org.gcube.informationsystem.resourceregistry.context.security

Class SecurityContext

java.lang.Object

org.gcube.informationsystem.resourceregistry.context.security.SecurityContext

Direct Known Subclasses:

AdminSecurityContext, ContextSecurityContext, SchemaSecurityContext

public class SecurityContext
extends Object

Author:

Luca Frosini (ISTI - CNR)

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
static class	SecurityContext.PermissionMode
static class	SecurityContext.SecurityType

Field Summary

Fields

Modifier and Type	Field and Description
protected Set<SecurityContext>	children
protected UUID	context
protected static String	DEFAULT_READER_ROLE
protected static String	DEFAULT_WRITER_ROLE
protected Map<Boolean,Map<SecurityContext.PermissionMode,com.tinkerpop.blueprints.impls.orient.OrientGraphFactory>>	factoryMap
static String	H
protected boolean	hierarchic
protected SecurityContext	parentSecurityContext

Constructor Summary

Constructors

Modifier	Constructor and Description
	SecurityContext(UUID context)
protected	SecurityContext(UUID context, boolean hierarchic)

Method Summary

Modifier and Type	Method and Description
void	addElement(com.tinkerpop.blueprints.Element element)
void	addElement(com.tinkerpop.blueprints.Element element, com.tinkerpop.blueprints.impls.orient.OrientGraph orientGraph)
protected com.orientechnologies.orient.core.metadata.security.ORole	addExtraRules(com.orientechnologies.orient.core.metadata.security.ORole role, SecurityContext.PermissionMode permissionMode)
protected void	addHierarchicRoleToParent(com.orientechnologies.orient.core.metadata.security.OSecurity oSecurity, SecurityContext.PermissionMode permissionMode, com.orientechnologies.orient.core.metadata.security.ORole role)
protected void	allow(com.orientechnologies.orient.core.metadata.security.OSecurity oSecurity, com.orientechnologies.orient.core.record.impl.ODocument oDocument, boolean hierarchic)
protected boolean	allowed(com.orientechnologies.orient.core.metadata.security.ORole role, com.orientechnologies.orient.core.record.impl.ODocument oDocument)
void	changeParentSecurityContext(SecurityContext newParentSecurityContext, com.tinkerpop.blueprints.impls.orient.OrientGraph orientGraph) Use to change the parent not to set the first time
void	create()
void	create(com.tinkerpop.blueprints.impls.orient.OrientGraph orientGraph)
protected void	createRolesAndUsers(com.orientechnologies.orient.core.metadata.security.OSecurity oSecurity)
void	delete()
void	delete(com.tinkerpop.blueprints.impls.orient.OrientGraph orientGraph)
protected void	deleteRolesAndUsers(com.orientechnologies.orient.core.metadata.security.OSecurity oSecurity)
protected void	deny(com.orientechnologies.orient.core.metadata.security.OSecurity oSecurity, com.orientechnologies.orient.core.record.impl.ODocument oDocument, boolean hierarchic)
protected com.tinkerpop.blueprints.impls.orient.OrientGraph	getAdminOrientGraph()
Set<SecurityContext>	getChildren()
com.orientechnologies.orient.core.db.document.ODatabaseDocumentTx	getDatabaseDocumentTx(SecurityContext.PermissionMode permissionMode)
com.tinkerpop.blueprints.impls.orient.OrientGraph	getGraph(SecurityContext.PermissionMode permissionMode)
com.tinkerpop.blueprints.impls.orient.OrientGraphNoTx	getGraphNoTx(SecurityContext.PermissionMode permissionMode)
SecurityContext	getParentSecurityContext()
String	getSecurityRoleOrUserName(SecurityContext.PermissionMode permissionMode, SecurityContext.SecurityType securityType, boolean hierarchic)
protected com.orientechnologies.orient.core.metadata.security.ORole	getSuperRole(com.orientechnologies.orient.core.metadata.security.OSecurity oSecurity, SecurityContext.PermissionMode permissionMode)
UUID	getUUID()
protected boolean	isHierarchicMode()
protected void	removeChildrenHRolesFromMyHUsers(com.orientechnologies.orient.core.metadata.security.OSecurity oSecurity, Set<SecurityContext> children)
protected void	removeChildrenHRolesFromParents(com.orientechnologies.orient.core.metadata.security.OSecurity oSecurity)
protected void	removeChildrenHRolesFromParents(com.orientechnologies.orient.core.metadata.security.OSecurity oSecurity, Set<SecurityContext> parents, Set<SecurityContext> children)
void	removeElement(com.tinkerpop.blueprints.Element element)
void	removeElement(com.tinkerpop.blueprints.Element element, com.tinkerpop.blueprints.impls.orient.OrientGraph orientGraph)
protected void	removeHierarchicRoleFromMyHUser(com.orientechnologies.orient.core.metadata.security.OSecurity oSecurity, SecurityContext.PermissionMode permissionMode, String roleName)
void	setParentSecurityContext(SecurityContext parentSecurityContext)
String	toString()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Field Detail

