| java.lang.Object
 org.theospi.portfolio.wizard.WizardAuthorizerImpl
| WizardAuthorizerImpl | | public class WizardAuthorizerImpl implements ApplicationAuthorizer(Code) | | These are the permissions and their definitions:
View: Can a user complete a wizard (is the wizard owner or
can complete the wizard or the tool permits the user to complete)
Review: can the user review the wizard definition (check the tool for review)
Evaluate: can the user exaluate the wizard definition (check the tool for evaluate)
Operate: does the user have view or review or evaluate
Create: Can a user create a wizard (permitted by the tool)
Edit: can the user change the wizard definition (check the tool for edit)
Publish: can the user publish the wizard definition (check the tool for publish)
Delete: can the user delete the wizard definition (check the tool for delete)
The delete only works on unpublished wizards
Copy: can the user copy the wizard definition (check the tool for copy)
Delete: can the user delete the wizard definition (check the tool for delete)
Edit Wizard Page Guidance: the owner of the wizard can edit guidance of a wizard page
View Wizard Page Guidance: loop through each completed wizard page and:
does the completed page have evaluate or review or is the owner
or the page def has view permission
or is the page sequence owned by the current user
|
| Method Summary | |
| public List | getFunctions()
| | public IdManager | getIdManager()
| | public WizardManager | getWizardManager()
| | public Boolean | isAuthorized(AuthorizationFacade facade, Agent agent, String function, Id id)
This method will ask the application specific functional authorizer to determine authorization. | | protected Boolean | isWizardAuth(AuthorizationFacade facade, Id qualifier, Agent agent, String function)
This method checks for permission "function" of wizard "qualifier" with the given Agent. | | protected Boolean | isWizardAuthForEval(AuthorizationFacade facade, Agent agent, Id id)
| | protected Boolean | isWizardAuthForReview(AuthorizationFacade facade, Agent agent, Id id)
| | protected Boolean | isWizardViewAuth(AuthorizationFacade facade, Agent agent, Id id, boolean allowAnonymous)
| | protected Boolean | isWizardViewAuth(Id wizardId, AuthorizationFacade facade, Agent agent, Id id, boolean allowAnonymous)
Checks an agents ability to view the given wizard. | | public void | setFunctions(List functions)
| | public void | setIdManager(IdManager idManager)
| | public void | setWizardManager(WizardManager wizardManager)
|
| isAuthorized | | public Boolean isAuthorized(AuthorizationFacade facade, Agent agent, String function, Id id)(Code) | | This method will ask the application specific functional authorizer to determine authorization.
Parameters:
facade - this can be used to do explicit auths if necessary
Parameters:
agent -
Parameters:
function -
Parameters:
id - null if the authorizer has no opinion, true if authorized, false if explicitly not authorized. |
| isWizardAuth | | protected Boolean isWizardAuth(AuthorizationFacade facade, Id qualifier, Agent agent, String function)(Code) | | This method checks for permission "function" of wizard "qualifier" with the given Agent.
Parameters:
facade - AuthorizationFacade
Parameters:
qualifier - Id -- for this function it's the wizard id
Parameters:
agent - Agent
Parameters:
function - String Boolean |
| isWizardViewAuth | | protected Boolean isWizardViewAuth(AuthorizationFacade facade, Agent agent, Id id, boolean allowAnonymous)(Code) | | THis handles the authority for the view permission on a wizard
Parameters:
facade -
Parameters:
agent -
Parameters:
id - -- for this function it's the wizard id
Parameters:
allowAnonymous - |
| isWizardViewAuth | | protected Boolean isWizardViewAuth(Id wizardId, AuthorizationFacade facade, Agent agent, Id id, boolean allowAnonymous)(Code) | | Checks an agents ability to view the given wizard. It also check the wizard's
tool for permission to access the wizard as view is a tool wide permission.
Anonymous is not recognized in this function yet
Parameters:
wizardId - Id of the wizard we are checkingWizard
Parameters:
facade - AuthorizationFacade
Parameters:
agent - Agent
Parameters:
id - Id
Parameters:
allowAnonymous - boolean Boolean |
| setFunctions | | public void setFunctions(List functions)(Code) | | |
|
|