eu.emi.dsr.security
Class SecurityManager.NullAuthoriser

java.lang.Object
  eu.emi.dsr.security.SecurityManager.NullAuthoriser

All Implemented Interfaces:

IAttributeSource

Enclosing class:

SecurityManager

public static class SecurityManager.NullAuthoriser
extends Object
implements IAttributeSource

Field Summary

Fields inherited from interface eu.emi.dsr.security.IAttributeSource

ATTRIBUTE_ADD_DEFAULT_GROUPS, ATTRIBUTE_GROUP, ATTRIBUTE_ROLE, ATTRIBUTE_SUPPLEMENTARY_GROUPS, ATTRIBUTE_VOS, ROLE_ADMIN, ROLE_ANONYMOUS

Constructor Summary

SecurityManager.NullAuthoriser()

Method Summary

String[]	getAcceptedVOs() This method returns the list of VOs that this attribute source supports.
SubjectAttributesHolder	getAttributes(SecurityTokens tokens, SubjectAttributesHolder otherAuthoriserInfo) Retrieves a map of attributes based on the supplied SecurityTokens. Since authorisers can be chained, it might be sometimes useful to see attributes returned by authorisers that have run previously.
String	getName() This method should return name of this attribute source, which was passed to the init() method.
String	getStatusDescription() Get a user-friendly description of the attribute source's status. This is used for informing the administrator of any problems with configuration, connection problems, etc.
void	init(String name) initialise the source

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

SecurityManager.NullAuthoriser

public SecurityManager.NullAuthoriser()

Method Detail

getStatusDescription

public String getStatusDescription()

Description copied from interface: IAttributeSource

Get a user-friendly description of the attribute source's status.
This is used for informing the administrator of any problems with configuration, connection problems, etc. UNICORE/X will print a log entry describing the status immediately after startup.
This method should not block for too long, since the server startup would be stalled in this case. For example, you may use the TimeoutRunner class to avoid blocking.

Specified by:

getStatusDescription in interface IAttributeSource

Returns:

a String describing this attribute source's status.

init

public void init(String name)

Description copied from interface: IAttributeSource

initialise the source

Specified by:

init in interface IAttributeSource

getName

public String getName()

Description copied from interface: IAttributeSource

This method should return name of this attribute source, which was passed to the init() method.

Specified by:

getName in interface IAttributeSource

Returns:

getAttributes

public SubjectAttributesHolder getAttributes(SecurityTokens tokens,
                                             SubjectAttributesHolder otherAuthoriserInfo)
                                      throws IOException

Description copied from interface: IAttributeSource

Retrieves a map of attributes based on the supplied SecurityTokens.
Since authorisers can be chained, it might be sometimes useful to see attributes returned by authorisers that have run previously. This information is supplied in the "otherAuthoriserInfo" map.
Attribute sources must not make any authorisation decisions. Thus, no exceptions must be thrown if no attributes are found. Only IOExceptions should be thrown in case of technical problems contacting the actual attribute provider. This is to allow upstream code (i.e. the UNICORE/X server) to log the error, or to take any other action (like notify an administrator). If no attributes are found, an empty map or null must be returned.

Specified by:

getAttributes in interface IAttributeSource

Parameters:

tokens - - security tokens for this request

otherAuthoriserInfo - - attributes returned by other authorisers, which may be null

Returns:

subject's attributes

Throws:

IOException - in case of technical problems

getAcceptedVOs

public String[] getAcceptedVOs()

Description copied from interface: IAttributeSource

This method returns the list of VOs that this attribute source supports. If the attribute source is not aware of virtual organisations (like XUUDB) then empty list is returned, meaning that it is possible that VO-less users might be accepted by this attribute source.

Specified by:

getAcceptedVOs in interface IAttributeSource

Returns: