public interface ILogicalModelSecurityProvider
Modifier and Type | Field and Description |
---|---|
static String |
SEMARCHY_ADMIN_ROLE |
Modifier and Type | Method and Description |
---|---|
AttributeAuthorization |
getAttributeAuthorization(IAttribute attribute)
Deprecated.
|
List<IHumanTask> |
getClaimableTask(List<IHumanTask> tasks)
Return the list of tasks filtered to contain only tasks for which
isTaskActionAuthorized(IHumanTask) returns true. |
EntityAuthorization |
getEntityAuthorization(IEntity entity)
Deprecated.
|
LogicalModelAuthorizations |
getLogicalModelAuthorizations()
Return the
LogicalModelAuthorizations relative to current user |
IModel |
getModel()
Deprecated.
|
Set<String> |
getRoleNames()
Deprecated.
|
<WT extends IHumanWorkflow> |
getStartableWorkflows(List<WT> workflows)
Return the list of workflows filtered to contain only workflows for which
isStartAuthorized(IHumanWorkflow) returns true. |
String |
getUsername()
authenticated user name
|
boolean |
isApplicationAuthorized(String applicationName)
Deprecated.
|
boolean |
isCertificationQueueAuthorized(String applicationName)
Returns whether current user is authorized to access given application's
certification queue feature, or not.
|
boolean |
isCheckoutAuthorized(IEntity entity)
Return whether current user is authorized to checkout records related to
the provided
IEntity , or not. |
boolean |
isCreateAuthorized(IEntity entity)
Return true if creation of record for
IEntity pEntity is allowed. |
boolean |
isDashboardAuthorized(String applicationName)
Returns whether current user is authorized to access given application's
dashboard feature, or not.
|
boolean |
isDataAdmin()
Deprecated.
|
boolean |
isDupsManagementAuthorized(IEntity entity)
|
boolean |
isEntitiesListAuthorized(String applicationName)
Returns whether current user is authorized to access given application's
entities list feature, or not.
|
boolean |
isErrorsNavigationAuthorized(String applicationName) |
boolean |
isExportAuthorized(IEntity entity)
Return true if export of data from
IEntity pEntity is allowed. |
boolean |
isLineageAuthorized(String applicationName)
Returns whether current user is authorized to access given application's
lineage feature, or not.
|
boolean |
isModelAuthorized()
Returns whether current user is authorized to access underlying
IModel , or not. |
boolean |
isReadAuthorized(IAttribute attribute)
Return true if attribute is partially or fully readable.
|
boolean |
isReadAuthorized(IEntity entity)
Return true if
isReadAuthorized(IAttribute) returns true for at
least one (not IPKAttribute ) of the
IEntity.getAttributes() . |
boolean |
isRemoveAuthorized(IEntity entity)
Return true if removal of record for
IEntity pEntity is allowed. |
boolean |
isStartAuthorized(IHumanWorkflow workflow)
Deprecated.
|
boolean |
isTaskActionAuthorized(IHumanTask task)
Indicates whether user is authorized to act on the IHumanTask (claim /
unclaim / complete).
|
boolean |
isWorkflowAdmin(IHumanWorkflow workflow)
Deprecated.
|
boolean |
isWriteAuthorized(IAttribute attribute)
Return true if write is authorized for attribute.
|
boolean |
isWriteAuthorized(IEntity entity)
Return true if
isWriteAuthorized(IAttribute) returns true for at
least one (not IPKAttribute ) of the
IEntity.getAttributes() . |
static final String SEMARCHY_ADMIN_ROLE
LogicalModelAuthorizations getLogicalModelAuthorizations()
LogicalModelAuthorizations
relative to current user@Deprecated IModel getModel()
String getUsername()
@Deprecated Set<String> getRoleNames()
LogicalModelAuthorizations.getRoleNames()
@Deprecated boolean isDataAdmin()
LogicalModelAuthorizations.isDataAdmin()
boolean isReadAuthorized(IEntity entity)
isReadAuthorized(IAttribute)
returns true for at
least one (not IPKAttribute
) of the
IEntity.getAttributes()
.entity
- boolean isWriteAuthorized(IEntity entity)
isWriteAuthorized(IAttribute)
returns true for at
least one (not IPKAttribute
) of the
IEntity.getAttributes()
.entity
- boolean isModelAuthorized()
IModel
, or not.
