Package ch.tocco.nice2.persist.security.impl.provider

Class EntitySecurityDomain

java.lang.Object

ch.tocco.nice2.persist.security.impl.provider.GuardCachingSecurityDomain<EntityModel>

ch.tocco.nice2.persist.security.impl.provider.AbstractEntitySecurityDomain<EntityReference,EntityModel>

ch.tocco.nice2.persist.security.impl.provider.EntitySecurityDomain

All Implemented Interfaces:

SecurityDomain

@Component
public class EntitySecurityDomain
extends AbstractEntitySecurityDomain<EntityReference,EntityModel>

Field Summary

Fields inherited from class ch.tocco.nice2.persist.security.impl.provider.AbstractEntitySecurityDomain

permissionEvaluator, queryCompiler, securityManager

Fields inherited from class ch.tocco.nice2.persist.security.impl.provider.GuardCachingSecurityDomain

context

Constructor Summary

Constructors

Constructor	Description
EntitySecurityDomain(SecurityManager securityManager, QueryCompiler queryCompiler, Context context, PermissionEvaluator permissionEvaluator)

Method Summary

Modifier and Type	Method	Description
List<List<?>>	aggregateSupportedObjects(List<?> securedObjects)	This method should group all secured objects, which can be evaluated together in a ListGuard, and return a list of these groups.
protected com.google.common.cache.Cache<EntityModel,Policy>	buildCache()
protected EntityModel	createCacheKey(List<?> objects)	Only use one guard instance per security context and model.
protected List<EntityReference>	getEntityReferences(List<EntityReference> secured)
SelectorFactory	getSelectorFactory()	Create a selector factory.

Methods inherited from class ch.tocco.nice2.persist.security.impl.provider.AbstractEntitySecurityDomain

evaluateCondition

Methods inherited from class ch.tocco.nice2.persist.security.impl.provider.GuardCachingSecurityDomain

clearGuardCache, getOrCreateFilteredPolicy

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

EntitySecurityDomain

public EntitySecurityDomain(SecurityManager securityManager,
 QueryCompiler queryCompiler,
 Context context,
 PermissionEvaluator permissionEvaluator)

Method Details

aggregateSupportedObjects

public List<List<?>> aggregateSupportedObjects(List<?> securedObjects)

Description copied from interface: SecurityDomain

This method should group all secured objects, which can be evaluated together in a ListGuard, and return a list of these groups. This means all objects in a sub-list must require the same policy, (every object in the list would select the same rules of a policy, see SecurityDomain.getSelectorFactory()). Secured objects that are not supported by this domain at all should not be returned from this method. If none of the objects are supported, an empty list should be returned.

getSelectorFactory

public SelectorFactory getSelectorFactory()

Description copied from interface: SecurityDomain

Create a selector factory. A selector factory is an object which creates selectors. There is no interface as the arguments defined in the policy will be matched to factory methods using reflection. The contract for the object returned by this method is as follows:

It specify several methods called createSelector with the return type Selector. It may take any number of arguments. Supported argument types are all Java primitives, String, enumerations and arrays of enumerations. The last argument may be an array, which indicates varargs. Wildcards will be passed as null. The methods may throw an InvalidArgumentException.

Returns:

The selector factory.

getEntityReferences

protected List<EntityReference> getEntityReferences(List<EntityReference> secured)

Specified by:

getEntityReferences in class AbstractEntitySecurityDomain<EntityReference,EntityModel>

createCacheKey

protected EntityModel createCacheKey(List<?> objects)

Only use one guard instance per security context and model.

Specified by:

createCacheKey in class GuardCachingSecurityDomain<EntityModel>

buildCache

protected com.google.common.cache.Cache<EntityModel,Policy> buildCache()

Specified by:

buildCache in class GuardCachingSecurityDomain<EntityModel>