Ask Questions and Find Answers

Hello everyone. I am wondering if it is possible to use permissionChecker in a background service without user login. 

We know that with a login user and in the thread of that user, one can call PermissionThreadLocal.getPermissionChecker() to get permissionChecker instance of that user and do checks such as permissionChecker.isGroupAdmin(long groupId). Furthermore, the permissionChecker's return is flushed as soon as a user is assgined /unassgined as a site admin.

However, if we create a background service and use PermissionChecker permissionChecker = PermissionCheckerFactoryUtil.create(user) , the returning permissionChecker is not flushed when the role of the user is changed. That is, if we change the role of a user to site admin, the permissionChecker.isGroupAdmin will return false until we restart the liferay server. 

Here is the code:

@Component(
    immediate = true,
    property = {
        "osgi.command.scope=liferay",
        "osgi.command.function=checkPermission"
    },
    service = PermissionCheckerTest.class
)
public class PermissionCheckerTest {
    
    private void print(String s) { System.out.println(s);}    

    public void checkPermission(long userId, long groupId) {
        
        try {
          long oldId = PrincipalThreadLocal.getUserId();    

          PrincipalThreadLocal.setName(userId);
          User user = _userLocalService.getUser(userId);
            
          PermissionCacheUtil.clearCache();
          PermissionCacheUtil.clearPrimaryKeyRoleCache();
          PermissionChecker permissionChecker = PermissionCheckerFactoryUtil.create(user);    

          PermissionChecker opc = PermissionThreadLocal.getPermissionChecker();        
          PermissionThreadLocal.setPermissionChecker(permissionChecker);

          try {
            print("User has site admin role: " + permissionChecker.isGroupAdmin(groupId));
          } finally {
            PermissionThreadLocal.setPermissionChecker(opc);
            PrincipalThreadLocal.setName(oldId);
          }
        } catch (Exception ex) {
            print(ex.getMessage());
        }
    }

    @Reference
    private UserLocalService _userLocalService;    

}

I think the problem is the role cache is not flushed. But how could I do it? Thank you very much.