io.ballerina.messaging.broker.auth.authorization.provider

Class MemoryDacHandler

java.lang.Object

io.ballerina.messaging.broker.auth.authorization.DiscretionaryAccessController

io.ballerina.messaging.broker.auth.authorization.provider.MemoryDacHandler

public class MemoryDacHandler
extends DiscretionaryAccessController

This implementation used when there is no auth manager set to the startup context.

Constructor Summary

Constructors

Constructor and Description
MemoryDacHandler()

Method Summary

Modifier and Type	Method and Description
boolean	addGroupsToResource(String resourceType, String resourceName, String action, List<String> groups) Allow given groups to access the given resource.
void	addResource(String resourceType, String resourceName, String owner) Create auth resource.
boolean	changeResourceOwner(String resourceType, String resourceName, String owner) Create auth resource.
boolean	deleteResource(String resourceType, String resourceName) Delete auth resource.
AuthResource	getAuthResource(String resourceType, String resourceName) Get auth resource.
void	initialize(io.ballerina.messaging.broker.common.StartupContext startupContext, UserStore userStore, Map<String,String> properties) Initialize authorization controller based on given auth configuration, user store.
boolean	removeGroupFromResource(String resourceType, String resourceName, String action, String group) Revoke access from the given group.

Methods inherited from class io.ballerina.messaging.broker.auth.authorization.DiscretionaryAccessController

authorize

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

MemoryDacHandler

public MemoryDacHandler()

Method Detail

initialize

public void initialize(io.ballerina.messaging.broker.common.StartupContext startupContext,
                       UserStore userStore,
                       Map<String,String> properties)

Description copied from class: DiscretionaryAccessController

Initialize authorization controller based on given auth configuration, user store.

Specified by:

initialize in class DiscretionaryAccessController

Parameters:

startupContext - the startup context provides registered services in broker

userStore - user store

properties - properties

addResource

public void addResource(String resourceType,
                        String resourceName,
                        String owner)
                 throws AuthServerException

Description copied from class: DiscretionaryAccessController

Create auth resource.

Specified by:

addResource in class DiscretionaryAccessController

Parameters:

resourceType - resource type

resourceName - resource name

owner - resource owner

Throws:

AuthServerException - throws if an server error occurred

deleteResource

public boolean deleteResource(String resourceType,
                              String resourceName)
                       throws AuthServerException

Description copied from class: DiscretionaryAccessController

Delete auth resource.

Specified by:

deleteResource in class DiscretionaryAccessController

Parameters:

resourceType - resource type

resourceName - resource name

Throws:

AuthServerException - throws if an server error occurred

addGroupsToResource

public boolean addGroupsToResource(String resourceType,
                                   String resourceName,
                                   String action,
                                   List<String> groups)
                            throws AuthServerException

Description copied from class: DiscretionaryAccessController

Allow given groups to access the given resource.

Specified by:

addGroupsToResource in class DiscretionaryAccessController

Parameters:

resourceType - resource type

resourceName - resource name

action - action

groups - list of group

Returns:

true if group list add successfully

Throws:

AuthServerException - throws if server error occurred

removeGroupFromResource

public boolean removeGroupFromResource(String resourceType,
                                       String resourceName,
                                       String action,
                                       String group)
                                throws AuthServerException,
                                       AuthNotFoundException

Description copied from class: DiscretionaryAccessController

Revoke access from the given group.

Specified by:

removeGroupFromResource in class DiscretionaryAccessController

Parameters:

resourceType - resource type

resourceName - resource name

action - action

group - group

Throws:

AuthServerException - throws if an server error occurred

AuthNotFoundException - throws if the resource is not found

changeResourceOwner

public boolean changeResourceOwner(String resourceType,
                                   String resourceName,
                                   String owner)
                            throws AuthServerException

Description copied from class: DiscretionaryAccessController

Create auth resource.

Specified by:

changeResourceOwner in class DiscretionaryAccessController

Parameters:

resourceType - resource type

resourceName - resource name

owner - newOwner

Throws:

AuthServerException - throws if an server error occurred

getAuthResource

public AuthResource getAuthResource(String resourceType,
                                    String resourceName)
                             throws AuthServerException

Description copied from class: DiscretionaryAccessController

Get auth resource.

Specified by:

getAuthResource in class DiscretionaryAccessController

Parameters:

resourceType - resource type

resourceName - resource name

Returns:

permission data of the resource

Throws:

AuthServerException - throws if an server error occurred