org.picketlink.idm.drools

Class DroolsPermissionVoter

java.lang.Object

org.picketlink.idm.drools.DroolsPermissionVoter

All Implemented Interfaces:

PermissionVoter

public class DroolsPermissionVoter
extends Object
implements PermissionVoter

A PermissionVoter implementation that uses Drools to provide rule-based permission checks. A PermissionCheck object is created and inserted into the Drools session object, upon which all rules are then fired.

Author:

Shane Bryzak

Nested Class Summary

Nested classes/interfaces inherited from interface org.picketlink.idm.permission.spi.PermissionVoter

PermissionVoter.VotingResult

Constructor Summary

Constructors

Constructor and Description
DroolsPermissionVoter(org.kie.api.KieBase securityRules)

Method Summary

Methods

Modifier and Type	Method and Description
PermissionVoter.VotingResult	hasPermission(IdentityType recipient, Class<?> resourceClass, Serializable identifier, String operation) Rule-based permission checks only work with the actual resource instance, not with the identifier.
PermissionVoter.VotingResult	hasPermission(IdentityType recipient, Object resource, String operation)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

DroolsPermissionVoter

public DroolsPermissionVoter(org.kie.api.KieBase securityRules)

Method Detail

hasPermission

public PermissionVoter.VotingResult hasPermission(IdentityType recipient,
                                         Object resource,
                                         String operation)

Specified by:

hasPermission in interface PermissionVoter

hasPermission

public PermissionVoter.VotingResult hasPermission(IdentityType recipient,
                                         Class<?> resourceClass,
                                         Serializable identifier,
                                         String operation)

Rule-based permission checks only work with the actual resource instance, not with the identifier.

Specified by:

hasPermission in interface PermissionVoter