Uses of Class
org.gcube.informationsystem.resourceregistry.pep.PolicyEnforcementPoint.EndpointPolicySpec

Packages that use PolicyEnforcementPoint.EndpointPolicySpec

Package	Description
org.gcube.informationsystem.resourceregistry.pep

Uses of PolicyEnforcementPoint.EndpointPolicySpec in org.gcube.informationsystem.resourceregistry.pep

Methods in org.gcube.informationsystem.resourceregistry.pep with parameters of type PolicyEnforcementPoint.EndpointPolicySpec

Modifier and Type	Method	Description
protected void	PolicyEnforcementPoint.enforceAllowedRoles(PolicyEnforcementPoint.EndpointPolicySpec policy)	Enforces the Level 1 endpoint access rule: a caller holding none of the policy's roles (including a caller with no Resource Registry role at all) is rejected before any parsing, lookup, or token Context resolution.
protected void	PolicyEnforcementPoint.enforcePolicy(PolicyEnforcementPoint.EndpointPolicySpec policy, UUID targetUuid, UUID parentUuid)	Enforces the endpoint-level and context-level authorization rules specified by the given policy specification, and automatically validates query parameters.
protected void	PolicyEnforcementPoint.enforcePrivilegedQueryParameters(PolicyEnforcementPoint.EndpointPolicySpec policy)	Rejects with 403 Forbidden every privilege-expanding value declared by the policy's PolicyEnforcementPoint.QueryParamSpecs when the caller holds none of the entitled roles.