Class PrivilegeGroupInheritanceFinder

java.lang.Object
edu.internet2.middleware.grouper.privs.PrivilegeGroupInheritanceFinder

public class PrivilegeGroupInheritanceFinder extends Object
  • Constructor Details

    • PrivilegeGroupInheritanceFinder

      public PrivilegeGroupInheritanceFinder()
  • Method Details

    • assignRunAsRoot

      public PrivilegeGroupInheritanceFinder assignRunAsRoot(boolean runAsRoot)
      set this to true to run as a root session
      Parameters:
      runAsRoot -
      Returns:
    • assignPrivilege

      public PrivilegeGroupInheritanceFinder assignPrivilege(Privilege privilege)
      add privilege
      Parameters:
      theFieldName -
      Returns:
      this for chaining
    • assignPrivilegeName

      public PrivilegeGroupInheritanceFinder assignPrivilegeName(String thePrivilegeName)
      field of privilege (could be privilege name too)
      Parameters:
      thePrivilegeName -
      Returns:
      this for chaining
    • assignField

      public PrivilegeGroupInheritanceFinder assignField(Field theField)
      field of privilege
      Parameters:
      theFieldId -
      Returns:
      this for chaining
    • assignFieldId

      public PrivilegeGroupInheritanceFinder assignFieldId(String theFieldId)
      field of privilege
      Parameters:
      theFieldId -
      Returns:
      this for chaining
    • assignFieldName

      public PrivilegeGroupInheritanceFinder assignFieldName(String theFieldName)
      field of privilege (could be privilege name too)
      Parameters:
      theFieldName -
      Returns:
      this for chaining
    • assignStem

      public PrivilegeGroupInheritanceFinder assignStem(Stem theStem)
      assign a stem
      Parameters:
      theStem -
      Returns:
      this for chaining
    • assignStemId

      public PrivilegeGroupInheritanceFinder assignStemId(String theStemId)
      stem id to add to, mutually exclusive with stem name
      Parameters:
      theStemId -
      Returns:
      this for chaining
    • assignStemName

      public PrivilegeGroupInheritanceFinder assignStemName(String theStemName)
      stem name to add to, mutually exclusive with stem id
      Parameters:
      theStemName -
      Returns:
      this for chaining
    • assignSubject

      public PrivilegeGroupInheritanceFinder assignSubject(Subject theSubject)
      subject to add
      Parameters:
      theSubject -
      Returns:
      this for chaining
    • assignSubjectId

      public PrivilegeGroupInheritanceFinder assignSubjectId(String theSubjectId)
      subject id to add, mutually exclusive and preferable to subject identifier
      Parameters:
      theSubjectId -
      Returns:
      this for chaining
    • assignSubjectIdentifier

      public PrivilegeGroupInheritanceFinder assignSubjectIdentifier(String theSubjectIdentifier)
      subject identifier to add, mutually exclusive and not preferable to subject id
      Parameters:
      thesubjectIdentifier -
      Returns:
      this for chaining
    • assignSubjectSourceId

      public PrivilegeGroupInheritanceFinder assignSubjectSourceId(String theSubjectSourceId)
      subject source id to add
      Parameters:
      theSubjectSourceId -
      Returns:
      this for chaining
    • hasAssignedPrivilege

      public boolean hasAssignedPrivilege()
      return true if the user has this inherited privilege based on assignment to the user or a group the user is in. The inherited privilege could be assigned on the folder or an ancestor folder.
      Returns:
    • hasEffectivePrivilege

      public boolean hasEffectivePrivilege()
      return true if the user has this inherited privilege based on assignment to the user or a group the user is in. The inherited privilege could be assigned on the folder or an ancestor folder. The privilege could be the actual privilege or a privilege that the assigned privilege implies. e.g. if searching for view and the subject has admin, it would return true
      Returns:
    • findEffectivePrivileges

      public Set<Privilege> findEffectivePrivileges()
      return set of effective inherited privileges based on assignment to the user or a group the user is in. The inherited privileges could be assigned on the folder or an ancestor folder. The privileges could be the actual privileges or privileges that the assigned privilege implies. e.g. if the subject has admin, it would include view and other privileges as well.
      Returns:
    • findAssignedPrivileges

      public Set<Privilege> findAssignedPrivileges()
      return set of assigned inherited privileges based on assignment to the user or a group the user is in. The inherited privileges could be assigned on the folder or an ancestor folder.
      Returns: