io.vertigo.account.authorization

Interface AuthorizationManager

All Superinterfaces:

Component, Manager

public interface AuthorizationManager
extends Manager

Authorizations manager. There is two type of authorisations : - general, no-conditions authoriations : used for main features of application (menu, admin, ...) - context dependents authorisations : used for operation on secured data

Author:

npiedeloup

Method Summary

Modifier and Type	Method and Description
<K extends KeyConcept> List<String>	getAuthorizedOperations(K keyConcept) Get all operation doable on this object by current user.
<K extends KeyConcept> Criteria<K>	getCriteriaSecurity(Class<K> keyConceptClass, OperationName<K> operation) Return Criteria of security rules for this current user on this keyConceptClass.
<K extends KeyConcept> String	getSearchSecurity(Class<K> keyConceptClass, OperationName<K> operation) Return Search query filter of security rules for this current user on this keyConceptClass.
boolean	hasAuthorization(AuthorizationName... authorizationName) Check on authorizations.
<K extends KeyConcept> boolean	isAuthorized(K keyConcept, OperationName<K> operation) Check if current user can do this operation on this keyConcept.
UserAuthorizations	obtainUserAuthorizations() User authorization accessor to test or add authorizations.

Method Detail

obtainUserAuthorizations

UserAuthorizations obtainUserAuthorizations()

User authorization accessor to test or add authorizations. A UserSession must exists.

Returns:

UserAuthorizations

hasAuthorization

boolean hasAuthorization(AuthorizationName... authorizationName)

Check on authorizations. Say if current user has this authorization.

Parameters:

authorizationName - authorization. (not null)

Returns:

if user has this authorization.

isAuthorized

<K extends KeyConcept> boolean isAuthorized(K keyConcept,
                                            OperationName<K> operation)

Check if current user can do this operation on this keyConcept.

Type Parameters:

K - keyConcept type

Parameters:

keyConcept - secured data to check

operation - operation name

Returns:

true if current user can do this operation on this keyConcept.

getCriteriaSecurity

<K extends KeyConcept> Criteria<K> getCriteriaSecurity(Class<K> keyConceptClass,
                                                       OperationName<K> operation)

Return Criteria of security rules for this current user on this keyConceptClass.

Type Parameters:

K - keyConcept type

Parameters:

keyConceptClass - secured data to check

operation - operation name

Returns:

Criteria of security rule for this current user on this keyConcept

getSearchSecurity

<K extends KeyConcept> String getSearchSecurity(Class<K> keyConceptClass,
                                                OperationName<K> operation)

Return Search query filter of security rules for this current user on this keyConceptClass.

Type Parameters:

K - keyConcept type

Parameters:

keyConceptClass - secured data to check

operation - operation name

Returns:

Search query filter of security rules for this current user on this keyConcept.

getAuthorizedOperations

<K extends KeyConcept> List<String> getAuthorizedOperations(K keyConcept)

Get all operation doable on this object by current user. This can be use by IHM to show or not some features.

Type Parameters:

K - keyConcept type

Parameters:

keyConcept - secured data to check

Returns:

operations list