org.kuali.kra.web.struts.authorization.impl

Class WebAuthorizationServiceImpl

java.lang.Object

org.kuali.kra.web.struts.authorization.impl.WebAuthorizationServiceImpl

All Implemented Interfaces:

WebAuthorizationService

public class WebAuthorizationServiceImpl
extends Object
implements WebAuthorizationService

Implementation of the Web Authorization Service.

Constructor Summary

Constructors

Constructor and Description
WebAuthorizationServiceImpl()

Method Summary

Methods

Modifier and Type	Method and Description
TaskAuthorizationService	getTaskAuthorizationService()
protected WebAuthorizer	getWebAuthorizer(String classname) Get a Web Authorizer based upon the name of the Struts Action class.
Set<String>	getWebAuthorizerNames()
List<WebAuthorizer>	getWebAuthorizers()
boolean	isAuthorized(String userId, Class actionClass, String methodName, org.apache.struts.action.ActionForm form, javax.servlet.http.HttpServletRequest request) To determine if the user can execute the given Struts Action method, we will use the Web Authorizers corresponding to the Struts Action classes.
void	setTaskAuthorizationService(TaskAuthorizationService taskAuthorizationService)
void	setWebAuthorizerNames(Set<String> webAuthorizerNames)
void	setWebAuthorizers(List<WebAuthorizer> webAuthorizers)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

WebAuthorizationServiceImpl

public WebAuthorizationServiceImpl()

Method Detail

isAuthorized

public boolean isAuthorized(String userId,
                   Class actionClass,
                   String methodName,
                   org.apache.struts.action.ActionForm form,
                   javax.servlet.http.HttpServletRequest request)

To determine if the user can execute the given Struts Action method, we will use the Web Authorizers corresponding to the Struts Action classes. We start with the given Struts Action class and recursively move up the class hierarchy until we find a Web Authorizer that contains a entry for the given Struts Action method. If we never find a Web Authorizer entry, the user is authorized by default. If an entry in a Web Authorizer is found, it's Task Factory is used to build a Task and the Task Authorization is invoked to determine if the user can perform the task.

Specified by:

isAuthorized in interface WebAuthorizationService

actionClass - the name of the Struts Action class

methodName - the name of the Struts Action Method to be invoked (corresponds to the task)

form - the form

request - the HTTP request

Returns:

true if the user is authorized; otherwise false

See Also:

WebAuthorizationService.isAuthorized(java.lang.String, java.lang.Class, java.lang.String, org.apache.struts.action.ActionForm, javax.servlet.http.HttpServletRequest)

getWebAuthorizer

protected WebAuthorizer getWebAuthorizer(String classname)

Get a Web Authorizer based upon the name of the Struts Action class.

Parameters:

classname - the Struts Action classname

Returns:

the corresponding Web Authorizer or null if not found

getWebAuthorizers

public List<WebAuthorizer> getWebAuthorizers()

setWebAuthorizers

public void setWebAuthorizers(List<WebAuthorizer> webAuthorizers)

getWebAuthorizerNames

public Set<String> getWebAuthorizerNames()

setWebAuthorizerNames

public void setWebAuthorizerNames(Set<String> webAuthorizerNames)

getTaskAuthorizationService

public TaskAuthorizationService getTaskAuthorizationService()

setTaskAuthorizationService

public void setTaskAuthorizationService(TaskAuthorizationService taskAuthorizationService)