org.opencrx.kernel.layer.model
Class SecurityContext

java.lang.Object
  org.opencrx.kernel.layer.model.SecurityContext

public class SecurityContext
extends Object

A security context manages the subjects of one subject segment.

Constructor Summary

SecurityContext(AccessControl_1 plugin, org.openmdx.base.naming.Path realmIdentity)

Method Summary

protected javax.resource.cci.MappedRecord	getGroup(javax.resource.cci.MappedRecord principal) Get group principal for the given principal.
protected Set<String>	getMemberships(javax.resource.cci.MappedRecord principal, javax.resource.cci.MappedRecord user, short accessLevel, boolean useExtendedAccessLevelBasic)
protected javax.resource.cci.MappedRecord	getPrimaryGroup(javax.resource.cci.MappedRecord principal)
protected javax.resource.cci.MappedRecord	getPrincipal(String principalName)
protected Set<String>	getSubgroups(String qualifiedPrincipalName) Return set of qualified names of subgroups of specified group subject.
protected Set<String>	getSupergroups(String qualifiedPrincipalName) Return set of qualified names of subgroups of specified group subject.
protected javax.resource.cci.MappedRecord	getUserHome(org.openmdx.base.naming.Path principalIdentity)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SecurityContext

public SecurityContext(AccessControl_1 plugin,
                       org.openmdx.base.naming.Path realmIdentity)

Method Detail

getPrincipal

protected javax.resource.cci.MappedRecord getPrincipal(String principalName)
                                                throws ServiceException

Throws:

ServiceException

getUserHome

protected javax.resource.cci.MappedRecord getUserHome(org.openmdx.base.naming.Path principalIdentity)
                                               throws ServiceException

Throws:

ServiceException

getPrimaryGroup

protected javax.resource.cci.MappedRecord getPrimaryGroup(javax.resource.cci.MappedRecord principal)
                                                   throws ServiceException

Throws:

ServiceException

getGroup

protected javax.resource.cci.MappedRecord getGroup(javax.resource.cci.MappedRecord principal)
                                            throws ServiceException

Get group principal for the given principal. The group principal is the assigned to the same subject as the given principal and is of type PrincipalGroup. The owningGroup of a openCRX object is a PrincipalGroup.

Throws:

ServiceException

getSubgroups

protected Set<String> getSubgroups(String qualifiedPrincipalName)
                            throws ServiceException

Return set of qualified names of subgroups of specified group subject.

Throws:

ServiceException

getSupergroups

protected Set<String> getSupergroups(String qualifiedPrincipalName)
                              throws ServiceException

Return set of qualified names of subgroups of specified group subject.

Throws:

ServiceException

getMemberships

protected Set<String> getMemberships(javax.resource.cci.MappedRecord principal,
                                     javax.resource.cci.MappedRecord user,
                                     short accessLevel,
                                     boolean useExtendedAccessLevelBasic)
                              throws ServiceException

Throws:

ServiceException