public interface AuthorizationManager
Modifier and Type | Interface and Description |
---|---|
static class |
AuthorizationManager.ProtectedOperation |
Modifier and Type | Field and Description |
---|---|
static String |
ADMIN_ROLE |
static String |
OWNER_ROLE |
static String |
PUBLIC_GROUP |
static String |
UNKNOWN_USER |
Modifier and Type | Method and Description |
---|---|
void |
checkAuthorization(String caseId)
Checks if the caller (based on identity provider) is authorized to work with a case identified by caseId
|
void |
checkCommentAuthorization(String caseId,
CaseFileInstance caseFileInstance,
CommentInstance commentInstance)
Check if caller (based on identity provider) is authorized to manipulate given comment
|
void |
checkDataAuthorization(String caseId,
CaseFileInstance caseFileInstance,
Collection<String> dataNames)
Check if caller (based on identity provider) is authorized to manipulate given data
|
void |
checkOperationAuthorization(String caseId,
AuthorizationManager.ProtectedOperation operation)
Checks if the caller (based on identity provider) is authorized to perform given operation on a case.
|
List<CommentInstance> |
filterByCommentAuthorization(String caseId,
CaseFileInstance caseFileInstance,
List<CommentInstance> comments)
Filters provided comments by their restrictions.
|
Map<String,Object> |
filterByDataAuthorization(String caseId,
CaseFileInstance caseFileInstance,
Map<String,Object> data)
Filters provided data by data restrictions.
|
static final String PUBLIC_GROUP
static final String OWNER_ROLE
static final String ADMIN_ROLE
static final String UNKNOWN_USER
void checkAuthorization(String caseId) throws SecurityException
caseId
- unique id of the caseSecurityException
- thrown when caller is not authorized to access the case instancevoid checkOperationAuthorization(String caseId, AuthorizationManager.ProtectedOperation operation) throws SecurityException
caseId
- unique id of the caseoperation
- operations that is being invokedSecurityException
- thrown when caller is not authorized to access the case instanceMap<String,Object> filterByDataAuthorization(String caseId, CaseFileInstance caseFileInstance, Map<String,Object> data)
caseId
- unique id of the casecaseFileInstance
- case file associated with given case instancedata
- actual data to be filteredvoid checkDataAuthorization(String caseId, CaseFileInstance caseFileInstance, Collection<String> dataNames)
caseId
- unique id of the casecaseFileInstance
- case file associated with given case instancedataNames
- data names to be manipulated/put into the case instanceSecurityException
- thrown when caller is not authorized to manipulate any of the given dataList<CommentInstance> filterByCommentAuthorization(String caseId, CaseFileInstance caseFileInstance, List<CommentInstance> comments)
caseId
- unique id of the casecaseFileInstance
- case file associated with given case instancecomments
- comments to be filteredvoid checkCommentAuthorization(String caseId, CaseFileInstance caseFileInstance, CommentInstance commentInstance)
caseId
- unique id of the casecaseFileInstance
- case file associated with given case instancecommentInstance
- comment that is about to be manipulated (updated or removed)SecurityException
- thrown when caller is not authorized to manipulate given commentCopyright © 2001–2019 JBoss by Red Hat. All rights reserved.