|
||||||||||
PREV CLASS NEXT CLASS | FRAMES NO FRAMES | |||||||||
SUMMARY: NESTED | FIELD | CONSTR | METHOD | DETAIL: FIELD | CONSTR | METHOD |
public interface ILogicalModelSecurityProvider
Allows to check the actual privileges granted for a given model and user.
Field Summary | |
---|---|
static String |
SEMARCHY_ADMIN_ROLE
|
Method Summary | ||
---|---|---|
AttributeAuthorization |
getAttributeAuthorization(IAttribute attribute)
Deprecated. use LogicalModelAuthorizations.getAttributeAuthorization(IAttribute) |
|
List<IHumanTask> |
getClaimableTask(List<IHumanTask> tasks)
Return the list of tasks filtered to contain only tasks for which isTaskActionAuthorized(IHumanTask) returns true. |
|
EntityAuthorization |
getEntityAuthorization(IEntity entity)
Deprecated. use LogicalModelAuthorizations.getEntityAuthorization(IEntity) |
|
LogicalModelAuthorizations |
getLogicalModelAuthorizations()
Return the LogicalModelAuthorizations relative to current user |
|
IModel |
getModel()
Deprecated. |
|
Set<String> |
getRoleNames()
Deprecated. use LogicalModelAuthorizations.getRoleNames() |
|
|
getStartableWorkflows(List<WT> workflows)
Return the list of workflows filtered to contain only workflows for which isStartAuthorized(IHumanWorkflow) returns true. |
|
String |
getUsername()
authenticated user name |
|
boolean |
isApplicationAuthorized(String applicationName)
Deprecated. use IApplication.isAccessAuthorized(LogicalModelAuthorizations) instead |
|
boolean |
isCertificationQueueAuthorized(String applicationName)
Returns whether current user is authorized to access given application's certification queue feature, or not. |
|
boolean |
isCheckoutAuthorized(IEntity entity)
Return whether current user is authorized to checkout records related to the provided IEntity , or not. |
|
boolean |
isCreateAuthorized(IEntity entity)
Return true if creation of record for IEntity pEntity is allowed. |
|
boolean |
isDashboardAuthorized(String applicationName)
Returns whether current user is authorized to access given application's dashboard feature, or not. |
|
boolean |
isDataAdmin()
Deprecated. use LogicalModelAuthorizations.isDataAdmin() |
|
boolean |
isDupsManagementAuthorized(IEntity entity)
Returns true if user is authorized to manage/modify duplicates for a given entity. |
|
boolean |
isEntitiesListAuthorized(String applicationName)
Returns whether current user is authorized to access given application's entities list feature, or not. |
|
boolean |
isErrorsNavigationAuthorized(String applicationName)
|
|
boolean |
isExportAuthorized(IEntity entity)
Return true if export of data from IEntity pEntity is allowed. |
|
boolean |
isLineageAuthorized(String applicationName)
Returns whether current user is authorized to access given application's lineage feature, or not. |
|
boolean |
isModelAuthorized()
Returns whether current user is authorized to access underlying IModel , or not. |
|
boolean |
isReadAuthorized(IAttribute attribute)
Return true if attribute is partially or fully readable. |
|
boolean |
isReadAuthorized(IEntity entity)
Return true if isReadAuthorized(IAttribute) returns true for at
least one (not IPKAttribute ) of the
IEntity.getAttributes() . |
|
boolean |
isRemoveAuthorized(IEntity entity)
Return true if removal of record for IEntity pEntity is allowed. |
|
boolean |
isStartAuthorized(IHumanWorkflow workflow)
Deprecated. use IHumanWorkflow.isStartable(LogicalModelAuthorizations) |
|
boolean |
isTaskActionAuthorized(IHumanTask task)
Indicates whether user is authorized to act on the IHumanTask (claim / unclaim / complete). |
|
boolean |
isWorkflowAdmin(IHumanWorkflow workflow)
Deprecated. use IHumanWorkflow.isAdministrator(LogicalModelAuthorizations) |
|
boolean |
isWriteAuthorized(IAttribute attribute)
Return true if write is authorized for attribute. |
|
boolean |
isWriteAuthorized(IEntity entity)
Return true if isWriteAuthorized(IAttribute) returns true for at
least one (not IPKAttribute ) of the
IEntity.getAttributes() . |
Field Detail |
---|
static final String SEMARCHY_ADMIN_ROLE
Method Detail |
---|
LogicalModelAuthorizations getLogicalModelAuthorizations()
LogicalModelAuthorizations
relative to current user
IModel getModel()
String getUsername()
Set<String> getRoleNames()
LogicalModelAuthorizations.getRoleNames()
boolean isDataAdmin()
LogicalModelAuthorizations.isDataAdmin()
boolean isReadAuthorized(IEntity entity)
isReadAuthorized(IAttribute)
returns true for at
least one (not IPKAttribute
) of the
IEntity.getAttributes()
.
entity
-
boolean isWriteAuthorized(IEntity entity)
isWriteAuthorized(IAttribute)
returns true for at
least one (not IPKAttribute
) of the
IEntity.getAttributes()
.
entity
-
boolean isModelAuthorized()
IModel
, or not.
