com.att.cadi.lur.aaf

Class AAFLurPerm1_0

java.lang.Object

com.att.cadi.AbsUserCache<PERM>

com.att.cadi.lur.aaf.AbsAAFLur<AAFPermission>

com.att.cadi.lur.aaf.AAFLurPerm1_0

All Implemented Interfaces:

com.att.cadi.Lur

public class AAFLurPerm1_0
extends AbsAAFLur<AAFPermission>

Use AAF Service as Permission Service. This Lur goes after AAF Permissions, which are elements of Roles, not the Roles themselves. If you want a simple Role Lur, use AAFRoleLur

Author:

jg1555

Nested Class Summary

Nested classes/interfaces inherited from class com.att.cadi.AbsUserCache

com.att.cadi.AbsUserCache.DumpInfo, com.att.cadi.AbsUserCache.Miss

Field Summary

Fields inherited from class com.att.cadi.lur.aaf.AbsAAFLur

access, dmeServiceName, dmeTimeout, headers, inJSON, transmutate, userExpiration

Constructor Summary

Constructors

Constructor and Description
AAFLurPerm1_0(com.att.cadi.Access access, String dmeServiceName, String mechUser, String mechPasswd, int dmeTimeOut, long userExpiration, int highCount) Need to be able to transmutate a Principal into either ATTUID or MechID, which are the only ones accepted at this point by AAF.

Method Summary

Modifier and Type	Method and Description
protected boolean	isCorrectPermType(com.att.cadi.Permission pond)
protected com.att.cadi.User<AAFPermission>	loadUser(Principal p)
boolean	supports(String userName)

Methods inherited from class com.att.cadi.lur.aaf.AbsAAFLur

fish, fishAll, newClient

Methods inherited from class com.att.cadi.AbsUserCache

addMiss, addUser, addUser, clearAll, destroy, dumpInfo, getUser, getUser, handlesExclusively, missed, remove, remove, setLur

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface com.att.cadi.Lur

destroy, handlesExclusively

Constructor Detail

AAFLurPerm1_0

public AAFLurPerm1_0(com.att.cadi.Access access,
                     String dmeServiceName,
                     String mechUser,
                     String mechPasswd,
                     int dmeTimeOut,
                     long userExpiration,
                     int highCount)
              throws com.att.cadi.CadiException

Need to be able to transmutate a Principal into either ATTUID or MechID, which are the only ones accepted at this point by AAF. There is no "domain", aka, no "@att.com" in "ab1234@att.com". The only thing that matters here for AAF is that we don't waste calls with IDs that obviously aren't valid. Thus, we validate that the ID portion follows the rules before we waste time accessing AAF remotely

Throws:

com.att.cadi.CadiException

Method Detail

loadUser

protected com.att.cadi.User<AAFPermission> loadUser(Principal p)
                                             throws Exception

Specified by:

loadUser in class AbsAAFLur<AAFPermission>

Throws:

Exception

isCorrectPermType

protected boolean isCorrectPermType(com.att.cadi.Permission pond)

Specified by:

isCorrectPermType in class AbsAAFLur<AAFPermission>

supports

public boolean supports(String userName)

Specified by:

supports in interface com.att.cadi.Lur

Overrides:

supports in class AbsAAFLur<AAFPermission>