org.apache.qpid.server.security.access.config

Class RuleBasedAccessControl

java.lang.Object

org.apache.qpid.server.security.access.config.RuleBasedAccessControl

All Implemented Interfaces:

AccessControl<org.apache.qpid.server.security.access.config.CachingSecurityToken>

public class RuleBasedAccessControl
extends Object
implements AccessControl<org.apache.qpid.server.security.access.config.CachingSecurityToken>

Nested Class Summary

Nested classes/interfaces inherited from interface org.apache.qpid.server.security.AccessControl

AccessControl.FixedResultAccessControl

Field Summary

Fields inherited from interface org.apache.qpid.server.security.AccessControl

ALWAYS_ALLOWED, ALWAYS_DENIED

Constructor Summary

Constructors

Constructor and Description
RuleBasedAccessControl(RuleSet rs, Model model)

Method Summary

Modifier and Type	Method and Description
Result	authorise(org.apache.qpid.server.security.access.config.CachingSecurityToken token, Operation operation, PermissionedObject configuredObject)
Result	authorise(org.apache.qpid.server.security.access.config.CachingSecurityToken token, Operation operation, PermissionedObject configuredObject, Map<String,Object> arguments)
Result	authorise(LegacyOperation operation, ObjectType objectType, ObjectProperties properties) Check if an operation is authorised by asking the configuration object about the access control rules granted to the current thread's Subject.
Result	getDefault()
org.apache.qpid.server.security.access.config.CachingSecurityToken	newToken()
org.apache.qpid.server.security.access.config.CachingSecurityToken	newToken(Subject subject)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

RuleBasedAccessControl

public RuleBasedAccessControl(RuleSet rs,
                              Model model)

Method Detail

getDefault

public Result getDefault()

Specified by:

getDefault in interface AccessControl<org.apache.qpid.server.security.access.config.CachingSecurityToken>

newToken

public org.apache.qpid.server.security.access.config.CachingSecurityToken newToken()

Specified by:

newToken in interface AccessControl<org.apache.qpid.server.security.access.config.CachingSecurityToken>

newToken

public org.apache.qpid.server.security.access.config.CachingSecurityToken newToken(Subject subject)

Specified by:

newToken in interface AccessControl<org.apache.qpid.server.security.access.config.CachingSecurityToken>

authorise

public Result authorise(LegacyOperation operation,
                        ObjectType objectType,
                        ObjectProperties properties)

Check if an operation is authorised by asking the configuration object about the access control rules granted to the current thread's Subject. If there is no current user the plugin will abstain.

authorise

public Result authorise(org.apache.qpid.server.security.access.config.CachingSecurityToken token,
                        Operation operation,
                        PermissionedObject configuredObject)

Specified by:

authorise in interface AccessControl<org.apache.qpid.server.security.access.config.CachingSecurityToken>

authorise

public Result authorise(org.apache.qpid.server.security.access.config.CachingSecurityToken token,
                        Operation operation,
                        PermissionedObject configuredObject,
                        Map<String,Object> arguments)

Specified by:

authorise in interface AccessControl<org.apache.qpid.server.security.access.config.CachingSecurityToken>