public interface PolicyDecider
Modifier and Type | Method and Description |
---|---|
Set<AbstractMetadataRecord> |
getInaccessibleResources(DataPolicy.PermissionType action,
Set<AbstractMetadataRecord> resources,
DataPolicy.Context context,
CommandContext commandContext)
Returns the set of resources not allowed to be accessed by the current user.
|
boolean |
hasRole(String roleName,
CommandContext context)
Called by the system hasRole function to determine role membership.
|
boolean |
isLanguageAllowed(String language,
CommandContext commandContext)
Returns true if the given language is allowed
|
boolean |
isTempAccessible(DataPolicy.PermissionType action,
AbstractMetadataRecord resource,
DataPolicy.Context context,
CommandContext commandContext)
Checks if the temp table are accessible.
|
boolean |
validateCommand(CommandContext commandContext)
Determines if an authorization check should proceed
|
boolean hasRole(String roleName, CommandContext context)
roleName
- context
- Set<AbstractMetadataRecord> getInaccessibleResources(DataPolicy.PermissionType action, Set<AbstractMetadataRecord> resources, DataPolicy.Context context, CommandContext commandContext)
action
- if context is METADATA, then action execute means a procedure or function, and read some other resourceresources
- context
- in which the action is performed.
For example you can have a context of DataPolicy.Context.UPDATE
for a DataPolicy.PermissionType.READ
for columns used in an UPDATE condition.commandContext
- boolean isLanguageAllowed(String language, CommandContext commandContext)
language
- commandContext
- boolean isTempAccessible(DataPolicy.PermissionType action, AbstractMetadataRecord resource, DataPolicy.Context context, CommandContext commandContext)
action
- resource
- will be null for general temp accesscontext
- in which the action is performed.
For example you can have a context of DataPolicy.Context.UPDATE
for a DataPolicy.PermissionType.READ
for columns used in an UPDATE condition.commandContext
- boolean validateCommand(CommandContext commandContext)
commandContext
- Copyright © 2020. All rights reserved.