org.squashtest.tm.service.security.acls

Interface ExtraPermissionEvaluator

public interface ExtraPermissionEvaluator

For any other provider of permission evaluation. Some components freak out when more than one PermissionEvaluator exists in the bean factory because we can't tell them to pick the one we want. This interface thus offers the same services while not being a potential candidate for injection.

Author:

bsiri

Method Summary

Methods

Modifier and Type	Method and Description
boolean	hasPermission(org.springframework.security.core.Authentication authentication, Object targetDomainObject, Object permission)
boolean	hasPermission(org.springframework.security.core.Authentication authentication, Serializable targetId, String targetType, Object permission) Alternative method for evaluating a permission where only the identifier of the target object is available, rather than the target instance itself.

Method Detail

hasPermission

boolean hasPermission(org.springframework.security.core.Authentication authentication,
                    Object targetDomainObject,
                    Object permission)

Parameters:

authentication - represents the user in question. Should not be null.

targetDomainObject - the domain object for which permissions should be checked. May be null in which case implementations should return false, as the null condition can be checked explicitly in the expression.

permission - a representation of the permission object as supplied by the expression system. Not null.

Returns:

true if the permission is granted, false otherwise

hasPermission

boolean hasPermission(org.springframework.security.core.Authentication authentication,
                    Serializable targetId,
                    String targetType,
                    Object permission)

Alternative method for evaluating a permission where only the identifier of the target object is available, rather than the target instance itself.

Parameters:

authentication - represents the user in question. Should not be null.

targetId - the identifier for the object instance (usually a Long)

targetType - a String representing the target's type (usually a Java classname). Not null.

permission - a representation of the permission object as supplied by the expression system. Not null.

Returns:

true if the permission is granted, false otherwise