org.jboss.hal.meta.security

Class AuthorisationDecision

java.lang.Object

org.jboss.hal.meta.security.AuthorisationDecision

public class AuthorisationDecision
extends Object

Class to decide whether a single or a set of constraints are allowed according to a given security context. The security context must be provided by a SecurityContextResolver. isAllowed() returns true if the security context was resolved and the constraint is valid.

To hide or disable UI elements, use one of the following strategies:

Eager filtering

If the security context is available when the UI elements are created, filter the elements based on the outcome of isAllowed(). Add only allowed elements to the DOM.

Late hiding

If the security context is not available when the UI elements are created, store the constraints as data-constraint attributes. Later when you have access to the security context post-process the elements using one of the processElements() method from ElementGuard.

If WildFly uses AccessControlProvider.SIMPLE, isAllowed() will always return true.

Method Summary

Modifier and Type	Method and Description
static AuthorisationDecision	from(Environment environment, SecurityContext securityContext)
static AuthorisationDecision	from(Environment environment, SecurityContextRegistry securityContextRegistry)
static AuthorisationDecision	from(Environment environment, SecurityContextResolver resolver)
boolean	isAllowed(Constraint constraint)
boolean	isAllowed(Constraints constraints)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Detail

from

public static AuthorisationDecision from(Environment environment,
                                         SecurityContextRegistry securityContextRegistry)

from

public static AuthorisationDecision from(Environment environment,
                                         SecurityContext securityContext)

from

public static AuthorisationDecision from(Environment environment,
                                         SecurityContextResolver resolver)

isAllowed

public boolean isAllowed(Constraints constraints)

isAllowed

public boolean isAllowed(Constraint constraint)