org.apache.directory.server.core.authz

Class AciAuthorizationInterceptor

java.lang.Object

org.apache.directory.server.core.api.interceptor.BaseInterceptor

org.apache.directory.server.core.authz.AciAuthorizationInterceptor

All Implemented Interfaces:

org.apache.directory.server.core.api.interceptor.Interceptor

public class AciAuthorizationInterceptor
extends org.apache.directory.server.core.api.interceptor.BaseInterceptor

An ACI based authorization service.

Author:

Apache Directory Project

Field Summary

Fields

Modifier and Type	Field and Description
static SearchControls	DEFAULT_SEARCH_CONTROLS

Fields inherited from class org.apache.directory.server.core.api.interceptor.BaseInterceptor

directoryService, dnFactory, PWD_POLICY_STATE_ATTRIBUTE_TYPES, schemaManager

Constructor Summary

Constructors

Constructor and Description
AciAuthorizationInterceptor() Create a AciAuthorizationInterceptor instance

Method Summary

Modifier and Type	Method and Description
void	add(org.apache.directory.server.core.api.interceptor.context.AddOperationContext addContext)
void	cacheNewGroup(String name, org.apache.directory.api.ldap.model.entry.Entry entry)
boolean	compare(org.apache.directory.server.core.api.interceptor.context.CompareOperationContext compareContext)
void	delete(org.apache.directory.server.core.api.interceptor.context.DeleteOperationContext deleteContext)
boolean	hasEntry(org.apache.directory.server.core.api.interceptor.context.HasEntryOperationContext hasEntryContext)
void	init(org.apache.directory.server.core.api.DirectoryService directoryService) Initializes this interceptor based service by getting a handle on the nexus, setting up the tuple and group membership caches, the ACIItem parser and the ACDF engine.
boolean	isPrincipalAnAdministrator(org.apache.directory.api.ldap.model.name.Dn principalDn)
org.apache.directory.api.ldap.model.entry.Entry	lookup(org.apache.directory.server.core.api.interceptor.context.LookupOperationContext lookupContext)
void	modify(org.apache.directory.server.core.api.interceptor.context.ModifyOperationContext modifyContext)
void	move(org.apache.directory.server.core.api.interceptor.context.MoveOperationContext moveContext)
void	moveAndRename(org.apache.directory.server.core.api.interceptor.context.MoveAndRenameOperationContext moveAndRenameContext)
void	rename(org.apache.directory.server.core.api.interceptor.context.RenameOperationContext renameContext)
org.apache.directory.server.core.api.filtering.EntryFilteringCursor	search(org.apache.directory.server.core.api.interceptor.context.SearchOperationContext searchContext)

Methods inherited from class org.apache.directory.server.core.api.interceptor.BaseInterceptor

bind, destroy, getName, getNextInterceptor, getPrincipal, getRootDse, next, next, next, next, next, next, next, next, next, next, next, next, next, unbind

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

DEFAULT_SEARCH_CONTROLS

public static final SearchControls DEFAULT_SEARCH_CONTROLS

Constructor Detail

AciAuthorizationInterceptor

public AciAuthorizationInterceptor()

Create a AciAuthorizationInterceptor instance

Method Detail

init

public void init(org.apache.directory.server.core.api.DirectoryService directoryService)
          throws org.apache.directory.api.ldap.model.exception.LdapException

Initializes this interceptor based service by getting a handle on the nexus, setting up the tuple and group membership caches, the ACIItem parser and the ACDF engine.

Specified by:

init in interface org.apache.directory.server.core.api.interceptor.Interceptor

Overrides:

init in class org.apache.directory.server.core.api.interceptor.BaseInterceptor

Parameters:

directoryService - the directory service core

Throws:

org.apache.directory.api.ldap.model.exception.LdapException - if there are problems during initialization

add

public void add(org.apache.directory.server.core.api.interceptor.context.AddOperationContext addContext)
         throws org.apache.directory.api.ldap.model.exception.LdapException

Specified by:

add in interface org.apache.directory.server.core.api.interceptor.Interceptor

Overrides:

add in class org.apache.directory.server.core.api.interceptor.BaseInterceptor

Throws:

org.apache.directory.api.ldap.model.exception.LdapException

compare

public boolean compare(org.apache.directory.server.core.api.interceptor.context.CompareOperationContext compareContext)
                throws org.apache.directory.api.ldap.model.exception.LdapException

