Package org.projectnessie.server.authz

Class CelAccessChecker

java.lang.Object

org.projectnessie.server.authz.CelAccessChecker

All Implemented Interfaces:

AccessChecker

@ApplicationScoped
public class CelAccessChecker
extends Object
implements AccessChecker

A reference implementation of the AccessChecker that performs access checks using CEL expressions.

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static class	CelAccessChecker.AuthorizationRuleType

Constructor Summary

Constructors

Constructor	Description
CelAccessChecker(QuarkusNessieAuthorizationConfig config, CompiledAuthorizationRules compiledRules)

Method Summary

Modifier and Type	Method	Description
void	canAssignRefToHash(AccessContext context, org.projectnessie.versioned.NamedRef ref)
void	canCommitChangeAgainstReference(AccessContext context, org.projectnessie.versioned.NamedRef ref)
void	canCreateReference(AccessContext context, org.projectnessie.versioned.NamedRef ref)
void	canDeleteEntity(AccessContext context, org.projectnessie.versioned.NamedRef ref, org.projectnessie.model.ContentsKey key, String contentsId)
void	canDeleteReference(AccessContext context, org.projectnessie.versioned.NamedRef ref)
void	canListCommitLog(AccessContext context, org.projectnessie.versioned.NamedRef ref)
void	canReadEntityValue(AccessContext context, org.projectnessie.versioned.NamedRef ref, org.projectnessie.model.ContentsKey key, String contentsId)
void	canReadEntries(AccessContext context, org.projectnessie.versioned.NamedRef ref)
void	canUpdateEntity(AccessContext context, org.projectnessie.versioned.NamedRef ref, org.projectnessie.model.ContentsKey key, String contentsId)
void	canViewReference(AccessContext context, org.projectnessie.versioned.NamedRef ref)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

CelAccessChecker

@Inject
public CelAccessChecker(QuarkusNessieAuthorizationConfig config,
                        CompiledAuthorizationRules compiledRules)

Method Detail

canViewReference

public void canViewReference(AccessContext context,
                             org.projectnessie.versioned.NamedRef ref)
                      throws AccessControlException

Specified by:

canViewReference in interface AccessChecker

Throws:

AccessControlException

canCreateReference

public void canCreateReference(AccessContext context,
                               org.projectnessie.versioned.NamedRef ref)
                        throws AccessControlException

Specified by:

canCreateReference in interface AccessChecker

Throws:

AccessControlException

canAssignRefToHash

public void canAssignRefToHash(AccessContext context,
                               org.projectnessie.versioned.NamedRef ref)
                        throws AccessControlException

Specified by:

canAssignRefToHash in interface AccessChecker

Throws:

AccessControlException

canDeleteReference

public void canDeleteReference(AccessContext context,
                               org.projectnessie.versioned.NamedRef ref)
                        throws AccessControlException

Specified by:

canDeleteReference in interface AccessChecker

Throws:

AccessControlException

canReadEntries

public void canReadEntries(AccessContext context,
                           org.projectnessie.versioned.NamedRef ref)
                    throws AccessControlException

Specified by:

canReadEntries in interface AccessChecker

Throws:

AccessControlException

canListCommitLog

public void canListCommitLog(AccessContext context,
                             org.projectnessie.versioned.NamedRef ref)
                      throws AccessControlException

Specified by:

canListCommitLog in interface AccessChecker

Throws:

AccessControlException

canCommitChangeAgainstReference

public void canCommitChangeAgainstReference(AccessContext context,
                                            org.projectnessie.versioned.NamedRef ref)
                                     throws AccessControlException

Specified by:

canCommitChangeAgainstReference in interface AccessChecker

Throws:

AccessControlException

canReadEntityValue

public void canReadEntityValue(AccessContext context,
                               org.projectnessie.versioned.NamedRef ref,
                               org.projectnessie.model.ContentsKey key,
                               String contentsId)
                        throws AccessControlException

Specified by:

canReadEntityValue in interface AccessChecker

Throws:

AccessControlException

canUpdateEntity

public void canUpdateEntity(AccessContext context,
                            org.projectnessie.versioned.NamedRef ref,
                            org.projectnessie.model.ContentsKey key,
                            String contentsId)
                     throws AccessControlException

Specified by:

canUpdateEntity in interface AccessChecker

Throws:

AccessControlException

canDeleteEntity

public void canDeleteEntity(AccessContext context,
                            org.projectnessie.versioned.NamedRef ref,
                            org.projectnessie.model.ContentsKey key,
                            String contentsId)
                     throws AccessControlException

Specified by:

canDeleteEntity in interface AccessChecker

Throws:

AccessControlException