Modifier and Type | Method and Description |
---|---|
PermissionMatchingStrategy |
PolicyInformation.getPermissionMatchingStrategy() |
PermissionMatchingStrategy |
PolicyOverride.getPermissionMatchingStrategy()
|
static PermissionMatchingStrategy |
PermissionMatchingStrategy.valueOf(String name)
Returns the enum constant of this type with the specified name.
|
static PermissionMatchingStrategy[] |
PermissionMatchingStrategy.values()
Returns an array containing the constants of this enum type, in
the order they are declared.
|
Modifier and Type | Method and Description |
---|---|
protected PolicyInformation |
DefaultPolicyAspectProcessor.buildPolicyInformation(IdentityType[] identityTypes,
String[] permissionRoots,
OperationType[] operationTypes,
PermissionMatchingStrategy multipleRootsMatchingStrategy,
String ownerIdentifier,
int param,
int ownerIdentifierParam)
|
PolicyOverride |
PolicyOverride.withPermissionMatchingStrategy(PermissionMatchingStrategy permissionMatchingStrategy) |
Constructor and Description |
---|
PolicyInformation(String[] permissionRoots,
OperationType[] operationTypes,
PermissionMatchingStrategy permissionMatchingStrategy,
IdentityType[] identityTypes,
String ownerIdentifier,
int param,
int ownerIdentifierParam) |
Modifier and Type | Method and Description |
---|---|
PolicyResponse |
TrackablePolicyUtils.validateContext(ContextInfo contextInfo,
String[] requiredPermissionRoots,
PermissionMatchingStrategy permissionMatchingStrategy,
OperationType operationType)
Review the
ContextInfo parameter for valid tenant user membership and valid catalog
visibility based on the current Authentication and requested tenant information in
the contextInfo. |
PolicyResponse |
DefaultTrackablePolicyUtils.validateContext(ContextInfo contextInfo,
String[] requiredPermissionRoots,
PermissionMatchingStrategy permissionMatchingStrategy,
OperationType operationType) |
PolicyResponse |
TrackablePolicyUtils.validateDelete(Trackable entity,
ContextInfo contextInfo,
String[] permissionRoots,
PermissionMatchingStrategy strategy)
Validate that before deleting (if the catalog discrimination is in play) that the item's
catalog is both visible to the current application, and mutable.
|
PolicyResponse |
DefaultTrackablePolicyUtils.validateDelete(Trackable entity,
ContextInfo contextInfo,
String[] permissionRoots,
PermissionMatchingStrategy strategy) |
protected PolicyResponse |
DefaultTrackablePolicyUtils.validateEntityOperation(Trackable entity,
ContextInfo contextInfo,
String[] permissionRoots,
PermissionMatchingStrategy strategy,
OperationType operationType) |
PolicyResponse |
TrackablePolicyUtils.validateInsert(Trackable entity,
ContextInfo contextInfo,
String[] permissionRoots,
PermissionMatchingStrategy strategy)
Validate that before inserting (if catalog discrimination is in play and the current entity
is catalog discriminatable) that the current catalog target for insertion is mutable.
|
PolicyResponse |
DefaultTrackablePolicyUtils.validateInsert(Trackable entity,
ContextInfo contextInfo,
String[] permissionRoots,
PermissionMatchingStrategy strategy) |
protected PolicyResponse |
DefaultTrackablePolicyUtils.validateOperation(ContextInfo contextInfo,
String[] permissionRoots,
PermissionMatchingStrategy strategy) |
protected PolicyResponse |
DefaultTrackablePolicyUtils.validateOperation(ContextInfo contextInfo,
String[] permissionRoots,
PermissionMatchingStrategy strategy,
OperationType operationType) |
PolicyResponse |
TrackablePolicyUtils.validateOther(ContextInfo contextInfo,
String[] permissionRoots,
PermissionMatchingStrategy strategy)
Validate that before misc operation, the required permission is available
|
PolicyResponse |
DefaultTrackablePolicyUtils.validateOther(ContextInfo contextInfo,
String[] permissionRoots,
PermissionMatchingStrategy strategy) |
PolicyResponse |
TrackablePolicyUtils.validatePermission(ContextInfo contextInfo,
String[] permissionRoots,
PermissionMatchingStrategy strategy)
Validate the permission against the granted authorities of the current
Authentication . |
PolicyResponse |
DefaultTrackablePolicyUtils.validatePermission(ContextInfo contextInfo,
String[] permissionRoots,
PermissionMatchingStrategy strategy) |
PolicyResponse |
TrackablePolicyUtils.validatePermission(String[] permissionRoots,
PermissionMatchingStrategy strategy,
OperationType operationType,
ContextInfo contextInfo)
Validate the permission against the granted authorities of the current
Authentication . |
PolicyResponse |
DefaultTrackablePolicyUtils.validatePermission(String[] permissionRoots,
PermissionMatchingStrategy strategy,
OperationType operationType,
ContextInfo contextInfo) |
PolicyResponse |
TrackablePolicyUtils.validateRead(ContextInfo contextInfo,
String[] permissionRoots,
PermissionMatchingStrategy strategy)
Validate that before reading, the required permission is available.