Specified by:

compare in interface org.apache.directory.server.core.api.interceptor.Interceptor

Overrides:

compare in class org.apache.directory.server.core.api.interceptor.BaseInterceptor

Throws:

org.apache.directory.api.ldap.model.exception.LdapException

delete

public void delete(org.apache.directory.server.core.api.interceptor.context.DeleteOperationContext deleteContext)
            throws org.apache.directory.api.ldap.model.exception.LdapException

Specified by:

delete in interface org.apache.directory.server.core.api.interceptor.Interceptor

Overrides:

delete in class org.apache.directory.server.core.api.interceptor.BaseInterceptor

Throws:

org.apache.directory.api.ldap.model.exception.LdapException

hasEntry

public boolean hasEntry(org.apache.directory.server.core.api.interceptor.context.HasEntryOperationContext hasEntryContext)
                 throws org.apache.directory.api.ldap.model.exception.LdapException

Specified by:

hasEntry in interface org.apache.directory.server.core.api.interceptor.Interceptor

Overrides:

hasEntry in class org.apache.directory.server.core.api.interceptor.BaseInterceptor

Throws:

org.apache.directory.api.ldap.model.exception.LdapException

lookup

public org.apache.directory.api.ldap.model.entry.Entry lookup(org.apache.directory.server.core.api.interceptor.context.LookupOperationContext lookupContext)
                                                       throws org.apache.directory.api.ldap.model.exception.LdapException

Specified by:

lookup in interface org.apache.directory.server.core.api.interceptor.Interceptor

Overrides:

lookup in class org.apache.directory.server.core.api.interceptor.BaseInterceptor

Throws:

org.apache.directory.api.ldap.model.exception.LdapException

modify

public void modify(org.apache.directory.server.core.api.interceptor.context.ModifyOperationContext modifyContext)
            throws org.apache.directory.api.ldap.model.exception.LdapException

Specified by:

modify in interface org.apache.directory.server.core.api.interceptor.Interceptor

Overrides:

modify in class org.apache.directory.server.core.api.interceptor.BaseInterceptor

Throws:

org.apache.directory.api.ldap.model.exception.LdapException

move

public void move(org.apache.directory.server.core.api.interceptor.context.MoveOperationContext moveContext)
          throws org.apache.directory.api.ldap.model.exception.LdapException

Specified by:

move in interface org.apache.directory.server.core.api.interceptor.Interceptor

Overrides:

move in class org.apache.directory.server.core.api.interceptor.BaseInterceptor

Throws:

org.apache.directory.api.ldap.model.exception.LdapException

moveAndRename

public void moveAndRename(org.apache.directory.server.core.api.interceptor.context.MoveAndRenameOperationContext moveAndRenameContext)
                   throws org.apache.directory.api.ldap.model.exception.LdapException

Specified by:

moveAndRename in interface org.apache.directory.server.core.api.interceptor.Interceptor

Overrides:

moveAndRename in class org.apache.directory.server.core.api.interceptor.BaseInterceptor

Throws:

org.apache.directory.api.ldap.model.exception.LdapException

rename

public void rename(org.apache.directory.server.core.api.interceptor.context.RenameOperationContext renameContext)
            throws org.apache.directory.api.ldap.model.exception.LdapException

Specified by:

rename in interface org.apache.directory.server.core.api.interceptor.Interceptor

Overrides:

rename in class org.apache.directory.server.core.api.interceptor.BaseInterceptor

Throws:

org.apache.directory.api.ldap.model.exception.LdapException

search

public org.apache.directory.server.core.api.filtering.EntryFilteringCursor search(org.apache.directory.server.core.api.interceptor.context.SearchOperationContext searchContext)
                                                                           throws org.apache.directory.api.ldap.model.exception.LdapException

Specified by:

search in interface org.apache.directory.server.core.api.interceptor.Interceptor

Overrides:

search in class org.apache.directory.server.core.api.interceptor.BaseInterceptor

Throws:

org.apache.directory.api.ldap.model.exception.LdapException

isPrincipalAnAdministrator

public final boolean isPrincipalAnAdministrator(org.apache.directory.api.ldap.model.name.Dn principalDn)

cacheNewGroup

public void cacheNewGroup(String name,
                          org.apache.directory.api.ldap.model.entry.Entry entry)
                   throws org.apache.directory.api.ldap.model.exception.LdapException

Throws:

org.apache.directory.api.ldap.model.exception.LdapException