public interface AuthorizationManager
It provides services for checking access to Resource
instances
as well as services to check if a given permission has been granted to a user.
Modifier and Type | Method and Description |
---|---|
boolean |
authorize(Permission permission,
org.jboss.errai.security.shared.api.identity.User user)
It redirects to
authorize(Permission, User, VotingStrategy)
using the default voting strategy defined at PermissionManager . |
boolean |
authorize(Permission permission,
org.jboss.errai.security.shared.api.identity.User user,
VotingStrategy votingStrategy)
Check of the given permission has been granted to the user.
|
boolean |
authorize(Resource resource,
ResourceAction action,
org.jboss.errai.security.shared.api.identity.User user)
It redirects to
authorize(Resource, ResourceAction, User)
using the default voting strategy defined at PermissionManager . |
boolean |
authorize(Resource resource,
ResourceAction action,
org.jboss.errai.security.shared.api.identity.User user,
VotingStrategy votingStrategy)
Check if the given action can be performed over the specified resource or any of its
dependent resource references (see
Resource.getDependencies() ). |
boolean |
authorize(ResourceType resourceType,
ResourceAction action,
org.jboss.errai.security.shared.api.identity.User user)
It redirects to
authorize(ResourceType, ResourceAction, User, VotingStrategy)
using the default voting strategy defined at PermissionManager . |
boolean |
authorize(ResourceType resourceType,
ResourceAction action,
org.jboss.errai.security.shared.api.identity.User user,
VotingStrategy votingStrategy)
Check if the given action can be performed over the specified resource or any of its
dependent resource references (see
Resource.getDependencies() ). |
boolean |
authorize(Resource resource,
org.jboss.errai.security.shared.api.identity.User user)
It redirects to
authorize(Resource, User, VotingStrategy)
using the default voting strategy defined at PermissionManager . |
boolean |
authorize(Resource resource,
org.jboss.errai.security.shared.api.identity.User user,
VotingStrategy votingStrategy)
Check if the specified user can "access" a given resource.
|
boolean |
authorize(String permission,
org.jboss.errai.security.shared.api.identity.User user)
It redirects to
authorize(String, User, VotingStrategy)
using the default voting strategy defined at PermissionManager . |
boolean |
authorize(String permission,
org.jboss.errai.security.shared.api.identity.User user,
VotingStrategy votingStrategy)
Check of the given permission has been granted to the user.
|
ResourceCheck |
check(ResourceType type,
org.jboss.errai.security.shared.api.identity.User user)
It redirects to
check(ResourceType, User, VotingStrategy)
using the default voting strategy defined at PermissionManager . |
ResourceCheck |
check(ResourceType resourceType,
org.jboss.errai.security.shared.api.identity.User user,
VotingStrategy votingStrategy)
Creates a brand new
ResourceCheck instance which provides a fluent styled API for
the checking of restricted actions over a ResourceType . |
ResourceCheck |
check(Resource resource,
org.jboss.errai.security.shared.api.identity.User user)
It redirects to
check(Resource, User, VotingStrategy)
using the default voting strategy defined at PermissionManager . |
ResourceCheck |
check(Resource resource,
org.jboss.errai.security.shared.api.identity.User user,
VotingStrategy votingStrategy)
Creates a brand new
ResourceCheck instance which provides a fluent styled API for
the checking of restricted actions over Resource instances. |
PermissionCheck |
check(String permission,
org.jboss.errai.security.shared.api.identity.User user)
It redirects to
check(String, User, VotingStrategy)
using the default voting strategy defined at PermissionManager . |
PermissionCheck |
check(String permission,
org.jboss.errai.security.shared.api.identity.User user,
VotingStrategy votingStrategy)
Creates a brand new
PermissionCheck instance which provides a
fluent styled API for checking permissions. |
void |
invalidate(org.jboss.errai.security.shared.api.identity.User user)
Invalidate user related authorization data cached
|
boolean authorize(Resource resource, org.jboss.errai.security.shared.api.identity.User user, VotingStrategy votingStrategy)
Notice the resource may have dependencies (Resource.getDependencies()
) to
other resources, in such case the resource is only accessible if and only if one of
its dependent references is accessible too.
resource
- The resourceuser
- The user instancevotingStrategy
- The voting strategy to use when voting is required
(users with more than one role and/or group assigned).boolean authorize(Resource resource, ResourceAction action, org.jboss.errai.security.shared.api.identity.User user, VotingStrategy votingStrategy)
Resource.getDependencies()
).resource
- The resource instance to checkaction
- The action to check. If null then the authorize(Resource, User)
method is invoked.user
- The user instancevotingStrategy
- The voting strategy to use when voting is required
(users with more than one role and/or group assigned).boolean authorize(ResourceType resourceType, ResourceAction action, org.jboss.errai.security.shared.api.identity.User user, VotingStrategy votingStrategy)
Resource.getDependencies()
).resourceType
- The resource type to checkaction
- The action to check.user
- The user instancevotingStrategy
- The voting strategy to use when voting is required
(users with more than one role and/or group assigned).boolean authorize(String permission, org.jboss.errai.security.shared.api.identity.User user, VotingStrategy votingStrategy)
permission
- The name of the permission to checkuser
- The user instancevotingStrategy
- The voting strategy to use when voting is required
(users with more than one role and/or group assigned).boolean authorize(Permission permission, org.jboss.errai.security.shared.api.identity.User user, VotingStrategy votingStrategy)
permission
- The name of the permission to checkuser
- The user instancevotingStrategy
- The voting strategy to use when voting is required
(users with more than one role and/or group assigned).ResourceCheck check(Resource resource, org.jboss.errai.security.shared.api.identity.User user, VotingStrategy votingStrategy)
ResourceCheck
instance which provides a fluent styled API for
the checking of restricted actions over Resource
instances.
ExampleUsage:
User user;
Resource resource;
AuthorizationManager authzManager;
boolean result = authzManager.check(resource, user)
.granted(() -> System.out.println("Access granted"))
.denied(() -> System.out.println("Access denied"))
.result();
resource
- The resource to checkvotingStrategy
- The voting strategy to use when voting is required
(users with more than one role and/or group assigned).AuthorizationCheck
instance.ResourceCheck check(ResourceType resourceType, org.jboss.errai.security.shared.api.identity.User user, VotingStrategy votingStrategy)
ResourceCheck
instance which provides a fluent styled API for
the checking of restricted actions over a ResourceType
.
ExampleUsage:
User user;
AuthorizationManager authzManager;
boolean result = authzManager.check(ActivityResourceType.PERSPECTIVE, user)
.granted(() -> System.out.println("Access granted"))
.denied(() -> System.out.println("Access denied"))
.result();
resourceType
- The resource type to checkvotingStrategy
- The voting strategy to use when voting is required
(users with more than one role and/or group assigned).AuthorizationCheck
instance.PermissionCheck check(String permission, org.jboss.errai.security.shared.api.identity.User user, VotingStrategy votingStrategy)
PermissionCheck
instance which provides a
fluent styled API for checking permissions.
ExampleUsage:
User user;
AuthorizationManager authzManager;
boolean result = authzManager.check("myfeature", user)
.granted(() -> System.out.println("Access granted"))
.denied(() -> System.out.println("Access denied"))
.result();
permission
- The name of the permission to checkvotingStrategy
- The voting strategy to use when voting is required
(users with more than one role and/or group assigned).AuthorizationCheck
instance.boolean authorize(Resource resource, org.jboss.errai.security.shared.api.identity.User user)
authorize(Resource, User, VotingStrategy)
using the default voting strategy defined at PermissionManager
.boolean authorize(Resource resource, ResourceAction action, org.jboss.errai.security.shared.api.identity.User user)
authorize(Resource, ResourceAction, User)
using the default voting strategy defined at PermissionManager
.boolean authorize(ResourceType resourceType, ResourceAction action, org.jboss.errai.security.shared.api.identity.User user)
authorize(ResourceType, ResourceAction, User, VotingStrategy)
using the default voting strategy defined at PermissionManager
.boolean authorize(String permission, org.jboss.errai.security.shared.api.identity.User user)
authorize(String, User, VotingStrategy)
using the default voting strategy defined at PermissionManager
.boolean authorize(Permission permission, org.jboss.errai.security.shared.api.identity.User user)
authorize(Permission, User, VotingStrategy)
using the default voting strategy defined at PermissionManager
.ResourceCheck check(Resource resource, org.jboss.errai.security.shared.api.identity.User user)
check(Resource, User, VotingStrategy)
using the default voting strategy defined at PermissionManager
.ResourceCheck check(ResourceType type, org.jboss.errai.security.shared.api.identity.User user)
check(ResourceType, User, VotingStrategy)
using the default voting strategy defined at PermissionManager
.PermissionCheck check(String permission, org.jboss.errai.security.shared.api.identity.User user)
check(String, User, VotingStrategy)
using the default voting strategy defined at PermissionManager
.void invalidate(org.jboss.errai.security.shared.api.identity.User user)
user
- user to invalidate cacheCopyright © 2012–2018 JBoss by Red Hat. All rights reserved.