Package com.evolveum.midpoint.model.api

Enum Class ModelAuthorizationAction

java.lang.Object

java.lang.Enum<ModelAuthorizationAction>

com.evolveum.midpoint.model.api.ModelAuthorizationAction

All Implemented Interfaces:

DisplayableValue<String>, Serializable, Comparable<ModelAuthorizationAction>, Constable

public enum ModelAuthorizationAction
extends Enum<ModelAuthorizationAction>
implements DisplayableValue<String>

Represents a model-level action (method) that can be authorized. Documented in https://docs.evolveum.com/midpoint/reference/security/authorization/configuration/#object-authorization-actions with additional (developer-level) information here.

See Also:

• RestAuthorizationAction

Nested Class Summary

Nested classes/interfaces inherited from class java.lang.Enum

Enum.EnumDesc<E extends Enum<E>>

Enum Constant Summary

Enum Constants

Enum Constant	Description
ADD
ASSIGN
ATTORNEY
AUDIT_MANAGE
AUDIT_READ
AUDIT_RECORD
CANCEL_CASE
CHANGE_CREDENTIALS
CLEANUP_AUDIT_RECORDS
CLOSE_CERTIFICATION_CAMPAIGN
CLOSE_CERTIFICATION_CAMPAIGN_REVIEW_STAGE
COMPLETE_ALL_WORK_ITEMS	Deprecated.
COMPLETE_WORK_ITEM	Ability to complete a work item (case- or certification- related).
CREATE_CERTIFICATION_CAMPAIGN
DELEGATE
DELEGATE_ALL_WORK_ITEMS	Deprecated.
DELEGATE_OWN_WORK_ITEMS	Deprecated.
DELEGATE_WORK_ITEM	Ability to delegate a work item (case- or certification- related).
DELETE
DISCOVER_CONNECTORS
EXECUTE_SCRIPT	Deprecated.
GET
GET_EXTENSION_SCHEMA
IMPORT_FROM_RESOURCE	Import resource objects from resource.
IMPORT_OBJECTS	Import objects from file or a stream.
IMPORT_REPORT
MODIFY	Allows the object to be modified.
NOTIFY_CHANGE
OPEN_CERTIFICATION_CAMPAIGN_REVIEW_STAGE
PARTIAL_EXECUTION
RAW_OPERATION
READ
READ_OWN_CERTIFICATION_DECISIONS	Deprecated.
READ_THREADS
READ_TRACE
RECOMPUTE
RECORD_CERTIFICATION_DECISION	Deprecated.
RECORD_TRACE
REITERATE_CERTIFICATION_CAMPAIGN
RESUME_TASK
RUN_REPORT
RUN_TASK_IMMEDIATELY
SEARCH
SEARCH_BY
START_CERTIFICATION_REMEDIATION
START_SERVICE_THREADS
START_TASK_SCHEDULER
STOP_SERVICE_THREADS
STOP_TASK_SCHEDULER
SUSPEND_TASK
SYNCHRONIZE_TASKS
SYNCHRONIZE_WORKFLOW_REQUESTS
TEST
UNASSIGN
USE	Allows to "use" an object; the exact meaning depends on the type of the object.

Field Summary

Fields

Modifier and Type	Field	Description
static final String[]	AUTZ_ACTIONS_URLS_ADD
static final String[]	AUTZ_ACTIONS_URLS_ASSIGN
static final String[]	AUTZ_ACTIONS_URLS_ATTORNEY
static final String[]	AUTZ_ACTIONS_URLS_GET
static final String[]	AUTZ_ACTIONS_URLS_MODIFY
static final String[]	AUTZ_ACTIONS_URLS_SEARCH
static final String[]	AUTZ_ACTIONS_URLS_SEARCH_BY

Method Summary

Modifier and Type	Method	Description
String	getDescription()	Returns longer description that can be used as a help text, tooltip or for similar purpose.
String	getLabel()	Returns short user-friendly label.
String	getUrl()
String	getValue()	Retuns actual value.
static ModelAuthorizationAction	valueOf(String name)	Returns the enum constant of this class with the specified name.
static ModelAuthorizationAction[]	values()	Returns an array containing the constants of this enum class, in the order they are declared.

