Package ch.tocco.nice2.optional.cms.impl.security.policyprocessor

Class PageReadPermissionForNonAnonymous

java.lang.Object

ch.tocco.nice2.dms.spi.security.policyprocessor.AbstractDmsPolicyProcessor

ch.tocco.nice2.optional.cms.impl.security.policyprocessor.PageReadPermissionForNonAnonymous

All Implemented Interfaces:

PolicyProcessor

@Component
public class PageReadPermissionForNonAnonymous
extends AbstractDmsPolicyProcessor

PolicyProcessor that efficiently implements the equivalent of the following acl rule:

 entity(Page):
      grant access(read) except redactor, &anonymous if exists(relContent_published)
      and ( read_permissions_set == false
          or (relNode_right.relNode_permission.unique_id == "read"
          and relNode_right.relRole.relLogin_role.relPrincipal.username == principal.name) );
 

Field Summary

Fields inherited from class ch.tocco.nice2.dms.spi.security.policyprocessor.AbstractDmsPolicyProcessor

context, evaluationService, typeManager

Constructor Summary

Constructors

Constructor	Description
PageReadPermissionForNonAnonymous(Context context, TypeManager typeManager, PermissionMatrixEvaluationService evaluationService)

Method Summary

Modifier and Type	Method	Description
protected Node	getAdditionalCondition(EntityModel entityModel)
protected String	getNodePermissionName()
protected boolean	isSupported(Principal principal)

Methods inherited from class ch.tocco.nice2.dms.spi.security.policyprocessor.AbstractDmsPolicyProcessor

getEntityModel, prependRule, processPolicy

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

PageReadPermissionForNonAnonymous

public PageReadPermissionForNonAnonymous(Context context,
 TypeManager typeManager,
 PermissionMatrixEvaluationService evaluationService)

Method Details

isSupported

protected boolean isSupported(Principal principal)

Specified by:

isSupported in class AbstractDmsPolicyProcessor

getNodePermissionName

protected String getNodePermissionName()

Specified by:

getNodePermissionName in class AbstractDmsPolicyProcessor

getAdditionalCondition

protected Node getAdditionalCondition(EntityModel entityModel)

Specified by:

getAdditionalCondition in class AbstractDmsPolicyProcessor