Package ch.tocco.nice2.persist.security.api.provider

Class AbstractCustomPolicyProcessor

java.lang.Object

ch.tocco.nice2.persist.security.api.provider.AbstractCustomPolicyProcessor

All Implemented Interfaces:

PolicyProcessor

Direct Known Subclasses:

AbstractMembershipHierarchyPolicyProcessor

public abstract class AbstractCustomPolicyProcessor
extends Object
implements PolicyProcessor

Base class for custom PolicyProcessor that can be used for optimizing the performance of flows. These policy processors should be registered for the Phase.GUARD and Phase.QUERY phases.

Field Summary

Fields

Modifier and Type	Field	Description
protected final TypeManager	typeManager

Constructor Summary

Constructors

Modifier	Constructor	Description
protected	AbstractCustomPolicyProcessor(TypeManager typeManager)

Method Summary

Modifier and Type	Method	Description
protected void	appendRule(PolicyBuilder policy, EntityModel entityModel, AccessPermission permission, Node condition, boolean negative)
protected abstract void	doProcessPolicy(PolicyBuilder policy, EntityModel entityModel)
protected abstract boolean	handleEntityModel(EntityModel entityModel)
protected abstract boolean	handlePrincipal(Principal principal)
protected void	prependRule(PolicyBuilder policy, EntityModel entityModel, AccessPermission permission, Node condition, boolean negative)
void	processPolicy(PolicyBuilder policy, Object target)	Post-process the given policy.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

typeManager

protected final TypeManager typeManager

Constructor Details

AbstractCustomPolicyProcessor

protected AbstractCustomPolicyProcessor(TypeManager typeManager)

Method Details

processPolicy

public void processPolicy(PolicyBuilder policy,
 Object target)

Description copied from interface: PolicyProcessor

Post-process the given policy. On phase `LOGIN`, the `target` is the principal being logged in, on phase `GUARD`, it's the object being guarded. On phase `LOGIN` the `policy` is the entire policy containing all rules that affect the current user, on phase `GUARD` the policy only contains the rules that are relevant to the guarded objects (the entire policy, if needed, can be retrieved from the SecurityContext).

Specified by:

processPolicy in interface PolicyProcessor

doProcessPolicy

protected abstract void doProcessPolicy(PolicyBuilder policy,
 EntityModel entityModel)

handlePrincipal

protected abstract boolean handlePrincipal(Principal principal)

handleEntityModel

protected abstract boolean handleEntityModel(EntityModel entityModel)

appendRule

protected void appendRule(PolicyBuilder policy,
 EntityModel entityModel,
 AccessPermission permission,
 Node condition,
 boolean negative)

prependRule

protected void prependRule(PolicyBuilder policy,
 EntityModel entityModel,
 AccessPermission permission,
 Node condition,
 boolean negative)