org.pentaho.platform.engine.security
Class AcegiPermissionMgr

java.lang.Object
  extended by org.pentaho.platform.engine.security.AcegiPermissionMgr
All Implemented Interfaces:
IPermissionMgr

public class AcegiPermissionMgr
extends Object
implements IPermissionMgr


Method Summary
 Map<IPermissionRecipient,IPermissionMask> getEffectivePermissions(Object domainInstance)
          Returns permission map containing access control entries that are defined directly on this domainInstance.
 Map<IPermissionRecipient,IPermissionMask> getPermissions(Object domainInstance)
          Returns permission map containing access control entries that are defined directly on this domainInstance.
 boolean hasPermission(IPermissionRecipient permissionRecipient, IPermissionMask permissionMask, Object object)
          mlowery Note that this method takes a single recipient--either a role or user.
static AcegiPermissionMgr instance()
           
 void setPermission(IPermissionRecipient permissionRecipient, IPermissionMask permission, Object object)
           
 void setPermissions(Map<IPermissionRecipient,IPermissionMask> permissionsMap, Object object)
          TODO mlowery This is really addPermission.
 
Methods inherited from class java.lang.Object
equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait
 

Method Detail

instance

public static AcegiPermissionMgr instance()

getPermissions

public Map<IPermissionRecipient,IPermissionMask> getPermissions(Object domainInstance)
Description copied from interface: IPermissionMgr
Returns permission map containing access control entries that are defined directly on this domainInstance.

Specified by:
getPermissions in interface IPermissionMgr
Parameters:
domainInstance - the object for which to fetch permissions
Returns:
a map of permissions

getEffectivePermissions

public Map<IPermissionRecipient,IPermissionMask> getEffectivePermissions(Object domainInstance)
Description copied from interface: IPermissionMgr
Returns permission map containing access control entries that are defined directly on this domainInstance. If there are no direct entries, then the permission map will be the map of one of domainInstance's ancestors.

Specified by:
getEffectivePermissions in interface IPermissionMgr
Parameters:
domainInstance - the object for which to fetch permissions
Returns:
a map of permissions

hasPermission

public boolean hasPermission(IPermissionRecipient permissionRecipient,
                             IPermissionMask permissionMask,
                             Object object)
Description copied from interface: IPermissionMgr
mlowery Note that this method takes a single recipient--either a role or user. It does not take an Authentication instance like Acegi Security's AccessDecisionVoter.

Specified by:
hasPermission in interface IPermissionMgr

setPermission

public void setPermission(IPermissionRecipient permissionRecipient,
                          IPermissionMask permission,
                          Object object)
Specified by:
setPermission in interface IPermissionMgr

setPermissions

public void setPermissions(Map<IPermissionRecipient,IPermissionMask> permissionsMap,
                           Object object)
Description copied from interface: IPermissionMgr
TODO mlowery This is really addPermission. Perhaps a method name change?

Specified by:
setPermissions in interface IPermissionMgr