org.globus.wsrf.security.authorization
Interface PIP

All Superinterfaces:

Interceptor, java.io.Serializable

public interface PIP

extends Interceptor

The PIP interface should be implemeted by interceptors that are responsible for collecting attributes for subject that later on can be used by PDPs to determine whether the subject is allowed to invoke the requested operation. The ServicePIPs can be put into interceptor chains together with PDPs.

See Also:

PDP, ServiceAuthorizationChain

Method Summary

void	collectAttributes(javax.security.auth.Subject peerSubject, javax.xml.rpc.handler.MessageContext context, javax.xml.namespace.QName operation) Collects attributes and populates the subject with public or private credentials to be checked by subsequent PDPs in the same interceptor chain

Methods inherited from interface org.globus.wsrf.security.authorization.Interceptor

close, initialize

Method Detail

collectAttributes

public void collectAttributes(javax.security.auth.Subject peerSubject,
                              javax.xml.rpc.handler.MessageContext context,
                              javax.xml.namespace.QName operation)
                       throws AttributeException

Collects attributes and populates the subject with public or private credentials to be checked by subsequent PDPs in the same interceptor chain

Parameters:

peerSubject - authenticated subject for which attributes should be collected

context - holds properties of this XML message exchange

operation - operation that the subject wants to invoke

Throws:

AttributeException