public class CachingNamingResolver extends NamingResolverDecorator
NamingResolver
.
Modifier and Type | Field and Description |
---|---|
static String |
CACHE_HASPRIV |
Constructor and Description |
---|
CachingNamingResolver(NamingResolver resolver) |
Modifier and Type | Method and Description |
---|---|
void |
flushCache()
flush cache if caching resolver
|
GrouperSession |
getGrouperSession()
get a reference to the session
|
CacheStats |
getStats(String cache) |
void |
grantPrivilege(Stem stem,
Subject subject,
Privilege privilege,
String uuid)
Grant privilege to subject on group.
|
boolean |
hasPrivilege(Stem stem,
Subject subject,
Privilege privilege)
Check whether subject has privilege on group.
|
boolean |
hqlFilterStemsNotWithPrivWhereClause(Subject subject,
HqlQuery hqlQuery,
StringBuilder hql,
String stemColumn,
Privilege privilege,
boolean considerAllSubject)
for a stem query, check to make sure the subject cant see the records
|
Set<Stem> |
postHqlFilterStems(Set<Stem> stems,
Subject subject,
Set<Privilege> privInSet)
after HQL is run, filter stems.
|
void |
privilegeCopy(Stem stem1,
Stem stem2,
Privilege priv)
Copies privileges for subjects that have the specified privilege on stem1 to stem2.
|
void |
privilegeCopy(Subject subj1,
Subject subj2,
Privilege priv)
Copies privileges of type priv on any subject for the given Subject subj1 to the given Subject subj2.
|
void |
revokeAllPrivilegesForSubject(Subject subject)
Revoke all naming privileges that this subject has.
|
void |
revokePrivilege(Stem stem,
Privilege privilege)
Revoke privilege from all subjects on group.
|
void |
revokePrivilege(Stem stem,
Subject subject,
Privilege privilege)
Revoke privilege from subject on group.
|
void |
stop()
clean up resources, session is stopped
|
getDecoratedResolver, getPrivileges, getStemsWhereSubjectDoesntHavePrivilege, getStemsWhereSubjectHasPrivilege, getSubjectsWithPrivilege, hqlFilterStemsWhereClause
public static final String CACHE_HASPRIV
public CachingNamingResolver(NamingResolver resolver)
resolver
- public void flushCache()
NamingResolver
flushCache
in interface NamingResolver
flushCache
in class NamingResolverDecorator
NamingResolver.flushCache()
public GrouperSession getGrouperSession()
NamingResolver
getGrouperSession
in interface NamingResolver
getGrouperSession
in class NamingResolverDecorator
NamingResolver.getGrouperSession()
public CacheStats getStats(String cache)
cache
- public void grantPrivilege(Stem stem, Subject subject, Privilege privilege, String uuid) throws IllegalArgumentException, UnableToPerformException
NamingResolver
grantPrivilege
in interface NamingResolver
grantPrivilege
in class NamingResolverDecorator
uuid
- if known or nullIllegalArgumentException
- if any parameter is null.UnableToPerformException
- if the privilege could not be granted.NamingResolver.grantPrivilege(Stem, Subject, Privilege, String)
public boolean hasPrivilege(Stem stem, Subject subject, Privilege privilege) throws IllegalArgumentException
NamingResolver
hasPrivilege
in interface NamingResolver
hasPrivilege
in class NamingResolverDecorator
IllegalArgumentException
- if any parameter is null.NamingResolver.hasPrivilege(Stem, Subject, Privilege)
public void revokePrivilege(Stem stem, Privilege privilege) throws IllegalArgumentException, UnableToPerformException
NamingResolver
revokePrivilege
in interface NamingResolver
revokePrivilege
in class NamingResolverDecorator
IllegalArgumentException
- if any parameter is null.UnableToPerformException
- if the privilege could not be revoked.NamingResolver.revokePrivilege(Stem, Privilege)
public void revokePrivilege(Stem stem, Subject subject, Privilege privilege) throws IllegalArgumentException, UnableToPerformException
NamingResolver
revokePrivilege
in interface NamingResolver
revokePrivilege
in class NamingResolverDecorator
IllegalArgumentException
- if any parameter is null.UnableToPerformException
- if the privilege could not be revoked.NamingResolver.revokePrivilege(Stem, Subject, Privilege)
public void privilegeCopy(Stem stem1, Stem stem2, Privilege priv) throws IllegalArgumentException, UnableToPerformException
NamingResolver
privilegeCopy
in interface NamingResolver
privilegeCopy
in class NamingResolverDecorator
IllegalArgumentException
UnableToPerformException
NamingResolver.privilegeCopy(edu.internet2.middleware.grouper.Stem, edu.internet2.middleware.grouper.Stem, edu.internet2.middleware.grouper.privs.Privilege)
public void privilegeCopy(Subject subj1, Subject subj2, Privilege priv) throws IllegalArgumentException, UnableToPerformException
NamingResolver
privilegeCopy
in interface NamingResolver
privilegeCopy
in class NamingResolverDecorator
IllegalArgumentException
UnableToPerformException
NamingResolver.privilegeCopy(edu.internet2.middleware.subject.Subject, edu.internet2.middleware.subject.Subject, edu.internet2.middleware.grouper.privs.Privilege)
public Set<Stem> postHqlFilterStems(Set<Stem> stems, Subject subject, Set<Privilege> privInSet)
NamingResolver
postHqlFilterStems
in interface NamingResolver
postHqlFilterStems
in class NamingResolverDecorator
subject
- which needs view access to the groupsprivInSet
- find a privilege which is in this set
(e.g. for view, send all access privs). There are pre-canned sets in NamingPrivilegeNamingResolver.postHqlFilterStems(java.util.Set, edu.internet2.middleware.subject.Subject, java.util.Set)
public void stop()
NamingResolver
stop
in interface NamingResolver
stop
in class NamingResolverDecorator
NamingResolver.stop()
public void revokeAllPrivilegesForSubject(Subject subject)
NamingResolver
revokeAllPrivilegesForSubject
in interface NamingResolver
revokeAllPrivilegesForSubject
in class NamingResolverDecorator
NamingResolver.revokeAllPrivilegesForSubject(edu.internet2.middleware.subject.Subject)
public boolean hqlFilterStemsNotWithPrivWhereClause(Subject subject, HqlQuery hqlQuery, StringBuilder hql, String stemColumn, Privilege privilege, boolean considerAllSubject)
NamingResolver
hqlFilterStemsNotWithPrivWhereClause
in interface NamingResolver
hqlFilterStemsNotWithPrivWhereClause
in class NamingResolverDecorator
subject
- which needs view access to the groupshql
- the select and current from partstemColumn
- is the name of the group column to join toprivilege
- find a privilege which is in this set (e.g. stem or create)considerAllSubject
- if true, then consider GrouperAll when seeign if subject has priv, else do notedu.internet2.middleware.grouper.privs.NamingResolver#hqlFilterStemsNotWithPrivWhereClause(edu.internet2.middleware.subject.Subject, edu.internet2.middleware.grouper.hibernate.HqlQuery, java.lang.StringBuilder, java.lang.String, Privilege)
Copyright © 2016 Internet2. All rights reserved.