org.sakaiproject.authz.api

AuthzGroup is a authorization group; a group of users, each with a role, and a set of permissions of functions made to each role.

AuthzGroupService manages authorization grops.

AuthzPermissionException is thrown by the Authz system when an activity is attempted that the end-user does not have permission to do.

FunctionManager is the API for the service that manages security function registrations from the various Sakai applications.

GroupAlreadyDefinedException is thrown whenever an Authz Group is created with an id that already is defined for a group.

GroupIdInvalidException is thrown whenever an Authz group add is attempted with an id that is already in use.

GroupNotDefinedException is thrown whenever an attempt is made to access an Authz group with an id that is not defined.

GroupProvider provides user / role membership in a group, from an external system.

Member records membership in an AuthzGroup; user, role, and flags.

PermissionsHelper describes the contract (API) between the client tool and the permissions helper tool.

Role is part of an AuthzGroup, to which users can be assingned, and which is given permissions to various functions.

RoleAlreadyDefinedException is thrown whenever an Authz Role is already defined and there's an attempt to add it again.

SecurityAdvisor is a stackable policy process that is given a chance to determine if a security question can be answered, over the logic of the SecurityService component.

SecurityService is the interface for Sakai security services.