keycloak-service
公開メンバ関数 | 限定公開変数類 | 静的非公開変数類 | 全メンバ一覧
org.keycloak.services.resources.admin.permissions.RealmPermissions クラス
org.keycloak.services.resources.admin.permissions.RealmPermissions の継承関係図
Inheritance graph
org.keycloak.services.resources.admin.permissions.RealmPermissions 連携図
Collaboration graph

公開メンバ関数

 RealmPermissions (KeycloakSession session, RealmModel realm, AuthorizationProvider authz, MgmtPermissions root)
 
boolean canManageRealmDefault ()
 
boolean canViewRealmDefault ()
 
boolean canManageIdentityProvidersDefault ()
 
boolean canViewIdentityProvidersDefault ()
 
boolean canManageAuthorizationDefault ()
 
boolean canViewAuthorizationDefault ()
 
boolean canManageEventsDefault ()
 
boolean canViewEventsDefault ()
 
boolean canListRealms ()
 
void requireViewRealmNameList ()
 
boolean canManageRealm ()
 
void requireManageRealm ()
 
boolean canViewRealm ()
 
void requireViewRealm ()
 
boolean canManageIdentityProviders ()
 
boolean canViewIdentityProviders ()
 
void requireViewIdentityProviders ()
 
void requireManageIdentityProviders ()
 
boolean canManageAuthorization ()
 
boolean canViewAuthorization ()
 
void requireManageAuthorization ()
 
void requireViewAuthorization ()
 
boolean canManageEvents ()
 
void requireManageEvents ()
 
boolean canViewEvents ()
 
void requireViewEvents ()
 

限定公開変数類

final KeycloakSession session
 
final RealmModel realm
 
final AuthorizationProvider authz
 
final MgmtPermissions root
 

静的非公開変数類

static final Logger logger = Logger.getLogger(RealmPermissions.class)
 

詳解

Manages default policies for all users.

著者
Bill Burke
バージョン
Revision
1

構築子と解体子

◆ RealmPermissions()

org.keycloak.services.resources.admin.permissions.RealmPermissions.RealmPermissions ( KeycloakSession  session,
RealmModel  realm,
AuthorizationProvider  authz,
MgmtPermissions  root 
)
inline
40  {
41  this.session = session;
42  this.realm = realm;
43  this.authz = authz;
44  this.root = root;
45  }
final KeycloakSession session
Definition: RealmPermissions.java:35
final RealmModel realm
Definition: RealmPermissions.java:36
final MgmtPermissions root
Definition: RealmPermissions.java:38
final AuthorizationProvider authz
Definition: RealmPermissions.java:37

関数詳解

◆ canListRealms()

boolean org.keycloak.services.resources.admin.permissions.RealmPermissions.canListRealms ( )
inline

org.keycloak.services.resources.admin.permissions.RealmPermissionEvaluatorを実装しています。

79  {
80  return root.hasAnyAdminRole();
81  }
boolean hasAnyAdminRole()
Definition: MgmtPermissions.java:147
final MgmtPermissions root
Definition: RealmPermissions.java:38

◆ canManageAuthorization()

boolean org.keycloak.services.resources.admin.permissions.RealmPermissions.canManageAuthorization ( )
inline

org.keycloak.services.resources.admin.permissions.RealmPermissionEvaluatorを実装しています。

141  {
143  }
boolean canManageAuthorizationDefault()
Definition: RealmPermissions.java:64

◆ canManageAuthorizationDefault()

boolean org.keycloak.services.resources.admin.permissions.RealmPermissions.canManageAuthorizationDefault ( )
inline
64  {
65  return root.hasOneAdminRole(AdminRoles.MANAGE_AUTHORIZATION, AdminRoles.MANAGE_CLIENTS);
66 
67  }
boolean hasOneAdminRole(String... adminRoles)
Definition: MgmtPermissions.java:155
final MgmtPermissions root
Definition: RealmPermissions.java:38

◆ canManageEvents()

boolean org.keycloak.services.resources.admin.permissions.RealmPermissions.canManageEvents ( )
inline

org.keycloak.services.resources.admin.permissions.RealmPermissionEvaluatorを実装しています。

164  {
165  return canManageEventsDefault();
166  }
boolean canManageEventsDefault()
Definition: RealmPermissions.java:71

◆ canManageEventsDefault()

boolean org.keycloak.services.resources.admin.permissions.RealmPermissions.canManageEventsDefault ( )
inline
71  {
72  return root.hasOneAdminRole(AdminRoles.MANAGE_EVENTS);
73  }
boolean hasOneAdminRole(String... adminRoles)
Definition: MgmtPermissions.java:155
final MgmtPermissions root
Definition: RealmPermissions.java:38

