Class DefaultPermissionManagementService
- All Implemented Interfaces:
PermissionManagementService
PermissionManagementService.-
Constructor Summary
Constructors -
Method Summary
Modifier and TypeMethodDescriptionvoidaddAttributePermission(AttributeDescriptorModel attribute, PermissionAssignment... permissionAssignment) Adds a permission assignment(s) to an attribute descriptor.voidaddAttributePermissions(AttributeDescriptorModel attribute, Collection<PermissionAssignment> permissionAssignments) Adds all permission assignments defined in given collection to an attribute descriptor.voidaddGlobalPermission(PermissionAssignment... permissionAssignment) Adds new global permission assignments.voidaddGlobalPermissions(Collection<PermissionAssignment> permissionAssignments) Globally adds all permission assignments defined in given collection.protected voidaddGlobalPermissionsInternal(Collection<PermissionAssignment> permissionAssignments) voidaddItemPermission(ItemModel item, PermissionAssignment... permissionAssignment) Adds a permission assignment(s) to an item.voidaddItemPermissions(ItemModel item, Collection<PermissionAssignment> permissionAssignments) Adds all permission assignments defined in given collection to an item.protected voidaddPermissions(ItemModel item, Collection<PermissionAssignment> permissionAssignments) voidaddTypePermission(ComposedTypeModel type, PermissionAssignment... permissionAssignment) Adds a permission assignment(s) to a type.voidaddTypePermissions(ComposedTypeModel type, Collection<PermissionAssignment> permissionAssignments) Adds all permission assignments defined in given collection to a type.voidRemove all permission assignments from a given attribute descriptor.voidRemove all permission assignments from a given item.protected voidclearPermissions(ItemModel item) voidRemove all permission assignments from a given type.voidcreatePermission(String permissionName) Creates a new permission with a given name.getAttributePermissions(AttributeDescriptorModel attribute) Returns a collection representing all permission assigned to given attribute.getAttributePermissionsForName(AttributeDescriptorModel attribute, String... permissionName) Returns a collection representing permissions with specified name(s) assigned to given attribute.getAttributePermissionsForPrincipal(AttributeDescriptorModel attribute, PrincipalModel... principal) Returns a collection representing permissions assigned to given attribute for specified principal(s).Returns a collection of names of all defined permissions.getGlobalPermissionsForName(String... permissionName) Deprecated, for removal: This API element is subject to removal in a future version.since 6.0.0protected Collection<PermissionAssignment>getGlobalPermissionsForName(Collection<String> permissionNames) getGlobalPermissionsForPrincipal(PrincipalModel... principal) Returns a collection representing all global permission assignments for specified principal(s).protected Collection<PermissionAssignment>getGlobalPermissionsForPrincipal(Collection<PrincipalModel> principals) Returns global permissions for given principalsgetItemPermissions(ItemModel item) Returns a collection representing all permission assigned to given item.getItemPermissionsForName(ItemModel item, String... permissionName) Returns a collection representing permissions with specified name(s) assigned to given item.protected Collection<PermissionAssignment>getItemPermissionsForName(ItemModel item, List<String> permissionNames) getItemPermissionsForPrincipal(ItemModel item, PrincipalModel... principal) Returns a collection representing permissions assigned to given item for specified principal(s).protected Collection<PermissionAssignment>getItemPermissionsForPrincipals(ItemModel item, Collection<PrincipalModel> principals) protected UserRightModelgetPermissionForName(String permissionName) protected PKgetPermissionPKForName(String permissionName) Returns null if not found!Returns a collection representing all permission assigned to given type.getTypePermissionsForName(ComposedTypeModel type, String... permissionName) Returns a collection representing permissions with specified name(s) assigned to given type.getTypePermissionsForPrincipal(ComposedTypeModel