Package org.projectnessie.server.authz

Class CelAccessChecker

java.lang.Object

org.projectnessie.server.authz.CelAccessChecker

All Implemented Interfaces:

org.projectnessie.services.authz.AccessChecker

@ApplicationScoped
public class CelAccessChecker
extends Object
implements org.projectnessie.services.authz.AccessChecker

A reference implementation of the AccessChecker that performs access checks using CEL expressions.

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static class	CelAccessChecker.AuthorizationRuleType

Constructor Summary

Constructors

Constructor	Description
CelAccessChecker(QuarkusNessieAuthorizationConfig config, CompiledAuthorizationRules compiledRules)

Method Summary

Modifier and Type	Method	Description
void	canAssignRefToHash(org.projectnessie.services.authz.AccessContext context, org.projectnessie.versioned.NamedRef ref)
void	canCommitChangeAgainstReference(org.projectnessie.services.authz.AccessContext context, org.projectnessie.versioned.NamedRef ref)
void	canCreateReference(org.projectnessie.services.authz.AccessContext context, org.projectnessie.versioned.NamedRef ref)
void	canDeleteEntity(org.projectnessie.services.authz.AccessContext context, org.projectnessie.versioned.NamedRef ref, org.projectnessie.model.ContentKey key, String contentId)
void	canDeleteReference(org.projectnessie.services.authz.AccessContext context, org.projectnessie.versioned.NamedRef ref)
void	canListCommitLog(org.projectnessie.services.authz.AccessContext context, org.projectnessie.versioned.NamedRef ref)
void	canReadEntityValue(org.projectnessie.services.authz.AccessContext context, org.projectnessie.versioned.NamedRef ref, org.projectnessie.model.ContentKey key, String contentId)
void	canReadEntries(org.projectnessie.services.authz.AccessContext context, org.projectnessie.versioned.NamedRef ref)
void	canUpdateEntity(org.projectnessie.services.authz.AccessContext context, org.projectnessie.versioned.NamedRef ref, org.projectnessie.model.ContentKey key, String contentId)
void	canViewReference(org.projectnessie.services.authz.AccessContext context, org.projectnessie.versioned.NamedRef ref)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

CelAccessChecker

@Inject
public CelAccessChecker(QuarkusNessieAuthorizationConfig config,
                        CompiledAuthorizationRules compiledRules)

Method Detail

canViewReference

public void canViewReference(org.projectnessie.services.authz.AccessContext context,
                             org.projectnessie.versioned.NamedRef ref)
                      throws AccessControlException

Specified by:

canViewReference in interface org.projectnessie.services.authz.AccessChecker

Throws:

AccessControlException

canCreateReference

public void canCreateReference(org.projectnessie.services.authz.AccessContext context,
                               org.projectnessie.versioned.NamedRef ref)
                        throws AccessControlException

Specified by:

canCreateReference in interface org.projectnessie.services.authz.AccessChecker

Throws:

AccessControlException

canAssignRefToHash

public void canAssignRefToHash(org.projectnessie.services.authz.AccessContext context,
                               org.projectnessie.versioned.NamedRef ref)
                        throws AccessControlException

Specified by:

canAssignRefToHash in interface org.projectnessie.services.authz.AccessChecker

Throws:

AccessControlException

canDeleteReference

public void canDeleteReference(org.projectnessie.services.authz.AccessContext context,
                               org.projectnessie.versioned.NamedRef ref)
                        throws AccessControlException

Specified by:

canDeleteReference in interface org.projectnessie.services.authz.AccessChecker

Throws:

AccessControlException

canReadEntries

public void canReadEntries(org.projectnessie.services.authz.AccessContext context,
                           org.projectnessie.versioned.NamedRef ref)
                    throws AccessControlException

Specified by:

canReadEntries in interface org.projectnessie.services.authz.AccessChecker

Throws:

AccessControlException

canListCommitLog

public void canListCommitLog(org.projectnessie.services.authz.AccessContext context,
                             org.projectnessie.versioned.NamedRef ref)
                      throws AccessControlException

Specified by:

canListCommitLog in interface org.projectnessie.services.authz.AccessChecker

Throws:

AccessControlException

canCommitChangeAgainstReference

public void canCommitChangeAgainstReference(org.projectnessie.services.authz.AccessContext context,
                                            org.projectnessie.versioned.NamedRef ref)
                                     throws AccessControlException

Specified by:

canCommitChangeAgainstReference in interface org.projectnessie.services.authz.AccessChecker

Throws:

AccessControlException

canReadEntityValue

public void canReadEntityValue(org.projectnessie.services.authz.AccessContext context,
                               org.projectnessie.versioned.NamedRef ref,
                               org.projectnessie.model.ContentKey key,
                               String contentId)
                        throws AccessControlException

Specified by:

canReadEntityValue in interface org.projectnessie.services.authz.AccessChecker

Throws:

AccessControlException

canUpdateEntity

public void canUpdateEntity(org.projectnessie.services.authz.AccessContext context,
                            org.projectnessie.versioned.NamedRef ref,
                            org.projectnessie.model.ContentKey key,
                            String contentId)
                     throws AccessControlException

Specified by:

canUpdateEntity in interface org.projectnessie.services.authz.AccessChecker

Throws:

AccessControlException

canDeleteEntity

public void canDeleteEntity(org.projectnessie.services.authz.AccessContext context,
                            org.projectnessie.versioned.NamedRef ref,
                            org.projectnessie.model.ContentKey key,
                            String contentId)
                     throws AccessControlException

Specified by:

canDeleteEntity in interface org.projectnessie.services.authz.AccessChecker

Throws:

AccessControlException