de.hybris.platform.webservices.objectgraphtransformer

Class YNodeProcessor

java.lang.Object

de.hybris.platform.webservices.util.objectgraphtransformer.impl.AbstractNodeProcessor

de.hybris.platform.webservices.util.objectgraphtransformer.impl.DefaultNodeProcessor

de.hybris.platform.webservices.objectgraphtransformer.YNodeProcessor

All Implemented Interfaces:

NodeProcessor

public class YNodeProcessor
extends DefaultNodeProcessor

Node Processor that implements Attribute Selector API and Attribute Security.

Constructor Summary

Constructors

Constructor and Description
YNodeProcessor()

Method Summary

Modifier and Type	Method and Description
protected java.util.Collection<PropertyMapping>	performAttributeSelection(NodeContextImpl nodeCtx, java.util.Map<java.lang.String,java.util.List<java.lang.String>> httpQueryParameters, WsUtilService wsUtilService) Perfoms attribute selection for the currently processed node in Model->DTO transformation.
protected void	processProperties(NodeContextImpl nodeCtx, java.lang.Object source, java.lang.Object target) Processes selected properties and checks the security constrains('type' and 'attribute') on attribute level for current session user and Node.

Methods inherited from class de.hybris.platform.webservices.util.objectgraphtransformer.impl.DefaultNodeProcessor

createChildProperty, process

Methods inherited from class de.hybris.platform.webservices.util.objectgraphtransformer.impl.AbstractNodeProcessor

createNode, process

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

YNodeProcessor

public YNodeProcessor()

Method Detail

processProperties

protected void processProperties(NodeContextImpl nodeCtx,
                                 java.lang.Object source,
                                 java.lang.Object target)

Processes selected properties and checks the security constrains('type' and 'attribute') on attribute level for current session user and Node.

This method differs from the original implementation in superclass in that it is not processing all available properties, but instead it is processing those properties that have been selected for processing. The rules for selection are simple: If there is dynamic configuration for properties (query parameters) use it first. If there is no dynamic configuration, but a static configuration exists, use it. If there's neither dynamic nor static configuration, use defaults. By default detail representation contains all attributes (it is the case of processing non-root resource at distance=0), and reference representation contains only "uri" and "unique" properties (it is the case for root resources and non-root resources at distance > 0).

The Attribute Security part.

• During model to dto transformation attribute security limits number of attributes or allows to process all of them.
• During dto to model transformation attribute('atribute') security throws the ForbiddenException or allows to process all modified attributes.
• 'type' - type based checking (read, change, create, delete) on the attribute level.
• 'attribute - attribute based checking (read, change) on the attribute level.
• More about attribute security here: SecurityStrategy

Overrides:

processProperties in class DefaultNodeProcessor

Parameters:

nodeCtx - NodeContextImpl current node context

source - source node value

target - target node value (never null)

performAttributeSelection

protected java.util.Collection<PropertyMapping> performAttributeSelection(NodeContextImpl nodeCtx,
                                                                          java.util.Map<java.lang.String,java.util.List<java.lang.String>> httpQueryParameters,
                                                                          WsUtilService wsUtilService)

Perfoms attribute selection for the currently processed node in Model->DTO transformation. The algorithm is more or less following:

• 1.) get all possible attributes
• 2.) read attribute selector configuration - it gives a set of "allowed" attributes
• 3.) Filter out attributes which are not allowed by step 2.)

If there is no configuration data available, there is a "default" behavior implemented: for root resources it allows only "reference representation" of attributes, for "normal" (non-root) resources it allows all attributes for distance=0, and "reference representation" for distance > 0.

Parameters:

nodeCtx -

wsUtilService -

Returns: