult;
|
||||||
|
import org.wso2.carbon.device.mgt.common.permission.mgt.Permission;
|
||||||
|
import org.wso2.carbon.device.mgt.common.permission.mgt.PermissionManagementException;
|
||||||
|
import org.wso2.carbon.device.mgt.core.internal.DeviceManagementDataHolder;
|
||||||
|
import org.wso2.carbon.device.mgt.core.permission.mgt.PermissionUtils;
|
||||||
|
import org.wso2.carbon.user.api.UserRealm;
|
||||||
|
import org.wso2.carbon.user.api.UserStoreException;
|
||||||
|
import org.wso2.carbon.utils.multitenancy.MultitenantUtils;
|
||||||
|
|
||||||
|
import java.util.HashMap;
|
||||||
|
import java.util.List;
|
||||||
|
import java.util.Map;
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Implementation of DeviceAccessAuthorization service.
|
||||||
|
*/
|
||||||
|
public class DeviceAccessAuthorizationServiceImpl implements DeviceAccessAuthorizationService {
|
||||||
|
|
||||||
|
private final static String EMM_ADMIN_PERMISSION = "/device-mgt/admin-device-access";
|
||||||
|
private static Log log = LogFactory.getLog(DeviceAccessAuthorizationServiceImpl.class);
|
||||||
|
|
||||||
|
public static final class PermissionMethod {
|
||||||
|
private PermissionMethod() {
|
||||||
|
throw new AssertionError();
|
||||||
|
}
|
||||||
|
|
||||||
|
public static final String READ = "read";
|
||||||
|
public static final String WRITE = "write";
|
||||||
|
public static final String DELETE = "delete";
|
||||||
|
public static final String ACTION = "action";
|
||||||
|
public static final String UI_EXECUTE = "ui.execute";
|
||||||
|
}
|
||||||
|
|
||||||
|
public DeviceAccessAuthorizationServiceImpl() {
|
||||||
|
try {
|
||||||
|
this.addAdminPermissionToRegistry();
|
||||||
|
} catch (PermissionManagementException e) {
|
||||||
|
log.error("Unable to add the emm-admin permission to the registry.", e);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
@Override
|
||||||
|
public boolean isUserAuthorized(DeviceIdentifier deviceIdentifier) throws DeviceAccessAuthorizationException {
|
||||||
|
boolean status;
|
||||||
|
String username = this.getUserName();
|
||||||
|
int tenantId = this.getTenantId();
|
||||||
|
if (username == null || username.isEmpty()) {
|
||||||
|
return false;
|
||||||
|
}
|
||||||
|
try {
|
||||||
|
//Check for admin users. If the user is an admin user we authorize the access to that device.
|
||||||
|
status = isAdminUser(username, tenantId);
|
||||||
|
} catch (UserStoreException e) {
|
||||||
|
throw new DeviceAccessAuthorizationException("Unable to authorize the access to device : " +
|
||||||
|
deviceIdentifier.getId() + " for the user : " + username, e);
|
||||||
|
}
|
||||||
|
//Check for device ownership. If the user is the owner of the device we allow the access.
|
||||||
|
if (!status) {
|
||||||
|
try {
|
||||||
|
Device device = DeviceManagementDataHolder.getInstance().getDeviceManagementProvider().
|
||||||
|
getDevice(deviceIdentifier);
|
||||||
|
EnrolmentInfo enrolmentInfo = device.getEnrolmentInfo();
|
||||||
|
if (enrolmentInfo != null && username.equalsIgnoreCase(enrolmentInfo.getOwner())) {
|
||||||
|
status = true;
|
||||||
|
}
|
||||||
|
} catch (DeviceManagementException e) {
|
||||||
|
throw new DeviceAccessAuthorizationException("Unable to authorize the access to device : " +
|
||||||
|
deviceIdentifier.getId() + " for the user : " + username, e);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
return status;
|
||||||
|
}
|
||||||
|
|
||||||
|
@Override
|
||||||
|
public DeviceAuthorizationResult isUserAuthorized(List<DeviceIdentifier> deviceIdentifiers) throws
|
||||||
|
DeviceAccessAuthorizationException {
|
||||||
|
boolean status;
|
||||||
|
DeviceAuthorizationResult deviceAuthorizationResult = new DeviceAuthorizationResult();
|
||||||
|
String username = this.getUserName();
|
||||||
|
int tenantId = this.getTenantId();
|
||||||
|
if (username == null || username.isEmpty()) {
|
||||||
|
return deviceAuthorizationResult;
|
||||||
|
}
|
||||||
|
try {
|
||||||
|
//Check for admin users. If the user is an admin user we authorize the access to that device.
