org.cyclos.security.system

Class BaseSimpleCustomFieldServiceSecurity<DTO extends CustomFieldDTO,CF extends CustomField<CF,C,PV>,C extends CustomFieldPossibleValueCategory<CF,C,PV>,PV extends CustomFieldPossibleValue<CF,C,PV>,D extends CustomFieldData<DTO>,DP>

java.lang.Object

org.cyclos.impl.AbstractServerComponent

org.cyclos.impl.AbstractNetworkedServerComponent

org.cyclos.security.BaseServiceSecurity

org.cyclos.security.CRUDServiceSecurity<DTO,CF,D,DP>

org.cyclos.security.system.BaseCustomFieldServiceSecurity<DTO,CF,C,PV,D,DP>

org.cyclos.security.system.BaseSimpleCustomFieldServiceSecurity<DTO,CF,C,PV,D,DP>

All Implemented Interfaces:

CRUDService<DTO,D,DP>, CRUDWithConfirmationPasswordService<DTO,D,DP>, Service, BaseCustomFieldService<DTO,D,DP>

Direct Known Subclasses:

AdCustomFieldServiceSecurity, RecordCustomFieldServiceSecurity, TransactionCustomFieldServiceSecurity, UserCustomFieldServiceSecurity

public abstract class BaseSimpleCustomFieldServiceSecurity<DTO extends CustomFieldDTO,CF extends CustomField<CF,C,PV>,C extends CustomFieldPossibleValueCategory<CF,C,PV>,PV extends CustomFieldPossibleValue<CF,C,PV>,D extends CustomFieldData<DTO>,DP>
extends BaseCustomFieldServiceSecurity<DTO,CF,C,PV,D,DP>

Base class for security layers for custom fields which use a simple permission for view and another one for manage as the only checks

Author:

luis

Field Summary

Fields

Modifier and Type	Field and Description
protected Permission	managePermission
protected Permission	viewPermission

Fields inherited from class org.cyclos.security.CRUDServiceSecurity

entityClass

Constructor Summary

Constructors

Constructor and Description
BaseSimpleCustomFieldServiceSecurity(java.lang.Class<CF> entityClass, Permission viewPermission, Permission managePermission)

Method Summary

Modifier and Type	Method and Description
protected void	checkCreateNew(DP params) Checks whether creating new entities with the given context parameters is allowed, throwing PermissionDeniedException if not
protected void	checkManagePermission() Checks whether the caller has the manage permission granted
protected void	checkViewPermission() Checks whether the caller has the view permission granted
boolean	doHasManageAccess(CF entity) Should be implemented in order to return whether the caller is allowed to manage the given entity, for the given operation
boolean	doHasViewAccess(CF entity) Should be implemented in order to return whether the caller is allowed to view the given entity.
protected boolean	hasManagePermission() Returns whether the caller has the manage permission granted
protected boolean	hasViewPermission() Returns whether the caller has the view permission granted

Methods inherited from class org.cyclos.security.system.BaseCustomFieldServiceSecurity

saveOrder

Methods inherited from class org.cyclos.security.CRUDServiceSecurity

canPerformOperation, canViewHistoryLog, checkManageAccess, checkOperation, checkViewAccess, customizeData, find, getConfirmationPasswordInputForRemove, getData, getDataForNew, getEntityClass, getImplementation, hasManageAccess, hasViewAccess, isAccessible, load, onBeforeSave, remove, removeAll, removeAllWithConfirmationPassword, removeWithConfirmationPassword, resolveEntityCheck, save, saveWithConfirmationPassword

Methods inherited from class org.cyclos.security.BaseServiceSecurity

checkGuest, checkId, checkIds, checkInternalName, checkLoggedIn, checkManagesUser, checkRelatesToUser, checkVO, checkVOs, doInitialize, getEntityCheckRegistry, getUser, initialize

Methods inherited from class org.cyclos.impl.AbstractNetworkedServerComponent

canManage, checkManagesUser, checkPermission, checkRelatesToUser, checkValue, clearAlreadyValidated, getAccountHandler, getAuthHandler, getBaseEntityManagerHandler, getChannelConfiguration, getConfiguration, getConversionHandler, getCustomFieldValueHandler, getEntityManagerHandler, getGroupsHandler, getLoggedBasicUser, getLoggedUser, getProducts, getProductsHandler, getReportHandler, getTranslatedName, getTranslatedValue, getUserLocatorHandler, getValidationResult, hasPermission, hasValue, inSameNetwork, inSameNetworkOrGlobal, isAdmin, isAlreadyValidated, isBroker, isGlobalAdmin, isGlobalAdminInNetwork, isGuest, isLoggedIn, isMember, isNetworkAdmin, isOperator, isRelatedToUser, isSystem, isUserManager, isUserManagerOf, message, message, permission, permission, permissionOptionalValue, permissionOptionalValue, toDate, toDateTime, validate

Methods inherited from class org.cyclos.impl.AbstractServerComponent

delete, detach, find, flush, from, getApplicationContext, getConfigurationHandler, getDataTranslationHandler, getFormatter, getFormatter, getFormatter, getLogger, getNotificationHandler, getProfileFieldHandler, getRemoteAddress, getSessionData, getTransactionHandler, getTranslationHandler, message, message, persist, processBatch, refresh, remove, subQuery, update

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.cyclos.services.CRUDService

getData, getDataForNew, load, remove, removeAll, save

Field Detail

viewPermission

protected final Permission viewPermission

managePermission

protected final Permission managePermission

Constructor Detail

BaseSimpleCustomFieldServiceSecurity

public BaseSimpleCustomFieldServiceSecurity(java.lang.Class<CF> entityClass,
                                            Permission viewPermission,
                                            Permission managePermission)

Method Detail

doHasManageAccess

public final boolean doHasManageAccess(CF entity)

Description copied from class: CRUDServiceSecurity

Should be implemented in order to return whether the caller is allowed to manage the given entity, for the given operation

Specified by:

doHasManageAccess in class CRUDServiceSecurity<DTO extends CustomFieldDTO,CF extends CustomField<CF,C,PV>,D extends CustomFieldData<DTO>,DP>

doHasViewAccess

public final boolean doHasViewAccess(CF entity)

Description copied from class: CRUDServiceSecurity

Should be implemented in order to return whether the caller is allowed to view the given entity.

Specified by:

doHasViewAccess in class CRUDServiceSecurity<DTO extends CustomFieldDTO,CF extends CustomField<CF,C,PV>,D extends CustomFieldData<DTO>,DP>

checkCreateNew

protected final void checkCreateNew(DP params)

Description copied from class: CRUDServiceSecurity

Checks whether creating new entities with the given context parameters is allowed, throwing PermissionDeniedException if not

Specified by:

checkCreateNew in class CRUDServiceSecurity<DTO extends CustomFieldDTO,CF extends CustomField<CF,C,PV>,D extends CustomFieldData<DTO>,DP>

checkManagePermission

protected final void checkManagePermission()
                                    throws PermissionDeniedException

Checks whether the caller has the manage permission granted

Throws:

PermissionDeniedException

checkViewPermission

protected final void checkViewPermission()
                                  throws PermissionDeniedException

Checks whether the caller has the view permission granted

Throws:

PermissionDeniedException

hasManagePermission

protected final boolean hasManagePermission()

Returns whether the caller has the manage permission granted

hasViewPermission

protected final boolean hasViewPermission()

Returns whether the caller has the view permission granted