org.fcrepo.server.security
Class PolicyEnforcementPoint

java.lang.Object
  org.fcrepo.server.security.PolicyEnforcementPoint

public class PolicyEnforcementPoint
extends Object

Author:

Bill Niebel

Field Summary

static String	SUBACTION_SEPARATOR
static String	SUBRESOURCE_SEPARATOR
static String	XACML_ACTION_ID
static String	XACML_RESOURCE_ID
static String	XACML_SUBJECT_ID

Method Summary

void	destroy()
void	enforce(String subjectId, String action, String api, String pid, String namespace, Context context)
static PolicyEnforcementPoint	getInstance()
void	inactivate()
void	initPep(String enforceMode, String combiningAlgorithm, String globalPolicyConfig, String globalBackendPolicyConfig, String globalPolicyGuiToolConfig, DOManager manager, boolean validateRepositoryPolicies, boolean validateObjectPoliciesFromDatastream, PolicyParser policyParser, String ownerIdSeparator)
void	newPdp()
void	setAttributeFinderModules(List<com.sun.xacml.finder.AttributeFinderModule> attrFinderModules)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

SUBACTION_SEPARATOR

public static final String SUBACTION_SEPARATOR

See Also:

Constant Field Values

SUBRESOURCE_SEPARATOR

public static final String SUBRESOURCE_SEPARATOR

See Also:

Constant Field Values

XACML_SUBJECT_ID

public static final String XACML_SUBJECT_ID

See Also:

Constant Field Values

XACML_ACTION_ID

public static final String XACML_ACTION_ID

See Also:

Constant Field Values

XACML_RESOURCE_ID

public static final String XACML_RESOURCE_ID

See Also:

Constant Field Values

Method Detail

getInstance

public static final PolicyEnforcementPoint getInstance()

setAttributeFinderModules

public void setAttributeFinderModules(List<com.sun.xacml.finder.AttributeFinderModule> attrFinderModules)

newPdp

public final void newPdp()
                  throws Exception

Throws:

Exception

initPep

public void initPep(String enforceMode,
                    String combiningAlgorithm,
                    String globalPolicyConfig,
                    String globalBackendPolicyConfig,
                    String globalPolicyGuiToolConfig,
                    DOManager manager,
                    boolean validateRepositoryPolicies,
                    boolean validateObjectPoliciesFromDatastream,
                    PolicyParser policyParser,
                    String ownerIdSeparator)
             throws Exception

Throws:

Exception

inactivate

public void inactivate()

destroy

public void destroy()

enforce

public final void enforce(String subjectId,
                          String action,
                          String api,
                          String pid,
                          String namespace,
                          Context context)
                   throws AuthzException

Throws:

AuthzException