AuthorizationManager (camunda BPM - engine 7.5.0-alpha4 API)

Overview

Package

Class

Use

Tree

Deprecated

Index

Help

PREV CLASS NEXT CLASS

FRAMES NO FRAMES

SUMMARY: NESTED | FIELD | CONSTR | METHOD

DETAIL: FIELD | CONSTR | METHOD

org.camunda.bpm.engine.impl.persistence.entity
Class AuthorizationManager

java.lang.Object
  org.camunda.bpm.engine.impl.persistence.AbstractManager
      org.camunda.bpm.engine.impl.persistence.entity.AuthorizationManager

All Implemented Interfaces:: Session

public class AuthorizationManager
extends AbstractManager
extends AbstractManager

Author:: Daniel Meyer

Field Summary
`protected Set<String>`	`availableAuthorizedGroupIds` Group ids for which authorizations exist in the database.
`static String`	`DEFAULT_AUTHORIZATION_CHECK`
`protected static List<String>`	`EMPTY_LIST`
`protected static EnginePersistenceLogger`	`LOG`

Constructor Summary
`AuthorizationManager()`

Method Summary
`protected void`	`addPermissionCheck(AuthorizationCheck authCheck, CompositePermissionCheck compositeCheck)`
`protected void`	`addPermissionCheck(ListQueryParameterObject query, Resource resource, String queryParam, Permission permission)`
`void`	`checkAuthorization(CompositePermissionCheck compositePermissionCheck)`
`void`	`checkAuthorization(List<PermissionCheck> permissionChecks)`
`void`	`checkAuthorization(PermissionCheck... permissionChecks)`
`void`	`checkAuthorization(Permission permission, Resource resource)`
`void`	`checkAuthorization(Permission permission, Resource resource, String resourceId)`
`void`	`checkCreateDeployment()`
`void`	`checkCreateTask()`
`void`	`checkDeleteDeployment(String deploymentId)`
`void`	`checkDeleteHistoricDecisionInstance(String decisionDefinitionKey)`
`void`	`checkDeleteHistoricProcessInstance(HistoricProcessInstance instance)`
`void`	`checkDeleteHistoricTaskInstance(HistoricTaskInstanceEntity task)`
`void`	`checkDeleteProcessInstance(ExecutionEntity execution)`
`void`	`checkDeleteTask(TaskEntity task)`
`void`	`checkDeleteUserOperationLog(UserOperationLogEntry entry)`
`void`	`checkReadDecisionDefinition(DecisionDefinitionEntity decisionDefinition)`
`void`	`checkReadDecisionDefinition(String decisionDefinitionKey)`
`void`	`checkReadDeployment(String deploymentId)`
`void`	`checkReadHistoricJobLog(HistoricJobLogEventEntity historicJobLog)`
`void`	`checkReadHistoryAnyProcessDefinition()`
`void`	`checkReadProcessDefinition(ProcessDefinitionEntity definition)`
`void`	`checkReadProcessDefinition(String processDefinitionKey)`
`void`	`checkReadProcessInstance(ExecutionEntity execution)`
`void`	`checkReadProcessInstance(JobEntity job)`
`void`	`checkReadProcessInstance(String processInstanceId)`
`void`	`checkReadTask(TaskEntity task)`
`void`	`checkTaskAssign(TaskEntity task)`
`void`	`checkTaskWork(TaskEntity task)`
`void`	`checkUpdateProcessInstance(ExecutionEntity execution)`
`void`	`checkUpdateProcessInstance(JobEntity job)`
`void`	`checkUpdateTask(TaskEntity task)`
`void`	`configureActivityStatisticsQuery(ActivityStatisticsQueryImpl query)`
`void`	`configureDecisionDefinitionQuery(DecisionDefinitionQueryImpl query)`
`void`	`configureDeploymentQuery(DeploymentQueryImpl query)`
`void`	`configureDeploymentStatisticsQuery(DeploymentStatisticsQueryImpl query)`
`void`	`configureEventSubscriptionQuery(EventSubscriptionQueryImpl query)`
`void`	`configureExecutionQuery(AbstractQuery query)`
`void`	`configureExternalTaskFetch(ListQueryParameterObject parameter)`
`void`	`configureExternalTaskQuery(ExternalTaskQueryImpl query)`
`void`	`configureHistoricActivityInstanceQuery(HistoricActivityInstanceQueryImpl query)`
`void`	`configureHistoricDecisionInstanceQuery(HistoricDecisionInstanceQueryImpl query)`
`void`	`configureHistoricDetailQuery(HistoricDetailQueryImpl query)`
`void`	`configureHistoricIdentityLinkQuery(HistoricIdentityLinkLogQueryImpl query)`
`void`	`configureHistoricIncidentQuery(HistoricIncidentQueryImpl query)`
`void`	`configureHistoricJobLogQuery(HistoricJobLogQueryImpl query)`
`void`	`configureHistoricProcessInstanceQuery(HistoricProcessInstanceQueryImpl query)`
`void`	`configureHistoricTaskInstanceQuery(HistoricTaskInstanceQueryImpl query)`
`void`	`configureHistoricVariableInstanceQuery(HistoricVariableInstanceQueryImpl query)`
`void`	`configureIncidentQuery(IncidentQueryImpl query)`
`void`	`configureJobDefinitionQuery(JobDefinitionQueryImpl query)`
`void`	`configureJobQuery(JobQueryImpl query)`
`void`	`configureProcessDefinitionQuery(ProcessDefinitionQueryImpl query)`
`void`	`configureProcessDefinitionStatisticsQuery(ProcessDefinitionStatisticsQueryImpl query)`
`void`	`configureQuery(AbstractQuery query, Resource resource)`
`void`	`configureQuery(AbstractQuery query, Resource resource, String queryParam)`
`void`	`configureQuery(AbstractQuery query, Resource resource, String queryParam, Permission permission)`
`void`	`configureQuery(ListQueryParameterObject query)`
`void`	`configureTaskQuery(TaskQueryImpl query)`
`void`	`configureUserOperationLogQuery(UserOperationLogQueryImpl query)`
`protected void`	`configureVariableInstanceQuery(VariableInstanceQueryImpl query)`
`Authorization`	`createNewAuthorization(int type)`
`void`	`delete(DbEntity authorization)`
`void`	`deleteAuthorizationsByResourceId(Resource resource, String resourceId)`
`List<String>`	`filterAuthenticatedGroupIds(List<String> authenticatedGroupIds)`
`AuthorizationEntity`	`findAuthorization(int type, String userId, String groupId, Resource resource, String resourceId)`
`AuthorizationEntity`	`findAuthorizationByGroupIdAndResourceId(int type, String groupId, Resource resource, String resourceId)`
`AuthorizationEntity`	`findAuthorizationByUserIdAndResourceId(int type, String userId, Resource resource, String resourceId)`
`void`	`insert(DbEntity authorization)`
`boolean`	`isAuthorized(CompositePermissionCheck compositePermissionCheck)`
`boolean`	`isAuthorized(Permission permission, Resource resource, String resourceId)`
`boolean`	`isAuthorized(String userId, List<String> groupIds, CompositePermissionCheck compositePermissionCheck)`
`boolean`	`isAuthorized(String userId, List<String> groupIds, List<PermissionCheck> permissionChecks)`
`boolean`	`isAuthorized(String userId, List<String> groupIds, Permission permission, Resource resource, String resourceId)`
`void`	`isCamundaAdmin()`
`List<Authorization>`	`selectAuthorizationByQueryCriteria(AuthorizationQueryImpl authorizationQuery)`
`Long`	`selectAuthorizationCountByQueryCriteria(AuthorizationQueryImpl authorizationQuery)`
`void`	`update(AuthorizationEntity authorization)`

