public class WheelAttrDefResolver extends AttributeDefResolverDecorator
AccessResolver
.
Constructor and Description |
---|
WheelAttrDefResolver(AttributeDefResolver resolver) |
Modifier and Type | Method and Description |
---|---|
void |
flushCache()
flush cache if caching resolver
|
Set<AttributeDefPrivilege> |
getPrivileges(AttributeDef attributeDef,
Subject subject)
Get all privileges subject has on attributeDef.
|
boolean |
hasPrivilege(AttributeDef attributeDef,
Subject subject,
Privilege privilege)
Check whether subject has privilege on attributeDef.
|
boolean |
hqlFilterAttrDefsWhereClause(Subject subject,
HqlQuery hqlQuery,
StringBuilder hqlTables,
StringBuilder hqlWhereClause,
String attributeDefColumn,
Set<Privilege> privInSet)
for an attrDef query, check to make sure the subject can see the records (if filtering HQL, you can do
the postHqlFilterAttDefs instead if you like)
|
boolean |
hqlFilterAttributeDefsNotWithPrivWhereClause(Subject subject,
HqlQuery hqlQuery,
StringBuilder hql,
String attributeDefColumn,
Privilege privilege,
boolean considerAllSubject)
for an attribute def query, check to make sure the subject cant see the records
|
Set<AttributeDef> |
postHqlFilterAttrDefs(Set<AttributeDef> attributeDefs,
Subject subject,
Set<Privilege> privInSet)
after HQL is run, filter attributeDefs.
|
Set<AttributeAssign> |
postHqlFilterAttributeAssigns(Subject subject,
Set<AttributeAssign> attributeAssigns)
filter attributeDefs for things the subject can see
|
Set<PermissionEntry> |
postHqlFilterPermissions(Subject subject,
Set<PermissionEntry> permissionsEntries)
filter permissions for things the subject can see
|
Set<PITAttributeAssign> |
postHqlFilterPITAttributeAssigns(Subject subject,
Set<PITAttributeAssign> pitAttributeAssigns)
filter pit attribute assignments for things the subject can see
|
void |
stop()
clean up resources, session is stopped
|
getAttributeDefsWhereSubjectDoesntHavePrivilege, getAttributeDefsWhereSubjectHasPrivilege, getDecoratedResolver, getGrouperSession, getSubjectsWithPrivilege, grantPrivilege, privilegeCopy, privilegeCopy, retrievePrivileges, revokeAllPrivilegesForSubject, revokePrivilege, revokePrivilege
public WheelAttrDefResolver(AttributeDefResolver resolver)
resolver
- resolverpublic void stop()
AttributeDefResolver
stop
in interface AttributeDefResolver
stop
in class AttributeDefResolverDecorator
AccessResolver.stop()
public Set<AttributeDefPrivilege> getPrivileges(AttributeDef attributeDef, Subject subject) throws IllegalArgumentException
AttributeDefResolver
getPrivileges
in interface AttributeDefResolver
getPrivileges
in class AttributeDefResolverDecorator
IllegalArgumentException
- if any parameter is null.AttributeDefResolverDecorator.getPrivileges(edu.internet2.middleware.grouper.attr.AttributeDef, edu.internet2.middleware.subject.Subject)
public boolean hasPrivilege(AttributeDef attributeDef, Subject subject, Privilege privilege) throws IllegalArgumentException
AttributeDefResolver
hasPrivilege
in interface AttributeDefResolver
hasPrivilege
in class AttributeDefResolverDecorator
IllegalArgumentException
- if any parameter is null.AttributeDefResolverDecorator.hasPrivilege(edu.internet2.middleware.grouper.attr.AttributeDef, edu.internet2.middleware.subject.Subject, edu.internet2.middleware.grouper.privs.Privilege)
public void flushCache()
AttributeDefResolver
flushCache
in interface AttributeDefResolver
flushCache
in class AttributeDefResolverDecorator
AccessResolver.flushCache()
