org.camunda.bpm.engine.impl.cfg.auth
Class DefaultAuthorizationProvider

java.lang.Object
  org.camunda.bpm.engine.impl.cfg.auth.DefaultAuthorizationProvider

All Implemented Interfaces:

ResourceAuthorizationProvider

public class DefaultAuthorizationProvider
extends Object
implements ResourceAuthorizationProvider

Provides the default authorizations for camunda BPM.

Author:

Daniel Meyer

Constructor Summary

DefaultAuthorizationProvider()

Method Summary

protected AuthorizationEntity	createGrantAuthorization(String userId, String groupId, Resource resource, String resourceId, Permission... permissions)
AuthorizationEntity[]	deleteTaskGroupIdentityLink(Task task, String groupId, String type) Invoked whenever a group identity link of a task has been deleted.
AuthorizationEntity[]	deleteTaskUserIdentityLink(Task task, String userId, String type) Invoked whenever a user identity link of a task has been deleted.
protected AuthorizationManager	getAuthorizationManager()
protected AuthorizationEntity	getGrantAuthorizationByGroupId(String groupId, Resource resource, String resourceId)
protected AuthorizationEntity	getGrantAuthorizationByUserId(String userId, Resource resource, String resourceId)
AuthorizationEntity[]	groupMembershipCreated(String groupId, String userId) Invoked whenever a user is added to a group
AuthorizationEntity[]	newDeployment(Deployment deployment) Invoked whenever a new deployment is created
AuthorizationEntity[]	newFilter(Filter filter) Invoked whenever a new filter is created
AuthorizationEntity[]	newGroup(Group group) Invoked whenever a new group is created
AuthorizationEntity[]	newProcessDefinition(ProcessDefinition processDefinition) Invoked whenever a new process definition is created
AuthorizationEntity[]	newProcessInstance(ProcessInstance processInstance) Invoked whenever a new process instance is started
AuthorizationEntity[]	newTask(Task task) Invoked whenever a new task is created
AuthorizationEntity[]	newTaskAssignee(Task task, String oldAssignee, String newAssignee) Invoked whenever an user has been assigned to a task.
AuthorizationEntity[]	newTaskGroupIdentityLink(Task task, String groupId, String type) Invoked whenever a new group identity link has been added to a task.
AuthorizationEntity[]	newTaskOwner(Task task, String oldOwner, String newOwner) Invoked whenever an user has been set as the owner of a task.
AuthorizationEntity[]	newTaskUserIdentityLink(Task task, String userId, String type) Invoked whenever a new user identity link has been added to a task.
AuthorizationEntity[]	newUser(User user) Invoked whenever a new user is created
protected AuthorizationEntity	updateAuthorization(AuthorizationEntity authorization, String userId, String groupId, Resource resource, String resourceId, Permission... permissions)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

DefaultAuthorizationProvider

public DefaultAuthorizationProvider()

Method Detail

newUser

public AuthorizationEntity[] newUser(User user)

Description copied from interface: ResourceAuthorizationProvider

Invoked whenever a new user is created

Specified by:

newUser in interface ResourceAuthorizationProvider

Parameters:

user - a newly created user

Returns:

a list of authorizations to be automatically added when a new user is created.

newGroup

public AuthorizationEntity[] newGroup(Group group)

Description copied from interface: ResourceAuthorizationProvider

Invoked whenever a new group is created

Specified by:

newGroup in interface ResourceAuthorizationProvider

Returns:

a list of authorizations to be automatically added when a new User is created.

groupMembershipCreated

public AuthorizationEntity[] groupMembershipCreated(String groupId,
                                                    String userId)

Description copied from interface: ResourceAuthorizationProvider

Invoked whenever a user is added to a group

Specified by:

groupMembershipCreated in interface ResourceAuthorizationProvider

Parameters:

groupId - the id of the group to which the user is added

userId - the id of the user who is added to a group a newly created User

Returns:

a list of authorizations to be automatically added when a new User is created.

newFilter

public AuthorizationEntity[] newFilter(Filter filter)

Description copied from interface: ResourceAuthorizationProvider

Invoked whenever a new filter is created

Specified by:

newFilter in interface ResourceAuthorizationProvider

Parameters:

filter - the newly created filter

Returns:

a list of authorizations to be automatically added when a new Filter is created.

newDeployment

public AuthorizationEntity[] newDeployment(Deployment deployment)

Description copied from interface: ResourceAuthorizationProvider

Invoked whenever a new deployment is created

Specified by:

newDeployment in interface ResourceAuthorizationProvider

Parameters:

deployment - the newly created deployment

Returns:

a list of authorizations to be automatically added when a new Deployment is created.

newProcessDefinition

public AuthorizationEntity[] newProcessDefinition(ProcessDefinition processDefinition)

Description copied from interface: ResourceAuthorizationProvider

Invoked whenever a new process definition is created

Specified by:

newProcessDefinition in interface ResourceAuthorizationProvider

Parameters:

processDefinition - the newly created process definition

Returns:

a list of authorizations to be automatically added when a new ProcessDefinition is created.

