org.uberfire.security.processors

Class ResourceCheckProcessor

java.lang.Object

org.jboss.errai.ioc.rebind.ioc.extension.IOCDecoratorExtension<ResourceCheck>

org.uberfire.security.processors.ResourceCheckProcessor

public class ResourceCheckProcessor
extends org.jboss.errai.ioc.rebind.ioc.extension.IOCDecoratorExtension<ResourceCheck>

Given a method where "project" creation permissions are required like, for instance:

  @SecuredAction(type="project", action="create")
    private void enableProjectCreation() {
        creationButton.setEnabled(true);
    }
 
 

This processor class will append the required security check code to ensure the method body is only executed when the user is granted with the proper permission rights.

For resource instance specific checks a parameter of a class implementing Resource is required. For instance:

  @SecuredAction(action="create")
    private void addProjectToView(Project project) {
        view,addProject(project.getName());
    }
 
 

Constructor Summary

Constructors

Constructor and Description
ResourceCheckProcessor(Class<ResourceCheck> decoratesWith)

Method Summary

Modifier and Type	Method and Description
static org.jboss.errai.codegen.Statement	buildCheckStatement(org.jboss.errai.codegen.builder.ContextualStatementBuilder authzCall, String onGranted, String onDenied)
org.jboss.errai.codegen.Statement	createGlobalActionCheck(String resourceType, String resourceAction, String onGranted, String onDenied)
org.jboss.errai.codegen.Statement	createResourceActionCheck(String resourceName, String resourceAction, String onGranted, String onDenied)
void	generateDecorator(org.jboss.errai.ioc.rebind.ioc.injector.api.Decorable decorable, org.jboss.errai.ioc.rebind.ioc.injector.api.FactoryController controller)
boolean	implementsResource(org.jboss.errai.codegen.meta.MetaClass metaClass)

Methods inherited from class org.jboss.errai.ioc.rebind.ioc.extension.IOCDecoratorExtension

decoratesWith

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

ResourceCheckProcessor

public ResourceCheckProcessor(Class<ResourceCheck> decoratesWith)

Method Detail

buildCheckStatement

public static org.jboss.errai.codegen.Statement buildCheckStatement(org.jboss.errai.codegen.builder.ContextualStatementBuilder authzCall,
                                                                    String onGranted,
                                                                    String onDenied)

generateDecorator

public void generateDecorator(org.jboss.errai.ioc.rebind.ioc.injector.api.Decorable decorable,
                              org.jboss.errai.ioc.rebind.ioc.injector.api.FactoryController controller)

Specified by:

generateDecorator in class org.jboss.errai.ioc.rebind.ioc.extension.IOCDecoratorExtension<ResourceCheck>

implementsResource

public boolean implementsResource(org.jboss.errai.codegen.meta.MetaClass metaClass)

createResourceActionCheck

public org.jboss.errai.codegen.Statement createResourceActionCheck(String resourceName,
                                                                   String resourceAction,
                                                                   String onGranted,
                                                                   String onDenied)

createGlobalActionCheck

public org.jboss.errai.codegen.Statement createGlobalActionCheck(String resourceType,
                                                                 String resourceAction,
                                                                 String onGranted,
                                                                 String onDenied)