de.hybris.platform.webservices

Class AbstractSecurityStrategy

java.lang.Object

de.hybris.platform.webservices.AbstractSecurityStrategy

All Implemented Interfaces:

SecurityStrategy

Direct Known Subclasses:

AccessManagerSecurityStrategy, PropertyFileSecurityStrategy

public abstract class AbstractSecurityStrategy
extends java.lang.Object
implements SecurityStrategy

Constructor Summary

Constructors

Constructor and Description
AbstractSecurityStrategy()

Method Summary

Modifier and Type	Method and Description
protected ComposedType	getComposedType(java.lang.Class<?> objectClass) Method returns ComposedType for dtoClasses that contain GraphNode annotation and 'target' attribute.
ModelService	getModelService()
java.lang.String	getOperation(java.lang.String httpMethod, boolean isNew) Method returns selected access operation.
java.util.Collection<?>	performDtoReadOperationAllowed(java.util.Collection<?> collection) Method performs model read security operations on the attribute level on the list of elements.
void	setModelService(ModelService modelService)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface de.hybris.platform.webservices.SecurityStrategy

isAttributeOperationAllowed, isDtoOperationAllowed, isResourceCommandAllowed, isResourceOperationAllowed

Constructor Detail

AbstractSecurityStrategy

public AbstractSecurityStrategy()

Method Detail

setModelService

public void setModelService(ModelService modelService)

Parameters:

modelService - the modelService to set

getModelService

public ModelService getModelService()

Returns:

the modelService

performDtoReadOperationAllowed

public java.util.Collection<?> performDtoReadOperationAllowed(java.util.Collection<?> collection)

Method performs model read security operations on the attribute level on the list of elements.

Parameters:

collection - The collection of objects that needs read security checking.

Returns:

Collection of allowed attributes.

getOperation

public java.lang.String getOperation(java.lang.String httpMethod,
                                     boolean isNew)

Method returns selected access operation.

Parameters:

httpMethod - GET, DELETE, POST, PUT.

isNew - If httpMethod is a POST or PUT then this attribute will decide that this is create or change operation.

Returns:

the selected operation.

getComposedType

protected ComposedType getComposedType(java.lang.Class<?> objectClass)

Method returns ComposedType for dtoClasses that contain GraphNode annotation and 'target' attribute. For other classes method returns null.

Parameters:

objectClass - Input Class object.

Returns:

returns ComposedType for dtoClasses and modelClasses. For others returns null.