Package org.sakaiproject.tool.gradebook.facades.sakai2impl

Class AuthzSakai2Impl

java.lang.Object

org.sakaiproject.tool.gradebook.facades.sections.AuthzSectionsImpl

org.sakaiproject.tool.gradebook.facades.sakai2impl.AuthzSakai2Impl

All Implemented Interfaces:

Authz

public class AuthzSakai2Impl
extends AuthzSectionsImpl
implements Authz

An implementation of Gradebook-specific authorization needs based on a combination of fine-grained site-scoped Sakai permissions and the shared Section Awareness API. This is a transtional stage between coarse-grained site-and-role-based authz and our hoped-for fine-grained role-determined group-scoped authz.

Field Summary

Fields inherited from interface org.sakaiproject.tool.gradebook.facades.Authz

PERMISSION_EDIT_ASSIGNMENTS, PERMISSION_GRADE_ALL, PERMISSION_GRADE_SECTION, PERMISSION_VIEW_OWN_GRADES, PERMISSION_VIEW_STUDENT_NUMBERS

Constructor Summary

Constructors

Constructor	Description
AuthzSakai2Impl()

Method Summary

Modifier and Type	Method	Description
void	init()	Perform authorization-specific framework initializations for the Gradebook.
boolean	isUserAbleToEditAssessments(String gradebookUid)
boolean	isUserAbleToGrade(String gradebookUid)
boolean	isUserAbleToGrade(String gradebookUid, String userUid)
boolean	isUserAbleToGradeAll(String gradebookUid)
boolean	isUserAbleToGradeAll(String gradebookUid, String userUid)
boolean	isUserAbleToGradeSection(String sectionUid)	When group-scoped permissions are available, this is where they will go.
boolean	isUserAbleToViewOwnGrades(String gradebookUid)
boolean	isUserAbleToViewStudentNumbers(String gradebookUid)

Methods inherited from class org.sakaiproject.tool.gradebook.facades.sections.AuthzSectionsImpl

findMatchingEnrollmentsForItem, findMatchingEnrollmentsForItemForUser, findMatchingEnrollmentsForViewableCourseGrade, findMatchingEnrollmentsForViewableItems, findStudentSectionMemberships, getAllSections, getAuthn, getGradebookPermissionService, getGradeViewFunctionForUserForStudentForItem, getSectionAwareness, getStudentSectionMembershipNames, getViewableSections, isUserAbleToGradeItemForStudent, isUserAbleToViewItemForStudent, isUserHasGraderPermissions, isUserHasGraderPermissions, isUserHasGraderPermissions, isUserHasGraderPermissions, setAuthn, setGradebookPermissionService, setSectionAwareness

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.sakaiproject.tool.gradebook.facades.Authz

findMatchingEnrollmentsForItem, findMatchingEnrollmentsForItemForUser, findMatchingEnrollmentsForViewableCourseGrade, findMatchingEnrollmentsForViewableItems, findStudentSectionMemberships, getAllSections, getGradeViewFunctionForUserForStudentForItem, getStudentSectionMembershipNames, getViewableSections, isUserAbleToGradeItemForStudent, isUserAbleToViewItemForStudent, isUserHasGraderPermissions, isUserHasGraderPermissions, isUserHasGraderPermissions, isUserHasGraderPermissions

Constructor Detail

AuthzSakai2Impl

public AuthzSakai2Impl()

Method Detail

init

public void init()

Perform authorization-specific framework initializations for the Gradebook.

isUserAbleToGrade

public boolean isUserAbleToGrade(String gradebookUid)

Specified by:

isUserAbleToGrade in interface Authz

Overrides:

isUserAbleToGrade in class AuthzSectionsImpl

isUserAbleToGrade

public boolean isUserAbleToGrade(String gradebookUid,
                                 String userUid)

Specified by:

isUserAbleToGrade in interface Authz

Overrides:

isUserAbleToGrade in class AuthzSectionsImpl

isUserAbleToGradeAll

public boolean isUserAbleToGradeAll(String gradebookUid)

Specified by:

isUserAbleToGradeAll in interface Authz

Overrides:

isUserAbleToGradeAll in class AuthzSectionsImpl

isUserAbleToGradeAll

public boolean isUserAbleToGradeAll(String gradebookUid,
                                    String userUid)

Specified by:

isUserAbleToGradeAll in interface Authz

Overrides:

isUserAbleToGradeAll in class AuthzSectionsImpl

isUserAbleToGradeSection

public boolean isUserAbleToGradeSection(String sectionUid)

When group-scoped permissions are available, this is where they will go. My current assumption is that the call will look like: return hasPermission(sectionUid, PERMISSION_GRADE_ALL);

isUserAbleToEditAssessments

public boolean isUserAbleToEditAssessments(String gradebookUid)

Specified by:

isUserAbleToEditAssessments in interface Authz

Overrides:

isUserAbleToEditAssessments in class AuthzSectionsImpl

isUserAbleToViewOwnGrades

public boolean isUserAbleToViewOwnGrades(String gradebookUid)

Specified by:

isUserAbleToViewOwnGrades in interface Authz

Overrides:

isUserAbleToViewOwnGrades in class AuthzSectionsImpl

isUserAbleToViewStudentNumbers

public boolean isUserAbleToViewStudentNumbers(String gradebookUid)

Specified by:

isUserAbleToViewStudentNumbers in interface Authz

Overrides:

isUserAbleToViewStudentNumbers in class AuthzSectionsImpl