org.apache.jetspeed.security

Jetspeed security service interfaces.

AlgorithmUpgradePasswordEncodingService allows checking a specific PasswordCredential if it uses the provided Encoding Algorithm.

Configures an authentication provider.

Proxy allowing to handle multiple authentication providers.

Configures the policies.

Folder permission.

This code was partially inspired from:

• The article : Extend JAAS for class instance-level authorization.
• The FilePermission implementation from the JDK in order to support recursive permissions & wild card

This class represents access to a portal content/folder or document.

Fragment permission.

This code was partially inspired from articles from:

• Extend JAAS for class instance-level authorization.
• The FilePermission implementation from the JDK in order to support recursive permissions & wild card

This class represents access to a fragment within a content document.

Describes the service interface for managing groups.

Group hierarchy elements are being returned as a Group collection. The backing implementation must appropriately map the group hierarchy to a preferences sub-tree.

The convention {principal}.{subprincipal} has been chosen to name groups hierachies.

This class allows to implement different types of groups/roles hierarchy.

PasswordEncodingService allows decoding of user passwords provided that a two-way encryption algoritmn is used.

Describe the interface for managing Permission and permission association to Principal .

Simple wrapper for security policy providing the ability to add attribute on Policy and how they should be used by the application.

Describes the service interface for managing roles.

Role hierarchy elements are being returned as a Role collection.

This component abstracts access to security checks. Jetspeed supports two kinds of secured access:

• Permissions
• Constraints

Security helper.

This class is used to hold the security that will be used when applying security policies.

Utility component used to configure the security component and provide access to the various security handlers.

Unit testing for AggregationHierarchyResolver .

Unit testing for TestAuthenticationProviderProxy .

Unit testing for GroupManager .

Unit testing for RoleManager .

Unit testing for UserManager .

Describes the interface for managing users and provides access to the User .