Interface IAuthorizationPolicy


@Deprecated(since="11.0", forRemoval=true) public interface IAuthorizationPolicy
Deprecated, for removal: This API element is subject to removal in a future version.
since 11.0, for removal in a future release.
An access control policy.

Responsible for determining if access to a given action should be allowed or denied. A implementation could be one based on roles, as is done in the Servlet specification. (In other words, if the policy has an association between the given action and a role that has been granted to the user, then the decision will be to allow.)

The IAuthorizationPolicy interface has been deprecated in favor of the new authorization service, IAuthorizationService and will be removed in a future version of the platform.

Author:
mlowery
  • Method Summary

    Modifier and Type
    Method
    Description
    getAllowedActions(String actionNamespace)
    Deprecated, for removal: This API element is subject to removal in a future version.
    Returns all actions in the given namespace that are currently allowed.
    boolean
    isAllowed(String actionName)
    Deprecated, for removal: This API element is subject to removal in a future version.
    Returns true if the action should be allowed.
  • Method Details

    • isAllowed

      boolean isAllowed(String actionName)
      Deprecated, for removal: This API element is subject to removal in a future version.
      Returns true if the action should be allowed.
      Parameters:
      actionName - name of action (e.g. org.pentaho.di.repository.create)
      Returns:
      true to allow
    • getAllowedActions

      List<String> getAllowedActions(String actionNamespace)
      Deprecated, for removal: This API element is subject to removal in a future version.
      Returns all actions in the given namespace that are currently allowed.
      Parameters:
      actionNamespace - action namespace (e.g. org.pentaho.di.repository); null means all allowed actions
      Returns:
      list of actions