DEFAULT_WRITER_ROLE

protected static final String DEFAULT_WRITER_ROLE

See Also:

Constant Field Values

DEFAULT_READER_ROLE

protected static final String DEFAULT_READER_ROLE

See Also:

Constant Field Values

H

public static final String H

See Also:

Constant Field Values

hierarchic

protected final boolean hierarchic

context

protected final UUID context

factoryMap

protected final Map<Boolean,Map<SecurityContext.PermissionMode,com.tinkerpop.blueprints.impls.orient.OrientGraphFactory>> factoryMap

parentSecurityContext

protected SecurityContext parentSecurityContext

children

protected Set<SecurityContext> children

Constructor Detail

SecurityContext

protected SecurityContext(UUID context,
                          boolean hierarchic)
                   throws org.gcube.informationsystem.resourceregistry.api.exceptions.ResourceRegistryException

Throws:

org.gcube.informationsystem.resourceregistry.api.exceptions.ResourceRegistryException

SecurityContext

public SecurityContext(UUID context)
                throws org.gcube.informationsystem.resourceregistry.api.exceptions.ResourceRegistryException

Throws:

org.gcube.informationsystem.resourceregistry.api.exceptions.ResourceRegistryException

Method Detail

isHierarchicMode

protected boolean isHierarchicMode()

setParentSecurityContext

public void setParentSecurityContext(SecurityContext parentSecurityContext)

getParentSecurityContext

public SecurityContext getParentSecurityContext()

getChildren

public Set<SecurityContext> getChildren()

getAdminOrientGraph

protected com.tinkerpop.blueprints.impls.orient.OrientGraph getAdminOrientGraph()
                                                                         throws org.gcube.informationsystem.resourceregistry.api.exceptions.ResourceRegistryException

Throws:

org.gcube.informationsystem.resourceregistry.api.exceptions.ResourceRegistryException

changeParentSecurityContext

public void changeParentSecurityContext(SecurityContext newParentSecurityContext,
                                        com.tinkerpop.blueprints.impls.orient.OrientGraph orientGraph)
                                 throws org.gcube.informationsystem.resourceregistry.api.exceptions.ResourceRegistryException

Use to change the parent not to set the first time

Parameters:

newParentSecurityContext -

orientGraph -

Throws:

org.gcube.informationsystem.resourceregistry.api.exceptions.ResourceRegistryException

getUUID

public UUID getUUID()

getSecurityRoleOrUserName

public String getSecurityRoleOrUserName(SecurityContext.PermissionMode permissionMode,
                                        SecurityContext.SecurityType securityType,
                                        boolean hierarchic)

addElement

public void addElement(com.tinkerpop.blueprints.Element element)
                throws org.gcube.informationsystem.resourceregistry.api.exceptions.ResourceRegistryException

Throws:

org.gcube.informationsystem.resourceregistry.api.exceptions.ResourceRegistryException

allow

protected void allow(com.orientechnologies.orient.core.metadata.security.OSecurity oSecurity,
                     com.orientechnologies.orient.core.record.impl.ODocument oDocument,
                     boolean hierarchic)

addElement

public void addElement(com.tinkerpop.blueprints.Element element,
                       com.tinkerpop.blueprints.impls.orient.OrientGraph orientGraph)

removeElement

public void removeElement(com.tinkerpop.blueprints.Element element)
                   throws org.gcube.informationsystem.resourceregistry.api.exceptions.ResourceRegistryException

