Package com.polarion.platform.security

Class UserManagementPolicy

java.lang.Object

com.polarion.platform.security.UserManagementPolicy

All Implemented Interfaces:

IUserManagementPolicy

public class UserManagementPolicy
extends Object
implements IUserManagementPolicy

IUserManagementPolicy implementation.

Clients are free to instance it themselves.

Version:

$Revision$ $Date$

Author:

Stepan Roh, Polarion Software

See Also:

• IUserManagementPolicy

Constructor Summary

Constructors

Constructor	Description
UserManagementPolicy(ISecurityService securityService, IAuthenticationSource authSource)	Constructor.

Method Summary

Modifier and Type	Method	Description
boolean	canAddContextRoleToUser(String userName, String roleId, IContextId ctx)	Permission is UserManagementPermission.ACTION_MANAGE_ROLE_ASSIGNMENT.
boolean	canAddGlobalRoleToUser(String userName, String roleId)	Permission is UserManagementPermission.ACTION_MANAGE_ROLE_ASSIGNMENT.
boolean	canChangePassword(String userName)	Permission is ChangePasswordPermission.
boolean	canCreateContextRole(String roleId, IContextId contextId)	Permission is UserManagementPermission.ACTION_MANAGE_ROLE.
boolean	canCreateGlobalRole(String roleId)	Permission is UserManagementPermission.ACTION_MANAGE_ROLE.
boolean	canCreateUser(String userName)	Permission is UserManagementPermission.ACTION_MANAGE_USER.
boolean	canRemoveContextRole(String roleId, IContextId contextId)	Permission is UserManagementPermission.ACTION_MANAGE_ROLE.
boolean	canRemoveContextRoleFromUser(String userName, String roleId, IContextId ctx)	Permission is UserManagementPermission.ACTION_MANAGE_ROLE_ASSIGNMENT.
boolean	canRemoveGlobalRole(String roleId)	Permission is UserManagementPermission.ACTION_MANAGE_ROLE.
boolean	canRemoveGlobalRoleFromUser(String userName, String roleId)	Permission is UserManagementPermission.ACTION_MANAGE_ROLE_ASSIGNMENT.
boolean	canRemoveUser(String userName)	Permission is UserManagementPermission.ACTION_MANAGE_USER.
void	checkCanAddContextRoleToUser(String userName, String roleId, IContextId ctx)
void	checkCanAddGlobalRoleToUser(String userName, String roleId)
void	checkCanChangePassword(String userName)
void	checkCanCreateContextRole(String roleId, IContextId contextId)
void	checkCanCreateGlobalRole(String roleId)
void	checkCanCreateUser(String userName)
void	checkCanRemoveContextRole(String roleId, IContextId contextId)
void	checkCanRemoveContextRoleFromUser(String userName, String roleId, IContextId ctx)
void	checkCanRemoveGlobalRole(String roleId)
void	checkCanRemoveGlobalRoleFromUser(String userName, String roleId)
void	checkCanRemoveUser(String userName)

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

UserManagementPolicy

public UserManagementPolicy(ISecurityService securityService,
 IAuthenticationSource authSource)

Constructor.

Parameters:

securityService - security service

Throws:

IllegalArgumentException - if securityService is null

Method Details

canAddContextRoleToUser

public boolean canAddContextRoleToUser(String userName,
 String roleId,
 IContextId ctx)

Description copied from interface: IUserManagementPolicy

Permission is UserManagementPermission.ACTION_MANAGE_ROLE_ASSIGNMENT.

Specified by:

canAddContextRoleToUser in interface IUserManagementPolicy

Parameters:

userName - user name

roleId - role id

ctx - context id

Returns:

true if current user is allowed to do this operation

canAddGlobalRoleToUser

public boolean canAddGlobalRoleToUser(String userName,
 String roleId)

Description copied from interface: IUserManagementPolicy

Permission is UserManagementPermission.ACTION_MANAGE_ROLE_ASSIGNMENT.

Specified by:

canAddGlobalRoleToUser in interface IUserManagementPolicy

Parameters:

userName - user name

roleId - role id

Returns:

true if current user is allowed to do this operation

canChangePassword

public boolean canChangePassword(String userName)

Description copied from interface: IUserManagementPolicy

Permission is ChangePasswordPermission.

Specified by:

canChangePassword in interface IUserManagementPolicy

Parameters:

userName - user name

Returns:

true if current user is allowed to do this operation

checkCanChangePassword

public void checkCanChangePassword(String userName)
                            throws PermissionDeniedException

Specified by:

checkCanChangePassword in interface IUserManagementPolicy

Throws:

PermissionDeniedException

canCreateContextRole

public boolean canCreateContextRole(String roleId,
 IContextId contextId)

Description copied from interface: IUserManagementPolicy

Permission is UserManagementPermission.ACTION_MANAGE_ROLE.

Specified by:

canCreateContextRole in interface IUserManagementPolicy

Parameters:

roleId - role id

contextId - context id

Returns:

true if current user is allowed to do this operation

canCreateGlobalRole

public boolean canCreateGlobalRole(String roleId)

Description copied from interface: IUserManagementPolicy

Permission is UserManagementPermission.ACTION_MANAGE_ROLE.

