public abstract class AbstractRoleType extends FocusType implements Serializable, Cloneable
<?xml version="1.0" encoding="UTF-8"?><p xmlns:a="http://prism.evolveum.com/xml/ns/public/annotation-3" xmlns:c="http://midpoint.evolveum.com/xml/ns/public/common/common-3" xmlns:cap="http://midpoint.evolveum.com/xml/ns/public/resource/capabilities-3" xmlns:icfs="http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/resource-schema-3" xmlns:jaxb="http://java.sun.com/xml/ns/jaxb" xmlns:q="http://prism.evolveum.com/xml/ns/public/query-3" xmlns:t="http://prism.evolveum.com/xml/ns/public/types-3" xmlns:tns="http://midpoint.evolveum.com/xml/ns/public/common/common-3" xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:xjc="http://java.sun.com/xml/ns/jaxb/xjc" xmlns:xsd="http://www.w3.org/2001/XMLSchema"> Abstract class that conins the "essence" of a role. This is kind of "Roleable" interface when speaking in Java terms. </p>
<?xml version="1.0" encoding="UTF-8"?><p xmlns:a="http://prism.evolveum.com/xml/ns/public/annotation-3" xmlns:c="http://midpoint.evolveum.com/xml/ns/public/common/common-3" xmlns:cap="http://midpoint.evolveum.com/xml/ns/public/resource/capabilities-3" xmlns:icfs="http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/resource-schema-3" xmlns:jaxb="http://java.sun.com/xml/ns/jaxb" xmlns:q="http://prism.evolveum.com/xml/ns/public/query-3" xmlns:t="http://prism.evolveum.com/xml/ns/public/types-3" xmlns:tns="http://midpoint.evolveum.com/xml/ns/public/common/common-3" xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:xjc="http://java.sun.com/xml/ns/jaxb/xjc" xmlns:xsd="http://www.w3.org/2001/XMLSchema"> A role implies assignments. The role may "grant" accounts on resources, attributes and entitlements for such accounts. The role can also assign organizational units, other roles or various IDM objects that can be assigned directly to user. Role is in fact just a named set of assignments. </p>
<?xml version="1.0" encoding="UTF-8"?><p xmlns:a="http://prism.evolveum.com/xml/ns/public/annotation-3" xmlns:c="http://midpoint.evolveum.com/xml/ns/public/common/common-3" xmlns:cap="http://midpoint.evolveum.com/xml/ns/public/resource/capabilities-3" xmlns:icfs="http://midpoint.evolveum.com/xml/ns/public/connector/icf-1/resource-schema-3" xmlns:jaxb="http://java.sun.com/xml/ns/jaxb" xmlns:q="http://prism.evolveum.com/xml/ns/public/query-3" xmlns:t="http://prism.evolveum.com/xml/ns/public/types-3" xmlns:tns="http://midpoint.evolveum.com/xml/ns/public/common/common-3" xmlns:xenc="http://www.w3.org/2001/04/xmlenc#" xmlns:xjc="http://java.sun.com/xml/ns/jaxb/xjc" xmlns:xsd="http://www.w3.org/2001/XMLSchema"> This is the basic building block of role-based access control (RBAC) in the provisioning system. It defines what rights (e.g. accounts) should be given to user, how they should look like (attributes) and what groups or native roles to assign to them (entitlements). </p>
Java class for AbstractRoleType complex type.
The following schema fragment specifies the expected content contained within this class.
<complexType name="AbstractRoleType"> <complexContent> <extension base="{http://midpoint.evolveum.com/xml/ns/public/common/common-3}FocusType"> <sequence> <element name="displayName" type="{http://prism.evolveum.com/xml/ns/public/types-3}PolyStringType" minOccurs="0"/> <element name="identifier" type="{http://www.w3.org/2001/XMLSchema}string" minOccurs="0"/> <element name="inducement" type="{http://midpoint.evolveum.com/xml/ns/public/common/common-3}AssignmentType" maxOccurs="unbounded" minOccurs="0"/> <element name="authorization" type="{http://midpoint.evolveum.com/xml/ns/public/common/common-3}AuthorizationType" maxOccurs="unbounded" minOccurs="0"/> <element name="requestable" type="{http://www.w3.org/2001/XMLSchema}boolean" minOccurs="0"/> <element name="exclusion" type="{http://midpoint.evolveum.com/xml/ns/public/common/common-3}ExclusionPolicyConstraintType" maxOccurs="unbounded" minOccurs="0"/> <element name="riskLevel" type="{http://www.w3.org/2001/XMLSchema}string" minOccurs="0"/> <element name="ownerRef" type="{http://midpoint.evolveum.com/xml/ns/public/common/common-3}ObjectReferenceType" minOccurs="0"/> <element name="approverRef" type="{http://midpoint.evolveum.com/xml/ns/public/common/common-3}ObjectReferenceType" maxOccurs="unbounded" minOccurs="0"/> <element