Methods inherited from class java.lang.Enum

clone, compareTo, describeConstable, equals, finalize, getDeclaringClass, hashCode, name, ordinal, toString, valueOf

Methods inherited from class java.lang.Object

getClass, notify, notifyAll, wait, wait, wait

Enum Constant Details

READ

public static final ModelAuthorizationAction READ

GET

public static final ModelAuthorizationAction GET

SEARCH

public static final ModelAuthorizationAction SEARCH

SEARCH_BY

public static final ModelAuthorizationAction SEARCH_BY

ADD

public static final ModelAuthorizationAction ADD

MODIFY

public static final ModelAuthorizationAction MODIFY

Allows the object to be modified. When asked about it (e.g., via SecurityEnforcer.isAuthorized(String, AuthorizationPhaseType, AbstractAuthorizationParameters, SecurityEnforcer.Options, Task, OperationResult)), please make sure that you provide a non-null delta that describes the requested modification. A special case is asking whether there is _any_ authorization to modify the object. In that case, you may provide an empty delta, provided by it is *non-null*.

DELETE

public static final ModelAuthorizationAction DELETE

RECOMPUTE

public static final ModelAuthorizationAction RECOMPUTE

TEST

public static final ModelAuthorizationAction TEST

USE

public static final ModelAuthorizationAction USE

Allows to "use" an object; the exact meaning depends on the type of the object. Currently supported for: - task templates: here it means instantiating the template by ModelInteractionService.submitTaskFromTemplate(String, ActivityCustomization, Task, OperationResult) and related methods.

IMPORT_OBJECTS

public static final ModelAuthorizationAction IMPORT_OBJECTS

Import objects from file or a stream. This means importing any type of object (e.g. user, configuration, resource, object templates, ...

IMPORT_FROM_RESOURCE

public static final ModelAuthorizationAction IMPORT_FROM_RESOURCE

Import resource objects from resource. This means import of accounts, entitlements or other objects from a resource. The import creates shadows.

DISCOVER_CONNECTORS

public static final ModelAuthorizationAction DISCOVER_CONNECTORS

ASSIGN

public static final ModelAuthorizationAction ASSIGN

UNASSIGN

public static final ModelAuthorizationAction UNASSIGN

DELEGATE

public static final ModelAuthorizationAction DELEGATE

ATTORNEY

public static final ModelAuthorizationAction ATTORNEY

EXECUTE_SCRIPT

@Deprecated
public static final ModelAuthorizationAction EXECUTE_SCRIPT

Deprecated.

CHANGE_CREDENTIALS

public static final ModelAuthorizationAction CHANGE_CREDENTIALS

NOTIFY_CHANGE

public static final ModelAuthorizationAction NOTIFY_CHANGE

SUSPEND_TASK

public static final ModelAuthorizationAction SUSPEND_TASK

RESUME_TASK

public static final ModelAuthorizationAction RESUME_TASK

RUN_TASK_IMMEDIATELY

public static final ModelAuthorizationAction RUN_TASK_IMMEDIATELY

STOP_SERVICE_THREADS

public static final ModelAuthorizationAction STOP_SERVICE_THREADS

START_SERVICE_THREADS

public static final ModelAuthorizationAction START_SERVICE_THREADS

SYNCHRONIZE_TASKS

public static final ModelAuthorizationAction SYNCHRONIZE_TASKS

SYNCHRONIZE_WORKFLOW_REQUESTS

public static final ModelAuthorizationAction SYNCHRONIZE_WORKFLOW_REQUESTS

STOP_TASK_SCHEDULER

public static final ModelAuthorizationAction STOP_TASK_SCHEDULER

START_TASK_SCHEDULER

public static final ModelAuthorizationAction START_TASK_SCHEDULER

READ_THREADS

public static final ModelAuthorizationAction READ_THREADS

COMPLETE_WORK_ITEM

public static final ModelAuthorizationAction COMPLETE_WORK_ITEM

Ability to complete a work item (case- or certification- related).

DELEGATE_WORK_ITEM

public static final ModelAuthorizationAction DELEGATE_WORK_ITEM

Ability to delegate a work item (case- or certification- related).

CREATE_CERTIFICATION_CAMPAIGN

public static final ModelAuthorizationAction CREATE_CERTIFICATION_CAMPAIGN

OPEN_CERTIFICATION_CAMPAIGN_REVIEW_STAGE

public static final ModelAuthorizationAction OPEN_CERTIFICATION_CAMPAIGN_REVIEW_STAGE

CLOSE_CERTIFICATION_CAMPAIGN_REVIEW_STAGE

public static final ModelAuthorizationAction CLOSE_CERTIFICATION_CAMPAIGN_REVIEW_STAGE

START_CERTIFICATION_REMEDIATION

public static final ModelAuthorizationAction START_CERTIFICATION_REMEDIATION

CLOSE_CERTIFICATION_CAMPAIGN

public static final ModelAuthorizationAction CLOSE_CERTIFICATION_CAMPAIGN

REITERATE_CERTIFICATION_CAMPAIGN

public static final ModelAuthorizationAction REITERATE_CERTIFICATION_CAMPAIGN

READ_OWN_CERTIFICATION_DECISIONS

@Deprecated
public static final ModelAuthorizationAction READ_OWN_CERTIFICATION_DECISIONS

Deprecated.