type, PrincipalModel... principal) Returns a collection representing permissions assigned to given type for specified principal(s).voidremoveAttributePermission(AttributeDescriptorModel attribute, PermissionAssignment... permissionAssignment) Removes permission assignments from an attribute descriptor.voidremoveAttributePermissions(AttributeDescriptorModel attribute, Collection<PermissionAssignment> permissionAssignments) Removes permission assignments from an item.voidremoveAttributePermissionsForName(AttributeDescriptorModel attribute, String... permissionName) Removes all permission assignments from an attribute descriptor that refer to given permission name(s).voidremoveAttributePermissionsForPrincipal(AttributeDescriptorModel attribute, PrincipalModel... principal) Removes all permission assignments from an attribute descriptor that refer to given principal(s).voidremoveGlobalPermission(PermissionAssignment... permissionAssignment) Removes global permission assignment(s).voidremoveGlobalPermissions(Collection<PermissionAssignment> permissionAssignments) Removes global permission assignments.voidremoveGlobalPermissionsForName(String... permissionName) Removes all global permission assignments that refer to given permission name(s).protected voidremoveGlobalPermissionsForNames(Collection<String> permissionNames) voidremoveGlobalPermissionsForPrincipal(PrincipalModel... principal) Removes all global permission assignments that refer to given principal(s).protected voidremoveGlobalPermissionsForPrincipals(Collection<PrincipalModel> principals) protected voidremoveGlobalPermissionsInternal(Collection<PermissionAssignment> permissionAssignments) voidremoveItemPermission(ItemModel item, PermissionAssignment... permissionAssignment) Removes permission assignments from an item.voidremoveItemPermissions(ItemModel item, Collection<PermissionAssignment> permissionAssignments) Removes permission assignments from an item.voidremoveItemPermissionsForName(ItemModel item, String... permissionName) Removes all permission assignments from an item that refer to given permission name(s).voidremoveItemPermissionsForPrincipal(ItemModel item, PrincipalModel... principal) Removes all permission assignments from an item that refer to given principal(s).protected voidremovePermissions(ItemModel item, Collection<PermissionAssignment> permissionAssignments) protected voidremovePermissionsForNames(ItemModel item, Collection<String> permissionNames) protected voidremovePermissionsForPrincipals(ItemModel item, Collection<PrincipalModel> principals) protected voidremovePermissionsForPrincipalsPK(ItemModel item, Collection<PK> principals) voidremoveTypePermission(ComposedTypeModel type, PermissionAssignment... permissionAssignment) Removes permission assignments from a type.voidremoveTypePermissions(ComposedTypeModel type, Collection<PermissionAssignment> permissionAssignments) Removes permission assignments from a type.voidremoveTypePermissionsForName(ComposedTypeModel type, String... permissionName) Removes all permission assignments from a type that refer to given permission name(s).voidremoveTypePermissionsForPrincipal(ComposedTypeModel type, PrincipalModel... principal) Removes all permission assignments from a type that refer to given principal(s).voidsetAttributePermissions(AttributeDescriptorModel attribute, Collection<PermissionAssignment> permissionAssignments) Replaces permission assignments to an attribute descriptor with the ones in given collection.voidsetFlexibleSearchService(FlexibleSearchService flexibleSearchService) voidsetItemPermissions(ItemModel item, Collection<PermissionAssignment> permissionAssignments) Replaces permission assignments to an item with the ones in given collection.voidsetModelService(ModelService modelService) voidsetPermissionManagementStrategyFactory(PermissionManagementStrategyFactory permissionManagementStrategyFactory) protected voidsetPermissions(ItemModel item, Collection<PermissionAssignment> permissionAssignments) voidsetTypePermissions(ComposedTypeModel type, Collection<PermissionAssignment> permissionAssignments) Replaces existing permission assignments to a type with the ones in given collection.
