Package ch.tocco.nice2.dms.impl.security.policyprocessor

Class ResourceReadPermissionForNonAnonymous

java.lang.Object
ch.tocco.nice2.dms.spi.security.policyprocessor.AbstractDmsPolicyProcessor
ch.tocco.nice2.dms.impl.security.policyprocessor.ResourceReadPermissionForNonAnonymous
All Implemented Interfaces:
PolicyProcessor
@Component public class ResourceReadPermissionForNonAnonymous extends AbstractDmsPolicyProcessor
PolicyProcessor that efficiently implements the equivalent of the following acl rules: 

  entity(Resource):
      grant access(read) except &anonymous if
          entity_model == null
          and exists (relNode_right where relNode_permission.unique_id == "read" and relRole.relLogin_role.relPrincipal.username == principal.name)
          and not exists(relFolder where mail_box);

  entity(Resource):
     grant access(read) except &anonymous if
         entity_model == null
         and read_permissions_set == false
         and not exists(relFolder where mail_box);