MCR-3753 add command to delete all permissions

Author: toKrause

mycore-base/src/main/java/org/mycore/frontend/cli/MCRAccessCommands.java

@@ -36,6 +36,9 @@
 import org.jdom2.output.XMLOutputter;
 import org.mycore.access.MCRAccessManager;
 import org.mycore.access.MCRRuleAccessInterface;
+import org.mycore.access.mcrimpl.MCRAccessStore;
+import org.mycore.access.mcrimpl.MCRRuleMapping;
+import org.mycore.access.mcrimpl.MCRRuleStore;
 import org.mycore.common.MCRException;
 import org.mycore.common.config.MCRConfiguration2;
 import org.mycore.common.xsl.uriresolver.MCRURIResolver;
@@ -155,6 +158,34 @@ public static void deleteAllPermissions() {
         }
     }
 
+    /**
+     * delete all permissions and rules
+     * {@link #permissionUpdateForID(String, String, String)} and
+     * {@link #permissionFileUpdateForID(String, String, String)}
+     */
+    @MCRCommand(syntax = "delete all acl rules and mappings",
+            help = "Remove all permission and rule entries from the Access Control System.",
+            order = 35)
+    public static void deleteAllAclRulesAndMappings() {
+        MCRAccessStore accessStore = MCRAccessStore.obtainInstance();
+        Collection<String> accessIds = accessStore.getDistinctStringIDs();
+        for (String accessId : accessIds) {
+            Collection<String> pools = accessStore.getPoolsForObject(accessId);
+            for (String pool : pools) {
+                MCRRuleMapping rule = accessStore.getAccessDefinition(pool, accessId);
+                if (LOGGER.isInfoEnabled()) {
+                    LOGGER.info("deleting {} / {} / {}", accessId, pool, rule.getRuleId());
+                }
+                accessStore.deleteAccessDefinition(rule);
+            }
+        }
+        MCRRuleStore ruleStore = MCRRuleStore.obtainInstance();
+        Collection<String> ruleIds = ruleStore.retrieveAllIDs();
+        for (String ruleId : ruleIds) {
+            ruleStore.deleteRule(ruleId);
+        }
+    }
+
     /**
      * delete the permission {0}
      *