Package dev.dsf.fhir.authorization

Class AbstractMetaTagAuthorizationRule<R extends org.hl7.fhir.r4.model.Resource,D extends ResourceDao<R>>

java.lang.Object

dev.dsf.fhir.authorization.AbstractAuthorizationRule<R,D>

dev.dsf.fhir.authorization.AbstractMetaTagAuthorizationRule<R,D>

All Implemented Interfaces:

AuthorizationRule<R>, org.springframework.beans.factory.InitializingBean

Direct Known Subclasses:

ActivityDefinitionAuthorizationRule, BinaryAuthorizationRule, BundleAuthorizationRule, CodeSystemAuthorizationRule, DocumentReferenceAuthorizationRule, EndpointAuthorizationRule, GroupAuthorizationRule, HealthcareServiceAuthorizationRule, LibraryAuthorizationRule, LocationAuthorizationRule, MeasureAuthorizationRule, MeasureReportAuthorizationRule, NamingSystemAuthorizationRule, OrganizationAffiliationAuthorizationRule, OrganizationAuthorizationRule, PatientAuthorizationRule, PractitionerAuthorizationRule, PractitionerRoleAuthorizationRule, ProvenanceAuthorizationRule, QuestionnaireAuthorizationRule, ResearchStudyAuthorizationRule, StructureDefinitionAuthorizationRule, SubscriptionAuthorizationRule, ValueSetAuthorizationRule

public abstract class AbstractMetaTagAuthorizationRule<R extends org.hl7.fhir.r4.model.Resource,D extends ResourceDao<R>>
extends AbstractAuthorizationRule<R,D>
implements AuthorizationRule<R>, org.springframework.beans.factory.InitializingBean

Field Summary

Fields inherited from class dev.dsf.fhir.authorization.AbstractAuthorizationRule

daoProvider, ORGANIZATION_IDENTIFIER_SYSTEM, organizationProvider, parameterConverter, readAccessHelper, referenceResolver, resourceType, serverBase

Constructor Summary

Constructors

Constructor	Description
AbstractMetaTagAuthorizationRule(Class<R> resourceType, DaoProvider daoProvider, String serverBase, ReferenceResolver referenceResolver, OrganizationProvider organizationProvider, ReadAccessHelper readAccessHelper, ParameterConverter parameterConverter)

Method Summary

Modifier and Type	Method	Description
protected final boolean	hasValidReadAccessTag(Connection connection, org.hl7.fhir.r4.model.Resource resource)
protected abstract boolean	modificationsOk(Connection connection, R oldResource, R newResource)	No need to check if the new resource is valid, will be checked by newResourceOkForUpdate(Connection, Identity, Resource)
protected abstract Optional<String>	newResourceOkForCreate(Connection connection, Identity identity, R newResource)
protected abstract Optional<String>	newResourceOkForUpdate(Connection connection, Identity identity, R newResource)
final Optional<String>	reasonCreateAllowed(Connection connection, Identity identity, R newResource)	Override this method for non default behavior.
final Optional<String>	reasonDeleteAllowed(Connection connection, Identity identity, R oldResource)	Override this method for non default behavior.
final Optional<String>	reasonReadAllowed(Connection connection, Identity identity, R existingResource)	Override this method for non default behavior.
final Optional<String>	reasonUpdateAllowed(Connection connection, Identity identity, R oldResource, R newResource)	Override this method for non default behavior.
protected abstract boolean	resourceExists(Connection connection, R newResource)

Methods inherited from class dev.dsf.fhir.authorization.AbstractAuthorizationRule

afterPropertiesSet, createIfLiteralInternalOrLogicalReference, getAffiliations, getDao, getResourceType, getResourceTypeName, isCurrentIdentityPartOfReferencedOrganization, isCurrentIdentityPartOfReferencedOrganizations, isCurrentIdentityPartOfReferencedOrganizations, isLocalOrganization, organizationWithIdentifierExists, reasonCreateAllowed, reasonDeleteAllowed, reasonHistoryAllowed, reasonPermanentDeleteAllowed, reasonPermanentDeleteAllowed, reasonReadAllowed, reasonSearchAllowed, reasonUpdateAllowed, resolveReference, roleExists

