org.gluu.oxtrust.service.uma.annotations.ApiPermissionService クラス

org.gluu.oxtrust.service.uma.annotations.ApiPermissionService の継承関係図

org.gluu.oxtrust.service.uma.annotations.ApiPermissionService 連携図

公開メンバ関数
boolean	hasPermission (Object target, String action)

非公開変数類
Logger	log
Identity	identity
AppConfiguration	appConfiguration
ApplianceService	applianceService
String [][]	managerActions

静的非公開変数類
static final long	serialVersionUID = 8290321709004847387L

詳解

Provides service to protect Rest service endpoints with UMA scope.

著者

Dmitry Ognyannikov

関数詳解

hasPermission()

boolean org.gluu.oxtrust.service.uma.annotations.ApiPermissionService.hasPermission ( Object  target, String  action  )

inline

                                                               {
        log.trace("Checking permissions for target '{}' an 'action'. Identity: {}", target, action, identity);
        if (!identity.isLoggedIn()) {
            return false;
        }

        if (identity.hasRole(UserRole.MANAGER.getValue()) || identity.hasRole(UserRole.USER.getValue())) {
            if (StringHelper.equalsIgnoreCase("profile_management", action)) {
                GluuAppliance appliance = applianceService.getAppliance();
                GluuAppliance targetAppliance = (GluuAppliance) target;
                if (((appliance.getProfileManagment() != null) && appliance.getProfileManagment().isBooleanValue())
                        && StringHelper.equals(applianceService.getAppliance().getInum(), targetAppliance.getInum())) {
                    return true;
                } else {
                    return false;
                }
            }

            if (StringHelper.equalsIgnoreCase("whitePagesEnabled", action)) {
                GluuAppliance appliance = applianceService.getAppliance();
                GluuAppliance targetAppliance = (GluuAppliance) target;
                if (((appliance.getWhitePagesEnabled() != null) && appliance.getWhitePagesEnabled().isBooleanValue())
                        && StringHelper.equals(applianceService.getAppliance().getInum(), targetAppliance.getInum())) {
                    return true;
                } else {
                    return false;
                }
            }
        }

        if (identity.hasRole(UserRole.MANAGER.getValue())) {
            for (String[] managerAction : managerActions) {
                String targetString = (String) target;
                if (StringHelper.equals(managerAction[0], targetString) && StringHelper.equals(managerAction[1], action)) {
                    return true;
                }
            }
        }
        
        if (identity.hasRole(UserRole.USER.getValue())) {
            for (String[] managerAction : managerActions) {
                String targetString = (String) target;
                if (StringHelper.equals("profile", targetString) && StringHelper.equals(managerAction[0], targetString) && StringHelper.equals(managerAction[1], action)) {
                    return true;
                }
            }
        }


        return false;
    }

メンバ詳解

appConfiguration

AppConfiguration org.gluu.oxtrust.service.uma.annotations.ApiPermissionService.appConfiguration

private

applianceService

ApplianceService org.gluu.oxtrust.service.uma.annotations.ApiPermissionService.applianceService

private

identity

Identity org.gluu.oxtrust.service.uma.annotations.ApiPermissionService.identity

private

log

Logger org.gluu.oxtrust.service.uma.annotations.ApiPermissionService.log

private

managerActions

String [][] org.gluu.oxtrust.service.uma.annotations.ApiPermissionService.managerActions

private

初期値:

= new String[][]{
            {"attribute", "access"},
            {"person", "access"},
            {"person", "import"},
            {"group", "access"},
            {"sectorIdentifier", "access"},
            {"trust", "access"},
            {"configuration", "access"},
            {"log", "access"},
            {"import", "access"},
            {"profile", "access"},
            {"registrationLinks", "access"},
            {"scim", "access"},
            {"scim_test", "access"},
            {"client", "access"},
            {"scope", "access"},
            {"oxauth", "access"},
            {"uma", "access"},
            {"super-gluu", "access"},
            {"linktrack", "access"},
    }

serialVersionUID

final long org.gluu.oxtrust.service.uma.annotations.ApiPermissionService.serialVersionUID = 8290321709004847387L

staticprivate

---

このクラス詳解は次のファイルから抽出されました:

• D:/AppData/OpenId/gluu/src/oxTrust/server/src/main/java/org/gluu/oxtrust/service/uma/annotations/ApiPermissionService.java