org.globus.ogsa.impl.base.cas.server.databaseAccess.accessors
Class PermissionsHandler

java.lang.Object
  org.globus.ogsa.impl.base.cas.server.databaseAccess.accessors.PermissionsHandler

public class PermissionsHandler

extends java.lang.Object

Used to evaluate permissions

Constructor Summary

PermissionsHandler()

Method Summary

static boolean	canCreateGps(java.lang.String type, java.lang.String userName)
static boolean	canCreateNamespace(java.lang.String userName)
static boolean	canCreateObject(java.lang.String userName, java.lang.String namespaceNick, java.lang.String objectName)
static boolean	canCreateServiceType(java.lang.String userName)
static boolean	canDeleteGps(java.lang.String type, java.lang.String userName, java.lang.String gpName)
static boolean	canDeleteNamespace(java.lang.String userName, java.lang.String nsNickname)
static boolean	canDeleteServiceType(java.lang.String userName, java.lang.String serviceTypeName)
static boolean	canEnrollTrustAnchor(java.lang.String userName)
static boolean	canEnrollUser(java.lang.String userName)
static boolean	canGrant(java.lang.String userName, java.lang.String userGpName, CasObjectData objSpec, java.lang.String objSpecDesc, java.lang.String actionSpec, java.lang.String actionSpecDesc)
static boolean	canManipObjectGps(java.lang.String type, java.lang.String userName, java.lang.String gpName)
static boolean	canManipServiceActionGps(java.lang.String type, java.lang.String userName, java.lang.String gpName)
static boolean	canManipServiceActionMapping(java.lang.String type, java.lang.String userName, java.lang.String serviceType)
static boolean	canManipUserGps(java.lang.String type, java.lang.String userName, java.lang.String gpName)
static boolean	canQuery(java.lang.String userName)
static boolean	canRemoveObject(java.lang.String userName, java.lang.String objName, java.lang.String objNamespace)
static boolean	canRemoveObjectId(java.lang.String userName, java.lang.String objId)
static boolean	canRemoveServiceActionId(java.lang.String userName, java.lang.String serviceActionId)
static boolean	canRevoke(java.lang.String userName, java.lang.String policyId)
static boolean	canUnenrollTrustAnchor(java.lang.String userName, java.lang.String nickname)
static boolean	canUnenrollUser(java.lang.String userName, java.lang.String userNickname)
static void	grantAllPermission(java.lang.String userGpName, java.lang.String spec, java.lang.String specDesc)
static boolean	isAuthorizedPolicy(java.lang.String userName, PolicyData policyData) Returns true if there is a semantically equivalent policy data in CAS databse.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

PermissionsHandler

public PermissionsHandler()

Method Detail

canEnrollTrustAnchor

public static boolean canEnrollTrustAnchor(java.lang.String userName)
                                    throws CasDBException

Throws:

CasDBException

canUnenrollTrustAnchor

public static boolean canUnenrollTrustAnchor(java.lang.String userName,
                                             java.lang.String nickname)
                                      throws CasDBException

Throws:

CasDBException

canEnrollUser

public static boolean canEnrollUser(java.lang.String userName)
                             throws CasDBException

Throws:

CasDBException

canUnenrollUser

public static boolean canUnenrollUser(java.lang.String userName,
                                      java.lang.String userNickname)
                               throws CasDBException

Throws:

CasDBException

canCreateGps

public static boolean canCreateGps(java.lang.String type,
                                   java.lang.String userName)
                            throws CasDBException

Throws:

CasDBException

canDeleteGps

public static boolean canDeleteGps(java.lang.String type,
                                   java.lang.String userName,
                                   java.lang.String gpName)
                            throws CasDBException

Throws:

CasDBException

canManipObjectGps

public static boolean canManipObjectGps(java.lang.String type,
                                        java.lang.String userName,
                                        java.lang.String gpName)
                                 throws CasDBException

Throws:

CasDBException

canManipUserGps

public static boolean canManipUserGps(java.lang.String type,
                                      java.lang.String userName,
                                      java.lang.String gpName)
                               throws CasDBException

Throws:

CasDBException

canManipServiceActionGps

public static boolean canManipServiceActionGps(java.lang.String type,
                                               java.lang.String userName,
                                               java.lang.String gpName)
                                        throws CasDBException

Throws:

CasDBException

canRemoveServiceActionId

public static boolean canRemoveServiceActionId(java.lang.String userName,
                                               java.lang.String serviceActionId)
                                        throws CasDBException

Throws:

CasDBException

canManipServiceActionMapping

public static boolean canManipServiceActionMapping(java.lang.String type,
                                                   java.lang.String userName,
                                                   java.lang.String serviceType)
                                            throws CasDBException

Throws:

CasDBException

canCreateNamespace

public static boolean canCreateNamespace(java.lang.String userName)
                                  throws CasDBException

Throws:

CasDBException

canDeleteNamespace

public static boolean canDeleteNamespace(java.lang.String userName,
                                         java.lang.String nsNickname)
                                  throws CasDBException

Throws:

CasDBException

canCreateObject

public static boolean canCreateObject(java.lang.String userName,
                                      java.lang.String namespaceNick,
                                      java.lang.String objectName)
                               throws CasDBException

Throws:

CasDBException

canRemoveObject

public static boolean canRemoveObject(java.lang.String userName,
                                      java.lang.String objName,
                                      java.lang.String objNamespace)
                               throws CasDBException

Throws:

CasDBException

canRemoveObjectId

public static boolean canRemoveObjectId(java.lang.String userName,
                                        java.lang.String objId)
                                 throws CasDBException

Throws:

CasDBException

canCreateServiceType

public static boolean canCreateServiceType(java.lang.String userName)
                                    throws CasDBException

Throws:

CasDBException

canDeleteServiceType

public static boolean canDeleteServiceType(java.lang.String userName,
                                           java.lang.String serviceTypeName)
                                    throws CasDBException

Throws:

CasDBException

canGrant

public static boolean canGrant(java.lang.String userName,
                               java.lang.String userGpName,
                               CasObjectData objSpec,
                               java.lang.String objSpecDesc,
                               java.lang.String actionSpec,
                               java.lang.String actionSpecDesc)
                        throws CasDBException

Throws:

CasDBException

canRevoke

public static boolean canRevoke(java.lang.String userName,
                                java.lang.String policyId)
                         throws CasDBException

Throws:

CasDBException

canQuery

public static boolean canQuery(java.lang.String userName)
                        throws CasDBException

Throws:

CasDBException

grantAllPermission

public static void grantAllPermission(java.lang.String userGpName,
                                      java.lang.String spec,
                                      java.lang.String specDesc)
                               throws CasDBException

Throws:

CasDBException

isAuthorizedPolicy

public static boolean isAuthorizedPolicy(java.lang.String userName,
                                         PolicyData policyData)
                                  throws CasDBException

Returns true if there is a semantically equivalent policy data in CAS databse. Super user is ignored, that is if the user is super user it is not considered, since this method is used to evaluate external policies only

Throws:

CasDBException