org.opencrx.kernel.layer.model

Class AccessControl_2.DefaultRealm

java.lang.Object

org.opencrx.kernel.layer.model.AccessControl_2.DefaultRealm

Enclosing class:

AccessControl_2

public class AccessControl_2.DefaultRealm
extends Object

Default realm implementation. Overload for custom-specific policies.

Constructor Summary

Constructors

Constructor and Description
AccessControl_2.DefaultRealm(org.openmdx.base.naming.Path realmIdentity) Constructor.

Method Summary

Methods

Modifier and Type	Method and Description
protected Set<String>	getPermissions(AccessControl_2.CachedPrincipal principal, org.openmdx.base.naming.Path userIdentity, short accessLevel, SecurityKeys.Action action, javax.jdo.PersistenceManager pm) Get permissions for given principal and access level.
protected org.openmdx.base.naming.Path	getPrimaryGroup(AccessControl_2.CachedPrincipal principal, javax.jdo.PersistenceManager pm) Get primary group for given principal.
protected AccessControl_2.CachedPrincipal	getPrincipal(String principalName, javax.jdo.PersistenceManager pm) Retrieve principal for given principal name.
org.openmdx.base.naming.Path	getRealmIdentity() Get identity of realm.
org.opencrx.kernel.layer.model.AccessControl_2.GetRunAsPrincipalResult	getRunAsPrincipal(org.openmdx.base.rest.cci.RequestRecord request, List<String> principalChain, org.openmdx.base.dataprovider.cci.DataproviderRequestProcessor p, javax.jdo.PersistenceManager pm) Get runAs principal according to service header and available runAs permissions.
boolean	hasPermission(org.openmdx.base.rest.cci.RequestRecord request, org.openmdx.base.rest.spi.Object_2Facade secureObject, org.openmdx.base.rest.spi.Object_2Facade parent, AccessControl_2.CachedPrincipal principal, org.openmdx.base.naming.Path userIdentity, SecurityKeys.Action action, Set<String> grantedPermissions, org.openmdx.base.dataprovider.cci.DataproviderRequestProcessor p, javax.jdo.PersistenceManager pm) Return true if principal has permission to perform the request.
void	restrictQuery(org.openmdx.base.rest.cci.QueryRecord request, org.openmdx.base.rest.spi.Object_2Facade object, AccessControl_2.CachedPrincipal principal, org.openmdx.base.naming.Path userIdentity, javax.jdo.PersistenceManager pm) Restrict query according to permissions of given principal.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

AccessControl_2.DefaultRealm

public AccessControl_2.DefaultRealm(org.openmdx.base.naming.Path realmIdentity)
                             throws javax.resource.ResourceException

Constructor.

Parameters:

realmIdentity -

Throws:

org.openmdx.base.exception.ServiceException

javax.resource.ResourceException

Method Detail

getPrincipal

protected AccessControl_2.CachedPrincipal getPrincipal(String principalName,
                                           javax.jdo.PersistenceManager pm)
                                                throws javax.resource.ResourceException

Retrieve principal for given principal name.

Parameters:

principalName -

Returns:

Throws:

org.openmdx.base.exception.ServiceException

javax.resource.ResourceException

getRunAsPrincipal

public org.opencrx.kernel.layer.model.AccessControl_2.GetRunAsPrincipalResult getRunAsPrincipal(org.openmdx.base.rest.cci.RequestRecord request,
                                                                                       List<String> principalChain,
                                                                                       org.openmdx.base.dataprovider.cci.DataproviderRequestProcessor p,
                                                                                       javax.jdo.PersistenceManager pm)
                                                                                         throws javax.resource.ResourceException

Get runAs principal according to service header and available runAs permissions.

Parameters:

header -

request -

interaction -

Returns:

Throws:

org.openmdx.base.exception.ServiceException

javax.resource.ResourceException

getPrimaryGroup

protected org.openmdx.base.naming.Path getPrimaryGroup(AccessControl_2.CachedPrincipal principal,
                                           javax.jdo.PersistenceManager pm)
                                                throws javax.resource.ResourceException

Get primary group for given principal.

Parameters:

principal -

Returns:

Throws:

org.openmdx.base.exception.ServiceException

javax.resource.ResourceException

getPermissions

protected Set<String> getPermissions(AccessControl_2.CachedPrincipal principal,
                         org.openmdx.base.naming.Path userIdentity,
                         short accessLevel,
                         SecurityKeys.Action action,
                         javax.jdo.PersistenceManager pm)

Get permissions for given principal and access level.

Parameters:

request -

principal -

userIdentity -

accessLevel -

action -

Returns:

getRealmIdentity

public org.openmdx.base.naming.Path getRealmIdentity()

Get identity of realm.

Returns:

hasPermission

public boolean hasPermission(org.openmdx.base.rest.cci.RequestRecord request,
                    org.openmdx.base.rest.spi.Object_2Facade secureObject,
                    org.openmdx.base.rest.spi.Object_2Facade parent,
                    AccessControl_2.CachedPrincipal principal,
                    org.openmdx.base.naming.Path userIdentity,
                    SecurityKeys.Action action,
                    Set<String> grantedPermissions,
                    org.openmdx.base.dataprovider.cci.DataproviderRequestProcessor p,
                    javax.jdo.PersistenceManager pm)
                      throws javax.resource.ResourceException

Return true if principal has permission to perform the request.

Parameters:

request -

secureObject -

parent -

principal -

userIdentity -

action -

grantedPermissions -

interaction -

Returns:

Throws:

org.openmdx.base.exception.ServiceException

javax.resource.ResourceException

restrictQuery

public void restrictQuery(org.openmdx.base.rest.cci.QueryRecord request,
                 org.openmdx.base.rest.spi.Object_2Facade object,
                 AccessControl_2.CachedPrincipal principal,
                 org.openmdx.base.naming.Path userIdentity,
                 javax.jdo.PersistenceManager pm)
                   throws org.openmdx.base.exception.ServiceException,
                          javax.resource.ResourceException

Restrict query according to permissions of given principal.

Parameters:

request -

object -

principal -

userIdentity -

Throws:

org.openmdx.base.exception.ServiceException

javax.resource.ResourceException