de.caluga.morphium.secure

Class DefaultSecurityManager

java.lang.Object

de.caluga.morphium.secure.DefaultSecurityManager

All Implemented Interfaces:

MongoSecurityManager

public class DefaultSecurityManager
extends Object
implements MongoSecurityManager

Author:

stephan

Constructor Summary

Constructors

Constructor and Description
DefaultSecurityManager()

Method Summary

Methods

Modifier and Type	Method and Description
boolean	checkAccess(Class<?> cls, Permission p)
boolean	checkAccess(Object obj, Permission p) Called by layer when access to a given type occurs.
boolean	checkAccess(String domain, Permission p) more flexible access for security.
Object	getCurrentUserId() depending on implementation, this might be an ObjectId or a login string or whatever ATTENTION: needs to be compatible with @StoreCreationTime and @StoreLAstAccess etc.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

DefaultSecurityManager

public DefaultSecurityManager()

Method Detail

checkAccess

public boolean checkAccess(Object obj,
                  Permission p)
                    throws MongoSecurityException

Description copied from interface: MongoSecurityManager

Called by layer when access to a given type occurs. Obj may be the record to modify or the template being searched for. This should be implemented by the application in order to be able to implement security settings depending on authenticated user.

Morphium supports the following permissions: INSERT: inserts a new record into db UPDATE: update specific record DELETE: delete record or collection FIND: search for specified records (may alter template though!) LISTALL: readAll all elements of type. Object then is an empty one Additional Permissions (maybe used by Application): EXECUTE, SHOW,

Specified by:

checkAccess in interface MongoSecurityManager

Parameters:

obj - objhect

p - -

Returns:

true if access is granted, false otherwise - can throw SecurityException with additional Information if necessary.

Throws:

MongoSecurityException

checkAccess

public boolean checkAccess(String domain,
                  Permission p)
                    throws MongoSecurityException

Description copied from interface: MongoSecurityManager

more flexible access for security. Domain may be any string, or classname

Specified by:

checkAccess in interface MongoSecurityManager

Parameters:

domain - domain string

p - -

Returns:

true / false

Throws:

MongoSecurityException

checkAccess

public boolean checkAccess(Class<?> cls,
                  Permission p)
                    throws MongoSecurityException

Specified by:

checkAccess in interface MongoSecurityManager

Throws:

MongoSecurityException

getCurrentUserId

public Object getCurrentUserId()

Description copied from interface: MongoSecurityManager

depending on implementation, this might be an ObjectId or a login string or whatever ATTENTION: needs to be compatible with @StoreCreationTime and @StoreLAstAccess etc.

Specified by:

getCurrentUserId in interface MongoSecurityManager

Returns:

object representing user