org.hawkular.accounts.api.internal.impl

Class PersonaServiceImpl

java.lang.Object

org.hawkular.accounts.api.internal.impl.PersonaServiceImpl

All Implemented Interfaces:

PersonaService

@PermitAll
public class PersonaServiceImpl
extends Object
implements PersonaService

Main implementation of the PersonaService. Consumers should get an instance of this via CDI. This class should not be directly instantiated by the consumers.

Author:

Juraci Paixão Kröhling

Constructor Summary

Constructors

Constructor and Description
PersonaServiceImpl()

Method Summary

Modifier and Type	Method and Description
Persona	get(String id) Retrieves an Persona based on a given ID.
Persona	getCurrent() Retrieves the current Persona for this request.
Set<Role>	getEffectiveRolesForResource(Persona persona, Resource resource) Retrieves the effective role of a Persona on a given Resource.
boolean	isAllowedToImpersonate(HawkularUser actual, Persona toImpersonate) Checks if the current user is allowed to impersonate the given persona.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

PersonaServiceImpl

public PersonaServiceImpl()

Method Detail

get

public Persona get(String id)

Description copied from interface: PersonaService

Retrieves an Persona based on a given ID.

Specified by:

get in interface PersonaService

Parameters:

id - the persona's ID

Returns:

the persona or null if there are no persona under this ID.

getEffectiveRolesForResource

public Set<Role> getEffectiveRolesForResource(Persona persona,
                                              Resource resource)

Description copied from interface: PersonaService

Retrieves the effective role of a Persona on a given Resource. If the Persona has no direct roles on the given resource, then the organizations to which this persona is checked. A combined list of roles is returned.

Example 1:
User "jdoe" is "SuperUser" and "Auditor" on "resource1". Both "SuperUser" and "Auditor" are returned.

Example 2:
User "jdoe" is a CIO and belongs to "Operations" and to "Management" and has no direct roles on "resource1".
"Operations" is "Administrator" on "resource1"
"Management" is "SuperUser" on "resource1"
The effective roles for "jdoe" on "resource1" are "SuperUser" and "Administrator".

Specified by:

getEffectiveRolesForResource in interface PersonaService

Parameters:

persona - the persona

resource - the resource

Returns:

the effective roles that the persona has on the resource or null if no permissions are set

getCurrent

@Produces
public Persona getCurrent()

Description copied from interface: PersonaService

Retrieves the current Persona for this request.

Specified by:

getCurrent in interface PersonaService

Returns:

the current persona.

isAllowedToImpersonate

public boolean isAllowedToImpersonate(HawkularUser actual,
                                      Persona toImpersonate)

Description copied from interface: PersonaService

Checks if the current user is allowed to impersonate the given persona. At this moment, this implementation returns only "true", but will soon be changed to the appropriate behavior.

Specified by:

isAllowedToImpersonate in interface PersonaService

Parameters:

actual - the logged in user

toImpersonate - the persona to be impersonated

Returns:

whether or not the current user can impersona the given persona