◆ canManageIdentityProviders()

boolean org.keycloak.services.resources.admin.permissions.RealmPermissions.canManageIdentityProviders ( )
inline

org.keycloak.services.resources.admin.permissions.RealmPermissionEvaluatorを実装しています。

115  {
117  }
boolean canManageIdentityProvidersDefault()
Definition: RealmPermissions.java:56

◆ canManageIdentityProvidersDefault()

boolean org.keycloak.services.resources.admin.permissions.RealmPermissions.canManageIdentityProvidersDefault ( )
inline
56  {
57  return root.hasOneAdminRole(AdminRoles.MANAGE_IDENTITY_PROVIDERS);
58 
59  }
boolean hasOneAdminRole(String... adminRoles)
Definition: MgmtPermissions.java:155
final MgmtPermissions root
Definition: RealmPermissions.java:38

◆ canManageRealm()

boolean org.keycloak.services.resources.admin.permissions.RealmPermissions.canManageRealm ( )
inline

org.keycloak.services.resources.admin.permissions.RealmPermissionEvaluatorを実装しています。

92  {
93  return canManageRealmDefault();
94  }
boolean canManageRealmDefault()
Definition: RealmPermissions.java:48

◆ canManageRealmDefault()

boolean org.keycloak.services.resources.admin.permissions.RealmPermissions.canManageRealmDefault ( )
inline
48  {
49  return root.hasOneAdminRole(AdminRoles.MANAGE_REALM);
50 
51  }
boolean hasOneAdminRole(String... adminRoles)
Definition: MgmtPermissions.java:155
final MgmtPermissions root
Definition: RealmPermissions.java:38

◆ canViewAuthorization()

boolean org.keycloak.services.resources.admin.permissions.RealmPermissions.canViewAuthorization ( )
inline

org.keycloak.services.resources.admin.permissions.RealmPermissionEvaluatorを実装しています。

146  {
148  }
boolean canViewAuthorizationDefault()
Definition: RealmPermissions.java:68

◆ canViewAuthorizationDefault()

boolean org.keycloak.services.resources.admin.permissions.RealmPermissions.canViewAuthorizationDefault ( )
inline
68  {
69  return root.hasOneAdminRole(AdminRoles.MANAGE_AUTHORIZATION, AdminRoles.VIEW_AUTHORIZATION);
70  }
boolean hasOneAdminRole(String... adminRoles)
Definition: MgmtPermissions.java:155
final MgmtPermissions root
Definition: RealmPermissions.java:38

◆ canViewEvents()

boolean org.keycloak.services.resources.admin.permissions.RealmPermissions.canViewEvents ( )
inline

org.keycloak.services.resources.admin.permissions.RealmPermissionEvaluatorを実装しています。

175  {
176  return canViewEventsDefault();
177  }
boolean canViewEventsDefault()
Definition: RealmPermissions.java:74

◆ canViewEventsDefault()

boolean org.keycloak.services.resources.admin.permissions.RealmPermissions.canViewEventsDefault ( )
inline
74  {
75  return root.hasOneAdminRole(AdminRoles.MANAGE_EVENTS, AdminRoles.VIEW_EVENTS);
76  }
boolean hasOneAdminRole(String... adminRoles)
Definition: MgmtPermissions.java:155
final MgmtPermissions root
Definition: RealmPermissions.java:38

◆ canViewIdentityProviders()

boolean org.keycloak.services.resources.admin.permissions.RealmPermissions.canViewIdentityProviders ( )
inline

org.keycloak.services.resources.admin.permissions.RealmPermissionEvaluatorを実装しています。

120  {
122  }
boolean canViewIdentityProvidersDefault()
Definition: RealmPermissions.java:60

◆ canViewIdentityProvidersDefault()

boolean org.keycloak.services.resources.admin.permissions.RealmPermissions.canViewIdentityProvidersDefault ( )
inline
60  {
61  return root.hasOneAdminRole(AdminRoles.MANAGE_IDENTITY_PROVIDERS, AdminRoles.VIEW_IDENTITY_PROVIDERS);
62  }
boolean hasOneAdminRole(String... adminRoles)
Definition: MgmtPermissions.java:155
final MgmtPermissions root
Definition: RealmPermissions.java:38

◆ canViewRealm()

boolean org.keycloak.services.resources.admin.permissions.RealmPermissions.canViewRealm ( )
inline

org.keycloak.services.resources.admin.permissions.RealmPermissionEvaluatorを実装しています。

103  {
104  return canViewRealmDefault();
105  }
boolean canViewRealmDefault()
Definition: RealmPermissions.java:52