-
Constructor Details
-
DefaultPermissionManagementService
public DefaultPermissionManagementService()
-
-
Method Details
-
getDefinedPermissions
Description copied from interface:PermissionManagementServiceReturns a collection of names of all defined permissions.- Specified by:
getDefinedPermissionsin interfacePermissionManagementService
-
getItemPermissions
Description copied from interface:PermissionManagementServiceReturns a collection representing all permission assigned to given item.- Specified by:
getItemPermissionsin interfacePermissionManagementService
-
getItemPermissionsForPrincipal
public Collection<PermissionAssignment> getItemPermissionsForPrincipal(ItemModel item, PrincipalModel... principal) Description copied from interface:PermissionManagementServiceReturns a collection representing permissions assigned to given item for specified principal(s).- Specified by:
getItemPermissionsForPrincipalin interfacePermissionManagementService
-
getItemPermissionsForName
public Collection<PermissionAssignment> getItemPermissionsForName(ItemModel item, String... permissionName) Description copied from interface:PermissionManagementServiceReturns a collection representing permissions with specified name(s) assigned to given item.- Specified by:
getItemPermissionsForNamein interfacePermissionManagementService
-
getTypePermissions
Description copied from interface:PermissionManagementServiceReturns a collection representing all permission assigned to given type.- Specified by:
getTypePermissionsin interfacePermissionManagementService
-
getTypePermissionsForPrincipal
public Collection<PermissionAssignment> getTypePermissionsForPrincipal(ComposedTypeModel type, PrincipalModel... principal) Description copied from interface:PermissionManagementServiceReturns a collection representing permissions assigned to given type for specified principal(s).- Specified by:
getTypePermissionsForPrincipalin interfacePermissionManagementService
-
getTypePermissionsForName
public Collection<PermissionAssignment> getTypePermissionsForName(ComposedTypeModel type, String... permissionName) Description copied from interface:PermissionManagementServiceReturns a collection representing permissions with specified name(s) assigned to given type.- Specified by:
getTypePermissionsForNamein interfacePermissionManagementService
-
getAttributePermissions
Description copied from interface:PermissionManagementServiceReturns a collection representing all permission assigned to given attribute.- Specified by:
getAttributePermissionsin interfacePermissionManagementService
-
getAttributePermissionsForPrincipal
public Collection<PermissionAssignment> getAttributePermissionsForPrincipal(AttributeDescriptorModel attribute, PrincipalModel... principal) Description copied from interface:PermissionManagementServiceReturns a collection representing permissions assigned to given attribute for specified principal(s).- Specified by:
getAttributePermissionsForPrincipalin interfacePermissionManagementService
-
getAttributePermissionsForName
public Collection<PermissionAssignment> getAttributePermissionsForName(AttributeDescriptorModel attribute, String... permissionName) Description copied from interface:PermissionManagementServiceReturns a collection representing permissions with specified name(s) assigned to given attribute.- Specified by:
getAttributePermissionsForNamein interfacePermissionManagementService
-
getGlobalPermissionsForPrincipal
public Collection<PermissionAssignment> getGlobalPermissionsForPrincipal(PrincipalModel... principal) Description copied from interface:PermissionManagementServiceReturns a collection representing all global permission assignments for specified principal(s).- Specified by:
getGlobalPermissionsForPrincipalin interfacePermissionManagementService
-
getGlobalPermissionsForName
@Deprecated(since="6.0.0", forRemoval=true) public Collection<PermissionAssignment> getGlobalPermissionsForName(String... permissionName) Deprecated, for removal: This API element is subject to removal in a future version.since 6.0.0Description copied from interface:PermissionManagementServiceReturns a collection representing all global permission assignments with specified permission name(s).- Specified by:
getGlobalPermissionsForNamein interfacePermissionManagementService
-
createPermission
Description copied from interface:PermissionManagementServiceCreates a new permission with a given name.- Specified by:
createPermissionin interfacePermissionManagementService- Parameters:
permissionName- name for permission.
-
addItemPermission
Description copied from interface:PermissionManagementServiceAdds a permission assignment(s) to an item.Corner case: This method will overwrite existing permission assignment if it involves the same item, principal and permission, but with opposite value of "isGranted" flag. In other words a permission to an item cannot be assigned twice: as "granted" and as "denied" for the same principal.