|
||||||
|
status = isAdminUser(username, tenantId);
|
||||||
|
} catch (UserStoreException e) {
|
||||||
|
throw new DeviceAccessAuthorizationException("Unable to authorize the access to devices for the user : " +
|
||||||
|
username, e);
|
||||||
|
}
|
||||||
|
//Check for device ownership. If the user is the owner of the device we allow the access.
|
||||||
|
if (!status) {
|
||||||
|
try {
|
||||||
|
//Get the list of devices of the user
|
||||||
|
List<Device> devicesOfUser = DeviceManagementDataHolder.getInstance().getDeviceManagementProvider().
|
||||||
|
getDevicesOfUser(username);
|
||||||
|
//Convert device-list to a Map
|
||||||
|
Map<String, String> ownershipData = this.getOwnershipOfDevices(devicesOfUser);
|
||||||
|
for (DeviceIdentifier deviceIdentifier : deviceIdentifiers) {
|
||||||
|
if (ownershipData.containsKey(deviceIdentifier.getId())) {
|
||||||
|
deviceAuthorizationResult.addAuthorizedDevice(deviceIdentifier);
|
||||||
|
} else {
|
||||||
|
deviceAuthorizationResult.addUnauthorizedDevice(deviceIdentifier);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
} catch (DeviceManagementException e) {
|
||||||
|
throw new DeviceAccessAuthorizationException("Unable to authorize the access to devices for the user : "
|
||||||
|
+ username, e);
|
||||||
|
}
|
||||||
|
} else {
|
||||||
|
deviceAuthorizationResult.setAuthorizedDevices(deviceIdentifiers);
|
||||||
|
}
|
||||||
|
return deviceAuthorizationResult;
|
||||||
|
}
|
||||||
|
|
||||||
|
@Override
|
||||||
|
public boolean isUserAuthorized(DeviceIdentifier deviceIdentifier, String username)
|
||||||
|
throws DeviceAccessAuthorizationException {
|
||||||
|
boolean status;
|
||||||
|
int tenantId = this.getTenantId();
|
||||||
|
if (username == null || username.isEmpty()) {
|
||||||
|
return false;
|
||||||
|
}
|
||||||
|
try {
|
||||||
|
//Check for admin users. If the user is an admin user we authorize the access to that device.
|
||||||
|
status = isAdminUser(username, tenantId);
|
||||||
|
} catch (UserStoreException e) {
|
||||||
|
throw new DeviceAccessAuthorizationException("Unable to authorize the access to device : " +
|
||||||
|
deviceIdentifier.getId() + " for the user : " + username, e);
|
||||||
|
}
|
||||||
|
//Check for device ownership. If the user is the owner of the device we allow the access.
|
||||||
|
if (!status) {
|
||||||
|
try {
|
||||||
|
Device device = DeviceManagementDataHolder.getInstance().getDeviceManagementProvider().
|
||||||
|
getDevice(deviceIdentifier);
|
||||||
|
EnrolmentInfo enrolmentInfo = device.getEnrolmentInfo();
|
||||||
|
if (enrolmentInfo != null && username.equalsIgnoreCase(enrolmentInfo.getOwner())) {
|
||||||
|
status = true;
|
||||||
|
}
|
||||||
|
} catch (DeviceManagementException e) {
|
||||||
|
throw new DeviceAccessAuthorizationException("Unable to authorize the access to device : " +
|
||||||
|
deviceIdentifier.getId() + " for the user : " + username, e);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
return status;
|
||||||
|
}
|
||||||
|
|
||||||
|
@Override
|
||||||
|
public DeviceAuthorizationResult isUserAuthorized(List<DeviceIdentifier> deviceIdentifiers, String username)
|
||||||
|
throws DeviceAccessAuthorizationException {
|
||||||
|
boolean status;
|
||||||
|
int tenantId = this.getTenantId();
|
||||||
|
DeviceAuthorizationResult deviceAuthorizationResult = new DeviceAuthorizationResult();
|
||||||
|
if (username == null || username.isEmpty()) {
|
||||||
|
return null;
|
||||||
|
}
|
||||||
|
try {
|
||||||
|
//Check for admin users. If the user is an admin user we authorize the access to that device.
