Package org.duracloud.security.util

Class AuthorizationHelper

java.lang.Object

org.duracloud.security.util.AuthorizationHelper

public class AuthorizationHelper
extends Object

A helper class that performs common Authorization related functions shared by different system layers.

Author:

Daniel Bernstein

Constructor Summary

Constructors

Constructor	Description
AuthorizationHelper(StorageProviderFactory storageProviderFactory)

Method Summary

Modifier and Type	Method	Description
Collection<org.springframework.security.core.GrantedAuthority>	getAuthorities(org.springframework.security.core.Authentication auth)
Map<String,AclType>	getSpaceACLs(String storeId, String spaceId)
protected DuracloudUserDetails	getUserDetails(org.springframework.security.core.Authentication auth)
List<String>	getUserGroups(org.springframework.security.core.Authentication auth)
boolean	groupsHaveAccess(List<String> userGroups, Map<String,AclType> acls, boolean isRead)
boolean	groupsHaveReadAccess(List<String> userGroups, Map<String,AclType> acls)
boolean	groupsHaveReadAccess(org.springframework.security.core.Authentication auth, Map<String,AclType> acls)
boolean	groupsHaveWriteAccess(List<String> userGroups, Map<String,AclType> acls)
boolean	hasAdmin(org.springframework.security.core.Authentication auth)
boolean	hasReadAccess(String name, Map<String,AclType> acls)
boolean	hasRole(String role, Collection<org.springframework.security.core.GrantedAuthority> authorities)
boolean	hasRole(org.springframework.security.core.Authentication auth, String role)
boolean	hasWriteAccess(String name, Map<String,AclType> acls)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

AuthorizationHelper

public AuthorizationHelper(StorageProviderFactory storageProviderFactory)

Method Detail

getUserGroups

public List<String> getUserGroups(org.springframework.security.core.Authentication auth)

getUserDetails

protected DuracloudUserDetails getUserDetails(org.springframework.security.core.Authentication auth)

getAuthorities

public Collection<org.springframework.security.core.GrantedAuthority> getAuthorities(org.springframework.security.core.Authentication auth)

groupsHaveReadAccess

public boolean groupsHaveReadAccess(org.springframework.security.core.Authentication auth,
                                    Map<String,AclType> acls)

groupsHaveReadAccess

public boolean groupsHaveReadAccess(List<String> userGroups,
                                    Map<String,AclType> acls)

groupsHaveWriteAccess

public boolean groupsHaveWriteAccess(List<String> userGroups,
                                     Map<String,AclType> acls)

groupsHaveAccess

public boolean groupsHaveAccess(List<String> userGroups,
                                Map<String,AclType> acls,
                                boolean isRead)

hasReadAccess

public boolean hasReadAccess(String name,
                             Map<String,AclType> acls)

hasWriteAccess

public boolean hasWriteAccess(String name,
                              Map<String,AclType> acls)

hasRole

public boolean hasRole(org.springframework.security.core.Authentication auth,
                       String role)

hasAdmin

public boolean hasAdmin(org.springframework.security.core.Authentication auth)

hasRole

public boolean hasRole(String role,
                       Collection<org.springframework.security.core.GrantedAuthority> authorities)

getSpaceACLs

public Map<String,AclType> getSpaceACLs(String storeId,
                                              String spaceId)