- Specified by:
addItemPermissionin interfacePermissionManagementService
-
addItemPermissions
public void addItemPermissions(ItemModel item, Collection<PermissionAssignment> permissionAssignments) Description copied from interface:PermissionManagementServiceAdds all permission assignments defined in given collection to an item. Every single permission assignment is done as inPermissionManagementService.addItemPermission(ItemModel, PermissionAssignment...)).- Specified by:
addItemPermissionsin interfacePermissionManagementService
-
setItemPermissions
public void setItemPermissions(ItemModel item, Collection<PermissionAssignment> permissionAssignments) Description copied from interface:PermissionManagementServiceReplaces permission assignments to an item with the ones in given collection.- Specified by:
setItemPermissionsin interfacePermissionManagementService
-
removeItemPermission
Description copied from interface:PermissionManagementServiceRemoves permission assignments from an item. The value of "isGranted" flag in the permissionAssignment argument(s) is ignored. This means that an existing "denying" permission assignment will be removed even if given permissionAssignment argument "granted" flag is true.- Specified by:
removeItemPermissionin interfacePermissionManagementService
-
removeItemPermissions
public void removeItemPermissions(ItemModel item, Collection<PermissionAssignment> permissionAssignments) Description copied from interface:PermissionManagementServiceRemoves permission assignments from an item. The behaviour is the same as inPermissionManagementService.removeItemPermission(ItemModel, PermissionAssignment...)- Specified by:
removeItemPermissionsin interfacePermissionManagementService
-
removeItemPermissionsForPrincipal
Description copied from interface:PermissionManagementServiceRemoves all permission assignments from an item that refer to given principal(s).- Specified by:
removeItemPermissionsForPrincipalin interfacePermissionManagementService
-
removeItemPermissionsForName
Description copied from interface:PermissionManagementServiceRemoves all permission assignments from an item that refer to given permission name(s).- Specified by:
removeItemPermissionsForNamein interfacePermissionManagementService
-
clearItemPermissions
Description copied from interface:PermissionManagementServiceRemove all permission assignments from a given item.- Specified by:
clearItemPermissionsin interfacePermissionManagementService
-
addTypePermission
Description copied from interface:PermissionManagementServiceAdds a permission assignment(s) to a type.Corner case: This method will overwrite existing permission assignment if it involves the same type, principal and permission, but with opposite value of "isGranted" flag. In other words a permission to a type cannot be assigned twice: as "granted" and as "denied" for the same principal.
- Specified by:
addTypePermissionin interfacePermissionManagementService
-
addTypePermissions
public void addTypePermissions(ComposedTypeModel type, Collection<PermissionAssignment> permissionAssignments) Description copied from interface:PermissionManagementServiceAdds all permission assignments defined in given collection to a type. Every single permission assignment is done as inPermissionManagementService.addTypePermission(ComposedTypeModel, PermissionAssignment...)).- Specified by:
addTypePermissionsin interfacePermissionManagementService
-
setTypePermissions
public void setTypePermissions(ComposedTypeModel type, Collection<PermissionAssignment> permissionAssignments) Description copied from interface:PermissionManagementServiceReplaces existing permission assignments to a type with the ones in given collection.- Specified by:
setTypePermissionsin interfacePermissionManagementService
-
removeTypePermission
public void removeTypePermission(ComposedTypeModel type, PermissionAssignment... permissionAssignment) Description copied from interface:PermissionManagementServiceRemoves permission assignments from a type. The value of "isGranted" flag in the permissionAssignment argument(s) is ignored. This means that an existing "denying" permission assignment will be removed even if permissionAssignment argument "granted" flag is true..- Specified by:
removeTypePermissionin interfacePermissionManagementService
-
removeTypePermissions
public void removeTypePermissions(ComposedTypeModel type, Collection<PermissionAssignment> permissionAssignments) Description copied from interface:PermissionManagementServiceRemoves permission assignments from a type. The behaviour is the same as inPermissionManagementService.removeTypePermission(ComposedTypeModel, PermissionAssignment...)- Specified by:
removeTypePermissionsin interfacePermissionManagementService
-
removeTypePermissionsForPrincipal
