org.jboss.seam.security.permission
Class JpaPermissionStore

java.lang.Object
  org.jboss.seam.security.permission.JpaPermissionStore

All Implemented Interfaces:

java.io.Serializable, PermissionStore

@Name(value="org.jboss.seam.security.jpaPermissionStore")
@Install(precedence=0,
         value=false)
@Scope(value=APPLICATION)
@BypassInterceptors
public class JpaPermissionStore
extends java.lang.Object
implements PermissionStore, java.io.Serializable

A permission store implementation that uses JPA as its persistence mechanism.

Author:

Shane Bryzak

See Also:

Serialized Form

Constructor Summary

JpaPermissionStore()

Method Summary

void	clearPermissions(java.lang.Object target)
protected javax.persistence.Query	createPermissionQuery(java.lang.Object target, java.util.Set targets, java.security.Principal recipient, org.jboss.seam.security.permission.JpaPermissionStore.Discrimination discrimination) Creates a Query that returns a list of permission records for the specified parameters.
Expressions.ValueExpression	getEntityManager()
java.lang.Class	getRolePermissionClass()
java.lang.Class	getUserPermissionClass()
boolean	grantPermission(Permission permission)
boolean	grantPermissions(java.util.List<Permission> permissions)
void	init()
protected void	initProperties()
java.util.List<java.lang.String>	listAvailableActions(java.lang.Object target)
java.util.List<Permission>	listPermissions(java.lang.Object target)
protected java.util.List<Permission>	listPermissions(java.lang.Object target, java.util.Set<java.lang.Object> targets, java.lang.String action)
java.util.List<Permission>	listPermissions(java.lang.Object target, java.lang.String action) Returns a list of all user and role permissions for a specific permission target and action.
java.util.List<Permission>	listPermissions(java.util.Set<java.lang.Object> targets, java.lang.String action) Returns a list of all user and role permissions for the specified action for all specified target objects
protected java.security.Principal	resolvePrincipal(java.lang.Object principal, boolean isUser)
protected java.lang.Object	resolvePrincipalEntity(java.security.Principal recipient) If the user or role properties in the entity class refer to other entities, then this method uses the JpaIdentityStore (if available) to lookup that user or role entity.
boolean	revokePermission(Permission permission)
boolean	revokePermissions(java.util.List<Permission> permissions)
void	setEntityManager(Expressions.ValueExpression expression)
void	setRolePermissionClass(java.lang.Class rolePermissionClass)
void	setUserPermissionClass(java.lang.Class userPermissionClass)
protected boolean	updatePermissionActions(java.lang.Object target, java.security.Principal recipient, java.lang.String[] actions, boolean set) This is where the bulk of the actual work happens.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

JpaPermissionStore

public JpaPermissionStore()

Method Detail

init

@Create
public void init()

initProperties

protected void initProperties()

createPermissionQuery

protected javax.persistence.Query createPermissionQuery(java.lang.Object target,
                                                        java.util.Set targets,
                                                        java.security.Principal recipient,
                                                        org.jboss.seam.security.permission.JpaPermissionStore.Discrimination discrimination)

Creates a Query that returns a list of permission records for the specified parameters.

Parameters:

target - The target of the permission, may be null

targets - A set of permission targets, may be null

recipient - The permission recipient, may be null

discrimination - A discrimination (either user, role or both), required

Returns:

Query The query generated for the provided parameters

grantPermission

public boolean grantPermission(Permission permission)

Specified by:

grantPermission in interface PermissionStore

revokePermission

public boolean revokePermission(Permission permission)

Specified by:

revokePermission in interface PermissionStore

updatePermissionActions

protected boolean updatePermissionActions(java.lang.Object target,
                                          java.security.Principal recipient,
                                          java.lang.String[] actions,
                                          boolean set)

This is where the bulk of the actual work happens.

Parameters:

target - The target object to update permissions for

recipient - The recipient to update permissions for

actions - The actions that will be updated

set - true if the specified actions are to be granted, false if they are to be revoked

Returns:

true if the operation is successful

grantPermissions

public boolean grantPermissions(java.util.List<Permission> permissions)

Specified by:

grantPermissions in interface PermissionStore

revokePermissions

public boolean revokePermissions(java.util.List<Permission> permissions)

Specified by:

revokePermissions in interface PermissionStore

resolvePrincipalEntity

protected java.lang.Object resolvePrincipalEntity(java.security.Principal recipient)

If the user or role properties in the entity class refer to other entities, then this method uses the JpaIdentityStore (if available) to lookup that user or role entity. Otherwise it simply returns the name of the recipient.

Parameters:

recipient -

Returns:

The entity or name representing the permission recipient

resolvePrincipal

protected java.security.Principal resolvePrincipal(java.lang.Object principal,
                                                   boolean isUser)

listPermissions

public java.util.List<Permission> listPermissions(java.util.Set<java.lang.Object> targets,
                                                  java.lang.String action)

Returns a list of all user and role permissions for the specified action for all specified target objects

Specified by:

listPermissions in interface PermissionStore

listPermissions

public java.util.List<Permission> listPermissions(java.lang.Object target,
                                                  java.lang.String action)

Returns a list of all user and role permissions for a specific permission target and action.

Specified by:

listPermissions in interface PermissionStore

listPermissions

protected java.util.List<Permission> listPermissions(java.lang.Object target,
                                                     java.util.Set<java.lang.Object> targets,
                                                     java.lang.String action)

listPermissions

public java.util.List<Permission> listPermissions(java.lang.Object target)

Specified by:

listPermissions in interface PermissionStore

listAvailableActions

public java.util.List<java.lang.String> listAvailableActions(java.lang.Object target)

Specified by:

listAvailableActions in interface PermissionStore

getEntityManager

public Expressions.ValueExpression getEntityManager()

setEntityManager

public void setEntityManager(Expressions.ValueExpression expression)

getUserPermissionClass

public java.lang.Class getUserPermissionClass()

setUserPermissionClass

public void setUserPermissionClass(java.lang.Class userPermissionClass)

getRolePermissionClass

public java.lang.Class getRolePermissionClass()

setRolePermissionClass

public void setRolePermissionClass(java.lang.Class rolePermissionClass)

clearPermissions

public void clearPermissions(java.lang.Object target)

Specified by:

clearPermissions in interface PermissionStore