org.apache.jackrabbit.oak.spi.security.authorization.accesscontrol

Class AbstractAccessControlManager

java.lang.Object

org.apache.jackrabbit.oak.spi.security.authorization.accesscontrol.AbstractAccessControlManager

All Implemented Interfaces:

AccessControlManager, JackrabbitAccessControlManager, AccessControlConstants

public abstract class AbstractAccessControlManager
extends Object
implements JackrabbitAccessControlManager, AccessControlConstants

Default implementation of the JackrabbitAccessControlManager interface. This implementation covers both editing access control content by path and by Principal resulting both in the same content structure.

Field Summary

Fields inherited from interface org.apache.jackrabbit.oak.spi.security.authorization.accesscontrol.AccessControlConstants

AC_NODETYPE_NAMES, ACE_PROPERTY_NAMES, MIX_REP_ACCESS_CONTROLLABLE, MIX_REP_REPO_ACCESS_CONTROLLABLE, NT_REP_ACE, NT_REP_ACL, NT_REP_DENY_ACE, NT_REP_GRANT_ACE, NT_REP_POLICY, NT_REP_RESTRICTIONS, PARAM_RESTRICTION_PROVIDER, POLICY_NODE_NAMES, REP_GLOB, REP_ITEM_NAMES, REP_NODE_PATH, REP_NT_NAMES, REP_POLICY, REP_PREFIXES, REP_PRINCIPAL_NAME, REP_PRIVILEGES, REP_REPO_POLICY, REP_RESTRICTIONS

Constructor Summary

Constructors

Modifier	Constructor and Description
protected	AbstractAccessControlManager(org.apache.jackrabbit.oak.api.Root root, org.apache.jackrabbit.oak.namepath.NamePathMapper namePathMapper, SecurityProvider securityProvider)

Method Summary

Modifier and Type	Method and Description
protected AuthorizationConfiguration	getConfig()
protected org.apache.jackrabbit.oak.api.Root	getLatestRoot()
protected org.apache.jackrabbit.oak.namepath.NamePathMapper	getNamePathMapper()
protected String	getOakPath(String jcrPath)
protected PermissionProvider	getPermissionProvider()
protected PrivilegeManager	getPrivilegeManager()
Privilege[]	getPrivileges(String absPath)
Privilege[]	getPrivileges(String absPath, Set<Principal> principals)
protected org.apache.jackrabbit.oak.api.Root	getRoot()
Privilege[]	getSupportedPrivileges(String absPath)
protected org.apache.jackrabbit.oak.api.Tree	getTree(String oakPath, long permissions, boolean checkAcContent)
boolean	hasPrivileges(String absPath, Privilege[] privileges)
boolean	hasPrivileges(String absPath, Set<Principal> principals, Privilege[] privileges)
Privilege	privilegeFromName(String privilegeName)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.apache.jackrabbit.api.security.JackrabbitAccessControlManager

getApplicablePolicies, getEffectivePolicies, getPolicies

Methods inherited from interface javax.jcr.security.AccessControlManager

getApplicablePolicies, getEffectivePolicies, getPolicies, removePolicy, setPolicy

Constructor Detail

AbstractAccessControlManager

protected AbstractAccessControlManager(@Nonnull
                                       org.apache.jackrabbit.oak.api.Root root,
                                       @Nonnull
                                       org.apache.jackrabbit.oak.namepath.NamePathMapper namePathMapper,
                                       @Nonnull
                                       SecurityProvider securityProvider)

Method Detail

getSupportedPrivileges

@Nonnull
public Privilege[] getSupportedPrivileges(@Nullable
                                                   String absPath)
                                            throws RepositoryException

Specified by:

getSupportedPrivileges in interface AccessControlManager

Throws:

RepositoryException

privilegeFromName

@Nonnull
public Privilege privilegeFromName(@Nonnull
                                            String privilegeName)
                                     throws RepositoryException

Specified by:

privilegeFromName in interface AccessControlManager

Throws:

RepositoryException

hasPrivileges

public boolean hasPrivileges(@Nullable
                             String absPath,
                             @Nullable
                             Privilege[] privileges)
                      throws RepositoryException

Specified by:

hasPrivileges in interface AccessControlManager

Throws:

RepositoryException

getPrivileges

@Nonnull
public Privilege[] getPrivileges(@Nullable
                                          String absPath)
                                   throws RepositoryException

Specified by:

getPrivileges in interface AccessControlManager

Throws:

RepositoryException

hasPrivileges

public boolean hasPrivileges(@Nullable
                             String absPath,
                             @Nonnull
                             Set<Principal> principals,
                             @Nullable
                             Privilege[] privileges)
                      throws RepositoryException

Specified by:

hasPrivileges in interface JackrabbitAccessControlManager

Throws:

RepositoryException

getPrivileges

public Privilege[] getPrivileges(@Nullable
                                 String absPath,
                                 @Nonnull
                                 Set<Principal> principals)
                          throws RepositoryException

Specified by:

getPrivileges in interface JackrabbitAccessControlManager

Throws:

RepositoryException

getConfig

@Nonnull
protected AuthorizationConfiguration getConfig()

getRoot

@Nonnull
protected org.apache.jackrabbit.oak.api.Root getRoot()

getLatestRoot

@Nonnull
protected org.apache.jackrabbit.oak.api.Root getLatestRoot()

getNamePathMapper

@Nonnull
protected org.apache.jackrabbit.oak.namepath.NamePathMapper getNamePathMapper()

getPrivilegeManager

@Nonnull
protected PrivilegeManager getPrivilegeManager()

getOakPath

@CheckForNull
protected String getOakPath(@Nullable
                                          String jcrPath)
                                   throws RepositoryException

Throws:

RepositoryException

getTree

@Nonnull
protected org.apache.jackrabbit.oak.api.Tree getTree(@Nullable
                                                              String oakPath,
                                                              long permissions,
                                                              boolean checkAcContent)
                                                       throws RepositoryException

Throws:

RepositoryException

getPermissionProvider

@Nonnull
protected PermissionProvider getPermissionProvider()