public class GrouperNonDbAccessAdapter extends BaseAccessAdapter implements AccessAdapter
Modifier and Type | Field and Description |
---|---|
protected static Map<Privilege,String> |
priv2list |
Constructor and Description |
---|
GrouperNonDbAccessAdapter() |
Modifier and Type | Method and Description |
---|---|
Set<Group> |
getGroupsWhereSubjectDoesntHavePrivilege(GrouperSession grouperSession,
String stemId,
Stem.Scope scope,
Subject subject,
Privilege privilege,
boolean considerAllSubject,
String sqlLikeString)
Get all groups where this subject doesnt have this privilege.
|
Set<Group> |
getGroupsWhereSubjectHasPriv(GrouperSession s,
Subject subj,
Privilege priv)
Get all groups where this subject has this privilege.
|
Set |
getPrivs(GrouperSession s,
Group g,
Subject subj)
Get all privileges held by this subject on this group.
|
Set<Stem> |
getStemsWhereGroupThatSubjectHasPrivilege(GrouperSession grouperSession,
Subject subject,
Privilege privilege)
get stems where a group exists where the subject has privilege
|
Set |
getSubjectsWithPriv(GrouperSession s,
Group g,
Privilege priv)
Get all subjects with this privilege on this group.
|
void |
grantPriv(GrouperSession s,
Group g,
Subject subj,
Privilege priv,
String uuid)
Grant the privilege to the subject on this group.
|
boolean |
hasPriv(GrouperSession s,
Group g,
Subject subj,
Privilege priv)
Check whether the subject has this privilege on this group.
|
void |
privilegeCopy(GrouperSession s,
Group g1,
Group g2,
Privilege priv)
Copies privileges for subjects that have the specified privilege on g1 to g2.
|
void |
privilegeCopy(GrouperSession s,
Subject subj1,
Subject subj2,
Privilege priv)
Copies privileges of type priv on any subject for the given Subject subj1 to the given Subject subj2.
|
Set<PrivilegeSubjectContainer> |
retrievePrivileges(GrouperSession grouperSession,
Group group,
Set<Privilege> privileges,
MembershipType membershipType,
QueryPaging queryPaging,
Set<Member> additionalMembers)
get a list of privilege subjects, there are no results with the same subject/privilege combination
|
void |
revokeAllPrivilegesForSubject(GrouperSession grouperSession,
Subject subject)
Revoke all access privileges that this subject has.
|
void |
revokePriv(GrouperSession s,
Group g,
Privilege priv)
Revoke this privilege from everyone on this group.
|
void |
revokePriv(GrouperSession s,
Group g,
Subject subj,
Privilege priv)
Revoke the privilege from the subject on this group.
|
hqlFilterGroupsNotWithPrivWhereClause, hqlFilterGroupsWhereClause, postHqlFilterGroups, postHqlFilterMemberships, postHqlFilterStemsWithGroups
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait
hqlFilterGroupsNotWithPrivWhereClause, hqlFilterGroupsWhereClause, postHqlFilterGroups, postHqlFilterMemberships, postHqlFilterStemsWithGroups
public Set getSubjectsWithPriv(GrouperSession s, Group g, Privilege priv) throws SchemaException
AccessAdapter
Set admins = ap.getSubjectsWithPriv(s, g, AccessPrivilege.ADMIN);
getSubjectsWithPriv
in interface AccessAdapter
s
- Get privileges within this session context.g
- Get privileges on this group.priv
- Get this privilege.Subject
objects.SchemaException
AccessAdapter.getSubjectsWithPriv(edu.internet2.middleware.grouper.GrouperSession, edu.internet2.middleware.grouper.Group, edu.internet2.middleware.grouper.privs.Privilege)
public Set<Group> getGroupsWhereSubjectHasPriv(GrouperSession s, Subject subj, Privilege priv) throws SchemaException
try { Set isAdmin = ap.getGroupsWhereSubjectHasPriv( s, subj, AccessPrivilege.ADMIN ); } catch (SchemaException eS) { // Invalid priv }
getGroupsWhereSubjectHasPriv
in interface AccessAdapter
s
- Get privileges within this session context.subj
- Get privileges for this subject.priv
- Get this privilege.Group
objects.SchemaException
public Set<Group> getGroupsWhereSubjectDoesntHavePrivilege(GrouperSession grouperSession, String stemId, Stem.Scope scope, Subject subject, Privilege privilege, boolean considerAllSubject, String sqlLikeString)
getGroupsWhereSubjectDoesntHavePrivilege
in interface AccessAdapter
grouperSession
- stemId
- scope
- subject
- privilege
- considerAllSubject
- sqlLikeString
- public Set<Stem> getStemsWhereGroupThatSubjectHasPrivilege(GrouperSession grouperSession, Subject subject, Privilege privilege)
AccessAdapter
getStemsWhereGroupThatSubjectHasPrivilege
in interface AccessAdapter
