edu.internet2.middleware.grouperActivemq.permissions

Class GrouperActivemqPermissionsEngine

java.lang.Object

edu.internet2.middleware.grouperActivemq.permissions.GrouperActivemqPermissionsEngine

All Implemented Interfaces:

org.quartz.Job, org.quartz.StatefulJob

public class GrouperActivemqPermissionsEngine
extends Object
implements org.quartz.Job, org.quartz.StatefulJob

keep track of all permissions. It retrieves permissions from Grouper, caches them in memory, and periodically stores them to disk too. There are two files on disk, in case one doesnt get written fully. At the end of the file is a success flag so we know it is complete. It is failsafe, if Grouper has a problem, and there is a copy in memory or disk, then it will still work. I believe the disk store is only read on startup, but Im not sure.

Constructor Summary

Constructors

Constructor and Description
GrouperActivemqPermissionsEngine(Map<String,Set<GrouperActivemqPermission>> cachedGrouperActivemqPermissions1)

Method Summary

Modifier and Type	Method and Description
void	execute(org.quartz.JobExecutionContext context) this will be run when the quertz nightly job fires
static boolean	hasAnyPermission(String user) if the user has any permission
static boolean	hasPermission(String user, GrouperActivemqPermissionAction action, String destination) all permissions for activemq.
static void	main(String[] args)
static void	startupOnce()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

GrouperActivemqPermissionsEngine

public GrouperActivemqPermissionsEngine(Map<String,Set<GrouperActivemqPermission>> cachedGrouperActivemqPermissions1)

Parameters:

cachedGrouperActivemqPermissions1 -

Method Detail

hasAnyPermission

public static boolean hasAnyPermission(String user)

if the user has any permission

Parameters:

user - is the user to check

Returns:

true if the user has any permission

hasPermission

public static boolean hasPermission(String user,
                                    GrouperActivemqPermissionAction action,
                                    String destination)

all permissions for activemq. See if the user has the action and destination. Note, if there is an internal permissions in ActiveMQ for the user, it is allowed (if supposed to be), and if there is a hierarchical "inherit" permission for an ancestor, it is permitted

Parameters:

user - loginid to activemq

action - action to check (note, if you just have sendMessage, it will check the inherit destinations too

destination - to check

Returns:

the permissions

main

public static void main(String[] args)

Parameters:

args -

startupOnce

public static void startupOnce()

execute

public void execute(org.quartz.JobExecutionContext context)
             throws org.quartz.JobExecutionException

this will be run when the quertz nightly job fires

Specified by:

execute in interface org.quartz.Job

Throws:

org.quartz.JobExecutionException

See Also:

Job.execute(org.quartz.JobExecutionContext)