| Package | Description |
|---|---|
| org.mmbase.bridge.implementation |
This package provides the basic implementations for the interfaces of org.mmbase.bridge.
|
| org.mmbase.security |
The security infrastructure of MMBase.
|
| org.mmbase.security.implementation.basic | |
| org.mmbase.security.implementation.cloud | |
| org.mmbase.security.implementation.cloudcontext | |
| org.mmbase.security.implementation.cloudcontext.builders | |
| org.mmbase.security.implementation.cloudcontext.workflow | |
| org.mmbase.security.implementation.context |
| Modifier and Type | Method and Description |
|---|---|
(package private) boolean |
BasicCloud.check(Operation operation,
int nodeID)
Checks access rights.
|
(package private) boolean |
BasicCloud.check(Operation operation,
int nodeID,
int srcNodeID,
int dstNodeID)
Checks access rights.
|
(package private) void |
BasicCloud.verify(Operation operation,
int nodeID)
Asserts access rights.
|
(package private) void |
BasicCloud.verify(Operation operation,
int nodeID,
int srcNodeID,
int dstNodeID)
Asserts access rights.
|
| Modifier and Type | Field and Description |
|---|---|
static Operation |
Operation.CHANGE_CONTEXT
Identifier for change context operation, which is used when changing the context of a node
|
static Operation |
Operation.CHANGE_RELATION
Identifier for changing the source and/or destination field of a
relation.
|
static Operation |
Operation.CREATE
Identifier for create operation, which is used for creating a new node.
|
static Operation |
Operation.DELETE
Identifier for remove operation, which is used when removing a node
|
static Operation |
Operation.READ
A 'read' operation is acquiring an MMBase Node.
|
static Operation |
Operation.WRITE
Node.setValue(String, Object) is an example of a write-operation. |
| Modifier and Type | Method and Description |
|---|---|
static Operation |
Operation.getOperation(String operationString)
retrieve a Operation by a given string
|
| Modifier and Type | Method and Description |
|---|---|
boolean |
NoAuthorization.check(UserContext user,
int nodeid,
int srcNodeid,
int dstNodeid,
Operation operation)
No authorization means that everyting is allowed
|
abstract boolean |
Authorization.check(UserContext user,
int nodeid,
int srcnodeid,
int dstnodeid,
Operation operation)
This method should be overrided by an extending class.
|
boolean |
NoAuthorization.check(UserContext user,
int nodeid,
Operation operation)
No authorization means that everyting is allowed
|
abstract boolean |
Authorization.check(UserContext user,
int nodeid,
Operation operation)
This method should be overrided by an extending class.
|
Authorization.QueryCheck |
NoAuthorization.check(UserContext user,
Query query,
Operation operation) |
Authorization.QueryCheck |
Authorization.check(UserContext user,
Query query,
Operation operation)
Checks rights on a query.
|
void |
NoAuthorization.verify(UserContext user,
int nodeid,
int srcNodeid,
int dstNodeid,
Operation operation)
This method does nothing
|
void |
Authorization.verify(UserContext user,
int nodeid,
int srcnodeid,
int dstnodeid,
Operation operation)
This method wraps the check-method with the same arguments.
|
void |
NoAuthorization.verify(UserContext user,
int nodeid,
Operation operation)
This method does nothing
|
void |
Authorization.verify(UserContext user,
int nodeid,
Operation operation)
This method wraps the check-method with the same arguments.
|
| Modifier and Type | Method and Description |
|---|---|
boolean |
OwnerAuthorization.check(UserContext user,
int nodeNumber,
int srcNodeNumber,
int dstNodeNumber,
Operation operation) |
boolean |
OwnerAuthorization.check(UserContext user,
int nodeNumber,
Operation operation) |
Authorization.QueryCheck |
OwnerAuthorization.check(UserContext user,
Query query,
Operation operation) |
| Modifier and Type | Method and Description |
|---|---|
boolean |
Verify.check(UserContext user,
int nodeid,
int srcnodeid,
int dstnodeid,
Operation operation) |
boolean |
Verify.check(UserContext user,
int nodeid,
Operation operation) |
Authorization.QueryCheck |
Verify.check(UserContext user,
Query query,
Operation operation) |
| Modifier and Type | Method and Description |
|---|---|
protected Authorization.QueryCheck |
BasicContextProvider.addAllowingContextsConstraints(List<Constraint> constraints,
User userContext,
Query query,
Operation operation) |
protected Authorization.QueryCheck |
BasicContextProvider.addConstraints(List<Constraint> constraints,
User userContext,
Query query,
Operation operation) |
protected Authorization.QueryCheck |
BasicContextProvider.addSecurityObjectsConstraints(List<Constraint> constraints,
User userContext,
Query query,
Operation operation) |
protected boolean |
BasicContextProvider.allows(MMObjectNode contextNode,
MMObjectNode groupOrUserNode,
Operation operation) |
static boolean |
ContextBuilderFunctions.allows(Node context,
Node groupOrUser,
Operation operation) |
boolean |
Verify.check(UserContext userContext,
int nodeId,
int sourceNodeId,
int destinationNodeId,
Operation operation) |
boolean |
Verify.check(UserContext userContext,
int nodeId,
Operation operation) |
Authorization.QueryCheck |
Verify.check(UserContext userContext,
Query query,
Operation operation) |
Authorization.QueryCheck |
ContextProvider.check(User userContext,
Query query,
Operation operation) |
Authorization.QueryCheck |
BasicContextProvider.check(User userContext,
Query query,
Operation operation) |
Set<MMObjectNode> |
Caches.OperationsCache.get(MMObjectNode context,
Operation op) |
protected SortedSet<String> |
BasicContextProvider.getAllowingContexts(User user,
Operation operation) |
protected ContextProvider.AllowingContexts |
BasicContextProvider.getAllowingOrDisallowingContexts(User userContext,
Operation operation) |
protected SortedSet<String> |
BasicContextProvider.getDisallowingContexts(User user,
Operation operation)
Returns a Set (of Strings) of all existing contexts for which the given operation is not allowed for the given user.