Methods inherited from class org.camunda.bpm.engine.impl.persistence.AbstractManager
close, deleteAuthorizations, deleteDefaultAuthorizations, flush, getAttachmentManager, getAuthorizationManager, getBatchManager, getByteArrayManager, getCaseDefinitionManager, getCaseExecutionManager, getCaseInstanceManager, getCommandContext, getCurrentAuthentication, getDbEntityManager, getDbSqlSession, getDecisionDefinitionManager, getDeploymentManager, getEventSubscriptionManager, getHistoricActivityInstanceManager, getHistoricBatchManager, getHistoricCaseActivityInstanceManager, getHistoricCaseInstanceManager, getHistoricDecisionInstanceManager, getHistoricDetailManager, getHistoricIdentityLinkManager, getHistoricIncidentManager, getHistoricJobLogManager, getHistoricProcessInstanceManager, getHistoricReportManager, getHistoricTaskInstanceManager, getHistoricVariableInstanceManager, getIdentityInfoManager, getIdentityLinkManager, getJobDefinitionManager, getJobManager, getProcessDefinitionManager, getProcessInstanceManager, getResourceAuthorizationProvider, getResourceManager, getSession, getTaskManager, getTenantManager, getUserOperationLogManager, getVariableInstanceManager, isAuthorizationEnabled, saveDefaultAuthorizations

Methods inherited from class org.camunda.bpm.engine.impl.persistence.AbstractManager

close, deleteAuthorizations, deleteDefaultAuthorizations, flush, getAttachmentManager, getAuthorizationManager, getBatchManager, getByteArrayManager, getCaseDefinitionManager, getCaseExecutionManager, getCaseInstanceManager, getCommandContext, getCurrentAuthentication, getDbEntityManager, getDbSqlSession, getDecisionDefinitionManager, getDeploymentManager, getEventSubscriptionManager, getHistoricActivityInstanceManager, getHistoricBatchManager, getHistoricCaseActivityInstanceManager, getHistoricCaseInstanceManager, getHistoricDecisionInstanceManager, getHistoricDetailManager, getHistoricIdentityLinkManager, getHistoricIncidentManager, getHistoricJobLogManager, getHistoricProcessInstanceManager, getHistoricReportManager, getHistoricTaskInstanceManager, getHistoricVariableInstanceManager, getIdentityInfoManager, getIdentityLinkManager, getJobDefinitionManager, getJobManager, getProcessDefinitionManager, getProcessInstanceManager, getResourceAuthorizationProvider, getResourceManager, getSession, getTaskManager, getTenantManager, getUserOperationLogManager, getVariableInstanceManager, isAuthorizationEnabled, saveDefaultAuthorizations

Methods inherited from class java.lang.Object
`clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait`

Field Detail

LOG

protected static final EnginePersistenceLogger LOG

DEFAULT_AUTHORIZATION_CHECK

public static final String DEFAULT_AUTHORIZATION_CHECK

See Also:: Constant Field Values

EMPTY_LIST

protected static final List<String> EMPTY_LIST

availableAuthorizedGroupIds

protected Set<String> availableAuthorizedGroupIds

Group ids for which authorizations exist in the database. This is initialized once per command by the filterAuthenticatedGroupIds(List) method. (Manager instances are command scoped). It is used to only check authorizations for groups for which authorizations exist. In other words, if for a given group no authorization exists in the DB, then auth checks are not performed for this group.

Constructor Detail