Description copied from interface:PermissionManagementServiceRemoves all permission assignments from a type that refer to given principal(s).- Specified by:
removeTypePermissionsForPrincipalin interfacePermissionManagementService
-
removeTypePermissionsForName
Description copied from interface:PermissionManagementServiceRemoves all permission assignments from a type that refer to given permission name(s).- Specified by:
removeTypePermissionsForNamein interfacePermissionManagementService
-
clearTypePermissions
Description copied from interface:PermissionManagementServiceRemove all permission assignments from a given type.- Specified by:
clearTypePermissionsin interfacePermissionManagementService
-
addAttributePermission
public void addAttributePermission(AttributeDescriptorModel attribute, PermissionAssignment... permissionAssignment) Description copied from interface:PermissionManagementServiceAdds a permission assignment(s) to an attribute descriptor.Corner case: This method will overwrite existing permission assignment if it involves the same attribute, principal and permission, but with opposite value of "isGranted" flag. In other words a permission to an attribute cannot be assigned twice: as "granted" and as "denied" for the same principal.
- Specified by:
addAttributePermissionin interfacePermissionManagementService
-
addAttributePermissions
public void addAttributePermissions(AttributeDescriptorModel attribute, Collection<PermissionAssignment> permissionAssignments) Description copied from interface:PermissionManagementServiceAdds all permission assignments defined in given collection to an attribute descriptor. Every single permission assignment is done as inPermissionManagementService.addAttributePermission(AttributeDescriptorModel, PermissionAssignment...)).- Specified by:
addAttributePermissionsin interfacePermissionManagementService
-
setAttributePermissions
public void setAttributePermissions(AttributeDescriptorModel attribute, Collection<PermissionAssignment> permissionAssignments) Description copied from interface:PermissionManagementServiceReplaces permission assignments to an attribute descriptor with the ones in given collection.- Specified by:
setAttributePermissionsin interfacePermissionManagementService
-
removeAttributePermission
public void removeAttributePermission(AttributeDescriptorModel attribute, PermissionAssignment... permissionAssignment) Description copied from interface:PermissionManagementServiceRemoves permission assignments from an attribute descriptor. The value of "isGranted" flag in the permissionAssignment argument(s) is ignored. This means that an existing "denying" permission assignment will be removed even if given permissionAssignment argument "granted" flag is true.- Specified by:
removeAttributePermissionin interfacePermissionManagementService
-
removeAttributePermissions
public void removeAttributePermissions(AttributeDescriptorModel attribute, Collection<PermissionAssignment> permissionAssignments) Description copied from interface:PermissionManagementServiceRemoves permission assignments from an item. The behaviour is the same as inPermissionManagementService.removeAttributePermission(AttributeDescriptorModel, PermissionAssignment...)- Specified by:
removeAttributePermissionsin interfacePermissionManagementService
-
removeAttributePermissionsForPrincipal
public void removeAttributePermissionsForPrincipal(AttributeDescriptorModel attribute, PrincipalModel... principal) Description copied from interface:PermissionManagementServiceRemoves all permission assignments from an attribute descriptor that refer to given principal(s).- Specified by:
removeAttributePermissionsForPrincipalin interfacePermissionManagementService
-
removeAttributePermissionsForName
public void removeAttributePermissionsForName(AttributeDescriptorModel attribute, String... permissionName) Description copied from interface:PermissionManagementServiceRemoves all permission assignments from an attribute descriptor that refer to given permission name(s).- Specified by:
removeAttributePermissionsForNamein interfacePermissionManagementService
-
clearAttributePermissions
Description copied from interface:PermissionManagementServiceRemove all permission assignments from a given attribute descriptor.- Specified by:
clearAttributePermissionsin interfacePermissionManagementService
-
addGlobalPermission
Description copied from interface:PermissionManagementServiceAdds new global permission assignments.Corner case: This method will overwrite existing permission assignment if it involves the same principal and permission, but with opposite value of "isGranted" flag. In other words a permission cannot be globally assigned twice: as "granted" and as "denied" for the same principal.
