public interface SecurityPolicyService extends Serializable
Modifier and Type | Method and Description |
---|---|
boolean |
arePoliciesExpressibleInQuery(String repositoryName)
Checks if the policies can be expressed in a query for a given
repository.
|
boolean |
arePoliciesRestrictingPermission(String permission)
Checks if any policy restricts the given permission.
|
Access |
checkPermission(Document doc,
ACP mergedAcp,
Principal principal,
String permission,
String[] resolvedPermissions,
String[] principalsToCheck)
Checks given permission for doc and principal.
|
List<SecurityPolicy> |
getPolicies()
Gets the list of registered security policies.
|
Collection<SQLQuery.Transformer> |
getPoliciesQueryTransformers(String repositoryName)
Get the transformers to apply the policies to a query for given
repository.
|
void |
registerDescriptor(SecurityPolicyDescriptor descriptor) |
void |
unregisterDescriptor(SecurityPolicyDescriptor descriptor) |
Access checkPermission(Document doc, ACP mergedAcp, Principal principal, String permission, String[] resolvedPermissions, String[] principalsToCheck)
The security service checks this service for a security access. This access is defined iterating over pluggable policies in a defined order. If access is not specified, security service applies its default policy.
doc
- the document to checkmergedAcp
- merged acp resolved for this documentprincipal
- principal to checkpermission
- permission to checkresolvedPermissions
- permissions or groups of permissions
containing permissionprincipalsToCheck
- principals (groups) to check for principalvoid registerDescriptor(SecurityPolicyDescriptor descriptor)
void unregisterDescriptor(SecurityPolicyDescriptor descriptor)
boolean arePoliciesRestrictingPermission(String permission)
If not, then no post-filtering on policies will be needed for query results.
true
if a policy restricts the permissionboolean arePoliciesExpressibleInQuery(String repositoryName)
If not, then any query made will have to be post-filtered.
repositoryName
- the target repository name.true
if all policies can be expressed in a queryCollection<SQLQuery.Transformer> getPoliciesQueryTransformers(String repositoryName)
repositoryName
- the target repository name.List<SecurityPolicy> getPolicies()
Copyright © 2013 Nuxeo SA. All Rights Reserved.