A user is authorized to access a model if an only if at least one
IEntity
of the underlying model is readable by that user.
true
if the model is authorized, false
otherwiseisReadAuthorized(IEntity)
@Deprecated boolean isApplicationAuthorized(String applicationName)
IApplication.isAccessAuthorized(LogicalModelAuthorizations)
insteadapplicationName
- the name of the applicationtrue
if current user can access the application,
false
otherwiseboolean isLineageAuthorized(String applicationName)
applicationName
- the name of the applicationtrue
if current user can access the lineage,
false
otherwiseboolean isCertificationQueueAuthorized(String applicationName)
applicationName
- the name of the applicationtrue
if current user can access the certification
queue, false
otherwiseboolean isEntitiesListAuthorized(String applicationName)
applicationName
- the name of the applicationtrue
if current user can access the entities list,
false
otherwiseboolean isDashboardAuthorized(String applicationName)
applicationName
- the name of the applicationtrue
if current user can access the dashboard,
false
otherwiseboolean isExportAuthorized(IEntity entity)
IEntity
pEntity is allowed.
The implementation will first check that the IEntity
is readable
isReadAuthorized(IEntity)
and that the user have been granted
the Export privilege for this IEntity
in design time.entity
- boolean isCreateAuthorized(IEntity entity)
IEntity
pEntity is allowed.
The implementation will first check that the IEntity
is writable
isWriteAuthorized(IEntity)
and that the user have been granted
the Create privilege for this IEntity
in design time.entity
- boolean isCheckoutAuthorized(IEntity entity)
IEntity
, or not.entity
- the type of recordstrue
if checkout is authorized, false
otherwiseboolean isRemoveAuthorized(IEntity entity)
IEntity
pEntity is allowed.
The implementation will first check that the IEntity
is writable
isWriteAuthorized(IEntity)
and that the user have been granted
the Remove privilege for this IEntity
in design time.entity
- @Deprecated EntityAuthorization getEntityAuthorization(IEntity entity)
LogicalModelAuthorizations.getEntityAuthorization(IEntity)
entity
- @Deprecated AttributeAuthorization getAttributeAuthorization(IAttribute attribute)
LogicalModelAuthorizations.getAttributeAuthorization(IAttribute)
attribute
- boolean isReadAuthorized(IAttribute attribute)
getAttributeAuthorization(pAttribute).getReadAuuthorizedScope() != RowScope#NO_ROWS
attribute
- IllegalArgumentException
- if IAttribute
is not IEntityAttribute
or
IComplexAtomicAttribute
@Deprecated boolean isWorkflowAdmin(IHumanWorkflow workflow)
IHumanWorkflow.isAdministrator(LogicalModelAuthorizations)
IHumanWorkflow.getAdminRoleName()
role name or if isDataAdmin()
;boolean isTaskActionAuthorized(IHumanTask task)
isWorkflowAdmin(IHumanWorkflow)
or user has the
IHumanTask.getAssignedToRoleName()
role.
This only checks that user has the authorization to do things on the
designed IHumanTask
. See IActivityTask
for methods to
check the status of the IActivityTask
.task
- IActivityTask.isClaimable(ILogicalModelSecurityProvider)
,
IActivityTask.isCompletable(ILogicalModelSecurityProvider)
,
IActivityTask.isTaskDataModifiable(ILogicalModelSecurityProvider)
,
IActivityTask.isUnclaimable(ILogicalModelSecurityProvider)
@Deprecated boolean isStartAuthorized(IHumanWorkflow workflow)
IHumanWorkflow.isStartable(LogicalModelAuthorizations)
isWorkflowAdmin(IHumanWorkflow)
returns true or if user has been
granted the role IHumanWorkflow.getInitiatorRoleName()
.sworkflow
- <WT extends IHumanWorkflow> List<WT> getStartableWorkflows(List<WT> workflows)
isStartAuthorized(IHumanWorkflow)
returns true.workflows
- List<IHumanTask> getClaimableTask(List<IHumanTask> tasks)
isTaskActionAuthorized(IHumanTask)
returns true.tasks
- boolean isWriteAuthorized(IAttribute attribute)
IEntityAttribute
or IComplexAtomicAttribute
pAttribute
- IllegalArgumentException
- if IAttribute
is not IEntityAttribute
or
IComplexAtomicAttribute
@Deprecated boolean isDupsManagementAuthorized(IEntity entity)
LogicalModelAuthorizations.isDupsMgmtCheckoutAuthorized(IEntity)
or
LogicalModelAuthorizations.isDupsMgmtConfirmAuthorized(IEntity)
or
LogicalModelAuthorizations.isDupsMgmtMoveAuthorized(IEntity)
entity
- boolean isErrorsNavigationAuthorized(String applicationName)
Copyright © 2017. All rights reserved.