AccessAdapter.getStemsWhereGroupThatSubjectHasPrivilege(edu.internet2.middleware.grouper.GrouperSession, edu.internet2.middleware.subject.Subject, edu.internet2.middleware.grouper.privs.Privilege)
public Set getPrivs(GrouperSession s, Group g, Subject subj)
Set privs = ap.getPrivs(s, g, subj);
getPrivs
in interface AccessAdapter
s
- Get privileges within this session context.g
- Get privileges on this group.subj
- Get privileges for this member.public void grantPriv(GrouperSession s, Group g, Subject subj, Privilege priv, String uuid) throws GrantPrivilegeException, InsufficientPrivilegeException, SchemaException
try { ap.grantPriv(s, g, subj, AccessPrivilege.ADMIN); } catch (GrantPrivilegeException e0) { // Unable to grant the privilege } catch (InsufficientPrivilegeException e1) { // Not privileged to grant the privilege }
grantPriv
in interface AccessAdapter
s
- Grant privilege in this session context.g
- Grant privilege on this group.subj
- Grant privilege to this subject.priv
- Grant this privilege.uuid
- GrantPrivilegeException
InsufficientPrivilegeException
SchemaException
public boolean hasPriv(GrouperSession s, Group g, Subject subj, Privilege priv) throws SchemaException
AccessAdapter
try { ap.hasPriv(s, g, subject, AccessPrivilege.ADMIN); } catch (SchemaException e) { // Invalid privilege }
hasPriv
in interface AccessAdapter
s
- Check privilege in this session context.g
- Check privilege on this group.subj
- Check privilege for this subject.priv
- Check this privilege.SchemaException
AccessAdapter.hasPriv(edu.internet2.middleware.grouper.GrouperSession, edu.internet2.middleware.grouper.Group, edu.internet2.middleware.subject.Subject, edu.internet2.middleware.grouper.privs.Privilege)
public void privilegeCopy(GrouperSession s, Group g1, Group g2, Privilege priv) throws InsufficientPrivilegeException, GrantPrivilegeException, SchemaException
privilegeCopy
in interface AccessAdapter
s
- g1
- g2
- priv
- InsufficientPrivilegeException
GrantPrivilegeException
SchemaException
public void privilegeCopy(GrouperSession s, Subject subj1, Subject subj2, Privilege priv) throws InsufficientPrivilegeException, GrantPrivilegeException, SchemaException
privilegeCopy
in interface AccessAdapter
s
- subj1
- subj2
- priv
- InsufficientPrivilegeException
GrantPrivilegeException
SchemaException
public void revokePriv(GrouperSession s, Group g, Privilege priv) throws InsufficientPrivilegeException, RevokePrivilegeException, SchemaException
try { ap.revokePriv(s, g, AccessPrivilege.ADMIN); } catch (InsufficientPrivilegeException eIP) { // Not privileged to revoke the privilege } catch (RevokePrivilegeException eRP) { // Unable to revoke the privilege }
revokePriv
in interface AccessAdapter
s
- Revoke privilege in this session context.g
- Revoke privilege on this group.priv
- Revoke this privilege.InsufficientPrivilegeException
RevokePrivilegeException
SchemaException
public void revokePriv(GrouperSession s, Group g, Subject subj, Privilege priv) throws InsufficientPrivilegeException, RevokePrivilegeException, SchemaException
try { ap.revokePriv(s, g, subj, AccessPrivilege.ADMIN); } catch (InsufficientPrivilegeException e0) { // Not privileged to grant the privilege } catch (RevokePrivilegeException e2) { // Unable to revoke the privilege }
revokePriv
in interface AccessAdapter
s
- Revoke privilege in this session context.g
- Revoke privilege on this group.subj
- Revoke privilege from this subject.priv
- Revoke this privilege.InsufficientPrivilegeException
RevokePrivilegeException
SchemaException
public void revokeAllPrivilegesForSubject(GrouperSession grouperSession, Subject subject)
AccessAdapter
public Set<PrivilegeSubjectContainer> retrievePrivileges(GrouperSession grouperSession, Group group, Set<Privilege> privileges, MembershipType membershipType, QueryPaging queryPaging, Set<Member> additionalMembers)
AccessAdapter
retrievePrivileges
in interface AccessAdapter
grouperSession
- grouper sessiongroup
- to search onprivileges
- if blank, get allmembershipType
- if immediate, effective, or blank for allqueryPaging
- if a certain page should be returned based on subjectadditionalMembers
- additional members to query that the user is finding or addingedu.internet2.middleware.grouper.privsAccessAdapter#retrievePrivileges(edu.internet2.middleware.grouper.GrouperSession, Group, java.util.Set, edu.internet2.middleware.grouper.membership.MembershipType, edu.internet2.middleware.grouper.internal.dao.QueryPaging, Set)
Copyright © 2016 Internet2. All rights reserved.