de.hybris.platform.webservices

Class PropertyFileSecurityStrategy

java.lang.Object

de.hybris.platform.webservices.AbstractSecurityStrategy

de.hybris.platform.webservices.PropertyFileSecurityStrategy

All Implemented Interfaces:

SecurityStrategy

public class PropertyFileSecurityStrategy
extends AbstractSecurityStrategy

Constructor Summary

Constructors

Constructor and Description
PropertyFileSecurityStrategy()

Method Summary

Modifier and Type	Method and Description
java.util.List<java.lang.String>	getAllAllowedGroups(java.lang.String httpMethod, java.lang.Class resource) Get all allowed groups for a given resource(and all super-packages) and requested http method.
boolean	isAttributeOperationAllowed(java.lang.Class<?> attrDtoClass, java.lang.String attrQualifier, java.lang.String attrOperation) Currently this strategy doesn't support attribute security.
boolean	isDtoOperationAllowed(java.lang.Class<?> dtoClass, java.lang.String operation) Currently this strategy doesn't support dto security.
boolean	isResourceCommandAllowed(RestResource resource, java.lang.String command) Currently this strategy doesn't support resource commands security.
boolean	isResourceOperationAllowed(RestResource resource, java.lang.String operation) Gets the ResponseBuilder for this resource request or initially creates a new one.

Methods inherited from class de.hybris.platform.webservices.AbstractSecurityStrategy

getComposedType, getModelService, getOperation, performDtoReadOperationAllowed, setModelService

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

PropertyFileSecurityStrategy

public PropertyFileSecurityStrategy()

Method Detail

isResourceOperationAllowed

public boolean isResourceOperationAllowed(RestResource resource,
                                          java.lang.String operation)

Gets the ResponseBuilder for this resource request or initially creates a new one.

When a new ResponseBuilder has to be created and security checking is enabled the currents user access to this resource gets verified before.

Security checking is only done once per request.

Parameters:

resource - The requested resource which will be checked.

operation - The read, change, create or remove access operations.

Returns:

true if allowed.

getAllAllowedGroups

public java.util.List<java.lang.String> getAllAllowedGroups(java.lang.String httpMethod,
                                                            java.lang.Class resource)

Get all allowed groups for a given resource(and all super-packages) and requested http method.

Parameters:

httpMethod - - GET, PUT or DELETE

resource -

Returns:

list with allowed groups

isDtoOperationAllowed

public boolean isDtoOperationAllowed(java.lang.Class<?> dtoClass,
                                     java.lang.String operation)

Currently this strategy doesn't support dto security.

All dto are allowed.

Parameters:

dtoClass - The dto class which will be checked.

operation - The read, change, create or remove access operations.

Returns:

true if allowed.

isResourceCommandAllowed

public boolean isResourceCommandAllowed(RestResource resource,
                                        java.lang.String command)

Currently this strategy doesn't support resource commands security.

All commands are allowed.

Parameters:

resource - The requested resource which will be checked.

command - The command which will be checked.

Returns:

true if allowed.

isAttributeOperationAllowed

public boolean isAttributeOperationAllowed(java.lang.Class<?> attrDtoClass,
                                           java.lang.String attrQualifier,
                                           java.lang.String attrOperation)

Currently this strategy doesn't support attribute security.

All attributes are allowed.

Parameters:

attrDtoClass - The dto class that contains the attribute which will be checked.

attrQualifier - The attribute which will be checked.

attrOperation - The read or change operations.

Returns:

true if allowed.