org.cyclos.security.users

Class RecordServiceSecurity

java.lang.Object

org.cyclos.impl.AbstractServerComponent

org.cyclos.impl.AbstractNetworkedServerComponent

org.cyclos.security.BaseServiceSecurity

org.cyclos.security.CRUDServiceSecurity<RecordDTO,Record,RecordData,RecordDataParams>

org.cyclos.security.users.RecordServiceSecurity

All Implemented Interfaces:

CRUDService<RecordDTO,RecordData,RecordDataParams>, CRUDWithConfirmationPasswordService<RecordDTO,RecordData,RecordDataParams>, Service, RecordService

@Security
public class RecordServiceSecurity
extends CRUDServiceSecurity<RecordDTO,Record,RecordData,RecordDataParams>
implements RecordService

Security layer for RecordService

Author:

luis

Field Summary

Fields inherited from class org.cyclos.security.CRUDServiceSecurity

entityClass

Constructor Summary

Constructors

Constructor and Description
RecordServiceSecurity()

Method Summary

Modifier and Type	Method and Description
boolean	canPerformOperation(Record record, CRUDOperation operation) Returns whether the logged user can perform the given operation over the given entity
<T extends RecordType> boolean	canPerformOperation(T recordType, User user, CRUDOperation operation)
protected void	checkCreateNew(RecordDataParams params) Checks whether creating new entities with the given context parameters is allowed, throwing PermissionDeniedException if not
protected void	checkSharedFieldsSearchPermissions()
protected void	customizeData(RecordData data) Can be overridden in order to process the returned data object for the given entity
boolean	doHasManageAccess(Record record) Should be implemented in order to return whether the caller is allowed to manage the given entity, for the given operation
boolean	doHasViewAccess(Record record) Should be implemented in order to return whether the caller is allowed to view the given entity.
protected RecordServiceLocal	getImplementation() Should be implemented in order to return the actual implementation of the service
java.util.List<RecordTypeCountVO>	getRecordTypeCount(AccountOwnerLocator locator) Returns, for each visible record type, the count and permissions over records of the given owner (either system or user)
RecordSearchData	getSearchData(RecordTypeVO recordTypeVO, UserLocatorVO locator) Returns data for searching records
SharedRecordFieldsSearchData	getSharedFieldsSearchData() Returns data for searching records with shared record fields
TiledRecordsData	getTiledRecordsData(RecordTypeVO recordTypeVO, UserLocatorVO locator) Returns data for listing tiled records of a given user or system
boolean	isAccessible(SessionData sessionData, Record entity) Must be implemented in order to determine whether the given entity is accessible for the given session data.
RecordVO	loadVO(java.lang.Long id) Loads a VO, by id
protected void	onBeforeSave(RecordDTO dto, Record entity)
Page<RecordVO>	search(RecordQuery query) Searches for records

Methods inherited from class org.cyclos.security.CRUDServiceSecurity

canViewHistoryLog, checkManageAccess, checkOperation, checkViewAccess, find, getConfirmationPasswordInputForRemove, getData, getDataForNew, getEntityClass, hasManageAccess, hasViewAccess, load, remove, removeAll, removeAllWithConfirmationPassword, removeWithConfirmationPassword, resolveEntityCheck, save, saveWithConfirmationPassword

Methods inherited from class org.cyclos.security.BaseServiceSecurity

checkGuest, checkId, checkIds, checkInternalName, checkLoggedIn, checkManagesUser, checkRelatesToUser, checkVO, checkVOs, doInitialize, getEntityCheckRegistry, getUser, initialize

Methods inherited from class org.cyclos.impl.AbstractNetworkedServerComponent

canManage, checkManagesUser, checkPermission, checkRelatesToUser, checkValue, clearAlreadyValidated, getAccountHandler, getAuthHandler, getBaseEntityManagerHandler, getChannelConfiguration, getConfiguration, getConversionHandler, getCustomFieldValueHandler, getEntityManagerHandler, getGroupsHandler, getLoggedBasicUser, getLoggedUser, getProducts, getProductsHandler, getReportHandler, getTranslatedName, getTranslatedValue, getUserLocatorHandler, getValidationResult, hasPermission, hasValue, inSameNetwork, inSameNetworkOrGlobal, isAdmin, isAlreadyValidated, isBroker, isGlobalAdmin, isGlobalAdminInNetwork, isGuest, isLoggedIn, isMember, isNetworkAdmin, isOperator, isRelatedToUser, isSystem, isUserManager, isUserManagerOf, message, message, permission, permission, permissionOptionalValue, permissionOptionalValue, toDate, toDateTime, validate

