Package de.hybris.platform.partytmfwebservices.v2.security

Class PmUserValidator

java.lang.Object

de.hybris.platform.partytmfwebservices.v2.security.PmUserValidator

public class PmUserValidator
extends Object

Validates if the authenticated user is authorized to access a resource

Since:

2208

Constructor Summary

Constructors

Constructor	Description
PmUserValidator(de.hybris.platform.servicelayer.user.UserService userService, TuaIndividualService individualService, TuaOrganizationService organizationService)

Method Summary

Modifier and Type	Method	Description
protected TuaIndividualService	getIndividualService()
protected TuaOrganizationService	getOrganizationService()
protected de.hybris.platform.servicelayer.user.UserService	getUserService()
boolean	isOwnerOfIndividual(org.springframework.security.core.Authentication authentication, String individualId)	Checks if the authorized client is allowed to access the requested individual.
boolean	isOwnerOfOrganization(org.springframework.security.core.Authentication authentication, String organizationId)	Checks if the authorized client is allowed to access the requested organization.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

PmUserValidator

public PmUserValidator(de.hybris.platform.servicelayer.user.UserService userService,
 TuaIndividualService individualService,
 TuaOrganizationService organizationService)

Method Details

isOwnerOfIndividual

public boolean isOwnerOfIndividual(org.springframework.security.core.Authentication authentication,
 String individualId)

Checks if the authorized client is allowed to access the requested individual.

Parameters:

authentication - The authenticated client

individualId - The unique identifier of the individual

Returns:

True if the authorized client is able to access the resource, otherwise false

isOwnerOfOrganization

public boolean isOwnerOfOrganization(org.springframework.security.core.Authentication authentication,
 String organizationId)

Checks if the authorized client is allowed to access the requested organization.

Parameters:

authentication - The authenticated client

organizationId - The unique identifier of the organization

Returns:

True if the authorized client is able to access the resource, otherwise false

getUserService

protected de.hybris.platform.servicelayer.user.UserService getUserService()

getIndividualService

protected TuaIndividualService getIndividualService()

getOrganizationService

protected TuaOrganizationService getOrganizationService()