Replaced by READ, see AuthorizationMigrator. No longer used in the production code.

RECORD_CERTIFICATION_DECISION

@Deprecated
public static final ModelAuthorizationAction RECORD_CERTIFICATION_DECISION

Deprecated.

Replaced by COMPLETE_WORK_ITEM. No longer used in the production code.

COMPLETE_ALL_WORK_ITEMS

@Deprecated
public static final ModelAuthorizationAction COMPLETE_ALL_WORK_ITEMS

Deprecated.

Replaced by COMPLETE_WORK_ITEM. No longer used in the production code.

DELEGATE_ALL_WORK_ITEMS

@Deprecated
public static final ModelAuthorizationAction DELEGATE_ALL_WORK_ITEMS

Deprecated.

Replaced by DELEGATE_WORK_ITEM. No longer used in the production code.

DELEGATE_OWN_WORK_ITEMS

@Deprecated
public static final ModelAuthorizationAction DELEGATE_OWN_WORK_ITEMS

Deprecated.

Replaced by DELEGATE_WORK_ITEM. No longer used in the production code.

CANCEL_CASE

public static final ModelAuthorizationAction CANCEL_CASE

AUDIT_READ

public static final ModelAuthorizationAction AUDIT_READ

AUDIT_RECORD

public static final ModelAuthorizationAction AUDIT_RECORD

AUDIT_MANAGE

public static final ModelAuthorizationAction AUDIT_MANAGE

RAW_OPERATION

public static final ModelAuthorizationAction RAW_OPERATION

PARTIAL_EXECUTION

public static final ModelAuthorizationAction PARTIAL_EXECUTION

GET_EXTENSION_SCHEMA

public static final ModelAuthorizationAction GET_EXTENSION_SCHEMA

RUN_REPORT

public static final ModelAuthorizationAction RUN_REPORT

IMPORT_REPORT

public static final ModelAuthorizationAction IMPORT_REPORT

CLEANUP_AUDIT_RECORDS

@Experimental
public static final ModelAuthorizationAction CLEANUP_AUDIT_RECORDS

RECORD_TRACE

@Experimental
public static final ModelAuthorizationAction RECORD_TRACE

READ_TRACE

@Experimental
public static final ModelAuthorizationAction READ_TRACE

Field Details

AUTZ_ACTIONS_URLS_SEARCH

public static final String[] AUTZ_ACTIONS_URLS_SEARCH

AUTZ_ACTIONS_URLS_SEARCH_BY

public static final String[] AUTZ_ACTIONS_URLS_SEARCH_BY

AUTZ_ACTIONS_URLS_GET

public static final String[] AUTZ_ACTIONS_URLS_GET

AUTZ_ACTIONS_URLS_ADD

public static final String[] AUTZ_ACTIONS_URLS_ADD

AUTZ_ACTIONS_URLS_MODIFY

public static final String[] AUTZ_ACTIONS_URLS_MODIFY

AUTZ_ACTIONS_URLS_ASSIGN

public static final String[] AUTZ_ACTIONS_URLS_ASSIGN

AUTZ_ACTIONS_URLS_ATTORNEY

public static final String[] AUTZ_ACTIONS_URLS_ATTORNEY

Method Details

values

public static ModelAuthorizationAction[] values()

Returns an array containing the constants of this enum class, in the order they are declared.

Returns:

an array containing the constants of this enum class, in the order they are declared

valueOf

public static ModelAuthorizationAction valueOf(String name)

Returns the enum constant of this class with the specified name. The string must match exactly an identifier used to declare an enum constant in this class. (Extraneous whitespace characters are not permitted.)

Parameters:

name - the name of the enum constant to be returned.

Returns:

the enum constant with the specified name

Throws:

IllegalArgumentException - if this enum class has no constant with the specified name

NullPointerException - if the argument is null

getUrl

public String getUrl()

getValue

public String getValue()

Description copied from interface: DisplayableValue

Retuns actual value. This may not be user-friendly.

Specified by:

getValue in interface DisplayableValue<String>

getLabel

public String getLabel()

Description copied from interface: DisplayableValue

Returns short user-friendly label. Catalog key may be returned instead of actual text.

Specified by:

getLabel in interface DisplayableValue<String>

getDescription

public String getDescription()

Description copied from interface: DisplayableValue

Returns longer description that can be used as a help text, tooltip or for similar purpose. Catalog key may be returned instead of actual text.

Specified by:

getDescription in interface DisplayableValue<String>