org.fabric3.spi.security

Interface AuthorizationService

public interface AuthorizationService

Implemented by security providers that perform authorization.

Method Summary

Modifier and Type	Method and Description
void	checkHasRole(org.fabric3.api.SecuritySubject subject, java.util.List<java.lang.String> roles) Determines if the subject has one of the roles in the collection of roles.
void	checkPermission(org.fabric3.api.SecuritySubject subject, java.lang.String role) Determines if the subject has a permission.
void	checkPermissions(org.fabric3.api.SecuritySubject subject, java.util.Collection<java.lang.String> roles) Determines if the subject has the collection of permission.
void	checkRole(org.fabric3.api.SecuritySubject subject, java.lang.String role) Determines if the subject has a role.
void	checkRoles(org.fabric3.api.SecuritySubject subject, java.util.Collection<java.lang.String> roles) Determines if the subject has the collection of roles.

Method Detail

checkRole

void checkRole(org.fabric3.api.SecuritySubject subject,
               java.lang.String role)
        throws AuthorizationException

Determines if the subject has a role.

Parameters:

subject - the subject

role - the role

Throws:

AuthorizationException - if the user does not have the role or there is a general error performing authorization. If the user does not have the role, NotAuthorizedException will be thrown.

checkRoles

void checkRoles(org.fabric3.api.SecuritySubject subject,
                java.util.Collection<java.lang.String> roles)
         throws AuthorizationException

Determines if the subject has the collection of roles.

Parameters:

subject - the subject

roles - the roles

Throws:

AuthorizationException - if the user does not have the roles or there is a general error performing authorization. If the user does not have a role, NotAuthorizedException will be thrown.

checkHasRole

void checkHasRole(org.fabric3.api.SecuritySubject subject,
                  java.util.List<java.lang.String> roles)

Determines if the subject has one of the roles in the collection of roles.

Parameters:

subject - the subject

roles - the roles

Throws:

AuthorizationException - if the user does not have a roles or there is a general error performing authorization. If the user does not have at least one role, NotAuthorizedException will be thrown.

checkPermission

void checkPermission(org.fabric3.api.SecuritySubject subject,
                     java.lang.String role)
              throws AuthorizationException

Determines if the subject has a permission.

Parameters:

subject - the subject

role - the role

Throws:

AuthorizationException - if the user does not have the permission or there is a general error performing authorization. If the user does not have the permission, NotAuthorizedException will be thrown.

checkPermissions

void checkPermissions(org.fabric3.api.SecuritySubject subject,
                      java.util.Collection<java.lang.String> roles)
               throws AuthorizationException

Determines if the subject has the collection of permission.

Parameters:

subject - the subject

roles - the roles

Throws:

AuthorizationException - if the user does not have the permissions or there is a general error performing authorization. If the user does not have a permission, NotAuthorizedException will be thrown.