org.jboss.as.ejb3.security

Class AuthorizationInterceptor

java.lang.Object

org.jboss.as.ejb3.security.AuthorizationInterceptor

All Implemented Interfaces:

org.jboss.invocation.Interceptor

public class AuthorizationInterceptor
extends Object
implements org.jboss.invocation.Interceptor

Jakarta Enterprise Beans authorization interceptor responsible for handling invocation on Jakarta Enterprise Beans methods and doing the necessary authorization checks on the invoked method.

User: Jaikiran Pai

Field Summary

Fields inherited from interface org.jboss.invocation.Interceptor

EMPTY_ARRAY

Constructor Summary

Constructors

Constructor and Description
AuthorizationInterceptor(EJBMethodSecurityAttribute ejbMethodSecurityMetaData, String viewClassName, Method viewMethod, String contextID)

Method Summary

Modifier and Type	Method and Description
protected org.jboss.metadata.ejb.spec.MethodInterfaceType	getMethodInterfaceType(MethodIntf viewType) Gets the MethodInterfaceType that corresponds to the specified MethodIntf.
protected Set<Principal>	getMethodRolesAsPrincipals() Returns the method roles as a set of Principal instances.
Object	processInvocation(org.jboss.invocation.InterceptorContext context)
protected String	setContextID(String contextID) Sets the JACC contextID using a privileged action and returns the previousID from the PolicyContext.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

AuthorizationInterceptor

public AuthorizationInterceptor(EJBMethodSecurityAttribute ejbMethodSecurityMetaData,
                                String viewClassName,
                                Method viewMethod,
                                String contextID)

Method Detail

processInvocation

public Object processInvocation(org.jboss.invocation.InterceptorContext context)
                         throws Exception

Specified by:

processInvocation in interface org.jboss.invocation.Interceptor

Throws:

Exception

getMethodRolesAsPrincipals

protected Set<Principal> getMethodRolesAsPrincipals()

Returns the method roles as a set of Principal instances. All roles specified in the method-permissions or via RolesAllowed for this method are wrapped by a SimplePrincipal. If the method has been added to the exclude-list or annotated with DenyAll, a NOBODY_PRINCIPAL is returned. If the method has been added to the unchecked list or annotated with PermitAll, an ANYBODY_PRINCIPAL is returned.

Returns:

the constructed set of role principals.

getMethodInterfaceType

protected org.jboss.metadata.ejb.spec.MethodInterfaceType getMethodInterfaceType(MethodIntf viewType)

Gets the MethodInterfaceType that corresponds to the specified MethodIntf.

Parameters:

viewType - the MethodIntf type to be converted.

Returns:

the converted type or null if the type cannot be converted.

setContextID

protected String setContextID(String contextID)

Sets the JACC contextID using a privileged action and returns the previousID from the PolicyContext.

Parameters:

contextID - the JACC contextID to be set.

Returns:

the previous contextID as retrieved from the PolicyContext.