A user is authorized to access a model if an only if at least one
IEntity
of the underlying model is readable by that user.
true
if the model is authorized, false
otherwiseisReadAuthorized(IEntity)
boolean isApplicationAuthorized(String applicationName)
IApplication.isAccessAuthorized(LogicalModelAuthorizations)
instead
applicationName
- the name of the application
true
if current user can access the application,
false
otherwiseboolean isLineageAuthorized(String applicationName)
applicationName
- the name of the application
true
if current user can access the lineage,
false
otherwiseboolean isCertificationQueueAuthorized(String applicationName)
applicationName
- the name of the application
true
if current user can access the certification
queue, false
otherwiseboolean isEntitiesListAuthorized(String applicationName)
applicationName
- the name of the application
true
if current user can access the entities list,
false
otherwiseboolean isDashboardAuthorized(String applicationName)
applicationName
- the name of the application
true
if current user can access the dashboard,
false
otherwiseboolean isExportAuthorized(IEntity entity)
IEntity
pEntity is allowed.
The implementation will first check that the IEntity
is readable
isReadAuthorized(IEntity)
and that the user have been granted
the Export privilege for this IEntity
in design time.
entity
-
boolean isCreateAuthorized(IEntity entity)
IEntity
pEntity is allowed.
The implementation will first check that the IEntity
is writable
isWriteAuthorized(IEntity)
and that the user have been granted
the Create privilege for this IEntity
in design time.
entity
-
boolean isCheckoutAuthorized(IEntity entity)
IEntity
, or not.
entity
- the type of records
true
if checkout is authorized, false
otherwiseboolean isRemoveAuthorized(IEntity entity)
IEntity
pEntity is allowed.
The implementation will first check that the IEntity
is writable
isWriteAuthorized(IEntity)
and that the user have been granted
the Remove privilege for this IEntity
in design time.
entity
-
EntityAuthorization getEntityAuthorization(IEntity entity)
LogicalModelAuthorizations.getEntityAuthorization(IEntity)
entity
-
AttributeAuthorization getAttributeAuthorization(IAttribute attribute)
LogicalModelAuthorizations.getAttributeAuthorization(IAttribute)
attribute
-
boolean isReadAuthorized(IAttribute attribute)
getAttributeAuthorization(pAttribute).getReadAuuthorizedScope() != RowScope#NO_ROWS
attribute
-
IllegalArgumentException
- if IAttribute
is not IEntityAttribute
or
IComplexAtomicAttribute
boolean isWorkflowAdmin(IHumanWorkflow workflow)
IHumanWorkflow.isAdministrator(LogicalModelAuthorizations)
IHumanWorkflow.getAdminRoleName()
role name or if isDataAdmin()
;
boolean isTaskActionAuthorized(IHumanTask task)
isWorkflowAdmin(IHumanWorkflow)
or user has the
IHumanTask.getAssignedToRoleName()
role.
This only checks that user has the authorization to do things on the
designed IHumanTask
. See IActivityTask
for methods to
check the status of the IActivityTask
.
task
-
IActivityTask.isClaimable(ILogicalModelSecurityProvider)
,
IActivityTask.isCompletable(ILogicalModelSecurityProvider)
,
IActivityTask.isTaskDataModifiable(ILogicalModelSecurityProvider)
,
IActivityTask.isUnclaimable(ILogicalModelSecurityProvider)
boolean isStartAuthorized(IHumanWorkflow workflow)
IHumanWorkflow.isStartable(LogicalModelAuthorizations)
isWorkflowAdmin(IHumanWorkflow)
returns true or if user has been
granted the role IHumanWorkflow.getInitiatorRoleName()
.s
workflow
-
<WT extends IHumanWorkflow> List<WT> getStartableWorkflows(List<WT> workflows)
isStartAuthorized(IHumanWorkflow)
returns true.
workflows
- List<IHumanTask> getClaimableTask(List<IHumanTask> tasks)
isTaskActionAuthorized(IHumanTask)
returns true.
tasks
- boolean isWriteAuthorized(IAttribute attribute)
IEntityAttribute
or IComplexAtomicAttribute
pAttribute
-
IllegalArgumentException
- if IAttribute
is not IEntityAttribute
or
IComplexAtomicAttribute
boolean isDupsManagementAuthorized(IEntity entity)
entity
-
boolean isErrorsNavigationAuthorized(String applicationName)
|
||||||||||
PREV CLASS NEXT CLASS | FRAMES NO FRAMES | |||||||||
SUMMARY: NESTED | FIELD | CONSTR | METHOD | DETAIL: FIELD | CONSTR | METHOD |