@ApplicationScoped public class ACLMigrationTool extends Object
OrganizationalUnit
, Repository
and Module
was to indicate which groups were able to
access a given instance. Those groups were stored as part of the instance persistent status.
As of 7 version, the authorization policy is based on permissions. That means is no longer required
to keep a list of groups per resource instance. What is required is to define proper permission entries into the
active AuthorizationPolicy
This is a utility class which takes care of reading the groups declared for any of the above resource types and creating the necessary permissions so that those resources are protected from user access.
The migration procedure is carried out when an AuthorizationPolicyDeployedEvent
is received, which means
the application is starting up and deploying the authorization policy for the first time.
Constructor and Description |
---|
ACLMigrationTool(OrganizationalUnitService organizationalUnitService,
RepositoryService repositoryService,
PermissionManager permissionManager,
AuthorizationPolicyStorage authorizationPolicyStorage) |
Modifier and Type | Method and Description |
---|---|
protected boolean |
isACLMigrationToolEnabled() |
void |
migrateOrgUnits(AuthorizationPolicy policy) |
void |
migrateRepositories(AuthorizationPolicy policy) |
void |
onDeploy(AuthorizationPolicyDeployedEvent event) |
@Inject public ACLMigrationTool(OrganizationalUnitService organizationalUnitService, RepositoryService repositoryService, PermissionManager permissionManager, AuthorizationPolicyStorage authorizationPolicyStorage)
public void onDeploy(@Observes AuthorizationPolicyDeployedEvent event)
protected boolean isACLMigrationToolEnabled()
public void migrateOrgUnits(AuthorizationPolicy policy)
public void migrateRepositories(AuthorizationPolicy policy)
Copyright © 2012–2020 JBoss by Red Hat. All rights reserved.