name="approverExpression" type="{http://midpoint.evolveum.com/xml/ns/public/common/common-3}ExpressionType" maxOccurs="unbounded" minOccurs="0"/> <element name="approvalSchema" type="{http://midpoint.evolveum.com/xml/ns/public/common/common-3}ApprovalSchemaType" minOccurs="0"/> <element name="approvalProcess" type="{http://www.w3.org/2001/XMLSchema}string" minOccurs="0"/> <element name="automaticallyApproved" type="{http://midpoint.evolveum.com/xml/ns/public/common/common-3}ExpressionType" minOccurs="0"/> <element name="condition" type="{http://midpoint.evolveum.com/xml/ns/public/common/common-3}MappingType" minOccurs="0"/> <element name="policyConstraints" type="{http://midpoint.evolveum.com/xml/ns/public/common/common-3}PolicyConstraintsType" minOccurs="0"/> </sequence> </extension> </complexContent> </complexType>
Modifier and Type | Field and Description |
---|---|
static QName |
COMPLEX_TYPE |
static QName |
F_APPROVAL_PROCESS |
static QName |
F_APPROVAL_SCHEMA |
static QName |
F_APPROVER_EXPRESSION |
static QName |
F_APPROVER_REF |
static QName |
F_AUTHORIZATION |
static QName |
F_AUTOMATICALLY_APPROVED |
static QName |
F_CONDITION |
static QName |
F_DISPLAY_NAME |
static QName |
F_EXCLUSION |
static QName |
F_IDENTIFIER |
static QName |
F_INDUCEMENT |
static QName |
F_OWNER_REF |
static QName |
F_POLICY_CONSTRAINTS |
static QName |
F_REQUESTABLE |
static QName |
F_RISK_LEVEL |
F_ACTIVATION, F_ASSIGNMENT, F_ITERATION, F_ITERATION_TOKEN, F_LINK, F_LINK_REF
F_DESCRIPTION, F_EXTENSION, F_FETCH_RESULT, F_METADATA, F_NAME, F_PARENT_ORG, F_PARENT_ORG_REF, F_TENANT_REF, F_TRIGGER
Constructor and Description |
---|
AbstractRoleType() |
AbstractRoleType(com.evolveum.midpoint.prism.PrismContext prismContext) |
asPrismContainer, asPrismContainerValue, asPrismObject, equals, getActivation, getAssignment, getIteration, getIterationToken, getLink, getLinkRef, hashCode, setActivation, setIteration, setIterationToken, setupContainer, setupContainerValue, toDebugName, toDebugType, toString
getDescription, getExtension, getFetchResult, getMetadata, getName, getOid, getParentOrg, getParentOrgRef, getTenantRef, getTrigger, getVersion, setDescription, setExtension, setFetchResult, setMetadata, setName, setOid, setTenantRef, setVersion
public static final QName COMPLEX_TYPE
public static final QName F_DISPLAY_NAME
public static final QName F_IDENTIFIER
public static final QName F_INDUCEMENT
public static final QName F_AUTHORIZATION
public static final QName F_REQUESTABLE
public static final QName F_EXCLUSION
public static final QName F_RISK_LEVEL
public static final QName F_OWNER_REF
public static final QName F_APPROVER_REF
public static final QName F_APPROVER_EXPRESSION
public static final QName F_APPROVAL_SCHEMA
public static final QName F_APPROVAL_PROCESS
public static final QName F_AUTOMATICALLY_APPROVED
public static final QName F_CONDITION
public static final QName F_POLICY_CONSTRAINTS
public AbstractRoleType()
public AbstractRoleType(com.evolveum.midpoint.prism.PrismContext prismContext)
public com.evolveum.prism.xml.ns._public.types_3.PolyStringType getDisplayName()
public void setDisplayName(com.evolveum.prism.xml.ns._public.types_3.PolyStringType value)
public String getIdentifier()
public void setIdentifier(String value)
public List<AssignmentType> getInducement()
public List<AuthorizationType> getAuthorization()
public Boolean isRequestable()
public void setRequestable(Boolean value)
public List<ExclusionPolicyConstraintType> getExclusion()
public String getRiskLevel()
public void setRiskLevel(String value)
public ObjectReferenceType getOwnerRef()
public void setOwnerRef(ObjectReferenceType value)
public List<ObjectReferenceType> getApproverRef()
public List<ExpressionType> getApproverExpression()
public ApprovalSchemaType getApprovalSchema()
public void setApprovalSchema(ApprovalSchemaType value)
public String getApprovalProcess()
public void setApprovalProcess(String value)
public ExpressionType getAutomaticallyApproved()
public void setAutomaticallyApproved(ExpressionType value)
public MappingType getCondition()
public void setCondition(MappingType value)
public PolicyConstraintsType getPolicyConstraints()
public void setPolicyConstraints(PolicyConstraintsType value)
public AbstractRoleType clone()
Copyright © 2015 Evolveum. All rights reserved.