org.jboss.security.acl
Interface ACL

public interface ACL

This interface represents an Access Control List (ACL), a data structure used to protect access to resources. It is composed of entries, where each entry is represented by the ALCEntry class and represents the permissions assigned to a given identity.

When a client attempts to perform an operation on a resource, the ACL associated to the resource is used to verify if the client has enough permissions to perform that operation. In order to do that, the ACLEntry corresponding to the client's identity is retrieved and then the permission set contained in the entry is verified to decide if access should be granted or not.

Author:

Stefan Guilhen

Method Summary

boolean	addEntry(ACLEntry entry) Adds an entry to this ACL.
java.util.Collection<? extends ACLEntry>	getEntries() Obtains the collection of all ACLEntries in this ACL.
org.jboss.security.authorization.Resource	getResource() Obtains a reference to the resource being protected by this ACL.
boolean	isGranted(ACLPermission permission, org.jboss.security.identity.Identity identity) Verify if the given permission is assigned to the specified Identity.
boolean	removeEntry(ACLEntry entry) Removes an entry from this ACL.

Method Detail

addEntry

boolean addEntry(ACLEntry entry)

Adds an entry to this ACL. If the ACL already has an ACLEntry associated to the new entry's identity, then the new entry will not be added.

Parameters:

entry - the ACLEntry to be added.

Returns:

true if the entry was added; false otherwise.

removeEntry

boolean removeEntry(ACLEntry entry)

Removes an entry from this ACL.

Parameters:

entry - the ACLEntry to be removed.

Returns:

true if the entry is removed; false if the entry can't be found in the ACL.

getEntries

java.util.Collection<? extends ACLEntry> getEntries()

Obtains the collection of all ACLEntries in this ACL.

Returns:

a Collection containing all entries in this ACL.

getResource

org.jboss.security.authorization.Resource getResource()

Obtains a reference to the resource being protected by this ACL.

Returns:

a reference to the Resource.

isGranted

boolean isGranted(ACLPermission permission,
                  org.jboss.security.identity.Identity identity)

Verify if the given permission is assigned to the specified Identity.

Parameters:

permission - the ACLPermission to be checked for.

identity - the Identity being verified.

Returns:

true if the specified permission is assigned to the identity; false otherwise.