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface dev.dsf.fhir.authorization.AuthorizationRule

getResourceType, reasonCreateAllowed, reasonDeleteAllowed, reasonHistoryAllowed, reasonPermanentDeleteAllowed, reasonPermanentDeleteAllowed, reasonReadAllowed, reasonSearchAllowed, reasonUpdateAllowed

Methods inherited from interface org.springframework.beans.factory.InitializingBean

afterPropertiesSet

Constructor Details

AbstractMetaTagAuthorizationRule

public AbstractMetaTagAuthorizationRule(Class<R> resourceType,
 DaoProvider daoProvider,
 String serverBase,
 ReferenceResolver referenceResolver,
 OrganizationProvider organizationProvider,
 ReadAccessHelper readAccessHelper,
 ParameterConverter parameterConverter)

Method Details

hasValidReadAccessTag

protected final boolean hasValidReadAccessTag(Connection connection,
 org.hl7.fhir.r4.model.Resource resource)

reasonCreateAllowed

public final Optional<String> reasonCreateAllowed(Connection connection,
 Identity identity,
 R newResource)

Description copied from interface: AuthorizationRule

Override this method for non default behavior. Default: Not allowed.

Specified by:

reasonCreateAllowed in interface AuthorizationRule<R extends org.hl7.fhir.r4.model.Resource>

Parameters:

connection - not null

identity - not null

newResource - not null

Returns:

Reason as String in Optional.of(Object) if create allowed

resourceExists

protected abstract boolean resourceExists(Connection connection,
 R newResource)

newResourceOkForCreate

protected abstract Optional<String> newResourceOkForCreate(Connection connection,
 Identity identity,
 R newResource)

reasonReadAllowed

public final Optional<String> reasonReadAllowed(Connection connection,
 Identity identity,
 R existingResource)

Description copied from interface: AuthorizationRule

Override this method for non default behavior. Default: Not allowed.

Specified by:

reasonReadAllowed in interface AuthorizationRule<R extends org.hl7.fhir.r4.model.Resource>

Parameters:

connection - not null

identity - not null

existingResource - not null

Returns:

Reason as String in Optional.of(Object) if read allowed

newResourceOkForUpdate

protected abstract Optional<String> newResourceOkForUpdate(Connection connection,
 Identity identity,
 R newResource)

reasonUpdateAllowed

public final Optional<String> reasonUpdateAllowed(Connection connection,
 Identity identity,
 R oldResource,
 R newResource)

Description copied from interface: AuthorizationRule

Override this method for non default behavior. Default: Not allowed.

Specified by:

reasonUpdateAllowed in interface AuthorizationRule<R extends org.hl7.fhir.r4.model.Resource>

Parameters:

connection - not null

identity - not null

oldResource - not null

newResource - not null

Returns:

Reason as String in Optional.of(Object) if update allowed

modificationsOk

protected abstract boolean modificationsOk(Connection connection,
 R oldResource,
 R newResource)

No need to check if the new resource is valid, will be checked by newResourceOkForUpdate(Connection, Identity, Resource)

Parameters:

connection - not null

oldResource - not null

newResource - not null

Returns:

true if modifications from oldResource to newResource are ok

reasonDeleteAllowed

public final Optional<String> reasonDeleteAllowed(Connection connection,
 Identity identity,
 R oldResource)

Description copied from interface: AuthorizationRule

Override this method for non default behavior. Default: Not allowed.

Specified by:

reasonDeleteAllowed in interface AuthorizationRule<R extends org.hl7.fhir.r4.model.Resource>

Parameters:

connection - not null

identity - not null

oldResource - not null

Returns:

Reason as String in Optional.of(Object) if delete allowed