Package com.evolveum.midpoint.model.common.expression

Class ExpressionProfileManager

java.lang.Object

com.evolveum.midpoint.model.common.expression.ExpressionProfileManager

@Component
public class ExpressionProfileManager
extends Object

Manages (cached) expression profiles. Because of implementation reasons, the profiles are cached within SystemObjectCache. This probably should change in the future, along with moving this class to `repo-common` (at least partly).

Constructor Summary

Constructors

Constructor	Description
ExpressionProfileManager()

Method Summary

Modifier and Type	Method	Description
@NotNull ExpressionProfile	determineBulkActionsProfile(@NotNull ConfigurationItemOrigin origin, boolean privileged, @NotNull Task task, @NotNull OperationResult result)	Special version of determineExpressionProfileUnsafe(ConfigurationItemOrigin, OperationResult) for scripting (bulk actions).
<O extends ObjectType> @NotNull ExpressionProfile	determineExpressionProfile(@NotNull PrismObject<O> object, @NotNull OperationResult result)	Returns ExpressionProfile for given object, based on its archetype policy.
@NotNull ExpressionProfile	determineExpressionProfileStrict(@NotNull ConfigurationItemOrigin origin, @NotNull Task task, @NotNull OperationResult result)	Determines ExpressionProfile for given configuration item origin.
@NotNull ExpressionProfile	determineExpressionProfileUnsafe(@NotNull ConfigurationItemOrigin origin, @NotNull OperationResult result)	Determines ExpressionProfile for given configuration item origin.
@NotNull ExpressionProfile	getProfileForCustomWorkflowNotifications(OperationResult result)	Origin for custom workflow notifications is blurred, because they travel from policy rules to object triggers.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

ExpressionProfileManager

public ExpressionProfileManager()

Method Details

determineExpressionProfile

@NotNull
public <O extends ObjectType>
@NotNull ExpressionProfile determineExpressionProfile(@NotNull
 @NotNull PrismObject<O> object,
 @NotNull
 @NotNull OperationResult result)
                                               throws SchemaException,
ConfigurationException

Returns ExpressionProfile for given object, based on its archetype policy. If no explicit profile can be found, the ExpressionProfile.full() is returned. This is the legacy (pre-4.8) behavior.

Throws:

SchemaException

ConfigurationException

determineExpressionProfileStrict

@NotNull
public @NotNull ExpressionProfile determineExpressionProfileStrict(@NotNull
 @NotNull ConfigurationItemOrigin origin,
 @NotNull
 @NotNull Task task,
 @NotNull
 @NotNull OperationResult result)
                                                            throws SchemaException,
ConfigurationException,
ExpressionEvaluationException,
CommunicationException,
SecurityViolationException,
ObjectNotFoundException

Determines ExpressionProfile for given configuration item origin. Does not allow undetermined profiles, and treats external profiles with care.

Throws:

SchemaException

ConfigurationException

ExpressionEvaluationException

CommunicationException

SecurityViolationException

ObjectNotFoundException

determineExpressionProfileUnsafe

@NotNull
public @NotNull ExpressionProfile determineExpressionProfileUnsafe(@NotNull
 @NotNull ConfigurationItemOrigin origin,
 @NotNull
 @NotNull OperationResult result)
                                                            throws SchemaException,
ConfigurationException

Determines ExpressionProfile for given configuration item origin. FIXME this is a transitory, unsafe implementation: various unknown/external origins are treated as trustworthy. This should be changed before expression profiles are declared fully functional.

Throws:

SchemaException

ConfigurationException

determineBulkActionsProfile

@NotNull
public @NotNull ExpressionProfile determineBulkActionsProfile(@NotNull
 @NotNull ConfigurationItemOrigin origin,
 boolean privileged,
 @NotNull
 @NotNull Task task,
 @NotNull
 @NotNull OperationResult result)
                                                       throws SchemaException,
ConfigurationException,
ExpressionEvaluationException,
CommunicationException,
SecurityViolationException,
ObjectNotFoundException

Special version of determineExpressionProfileUnsafe(ConfigurationItemOrigin, OperationResult) for scripting (bulk actions). It is not as permissive: some origins are banned, and the default for non-root users is the restricted profile (unless `privileged` is set to true - in order to provide backwards compatibility with 4.7).

Throws:

SchemaException

ConfigurationException

ExpressionEvaluationException

CommunicationException

SecurityViolationException

ObjectNotFoundException

getProfileForCustomWorkflowNotifications

@NotNull
public @NotNull ExpressionProfile getProfileForCustomWorkflowNotifications(OperationResult result)
                                                                    throws SchemaException,
ConfigurationException

Origin for custom workflow notifications is blurred, because they travel from policy rules to object triggers. Hence, we should either disable them completely, or use a safe profile for them.

Throws:

SchemaException

ConfigurationException