Package org.apache.jackrabbit.oak.spi.security.authorization.accesscontrol

Class AbstractAccessControlManager

java.lang.Object

org.apache.jackrabbit.oak.spi.security.authorization.accesscontrol.AbstractAccessControlManager

All Implemented Interfaces:

javax.jcr.security.AccessControlManager, org.apache.jackrabbit.api.security.JackrabbitAccessControlManager, AccessControlConstants

public abstract class AbstractAccessControlManager
extends Object
implements org.apache.jackrabbit.api.security.JackrabbitAccessControlManager, AccessControlConstants

Default implementation of the JackrabbitAccessControlManager interface. This implementation covers both editing access control content by path and by Principal resulting both in the same content structure.

Field Summary

Fields inherited from interface org.apache.jackrabbit.oak.spi.security.authorization.accesscontrol.AccessControlConstants

AC_NODETYPE_NAMES, ACE_PROPERTY_NAMES, MIX_REP_ACCESS_CONTROLLABLE, MIX_REP_REPO_ACCESS_CONTROLLABLE, NT_REP_ACE, NT_REP_ACL, NT_REP_DENY_ACE, NT_REP_GRANT_ACE, NT_REP_POLICY, NT_REP_RESTRICTIONS, PARAM_RESTRICTION_PROVIDER, POLICY_NODE_NAMES, REP_GLOB, REP_ITEM_NAMES, REP_NODE_PATH, REP_NT_NAMES, REP_POLICY, REP_PREFIXES, REP_PRINCIPAL_NAME, REP_PRIVILEGES, REP_REPO_POLICY, REP_RESTRICTIONS

Constructor Summary

Constructors

Modifier	Constructor	Description
protected	AbstractAccessControlManager(@NotNull org.apache.jackrabbit.oak.api.Root root, @NotNull org.apache.jackrabbit.oak.namepath.NamePathMapper namePathMapper, @NotNull SecurityProvider securityProvider)

Method Summary

Modifier and Type	Method	Description
protected @NotNull AuthorizationConfiguration	getConfig()
protected @NotNull org.apache.jackrabbit.oak.api.Root	getLatestRoot()
protected @NotNull org.apache.jackrabbit.oak.namepath.NamePathMapper	getNamePathMapper()
protected @Nullable String	getOakPath(@Nullable String jcrPath)
protected @NotNull PermissionProvider	getPermissionProvider()
protected @NotNull org.apache.jackrabbit.api.security.authorization.PrivilegeManager	getPrivilegeManager()
@NotNull javax.jcr.security.Privilege[]	getPrivileges(@Nullable String absPath)
@NotNull javax.jcr.security.Privilege[]	getPrivileges(@Nullable String absPath, @NotNull Set<Principal> principals)
protected @NotNull org.apache.jackrabbit.oak.api.Root	getRoot()
@NotNull javax.jcr.security.Privilege[]	getSupportedPrivileges(@Nullable String absPath)
protected @NotNull org.apache.jackrabbit.oak.api.Tree	getTree(@Nullable String oakPath, long permissions, boolean checkAcContent)
boolean	hasPrivileges(@Nullable String absPath, @NotNull Set<Principal> principals, @Nullable javax.jcr.security.Privilege[] privileges)
boolean	hasPrivileges(@Nullable String absPath, @Nullable javax.jcr.security.Privilege[] privileges)
@NotNull javax.jcr.security.Privilege	privilegeFromName(@NotNull String privilegeName)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface javax.jcr.security.AccessControlManager

getApplicablePolicies, getEffectivePolicies, getPolicies, removePolicy, setPolicy

Methods inherited from interface org.apache.jackrabbit.api.security.JackrabbitAccessControlManager

getApplicablePolicies, getEffectivePolicies, getPolicies

Constructor Detail

AbstractAccessControlManager

protected AbstractAccessControlManager(@NotNull
                                       @NotNull org.apache.jackrabbit.oak.api.Root root,
                                       @NotNull
                                       @NotNull org.apache.jackrabbit.oak.namepath.NamePathMapper namePathMapper,
                                       @NotNull
                                       @NotNull SecurityProvider securityProvider)

Method Detail

getSupportedPrivileges

@NotNull
public @NotNull javax.jcr.security.Privilege[] getSupportedPrivileges(@Nullable
                                                                      @Nullable String absPath)
                                                               throws javax.jcr.RepositoryException

Specified by:

getSupportedPrivileges in interface javax.jcr.security.AccessControlManager

Throws:

javax.jcr.RepositoryException

privilegeFromName

@NotNull
public @NotNull javax.jcr.security.Privilege privilegeFromName(@NotNull
                                                               @NotNull String privilegeName)
                                                        throws javax.jcr.RepositoryException

Specified by:

privilegeFromName in interface javax.jcr.security.AccessControlManager

Throws:

javax.jcr.RepositoryException

hasPrivileges

public boolean hasPrivileges(@Nullable
                             @Nullable String absPath,
                             @Nullable
                             @Nullable javax.jcr.security.Privilege[] privileges)
                      throws javax.jcr.RepositoryException

Specified by:

hasPrivileges in interface javax.jcr.security.AccessControlManager

Throws:

javax.jcr.RepositoryException

getPrivileges

@NotNull
public @NotNull javax.jcr.security.Privilege[] getPrivileges(@Nullable
                                                             @Nullable String absPath)
                                                      throws javax.jcr.RepositoryException

Specified by:

getPrivileges in interface javax.jcr.security.AccessControlManager

Throws:

javax.jcr.RepositoryException

hasPrivileges

public boolean hasPrivileges(@Nullable
                             @Nullable String absPath,
                             @NotNull
                             @NotNull Set<Principal> principals,
                             @Nullable
                             @Nullable javax.jcr.security.Privilege[] privileges)
                      throws javax.jcr.RepositoryException

Specified by:

hasPrivileges in interface org.apache.jackrabbit.api.security.JackrabbitAccessControlManager

Throws:

javax.jcr.RepositoryException

getPrivileges

@NotNull
public @NotNull javax.jcr.security.Privilege[] getPrivileges(@Nullable
                                                             @Nullable String absPath,
                                                             @NotNull
                                                             @NotNull Set<Principal> principals)
                                                      throws javax.jcr.RepositoryException

Specified by:

getPrivileges in interface org.apache.jackrabbit.api.security.JackrabbitAccessControlManager

Throws:

javax.jcr.RepositoryException

getConfig

@NotNull
protected @NotNull AuthorizationConfiguration getConfig()

getRoot

@NotNull
protected @NotNull org.apache.jackrabbit.oak.api.Root getRoot()

getLatestRoot

@NotNull
protected @NotNull org.apache.jackrabbit.oak.api.Root getLatestRoot()

getNamePathMapper

@NotNull
protected @NotNull org.apache.jackrabbit.oak.namepath.NamePathMapper getNamePathMapper()

getPrivilegeManager

@NotNull
protected @NotNull org.apache.jackrabbit.api.security.authorization.PrivilegeManager getPrivilegeManager()

getOakPath

@Nullable
protected @Nullable String getOakPath(@Nullable
                                      @Nullable String jcrPath)
                               throws javax.jcr.RepositoryException

Throws:

javax.jcr.RepositoryException

getTree

@NotNull
protected @NotNull org.apache.jackrabbit.oak.api.Tree getTree(@Nullable
                                                              @Nullable String oakPath,
                                                              long permissions,
                                                              boolean checkAcContent)
                                                       throws javax.jcr.RepositoryException

Throws:

javax.jcr.RepositoryException

getPermissionProvider

@NotNull
protected @NotNull PermissionProvider getPermissionProvider()