org.cyclos.security.system

Class CustomWebServiceServiceSecurity

java.lang.Object

org.cyclos.impl.AbstractServerComponent

org.cyclos.impl.AbstractNetworkedServerComponent

org.cyclos.security.BaseServiceSecurity

org.cyclos.security.CRUDServiceSecurity<CustomWebServiceDTO,CustomWebService,CustomWebServiceData,java.lang.Void>

org.cyclos.security.system.CustomWebServiceServiceSecurity

All Implemented Interfaces:

CRUDService<CustomWebServiceDTO,CustomWebServiceData,java.lang.Void>, CRUDWithConfirmationPasswordService<CustomWebServiceDTO,CustomWebServiceData,java.lang.Void>, Service, CustomWebServiceService

@Security
public class CustomWebServiceServiceSecurity
extends CRUDServiceSecurity<CustomWebServiceDTO,CustomWebService,CustomWebServiceData,java.lang.Void>
implements CustomWebServiceService

Security layer for CustomOperation

Author:

ameyer

Field Summary

Fields inherited from class org.cyclos.security.CRUDServiceSecurity

entityClass

Constructor Summary

Constructors

Constructor and Description
CustomWebServiceServiceSecurity()

Method Summary

Modifier and Type	Method and Description
protected void	checkCreateNew(java.lang.Void params) Checks whether creating new entities with the given context parameters is allowed, throwing PermissionDeniedException if not
protected boolean	doHasManageAccess(CustomWebService entity) Should be implemented in order to return whether the caller is allowed to manage the given entity, for the given operation
boolean	doHasViewAccess(CustomWebService entity) Should be implemented in order to return whether the caller is allowed to view the given entity.
protected CustomWebServiceServiceLocal	getImplementation() Should be implemented in order to return the actual implementation of the service
boolean	isAccessible(SessionData sessionData, CustomWebService entity) Must be implemented in order to determine whether the given entity is accessible for the given session data.
java.util.List<CustomWebServiceVO>	list() Lists all available custom web services

Methods inherited from class org.cyclos.security.CRUDServiceSecurity

canPerformOperation, canViewHistoryLog, checkManageAccess, checkOperation, checkViewAccess, customizeData, find, getConfirmationPasswordInputForRemove, getData, getDataForNew, getEntityClass, hasManageAccess, hasViewAccess, load, onBeforeSave, remove, removeAll, removeAllWithConfirmationPassword, removeWithConfirmationPassword, resolveEntityCheck, save, saveWithConfirmationPassword

Methods inherited from class org.cyclos.security.BaseServiceSecurity

checkGuest, checkId, checkIds, checkInternalName, checkLoggedIn, checkManagesUser, checkRelatesToUser, checkVO, checkVOs, doInitialize, getEntityCheckRegistry, getUser, initialize

Methods inherited from class org.cyclos.impl.AbstractNetworkedServerComponent

canManage, checkManagesUser, checkPermission, checkRelatesToUser, checkValue, clearAlreadyValidated, getAccountHandler, getAuthHandler, getBaseEntityManagerHandler, getChannelConfiguration, getConfiguration, getConversionHandler, getCustomFieldValueHandler, getEntityManagerHandler, getGroupsHandler, getLoggedBasicUser, getLoggedUser, getProducts, getProductsHandler, getReportHandler, getTranslatedName, getTranslatedValue, getUserLocatorHandler, getValidationResult, hasPermission, hasValue, inSameNetwork, inSameNetworkOrGlobal, isAdmin, isAlreadyValidated, isBroker, isGlobalAdmin, isGlobalAdminInNetwork, isGuest, isLoggedIn, isMember, isNetworkAdmin, isOperator, isRelatedToUser, isSystem, isUserManager, isUserManagerOf, message, message, permission, permission, permissionOptionalValue, permissionOptionalValue, toDate, toDateTime, validate

Methods inherited from class org.cyclos.impl.AbstractServerComponent

delete, detach, find, flush, from, getApplicationContext, getConfigurationHandler, getDataTranslationHandler, getFormatter, getFormatter, getFormatter, getLogger, getNotificationHandler, getProfileFieldHandler, getRemoteAddress, getSessionData, getTransactionHandler, getTranslationHandler, message, message, persist, processBatch, refresh, remove, subQuery, update

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.cyclos.services.CRUDService

getData, getDataForNew, load, remove, removeAll, save

Constructor Detail

CustomWebServiceServiceSecurity

public CustomWebServiceServiceSecurity()

Method Detail

doHasViewAccess

public boolean doHasViewAccess(CustomWebService entity)

Description copied from class: CRUDServiceSecurity

Should be implemented in order to return whether the caller is allowed to view the given entity.

Specified by:

doHasViewAccess in class CRUDServiceSecurity<CustomWebServiceDTO,CustomWebService,CustomWebServiceData,java.lang.Void>

isAccessible

public boolean isAccessible(SessionData sessionData,
                            CustomWebService entity)

Description copied from class: CRUDServiceSecurity

Must be implemented in order to determine whether the given entity is accessible for the given session data. This method shouldn't check the same condition as CRUDServiceSecurity.hasViewAccess(BaseEntity). If the only condition for an entity is CRUDServiceSecurity.hasViewAccess(BaseEntity), this method should return false.

Specified by:

isAccessible in class CRUDServiceSecurity<CustomWebServiceDTO,CustomWebService,CustomWebServiceData,java.lang.Void>

list

public java.util.List<CustomWebServiceVO> list()
                                        throws FrameworkException

Description copied from interface: CustomWebServiceService

Lists all available custom web services

Specified by:

list in interface CustomWebServiceService

Throws:

FrameworkException

checkCreateNew

protected void checkCreateNew(java.lang.Void params)

Description copied from class: CRUDServiceSecurity

Checks whether creating new entities with the given context parameters is allowed, throwing PermissionDeniedException if not

Specified by:

checkCreateNew in class CRUDServiceSecurity<CustomWebServiceDTO,CustomWebService,CustomWebServiceData,java.lang.Void>

doHasManageAccess

protected boolean doHasManageAccess(CustomWebService entity)

Description copied from class: CRUDServiceSecurity

Should be implemented in order to return whether the caller is allowed to manage the given entity, for the given operation

Specified by:

doHasManageAccess in class CRUDServiceSecurity<CustomWebServiceDTO,CustomWebService,CustomWebServiceData,java.lang.Void>

getImplementation

protected CustomWebServiceServiceLocal getImplementation()

Description copied from class: CRUDServiceSecurity

Should be implemented in order to return the actual implementation of the service

Specified by:

getImplementation in class CRUDServiceSecurity<CustomWebServiceDTO,CustomWebService,CustomWebServiceData,java.lang.Void>