org.apache.jackrabbit.oak.spi.security.authorization.cug.impl

Class CugConfiguration

java.lang.Object

org.apache.jackrabbit.oak.spi.security.SecurityConfiguration.Default

org.apache.jackrabbit.oak.spi.security.ConfigurationBase

org.apache.jackrabbit.oak.spi.security.authorization.cug.impl.CugConfiguration

All Implemented Interfaces:

org.apache.jackrabbit.oak.spi.security.authorization.AuthorizationConfiguration, org.apache.jackrabbit.oak.spi.security.SecurityConfiguration

@Service(value={org.apache.jackrabbit.oak.spi.security.authorization.AuthorizationConfiguration.class,org.apache.jackrabbit.oak.spi.security.SecurityConfiguration.class})
@Properties(value={@Property(name="cugSupportedPaths",label="Supported Paths",description="Paths under which CUGs can be created and will be evaluated.",cardinality=2147483647),@Property(name="cugEnabled",label="CUG Enabled",description="Flag to enable the evaluation of the configured CUG policies.",boolValue=false),@Property(name="configurationRanking",label="Ranking",description="Ranking of this configuration in a setup with multiple authorization configurations.",intValue=200)})
public class CugConfiguration
extends org.apache.jackrabbit.oak.spi.security.ConfigurationBase
implements org.apache.jackrabbit.oak.spi.security.authorization.AuthorizationConfiguration

Nested Class Summary

Nested classes/interfaces inherited from interface org.apache.jackrabbit.oak.spi.security.SecurityConfiguration

org.apache.jackrabbit.oak.spi.security.SecurityConfiguration.Default

Field Summary

Fields

Modifier and Type	Field and Description
static String	MIX_REP_CUG_MIXIN The name of the mixin type that defines the CUG policy node.
static String	NT_REP_CUG_POLICY The primary node type name of the CUG policy node.
static String	PARAM_CUG_ENABLED Name of the configuration option that specifies if CUG content must be respected for permission evaluation.
static String	PARAM_CUG_SUPPORTED_PATHS Name of the configuration option that specifies the subtrees that allow to define closed user groups.
static String	REP_CUG_POLICY The name of the CUG policy node.
static String	REP_PRINCIPAL_NAMES The name of the property that stores the principal names that are allowed to access the restricted area defined by the CUG (closed user group).

Fields inherited from interface org.apache.jackrabbit.oak.spi.security.authorization.AuthorizationConfiguration

NAME

Constructor Summary

Constructors

Constructor and Description
CugConfiguration()
CugConfiguration(org.apache.jackrabbit.oak.spi.security.SecurityProvider securityProvider)

Method Summary

Methods

Modifier and Type	Method and Description
protected void	activate()
AccessControlManager	getAccessControlManager(org.apache.jackrabbit.oak.api.Root root, org.apache.jackrabbit.oak.namepath.NamePathMapper namePathMapper)
org.apache.jackrabbit.oak.spi.security.Context	getContext()
String	getName()
org.apache.jackrabbit.oak.spi.security.authorization.permission.PermissionProvider	getPermissionProvider(org.apache.jackrabbit.oak.api.Root root, String workspaceName, Set<Principal> principals)
List<org.apache.jackrabbit.oak.spi.xml.ProtectedItemImporter>	getProtectedItemImporters()
org.apache.jackrabbit.oak.spi.lifecycle.RepositoryInitializer	getRepositoryInitializer()
org.apache.jackrabbit.oak.spi.security.authorization.restriction.RestrictionProvider	getRestrictionProvider()
List<? extends org.apache.jackrabbit.oak.spi.commit.ValidatorProvider>	getValidators(String workspaceName, Set<Principal> principals, org.apache.jackrabbit.oak.spi.commit.MoveTracker moveTracker)

Methods inherited from class org.apache.jackrabbit.oak.spi.security.ConfigurationBase

getParameters, getSecurityProvider, setParameters, setSecurityProvider

Methods inherited from class org.apache.jackrabbit.oak.spi.security.SecurityConfiguration.Default

getCommitHooks, getWorkspaceInitializer

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.apache.jackrabbit.oak.spi.security.SecurityConfiguration

getCommitHooks, getParameters, getWorkspaceInitializer

Field Detail

MIX_REP_CUG_MIXIN

public static final String MIX_REP_CUG_MIXIN

The name of the mixin type that defines the CUG policy node.

See Also:

Constant Field Values

NT_REP_CUG_POLICY

public static final String NT_REP_CUG_POLICY

The primary node type name of the CUG policy node.

See Also:

Constant Field Values

REP_CUG_POLICY

public static final String REP_CUG_POLICY

The name of the CUG policy node.