◆ canViewRealmDefault()

boolean org.keycloak.services.resources.admin.permissions.RealmPermissions.canViewRealmDefault ( )
inline
52  {
53  return root.hasOneAdminRole(AdminRoles.MANAGE_REALM, AdminRoles.VIEW_REALM);
54  }
boolean hasOneAdminRole(String... adminRoles)
Definition: MgmtPermissions.java:155
final MgmtPermissions root
Definition: RealmPermissions.java:38

◆ requireManageAuthorization()

void org.keycloak.services.resources.admin.permissions.RealmPermissions.requireManageAuthorization ( )
inline

org.keycloak.services.resources.admin.permissions.RealmPermissionEvaluatorを実装しています。

151  {
152  if (!canManageAuthorization()) {
153  throw new ForbiddenException();
154  }
155  }
boolean canManageAuthorization()
Definition: RealmPermissions.java:141

◆ requireManageEvents()

void org.keycloak.services.resources.admin.permissions.RealmPermissions.requireManageEvents ( )
inline

org.keycloak.services.resources.admin.permissions.RealmPermissionEvaluatorを実装しています。

169  {
170  if (!canManageEvents()) {
171  throw new ForbiddenException();
172  }
173  }
boolean canManageEvents()
Definition: RealmPermissions.java:164

◆ requireManageIdentityProviders()

void org.keycloak.services.resources.admin.permissions.RealmPermissions.requireManageIdentityProviders ( )
inline

org.keycloak.services.resources.admin.permissions.RealmPermissionEvaluatorを実装しています。

133  {
135  throw new ForbiddenException();
136  }
137  }
boolean canManageIdentityProviders()
Definition: RealmPermissions.java:115

◆ requireManageRealm()

void org.keycloak.services.resources.admin.permissions.RealmPermissions.requireManageRealm ( )
inline

org.keycloak.services.resources.admin.permissions.RealmPermissionEvaluatorを実装しています。

97  {
98  if (!canManageRealm()) {
99  throw new ForbiddenException();
100  }
101  }
boolean canManageRealm()
Definition: RealmPermissions.java:92

◆ requireViewAuthorization()

void org.keycloak.services.resources.admin.permissions.RealmPermissions.requireViewAuthorization ( )
inline

org.keycloak.services.resources.admin.permissions.RealmPermissionEvaluatorを実装しています。

157  {
158  if (!canViewAuthorization()) {
159  throw new ForbiddenException();
160  }
161  }
boolean canViewAuthorization()
Definition: RealmPermissions.java:146

◆ requireViewEvents()

void org.keycloak.services.resources.admin.permissions.RealmPermissions.requireViewEvents ( )
inline

org.keycloak.services.resources.admin.permissions.RealmPermissionEvaluatorを実装しています。

180  {
181  if (!canViewEvents()) {
182  throw new ForbiddenException();
183  }
184  }
boolean canViewEvents()
Definition: RealmPermissions.java:175

◆ requireViewIdentityProviders()

void org.keycloak.services.resources.admin.permissions.RealmPermissions.requireViewIdentityProviders ( )
inline

org.keycloak.services.resources.admin.permissions.RealmPermissionEvaluatorを実装しています。

125  {
126  if (!canViewIdentityProviders()) {
127  throw new ForbiddenException();
128  }
129  }
boolean canViewIdentityProviders()
Definition: RealmPermissions.java:120

◆ requireViewRealm()

void org.keycloak.services.resources.admin.permissions.RealmPermissions.requireViewRealm ( )
inline

org.keycloak.services.resources.admin.permissions.RealmPermissionEvaluatorを実装しています。

108  {
109  if (!canViewRealm()) {
110  throw new ForbiddenException();
111  }
112  }
boolean canViewRealm()
Definition: RealmPermissions.java:103

◆ requireViewRealmNameList()

void org.keycloak.services.resources.admin.permissions.RealmPermissions.requireViewRealmNameList ( )
inline

org.keycloak.services.resources.admin.permissions.RealmPermissionEvaluatorを実装しています。

84  {
85  if (!canListRealms()) {
86  throw new ForbiddenException();
87  }
88  }
boolean canListRealms()
Definition: RealmPermissions.java:79

メンバ詳解

◆ authz

final AuthorizationProvider org.keycloak.services.resources.admin.permissions.RealmPermissions.authz
protected

◆ logger

final Logger org.keycloak.services.resources.admin.permissions.RealmPermissions.logger = Logger.getLogger(RealmPermissions.class)
staticprivate

◆ realm

final RealmModel org.keycloak.services.resources.admin.permissions.RealmPermissions.realm
protected

◆ root

final MgmtPermissions org.keycloak.services.resources.admin.permissions.RealmPermissions.root
protected

◆ session

final KeycloakSession org.keycloak.services.resources.admin.permissions.RealmPermissions.session
protected

このクラス詳解は次のファイルから抽出されました: