Package org.dspace.app.rest.security
package org.dspace.app.rest.security
-
ClassDescriptionAdministrators are always allowed to perform any action on any DSpace object.This is a Filter class that'll fetch special groups from the
AuthenticationServiceand set these in the current DSpace Context.DSpaceObjectPermissionEvaluatorPlugin will check persmissions based on the DSpaceAuthorizeService.Used byBitstreamRestRepository.findOne(Context, UUID)to get metadata of private bitstreams even though user can't access actual fileAn authenticated user is allowed to interact with a claimed task only if they own it claim.Custom logout handler to support stateless sessionsSpring security authentication entry point to return a 401 response for unauthorized requests This class is used in theWebSecurityConfigurationclass.Custom Authentication for use with DSpaceCustom SessionAuthenticationStrategy to be used alongside DSpaceCsrfTokenRepository.This is a custom Spring Security CsrfTokenRepository which supports *cross-domain* CSRF protection (allowing the client and backend to be on different domains).RestPermissionEvaluatorPluginclass that evaluate admin permission against a generic DSpace ObjectDSpace permission evaluator.Enum that lists all available "permissions" an authenticated user can have on a specific REST endpoint.This class is responsible for authenticating a user via RESTAn authenticated user is allowed to view, update or delete their own data.Methods of this class are used on PreAuthorize annotations to convert input parameters.An authenticated user is allowed to view information on all the groups they are a member of (READ permission).This class will filter openID Connect requests and try and authenticate them.Permission evaluator plugin that check if the current user can perform an ORCID synchronization.This class will filter ORCID requests and try and authenticate them.Class that evaluate DELETE and READ permissionsPermission evaluator plugin that check if the current user can search for ORCID queue records by owner.An authenticated user is allowed to interact with a pool task only if it is in their list.This class will handle calls made to Process endpoints.RestPermissionEvaluatorPluginclass that evaluate READ permissions for an AuthorizationAn authenticated user is allowed to view, update or delete their own data.RestPermissionEvaluatorPluginclass that evaluate ADMIN permissions over a Resource PolicyRestPermissionEvaluatorPluginclass that evaluate READ, WRITE and DELETE permissions over a ResourcePolicyInterface for a service that can provide authentication for the REST APIAbstractRestPermissionEvaluatorPluginclass that contains utility methods to evaluate permissions for a Rest Object.Interface to define a permission evaluator plugin.This class will filter Shibboleth requests to see if the user has been authenticated via Shibboleth.Custom Spring authentication filter for Stateless authentication, intercepts requests to check for valid authentication.This class will filter /api/authn/login requests to try and authenticate them.This class will handle calls made to SubmissionCCLicenseUrlRest endpoints.RestPermissionEvaluatorPluginclass that evaluate READ, WRITE and DELETE permissions over a SubscriptionRestObjectPermissionEvaluatorPluginclass that evaluate WRITE and DELETE permission over a TemplateItemThis class will handle Permissions for theUsageReportRestobject and its callsThis class acts as a PermissionEvaluator to decide whether a given request to a Versioning endpoint is allowed to pass through or notMethods of this class are used on PreAuthorize annotations to check security on versioning endpointThis class evaluate ADMIN permissions to patch operation over a Version.This class acts as a PermissionEvaluator to decide whether a given request to a Versioning endpoint is allowed to pass through or notSpring Security configuration for DSpace Server WebappThis class will contain the logic to allow us to evaluate an expression given through a String.An authenticated user is allowed to interact with workflow item only if they belong to a task that they own or could claim.RestPermissionEvaluatorPluginclass that evaluate READ, WRITE and DELETE permissions over a WorkspaceItem