org.exoplatform.calendar.ws.common

Class RestSecurityServiceImpl

java.lang.Object

org.exoplatform.calendar.ws.common.RestSecurityServiceImpl

All Implemented Interfaces:

RestSecurityService

public class RestSecurityServiceImpl
extends Object
implements RestSecurityService

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
static class	RestSecurityServiceImpl.PermissionConfig
static class	RestSecurityServiceImpl.PermissionPlugin The permission follow pattern: membershipType:groupId.

Field Summary

Fields

Modifier and Type	Field and Description
static String	NOBODY

Constructor Summary

Constructors

Constructor and Description
RestSecurityServiceImpl(org.exoplatform.portal.config.UserACL userACL)

Method Summary

Modifier and Type	Method and Description
void	addPermission(RestSecurityServiceImpl.PermissionPlugin config)
void	addPermission(String path, String permission)
boolean	hasPermission(String requestPath) Return TRUE if no permission configured for this request uri, OR user has permission configured with that uri For example: if no permission is configured, any user can access any rest resource But if the rest uri: /rest/calendar is configured with *:/platform/admins --> only admin group can access that resource The permissions are inherited, if there are config: /rest --> *:/admin, and /rest/calendar --> *:/users.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

NOBODY

public static String NOBODY

Constructor Detail

RestSecurityServiceImpl

public RestSecurityServiceImpl(org.exoplatform.portal.config.UserACL userACL)

Method Detail

hasPermission

public boolean hasPermission(String requestPath)

Description copied from interface: RestSecurityService

Return TRUE if no permission configured for this request uri, OR user has permission configured with that uri
For example: if no permission is configured, any user can access any rest resource
But if the rest uri: /rest/calendar is configured with *:/platform/admins --> only admin group can access that resource
The permissions are inherited, if there are config: /rest --> *:/admin, and /rest/calendar --> *:/users. So an user must have admin permission to access to /rest/calendar Super user has permission to access all resources. No matter how permission is configured

Specified by:

hasPermission in interface RestSecurityService

addPermission

public void addPermission(RestSecurityServiceImpl.PermissionPlugin config)

addPermission

public void addPermission(String path,
                          String permission)