|
Set<MMObjectNode> |
BasicContextProvider.getGroupsAndUsers(MMObjectNode contextNode,
Operation operation) |
protected Collection<MMObjectNode> |
BasicContextProvider.getGroupsOrUsers(MMObjectNode contextNode,
Operation operation,
MMObjectBuilder groupsOrUsers) |
static boolean |
ContextBuilderFunctions.grant(Node context,
Node groupOrUser,
Operation operation,
UserContext user) |
boolean |
ContextProvider.grant(User user,
MMObjectNode contextNode,
MMObjectNode groupOrUserNode,
Operation operation) |
boolean |
BasicContextProvider.grant(User user,
MMObjectNode contextNode,
MMObjectNode groupOrUserNode,
Operation operation) |
static boolean |
ContextBuilderFunctions.may(Node context,
UserContext user,
String usertocheck,
Operation operation) |
boolean |
ContextProvider.mayDo(User user,
MMObjectNode nodeId,
Operation operation) |
boolean |
BasicContextProvider.mayDo(User user,
MMObjectNode node,
Operation operation) |
boolean |
ContextProvider.mayDoOnContext(MMObjectNode userNode,
MMObjectNode contextNode,
Operation operation,
boolean checkOwnRights) |
boolean |
BasicContextProvider.mayDoOnContext(MMObjectNode userNode,
MMObjectNode contextNode,
Operation operation,
boolean checkOwnRights) |
protected boolean |
BasicContextProvider.mayDoOnContext(User user,
MMObjectNode contextNode,
Operation operation,
boolean checkOwnRights) |
static boolean |
ContextBuilderFunctions.maygrant(Node context,
Node groupOrUser,
Operation operation,
UserContext user) |
boolean |
ContextProvider.mayGrant(User user,
MMObjectNode contextNode,
MMObjectNode groupOrUserNode,
Operation operation)
Whether, or not, the user is allowed to grant the security operation to the group or user on the context
node.
|
boolean |
BasicContextProvider.mayGrant(User user,
MMObjectNode contextNode,
MMObjectNode groupOrUserNode,
Operation operation) |
static boolean |
ContextBuilderFunctions.mayrevoke(Node context,
Node groupOrUser,
Operation operation,
UserContext user) |
boolean |
ContextProvider.mayRevoke(User user,
MMObjectNode contextNode,
MMObjectNode groupOrUserNode,
Operation operation)
Whether, or not, the user is allowed to revoke the security operation to the group or user on the context
node.
|
boolean |
BasicContextProvider.mayRevoke(User user,
MMObjectNode contextNode,
MMObjectNode groupOrUserNode,
Operation operation) |
static boolean |
ContextBuilderFunctions.parentsallow(Node context,
Node groupOrUser,
Operation operation) |
Object |
Caches.OperationsCache.put(MMObjectNode context,
Operation op,
Set<MMObjectNode> groups) |
static boolean |
ContextBuilderFunctions.revoke(Node context,
Node groupOrUser,
Operation operation,
UserContext user) |
boolean |
ContextProvider.revoke(User user,
MMObjectNode contextNode,
MMObjectNode groupOrUserNode,
Operation operation) |
boolean |
BasicContextProvider.revoke(User user,
MMObjectNode contextNode,
MMObjectNode groupOrUserNode,
Operation operation) |
| Modifier and Type | Method and Description |
|---|---|
Authorization.QueryCheck |
Contexts.check(User userContext,
Query query,
Operation operation)
Implements check function with same arguments of Authorisation security implementation
|
MMObjectNode |
RightsRel.getNewNode(String owner,
int snumber,
int dnumber,
Operation operation) |
protected boolean |
Contexts.mayDo(MMObjectNode user,
MMObjectNode contextNode,
Operation operation,
boolean checkOwnRights) |
| Modifier and Type | Method and Description |
|---|---|
protected Authorization.QueryCheck |
WorkFlowContextProvider.addConstraints(List<Constraint> constraints,
User userContext,
Query query,
Operation operation) |
protected Authorization.QueryCheck |
WorkFlowContextProvider.addWorkFlowConstraints(List<Constraint> constraints,
User userContext,
Query query,
Operation operation) |
boolean |
WorkFlowContextProvider.mayDo(User user,
MMObjectNode nodeId,
Operation operation) |
| Modifier and Type | Method and Description |
|---|---|
boolean |
ContextAuthorization.check(UserContext user,
int nodeNumber,
int srcNodeNumber,
int dstNodeNumber,
Operation operation) |
boolean |
ContextAuthorization.check(UserContext user,
int nodeNumber,
Operation operation) |
Authorization.QueryCheck |
ContextAuthorization.check(UserContext userContext,
Query query,
Operation operation) |
protected SortedSet<String> |
ContextAuthorization.getDisallowingContexts(UserContext user,
Operation operation) |
void |
ContextAuthorization.verify(UserContext user,
int nodeNumber,
int srcNodeNumber,
int dstNodeNumber,
Operation operation) |
void |
ContextAuthorization.verify(UserContext user,
int nodeNumber,
Operation operation) |
MMBase 1.9-SNAPSHOT - ${javadoctimestamp}