io.milton.http.acl

Class AclAuthorisor

java.lang.Object

io.milton.http.acl.AclAuthorisor

All Implemented Interfaces:

PropertyAuthoriser

public class AclAuthorisor
extends Object
implements PropertyAuthoriser

A utility class which performs authorisation of requests based on information exposed through the AccessControlledResource interface To use this class you must connect it to a io.milton.http.SecurityManager or in the implementation of Resource.authorise

Author:

brad

Nested Class Summary

Nested classes/interfaces inherited from interface io.milton.property.PropertyAuthoriser

PropertyAuthoriser.CheckResult, PropertyAuthoriser.PropertyPermission

Constructor Summary

Constructors

Constructor and Description
AclAuthorisor(PrincipalFactory principalFactory)

Method Summary

Modifier and Type	Method and Description
Boolean	authorise(Request request, Request.Method method, Auth auth, io.milton.resource.Resource resource) Attempt to determine if the request should be allowed.
Set<PropertyAuthoriser.CheckResult>	checkPermissions(Request request, Request.Method method, PropertyAuthoriser.PropertyPermission perm, Set<QName> fields, io.milton.resource.Resource resource) Implements authorisation checks for specific ACL properties

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

AclAuthorisor

public AclAuthorisor(PrincipalFactory principalFactory)

Method Detail

authorise

public Boolean authorise(Request request,
                         Request.Method method,
                         Auth auth,
                         io.milton.resource.Resource resource)

Attempt to determine if the request should be allowed. Note that some priviledges may apply at a field level, and this method does NOT check field level priviledges. That must be done seperately as part of the PROPFIND or PROPPATCH processing

Parameters:

request - - the current request

method - - the HTTP method being invoked

auth - - the authentication object for the current request

resource - - the resource being acted on

Returns:

- true indicates that the request should be allowed, false that it should not and null indicates that this class has no opinion

checkPermissions

public Set<PropertyAuthoriser.CheckResult> checkPermissions(Request request,
                                                            Request.Method method,
                                                            PropertyAuthoriser.PropertyPermission perm,
                                                            Set<QName> fields,
                                                            io.milton.resource.Resource resource)

Implements authorisation checks for specific ACL properties

Specified by:

checkPermissions in interface PropertyAuthoriser

Parameters:

request -

method -

perm -

fields -

resource -

Returns: