|
||||||||||
| PREV CLASS NEXT CLASS | FRAMES NO FRAMES | |||||||||
| SUMMARY: NESTED | FIELD | CONSTR | METHOD | DETAIL: FIELD | CONSTR | METHOD | |||||||||
java.lang.Objectedu.internet2.middleware.grouper.privs.AttributeDefResolverDecorator
edu.internet2.middleware.grouper.privs.WheelAttrDefResolver
public class WheelAttrDefResolver
Decorator that provides Wheel privilege resolution for AccessResolver.
| Constructor Summary | |
|---|---|
WheelAttrDefResolver(AttributeDefResolver resolver)
|
|
| Method Summary | |
|---|---|
void |
flushCache()
flush cache if caching resolver |
java.util.Set<AttributeDefPrivilege> |
getPrivileges(AttributeDef attributeDef,
edu.internet2.middleware.subject.Subject subject)
Get all privileges subject has on attributeDef. |
boolean |
hasPrivilege(AttributeDef attributeDef,
edu.internet2.middleware.subject.Subject subject,
Privilege privilege)
Check whether subject has privilege on attributeDef. |
boolean |
hqlFilterAttrDefsWhereClause(edu.internet2.middleware.subject.Subject subject,
HqlQuery hqlQuery,
java.lang.StringBuilder hqlTables,
java.lang.StringBuilder hqlWhereClause,
java.lang.String attributeDefColumn,
java.util.Set<Privilege> privInSet)
for an attrDef query, check to make sure the subject can see the records (if filtering HQL, you can do the postHqlFilterAttDefs instead if you like) |
boolean |
hqlFilterAttributeDefsNotWithPrivWhereClause(edu.internet2.middleware.subject.Subject subject,
HqlQuery hqlQuery,
java.lang.StringBuilder hql,
java.lang.String attributeDefColumn,
Privilege privilege,
boolean considerAllSubject)
for an attribute def query, check to make sure the subject cant see the records |
java.util.Set<AttributeDef> |
postHqlFilterAttrDefs(java.util.Set<AttributeDef> attributeDefs,
edu.internet2.middleware.subject.Subject subject,
java.util.Set<Privilege> privInSet)
after HQL is run, filter attributeDefs. |
java.util.Set<AttributeAssign> |
postHqlFilterAttributeAssigns(edu.internet2.middleware.subject.Subject subject,
java.util.Set<AttributeAssign> attributeAssigns)
filter attributeDefs for things the subject can see |
java.util.Set<PermissionEntry> |
postHqlFilterPermissions(edu.internet2.middleware.subject.Subject subject,
java.util.Set<PermissionEntry> permissionsEntries)
filter permissions for things the subject can see |
java.util.Set<PITAttributeAssign> |
postHqlFilterPITAttributeAssigns(edu.internet2.middleware.subject.Subject subject,
java.util.Set<PITAttributeAssign> pitAttributeAssigns)
filter pit attribute assignments for things the subject can see |
void |
stop()
clean up resources, session is stopped |
| Methods inherited from class edu.internet2.middleware.grouper.privs.AttributeDefResolverDecorator |
|---|
getAttributeDefsWhereSubjectDoesntHavePrivilege, getAttributeDefsWhereSubjectHasPrivilege, getDecoratedResolver, getGrouperSession, getSubjectsWithPrivilege, grantPrivilege, privilegeCopy, privilegeCopy, retrievePrivileges, revokeAllPrivilegesForSubject, revokePrivilege, revokePrivilege |
| Methods inherited from class java.lang.Object |
|---|
equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait |
| Constructor Detail |
|---|
public WheelAttrDefResolver(AttributeDefResolver resolver)
resolver - resolver| Method Detail |
|---|
public void stop()
AttributeDefResolver
stop in interface AttributeDefResolverstop in class AttributeDefResolverDecoratorAccessResolver.stop()
public java.util.Set<AttributeDefPrivilege> getPrivileges(AttributeDef attributeDef,
edu.internet2.middleware.subject.Subject subject)
throws java.lang.IllegalArgumentException
AttributeDefResolver
getPrivileges in interface AttributeDefResolvergetPrivileges in class AttributeDefResolverDecoratorjava.lang.IllegalArgumentException - if any parameter is null.AttributeDefResolverDecorator.getPrivileges(edu.internet2.middleware.grouper.attr.AttributeDef, edu.internet2.middleware.subject.Subject)
public boolean hasPrivilege(AttributeDef attributeDef,
edu.internet2.middleware.subject.Subject subject,
Privilege privilege)
throws java.lang.IllegalArgumentException
AttributeDefResolver
hasPrivilege in interface AttributeDefResolverhasPrivilege in class AttributeDefResolverDecoratorjava.lang.IllegalArgumentException - if any parameter is null.AttributeDefResolverDecorator.hasPrivilege(edu.internet2.middleware.grouper.attr.AttributeDef, edu.internet2.middleware.subject.Subject, edu.internet2.middleware.grouper.privs.Privilege)public void flushCache()
