Package com.evolveum.midpoint.security.enforcer.api

Interface ObjectSecurityConstraints

All Superinterfaces:

DebugDumpable

public interface ObjectSecurityConstraints
extends DebugDumpable

Field Summary

Fields inherited from interface com.evolveum.midpoint.util.DebugDumpable

INDENT_STRING

Method Summary

Modifier and Type	Method	Description
AuthorizationDecisionType	findAllItemsDecision(String[] actionUrls, AuthorizationPhaseType phase)	Almost the same as findAllItemsDecision(String, ...), but in this case there are several equivalent action URLs.
AuthorizationDecisionType	findAllItemsDecision(String actionUrl, AuthorizationPhaseType phase)	Returns decision for the whole action.
AuthorizationDecisionType	findItemDecision(ItemPath nameOnlyItemPath, String[] actionUrls, AuthorizationPhaseType phase)
AuthorizationDecisionType	findItemDecision(ItemPath nameOnlyItemPath, String actionUrl, AuthorizationPhaseType phase)

Methods inherited from interface com.evolveum.midpoint.util.DebugDumpable

debugDump, debugDump, debugDumpLazily, debugDumpLazily

Method Detail

findAllItemsDecision

AuthorizationDecisionType findAllItemsDecision(String[] actionUrls,
                                               AuthorizationPhaseType phase)

Almost the same as findAllItemsDecision(String, ...), but in this case there are several equivalent action URLs. E.g. "read" and "get" actions. If any of them is denied, operation is denied. If any of them is allowed, operation is allowed.

findAllItemsDecision

AuthorizationDecisionType findAllItemsDecision(String actionUrl,
                                               AuthorizationPhaseType phase)

Returns decision for the whole action. This is fact returns a decision that applies to all items - if there is any. If there is no universally-applicable decision then null is returned. In that case there may still be fine-grained decisions for individual items. Use findItemDecision() to get them.

findItemDecision

AuthorizationDecisionType findItemDecision(ItemPath nameOnlyItemPath,
                                           String[] actionUrls,
                                           AuthorizationPhaseType phase)

findItemDecision

AuthorizationDecisionType findItemDecision(ItemPath nameOnlyItemPath,
                                           String actionUrl,
                                           AuthorizationPhaseType phase)