Interface IAuthorizationPolicy


  • public interface IAuthorizationPolicy
    An access control policy.

    Reponsible for determining if access to a given action should be allowed or denied. A implementation could be one based on roles, as is done in the Servlet specification. (In other words, if the policy has an association between the given action and a role that has been granted to the user, then the decision will be to allow.)

    Author:
    mlowery
    • Method Detail

      • isAllowed

        boolean isAllowed​(String actionName)
        Returns true if the the action should be allowed.
        Parameters:
        actionName - name of action (e.g. org.pentaho.di.repository.create)
        Returns:
        true to allow
      • getAllowedActions

        List<String> getAllowedActions​(String actionNamespace)
        Returns all actions in the given namespace that are currently allowed.
        Parameters:
        actionNamespace - action namespace (e.g. org.pentaho.di.repository); null means all allowed actions
        Returns:
        list of actions