Methods inherited from class org.cyclos.impl.AbstractServerComponent

delete, detach, find, flush, from, getApplicationContext, getConfigurationHandler, getDataTranslationHandler, getFormatter, getFormatter, getFormatter, getLogger, getNotificationHandler, getProfileFieldHandler, getRemoteAddress, getSessionData, getTransactionHandler, getTranslationHandler, message, message, persist, processBatch, refresh, remove, subQuery, update

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.cyclos.services.CRUDService

getData, getDataForNew, load, remove, removeAll, save

Constructor Detail

RecordServiceSecurity

public RecordServiceSecurity()

Method Detail

canPerformOperation

public boolean canPerformOperation(Record record,
                                   CRUDOperation operation)

Description copied from class: CRUDServiceSecurity

Returns whether the logged user can perform the given operation over the given entity

Overrides:

canPerformOperation in class CRUDServiceSecurity<RecordDTO,Record,RecordData,RecordDataParams>

canPerformOperation

public <T extends RecordType> boolean canPerformOperation(T recordType,
                                                          User user,
                                                          CRUDOperation operation)

doHasManageAccess

public boolean doHasManageAccess(Record record)

Description copied from class: CRUDServiceSecurity

Should be implemented in order to return whether the caller is allowed to manage the given entity, for the given operation

Specified by:

doHasManageAccess in class CRUDServiceSecurity<RecordDTO,Record,RecordData,RecordDataParams>

doHasViewAccess

public boolean doHasViewAccess(Record record)

Description copied from class: CRUDServiceSecurity

Should be implemented in order to return whether the caller is allowed to view the given entity.

Specified by:

doHasViewAccess in class CRUDServiceSecurity<RecordDTO,Record,RecordData,RecordDataParams>

getRecordTypeCount

public java.util.List<RecordTypeCountVO> getRecordTypeCount(AccountOwnerLocator locator)
                                                     throws FrameworkException

Description copied from interface: RecordService

Returns, for each visible record type, the count and permissions over records of the given owner (either system or user)

Specified by:

getRecordTypeCount in interface RecordService

Throws:

FrameworkException

getSearchData

public RecordSearchData getSearchData(RecordTypeVO recordTypeVO,
                                      UserLocatorVO locator)

Description copied from interface: RecordService

Returns data for searching records

Specified by:

getSearchData in interface RecordService

getSharedFieldsSearchData

public SharedRecordFieldsSearchData getSharedFieldsSearchData()

Description copied from interface: RecordService

Returns data for searching records with shared record fields

Specified by:

getSharedFieldsSearchData in interface RecordService

getTiledRecordsData

public TiledRecordsData getTiledRecordsData(RecordTypeVO recordTypeVO,
                                            UserLocatorVO locator)

Description copied from interface: RecordService

Returns data for listing tiled records of a given user or system

Specified by:

getTiledRecordsData in interface RecordService

isAccessible

public boolean isAccessible(SessionData sessionData,
                            Record entity)

Description copied from class: CRUDServiceSecurity

Must be implemented in order to determine whether the given entity is accessible for the given session data. This method shouldn't check the same condition as CRUDServiceSecurity.hasViewAccess(BaseEntity). If the only condition for an entity is CRUDServiceSecurity.hasViewAccess(BaseEntity), this method should return false.

Specified by:

isAccessible in class CRUDServiceSecurity<RecordDTO,Record,RecordData,RecordDataParams>

loadVO

public RecordVO loadVO(java.lang.Long id)
                throws FrameworkException

Description copied from interface: RecordService

Loads a VO, by id

Specified by:

loadVO in interface RecordService

Throws:

FrameworkException

search

public Page<RecordVO> search(RecordQuery query)
                      throws QueryParseException

Description copied from interface: RecordService

Searches for records

Specified by:

search in interface RecordService

Throws:

QueryParseException

checkCreateNew

protected void checkCreateNew(RecordDataParams params)

Description copied from class: CRUDServiceSecurity

Checks whether creating new entities with the given context parameters is allowed, throwing PermissionDeniedException if not

Specified by:

checkCreateNew in class CRUDServiceSecurity<RecordDTO,Record,RecordData,RecordDataParams>

checkSharedFieldsSearchPermissions

protected void checkSharedFieldsSearchPermissions()

customizeData

protected void customizeData(RecordData data)

Description copied from class: CRUDServiceSecurity

Can be overridden in order to process the returned data object for the given entity

Overrides:

customizeData in class CRUDServiceSecurity<RecordDTO,Record,RecordData,RecordDataParams>

getImplementation

protected RecordServiceLocal getImplementation()

Description copied from class: CRUDServiceSecurity

Should be implemented in order to return the actual implementation of the service

Specified by:

getImplementation in class CRUDServiceSecurity<RecordDTO,Record,RecordData,RecordDataParams>

onBeforeSave

protected void onBeforeSave(RecordDTO dto,
                            Record entity)

Overrides:

onBeforeSave in class CRUDServiceSecurity<RecordDTO,Record,RecordData,RecordDataParams>