Package ch.tocco.nice2.persist.security.impl.provider

Class EntityPathSecurityDomain

java.lang.Object

ch.tocco.nice2.persist.security.impl.provider.GuardCachingSecurityDomain<Tuple2<EntityModel,String>>

ch.tocco.nice2.persist.security.impl.provider.AbstractEntitySecurityDomain<EntityPath,Tuple2<EntityModel,String>>

ch.tocco.nice2.persist.security.impl.provider.EntityPathSecurityDomain

All Implemented Interfaces:

SecurityDomain

@Component
public class EntityPathSecurityDomain
extends AbstractEntitySecurityDomain<EntityPath,Tuple2<EntityModel,String>>

Security domain which guards access to entity fields and relations (EntityPath objects)

Field Summary

Fields inherited from class ch.tocco.nice2.persist.security.impl.provider.AbstractEntitySecurityDomain

permissionEvaluator, queryCompiler, securityManager

Fields inherited from class ch.tocco.nice2.persist.security.impl.provider.GuardCachingSecurityDomain

context

Constructor Summary

Constructors

Constructor	Description
EntityPathSecurityDomain(SecurityManager securityManager, QueryCompiler queryCompiler, Context context, PermissionEvaluator permissionEvaluator)

Method Summary

Modifier and Type	Method	Description
List<List<?>>	aggregateSupportedObjects(List<?> securedObjects)	This method should group all secured objects, which can be evaluated together in a ListGuard, and return a list of these groups.
protected com.google.common.cache.Cache<Tuple2<EntityModel,String>,Policy>	buildCache()
protected Tuple2<EntityModel,String>	createCacheKey(List<?> list)	Guards can be shared between all EntityPath objects with the same EntityModel and path
protected List<EntityReference>	getEntityReferences(List<EntityPath> secured)
SelectorFactory	getSelectorFactory()	Create a selector factory.

Methods inherited from class ch.tocco.nice2.persist.security.impl.provider.AbstractEntitySecurityDomain

evaluateCondition

Methods inherited from class ch.tocco.nice2.persist.security.impl.provider.GuardCachingSecurityDomain

clearGuardCache, getOrCreateFilteredPolicy

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

EntityPathSecurityDomain

public EntityPathSecurityDomain(SecurityManager securityManager,
 QueryCompiler queryCompiler,
 Context context,
 PermissionEvaluator permissionEvaluator)

Method Details

aggregateSupportedObjects

public List<List<?>> aggregateSupportedObjects(List<?> securedObjects)

Description copied from interface: SecurityDomain

This method should group all secured objects, which can be evaluated together in a ListGuard, and return a list of these groups. This means all objects in a sub-list must require the same policy, (every object in the list would select the same rules of a policy, see SecurityDomain.getSelectorFactory()). Secured objects that are not supported by this domain at all should not be returned from this method. If none of the objects are supported, an empty list should be returned.

getSelectorFactory

public SelectorFactory getSelectorFactory()

Description copied from interface: SecurityDomain

Create a selector factory. A selector factory is an object which creates selectors. There is no interface as the arguments defined in the policy will be matched to factory methods using reflection. The contract for the object returned by this method is as follows:

It specify several methods called createSelector with the return type Selector. It may take any number of arguments. Supported argument types are all Java primitives, String, enumerations and arrays of enumerations. The last argument may be an array, which indicates varargs. Wildcards will be passed as null. The methods may throw an InvalidArgumentException.

Returns:

The selector factory.

getEntityReferences

protected List<EntityReference> getEntityReferences(List<EntityPath> secured)

Specified by:

getEntityReferences in class AbstractEntitySecurityDomain<EntityPath,Tuple2<EntityModel,String>>

createCacheKey

protected Tuple2<EntityModel,String> createCacheKey(List<?> list)

Guards can be shared between all EntityPath objects with the same EntityModel and path

Specified by:

createCacheKey in class GuardCachingSecurityDomain<Tuple2<EntityModel,String>>

buildCache

protected com.google.common.cache.Cache<Tuple2<EntityModel,String>,Policy> buildCache()

Specified by:

buildCache in class GuardCachingSecurityDomain<Tuple2<EntityModel,String>>