org.apache.jackrabbit.oak.spi.security.authorization.accesscontrol

Class AbstractAccessControlManager

java.lang.Object

org.apache.jackrabbit.oak.spi.security.authorization.accesscontrol.AbstractAccessControlManager

All Implemented Interfaces:

AccessControlManager, JackrabbitAccessControlManager, AccessControlConstants

public abstract class AbstractAccessControlManager
extends Object
implements JackrabbitAccessControlManager, AccessControlConstants

Default implementation of the JackrabbitAccessControlManager interface. This implementation covers both editing access control content by path and by Principal resulting both in the same content structure.

Field Summary

Fields inherited from interface org.apache.jackrabbit.oak.spi.security.authorization.accesscontrol.AccessControlConstants

AC_NODETYPE_NAMES, ACE_PROPERTY_NAMES, MIX_REP_ACCESS_CONTROLLABLE, MIX_REP_REPO_ACCESS_CONTROLLABLE, NT_REP_ACE, NT_REP_ACL, NT_REP_DENY_ACE, NT_REP_GRANT_ACE, NT_REP_POLICY, NT_REP_RESTRICTIONS, PARAM_RESTRICTION_PROVIDER, POLICY_NODE_NAMES, REP_GLOB, REP_ITEM_NAMES, REP_NODE_PATH, REP_NT_NAMES, REP_POLICY, REP_PREFIXES, REP_PRINCIPAL_NAME, REP_PRIVILEGES, REP_REPO_POLICY, REP_RESTRICTIONS

Constructor Summary

Constructors

Modifier	Constructor and Description
protected	AbstractAccessControlManager(@NotNull org.apache.jackrabbit.oak.api.Root root, @NotNull org.apache.jackrabbit.oak.namepath.NamePathMapper namePathMapper, @NotNull SecurityProvider securityProvider)

Method Summary

Modifier and Type	Method and Description
protected @NotNull AuthorizationConfiguration	getConfig()
protected @NotNull org.apache.jackrabbit.oak.api.Root	getLatestRoot()
protected @NotNull org.apache.jackrabbit.oak.namepath.NamePathMapper	getNamePathMapper()
protected @Nullable String	getOakPath(@Nullable String jcrPath)
protected @NotNull PermissionProvider	getPermissionProvider()
protected @NotNull PrivilegeManager	getPrivilegeManager()
@NotNull Privilege[]	getPrivileges(@Nullable String absPath)
Privilege[]	getPrivileges(@Nullable String absPath, @NotNull Set<Principal> principals)
protected @NotNull org.apache.jackrabbit.oak.api.Root	getRoot()
@NotNull Privilege[]	getSupportedPrivileges(@Nullable String absPath)
protected @NotNull org.apache.jackrabbit.oak.api.Tree	getTree(@Nullable String oakPath, long permissions, boolean checkAcContent)
boolean	hasPrivileges(@Nullable String absPath, @Nullable Privilege[] privileges)
boolean	hasPrivileges(@Nullable String absPath, @NotNull Set<Principal> principals, @Nullable Privilege[] privileges)
@NotNull Privilege	privilegeFromName(@NotNull String privilegeName)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.apache.jackrabbit.api.security.JackrabbitAccessControlManager

getApplicablePolicies, getEffectivePolicies, getPolicies

Methods inherited from interface javax.jcr.security.AccessControlManager

getApplicablePolicies, getEffectivePolicies, getPolicies, removePolicy, setPolicy

Constructor Detail

AbstractAccessControlManager

protected AbstractAccessControlManager(@NotNull
                                       @NotNull org.apache.jackrabbit.oak.api.Root root,
                                       @NotNull
                                       @NotNull org.apache.jackrabbit.oak.namepath.NamePathMapper namePathMapper,
                                       @NotNull
                                       @NotNull SecurityProvider securityProvider)

Method Detail

getSupportedPrivileges

@NotNull
public @NotNull Privilege[] getSupportedPrivileges(@Nullable
                                                            @Nullable String absPath)
                                                     throws RepositoryException

Specified by:

getSupportedPrivileges in interface AccessControlManager

Throws:

RepositoryException

privilegeFromName

@NotNull
public @NotNull Privilege privilegeFromName(@NotNull
                                                     @NotNull String privilegeName)
                                              throws RepositoryException

Specified by:

privilegeFromName in interface AccessControlManager

Throws:

RepositoryException

hasPrivileges

public boolean hasPrivileges(@Nullable
                             @Nullable String absPath,
                             @Nullable
                             @Nullable Privilege[] privileges)
                      throws RepositoryException

Specified by:

hasPrivileges in interface AccessControlManager

Throws:

RepositoryException

getPrivileges

@NotNull
public @NotNull Privilege[] getPrivileges(@Nullable
                                                   @Nullable String absPath)
                                            throws RepositoryException

Specified by:

getPrivileges in interface AccessControlManager

Throws:

RepositoryException

hasPrivileges

public boolean hasPrivileges(@Nullable
                             @Nullable String absPath,
                             @NotNull
                             @NotNull Set<Principal> principals,
                             @Nullable
                             @Nullable Privilege[] privileges)
                      throws RepositoryException

Specified by:

hasPrivileges in interface JackrabbitAccessControlManager

Throws:

RepositoryException

getPrivileges

public Privilege[] getPrivileges(@Nullable
                                 @Nullable String absPath,
                                 @NotNull
                                 @NotNull Set<Principal> principals)
                          throws RepositoryException

Specified by:

getPrivileges in interface JackrabbitAccessControlManager

Throws:

RepositoryException

getConfig

@NotNull
protected @NotNull AuthorizationConfiguration getConfig()

getRoot

@NotNull
protected @NotNull org.apache.jackrabbit.oak.api.Root getRoot()

getLatestRoot

@NotNull
protected @NotNull org.apache.jackrabbit.oak.api.Root getLatestRoot()

getNamePathMapper

@NotNull
protected @NotNull org.apache.jackrabbit.oak.namepath.NamePathMapper getNamePathMapper()

getPrivilegeManager

@NotNull
protected @NotNull PrivilegeManager getPrivilegeManager()

getOakPath

@Nullable
protected @Nullable String getOakPath(@Nullable
                                                @Nullable String jcrPath)
                                         throws RepositoryException

Throws:

RepositoryException

getTree

@NotNull
protected @NotNull org.apache.jackrabbit.oak.api.Tree getTree(@Nullable
                                                                       @Nullable String oakPath,
                                                                       long permissions,
                                                                       boolean checkAcContent)
                                                                throws RepositoryException

Throws:

RepositoryException

getPermissionProvider

@NotNull
protected @NotNull PermissionProvider getPermissionProvider()