com.sun.enterprise.security.ee.audit

Class AppServerAuditManager

java.lang.Object

com.sun.enterprise.security.audit.BaseAuditManager<AuditModule>

com.sun.enterprise.security.ee.audit.AppServerAuditManager

All Implemented Interfaces:

AuditManager

@Service
 @Singleton
 @Rank(value=20)
public final class AppServerAuditManager
extends BaseAuditManager<AuditModule>

An EE-specific implementation of the audit manager.

This class delegates the nucleus-based work of handling server start-up and shutdown and user authentication to its superclass, adding only the work specific to EE auditing here.

Author:

Harpreet Singh, Shing Wai Chan, tjquinn

Field Summary

Fields inherited from class com.sun.enterprise.security.audit.BaseAuditManager

auditOn, typedModules

Constructor Summary

Constructors

Constructor and Description
AppServerAuditManager()

Method Summary

Modifier and Type	Method and Description
BaseAuditModule	addAuditModule(String name, String classname, Properties props) Add the given audit module to the list of loaded audit module.
void	ejbAsWebServiceInvocation(String endpoint, boolean validRequest) This method is called for the web service calls with MLS set and the endpoints deployed as servlets
void	ejbInvocation(String user, String ejb, String method, boolean success) logs the ejb authorization call for all ejb modules
BaseAuditModule	removeAuditModule(String name) Remove the audit module of given name from the loaded list.
void	webInvocation(String user, javax.servlet.http.HttpServletRequest request, String type, boolean success) logs the web authorization call for all loaded modules
void	webServiceInvocation(String uri, String endpoint, boolean validRequest) This method is called for the web service calls with MLS set and the endpoints deployed as servlets

Methods inherited from class com.sun.enterprise.security.audit.BaseAuditManager

authentication, getLocalStrings, getLogger, instances, isAuditOn, loadAuditModules, moduleName, serverShutdown, serverStarted, setAuditOn

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

AppServerAuditManager

public AppServerAuditManager()

Method Detail

addAuditModule

public BaseAuditModule addAuditModule(String name,
                                      String classname,
                                      Properties props)
                               throws Exception

Description copied from class: BaseAuditManager

Add the given audit module to the list of loaded audit module. Adding the same name twice will override previous one.

Overrides:

addAuditModule in class BaseAuditManager<AuditModule>

Parameters:

name - of auditModule

Throws:

Exception

removeAuditModule

public BaseAuditModule removeAuditModule(String name)

Description copied from class: BaseAuditManager

Remove the audit module of given name from the loaded list.

Overrides:

removeAuditModule in class BaseAuditManager<AuditModule>

Parameters:

name - of auditModule

webInvocation

public void webInvocation(String user,
                          javax.servlet.http.HttpServletRequest request,
                          String type,
                          boolean success)

logs the web authorization call for all loaded modules

See Also:

com.sun.appserv.security.AuditModule.webInvocation

ejbInvocation

public void ejbInvocation(String user,
                          String ejb,
                          String method,
                          boolean success)

logs the ejb authorization call for all ejb modules

See Also:

com.sun.appserv.security.AuditModule.ejbInvocation

webServiceInvocation

public void webServiceInvocation(String uri,
                                 String endpoint,
                                 boolean validRequest)

This method is called for the web service calls with MLS set and the endpoints deployed as servlets

See Also:

com.sun.appserv.security.AuditModule.webServiceInvocation

ejbAsWebServiceInvocation

public void ejbAsWebServiceInvocation(String endpoint,
                                      boolean validRequest)

This method is called for the web service calls with MLS set and the endpoints deployed as servlets

See Also:

com.sun.appserv.security.AuditModule.webServiceInvocation