net.tirasa.adsddl.ntsd.dacl

Class AdRoleAssertion

java.lang.Object

net.tirasa.adsddl.ntsd.dacl.AdRoleAssertion

Direct Known Subclasses:

DomainJoinRoleAssertion

public abstract class AdRoleAssertion
extends java.lang.Object

An AD role assertion represents a claim that a given principal meets all the criteria in the given AceAssertion list. These criteria are considered the requirements of a given 'role', e.g., the ability to join computers to a domain an unlimited number of times can be considered to be a role. An instance of this class can be passed to a DACLAssertor to actually perform the assertion against the DACL (Discretionary Access Control List) of an AD object.

Constructor Summary

Constructors

Constructor and Description
AdRoleAssertion()
AdRoleAssertion(java.util.List<AceAssertion> assertions, SID principal, boolean isGroup, java.util.List<SID> tokenGroups) AdRoleAssertion constructor.

Method Summary

Modifier and Type	Method and Description
java.util.List<AceAssertion>	getAssertions() Gets the list of assertions
SID	getPrincipal() Gets the SID of the principal
java.util.List<SID>	getTokenGroups() Gets the token group SIDs of the principal, may be null
boolean	isGroup() Whether the principal is a group

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

AdRoleAssertion

public AdRoleAssertion()

AdRoleAssertion

public AdRoleAssertion(java.util.List<AceAssertion> assertions,
                       SID principal,
                       boolean isGroup,
                       java.util.List<SID> tokenGroups)

AdRoleAssertion constructor.

Parameters:

assertions - list of AceAssertions which make up the claims

principal - the user or group SID which is to be asserted

isGroup - whether the principal is a group

tokenGroups - the token group SIDs of the principal (if it is a user)

Method Detail

getAssertions

public java.util.List<AceAssertion> getAssertions()

Gets the list of assertions

Returns:

assertions

getPrincipal

public SID getPrincipal()

Gets the SID of the principal

Returns:

principal SID

isGroup

public boolean isGroup()

Whether the principal is a group

Returns:

true if principal is a group, false if a user

getTokenGroups

public java.util.List<SID> getTokenGroups()

Gets the token group SIDs of the principal, may be null

Returns:

SIDs of the principal's token groups, if principal is a user