com.addc.server.commons.security

Interface AuthorizationMapper

All Known Implementing Classes:

DefaultAuthorizationMapper

public interface AuthorizationMapper

The AuthorizationMapper interface defines the contract for classes that will map the GrantedAthorities received from an authentication to a new set of GrantedAuthorities that are required by the service.

For example, group users may be mapped to roles read, write and execute

Method Summary

Methods

Modifier and Type	Method and Description
void	checkAuthorization(String target, String permission) Validate whether the current user has both target and permission persissions
Collection<org.springframework.security.core.GrantedAuthority>	map(Collection<? extends org.springframework.security.core.GrantedAuthority> authorities, String username) Map the GrantedAuthorities received from the underlying authentication/authorization to a new set of, for example, roles

Method Detail

map

Collection<org.springframework.security.core.GrantedAuthority> map(Collection<? extends org.springframework.security.core.GrantedAuthority> authorities,
                                                                 String username)
                                                                   throws org.springframework.security.access.AuthorizationServiceException

Map the GrantedAuthorities received from the underlying authentication/authorization to a new set of, for example, roles

Parameters:

authorities - The existing authorities

username - The user name

Returns:

The mapped authorities

Throws:

org.springframework.security.access.AuthorizationServiceException - If the mapping fails

checkAuthorization

void checkAuthorization(String target,
                      String permission)
                        throws AccessControlException

Validate whether the current user has both target and permission persissions

Parameters:

target - The target permission

permission - A base permission

Throws:

AccessControlException - If the mapping fails