public class NamingWrapper extends Object implements NamingResolver
NamingAdapter
interface.
Constructor and Description |
---|
NamingWrapper(GrouperSession session,
NamingAdapter naming)
Facade around
NamingAdapter that implements NamingResolver . |
Modifier and Type | Method and Description |
---|---|
void |
flushCache()
flush cache if caching resolver
|
GrouperSession |
getGrouperSession()
get a reference to the session
|
Set<NamingPrivilege> |
getPrivileges(Stem stem,
Subject subject)
Get all privileges subject has on group.
|
Set<Stem> |
getStemsWhereSubjectDoesHavePrivilege(String stemId,
Stem.Scope scope,
Subject subject,
Privilege privilege,
boolean considerAllSubject,
String sqlLikeString)
find the stems which do have a certain privilege
|
Set<Stem> |
getStemsWhereSubjectDoesntHavePrivilege(String stemId,
Stem.Scope scope,
Subject subject,
Privilege privilege,
boolean considerAllSubject,
String sqlLikeString)
find the stems which do not have a certain privilege
|
Set<Stem> |
getStemsWhereSubjectHasPrivilege(Subject subject,
Privilege privilege)
Get all groups where subject has privilege.
|
Set<Subject> |
getSubjectsWithPrivilege(Stem stem,
Privilege privilege)
Get all subjects with privilege on group.
|
void |
grantPrivilege(Stem stem,
Subject subject,
Privilege privilege,
String uuid)
Grant privilege to subject on group.
|
boolean |
hasPrivilege(Stem stem,
Subject subject,
Privilege privilege)
Check whether subject has privilege on group.
|
boolean |
hqlFilterStemsNotWithPrivWhereClause(Subject subject,
HqlQuery hqlQuery,
StringBuilder hql,
String stemColumn,
Privilege privilege,
boolean considerAllSubject)
for a stem query, check to make sure the subject doesnt have privs
|
boolean |
hqlFilterStemsWhereClause(Subject subject,
HqlQuery hqlQuery,
StringBuilder hql,
String stemColumn,
Set<Privilege> privInSet)
for a stem query, check to make sure the subject can see the records (if filtering HQL, you can do
the postHqlFilterGroups instead if you like).
|
boolean |
hqlFilterStemsWithPrivWhereClause(Subject subject,
HqlQuery hqlQuery,
StringBuilder hql,
String stemColumn,
Privilege privilege,
boolean considerAllSubject)
for a stem query, check to make sure the subject has privs
|
Set<Stem> |
postHqlFilterStems(Set<Stem> stems,
Subject subject,
Set<Privilege> privInSet)
after HQL is run, filter stems.
|
void |
privilegeCopy(Stem stem1,
Stem stem2,
Privilege priv)
Copies privileges for subjects that have the specified privilege on stem1 to stem2.
|
void |
privilegeCopy(Subject subj1,
Subject subj2,
Privilege priv)
Copies privileges of type priv on any subject for the given Subject subj1 to the given Subject subj2.
|
void |
revokeAllPrivilegesForSubject(Subject subject)
Revoke all naming privileges that this subject has.
|
void |
revokePrivilege(Stem stem,
Privilege privilege)
Revoke privilege from all subjects on group.
|
void |
revokePrivilege(Stem stem,
Subject subject,
Privilege privilege)
Revoke privilege from subject on group.