Specified by:

canCreateGlobalRole in interface IUserManagementPolicy

Parameters:

roleId - role id

Returns:

true if current user is allowed to do this operation

canCreateUser

public boolean canCreateUser(String userName)

Description copied from interface: IUserManagementPolicy

Permission is UserManagementPermission.ACTION_MANAGE_USER.

Specified by:

canCreateUser in interface IUserManagementPolicy

Parameters:

userName - user name

Returns:

true if current user is allowed to do this operation

canRemoveContextRole

public boolean canRemoveContextRole(String roleId,
 IContextId contextId)

Description copied from interface: IUserManagementPolicy

Permission is UserManagementPermission.ACTION_MANAGE_ROLE.

Specified by:

canRemoveContextRole in interface IUserManagementPolicy

Parameters:

roleId - role id

contextId - context id

Returns:

true if current user is allowed to do this operation

canRemoveContextRoleFromUser

public boolean canRemoveContextRoleFromUser(String userName,
 String roleId,
 IContextId ctx)

Description copied from interface: IUserManagementPolicy

Permission is UserManagementPermission.ACTION_MANAGE_ROLE_ASSIGNMENT.

Specified by:

canRemoveContextRoleFromUser in interface IUserManagementPolicy

Parameters:

userName - user name

roleId - role id

ctx - context id

Returns:

true if current user is allowed to do this operation

canRemoveGlobalRole

public boolean canRemoveGlobalRole(String roleId)

Description copied from interface: IUserManagementPolicy

Permission is UserManagementPermission.ACTION_MANAGE_ROLE.

Specified by:

canRemoveGlobalRole in interface IUserManagementPolicy

Parameters:

roleId - role id

Returns:

true if current user is allowed to do this operation

canRemoveGlobalRoleFromUser

public boolean canRemoveGlobalRoleFromUser(String userName,
 String roleId)

Description copied from interface: IUserManagementPolicy

Permission is UserManagementPermission.ACTION_MANAGE_ROLE_ASSIGNMENT.

Specified by:

canRemoveGlobalRoleFromUser in interface IUserManagementPolicy

Parameters:

userName - user name

roleId - role id

Returns:

true if current user is allowed to do this operation

canRemoveUser

public boolean canRemoveUser(String userName)

Description copied from interface: IUserManagementPolicy

Permission is UserManagementPermission.ACTION_MANAGE_USER.

Specified by:

canRemoveUser in interface IUserManagementPolicy

Parameters:

userName - user name

Returns:

true if current user is allowed to do this operation

checkCanAddContextRoleToUser

public void checkCanAddContextRoleToUser(String userName,
 String roleId,
 IContextId ctx)
                                  throws PermissionDeniedException

Specified by:

checkCanAddContextRoleToUser in interface IUserManagementPolicy

Throws:

PermissionDeniedException

checkCanAddGlobalRoleToUser

public void checkCanAddGlobalRoleToUser(String userName,
 String roleId)
                                 throws PermissionDeniedException

Specified by:

checkCanAddGlobalRoleToUser in interface IUserManagementPolicy

Throws:

PermissionDeniedException

checkCanCreateContextRole

public void checkCanCreateContextRole(String roleId,
 IContextId contextId)
                               throws PermissionDeniedException

Specified by:

checkCanCreateContextRole in interface IUserManagementPolicy

Throws:

PermissionDeniedException

checkCanCreateGlobalRole

public void checkCanCreateGlobalRole(String roleId)
                              throws PermissionDeniedException

Specified by:

checkCanCreateGlobalRole in interface IUserManagementPolicy

Throws:

PermissionDeniedException

checkCanCreateUser

public void checkCanCreateUser(String userName)
                        throws PermissionDeniedException

Specified by:

checkCanCreateUser in interface IUserManagementPolicy

Throws:

PermissionDeniedException

checkCanRemoveContextRole

public void checkCanRemoveContextRole(String roleId,
 IContextId contextId)
                               throws PermissionDeniedException

Specified by:

checkCanRemoveContextRole in interface IUserManagementPolicy

Throws:

PermissionDeniedException

checkCanRemoveContextRoleFromUser

public void checkCanRemoveContextRoleFromUser(String userName,
 String roleId,
 IContextId ctx)
                                       throws PermissionDeniedException

Specified by:

checkCanRemoveContextRoleFromUser in interface IUserManagementPolicy

Throws:

PermissionDeniedException

checkCanRemoveGlobalRole

public void checkCanRemoveGlobalRole(String roleId)
                              throws PermissionDeniedException

Specified by:

checkCanRemoveGlobalRole in interface IUserManagementPolicy

Throws:

PermissionDeniedException

checkCanRemoveGlobalRoleFromUser

public void checkCanRemoveGlobalRoleFromUser(String userName,
 String roleId)
                                      throws PermissionDeniedException

Specified by:

checkCanRemoveGlobalRoleFromUser in interface IUserManagementPolicy

Throws:

PermissionDeniedException

checkCanRemoveUser

public void checkCanRemoveUser(String userName)
                        throws PermissionDeniedException

Specified by:

checkCanRemoveUser in interface IUserManagementPolicy

Throws:

PermissionDeniedException