public Set<AttributeDef> postHqlFilterAttrDefs(Set<AttributeDef> attributeDefs, Subject subject, Set<Privilege> privInSet)
AttributeDefResolver
postHqlFilterAttrDefs
in interface AttributeDefResolver
postHqlFilterAttrDefs
in class AttributeDefResolverDecorator
subject
- which needs view access to the attribute defsprivInSet
- find a privilege which is in this set
(e.g. for view, send all attrDef privs). There are pre-canned sets in AttributeDefAdapterAttributeDefResolverDecorator.postHqlFilterAttrDefs(java.util.Set, edu.internet2.middleware.subject.Subject, java.util.Set)
public boolean hqlFilterAttrDefsWhereClause(Subject subject, HqlQuery hqlQuery, StringBuilder hqlTables, StringBuilder hqlWhereClause, String attributeDefColumn, Set<Privilege> privInSet)
AttributeDefResolver
hqlFilterAttrDefsWhereClause
in interface AttributeDefResolver
hqlFilterAttrDefsWhereClause
in class AttributeDefResolverDecorator
subject
- which needs view access to the attrDefshqlTables
- the select and current from parthqlWhereClause
- is there where clause part of the queryattributeDefColumn
- is the name of the attributeDef column to join toprivInSet
- find a privilege which is in this set (e.g. for view, send all attrDef privs)AttributeDefResolverDecorator.hqlFilterAttrDefsWhereClause(edu.internet2.middleware.subject.Subject, edu.internet2.middleware.grouper.hibernate.HqlQuery, java.lang.StringBuilder, java.lang.StringBuilder, java.lang.String, java.util.Set)
public Set<AttributeAssign> postHqlFilterAttributeAssigns(Subject subject, Set<AttributeAssign> attributeAssigns)
AttributeDefResolver
postHqlFilterAttributeAssigns
in interface AttributeDefResolver
postHqlFilterAttributeAssigns
in class AttributeDefResolverDecorator
AttributeDefResolverDecorator.postHqlFilterAttributeAssigns(edu.internet2.middleware.subject.Subject, java.util.Set)
public Set<PITAttributeAssign> postHqlFilterPITAttributeAssigns(Subject subject, Set<PITAttributeAssign> pitAttributeAssigns)
AttributeDefResolver
postHqlFilterPITAttributeAssigns
in interface AttributeDefResolver
postHqlFilterPITAttributeAssigns
in class AttributeDefResolverDecorator
AttributeDefResolverDecorator.postHqlFilterPITAttributeAssigns(edu.internet2.middleware.subject.Subject, java.util.Set)
public Set<PermissionEntry> postHqlFilterPermissions(Subject subject, Set<PermissionEntry> permissionsEntries)
AttributeDefResolver
postHqlFilterPermissions
in interface AttributeDefResolver
postHqlFilterPermissions
in class AttributeDefResolverDecorator
AttributeDefResolver.postHqlFilterPermissions(edu.internet2.middleware.subject.Subject, java.util.Set)
public boolean hqlFilterAttributeDefsNotWithPrivWhereClause(Subject subject, HqlQuery hqlQuery, StringBuilder hql, String attributeDefColumn, Privilege privilege, boolean considerAllSubject)
AttributeDefResolver
hqlFilterAttributeDefsNotWithPrivWhereClause
in interface AttributeDefResolver
hqlFilterAttributeDefsNotWithPrivWhereClause
in class AttributeDefResolverDecorator
subject
- which needs view access to the groupshql
- the select and current from partattributeDefColumn
- is the name of the attributeDef column to join toprivilege
- find a privilege which is in this set (e.g. for view, attr view)considerAllSubject
- if true, then consider GrouperAll when seeign if subject has priv, else do notAttributeDefResolver.hqlFilterAttributeDefsNotWithPrivWhereClause(edu.internet2.middleware.subject.Subject, edu.internet2.middleware.grouper.hibernate.HqlQuery, java.lang.StringBuilder, java.lang.String, Privilege, boolean)
Copyright © 2016 Internet2. All rights reserved.