| org.ow2.easybeans.api.EZBPermissionManager
All known Subclasses: org.ow2.easybeans.security.permissions.PermissionManager,
| EZBPermissionManager | | public interface EZBPermissionManager (Code) | | Class that is linked to an EasyBeans factory and manages the check of the
security.
author:
Florent Benoit |
| Method Summary | |
| boolean | checkSecurity(EasyBeansInvocationContext invocationContext, boolean runAsBean)
Checks the security for the given invocation context.
Parameters:
invocationContext - the context to check.
Parameters:
runAsBean - if true, the bean is a run-as bean. | | void | commit()
Commit the Policy Configuration. | | boolean | isCallerInRole(String ejbName, String roleName, boolean inRunAs)
Test if the caller has a given role. | | void | translateMetadata()
3.1.5 Translating EJB Deployment Descriptors
A reference to a PolicyConfiguration object must be obtained by calling
the getPolicyConfiguration method on the PolicyConfigurationFactory
implementation class of the provider configured into the container. |
| checkSecurity | | boolean checkSecurity(EasyBeansInvocationContext invocationContext, boolean runAsBean)(Code) | | Checks the security for the given invocation context.
Parameters:
invocationContext - the context to check.
Parameters:
runAsBean - if true, the bean is a run-as bean. true if the access has been granted, else false. |
| isCallerInRole | | boolean isCallerInRole(String ejbName, String roleName, boolean inRunAs)(Code) | | Test if the caller has a given role. EJBRoleRefPermission object must be
created with ejbName and actions equal to roleName
See section 4.3.2 of JACC
Parameters:
ejbName - The name of the EJB on wich look role
Parameters:
roleName - The name of the security role. The role must be one ofthe security-role-ref that is defined in the deploymentdescriptor.
Parameters:
inRunAs - bean calling this method is running in run-as mode or not ? True if the caller has the specified role. |
| translateMetadata | | void translateMetadata() throws PermissionManagerException(Code) | | 3.1.5 Translating EJB Deployment Descriptors
A reference to a PolicyConfiguration object must be obtained by calling
the getPolicyConfiguration method on the PolicyConfigurationFactory
implementation class of the provider configured into the container. The
policy context identifier used in the call to getPolicyConfiguration must
be a String that satisfies the requirements described in Section 3.1.4,
EJB Policy Context Identifiers, on page 28. The value true must be passed
as the second parameter in the call to getPolicyConfiguration to ensure
that any and all policy statements are removed from the policy context
associated with the returned PolicyConfiguration. The method-permission,
exclude-list, and security-role-ref elements appearing in the deployment
descriptor must be translated into permissions and added to the
PolicyConfiguration object to yield an equivalent translation as that
defined in the following sections and such that every EJB method for
which the container performs pre-dispatch access decisions is implied by
at least one permission resulting from the translation.
throws:
PermissionManagerException - if permissions can't be set |
|
|