org.apache.directory.server.core.authz
Class DefaultAuthorizationInterceptor

java.lang.Object
  org.apache.directory.server.core.interceptor.BaseInterceptor
      org.apache.directory.server.core.authz.DefaultAuthorizationInterceptor

All Implemented Interfaces:

Interceptor

public class DefaultAuthorizationInterceptor
extends BaseInterceptor

An Interceptor that controls access to DefaultPartitionNexus. If a user tries to perform any operations that requires permission he or she doesn't have, NoPermissionException will be thrown and therefore the current invocation chain will terminate.

Version:

$Rev: 927146 $, $Date: 2010-03-24 20:39:54 +0200 (Wed, 24 Mar 2010) $

Author:

Apache Directory Project

XBean

Constructor Summary

DefaultAuthorizationInterceptor()
Creates a new instance.

Method Summary

void	delete(NextInterceptor nextInterceptor, DeleteOperationContext opContext)
void	init(DirectoryService directoryService)
EntryFilteringCursor	list(NextInterceptor nextInterceptor, ListOperationContext opContext)
ClonedServerEntry	lookup(NextInterceptor nextInterceptor, LookupOperationContext opContext)
void	modify(NextInterceptor nextInterceptor, ModifyOperationContext opContext) This policy needs to be really tight too because some attributes may take part in giving the user permissions to protected resources.
void	move(NextInterceptor nextInterceptor, MoveOperationContext opContext)
void	moveAndRename(NextInterceptor nextInterceptor, MoveAndRenameOperationContext opContext)
void	rename(NextInterceptor nextInterceptor, RenameOperationContext opContext)
EntryFilteringCursor	search(NextInterceptor nextInterceptor, SearchOperationContext opContext)

Methods inherited from class org.apache.directory.server.core.interceptor.BaseInterceptor

add, addContextPartition, bind, compare, destroy, getContext, getMatchedName, getName, getPrincipal, getRootDSE, getSuffix, hasEntry, listSuffixes, removeContextPartition, unbind

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

DefaultAuthorizationInterceptor

public DefaultAuthorizationInterceptor()

Creates a new instance.

Method Detail

init

public void init(DirectoryService directoryService)
          throws java.lang.Exception

Specified by:

init in interface Interceptor

Overrides:

init in class BaseInterceptor

Throws:

java.lang.Exception

delete

public void delete(NextInterceptor nextInterceptor,
                   DeleteOperationContext opContext)
            throws java.lang.Exception

Specified by:

delete in interface Interceptor

Overrides:

delete in class BaseInterceptor

Throws:

java.lang.Exception

modify

public void modify(NextInterceptor nextInterceptor,
                   ModifyOperationContext opContext)
            throws java.lang.Exception

This policy needs to be really tight too because some attributes may take part in giving the user permissions to protected resources. We do not want users to self access these resources. As far as we're concerned no one but the admin needs access.

Specified by:

modify in interface Interceptor

Overrides:

modify in class BaseInterceptor

Throws:

java.lang.Exception

rename

public void rename(NextInterceptor nextInterceptor,
                   RenameOperationContext opContext)
            throws java.lang.Exception

Specified by:

rename in interface Interceptor

Overrides:

rename in class BaseInterceptor

Throws:

java.lang.Exception

move

public void move(NextInterceptor nextInterceptor,
                 MoveOperationContext opContext)
          throws java.lang.Exception

Specified by:

move in interface Interceptor

Overrides:

move in class BaseInterceptor

Throws:

java.lang.Exception

moveAndRename

public void moveAndRename(NextInterceptor nextInterceptor,
                          MoveAndRenameOperationContext opContext)
                   throws java.lang.Exception

Specified by:

moveAndRename in interface Interceptor

Overrides:

moveAndRename in class BaseInterceptor

Throws:

java.lang.Exception

lookup

public ClonedServerEntry lookup(NextInterceptor nextInterceptor,
                                LookupOperationContext opContext)
                         throws java.lang.Exception

Specified by:

lookup in interface Interceptor

Overrides:

lookup in class BaseInterceptor

Throws:

java.lang.Exception

search

public EntryFilteringCursor search(NextInterceptor nextInterceptor,
                                   SearchOperationContext opContext)
                            throws java.lang.Exception

Specified by:

search in interface Interceptor

Overrides:

search in class BaseInterceptor

Throws:

java.lang.Exception

list

public EntryFilteringCursor list(NextInterceptor nextInterceptor,
                                 ListOperationContext opContext)
                          throws java.lang.Exception

Specified by:

list in interface Interceptor

Overrides:

list in class BaseInterceptor

Throws:

java.lang.Exception