org.apache.jena.fuseki.access

Class DataAccessCtl

java.lang.Object

org.apache.jena.fuseki.access.DataAccessCtl

public class DataAccessCtl
extends Object

A library of operations related to data access security for Fuseki

Field Summary

Fields

Modifier and Type	Field and Description
static Function<HttpAction,String>	paramUserServlet Get the user from ?user query string parameter.
static Function<HttpAction,String>	requestUserServlet Get the user from the servlet context via HttpServletRequest.getRemoteUser()
static Symbol	symAuthorizationService Symbol for the AuthorizationService.

Constructor Summary

Constructors

Constructor and Description
DataAccessCtl()

Method Summary

Modifier and Type	Method and Description
static Dataset	controlledDataset(Dataset dsBase, AuthorizationService reg) Return a DatasetGraph with added data access control.
static DatasetGraph	controlledDataset(DatasetGraph dsgBase, AuthorizationService reg) Return a DatasetGraph with added data access control.
static DatasetGraph	filteredDataset(DatasetGraph dsg, SecurityContext sCxt) Return a read-only DatasetGraphFilteredView that fulfils the SecurityContext.
static boolean	isAccessControlled(DatasetGraph dsg) Return whether a DatasetGraph has access control, either because it is wrapped in DatasetGraphAccessControl or because it has the context settings.

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

symAuthorizationService

public static final Symbol symAuthorizationService

Symbol for the AuthorizationService. This is an alternative to DatasetGraphAccessControl.

See Also:

isAccessControlled(DatasetGraph)

requestUserServlet

public static final Function<HttpAction,String> requestUserServlet

Get the user from the servlet context via HttpServletRequest.getRemoteUser()

paramUserServlet

public static final Function<HttpAction,String> paramUserServlet

Get the user from ?user query string parameter. Use carefully; for situations where the user name has been authenticated already and is being passed on securely. Also for testing.

Constructor Detail

DataAccessCtl

public DataAccessCtl()

Method Detail

controlledDataset

public static Dataset controlledDataset(Dataset dsBase,
                                        AuthorizationService reg)

Return a DatasetGraph with added data access control. Use of the original DatasetGraph is not controlled.

controlledDataset

public static DatasetGraph controlledDataset(DatasetGraph dsgBase,
                                             AuthorizationService reg)

Return a DatasetGraph with added data access control. Use of the original DatasetGraph is not controlled.

isAccessControlled

public static boolean isAccessControlled(DatasetGraph dsg)

Return whether a DatasetGraph has access control, either because it is wrapped in DatasetGraphAccessControl or because it has the context settings.

filteredDataset

public static DatasetGraph filteredDataset(DatasetGraph dsg,
                                           SecurityContext sCxt)

Return a read-only DatasetGraphFilteredView that fulfils the SecurityContext. See also SecurityContext.filterTDB(org.apache.jena.sparql.core.DatasetGraph, org.apache.jena.query.QueryExecution) which is more efficient. This code creates a general solution.