AttributeDefResolver
flushCache in interface AttributeDefResolverflushCache in class AttributeDefResolverDecoratorAccessResolver.flushCache()
public java.util.Set<AttributeDef> postHqlFilterAttrDefs(java.util.Set<AttributeDef> attributeDefs,
edu.internet2.middleware.subject.Subject subject,
java.util.Set<Privilege> privInSet)
AttributeDefResolver
postHqlFilterAttrDefs in interface AttributeDefResolverpostHqlFilterAttrDefs in class AttributeDefResolverDecoratorsubject - which needs view access to the attribute defsprivInSet - find a privilege which is in this set
(e.g. for view, send all attrDef privs). There are pre-canned sets in AttributeDefAdapter
AttributeDefResolverDecorator.postHqlFilterAttrDefs(java.util.Set, edu.internet2.middleware.subject.Subject, java.util.Set)
public boolean hqlFilterAttrDefsWhereClause(edu.internet2.middleware.subject.Subject subject,
HqlQuery hqlQuery,
java.lang.StringBuilder hqlTables,
java.lang.StringBuilder hqlWhereClause,
java.lang.String attributeDefColumn,
java.util.Set<Privilege> privInSet)
AttributeDefResolver
hqlFilterAttrDefsWhereClause in interface AttributeDefResolverhqlFilterAttrDefsWhereClause in class AttributeDefResolverDecoratorsubject - which needs view access to the attrDefshqlTables - the select and current from parthqlWhereClause - is there where clause part of the queryattributeDefColumn - is the name of the attributeDef column to join toprivInSet - find a privilege which is in this set (e.g. for view, send all attrDef privs)
AttributeDefResolverDecorator.hqlFilterAttrDefsWhereClause(edu.internet2.middleware.subject.Subject, edu.internet2.middleware.grouper.hibernate.HqlQuery, java.lang.StringBuilder, java.lang.StringBuilder, java.lang.String, java.util.Set)
public java.util.Set<AttributeAssign> postHqlFilterAttributeAssigns(edu.internet2.middleware.subject.Subject subject,
java.util.Set<AttributeAssign> attributeAssigns)
AttributeDefResolver
postHqlFilterAttributeAssigns in interface AttributeDefResolverpostHqlFilterAttributeAssigns in class AttributeDefResolverDecoratorAttributeDefResolverDecorator.postHqlFilterAttributeAssigns(edu.internet2.middleware.subject.Subject, java.util.Set)
public java.util.Set<PITAttributeAssign> postHqlFilterPITAttributeAssigns(edu.internet2.middleware.subject.Subject subject,
java.util.Set<PITAttributeAssign> pitAttributeAssigns)
AttributeDefResolver
postHqlFilterPITAttributeAssigns in interface AttributeDefResolverpostHqlFilterPITAttributeAssigns in class AttributeDefResolverDecoratorAttributeDefResolverDecorator.postHqlFilterPITAttributeAssigns(edu.internet2.middleware.subject.Subject, java.util.Set)
public java.util.Set<PermissionEntry> postHqlFilterPermissions(edu.internet2.middleware.subject.Subject subject,
java.util.Set<PermissionEntry> permissionsEntries)
AttributeDefResolver
postHqlFilterPermissions in interface AttributeDefResolverpostHqlFilterPermissions in class AttributeDefResolverDecoratorAttributeDefResolver.postHqlFilterPermissions(edu.internet2.middleware.subject.Subject, java.util.Set)
public boolean hqlFilterAttributeDefsNotWithPrivWhereClause(edu.internet2.middleware.subject.Subject subject,
HqlQuery hqlQuery,
java.lang.StringBuilder hql,
java.lang.String attributeDefColumn,
Privilege privilege,
boolean considerAllSubject)
AttributeDefResolver
hqlFilterAttributeDefsNotWithPrivWhereClause in interface AttributeDefResolverhqlFilterAttributeDefsNotWithPrivWhereClause in class AttributeDefResolverDecoratorsubject - which needs view access to the groupshql - the select and current from partattributeDefColumn - is the name of the attributeDef column to join toprivilege - find a privilege which is in this set (e.g. for view, attr view)considerAllSubject - if true, then consider GrouperAll when seeign if subject has priv, else do not
AttributeDefResolver.hqlFilterAttributeDefsNotWithPrivWhereClause(edu.internet2.middleware.subject.Subject, edu.internet2.middleware.grouper.hibernate.HqlQuery, java.lang.StringBuilder, java.lang.String, Privilege, boolean)
|
||||||||||
| PREV CLASS NEXT CLASS | FRAMES NO FRAMES | |||||||||
| SUMMARY: NESTED | FIELD | CONSTR | METHOD | DETAIL: FIELD | CONSTR | METHOD | |||||||||