org.jboss.seam.security.permission

Class RuleBasedPermissionResolver

java.lang.Object

org.jboss.seam.security.permission.RuleBasedPermissionResolver

All Implemented Interfaces:

Serializable, org.jboss.seam.security.permission.PermissionResolver

@Requires(value="org.drools.KnowledgeBase")
@SessionScoped
public class RuleBasedPermissionResolver
extends Object
implements org.jboss.seam.security.permission.PermissionResolver, Serializable

A permission resolver that uses a Drools rule base to perform permission checks

Author:

Shane Bryzak

See Also:

Serialized Form

Constructor Summary

Constructors

Constructor and Description
RuleBasedPermissionResolver()

Method Summary

Methods

Modifier and Type	Method and Description
boolean	checkConditionalRole(String roleName, Object target, String action)
void	filterSetByAction(Set<Object> targets, String action)
org.drools.runtime.StatefulKnowledgeSession	getSecurityContext()
org.drools.KnowledgeBase	getSecurityRules()
boolean	hasPermission(Object resource, String permission) Performs a permission check for the specified name and action
void	init()
void	setSecurityContext(org.drools.runtime.StatefulKnowledgeSession securityContext)
void	setUserAccountInSecurityContext(org.jboss.seam.security.events.PostAuthenticateEvent event) Post-authentication event observer
void	unAuthenticate(org.jboss.seam.security.events.PostLoggedOutEvent event)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

RuleBasedPermissionResolver

public RuleBasedPermissionResolver()

Method Detail

init

@Inject
public void init()

hasPermission

public boolean hasPermission(Object resource,
                    String permission)

Performs a permission check for the specified name and action

Specified by:

hasPermission in interface org.jboss.seam.security.permission.PermissionResolver

Parameters:

target - Object The target of the permission check

action - String The action to be performed on the target

Returns:

boolean True if the user has the specified permission

filterSetByAction

public void filterSetByAction(Set<Object> targets,
                     String action)

Specified by:

filterSetByAction in interface org.jboss.seam.security.permission.PermissionResolver

checkConditionalRole

public boolean checkConditionalRole(String roleName,
                           Object target,
                           String action)

unAuthenticate

public void unAuthenticate(@Observes
                  org.jboss.seam.security.events.PostLoggedOutEvent event)

getSecurityContext

public org.drools.runtime.StatefulKnowledgeSession getSecurityContext()

setSecurityContext

public void setSecurityContext(org.drools.runtime.StatefulKnowledgeSession securityContext)

getSecurityRules

public org.drools.KnowledgeBase getSecurityRules()

setUserAccountInSecurityContext

public void setUserAccountInSecurityContext(@Observes
                                   org.jboss.seam.security.events.PostAuthenticateEvent event)

Post-authentication event observer