|
void |
stop()
clean up resources, session is stopped
|
public NamingWrapper(GrouperSession session, NamingAdapter naming) throws IllegalArgumentException
NamingAdapter
that implements NamingResolver
.session
- naming
- IllegalArgumentException
- if any parameter is null.public Set<Stem> getStemsWhereSubjectDoesntHavePrivilege(String stemId, Stem.Scope scope, Subject subject, Privilege privilege, boolean considerAllSubject, String sqlLikeString)
NamingResolver
getStemsWhereSubjectDoesntHavePrivilege
in interface NamingResolver
NamingResolver#getStemsWhereSubjectDoesntHavePrivilege(String, Scope, Subject, Privilege, boolean, String)
public void flushCache()
NamingResolver
flushCache
in interface NamingResolver
NamingResolver.flushCache()
public GrouperSession getGrouperSession()
NamingResolver
getGrouperSession
in interface NamingResolver
NamingResolver.getGrouperSession()
public Set<Stem> getStemsWhereSubjectHasPrivilege(Subject subject, Privilege privilege) throws IllegalArgumentException
NamingResolver
getStemsWhereSubjectHasPrivilege
in interface NamingResolver
IllegalArgumentException
- if any parameter is null.NamingResolver.getStemsWhereSubjectHasPrivilege(Subject, Privilege)
,
NamingAdapter.getStemsWhereSubjectHasPriv(GrouperSession, Subject, Privilege)
public Set<NamingPrivilege> getPrivileges(Stem stem, Subject subject) throws IllegalArgumentException
NamingResolver
getPrivileges
in interface NamingResolver
IllegalArgumentException
- if any parameter is null.NamingResolver.getPrivileges(Stem, Subject)
,
NamingAdapter.getPrivs(GrouperSession, Stem, Subject)
public Set<Subject> getSubjectsWithPrivilege(Stem stem, Privilege privilege) throws IllegalArgumentException
NamingResolver
getSubjectsWithPrivilege
in interface NamingResolver
IllegalArgumentException
- if any parameter is null.NamingResolver.getSubjectsWithPrivilege(Stem, Privilege)
,
NamingAdapter.getSubjectsWithPriv(GrouperSession, Stem, Privilege)
public void grantPrivilege(Stem stem, Subject subject, Privilege privilege, String uuid) throws IllegalArgumentException, UnableToPerformException
NamingResolver
grantPrivilege
in interface NamingResolver
uuid
- if known or nullIllegalArgumentException
- if any parameter is null.UnableToPerformException
- if the privilege could not be granted.NamingResolver.grantPrivilege(Stem, Subject, Privilege, String)
,
NamingAdapter.grantPriv(GrouperSession, Stem, Subject, Privilege, String)
public boolean hasPrivilege(Stem stem, Subject subject, Privilege privilege) throws IllegalArgumentException
NamingResolver
hasPrivilege
in interface NamingResolver
IllegalArgumentException
- if any parameter is null.NamingResolver.hasPrivilege(Stem, Subject, Privilege)
,
NamingAdapter.hasPriv(GrouperSession, Stem, Subject, Privilege)
public void revokePrivilege(Stem stem, Privilege privilege) throws IllegalArgumentException, UnableToPerformException
NamingResolver
revokePrivilege
in interface NamingResolver
IllegalArgumentException
- if any parameter is null.UnableToPerformException
- if the privilege could not be revoked.NamingResolver.revokePrivilege(Stem, Privilege)
,
NamingAdapter.revokePriv(GrouperSession, Stem, Privilege)
public void revokePrivilege(Stem stem, Subject subject, Privilege privilege) throws IllegalArgumentException, UnableToPerformException
NamingResolver
revokePrivilege
in interface NamingResolver
IllegalArgumentException
- if any parameter is null.UnableToPerformException
- if the privilege could not be revoked.NamingResolver.revokePrivilege(Stem, Subject, Privilege)
,
NamingAdapter.revokePriv(GrouperSession, Stem, Subject, Privilege)
public void privilegeCopy(Stem stem1, Stem stem2, Privilege priv) throws IllegalArgumentException, UnableToPerformException
NamingResolver
privilegeCopy
in interface NamingResolver
IllegalArgumentException
UnableToPerformException
