Package org.jbpm.casemgmt.impl

Class AuthorizationManagerImpl

java.lang.Object

org.jbpm.casemgmt.impl.AuthorizationManagerImpl

All Implemented Interfaces:

org.jbpm.casemgmt.api.auth.AuthorizationManager

public class AuthorizationManagerImpl
extends Object
implements org.jbpm.casemgmt.api.auth.AuthorizationManager

Nested Class Summary

Nested classes/interfaces inherited from interface org.jbpm.casemgmt.api.auth.AuthorizationManager

org.jbpm.casemgmt.api.auth.AuthorizationManager.ProtectedOperation

Field Summary

Fields inherited from interface org.jbpm.casemgmt.api.auth.AuthorizationManager

ADMIN_ROLE, OWNER_ROLE, PUBLIC_GROUP, UNKNOWN_USER

Constructor Summary

Constructors

Constructor	Description
AuthorizationManagerImpl(org.kie.internal.identity.IdentityProvider identityProvider, org.jbpm.shared.services.impl.TransactionalCommandService commandService)

Method Summary

Modifier and Type	Method	Description
protected void	buildAuthorizationConfig()
void	checkAuthorization(String caseId)
void	checkCommentAuthorization(String caseId, org.jbpm.casemgmt.api.model.instance.CaseFileInstance caseFileInstance, org.jbpm.casemgmt.api.model.instance.CommentInstance commentInstance)
void	checkDataAuthorization(String caseId, org.jbpm.casemgmt.api.model.instance.CaseFileInstance caseFileInstance, Collection<String> dataNames)
void	checkOperationAuthorization(String caseId, org.jbpm.casemgmt.api.auth.AuthorizationManager.ProtectedOperation operation)
protected List<String>	collectUserAuthInfo()
List<org.jbpm.casemgmt.api.model.instance.CommentInstance>	filterByCommentAuthorization(String caseId, org.jbpm.casemgmt.api.model.instance.CaseFileInstance caseFileInstance, List<org.jbpm.casemgmt.api.model.instance.CommentInstance> comments)
Map<String,Object>	filterByDataAuthorization(String caseId, org.jbpm.casemgmt.api.model.instance.CaseFileInstance caseFileInstance, Map<String,Object> data)
protected List<String>	getCallerRoles(org.jbpm.casemgmt.api.model.instance.CaseFileInstance caseFileInstance, List<String> callerAuthorization)
boolean	isEnabled()
protected boolean	loggedInAsSystemUser()
void	setEnabled(boolean enabled)
protected void	verifyAuthorization(String caseId, List<String> authorizedEntities, String errorMessage)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

AuthorizationManagerImpl

public AuthorizationManagerImpl(org.kie.internal.identity.IdentityProvider identityProvider,
                                org.jbpm.shared.services.impl.TransactionalCommandService commandService)

Method Detail

checkAuthorization

public void checkAuthorization(String caseId)
                        throws SecurityException

Specified by:

checkAuthorization in interface org.jbpm.casemgmt.api.auth.AuthorizationManager

Throws:

SecurityException

checkOperationAuthorization

public void checkOperationAuthorization(String caseId,
                                        org.jbpm.casemgmt.api.auth.AuthorizationManager.ProtectedOperation operation)
                                 throws SecurityException

Specified by:

checkOperationAuthorization in interface org.jbpm.casemgmt.api.auth.AuthorizationManager

Throws:

SecurityException

isEnabled

public boolean isEnabled()

setEnabled

public void setEnabled(boolean enabled)

buildAuthorizationConfig

protected void buildAuthorizationConfig()

verifyAuthorization

protected void verifyAuthorization(String caseId,
                                   List<String> authorizedEntities,
                                   String errorMessage)

collectUserAuthInfo

protected List<String> collectUserAuthInfo()

filterByDataAuthorization

public Map<String,Object> filterByDataAuthorization(String caseId,
                                                          org.jbpm.casemgmt.api.model.instance.CaseFileInstance caseFileInstance,
                                                          Map<String,Object> data)

Specified by:

filterByDataAuthorization in interface org.jbpm.casemgmt.api.auth.AuthorizationManager

checkDataAuthorization

public void checkDataAuthorization(String caseId,
                                   org.jbpm.casemgmt.api.model.instance.CaseFileInstance caseFileInstance,
                                   Collection<String> dataNames)

Specified by:

checkDataAuthorization in interface org.jbpm.casemgmt.api.auth.AuthorizationManager

filterByCommentAuthorization

public List<org.jbpm.casemgmt.api.model.instance.CommentInstance> filterByCommentAuthorization(String caseId,
                                                                                               org.jbpm.casemgmt.api.model.instance.CaseFileInstance caseFileInstance,
                                                                                               List<org.jbpm.casemgmt.api.model.instance.CommentInstance> comments)

Specified by:

filterByCommentAuthorization in interface org.jbpm.casemgmt.api.auth.AuthorizationManager

checkCommentAuthorization

public void checkCommentAuthorization(String caseId,
                                      org.jbpm.casemgmt.api.model.instance.CaseFileInstance caseFileInstance,
                                      org.jbpm.casemgmt.api.model.instance.CommentInstance commentInstance)

Specified by:

checkCommentAuthorization in interface org.jbpm.casemgmt.api.auth.AuthorizationManager

getCallerRoles

protected List<String> getCallerRoles(org.jbpm.casemgmt.api.model.instance.CaseFileInstance caseFileInstance,
                                      List<String> callerAuthorization)

loggedInAsSystemUser

protected boolean loggedInAsSystemUser()