org.dmd.dmp.server.servlet.base.interfaces

Interface SecurityManagerIF

All Known Implementing Classes:

BasicSecurityPlugin, SecurityPlugin

public interface SecurityManagerIF

The SecurityManagerIF interface defines an object that can perform authentication of user connection attempts via the LoginRequest, can allow for termination of a session via the LogoutRequest and can verify that any other request is allowable for a given user.

The SecurityManager implementation is usually the manager of session information associated with authenticated users as well.

Method Summary

Modifier and Type	Method and Description
SessionRI	getSession(org.dmd.dmp.server.extended.Request request)
org.dmd.dmp.server.extended.LoginResponse	login(org.dmd.dmp.server.extended.LoginRequest request) This method should be overloaded to perform whatever authentication is required to determine that a user is allowed to connect.
org.dmd.dmp.server.extended.LogoutResponse	logout(org.dmd.dmp.server.extended.LogoutRequest request) Terminates the associated session with the server.
org.dmd.dmp.server.extended.Response	validateSession(org.dmd.dmp.server.extended.Request request) This method should be overloaded to perform validation of the session identifier associated with the request as well as any additional security checks required.

Method Detail

login

org.dmd.dmp.server.extended.LoginResponse login(org.dmd.dmp.server.extended.LoginRequest request)

This method should be overloaded to perform whatever authentication is required to determine that a user is allowed to connect.

Parameters:

request - The login request.

Returns:

A login response that indicates success or failure.

Throws:

org.dmd.dmc.DmcValueException

org.dmd.util.exceptions.ResultException

logout

org.dmd.dmp.server.extended.LogoutResponse logout(org.dmd.dmp.server.extended.LogoutRequest request)

Terminates the associated session with the server. Any subsequent transactions that use the related session identifier will be rejected.

Parameters:

request -

Returns:

a logout response.

validateSession

org.dmd.dmp.server.extended.Response validateSession(org.dmd.dmp.server.extended.Request request)
                                              throws org.dmd.dmc.DmcValueException

This method should be overloaded to perform validation of the session identifier associated with the request as well as any additional security checks required. For example, if security groups have been implemented and the associated user doesn't have sufficient privileges to perform an operation, the request should be denied.

Parameters:

request - the request to be checked.

Returns:

An error response if any problems are found and null if everything is okay.

Throws:

org.dmd.dmc.DmcValueException

getSession

SessionRI getSession(org.dmd.dmp.server.extended.Request request)

Parameters:

request - The request for which we require the session handle.

Returns:

the session object associated with a request.