com.sapportals.wcm.repository.security

Interface IResourceAclManager4Tx

All Superinterfaces:

IResourceAclManager

All Known Subinterfaces:

IResourceAclManagerRaw

public interface IResourceAclManager4Tx
extends IResourceAclManager

An IResourceAclManager4Tx extends an IResourceAclManagerRaw by a createAcl() method, which allows an ACL to be created with a given list of entries and owners.

Method Summary

IResourceAcl	createAcl(IResource resource, IResourceAclEntryList entries, IUMPrincipalList owners) Deprecated. As of NetWeaver 7.1 replaced by createAcl(IResource, IResourceAclEntryList, List)
IResourceAcl	createAcl(IResource resource, IResourceAclEntryList entries, List owners) create a new ACL for a resource - initial owner is the user in the resource context - inherited ACEs are added - if the resource inherits an ACL the user must be an owner - fails, if the resource already has an ACL assigned

Methods inherited from interface com.sapportals.wcm.repository.security.IResourceAclManager

addSupportedPermission, areAclsUpToDate, areNegativeAclEntriesSupported, assignForeignAcl, createAcl, createAclEntry, createAclEntry, createPermission, getAcl, getDBVersion, getInheritedAcl, getObjectType, getPermission, getSupportedObjectTypes, getSupportedPermissions, isPermissionUsedInAcl, isReadOnly, propagateAcl_Remove, removeAcl, removeAcl, removePermission, removeSupportedPermission

Method Detail

createAcl

IResourceAcl createAcl(IResource resource,
                       IResourceAclEntryList entries,
                       IUMPrincipalList owners)
                       throws AclPersistenceException,
                              NotAuthorizedException,
                              AclExistsException,
                              InvalidClassException,
                              PermissionNotSupportedException,
                              ResourceException

Deprecated. As of NetWeaver 7.1 replaced by createAcl(IResource, IResourceAclEntryList, List)

create a new ACL for a resource - initial owner is the user in the resource context - inherited ACEs are added - if the resource inherits an ACL the user must be an owner - fails, if the resource already has an ACL assigned

Parameters:

resource - the resource to set the ACL for.

entries - the list of ACEs for this ACL.

owners - the list of IUMPrincipals which become the owners of this ACL.

Returns:

the newly created ACL.

Throws:

AclPersistenceException - a problem occured within the storage where the ACLs are persisted.

NotAuthorizedException - the user in the resource context is not an owner of an inherited ACL or not a system user allowed to change ACLs.

InvalidClassException - if at least on of the given entries is not supported (is from another manager).

PermissionNotSupportedException - if at least on of the given entries contains a permission which is not supported by the manager.

AclExistsException - an ACL already exists for the resource.

ResourceException - the resource RID could not be determined.

createAcl

IResourceAcl createAcl(IResource resource,
                       IResourceAclEntryList entries,
                       List owners)
                       throws AclPersistenceException,
                              NotAuthorizedException,
                              AclExistsException,
                              InvalidClassException,
                              PermissionNotSupportedException,
                              ResourceException

create a new ACL for a resource - initial owner is the user in the resource context - inherited ACEs are added - if the resource inherits an ACL the user must be an owner - fails, if the resource already has an ACL assigned

Parameters:

resource - the resource to set the ACL for.

entries - the list of ACEs for this ACL.

owners - the list of objects of type IPrincipal which become the owners of this ACL.

Returns:

the newly created ACL.

Throws:

AclPersistenceException - a problem occured within the storage where the ACLs are persisted.

NotAuthorizedException - the user in the resource context is not an owner of an inherited ACL or not a system user allowed to change ACLs.

InvalidClassException - if at least on of the given entries is not supported (is from another manager).

PermissionNotSupportedException - if at least on of the given entries contains a permission which is not supported by the manager.

AclExistsException - an ACL already exists for the resource.

ResourceException - the resource RID could not be determined.

Since:

NetWeaver 7.1

Access Rights

This class can be accessed from:

SC	DC	Public Part	ACH
[sap.com] KMC-CM	[sap.com] tc/km/frwk	api	EP-KM-CM
[sap.com] KMC-WPC	[sap.com] tc/kmc/wpc/wpcfacade	api	EP-PIN-WPC-WCM