NamingResolver.privilegeCopy(Stem, Stem, Privilege)
,
NamingAdapter.privilegeCopy(GrouperSession, Stem, Stem, Privilege)
public void privilegeCopy(Subject subj1, Subject subj2, Privilege priv) throws IllegalArgumentException, UnableToPerformException
NamingResolver
privilegeCopy
in interface NamingResolver
IllegalArgumentException
UnableToPerformException
NamingResolver.privilegeCopy(Subject, Subject, Privilege)
,
NamingAdapter.privilegeCopy(GrouperSession, Subject, Subject, Privilege)
public void stop()
NamingResolver
stop
in interface NamingResolver
NamingResolver.stop()
public boolean hqlFilterStemsWhereClause(Subject subject, HqlQuery hqlQuery, StringBuilder hql, String stemColumn, Set<Privilege> privInSet)
NamingResolver
hqlFilterStemsWhereClause
in interface NamingResolver
subject
- which needs view access to the groupshql
- is the select and part part (hql prefix)stemColumn
- is the name of the stem column to join toprivInSet
- find a privilege which is in this set
(e.g. for view, send all access privs). There are pre-canned sets in AccessAdapterNamingResolver.hqlFilterStemsWhereClause(edu.internet2.middleware.subject.Subject, edu.internet2.middleware.grouper.hibernate.HqlQuery, java.lang.StringBuilder, java.lang.String, java.util.Set)
public Set<Stem> postHqlFilterStems(Set<Stem> stems, Subject subject, Set<Privilege> privInSet)
NamingResolver
postHqlFilterStems
in interface NamingResolver
subject
- which needs view access to the groupsprivInSet
- find a privilege which is in this set
(e.g. for view, send all access privs). There are pre-canned sets in NamingPrivilegeNamingResolver.postHqlFilterStems(java.util.Set, edu.internet2.middleware.subject.Subject, java.util.Set)
public void revokeAllPrivilegesForSubject(Subject subject)
NamingResolver
revokeAllPrivilegesForSubject
in interface NamingResolver
NamingResolver.revokeAllPrivilegesForSubject(edu.internet2.middleware.subject.Subject)
public boolean hqlFilterStemsNotWithPrivWhereClause(Subject subject, HqlQuery hqlQuery, StringBuilder hql, String stemColumn, Privilege privilege, boolean considerAllSubject)
NamingResolver
hqlFilterStemsNotWithPrivWhereClause
in interface NamingResolver
subject
- which needs view access to the groupshql
- the select and current from partstemColumn
- is the name of the group column to join toprivilege
- find a privilege which is in this set (e.g. stem or create)considerAllSubject
- if true, then consider GrouperAll when seeign if subject has priv, else do notNamingResolver.hqlFilterStemsNotWithPrivWhereClause(edu.internet2.middleware.subject.Subject, edu.internet2.middleware.grouper.hibernate.HqlQuery, java.lang.StringBuilder, java.lang.String, Privilege, boolean)
public Set<Stem> getStemsWhereSubjectDoesHavePrivilege(String stemId, Stem.Scope scope, Subject subject, Privilege privilege, boolean considerAllSubject, String sqlLikeString)
NamingResolver
getStemsWhereSubjectDoesHavePrivilege
in interface NamingResolver
NamingResolver#getStemsWhereSubjectDoesHavePrivilege(String, Scope, Subject, Privilege, boolean, String)
public boolean hqlFilterStemsWithPrivWhereClause(Subject subject, HqlQuery hqlQuery, StringBuilder hql, String stemColumn, Privilege privilege, boolean considerAllSubject)
NamingResolver
hqlFilterStemsWithPrivWhereClause
in interface NamingResolver
subject
- which needs view access to the groupshql
- the select and current from partstemColumn
- is the name of the group column to join toprivilege
- find a privilege which is in this set (e.g. stem or create)considerAllSubject
- if true, then consider GrouperAll when seeign if subject has priv, else do notNamingResolver.hqlFilterStemsWithPrivWhereClause(edu.internet2.middleware.subject.Subject, edu.internet2.middleware.grouper.hibernate.HqlQuery, java.lang.StringBuilder, java.lang.String, Privilege, boolean)
Copyright © 2016 Internet2. All rights reserved.