Package com.evolveum.midpoint.security.enforcer.api

Interface PrismEntityOpConstraints

All Superinterfaces:

DebugDumpable

All Known Subinterfaces:

PrismEntityOpConstraints.ForItemContent, PrismEntityOpConstraints.ForValueContent

public interface PrismEntityOpConstraints
extends DebugDumpable

Compiled security constraints for a given operation and phase applicable to a prism entity (Item or PrismValue). It is a simplified version of ObjectSecurityConstraints and (somewhat) also ItemSecurityConstraints. TODO the "prism entity" name is not the best; the idea is to cover both items and values, but something better should be found

Nested Class Summary

Nested Classes

Modifier and Type	Interface	Description
static interface	PrismEntityOpConstraints.ForItemContent	Compiled constraints related to an Item; they describe access to their values.
static interface	PrismEntityOpConstraints.ForValueContent	Compiled constraints related to a PrismValue; they describe access to contained sub-items.

Field Summary

Fields inherited from interface com.evolveum.midpoint.util.DebugDumpable

INDENT_STRING

Method Summary

Modifier and Type	Method	Description
@NotNull AccessDecision	getDecision()	Returns the access decision for the current element: - either definite (AccessDecision.ALLOW or AccessDecision.DENY) - or not definite (AccessDecision.DEFAULT.

Methods inherited from interface com.evolveum.midpoint.util.DebugDumpable

debugDump, debugDump, debugDumpLazily, debugDumpLazily

Method Details

getDecision

@NotNull
@NotNull AccessDecision getDecision()

Returns the access decision for the current element: - either definite (AccessDecision.ALLOW or AccessDecision.DENY) - or not definite (AccessDecision.DEFAULT.