See Also:

Constant Field Values

REP_PRINCIPAL_NAMES

public static final String REP_PRINCIPAL_NAMES

The name of the property that stores the principal names that are allowed to access the restricted area defined by the CUG (closed user group).

See Also:

Constant Field Values

PARAM_CUG_SUPPORTED_PATHS

public static final String PARAM_CUG_SUPPORTED_PATHS

Name of the configuration option that specifies the subtrees that allow to define closed user groups.

• Value Type: String
• Default: -
• Multiple: true

See Also:

Constant Field Values

PARAM_CUG_ENABLED

public static final String PARAM_CUG_ENABLED

Name of the configuration option that specifies if CUG content must be respected for permission evaluation.

• Value Type: boolean
• Default: false
• Multiple: false

See Also:

Constant Field Values

Constructor Detail

CugConfiguration

public CugConfiguration()

CugConfiguration

public CugConfiguration(@Nonnull
                org.apache.jackrabbit.oak.spi.security.SecurityProvider securityProvider)

Method Detail

getAccessControlManager

@Nonnull
public AccessControlManager getAccessControlManager(@Nonnull
                                                   org.apache.jackrabbit.oak.api.Root root,
                                                   @Nonnull
                                                   org.apache.jackrabbit.oak.namepath.NamePathMapper namePathMapper)

Specified by:

getAccessControlManager in interface org.apache.jackrabbit.oak.spi.security.authorization.AuthorizationConfiguration

getRestrictionProvider

@Nonnull
public org.apache.jackrabbit.oak.spi.security.authorization.restriction.RestrictionProvider getRestrictionProvider()

Specified by:

getRestrictionProvider in interface org.apache.jackrabbit.oak.spi.security.authorization.AuthorizationConfiguration

getPermissionProvider

@Nonnull
public org.apache.jackrabbit.oak.spi.security.authorization.permission.PermissionProvider getPermissionProvider(@Nonnull
                                                                                                               org.apache.jackrabbit.oak.api.Root root,
                                                                                                               @Nonnull
                                                                                                               String workspaceName,
                                                                                                               @Nonnull
                                                                                                               Set<Principal> principals)

Specified by:

getPermissionProvider in interface org.apache.jackrabbit.oak.spi.security.authorization.AuthorizationConfiguration

getName

@Nonnull
public String getName()

Specified by:

getName in interface org.apache.jackrabbit.oak.spi.security.SecurityConfiguration

Overrides:

getName in class org.apache.jackrabbit.oak.spi.security.SecurityConfiguration.Default

getRepositoryInitializer

@Nonnull
public org.apache.jackrabbit.oak.spi.lifecycle.RepositoryInitializer getRepositoryInitializer()

Specified by:

getRepositoryInitializer in interface org.apache.jackrabbit.oak.spi.security.SecurityConfiguration

Overrides:

getRepositoryInitializer in class org.apache.jackrabbit.oak.spi.security.SecurityConfiguration.Default

getValidators

@Nonnull
public List<? extends org.apache.jackrabbit.oak.spi.commit.ValidatorProvider> getValidators(@Nonnull
                                                                                           String workspaceName,
                                                                                           @Nonnull
                                                                                           Set<Principal> principals,
                                                                                           @Nonnull
                                                                                           org.apache.jackrabbit.oak.spi.commit.MoveTracker moveTracker)

Specified by:

getValidators in interface org.apache.jackrabbit.oak.spi.security.SecurityConfiguration

Overrides:

getValidators in class org.apache.jackrabbit.oak.spi.security.SecurityConfiguration.Default

getProtectedItemImporters

@Nonnull
public List<org.apache.jackrabbit.oak.spi.xml.ProtectedItemImporter> getProtectedItemImporters()

Specified by:

getProtectedItemImporters in interface org.apache.jackrabbit.oak.spi.security.SecurityConfiguration

Overrides:

getProtectedItemImporters in class org.apache.jackrabbit.oak.spi.security.SecurityConfiguration.Default

getContext

@Nonnull
public org.apache.jackrabbit.oak.spi.security.Context getContext()

Specified by:

getContext in interface org.apache.jackrabbit.oak.spi.security.SecurityConfiguration

Overrides:

getContext in class org.apache.jackrabbit.oak.spi.security.SecurityConfiguration.Default

activate

@Activate
protected void activate()
                 throws IOException,
                        org.apache.jackrabbit.oak.api.CommitFailedException,
                        PrivilegedActionException,
                        RepositoryException

Throws:

IOException

org.apache.jackrabbit.oak.api.CommitFailedException

PrivilegedActionException

RepositoryException