# CommunityInstanceAccessControlExtension.java

    /*
     * Copyright (C) 2000 - 2024 Silverpeas
     *
     * This program is free software: you can redistribute it and/or modify
     * it under the terms of the GNU Affero General Public License as
     * published by the Free Software Foundation, either version 3 of the
     * License, or (at your option) any later version.
     *
     * As a special exception to the terms and conditions of version 3.0 of
     * the GPL, you may redistribute this Program in connection with Free/Libre
     * Open Source Software ("FLOSS") applications as described in Silverpeas's
     * FLOSS exception.  You should have received a copy of the text describing
     * the FLOSS exception, and it is also available here:
     * "https://www.silverpeas.org/legal/floss_exception.html"
     *
     * This program is distributed in the hope that it will be useful,
     * but WITHOUT ANY WARRANTY; without even the implied warranty of
     * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
     * GNU Affero General Public License for more details.
     *
     * You should have received a copy of the GNU Affero General Public License
     * along with this program.  If not, see <http://www.gnu.org/licenses/>.
     */

    package org.silverpeas.components.community.security.authorization;

    import org.silverpeas.core.admin.component.model.SilverpeasComponentInstance;
    import org.silverpeas.core.admin.user.model.User;
    import org.silverpeas.core.annotation.Service;
    import org.silverpeas.core.security.authorization.AccessControlContext;
    import org.silverpeas.core.security.authorization.ComponentAccessController;
    import org.silverpeas.core.security.authorization.DefaultInstanceAccessControlExtension;

    import javax.inject.Named;

    import static java.util.Optional.ofNullable;
    import static org.silverpeas.core.admin.space.SpaceInst.SPACE_KEY_PREFIX;
    import static org.silverpeas.kernel.util.StringUtil.EMPTY;

    /**
     * @author silveryocha
     */
    @Named
    @Service
    public class CommunityInstanceAccessControlExtension
        extends DefaultInstanceAccessControlExtension {

      static final String CAN_ANONYMOUS_ACCESS_INSTANCE = "CommunityCanAnonymousAccessInstance";

      @Override
      protected boolean mustUserBeComponentInstanceAdminIfManagerOfParentSpace(
          final ComponentAccessController.DataManager dataManager, final User user,
          final SilverpeasComponentInstance componentInstance) {
        return dataManager.getManageableSpaceIds(user.getId())
            .contains(componentInstance.getSpaceId().replace(SPACE_KEY_PREFIX, EMPTY));
      }

      @Override
      protected boolean canAnonymousAccessInstance(final AccessControlContext context) {
        return ofNullable(context.get(CAN_ANONYMOUS_ACCESS_INSTANCE, Boolean.class)).orElse(false);
      }
    }