Package org.apache.jackrabbit.oak.spi.security.authorization.accesscontrol

Interface AccessControlConstants

    • Field Detail

      • REP_NT_NAMES

        static final java.lang.String REP_NT_NAMES
        Name of the optional multivalued access control restriction by node type name. The corresponding restriction type is Type.NAMES.
        Since:
        OAK 1.0
        See Also:
        Constant Field Values

      • REP_PREFIXES

        static final java.lang.String REP_PREFIXES
        Name of the optional multivalued access control restriction which matches by name space prefix. The corresponding restriction type is Type.STRINGS.
        Since:
        OAK 1.0
        See Also:
        Constant Field Values

      • REP_ITEM_NAMES

        static final java.lang.String REP_ITEM_NAMES
        Name of the optional multivalued access control restriction by item name. The corresponding restriction type is Type.NAMES.
        Since:
        OAK 1.3.8
        See Also:
        Constant Field Values

      • REP_CURRENT

        static final java.lang.String REP_CURRENT

        Name of the optional multivalued access control restriction that limits access to a single level i.e. the target node where the access control entry takes effect and optionally all or a subset of it's properties. An empty value array will make this restriction matching the target node only (i.e. equivalent to rep:glob=""). An array of property names will extend the effect of the restriction to properties of the target node that match the specified names. The residual name '*' will match the target node and all it's properties.

        The corresponding restriction type is Type.STRINGS

        Note: due to the support of NodeTypeConstants.RESIDUAL_NAME, which isn't a valid JCR name, this restriction is defined to be of Type.STRINGS instead of Type.NAMES. Like the rep:glob restriction it will therefore not work with expanded JCR names or with remapped namespace prefixes.

        Note: In case of permission evaluation for a path pointing to a non-existing JCR item (see e.g. Session.hasPermission(String, String)) a best-effort attempt is made to determine if the path may point to a property, default being that the path points to a non-existing node.

        Example: 
         rep:current = []                => restriction applies to the target node only
 rep:current = [*]               => restriction applies to the target node and all it's properties
 rep:current = [jcr:primaryType] => restriction applies to the target node and it's property jcr:primaryType
 rep:current = [a, b, prefix:c]  => restriction applies to the target node and it's properties a, b and prefix:c
        Since:
        OAK 1.42.0
        See Also:
        Constant Field Values

      • REP_RESTRICTIONS

        static final java.lang.String REP_RESTRICTIONS
        Since:
        OAK 1.0
        See Also:
        Constant Field Values

      • MIX_REP_ACCESS_CONTROLLABLE

        static final java.lang.String MIX_REP_ACCESS_CONTROLLABLE
        See Also:
        Constant Field Values

      • MIX_REP_REPO_ACCESS_CONTROLLABLE

        static final java.lang.String MIX_REP_REPO_ACCESS_CONTROLLABLE
        See Also:
        Constant Field Values

      • NT_REP_RESTRICTIONS

        static final java.lang.String NT_REP_RESTRICTIONS
        Since:
        OAK 1.0
        See Also:
        Constant Field Values

      • POLICY_NODE_NAMES

        static final java.util.Collection<java.lang.String> POLICY_NODE_NAMES

      • ACE_PROPERTY_NAMES

        static final java.util.Collection<java.lang.String> ACE_PROPERTY_NAMES

      • AC_NODETYPE_NAMES

        static final java.util.Collection<java.lang.String> AC_NODETYPE_NAMES

      • PARAM_RESTRICTION_PROVIDER

        static final java.lang.String PARAM_RESTRICTION_PROVIDER
        See Also:
        Constant Field Values