io.hawt.system

Class RBACRestrictor

java.lang.Object

io.hawt.system.RBACRestrictor

All Implemented Interfaces:

org.jolokia.restrictor.Restrictor

public class RBACRestrictor
extends Object
implements org.jolokia.restrictor.Restrictor

Jolokia restrictor that protects MBean server invocation inside Jolokia based on RBAC provided by JMXSecurityMBean.

Field Summary

Fields

Modifier and Type	Field and Description
protected org.jolokia.restrictor.Restrictor	delegate
protected RBACMBeanInvoker	mBeanInvoker

Constructor Summary

Constructors

Constructor and Description
RBACRestrictor(org.jolokia.config.Configuration config)

Method Summary

Modifier and Type	Method and Description
protected void	initDelegate(org.jolokia.config.Configuration config)
boolean	isAttributeReadAllowed(ObjectName objectName, String attribute)
boolean	isAttributeWriteAllowed(ObjectName objectName, String attribute)
boolean	isHttpMethodAllowed(org.jolokia.util.HttpMethod method)
boolean	isOperationAllowed(ObjectName objectName, String operation)
boolean	isOriginAllowed(String origin, boolean strictCheck)
boolean	isRemoteAccessAllowed(String... hostOrAddress)
boolean	isTypeAllowed(org.jolokia.util.RequestType type)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

delegate

protected org.jolokia.restrictor.Restrictor delegate

mBeanInvoker

protected RBACMBeanInvoker mBeanInvoker

Constructor Detail

RBACRestrictor

public RBACRestrictor(org.jolokia.config.Configuration config)

Method Detail

initDelegate

protected void initDelegate(org.jolokia.config.Configuration config)

isOperationAllowed

public boolean isOperationAllowed(ObjectName objectName,
                                  String operation)

Specified by:

isOperationAllowed in interface org.jolokia.restrictor.Restrictor

isAttributeReadAllowed

public boolean isAttributeReadAllowed(ObjectName objectName,
                                      String attribute)

Specified by:

isAttributeReadAllowed in interface org.jolokia.restrictor.Restrictor

isAttributeWriteAllowed

public boolean isAttributeWriteAllowed(ObjectName objectName,
                                       String attribute)

Specified by:

isAttributeWriteAllowed in interface org.jolokia.restrictor.Restrictor

isHttpMethodAllowed

public boolean isHttpMethodAllowed(org.jolokia.util.HttpMethod method)

Specified by:

isHttpMethodAllowed in interface org.jolokia.restrictor.Restrictor

isTypeAllowed

public boolean isTypeAllowed(org.jolokia.util.RequestType type)

Specified by:

isTypeAllowed in interface org.jolokia.restrictor.Restrictor

isRemoteAccessAllowed

public boolean isRemoteAccessAllowed(String... hostOrAddress)

Specified by:

isRemoteAccessAllowed in interface org.jolokia.restrictor.Restrictor

isOriginAllowed

public boolean isOriginAllowed(String origin,
                               boolean strictCheck)

Specified by:

isOriginAllowed in interface org.jolokia.restrictor.Restrictor