Class AbstractBatchAccessChecker
- All Implemented Interfaces:
BatchAccessChecker
-
Field Summary
Fields -
Constructor Summary
Constructors -
Method Summary
Modifier and TypeMethodDescriptioncanAssignRefToHash(org.projectnessie.versioned.NamedRef ref) Checks whether the given role/principal is allowed to assign the givenBranch/Tagto a commit id.canCommitChangeAgainstReference(org.projectnessie.versioned.NamedRef ref) Checks whether the given role/principal is allowed to commit changes against the givenBranch/TagorDetached.canCreateEntity(org.projectnessie.versioned.NamedRef ref, org.projectnessie.model.IdentifiedContentKey identifiedKey) Deprecated.canCreateReference(org.projectnessie.versioned.NamedRef ref) Checks whether the given role/principal is allowed to create aBranch/Tag.canDeleteEntity(org.projectnessie.versioned.NamedRef ref, org.projectnessie.model.IdentifiedContentKey identifiedKey) Checks whether the given role/principal is allowed to delete an entity value as defined by theContentKeyfor the givenBranch, called for aOperation.Deleteoperation in a commit.canDeleteReference(org.projectnessie.versioned.NamedRef ref) Checks whether the given role/principal is allowed to delete aBranch/Tag.canListCommitLog(org.projectnessie.versioned.NamedRef ref) Checks whether the given role/principal is allowed to list the commit log for the givenBranch/TagorDetached.canReadContentKey(org.projectnessie.versioned.NamedRef ref, org.projectnessie.model.IdentifiedContentKey identifiedKey) Called for every content-key about to be returned from, for example, a "get commit log" operation.canReadEntityValue(org.projectnessie.versioned.NamedRef ref, org.projectnessie.model.IdentifiedContentKey identifiedKey) Checks whether the given role/principal is allowed to read an entity value as defined by theContentKeyfor the givenBranch/TagorDetached.canReadEntries(org.projectnessie.versioned.NamedRef ref) Checks whether the given role/principal is allowed to read entries content for the givenBranch/TagorDetached.canReadRepositoryConfig(org.projectnessie.model.RepositoryConfig.Type repositoryConfigType) canUpdateEntity(org.projectnessie.versioned.NamedRef ref, org.projectnessie.model.IdentifiedContentKey identifiedKey) Deprecated.canUpdateRepositoryConfig(org.projectnessie.model.RepositoryConfig.Type repositoryConfigType) canViewReference(org.projectnessie.versioned.NamedRef ref) Checks whether the given role/principal is allowed to view/list the givenBranch/TagorDetached.protected Collection<Check>Methods inherited from class java.lang.Object
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, waitMethods inherited from interface org.projectnessie.services.authz.BatchAccessChecker
check, checkAndThrow
-
Field Details
-
NOOP_ACCESS_CHECKER
-
-
Constructor Details
-
AbstractBatchAccessChecker
public AbstractBatchAccessChecker()
-
-
Method Details
-
getChecks
-
can
- Specified by:
canin interfaceBatchAccessChecker
-
canViewReference
Description copied from interface:BatchAccessCheckerChecks whether the given role/principal is allowed to view/list the givenBranch/TagorDetached.- Specified by:
canViewReferencein interfaceBatchAccessChecker- Parameters:
ref- TheNamedRefto check
-
canCreateReference
Description copied from interface:BatchAccessCheckerChecks whether the given role/principal is allowed to create aBranch/Tag.- Specified by:
canCreateReferencein interfaceBatchAccessChecker- Parameters:
ref- TheNamedRefto check
-
canAssignRefToHash
Description copied from interface:BatchAccessCheckerChecks whether the given role/principal is allowed to assign the givenBranch/Tagto a commit id.Adds an implicit
BatchAccessChecker.canViewReference(NamedRef).- Specified by:
canAssignRefToHashin interfaceBatchAccessChecker- Parameters:
ref- TheNamedRefto check not granted.
