org.exoplatform.calendar.ws.common

Interface RestSecurityService

All Known Implementing Classes:

RestSecurityServiceImpl

public interface RestSecurityService

Field Summary

Fields

Modifier and Type	Field and Description
static String	NOBODY

Method Summary

Methods

Modifier and Type

Method and Description

boolean

hasPermission(String requestPath) Return TRUE if no permission configured for this request uri, OR user has permission configured with that uri For example: if no permission is configured, any user can access any rest resource But if the rest uri: /rest/calendar is configured with *:/platform/admins --> only admin group can access that resource The permissions are inherited, if there are config: /rest --> *:/admin, and /rest/calendar --> *:/users.

Field Detail

NOBODY

static final String NOBODY

See Also:

Constant Field Values

Method Detail

hasPermission

boolean hasPermission(String requestPath)

Return TRUE if no permission configured for this request uri, OR user has permission configured with that uri
For example: if no permission is configured, any user can access any rest resource
But if the rest uri: /rest/calendar is configured with *:/platform/admins --> only admin group can access that resource
The permissions are inherited, if there are config: /rest --> *:/admin, and /rest/calendar --> *:/users. So an user must have admin permission to access to /rest/calendar Super user has permission to access all resources. No matter how permission is configured