com.googlecode.fascinator.portal.security
Class FascinatorWebSecurityExpressionRoot

java.lang.Object
  org.springframework.security.access.expression.SecurityExpressionRoot
      org.springframework.security.web.access.expression.WebSecurityExpressionRoot
          com.googlecode.fascinator.portal.security.FascinatorWebSecurityExpressionRoot

public class FascinatorWebSecurityExpressionRoot
extends org.springframework.security.web.access.expression.WebSecurityExpressionRoot

Spring security check methods for Fascinator portal.

Author:

Andrew Brazzatti, Jianfeng Li

Field Summary

Fields inherited from class org.springframework.security.web.access.expression.WebSecurityExpressionRoot

request

Fields inherited from class org.springframework.security.access.expression.SecurityExpressionRoot

authentication, denyAll, permitAll

Constructor Summary

FascinatorWebSecurityExpressionRoot(org.springframework.security.core.Authentication a, org.springframework.security.web.FilterInvocation fi)

FascinatorWebSecurityExpressionRoot(org.springframework.security.core.Authentication authentication, org.springframework.security.web.FilterInvocation fi, Storage storage, AccessControl accessControl)

Method Summary

boolean	hasAPIAccess()
boolean	hasDownloadAccess()
boolean	hasDownloadAccess(String oidPattern)
boolean	hasViewAccess() get view access of an object defined in request.
boolean	hasViewAccess(String oidPattern)
boolean	hasWorkflowAccess() Check editing access
boolean	hasWorkflowAccess(String oidPattern) Check editing access
boolean	isGuestOwnerEditAllowed()
boolean	isInAllowedRoles()
boolean	isInAllowedRoles(String oid) Check whether user has the correct role to edit
boolean	isInAllowedUsers()
boolean	isInAllowedUsers(String oid)
boolean	isOwner()
boolean	isOwner(String oidPattern)
boolean	isOwnerEditAllowed()
boolean	isPublished()

Methods inherited from class org.springframework.security.web.access.expression.WebSecurityExpressionRoot

hasIpAddress

Methods inherited from class org.springframework.security.access.expression.SecurityExpressionRoot

denyAll, getAuthentication, getPrincipal, hasAnyAuthority, hasAnyRole, hasAuthority, hasRole, isAnonymous, isAuthenticated, isFullyAuthenticated, isRememberMe, permitAll, setRoleHierarchy, setTrustResolver

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

FascinatorWebSecurityExpressionRoot

public FascinatorWebSecurityExpressionRoot(org.springframework.security.core.Authentication a,
                                           org.springframework.security.web.FilterInvocation fi)

FascinatorWebSecurityExpressionRoot

public FascinatorWebSecurityExpressionRoot(org.springframework.security.core.Authentication authentication,
                                           org.springframework.security.web.FilterInvocation fi,
                                           Storage storage,
                                           AccessControl accessControl)

Method Detail

hasDownloadAccess

public boolean hasDownloadAccess()

hasDownloadAccess

public boolean hasDownloadAccess(String oidPattern)

hasViewAccess

public boolean hasViewAccess()

get view access of an object defined in request. reference to /fascinator- portal/src/main/config/portal/default/default/scripts/detail.py

Returns:

boolean

hasViewAccess

public boolean hasViewAccess(String oidPattern)

isInAllowedUsers

public boolean isInAllowedUsers()

isInAllowedUsers

public boolean isInAllowedUsers(String oid)

isPublished

public boolean isPublished()

isOwner

public boolean isOwner()

isOwner

public boolean isOwner(String oidPattern)

isInAllowedRoles

public boolean isInAllowedRoles()

isInAllowedRoles

public boolean isInAllowedRoles(String oid)

Check whether user has the correct role to edit

hasWorkflowAccess

public boolean hasWorkflowAccess()

Check editing access

hasWorkflowAccess

public boolean hasWorkflowAccess(String oidPattern)

Check editing access

isOwnerEditAllowed

public boolean isOwnerEditAllowed()

hasAPIAccess

public boolean hasAPIAccess()

isGuestOwnerEditAllowed

public boolean isGuestOwnerEditAllowed()