-->
<super-source path="super"/>

<inherits name="com.google.common.annotations.Annotations" />
<inherits name="com.google.gwt.core.Core" />
<inherits name="com.google.gwt.user.User" />

	bucket := vars["bucket"]

	objectAPI := api.ObjectAPI()
	if objectAPI == nil {
		writeErrorResponse(ctx, w, errorCodes.ToAPIErr(ErrServerNotInitialized), r.URL)
		return
	}

	// check if user has permissions to perform this operation
	if s3Error := checkRequestAuthType(ctx, r, policy.GetReplicationConfigurationAction, bucket, ""); s3Error != ErrNone {
		writeErrorResponse(ctx, w, errorCodes.ToAPIErr(s3Error), r.URL)

    // bound.  But these ideas are harder to implement.  We do not try to detect or handle a
    // user-specified -XX:+DisableExplicitGC.
    //
    // TODO(user): Consider using
    // java/lang/management/OperatingSystemMXBean.html#getSystemLoadAverage()
    //
    // TODO(user): Consider scaling by number of mutator threads,
    // e.g. using Thread#activeCount()

    /**
     * Search criteria: configuration name.
     */
    public String name;

    /**
     * Search criteria: target URLs.
     */
    public String urls;

    /**
     * Search criteria: user agent string.
     */
    public String userAgent;

    /**
     * Search criteria: number of threads.
     */
    public String numOfThread;

    /**
     * Search criteria: interval time.

             Searching for package file structure from directories with
             <font color="#3465A4">__init__.py</font> files
             Importing from <font color="#75507B">/home/user/code/</font><font color="#AD7FA8">awesomeapp</font>

   <span style="background-color:#007166"><font color="#D3D7CF"> module </font></span>  🐍 main.py

<inherits name="com.google.common.primitives.Primitives" />
<inherits name="com.google.common.testing.Testing" />
<inherits name="com.google.gwt.core.Core" />
<inherits name="com.google.gwt.junit.JUnit" />
<inherits name="com.google.gwt.user.User" />

}
```

### Usuário inativo

Agora tente com um usuário inativo, autentique-se com:

User: `alice`

Password: `secret2`

E tente usar a operação `GET` com o caminho `/users/me`.

Você receberá um erro "Usuário inativo", como:

```JSON
{
  "detail": "Inactive user"
}
```

## Recaptulando

            roleQueryHelper.init();
            roleQueryHelper.addCookieNameMapping("admin", "administrator");
            roleQueryHelper.addCookieNameMapping("user", "regular_user");

            Cookie adminCookie = new Cookie("admin", "true");
            Cookie userCookie = new Cookie("user", "true");
            getMockRequest().addCookie(adminCookie);
            getMockRequest().addCookie(userCookie);

That's what would happen to a third party application that tried to access one of these *path operations* with a token provided by a user, depending on how many permissions the user gave the application.

## About third party integrations { #about-third-party-integrations }

In this example we are using the OAuth2 "password" flow.

<inherits name="com.google.common.math.Math" />
<inherits name="com.google.common.util.concurrent.Concurrent" />
<inherits name="com.google.gwt.core.Core" />
<inherits name="com.google.gwt.user.User" />