Throws:

org.gcube.informationsystem.resourceregistry.api.exceptions.ResourceRegistryException

deny

protected void deny(com.orientechnologies.orient.core.metadata.security.OSecurity oSecurity,
                    com.orientechnologies.orient.core.record.impl.ODocument oDocument,
                    boolean hierarchic)

removeElement

public void removeElement(com.tinkerpop.blueprints.Element element,
                          com.tinkerpop.blueprints.impls.orient.OrientGraph orientGraph)

allowed

protected boolean allowed(com.orientechnologies.orient.core.metadata.security.ORole role,
                          com.orientechnologies.orient.core.record.impl.ODocument oDocument)

create

public void create()
            throws org.gcube.informationsystem.resourceregistry.api.exceptions.ResourceRegistryException

Throws:

org.gcube.informationsystem.resourceregistry.api.exceptions.ResourceRegistryException

addExtraRules

protected com.orientechnologies.orient.core.metadata.security.ORole addExtraRules(com.orientechnologies.orient.core.metadata.security.ORole role,
                                                                                  SecurityContext.PermissionMode permissionMode)

getSuperRole

protected com.orientechnologies.orient.core.metadata.security.ORole getSuperRole(com.orientechnologies.orient.core.metadata.security.OSecurity oSecurity,
                                                                                 SecurityContext.PermissionMode permissionMode)

addHierarchicRoleToParent

protected void addHierarchicRoleToParent(com.orientechnologies.orient.core.metadata.security.OSecurity oSecurity,
                                         SecurityContext.PermissionMode permissionMode,
                                         com.orientechnologies.orient.core.metadata.security.ORole role)

createRolesAndUsers

protected void createRolesAndUsers(com.orientechnologies.orient.core.metadata.security.OSecurity oSecurity)

create

public void create(com.tinkerpop.blueprints.impls.orient.OrientGraph orientGraph)

delete

public void delete()
            throws org.gcube.informationsystem.resourceregistry.api.exceptions.ResourceRegistryException

Throws:

org.gcube.informationsystem.resourceregistry.api.exceptions.ResourceRegistryException

removeChildrenHRolesFromParents

protected void removeChildrenHRolesFromParents(com.orientechnologies.orient.core.metadata.security.OSecurity oSecurity)

removeChildrenHRolesFromParents

protected void removeChildrenHRolesFromParents(com.orientechnologies.orient.core.metadata.security.OSecurity oSecurity,
                                               Set<SecurityContext> parents,
                                               Set<SecurityContext> children)

removeChildrenHRolesFromMyHUsers

protected void removeChildrenHRolesFromMyHUsers(com.orientechnologies.orient.core.metadata.security.OSecurity oSecurity,
                                                Set<SecurityContext> children)

removeHierarchicRoleFromMyHUser

protected void removeHierarchicRoleFromMyHUser(com.orientechnologies.orient.core.metadata.security.OSecurity oSecurity,
                                               SecurityContext.PermissionMode permissionMode,
                                               String roleName)

deleteRolesAndUsers

protected void deleteRolesAndUsers(com.orientechnologies.orient.core.metadata.security.OSecurity oSecurity)

delete

public void delete(com.tinkerpop.blueprints.impls.orient.OrientGraph orientGraph)

getGraph

public com.tinkerpop.blueprints.impls.orient.OrientGraph getGraph(SecurityContext.PermissionMode permissionMode)

getGraphNoTx

public com.tinkerpop.blueprints.impls.orient.OrientGraphNoTx getGraphNoTx(SecurityContext.PermissionMode permissionMode)

getDatabaseDocumentTx

public com.orientechnologies.orient.core.db.document.ODatabaseDocumentTx getDatabaseDocumentTx(SecurityContext.PermissionMode permissionMode)

toString

public String toString()

Overrides:

toString in class Object