如何通过 JAVA Security API 来定性 IBM FileNet P8 内容查询和存储的安全

				
 LoginContext lc = newLoginContext("mysystem", 
           newUserPasswordHandler("username@testdom.local", "password")); 
 lc.login(); 
 // 将 JAAS Subject 与 UserContext 
 UserContext uc = UserContext.get(); 
 uc.pushSubject(lc.getSubject()); 

				
 // Obtain a JAAS Subject and associate it with the UserContext 
 UserContext uc = UserContext.get(); 
 uc.pushSubject(
UserContext.createSubject("connection", "username", "password", "FileNetP8")); 

				
 // 创建 security templates 
 VersioningSecurityTemplate vst1 = 
Factory.VersioningSecurityTemplate.createInstance(os); 

 VersioningSecurityTemplate vst2 = 
Factory.VersioningSecurityTemplate.createInstance(os); 

 ApplicationSecurityTemplate vst3 =
 Factory.ApplicationSecurityTemplate.createInstance(os); 

 SecurityTemplateList stl = Factory.SecurityTemplate.createList(); 
 vst1.set_ApplyStateID(VersionStatusId.RELEASED); 
 vst1.set_TemplatePermissions( 
 setPermissions("#AUTHENTICATED-USERS", AccessLevel.MAJOR_VERSION_DOCUMENT.getValue()) ); 

 vst1.set_DisplayName("Version Template for Released Object"); 
 vst1.set_IsEnabled(Boolean.TRUE); 
 stl.add(vst1); 
 vst2.set_ApplyStateID(VersionStatusId.SUPERSEDED); 
 vst2.set_TemplatePermissions( 
 setPermissions("#AUTHENTICATED-USERS", AccessLevel.VIEW.getValue()) ); 
 vst2.set_DisplayName("Version Template for Superseded Object"); 
 vst2.set_IsEnabled(Boolean.TRUE); 
 stl.add(vst2); 
 vst3.set_ApplyStateID(newId("{21a47705-d20a-4b65-938e-2ddcefa45927}") ); 
  vst3.set_TemplatePermissions( setPermissions("#AUTHENTICATED-USERS", 
  AccessLevel.READ.getValue()+ AccessRight.DELETE_AS_INT ) ); 
 vst3.set_DisplayName("Application Template for Obsolete Objects"); 
 vst3.set_IsEnabled(Boolean.TRUE); 
 stl.add(vst3); 
 // 创建 security policy 
 SecurityPolicy sp = 
Factory.SecurityPolicy.createInstance(os, ClassNames.SECURITY_POLICY); 

 sp.set_SecurityTemplates(stl); 
 sp.set_DisplayName("Security Policy with Version and Application Templates"); 
 sp.set_PreserveDirectPermissions(Boolean.FALSE); 
 sp.save(RefreshMode.REFRESH); 

				
 ClassDefinition cd =	 
 Factory.ClassDefinition.fetchInstance(os, classId, null); 

  SecurityPolicy sp = 
Factory.SecurityPolicy.getInstance(os, ClassNames.SECURITY_POLICY, securityPolicyId); 

  PropertyDefinition pd = 
  getPropertyDefinition(cd.get_PropertyDefinitions(),  ClassNames.SECURITY_POLICY); 

 pd.getProperties().get(PropertyNames.PROPERTY_DEFAULT_OBJECT)).setObjectValue(sp); 
 cd.save(RefreshMode.REFRESH); 

				
 // 获得一个 folder 
				 
 Folder folder = Factory.Folder.fetchInstance(os, folderId, null); 
 DocumentSet ds = folder.get_ContainedDocuments(); 
 Calendar cal = newGregorianCalendar(); 
 intcurrYear = cal.get(Calendar.YEAR); 
 intcurrMonth = cal.get(Calendar.MONTH); 
 // 遍历文档
 Iterator iter = ds.iterator(); 
 while(iter.hasNext()) 
 { 
 Document doc = (Document) iter.next(); 
	 Date docDate = doc.get_DateLastModified(); 
	 cal.setTime(docDate); 
	 if(cal.get(Calendar.YEAR) < currYear && cal.get(Calendar.MONTH) < currMonth ) 
	 { 
	 doc.applySecurityTemplate(newId("{21a47705-d20a-4b65-938e-2ddcefa45927}") ); 
	 doc.save(RefreshMode.REFRESH); 
	 } 
	 } 

				
 securityPolicy sp = Factory.SecurityPolicy.fetchInstance(os, secPolicyId, null); 
 SecurityTemplateList stl = sp.get_SecurityTemplates(); 
 Iterator outerIter = stl.iterator(); 
 while(outerIter.hasNext()) 
  { 
	SecurityTemplate st = (SecurityTemplate) outerIter.next(); 
	
	AccessPermissionDescriptionList apdl = st.get_TemplatePermissionDescriptions(); 
	
	Iterator innerIter = apdl.iterator(); 
	System.out.println("Security template is " + st.get_DisplayName()); 
	
				 
	while(innerIter.hasNext()) 
	
				 { 
	AccessPermissionDescription apd = (AccessPermissionDescription) innerIter.next(); 
	System.out.println("Permission is " + apd.get_DescriptiveText() + "\n" + 
	"Permission type is " + apd.get_PermissionType().toString() + "\n" + 
	"Access mask is " + apd.get_AccessMask() 
	); 
  } 
   } 

				
 // 获得要删除的对象的 class 
 ClassDefinition cd = Factory.ClassDefinition.fetchInstance(os, classId, null); 
 PropertyDefinition pd =
 getPropertyDefinition(cd.get_PropertyDefinitions(), ClassNames.SECURITY_POLICY); 

 SecurityPolicy spTarget = (SecurityPolicy) 
(pd.getProperties().get(PropertyNames.PROPERTY_DEFAULT_OBJECT)).getObjectValue(); 

 Id spTargetId = spTarget.get_Id(); 
 pd.getProperties().get(PropertyNames.PROPERTY_DEFAULT_OBJECT)).setObjectValue(null); 
 cd.save(RefreshMode.REFRESH); 
 SecurityPolicySet sps = os.get_SecurityPolicies(); 
 Iterator outerIter = sps.iterator(); 
 while(outerIter.hasNext()) 
 { 
  SecurityPolicy sp = (SecurityPolicy) outerIter.next(); 
  
if(sp.get_Id().equals(spTargetId) ) 
  { 
  sp.delete(); 
  sp.save(RefreshMode.REFRESH); 
  } 
 } 

				
 // 创建一个新的 permissions list 
 AccessPermissionList apl = Factory.AccessPermission.createList(); 
  // 创建一个新的 access permission 对象
  AccessPermission ap = Factory.AccessPermission.createInstance(); 
  // 设置 access permissions 
  ap.set_GranteeName("test1"); 
  ap.set_AccessType(AccessType.ALLOW); 
  ap.set_AccessMask(newInteger(AccessLevel.FULL_CONTROL_DOCUMENT_AS_INT)); 
  // 添加 permissions 到 list 
  apl.add(ap); 
  // 新建一个 document 然后添加 permissions 
  Document doc = Factory.Document.createInstance(os, ClassNames.DOCUMENT); 
  doc.set_Permissions(apl); 
  // 保存 document 
 doc.getProperties().putValue("DocumentTitle", "Example: Permissions Setting"); 
 doc.save(RefreshMode.REFRESH); 
注意：其他的 Securable 对象都可以调用 set_Permissions() 方法来设置其权限。

				
 Domain domain = Factory.Domain.fetchInstance(conn, "Domain", null); 
 domain.get_MarkingSets();