Class PrivilegeGroupInheritanceFinder
java.lang.Object
edu.internet2.middleware.grouper.privs.PrivilegeGroupInheritanceFinder
-
Constructor Summary
-
Method Summary
Modifier and TypeMethodDescriptionassignField
(Field theField) field of privilegeassignFieldId
(String theFieldId) field of privilegeassignFieldName
(String theFieldName) field of privilege (could be privilege name too)assignPrivilege
(Privilege privilege) add privilegeassignPrivilegeName
(String thePrivilegeName) field of privilege (could be privilege name too)assignRunAsRoot
(boolean runAsRoot) set this to true to run as a root sessionassignStem
(Stem theStem) assign a stemassignStemId
(String theStemId) stem id to add to, mutually exclusive with stem nameassignStemName
(String theStemName) stem name to add to, mutually exclusive with stem idassignSubject
(Subject theSubject) subject to addassignSubjectId
(String theSubjectId) subject id to add, mutually exclusive and preferable to subject identifierassignSubjectIdentifier
(String theSubjectIdentifier) subject identifier to add, mutually exclusive and not preferable to subject idassignSubjectSourceId
(String theSubjectSourceId) subject source id to addreturn set of assigned inherited privileges based on assignment to the user or a group the user is in.return set of effective inherited privileges based on assignment to the user or a group the user is in.boolean
return true if the user has this inherited privilege based on assignment to the user or a group the user is in.boolean
return true if the user has this inherited privilege based on assignment to the user or a group the user is in.
-
Constructor Details
-
PrivilegeGroupInheritanceFinder
public PrivilegeGroupInheritanceFinder()
-
-
Method Details
-
assignRunAsRoot
set this to true to run as a root session- Parameters:
runAsRoot
-- Returns:
-
assignPrivilege
add privilege- Parameters:
theFieldName
-- Returns:
- this for chaining
-
assignPrivilegeName
field of privilege (could be privilege name too)- Parameters:
thePrivilegeName
-- Returns:
- this for chaining
-
assignField
field of privilege- Parameters:
theFieldId
-- Returns:
- this for chaining
-
assignFieldId
field of privilege- Parameters:
theFieldId
-- Returns:
- this for chaining
-
assignFieldName
field of privilege (could be privilege name too)- Parameters:
theFieldName
-- Returns:
- this for chaining
-
assignStem
assign a stem- Parameters:
theStem
-- Returns:
- this for chaining
-
assignStemId
stem id to add to, mutually exclusive with stem name- Parameters:
theStemId
-- Returns:
- this for chaining
-
assignStemName
stem name to add to, mutually exclusive with stem id- Parameters:
theStemName
-- Returns:
- this for chaining
-
assignSubject
subject to add- Parameters:
theSubject
-- Returns:
- this for chaining
-
assignSubjectId
subject id to add, mutually exclusive and preferable to subject identifier- Parameters:
theSubjectId
-- Returns:
- this for chaining
-
assignSubjectIdentifier
subject identifier to add, mutually exclusive and not preferable to subject id- Parameters:
thesubjectIdentifier
-- Returns:
- this for chaining
-
assignSubjectSourceId
subject source id to add- Parameters:
theSubjectSourceId
-- Returns:
- this for chaining
-
hasAssignedPrivilege
public boolean hasAssignedPrivilege()return true if the user has this inherited privilege based on assignment to the user or a group the user is in. The inherited privilege could be assigned on the folder or an ancestor folder.- Returns:
-
hasEffectivePrivilege
public boolean hasEffectivePrivilege()return true if the user has this inherited privilege based on assignment to the user or a group the user is in. The inherited privilege could be assigned on the folder or an ancestor folder. The privilege could be the actual privilege or a privilege that the assigned privilege implies. e.g. if searching for view and the subject has admin, it would return true- Returns:
-
findEffectivePrivileges
return set of effective inherited privileges based on assignment to the user or a group the user is in. The inherited privileges could be assigned on the folder or an ancestor folder. The privileges could be the actual privileges or privileges that the assigned privilege implies. e.g. if the subject has admin, it would include view and other privileges as well.- Returns:
-
findAssignedPrivileges
return set of assigned inherited privileges based on assignment to the user or a group the user is in. The inherited privileges could be assigned on the folder or an ancestor folder.- Returns:
-