|
PolicyResponse |
DefaultTrackablePolicyUtils.validateRead(ContextInfo contextInfo,
String[] permissionRoots,
PermissionMatchingStrategy strategy) |
PolicyResponse |
TrackablePolicyUtils.validateUpdate(Trackable entity,
ContextInfo contextInfo,
String[] permissionRoots,
PermissionMatchingStrategy strategy)
Validate that before updating (if the catalog discrimination is in play) that the item's
catalog is both visible to the current application, and mutable.
|
PolicyResponse |
DefaultTrackablePolicyUtils.validateUpdate(Trackable entity,
ContextInfo contextInfo,
String[] permissionRoots,
PermissionMatchingStrategy strategy) |
Modifier and Type | Method and Description |
---|---|
protected Set<String> |
VendorAwareTrackablePolicyUtils.filterToVendorRestrictionsMatchingPolicyRequirements(@NonNull Set<String> restrictedVendorRefs,
@NonNull Map<String,Set<String>> vendorRefsByRestrictedAuthority,
OperationType requiredOperationType,
@NonNull String[] permissionRoots,
PermissionMatchingStrategy permissionMatchingStrategy)
|
Set<String> |
VendorAwareTrackablePolicyUtils.filterToVendorRestrictionsMatchingRequiredPermissions(@NonNull Set<String> restrictedVendorRefs,
@NonNull Map<String,Set<String>> vendorRefsByRestrictedAuthority,
@NonNull List<String> fullyExpandedRequiredPermissions,
PermissionMatchingStrategy permissionMatchingStrategy)
|
protected boolean |
VendorAwareTrackablePolicyUtils.isCatalogVisibleByVendorRestrictions(@NonNull ContextInfo contextInfo,
String[] requiredPermissionRoots,
PermissionMatchingStrategy permissionMatchingStrategy,
OperationType requiredOperationType)
Reports whether the catalog referenced in the
contextInfo is visible by the vendor
restrictions in the current authentication. |
PolicyResponse |
VendorAwareTrackablePolicyUtils.validateContext(ContextInfo contextInfo,
String[] requiredPermissionRoots,
PermissionMatchingStrategy permissionMatchingStrategy,
OperationType operationType)
Performs similar validation to
DefaultTrackablePolicyUtils.validateContext(ContextInfo, String[], PermissionMatchingStrategy, OperationType) ,
but also considers whether the catalog in the contextInfo is visible by the current
authentication's vendor restrictions. |
protected PolicyResponse |
VendorAwareTrackablePolicyUtils.validateEntityMutableByCurrentVendorRestrictions(Trackable entity,
ContextInfo contextInfo,
String[] requiredPermissionRoots,
PermissionMatchingStrategy permissionMatchingStrategy,
OperationType operationType)
Checks whether the given
entity being mutated is actually mutable given the current
authentication's vendor privileges and provided policy requirements. |
protected PolicyResponse |
VendorAwareTrackablePolicyUtils.validateEntityOperation(Trackable entity,
ContextInfo contextInfo,
String[] permissionRoots,
PermissionMatchingStrategy strategy,
OperationType operationType)
This is the method used by
DefaultTrackablePolicyUtils.validateUpdate(Trackable, ContextInfo, String[], PermissionMatchingStrategy)
and
DefaultTrackablePolicyUtils.validateDelete(Trackable, ContextInfo, String[], PermissionMatchingStrategy)
to validate an entity can be updated/deleted by the current authentication, so it is
overridden here to add consideration for vendor restrictions. |
PolicyResponse |
VendorAwareTrackablePolicyUtils.validateInsert(Trackable entity,
ContextInfo contextInfo,
String[] permissionRoots,
PermissionMatchingStrategy strategy)
Overrides
DefaultTrackablePolicyUtils.validateInsert(Trackable, ContextInfo, String[], PermissionMatchingStrategy)
to add behavior that checks whether the entity can be inserted by the current
authentication's vendor restrictions. |
PolicyResponse |
VendorAwareTrackablePolicyUtils.validatePermission(String[] permissionRoots,
PermissionMatchingStrategy strategy,
OperationType operationType,
ContextInfo contextInfo)
Overrides
DefaultTrackablePolicyUtils.validatePermission(String[], PermissionMatchingStrategy, OperationType, ContextInfo)
to give special consideration to vendor restrictions and vendor-restricted authorities. |
Copyright © 2021. All rights reserved.