public interface ModelInteractionService
Modifier and Type | Field and Description |
---|---|
static String |
CLASS_NAME_WITH_DOT |
static String |
GET_ASSIGNABLE_ROLE_SPECIFICATION |
static String |
GET_CREDENTIALS_POLICY |
static String |
GET_EDIT_OBJECT_DEFINITION |
static String |
PREVIEW_CHANGES |
Modifier and Type | Method and Description |
---|---|
Collection<? extends DisplayableValue<String>> |
getActionUrls()
Returns a collection of all authorization actions known to the system.
|
<F extends com.evolveum.midpoint.xml.ns._public.common.common_3.FocusType> |
getAssignableRoleSpecification(PrismObject<F> focus,
OperationResult parentResult)
Returns an object that defines which roles can be assigned by the currently logged-in user.
|
com.evolveum.midpoint.xml.ns._public.common.common_3.CredentialsPolicyType |
getCredentialsPolicy(PrismObject<com.evolveum.midpoint.xml.ns._public.common.common_3.UserType> user,
OperationResult parentResult)
Returns a credential policy that applies to the specified user.
|
RefinedObjectClassDefinition |
getEditObjectClassDefinition(PrismObject<com.evolveum.midpoint.xml.ns._public.common.common_3.ShadowType> shadow,
PrismObject<com.evolveum.midpoint.xml.ns._public.common.common_3.ResourceType> resource,
com.evolveum.midpoint.xml.ns._public.common.common_3.AuthorizationPhaseType phase) |
<O extends com.evolveum.midpoint.xml.ns._public.common.common_3.ObjectType> |
getEditObjectDefinition(PrismObject<O> object,
com.evolveum.midpoint.xml.ns._public.common.common_3.AuthorizationPhaseType phase,
OperationResult result)
Returns a schema that reflects editability of the object in terms of midPoint schema limitations and security.
|
<F extends com.evolveum.midpoint.xml.ns._public.common.common_3.ObjectType> |
previewChanges(Collection<ObjectDelta<? extends com.evolveum.midpoint.xml.ns._public.common.common_3.ObjectType>> deltas,
ModelExecuteOptions options,
Task task,
OperationResult result)
Computes the most likely changes triggered by the provided delta.
|
<F extends com.evolveum.midpoint.xml.ns._public.common.common_3.ObjectType> |
unwrapModelContext(com.evolveum.midpoint.xml.ns._public.model.model_context_3.LensContextType wrappedContext,
OperationResult result) |
static final String CLASS_NAME_WITH_DOT
static final String PREVIEW_CHANGES
static final String GET_EDIT_OBJECT_DEFINITION
static final String GET_ASSIGNABLE_ROLE_SPECIFICATION
static final String GET_CREDENTIALS_POLICY
<F extends com.evolveum.midpoint.xml.ns._public.common.common_3.ObjectType> ModelContext<F> previewChanges(Collection<ObjectDelta<? extends com.evolveum.midpoint.xml.ns._public.common.common_3.ObjectType>> deltas, ModelExecuteOptions options, Task task, OperationResult result) throws SchemaException, PolicyViolationException, ExpressionEvaluationException, ObjectNotFoundException, ObjectAlreadyExistsException, CommunicationException, ConfigurationException, SecurityViolationException
<F extends com.evolveum.midpoint.xml.ns._public.common.common_3.ObjectType> ModelContext<F> unwrapModelContext(com.evolveum.midpoint.xml.ns._public.model.model_context_3.LensContextType wrappedContext, OperationResult result) throws SchemaException, ConfigurationException, ObjectNotFoundException, CommunicationException
<O extends com.evolveum.midpoint.xml.ns._public.common.common_3.ObjectType> PrismObjectDefinition<O> getEditObjectDefinition(PrismObject<O> object, com.evolveum.midpoint.xml.ns._public.common.common_3.AuthorizationPhaseType phase, OperationResult result) throws SchemaException, ConfigurationException, ObjectNotFoundException
Returns a schema that reflects editability of the object in terms of midPoint schema limitations and security. This method merges together all the applicable limitations that midPoint knows of (schema, security, other constratints). It may be required to pre-populate new object before calling this method, e.g. to put the object in a correct org in case that delegated administration is used.
If null is returned then the access to the entire object is denied. It cannot be created or edited at all.
The returned definition contains all parts of static schema and run-time extensions. It does not contain parts of resource "refined" schemas. Therefore for shadows it is only applicable to static parts of the shadow (not attributes).
This is not security-sensitive function. It provides data about security constraints but it does not enforce it and it does not modify anything or reveal any data. The purpose of this method is to enable convenient display of GUI form fields, e.g. to hide non-accessible fields from the form. The actual enforcement of the security is executed regardless of this method.
object
- object to editSchemaException
ConfigurationException
ObjectNotFoundException
RefinedObjectClassDefinition getEditObjectClassDefinition(PrismObject<com.evolveum.midpoint.xml.ns._public.common.common_3.ShadowType> shadow, PrismObject<com.evolveum.midpoint.xml.ns._public.common.common_3.ResourceType> resource, com.evolveum.midpoint.xml.ns._public.common.common_3.AuthorizationPhaseType phase) throws SchemaException
SchemaException
Collection<? extends DisplayableValue<String>> getActionUrls()
Returns a collection of all authorization actions known to the system. The format of returned data is designed for displaying purposes.
Note: this method returns only the list of authorization actions that are known to the IDM Model component and the components below. It does not return a GUI-specific authorization actions.
<F extends com.evolveum.midpoint.xml.ns._public.common.common_3.FocusType> RoleSelectionSpecification getAssignableRoleSpecification(PrismObject<F> focus, OperationResult parentResult) throws ObjectNotFoundException, SchemaException, ConfigurationException
focus
- Object of the operation. The object (usually user) to whom the roles should be assigned.ObjectNotFoundException
SchemaException
ConfigurationException
com.evolveum.midpoint.xml.ns._public.common.common_3.CredentialsPolicyType getCredentialsPolicy(PrismObject<com.evolveum.midpoint.xml.ns._public.common.common_3.UserType> user, OperationResult parentResult) throws ObjectNotFoundException, SchemaException
user
- user for who the policy should applyparentResult
- ObjectNotFoundException
- No system configuration or other major system inconsistencySchemaException
- Wrong schema or content of security policyCopyright © 2015 evolveum. All rights reserved.