org.pentaho.platform.engine.security
Class AcegiPermissionMgr

java.lang.Object
  org.pentaho.platform.engine.security.AcegiPermissionMgr

All Implemented Interfaces:

IPermissionMgr

public class AcegiPermissionMgr
extends Object
implements IPermissionMgr

Method Summary

Map<IPermissionRecipient,IPermissionMask>	getEffectivePermissions(Object domainInstance) Returns permission map containing access control entries that are defined directly on this domainInstance.
Map<IPermissionRecipient,IPermissionMask>	getPermissions(Object domainInstance) Returns permission map containing access control entries that are defined directly on this domainInstance.
boolean	hasPermission(IPermissionRecipient permissionRecipient, IPermissionMask permissionMask, Object object) mlowery Note that this method takes a single recipient--either a role or user.
static AcegiPermissionMgr	instance()
void	setPermission(IPermissionRecipient permissionRecipient, IPermissionMask permission, Object object)
void	setPermissions(Map<IPermissionRecipient,IPermissionMask> permissionsMap, Object object) TODO mlowery This is really addPermission.

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Detail

instance

public static AcegiPermissionMgr instance()

getPermissions

public Map<IPermissionRecipient,IPermissionMask> getPermissions(Object domainInstance)

Description copied from interface: IPermissionMgr

Returns permission map containing access control entries that are defined directly on this domainInstance.

Specified by:

getPermissions in interface IPermissionMgr

Parameters:

domainInstance - the object for which to fetch permissions

Returns:

a map of permissions

getEffectivePermissions

public Map<IPermissionRecipient,IPermissionMask> getEffectivePermissions(Object domainInstance)

Description copied from interface: IPermissionMgr

Returns permission map containing access control entries that are defined directly on this domainInstance. If there are no direct entries, then the permission map will be the map of one of domainInstance's ancestors.

Specified by:

getEffectivePermissions in interface IPermissionMgr

Parameters:

domainInstance - the object for which to fetch permissions

Returns:

a map of permissions

hasPermission

public boolean hasPermission(IPermissionRecipient permissionRecipient,
                             IPermissionMask permissionMask,
                             Object object)

Description copied from interface: IPermissionMgr

mlowery Note that this method takes a single recipient--either a role or user. It does not take an Authentication instance like Acegi Security's AccessDecisionVoter.

Specified by:

hasPermission in interface IPermissionMgr

setPermission

public void setPermission(IPermissionRecipient permissionRecipient,
                          IPermissionMask permission,
                          Object object)

Specified by:

setPermission in interface IPermissionMgr

setPermissions

public void setPermissions(Map<IPermissionRecipient,IPermissionMask> permissionsMap,
                           Object object)

Description copied from interface: IPermissionMgr

TODO mlowery This is really addPermission. Perhaps a method name change?

Specified by:

setPermissions in interface IPermissionMgr