|
||||||
|
status = isAdminUser(username, tenantId);
|
||||||
|
} catch (UserStoreException e) {
|
||||||
|
throw new DeviceAccessAuthorizationException("Unable to authorize the access to devices for the user : " +
|
||||||
|
username, e);
|
||||||
|
}
|
||||||
|
//Check for device ownership. If the user is the owner of the device we allow the access.
|
||||||
|
if (!status) {
|
||||||
|
try {
|
||||||
|
Device device;
|
||||||
|
EnrolmentInfo enrolmentInfo;
|
||||||
|
for (DeviceIdentifier deviceIdentifier : deviceIdentifiers) {
|
||||||
|
device = DeviceManagementDataHolder.getInstance().getDeviceManagementProvider().
|
||||||
|
getDevice(deviceIdentifier);
|
||||||
|
enrolmentInfo = device.getEnrolmentInfo();
|
||||||
|
if (enrolmentInfo != null && username.equalsIgnoreCase(enrolmentInfo.getOwner())) {
|
||||||
|
deviceAuthorizationResult.addAuthorizedDevice(deviceIdentifier);
|
||||||
|
} else {
|
||||||
|
deviceAuthorizationResult.addUnauthorizedDevice(deviceIdentifier);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
} catch (DeviceManagementException e) {
|
||||||
|
throw new DeviceAccessAuthorizationException("Unable to authorize the access to devices for the user : "
|
||||||
|
+ username, e);
|
||||||
|
}
|
||||||
|
} else {
|
||||||
|
deviceAuthorizationResult.setAuthorizedDevices(deviceIdentifiers);
|
||||||
|
}
|
||||||
|
return deviceAuthorizationResult;
|
||||||
|
}
|
||||||
|
|
||||||
|
private boolean isAdminUser(String username, int tenantId) throws UserStoreException {
|
||||||
|
UserRealm userRealm = DeviceManagementDataHolder.getInstance().getRealmService().getTenantUserRealm(tenantId);
|
||||||
|
if (userRealm != null && userRealm.getAuthorizationManager() != null) {
|
||||||
|
return userRealm.getAuthorizationManager()
|
||||||
|
.isUserAuthorized(username, PermissionUtils.getAbsolutePermissionPath(EMM_ADMIN_PERMISSION),
|
||||||
|
PermissionMethod.UI_EXECUTE);
|
||||||
|
}
|
||||||
|
return false;
|
||||||
|
}
|
||||||
|
|
||||||
|
private String getUserName() {
|
||||||
|
String username = PrivilegedCarbonContext.getThreadLocalCarbonContext().getUsername();
|
||||||
|
String tenantDomain = MultitenantUtils.getTenantDomain(username);
|
||||||
|
if (username.endsWith(tenantDomain)) {
|
||||||
|
return username.substring(0, username.lastIndexOf("@"));
|
||||||
|
}
|
||||||
|
return username;
|
||||||
|
}
|
||||||
|
|
||||||
|
private int getTenantId() {
|
||||||
|
return PrivilegedCarbonContext.getThreadLocalCarbonContext().getTenantId();
|
||||||
|
}
|
||||||
|
|
||||||
|
private boolean addAdminPermissionToRegistry() throws PermissionManagementException {
|
||||||
|
Permission permission = new Permission();
|
||||||
|
permission.setPath(PermissionUtils.getAbsolutePermissionPath(EMM_ADMIN_PERMISSION));
|
||||||
|
return PermissionUtils.putPermission(permission);
|
||||||
|
}
|
||||||
|
|
||||||
|
private Map<String, String> getOwnershipOfDevices(List<Device> devices) {
|
||||||
|
Map<String, String> ownershipData = new HashMap<>();
|
||||||
|
EnrolmentInfo enrolmentInfo;
|
||||||
|
String owner;
|
||||||
|
for (Device device : devices) {
|
||||||
|
enrolmentInfo = device.getEnrolmentInfo();
|
||||||
|
if (enrolmentInfo != null) {
|
||||||
|
owner = enrolmentInfo.getOwner();
|
||||||
|
if (owner != null && !owner.isEmpty()) {
|
||||||
|
ownershipData.put(device.getDeviceIdentifier(), owner);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
return ownershipData;
|
||||||
|
}
|
||||||
|
}
|
||||||
Loading…
Reference in new issue