newProcessInstance

public AuthorizationEntity[] newProcessInstance(ProcessInstance processInstance)

Description copied from interface: ResourceAuthorizationProvider

Invoked whenever a new process instance is started

Specified by:

newProcessInstance in interface ResourceAuthorizationProvider

Parameters:

processInstance - the newly started process instance

Returns:

a list of authorizations to be automatically added when a new ProcessInstance is started.

newTask

public AuthorizationEntity[] newTask(Task task)

Description copied from interface: ResourceAuthorizationProvider

Invoked whenever a new task is created

Specified by:

newTask in interface ResourceAuthorizationProvider

Parameters:

task - the newly created task

Returns:

a list of authorizations to be automatically added when a new Task is created.

newTaskAssignee

public AuthorizationEntity[] newTaskAssignee(Task task,
                                             String oldAssignee,
                                             String newAssignee)

Description copied from interface: ResourceAuthorizationProvider

Invoked whenever an user has been assigned to a task.

Specified by:

newTaskAssignee in interface ResourceAuthorizationProvider

Parameters:

task - the task on which the assignee has been changed

oldAssignee - the old assignee of the task

newAssignee - the new assignee of the task

Returns:

a list of authorizations to be automatically added when an assignee of a task changes.

newTaskOwner

public AuthorizationEntity[] newTaskOwner(Task task,
                                          String oldOwner,
                                          String newOwner)

Description copied from interface: ResourceAuthorizationProvider

Invoked whenever an user has been set as the owner of a task.

Specified by:

newTaskOwner in interface ResourceAuthorizationProvider

Parameters:

task - the task on which the owner has been changed

oldOwner - the old owner of the task

newOwner - the new owner of the task

Returns:

a list of authorizations to be automatically added when the owner of a task changes.

newTaskUserIdentityLink

public AuthorizationEntity[] newTaskUserIdentityLink(Task task,
                                                     String userId,
                                                     String type)

Description copied from interface: ResourceAuthorizationProvider

Invoked whenever a new user identity link has been added to a task.

Specified by:

newTaskUserIdentityLink in interface ResourceAuthorizationProvider

Parameters:

task - the task on which a new identity link has been added

userId - the user for which the identity link has been created

type - the type of the identity link (e.g. IdentityLinkType.CANDIDATE)

Returns:

a list of authorizations to be automatically added when a new user identity link has been added.

newTaskGroupIdentityLink

public AuthorizationEntity[] newTaskGroupIdentityLink(Task task,
                                                      String groupId,
                                                      String type)

Description copied from interface: ResourceAuthorizationProvider

Invoked whenever a new group identity link has been added to a task.

Specified by:

newTaskGroupIdentityLink in interface ResourceAuthorizationProvider

Parameters:

task - the task on which a new identity link has been added

groupId - the group for which the identity link has been created

type - the type of the identity link (e.g. IdentityLinkType.CANDIDATE)

Returns:

a list of authorizations to be automatically added when a new group identity link has been added.

deleteTaskUserIdentityLink

public AuthorizationEntity[] deleteTaskUserIdentityLink(Task task,
                                                        String userId,
                                                        String type)

Description copied from interface: ResourceAuthorizationProvider

Invoked whenever a user identity link of a task has been deleted.

Specified by:

deleteTaskUserIdentityLink in interface ResourceAuthorizationProvider

Parameters:

task - the task on which the identity link has been deleted

userId - the user for which the identity link has been deleted

type - the type of the identity link (e.g. IdentityLinkType.CANDIDATE)

Returns:

a list of authorizations to be automatically deleted when a user identity link has been deleted.

deleteTaskGroupIdentityLink

public AuthorizationEntity[] deleteTaskGroupIdentityLink(Task task,
                                                         String groupId,
                                                         String type)

Description copied from interface: ResourceAuthorizationProvider

Invoked whenever a group identity link of a task has been deleted.

Specified by:

deleteTaskGroupIdentityLink in interface ResourceAuthorizationProvider

Parameters:

task - the task on which the identity link has been deleted

groupId - the group for which the identity link has been deleted

type - the type of the identity link (e.g. IdentityLinkType.CANDIDATE)

Returns:

a list of authorizations to be automatically deleted when a group identity link has been deleted.

getAuthorizationManager

protected AuthorizationManager getAuthorizationManager()

getGrantAuthorizationByUserId

protected AuthorizationEntity getGrantAuthorizationByUserId(String userId,
                                                            Resource resource,
                                                            String resourceId)

getGrantAuthorizationByGroupId

protected AuthorizationEntity getGrantAuthorizationByGroupId(String groupId,
                                                             Resource resource,
                                                             String resourceId)

updateAuthorization

protected AuthorizationEntity updateAuthorization(AuthorizationEntity authorization,
                                                  String userId,
                                                  String groupId,
                                                  Resource resource,
                                                  String resourceId,
                                                  Permission... permissions)

createGrantAuthorization

protected AuthorizationEntity createGrantAuthorization(String userId,
                                                       String groupId,
                                                       Resource resource,
                                                       String resourceId,
                                                       Permission... permissions)