org.guvnor.common.services.backend.migration

Class ACLMigrationTool

java.lang.Object

org.guvnor.common.services.backend.migration.ACLMigrationTool

@ApplicationScoped
public class ACLMigrationTool
extends Object

In previous versions (before the 7 release), the only way to grant access to resources like OrganizationalUnit, Repository and Project was to indicate which groups were able to access a given instance. Those groups were stored as part of the instance persistent status.

As of 7 version, the authorization policy is based on permissions. That means is no longer required to keep a list of groups per resource instance. What is required is to define proper permission entries into the active AuthorizationPolicy

This is a utility class which takes care of reading the groups declared for any of the above resource types and creating the necessary permissions so that those resources are protected from user access.

The migration procedure is carried out when an AuthorizationPolicyDeployedEvent is received, which means the application is starting up and deploying the authorization policy for the first time.

Constructor Summary

Constructors

Constructor and Description
ACLMigrationTool(OrganizationalUnitService organizationalUnitService, RepositoryService repositoryService, javax.enterprise.inject.Instance<ProjectService<?>> projectServices, org.uberfire.security.authz.PermissionManager permissionManager, org.uberfire.backend.authz.AuthorizationPolicyStorage authorizationPolicyStorage)

Method Summary

Modifier and Type	Method and Description
ProjectService	getProjectService()
void	migrateOrgUnits(org.uberfire.security.authz.AuthorizationPolicy policy)
void	migrateProjects(org.uberfire.security.authz.AuthorizationPolicy policy, Repository repository)
void	migrateRepositories(org.uberfire.security.authz.AuthorizationPolicy policy)
void	onDeploy(org.uberfire.backend.events.AuthorizationPolicyDeployedEvent event)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

ACLMigrationTool

@Inject
public ACLMigrationTool(OrganizationalUnitService organizationalUnitService,
                                RepositoryService repositoryService,
                                javax.enterprise.inject.Instance<ProjectService<?>> projectServices,
                                org.uberfire.security.authz.PermissionManager permissionManager,
                                org.uberfire.backend.authz.AuthorizationPolicyStorage authorizationPolicyStorage)

Method Detail

onDeploy

public void onDeploy(@Observes
                     org.uberfire.backend.events.AuthorizationPolicyDeployedEvent event)

migrateOrgUnits

public void migrateOrgUnits(org.uberfire.security.authz.AuthorizationPolicy policy)

migrateRepositories

public void migrateRepositories(org.uberfire.security.authz.AuthorizationPolicy policy)

migrateProjects

public void migrateProjects(org.uberfire.security.authz.AuthorizationPolicy policy,
                            Repository repository)

getProjectService

public ProjectService getProjectService()