|
||||||||||
PREV CLASS NEXT CLASS | FRAMES NO FRAMES | |||||||||
SUMMARY: NESTED | FIELD | CONSTR | METHOD | DETAIL: FIELD | CONSTR | METHOD |
public interface IAuthorizationStrategy
Authorization strategies specify aspect-like constraints on significant actions taken by the framework in a given application. These constraints are guaranteed by the framework to be applied consistently throughout. Violations will result in a security action directed by the strategy, such as the throwing of an AuthorizationException or the filtering out of security-sensitive information.
Field Summary | |
---|---|
static IAuthorizationStrategy |
ALLOW_ALL
Implementation of IAuthorizationStrategy that allows everything. |
Method Summary | ||
---|---|---|
boolean |
isActionAuthorized(Component component,
Action action)
Gets whether the given action is permitted. |
|
|
isInstantiationAuthorized(Class<T> componentClass)
Checks whether an instance of the given component class may be created. |
Field Detail |
---|
static final IAuthorizationStrategy ALLOW_ALL
IAuthorizationStrategy
that allows everything.
Method Detail |
---|
<T extends IRequestableComponent> boolean isInstantiationAuthorized(Class<T> componentClass)
IUnauthorizedComponentInstantiationListener
that is configured in
the security settings
will be called. The default implementation of
that listener throws a UnauthorizedInstantiationException
.
If you wish to implement a strategy that authenticates users which cannot access a given Page
(or other Component), you can simply throw a
RestartResponseAtInterceptPageException
in your implementation of
this method.
T
- componentClass
- The component class to check
boolean isActionAuthorized(Component component, Action action)
component
- The component to be acted uponaction
- The action to authorize on the component
AuthorizationException
- Can be thrown by implementation if action is unauthorizedComponent.ENABLE
,
Component.RENDER
|
||||||||||
PREV CLASS NEXT CLASS | FRAMES NO FRAMES | |||||||||
SUMMARY: NESTED | FIELD | CONSTR | METHOD | DETAIL: FIELD | CONSTR | METHOD |