hudson.plugins.collabnet.auth
Class CNRootACL

java.lang.Object
  hudson.security.ACL
      hudson.plugins.collabnet.auth.CNRootACL

public class CNRootACL
extends hudson.security.ACL

Root ACL for the CollabNet Authorization. It gives a set of users Hudson admin privileges, another set read privileges, and if specified, will wrap another ACL and extend those permissions.

Field Summary

Fields inherited from class hudson.security.ACL

ANONYMOUS, AUTOMATIC_SIDS, EVERYONE, SYSTEM

Constructor Summary

CNRootACL(java.util.Collection<java.lang.String> adminUsers, java.util.Collection<java.lang.String> adminGroups, java.util.Collection<java.lang.String> readUsers, java.util.Collection<java.lang.String> readGroups)

CNRootACL(java.util.Collection<java.lang.String> adminUsers, java.util.Collection<java.lang.String> adminGroups, java.util.Collection<java.lang.String> readUsers, java.util.Collection<java.lang.String> readGroups, hudson.security.ACL innerACL)

Method Summary

boolean

hasPermission(org.acegisecurity.Authentication a, hudson.security.Permission p) If the user is included in the admins or readUsers sets, check whether the permission is granted via those.

Methods inherited from class hudson.security.ACL

checkPermission, hasPermission

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

CNRootACL

public CNRootACL(java.util.Collection<java.lang.String> adminUsers,
                 java.util.Collection<java.lang.String> adminGroups,
                 java.util.Collection<java.lang.String> readUsers,
                 java.util.Collection<java.lang.String> readGroups)

CNRootACL

public CNRootACL(java.util.Collection<java.lang.String> adminUsers,
                 java.util.Collection<java.lang.String> adminGroups,
                 java.util.Collection<java.lang.String> readUsers,
                 java.util.Collection<java.lang.String> readGroups,
                 hudson.security.ACL innerACL)

Method Detail

hasPermission

public boolean hasPermission(org.acegisecurity.Authentication a,
                             hudson.security.Permission p)

If the user is included in the admins or readUsers sets, check whether the permission is granted via those. If the permission is not settled, pass to any existing innerACL.

Specified by:

hasPermission in class hudson.security.ACL

Parameters:

a - current authentication.

p - permission to check

Returns:

true if the user should have the permission.