org.apache.cxf.interceptor.security

Class SimpleAuthorizingInterceptor

java.lang.Object

org.apache.cxf.phase.AbstractPhaseInterceptor<Message>

org.apache.cxf.interceptor.security.AbstractAuthorizingInInterceptor

org.apache.cxf.interceptor.security.SimpleAuthorizingInterceptor

All Implemented Interfaces:

Interceptor<Message>, PhaseInterceptor<Message>

Direct Known Subclasses:

OperationInfoAuthorizingInterceptor, SecureAnnotationsInterceptor

public class SimpleAuthorizingInterceptor
extends AbstractAuthorizingInInterceptor

Field Summary

Fields

Modifier and Type	Field and Description
protected java.util.List<java.lang.String>	globalRoles
protected java.util.Map<java.lang.String,java.util.List<java.lang.String>>	methodRolesMap
protected java.util.Map<java.lang.String,java.util.List<java.lang.String>>	userRolesMap

Constructor Summary

Constructors

Constructor and Description
SimpleAuthorizingInterceptor()
SimpleAuthorizingInterceptor(boolean uniqueId)

Method Summary

Modifier and Type	Method and Description
protected java.lang.String	createMethodSig(java.lang.reflect.Method method)
protected java.util.List<java.lang.String>	getExpectedRoles(java.lang.reflect.Method method) Returns a list of expected roles for a given method.
protected boolean	isUserInRole(SecurityContext sc, java.util.List<java.lang.String> roles, boolean deny)
void	setCheckConfiguredRolesOnly(boolean checkConfiguredRolesOnly)
void	setGlobalRoles(java.lang.String roles)
void	setMethodRolesMap(java.util.Map<java.lang.String,java.lang.String> rolesMap)
void	setUserRolesMap(java.util.Map<java.lang.String,java.lang.String> rolesMap)

Methods inherited from class org.apache.cxf.interceptor.security.AbstractAuthorizingInInterceptor

authorize, getDenyRoles, getTargetMethod, handleMessage, isAllowAnonymousUsers, isMethodProtected, setAllowAnonymousUsers

Methods inherited from class org.apache.cxf.phase.AbstractPhaseInterceptor

addAfter, addAfter, addBefore, addBefore, getAdditionalInterceptors, getAfter, getBefore, getId, getPhase, handleFault, isGET, isRequestor, setAfter, setBefore

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

methodRolesMap

protected java.util.Map<java.lang.String,java.util.List<java.lang.String>> methodRolesMap

userRolesMap

protected java.util.Map<java.lang.String,java.util.List<java.lang.String>> userRolesMap

globalRoles

protected java.util.List<java.lang.String> globalRoles

Constructor Detail

SimpleAuthorizingInterceptor

public SimpleAuthorizingInterceptor()

SimpleAuthorizingInterceptor

public SimpleAuthorizingInterceptor(boolean uniqueId)

Method Detail

isUserInRole

protected boolean isUserInRole(SecurityContext sc,
                               java.util.List<java.lang.String> roles,
                               boolean deny)

Overrides:

isUserInRole in class AbstractAuthorizingInInterceptor

createMethodSig

protected java.lang.String createMethodSig(java.lang.reflect.Method method)

getExpectedRoles

protected java.util.List<java.lang.String> getExpectedRoles(java.lang.reflect.Method method)

Description copied from class: AbstractAuthorizingInInterceptor

Returns a list of expected roles for a given method.

Specified by:

getExpectedRoles in class AbstractAuthorizingInInterceptor

Parameters:

method - Method

Returns:

list, empty if no roles are available

setMethodRolesMap

public void setMethodRolesMap(java.util.Map<java.lang.String,java.lang.String> rolesMap)

setUserRolesMap

public void setUserRolesMap(java.util.Map<java.lang.String,java.lang.String> rolesMap)

setGlobalRoles

public void setGlobalRoles(java.lang.String roles)

setCheckConfiguredRolesOnly

public void setCheckConfiguredRolesOnly(boolean checkConfiguredRolesOnly)