Package org.ametys.plugins.repository

Class ACLAmetysObjectProfileAssignmentStorage

java.lang.Object

org.ametys.runtime.plugin.component.AbstractLogEnabled

org.ametys.plugins.repository.ACLAmetysObjectProfileAssignmentStorage

All Implemented Interfaces:

ProfileAssignmentStorage, LogEnabled

Direct Known Subclasses:

ModifiableACLAmetysObjectProfileAssignmentStorage

public class ACLAmetysObjectProfileAssignmentStorage
extends AbstractLogEnabled
implements ProfileAssignmentStorage

Implementation of ProfileAssignmentStorage for ACLAmetysObjects which stores profile assignments in subnodes of the node representing this object.

Nested Class Summary

Nested classes/interfaces inherited from interface org.ametys.core.right.ProfileAssignmentStorage

ProfileAssignmentStorage.AnonymousOrAnyConnectedKeys, ProfileAssignmentStorage.UserOrGroup

Field Summary

Fields inherited from interface org.ametys.core.right.ProfileAssignmentStorage

MAX_PRIORITY, MIN_PRIORITY

Constructor Summary

Constructors

Constructor	Description
ACLAmetysObjectProfileAssignmentStorage()

Method Summary

Modifier and Type	Method	Description
int	getPriority()	Returns the priority of this profile storage The ProfileAssignmentStorageExtensionPoint will take the profile storage which supports the object with the highest priority to return the allowed/denied users/groups
Map<ProfileAssignmentStorage.AnonymousOrAnyConnectedKeys,Set<String>>	getProfilesForAnonymousAndAnyConnectedUser(Object object)	Gets the allowed profiles any connected user has on the given object
Map<GroupIdentity,Map<ProfileAssignmentStorage.UserOrGroup,Set<String>>>	getProfilesForGroups(Object object, Set<GroupIdentity> groups)	Gets the groups that have allowed profiles assigned on the given object
Map<UserIdentity,Map<ProfileAssignmentStorage.UserOrGroup,Set<String>>>	getProfilesForUsers(Object object, UserIdentity user)	Gets the users that have allowed profiles assigned on the given object
Set<String>	hasAnonymousAnyAllowedProfile(Set<? extends Object> rootContexts, Set<String> profileIds)	Returns some profiles that are matching if anonymous user has the allowed profile for any given root context (or any sub context), given some profiles. Only supported objects are transmitted
Set<String>	hasAnyConnectedAnyAllowedProfile(Set<? extends Object> rootContexts, Set<String> profileIds)	Returns some profiles that are matching if any connected user has the allowed profile for any given root context (or any sub context), given some profiles. Only supported objects are transmitted
Set<String>	hasGroupAnyAllowedProfile(Set<? extends Object> rootContexts, Set<GroupIdentity> groups, Set<String> profileIds)	Returns some profiles that are matching if group has the allowed profile for any given root context (or any sub context), given some profiles. Only supported objects are transmitted
Set<String>	hasUserAnyAllowedProfile(Set<? extends Object> rootContexts, UserIdentity user, Set<String> profileIds)	Returns some profiles that are matching if user has the allowed profile for any given root context (or any sub context), given some profiles. Only supported objects are transmitted
boolean	isInheritanceDisallowed(Object object)	Returns true if the inheritance of permissions is disallowed on the given object
boolean	isRootContextSupported(Object rootContext)	Returns true if this profile storage supports the given object as a root context i.e.
boolean	isSupported(Object object)	Returns true if this profile storage supports the given object, i.e.

Methods inherited from class org.ametys.runtime.plugin.component.AbstractLogEnabled

getLogger, setLogger

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

ACLAmetysObjectProfileAssignmentStorage

public ACLAmetysObjectProfileAssignmentStorage()

Method Detail

hasUserAnyAllowedProfile

public Set<String> hasUserAnyAllowedProfile(Set<? extends Object> rootContexts,
                                            UserIdentity user,
                                            Set<String> profileIds)

Description copied from interface: ProfileAssignmentStorage

Returns some profiles that are matching if user has the allowed profile for any given root context (or any sub context), given some profiles.
Only supported objects are transmitted

Specified by:

hasUserAnyAllowedProfile in interface ProfileAssignmentStorage

Parameters:

rootContexts - The root contexts to search rights for

user - The user to test

profileIds - The ids of the profiles

Returns:

If the Set is empty, it means any connected user has no matching profile.
If the Set is non empty, it contains at least one of the given profile BUT it may not contains all the matching profiles for anyconnected user AND it can contains some other profiles that were not in the given profiles

hasGroupAnyAllowedProfile

public Set<String> hasGroupAnyAllowedProfile(Set<? extends Object> rootContexts,
                                             Set<GroupIdentity> groups,
                                             Set<String> profileIds)

Description copied from interface: ProfileAssignmentStorage

Returns some profiles that are matching if group has the allowed profile for any given root context (or any sub context), given some profiles.
Only supported objects are transmitted

Specified by:

hasGroupAnyAllowedProfile in interface ProfileAssignmentStorage

Parameters:

rootContexts - The root contexts to search rights for

groups - The groups to test (a single group needs to match)

profileIds - The ids of the profiles

Returns:

If the Set is empty, it means the group has no matching profile.
If the Set is non empty, it contains at least one of the given profile BUT it may not contains all the matching profiles for the group AND it can contains some other profiles that were not in the given profiles

hasAnyConnectedAnyAllowedProfile

public Set<String> hasAnyConnectedAnyAllowedProfile(Set<? extends Object> rootContexts,
                                                    Set<String> profileIds)

Description copied from interface: ProfileAssignmentStorage

Returns some profiles that are matching if any connected user has the allowed profile for any given root context (or any sub context), given some profiles.
Only supported objects are transmitted

Specified by:

hasAnyConnectedAnyAllowedProfile in interface ProfileAssignmentStorage

Parameters:

rootContexts - The root contexts to search rights for

profileIds - The ids of the profiles

Returns:

If the Set is empty, it means the user has no matching profile.
If the Set is non empty, it contains at least one of the given profile BUT it may not contains all the matching profiles for the user AND it can contains some other profiles that were not in the given profiles

hasAnonymousAnyAllowedProfile

public Set<String> hasAnonymousAnyAllowedProfile(Set<? extends Object> rootContexts,
                                                 Set<String> profileIds)

Description copied from interface: ProfileAssignmentStorage

Returns some profiles that are matching if anonymous user has the allowed profile for any given root context (or any sub context), given some profiles.
Only supported objects are transmitted

Specified by:

hasAnonymousAnyAllowedProfile in interface ProfileAssignmentStorage

Parameters:

rootContexts - The root contexts to search rights for

profileIds - The ids of the profiles

Returns:

If the Set is empty, it means anonymous has no matching profile.
If the Set is non empty, it contains at least one of the given profile BUT it may not contains all the matching profiles for anonymous AND it can contains some other profiles that were not in the given profiles

getProfilesForAnonymousAndAnyConnectedUser

public Map<ProfileAssignmentStorage.AnonymousOrAnyConnectedKeys,Set<String>> getProfilesForAnonymousAndAnyConnectedUser(Object object)

Description copied from interface: ProfileAssignmentStorage

Gets the allowed profiles any connected user has on the given object

Specified by:

getProfilesForAnonymousAndAnyConnectedUser in interface ProfileAssignmentStorage

Parameters:

object - The object

Returns:

a map containing allowed/denied profiles that anonymous and any connected user has on the given object

getProfilesForUsers

public Map<UserIdentity,Map<ProfileAssignmentStorage.UserOrGroup,Set<String>>> getProfilesForUsers(Object object,
                                                                                                               UserIdentity user)

Description copied from interface: ProfileAssignmentStorage

Gets the users that have allowed profiles assigned on the given object

Specified by:

getProfilesForUsers in interface ProfileAssignmentStorage

Parameters:

object - The object to test

user - The user to get profiles for. Can be null to get profiles for all users that have rights

Returns:

The map of allowed users with their assigned allowed/denied profiles

getProfilesForGroups

public Map<GroupIdentity,Map<ProfileAssignmentStorage.UserOrGroup,Set<String>>> getProfilesForGroups(Object object,
                                                                                                                 Set<GroupIdentity> groups)

Description copied from interface: ProfileAssignmentStorage

Gets the groups that have allowed profiles assigned on the given object

Specified by:

getProfilesForGroups in interface ProfileAssignmentStorage

Parameters:

object - The object to test

groups - The group to get profiles for. Can be null to get profiles for all groups that have rights

Returns:

The map of allowed/denied groups with their assigned profiles

isInheritanceDisallowed

public boolean isInheritanceDisallowed(Object object)

Description copied from interface: ProfileAssignmentStorage

Returns true if the inheritance of permissions is disallowed on the given object

Specified by:

isInheritanceDisallowed in interface ProfileAssignmentStorage

Parameters:

object - The object to test

Returns:

true if the inheritance of permissions is disallowed on the given object

isSupported

public boolean isSupported(Object object)

Description copied from interface: ProfileAssignmentStorage

Returns true if this profile storage supports the given object, i.e. if it is able to retrieve the allowed users/groups on that object

Specified by:

isSupported in interface ProfileAssignmentStorage

Parameters:

object - The object to test

Returns:

true if this profile storage supports the given object

isRootContextSupported

public boolean isRootContextSupported(Object rootContext)

Description copied from interface: ProfileAssignmentStorage

Returns true if this profile storage supports the given object as a root context i.e. it can seek any permission under this object

Specified by:

isRootContextSupported in interface ProfileAssignmentStorage

Parameters:

rootContext - The object to start searching

Returns:

true if this profile storage support this a as root context to search in

getPriority

public int getPriority()

Description copied from interface: ProfileAssignmentStorage

Returns the priority of this profile storage The ProfileAssignmentStorageExtensionPoint will take the profile storage which supports the object with the highest priority to return the allowed/denied users/groups

Specified by:

getPriority in interface ProfileAssignmentStorage

Returns:

the priority of this profile storage