de.hybris.platform.webservices

Interface SecurityStrategy

All Known Implementing Classes:

AbstractSecurityStrategy, AccessManagerSecurityStrategy, PropertyFileSecurityStrategy

public interface SecurityStrategy

The interface for security strategies.

Allowed access operations: read, change, create, remove. AccessManager operations.

Method Summary

Modifier and Type	Method and Description
boolean	isAttributeOperationAllowed(java.lang.Class<?> attrObjectClass, java.lang.String attrQualifier, java.lang.String attrOperation) Method checks whether current session user has permission to work with specified attribute for the specified access operation.
boolean	isDtoOperationAllowed(java.lang.Class<?> objectClass, java.lang.String operation) Method checks whether current session user has permission to work with current processed dto for the specified access operation.
boolean	isResourceCommandAllowed(RestResource resource, java.lang.String command) Method checks whether current session user has permission to execute specified command on current resource.
boolean	isResourceOperationAllowed(RestResource resource, java.lang.String operation) Method checks whether current session user has permission to work with current resource for the specified access operation.

Method Detail

isResourceOperationAllowed

boolean isResourceOperationAllowed(RestResource resource,
                                   java.lang.String operation)

Method checks whether current session user has permission to work with current resource for the specified access operation.

Parameters:

resource - The requested resource which will be checked.

operation - The read, change, create or remove access operations.

Returns:

true if allowed.

isResourceCommandAllowed

boolean isResourceCommandAllowed(RestResource resource,
                                 java.lang.String command)

Method checks whether current session user has permission to execute specified command on current resource.

Parameters:

resource - The requested resource which will be checked.

command - The command which will be checked.

Returns:

true if allowed.

isDtoOperationAllowed

boolean isDtoOperationAllowed(java.lang.Class<?> objectClass,
                              java.lang.String operation)

Method checks whether current session user has permission to work with current processed dto for the specified access operation.

Parameters:

objectClass - The dto class which will be checked.

operation - The read, change, create or remove access operations.

Returns:

true if allowed.

isAttributeOperationAllowed

boolean isAttributeOperationAllowed(java.lang.Class<?> attrObjectClass,
                                    java.lang.String attrQualifier,
                                    java.lang.String attrOperation)

Method checks whether current session user has permission to work with specified attribute for the specified access operation.

Parameters:

attrObjectClass - The dto class that contains the attribute which will be checked.

attrQualifier - The attribute which will be checked.

attrOperation - The read or change operations.

Returns:

true if allowed.