io.ballerina.messaging.broker.auth.authorization

Interface MandatoryAccessController

All Known Implementing Classes:

DefaultMacHandler, NoOpMacHandler

public interface MandatoryAccessController

Used to manage static resource permissions.

Method Summary

Modifier and Type	Method and Description
boolean	authorize(String scopeName, Set<String> userGroups) Authorize user with given scope key.
void	initialize(io.ballerina.messaging.broker.common.StartupContext startupContext, UserStore userStore, Map<String,String> properties) Initialize authorization controller based on given auth configuration, user store.

Method Detail

initialize

void initialize(io.ballerina.messaging.broker.common.StartupContext startupContext,
                UserStore userStore,
                Map<String,String> properties)
         throws Exception

Initialize authorization controller based on given auth configuration, user store.

Parameters:

startupContext - the startup context provides registered services in broker

userStore - contains the user ID to user group mapping

properties - properties

Throws:

Exception

authorize

boolean authorize(String scopeName,
                  Set<String> userGroups)
           throws AuthNotFoundException

Authorize user with given scope key.

Parameters:

scopeName - a scope key

userGroups - set of user groups to check

Returns:

if authorised or not

Throws:

AuthNotFoundException - throws if scope is not found