org.squashtest.tm.service.internal.security

Class AffirmativeBasedCompositePermissionEvaluator

java.lang.Object

org.springframework.security.acls.AclPermissionEvaluator

org.squashtest.tm.service.internal.security.AffirmativeBasedCompositePermissionEvaluator

All Implemented Interfaces:

org.springframework.aop.framework.AopInfrastructureBean, org.springframework.security.access.PermissionEvaluator

public class AffirmativeBasedCompositePermissionEvaluator
extends org.springframework.security.acls.AclPermissionEvaluator
implements org.springframework.security.access.PermissionEvaluator

That class is itself a PermissionEvaluator and can register extra evaluators to check against. Those extra evaluators must be available as OSGI services. Whenever requested this class will in turn test each extra evaluators, then itself, as long as the answer is false. If at least one of the evaluator grants the access, granted the access will be (hence the prefix AffirmativeBased).

Author:

bsiri

Constructor Summary

Constructors

Constructor and Description
AffirmativeBasedCompositePermissionEvaluator(org.springframework.security.acls.model.AclService aclService)

Method Summary

Methods

Modifier and Type	Method and Description
boolean	hasPermission(org.springframework.security.core.Authentication authentication, Object targetDomainObject, Object permission)
boolean	hasPermission(org.springframework.security.core.Authentication authentication, Serializable targetId, String targetType, Object permission)
void	registerPermissionEvaluator(ExtraPermissionEvaluator evaluator, Map properties) Register other PermissionEvaluators for composition.
void	unregisterPermissionEvaluator(ExtraPermissionEvaluator evaluator, Map properties)

Methods inherited from class org.springframework.security.acls.AclPermissionEvaluator

setObjectIdentityGenerator, setObjectIdentityRetrievalStrategy, setPermissionFactory, setSidRetrievalStrategy

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

AffirmativeBasedCompositePermissionEvaluator

public AffirmativeBasedCompositePermissionEvaluator(org.springframework.security.acls.model.AclService aclService)

Method Detail

hasPermission

public boolean hasPermission(org.springframework.security.core.Authentication authentication,
                    Object targetDomainObject,
                    Object permission)

Specified by:

hasPermission in interface org.springframework.security.access.PermissionEvaluator

Overrides:

hasPermission in class org.springframework.security.acls.AclPermissionEvaluator

hasPermission

public boolean hasPermission(org.springframework.security.core.Authentication authentication,
                    Serializable targetId,
                    String targetType,
                    Object permission)

Specified by:

hasPermission in interface org.springframework.security.access.PermissionEvaluator

Overrides:

hasPermission in class org.springframework.security.acls.AclPermissionEvaluator

registerPermissionEvaluator

public void registerPermissionEvaluator(ExtraPermissionEvaluator evaluator,
                               Map properties)

Register other PermissionEvaluators for composition.

Parameters:

evaluator -

properties -

unregisterPermissionEvaluator

public void unregisterPermissionEvaluator(ExtraPermissionEvaluator evaluator,
                                 Map properties)