org.apache.jena.fuseki.access

Interface SecurityContext

All Known Implementing Classes:

SecurityContextAllowAll, SecurityContextAllowNamedGraphs, SecurityContextAllowNone, SecurityContextView

public interface SecurityContext

A SecurityContext is the things actor (user, role) is allowed to do. Currently version: the set of graphs, by graph name, they can access. It can be inverted into a "deny" policy with Predicate.negate().

Field Summary

Fields

Modifier and Type	Field and Description
static SecurityContext	ALL
static Node	allGraphs
static Node	allGraphsStr
static Node	allNamedGraphs
static Node	allNamedGraphsStr
static SecurityContext	NONE

Method Summary

Modifier and Type	Method and Description
static SecurityContext	ALL_NG(DatasetGraph dsg)
QueryExecution	createQueryExecution(Query query, DatasetGraph dsg)
default QueryExecution	createQueryExecution(String queryString, DatasetGraph dsg)
default void	filterTDB(DatasetGraph dsg, QueryExecution qExec) Apply a filter suitable for the TDB-backed DatasetGraph, to the Context of the QueryExecution.
Predicate<Quad>	predicateQuad() Quad filter to reflect the security policy of this SecurityContext.
boolean	visableDefaultGraph()
default Collection<String>	visibleGraphNames() Collection of visible graph URI names.
Collection<Node>	visibleGraphs() Collection of visible graph names.

Field Detail

NONE

static final SecurityContext NONE

ALL

static final SecurityContext ALL

allGraphs

static final Node allGraphs

allNamedGraphs

static final Node allNamedGraphs

allNamedGraphsStr

static final Node allNamedGraphsStr

allGraphsStr

static final Node allGraphsStr

Method Detail

ALL_NG

static SecurityContext ALL_NG(DatasetGraph dsg)

visibleGraphs

Collection<Node> visibleGraphs()

Collection of visible graph names. This method return null for null for "all" to avoid needing to calculate the current set of named graph names.

visibleGraphNames

default Collection<String> visibleGraphNames()

Collection of visible graph URI names. This method return null for null for "all" to avoid needing to calculate the current set of named graph names.

visableDefaultGraph

boolean visableDefaultGraph()

createQueryExecution

default QueryExecution createQueryExecution(String queryString,
                                            DatasetGraph dsg)

createQueryExecution

QueryExecution createQueryExecution(Query query,
                                    DatasetGraph dsg)

predicateQuad

Predicate<Quad> predicateQuad()

Quad filter to reflect the security policy of this SecurityContext. It is better to call createQueryExecution(Query, DatasetGraph) which may be more efficient.

filterTDB

default void filterTDB(DatasetGraph dsg,
                       QueryExecution qExec)

Apply a filter suitable for the TDB-backed DatasetGraph, to the Context of the QueryExecution. This does not modify the DatasetGraph. Throws IllegalArgumentException if DatasetGraph is not a TDB1 or TDB2 backed dataset. May throw UnsupportedOperationException.