- Specified by:
addGlobalPermissionin interfacePermissionManagementService
-
addGlobalPermissions
Description copied from interface:PermissionManagementServiceGlobally adds all permission assignments defined in given collection. Every single permission assignment is done as inPermissionManagementService.addGlobalPermission(PermissionAssignment...)).- Specified by:
addGlobalPermissionsin interfacePermissionManagementService
-
removeGlobalPermission
Description copied from interface:PermissionManagementServiceRemoves global permission assignment(s). The value of "isGranted" flag in the permissionAssignment argument(s) is ignored. This means that an existing global "denying" permission assignment will be removed even if given permissionAssignment argument "granted" flag is true.- Specified by:
removeGlobalPermissionin interfacePermissionManagementService
-
removeGlobalPermissions
Description copied from interface:PermissionManagementServiceRemoves global permission assignments. The behaviour is the same as inPermissionManagementService.removeGlobalPermission(PermissionAssignment...)- Specified by:
removeGlobalPermissionsin interfacePermissionManagementService
-
removeGlobalPermissionsForPrincipal
Description copied from interface:PermissionManagementServiceRemoves all global permission assignments that refer to given principal(s).- Specified by:
removeGlobalPermissionsForPrincipalin interfacePermissionManagementService
-
removeGlobalPermissionsForName
Description copied from interface:PermissionManagementServiceRemoves all global permission assignments that refer to given permission name(s).- Specified by:
removeGlobalPermissionsForNamein interfacePermissionManagementService
-
getModelService
- Returns:
- the modelService
-
setModelService
- Parameters:
modelService- the modelService to set
-
getFlexibleSearchService
- Returns:
- the flexibleSearchService
-
setFlexibleSearchService
- Parameters:
flexibleSearchService- the flexibleSearchService to set
-
getPermissionPKForName
Returns null if not found! -
getPermissionForName
-
addPermissions
protected void addPermissions(ItemModel item, Collection<PermissionAssignment> permissionAssignments) -
setPermissions
protected void setPermissions(ItemModel item, Collection<PermissionAssignment> permissionAssignments) -
removePermissions
protected void removePermissions(ItemModel item, Collection<PermissionAssignment> permissionAssignments) -
removePermissionsForPrincipals
protected void removePermissionsForPrincipals(ItemModel item, Collection<PrincipalModel> principals) -
removePermissionsForPrincipalsPK
-
removePermissionsForNames
-
clearPermissions
-
addGlobalPermissionsInternal
-
removeGlobalPermissionsInternal
protected void removeGlobalPermissionsInternal(Collection<PermissionAssignment> permissionAssignments) -
removeGlobalPermissionsForPrincipals
-
removeGlobalPermissionsForNames
-
getGlobalPermissionsForPrincipal
protected Collection<PermissionAssignment> getGlobalPermissionsForPrincipal(Collection<PrincipalModel> principals) Returns global permissions for given principals -
getGlobalPermissionsForName
protected Collection<PermissionAssignment> getGlobalPermissionsForName(Collection<String> permissionNames) -
getItemPermissionsForPrincipals
protected Collection<PermissionAssignment> getItemPermissionsForPrincipals(ItemModel item, Collection<PrincipalModel> principals) -
getItemPermissionsForName
protected Collection<PermissionAssignment> getItemPermissionsForName(ItemModel item, List<String> permissionNames) -
setPermissionManagementStrategyFactory
public void setPermissionManagementStrategyFactory(PermissionManagementStrategyFactory permissionManagementStrategyFactory)
-