-
canDeleteReference
Description copied from interface:BatchAccessCheckerChecks whether the given role/principal is allowed to delete aBranch/Tag.- Specified by:
canDeleteReferencein interfaceBatchAccessChecker- Parameters:
ref- TheNamedRefto check
-
canReadEntries
Description copied from interface:BatchAccessCheckerChecks whether the given role/principal is allowed to read entries content for the givenBranch/TagorDetached.Adds an implicit
BatchAccessChecker.canViewReference(NamedRef).- Specified by:
canReadEntriesin interfaceBatchAccessChecker- Parameters:
ref- TheNamedRefto check
-
canReadContentKey
public BatchAccessChecker canReadContentKey(org.projectnessie.versioned.NamedRef ref, org.projectnessie.model.IdentifiedContentKey identifiedKey) Description copied from interface:BatchAccessCheckerCalled for every content-key about to be returned from, for example, a "get commit log" operation.This is an additional check for each content-key. "Early" checks, that run before generating the result, like
BatchAccessChecker.canReadEntries(NamedRef)orBatchAccessChecker.canListCommitLog(NamedRef), run as well.Adds an implicit
BatchAccessChecker.canViewReference(NamedRef).- Specified by:
canReadContentKeyin interfaceBatchAccessChecker- Parameters:
ref- current referenceidentifiedKey- content key / ID / type to check
-
canListCommitLog
Description copied from interface:BatchAccessCheckerChecks whether the given role/principal is allowed to list the commit log for the givenBranch/TagorDetached.Adds an implicit
BatchAccessChecker.canViewReference(NamedRef).- Specified by:
canListCommitLogin interfaceBatchAccessChecker- Parameters:
ref- TheNamedRefto check
-
canCommitChangeAgainstReference
Description copied from interface:BatchAccessCheckerChecks whether the given role/principal is allowed to commit changes against the givenBranch/TagorDetached.Adds an implicit
BatchAccessChecker.canViewReference(NamedRef).- Specified by:
canCommitChangeAgainstReferencein interfaceBatchAccessChecker- Parameters:
ref- TheNamedRefto check
-
canReadEntityValue
public BatchAccessChecker canReadEntityValue(org.projectnessie.versioned.NamedRef ref, org.projectnessie.model.IdentifiedContentKey identifiedKey) Description copied from interface:BatchAccessCheckerChecks whether the given role/principal is allowed to read an entity value as defined by theContentKeyfor the givenBranch/TagorDetached.Adds an implicit
BatchAccessChecker.canViewReference(NamedRef).- Specified by:
canReadEntityValuein interfaceBatchAccessChecker- Parameters:
ref- TheNamedRefto checkidentifiedKey- content key / ID / type to check
-
canCreateEntity
@Deprecated public BatchAccessChecker canCreateEntity(org.projectnessie.versioned.NamedRef ref, org.projectnessie.model.IdentifiedContentKey identifiedKey) Deprecated.Description copied from interface:BatchAccessCheckerChecks whether the given role/principal is allowed to create a new entity value as defined by theIdentifiedContentKeyfor the givenBranch, called for aOperation.Putoperation in a commit.Adds an implicit
BatchAccessChecker.canViewReference(NamedRef).- Specified by:
canCreateEntityin interfaceBatchAccessChecker- Parameters:
ref- TheNamedRefto checkidentifiedKey- content key / ID / type to check
-
canUpdateEntity
@Deprecated public BatchAccessChecker canUpdateEntity(org.projectnessie.versioned.NamedRef ref, org.projectnessie.model.IdentifiedContentKey identifiedKey) Deprecated.Description copied from interface:BatchAccessCheckerChecks whether the given role/principal is allowed to update an existing entity value as defined by theIdentifiedContentKeyfor the givenBranch, called for aOperation.Putoperation in a commit.Adds an implicit
BatchAccessChecker.canViewReference(NamedRef).- Specified by:
canUpdateEntityin interfaceBatchAccessChecker- Parameters:
ref- TheNamedRefto checkidentifiedKey- content key / ID / type to check
-
canDeleteEntity
public BatchAccessChecker canDeleteEntity(org.projectnessie.versioned.NamedRef ref, org.projectnessie.model.IdentifiedContentKey identifiedKey) Description copied from interface:BatchAccessCheckerChecks whether the given role/principal is allowed to delete an entity value as defined by theContentKeyfor the givenBranch, called for aOperation.Deleteoperation in a commit.Adds an implicit
BatchAccessChecker.canViewReference(NamedRef).- Specified by:
canDeleteEntityin interfaceBatchAccessChecker- Parameters:
ref- TheNamedRefto checkidentifiedKey- content key / ID / type to check
-
canReadRepositoryConfig
public BatchAccessChecker canReadRepositoryConfig(org.projectnessie.model.RepositoryConfig.Type repositoryConfigType) - Specified by:
canReadRepositoryConfigin interfaceBatchAccessChecker
-
canUpdateRepositoryConfig
public BatchAccessChecker canUpdateRepositoryConfig(org.projectnessie.model.RepositoryConfig.Type repositoryConfigType) - Specified by:
canUpdateRepositoryConfigin interfaceBatchAccessChecker
-