org.pentaho.platform.security.policy.rolebased

Class AbstractJcrBackedRoleBindingDao

java.lang.Object

org.pentaho.platform.security.policy.rolebased.AbstractJcrBackedRoleBindingDao

All Implemented Interfaces:

IRoleAuthorizationPolicyRoleBindingDao

Direct Known Subclasses:

JcrRoleAuthorizationPolicyRoleBindingDao

public abstract class AbstractJcrBackedRoleBindingDao
extends Object
implements IRoleAuthorizationPolicyRoleBindingDao

Field Summary

Fields

Modifier and Type	Field and Description
protected Map<String,List<String>>	bootstrapRoleBindings
static String	FOLDER_NAME_AUTHZ
static String	FOLDER_NAME_ROLEBASED
static String	FOLDER_NAME_RUNTIMEROLES
protected Map<String,List<String>>	immutableRoleBindingNames
protected Map<String,List<IAuthorizationAction>>	immutableRoleBindings
protected String	superAdminRoleName
protected ITenantedPrincipleNameResolver	tenantedRoleNameUtils

Constructor Summary

Constructors

Constructor and Description
AbstractJcrBackedRoleBindingDao()
AbstractJcrBackedRoleBindingDao(Map<String,List<IAuthorizationAction>> immutableRoleBindings, Map<String,List<String>> bootstrapRoleBindings, String superAdminRoleName, ITenantedPrincipleNameResolver tenantedRoleNameUtils, List<IAuthorizationAction> authorizationActions)

Method Summary

Modifier and Type	Method and Description
List<String>	getBoundLogicalRoleNames(javax.jcr.Session session, ITenant tenant, List<String> runtimeRoleNames) This was added to decouple PentahoEntryCollector Gets the logical roles bound to the given runtime roles in a particular tenant.
List<String>	getBoundLogicalRoleNames(javax.jcr.Session session, List<String> runtimeRoleNames) This was added to decouple PentahoEntryCollector Gets the logical roles bound to the given runtime roles.
protected Map<String,String>	getMapForLocale(String localeString)
protected Map<String,List<String>>	getRoleBindings(javax.jcr.Session session, ITenant tenant)
RoleBindingStruct	getRoleBindingStruct(javax.jcr.Session session, ITenant tenant, String locale)
javax.jcr.Node	getRuntimeRolesFolderNode(javax.jcr.Session session, ITenant tenant)
protected boolean	isImmutable(String runtimeRoleName)
void	setAuthorizationActions(List<IAuthorizationAction> authorizationActions)
void	setRoleBindings(javax.jcr.Session session, ITenant tenant, String runtimeRoleName, List<String> logicalRoleNames)
void	updateImmutableRoleBindingNames()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.pentaho.platform.security.policy.rolebased.IRoleAuthorizationPolicyRoleBindingDao

getBoundLogicalRoleNames, getBoundLogicalRoleNames, getRoleBindingStruct, getRoleBindingStruct, setRoleBindings, setRoleBindings

Field Detail

tenantedRoleNameUtils

protected ITenantedPrincipleNameResolver tenantedRoleNameUtils

immutableRoleBindings

protected Map<String,List<IAuthorizationAction>> immutableRoleBindings

immutableRoleBindingNames

protected Map<String,List<String>> immutableRoleBindingNames

bootstrapRoleBindings

protected Map<String,List<String>> bootstrapRoleBindings

superAdminRoleName

protected String superAdminRoleName

FOLDER_NAME_AUTHZ

public static final String FOLDER_NAME_AUTHZ

See Also:

Constant Field Values

FOLDER_NAME_ROLEBASED

public static final String FOLDER_NAME_ROLEBASED

See Also:

Constant Field Values

FOLDER_NAME_RUNTIMEROLES

public static final String FOLDER_NAME_RUNTIMEROLES

See Also:

Constant Field Values

Constructor Detail

AbstractJcrBackedRoleBindingDao

public AbstractJcrBackedRoleBindingDao()

AbstractJcrBackedRoleBindingDao

public AbstractJcrBackedRoleBindingDao(Map<String,List<IAuthorizationAction>> immutableRoleBindings,
                                       Map<String,List<String>> bootstrapRoleBindings,
                                       String superAdminRoleName,
                                       ITenantedPrincipleNameResolver tenantedRoleNameUtils,
                                       List<IAuthorizationAction> authorizationActions)

Method Detail

updateImmutableRoleBindingNames

public void updateImmutableRoleBindingNames()

setAuthorizationActions

public void setAuthorizationActions(List<IAuthorizationAction> authorizationActions)

getBoundLogicalRoleNames

public List<String> getBoundLogicalRoleNames(javax.jcr.Session session,
                                             List<String> runtimeRoleNames)
                                      throws javax.jcr.NamespaceException,
                                             javax.jcr.RepositoryException

Description copied from interface: IRoleAuthorizationPolicyRoleBindingDao

This was added to decouple PentahoEntryCollector Gets the logical roles bound to the given runtime roles. Note that the size of the incoming list might not match the size of the returned list. This is a convenience method. The same result could be obtained from #getRoleBindingStruct().

Specified by:

getBoundLogicalRoleNames in interface IRoleAuthorizationPolicyRoleBindingDao

runtimeRoleNames - list of runtime role names

Returns:

list of logical role names, never null

Throws:

javax.jcr.NamespaceException

javax.jcr.RepositoryException

getBoundLogicalRoleNames

public List<String> getBoundLogicalRoleNames(javax.jcr.Session session,
                                             ITenant tenant,
                                             List<String> runtimeRoleNames)
                                      throws javax.jcr.NamespaceException,
                                             javax.jcr.RepositoryException

Description copied from interface: IRoleAuthorizationPolicyRoleBindingDao

This was added to decouple PentahoEntryCollector Gets the logical roles bound to the given runtime roles in a particular tenant. Note that the size of the incoming list might not match the size of the returned list. This is a convenience method. The same result could be obtained from #getRoleBindingStruct().

Specified by:

getBoundLogicalRoleNames in interface IRoleAuthorizationPolicyRoleBindingDao

runtimeRoleNames - list of runtime role names

Returns:

list of logical role names, never null

Throws:

javax.jcr.NamespaceException

javax.jcr.RepositoryException

setRoleBindings

public void setRoleBindings(javax.jcr.Session session,
                            ITenant tenant,
                            String runtimeRoleName,
                            List<String> logicalRoleNames)
                     throws javax.jcr.NamespaceException,
                            javax.jcr.RepositoryException

Throws:

javax.jcr.NamespaceException

javax.jcr.RepositoryException

isImmutable

protected boolean isImmutable(String runtimeRoleName)

getRoleBindings

protected Map<String,List<String>> getRoleBindings(javax.jcr.Session session,
                                                   ITenant tenant)
                                            throws javax.jcr.RepositoryException

Throws:

javax.jcr.RepositoryException

getRoleBindingStruct

public RoleBindingStruct getRoleBindingStruct(javax.jcr.Session session,
                                              ITenant tenant,
                                              String locale)
                                       throws javax.jcr.RepositoryException

Throws:

javax.jcr.RepositoryException

getMapForLocale

protected Map<String,String> getMapForLocale(String localeString)

getRuntimeRolesFolderNode

public javax.jcr.Node getRuntimeRolesFolderNode(javax.jcr.Session session,
                                                ITenant tenant)
                                         throws javax.jcr.RepositoryException

Throws:

javax.jcr.RepositoryException