Serialized Form

Package org.apache.isis.extensions.secman.api.permission

Class org.apache.isis.extensions.secman.api.permission.ApplicationPermissionValue extends Object implements Serializable

serialVersionUID:

1L

Serialized Fields

featureId

org.apache.isis.core.metamodel.services.appfeat.ApplicationFeatureId featureId

rule

ApplicationPermissionRule rule

mode

ApplicationPermissionMode mode

Class org.apache.isis.extensions.secman.api.permission.ApplicationPermissionValueSet extends Object implements Serializable

serialVersionUID:

1L

Serialized Fields

values

List<E> values

permissionsByFeature

org.apache.isis.commons.internal.collections._Multimaps.SetMultimap<K,V> permissionsByFeature

Partitions the permissions by feature and within that orders according to their evaluation precedence.

The following sketches out what is stored:

     com.foo.Bar#bip -> ALLOW, CHANGING
                     -> ALLOW, VIEWING
                     -> VETO, VIEWING
                     -> VETO, CHANGING
     com.foo.Bar     -> ALLOW, CHANGING
                     -> ALLOW, VIEWING
                     -> VETO, VIEWING
                     -> VETO, CHANGING
     com.foo         -> ALLOW, CHANGING
                     -> ALLOW, VIEWING
                     -> VETO, VIEWING
                     -> VETO, CHANGING
     com             -> ALLOW, CHANGING
                     -> ALLOW, VIEWING
                     -> VETO, VIEWING
                     -> VETO, CHANGING
 

Note that allow rule is ordered before veto rule meaning that it is checked first and therefore also takes precedence.

permissionsEvaluationService

PermissionsEvaluationService permissionsEvaluationService

Note that we require PermissionsEvaluationService to be serializable.

Class org.apache.isis.extensions.secman.api.permission.PermissionsEvaluationServiceAbstract extends Object implements Serializable

serialVersionUID:

1L

Class org.apache.isis.extensions.secman.api.permission.PermissionsEvaluationServiceAllowBeatsVeto extends PermissionsEvaluationServiceAbstract implements Serializable

serialVersionUID:

1L

Class org.apache.isis.extensions.secman.api.permission.PermissionsEvaluationServiceVetoBeatsAllow extends PermissionsEvaluationServiceAbstract implements Serializable

serialVersionUID:

1L