de.caluga.morphium.secure

Interface MongoSecurityManager

All Known Implementing Classes:

DefaultSecurityManager

public interface MongoSecurityManager

Author:

stephan

Method Summary

Methods

Modifier and Type	Method and Description
boolean	checkAccess(Class<?> cls, Permission p)
boolean	checkAccess(Object obj, Permission p) Called by layer when access to a given type occurs.
boolean	checkAccess(String domain, Permission p) more flexible access for security.
Object	getCurrentUserId() depending on implementation, this might be an ObjectId or a login string or whatever ATTENTION: needs to be compatible with @StoreCreationTime and @StoreLAstAccess etc.

Method Detail

checkAccess

boolean checkAccess(Object obj,
                  Permission p)
                    throws MongoSecurityException

Called by layer when access to a given type occurs. Obj may be the record to modify or the template being searched for. This should be implemented by the application in order to be able to implement security settings depending on authenticated user.

Morphium supports the following permissions: INSERT: inserts a new record into db UPDATE: update specific record DELETE: delete record or collection FIND: search for specified records (may alter template though!) LISTALL: readAll all elements of type. Object then is an empty one Additional Permissions (maybe used by Application): EXECUTE, SHOW,

Parameters:

obj -

p -

Returns:

true if access is granted, false otherwise - can throw SecurityException with additional Information if necessary.

Throws:

MongoSecurityException

checkAccess

boolean checkAccess(String domain,
                  Permission p)
                    throws MongoSecurityException

more flexible access for security. Domain may be any string, or classname

Parameters:

domain -

p -

Returns:

Throws:

MongoSecurityException

checkAccess

boolean checkAccess(Class<?> cls,
                  Permission p)
                    throws MongoSecurityException

Throws:

MongoSecurityException

getCurrentUserId

Object getCurrentUserId()

depending on implementation, this might be an ObjectId or a login string or whatever ATTENTION: needs to be compatible with @StoreCreationTime and @StoreLAstAccess etc.

Returns: