edu.cornell.mannlib.vitro.webapp.auth.policy.bean

Class PropertyRestrictionBeanImpl

java.lang.Object

edu.cornell.mannlib.vitro.webapp.auth.policy.bean.PropertyRestrictionBean

edu.cornell.mannlib.vitro.webapp.auth.policy.bean.PropertyRestrictionBeanImpl

public class PropertyRestrictionBeanImpl
extends PropertyRestrictionBean

On creation, populate a map of PropertyRestrictionLevels. When a change is detected, update the map accordingly. ------------------------------ How is authorization determined? Resources are easy. If they aren't in a prohibited namespace, or are an exception to the prohibition, they are accessible. Properties are harder. The prohibited namespace and exceptions still apply, but if we pass that test, then we check the threshold map. When a test is made, we look for thresholds in the map. First we look for the full key of domain-base-range, in case we are testing a faux property. Faux properties are recorded in the map with the full key. If we don't find the full key, then perhaps we are testing a faux property that has no settings, or perhaps we are testing an object property. We look for the partial key of null-base-null, which covers both of these cases, since object properties (and data properties) are recorded the map with a partial key. Similarly, if we find a null threshold value in the full key, we look back to the partial key for a threshold. If we find no non-null threshold value then the property is unrestricted for that feature. ----------------------------- It would perhaps be a silly optimization, but if we find a key with 3 null thresholds, we could remove it from the map without changing the behavior.

Nested Class Summary

Nested classes/interfaces inherited from class edu.cornell.mannlib.vitro.webapp.auth.policy.bean.PropertyRestrictionBean

PropertyRestrictionBean.Setup

Field Summary

Fields inherited from class edu.cornell.mannlib.vitro.webapp.auth.policy.bean.PropertyRestrictionBean

instance, PERMITTED_EXCEPTIONS, PROHIBITED_NAMESPACES

Constructor Summary

Constructors

Constructor and Description
PropertyRestrictionBeanImpl(Collection<String> prohibitedNamespaces, Collection<String> permittedExceptions, ContextModelAccess models)

Method Summary

Modifier and Type	Method and Description
boolean	canDisplayPredicate(Property predicate, BaseResourceBean.RoleLevel userRole) If display of a predicate is restricted, the user's role must be at least as high as the restriction level.
boolean	canDisplayResource(String resourceUri, BaseResourceBean.RoleLevel userRole) Any resource can be displayed.
boolean	canModifyPredicate(Property predicate, BaseResourceBean.RoleLevel userRole) A predicate cannot be modified if its namespace is in the prohibited list (some exceptions are allowed).
boolean	canModifyResource(String resourceUri, BaseResourceBean.RoleLevel userRole) A resource cannot be modified if its namespace is in the prohibited list (but some exceptions are allowed).
boolean	canPublishPredicate(Property predicate, BaseResourceBean.RoleLevel userRole) If publishing of a predicate is restricted, the user's role must be at least as high as the restriction level.
boolean	canPublishResource(String resourceUri, BaseResourceBean.RoleLevel userRole) Any resource can be published.
String	toString()
void	updateProperty(PropertyRestrictionLevels levels) The threshold values for this property may have changed.

Methods inherited from class edu.cornell.mannlib.vitro.webapp.auth.policy.bean.PropertyRestrictionBean

getBean

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Constructor Detail

PropertyRestrictionBeanImpl

public PropertyRestrictionBeanImpl(Collection<String> prohibitedNamespaces,
                                   Collection<String> permittedExceptions,
                                   ContextModelAccess models)

Method Detail

canDisplayResource

public boolean canDisplayResource(String resourceUri,
                                  BaseResourceBean.RoleLevel userRole)

Description copied from class: PropertyRestrictionBean

Any resource can be displayed. (Someday we may want to implement display restrictions based on VClass.)

Specified by:

canDisplayResource in class PropertyRestrictionBean

canModifyResource

public boolean canModifyResource(String resourceUri,
                                 BaseResourceBean.RoleLevel userRole)

Description copied from class: PropertyRestrictionBean

A resource cannot be modified if its namespace is in the prohibited list (but some exceptions are allowed). (Someday we may want to implement modify restrictions based on VClass.)

Specified by:

canModifyResource in class PropertyRestrictionBean

canPublishResource

public boolean canPublishResource(String resourceUri,
                                  BaseResourceBean.RoleLevel userRole)

Description copied from class: PropertyRestrictionBean

Any resource can be published. (Someday we may want to implement publish restrictions based on VClass.)

Specified by:

canPublishResource in class PropertyRestrictionBean

canDisplayPredicate

public boolean canDisplayPredicate(Property predicate,
                                   BaseResourceBean.RoleLevel userRole)

Description copied from class: PropertyRestrictionBean

If display of a predicate is restricted, the user's role must be at least as high as the restriction level.

Specified by:

canDisplayPredicate in class PropertyRestrictionBean

canModifyPredicate

public boolean canModifyPredicate(Property predicate,
                                  BaseResourceBean.RoleLevel userRole)

Description copied from class: PropertyRestrictionBean

A predicate cannot be modified if its namespace is in the prohibited list (some exceptions are allowed). If modification of a predicate is restricted, the user's role must be at least as high as the restriction level.

Specified by:

canModifyPredicate in class PropertyRestrictionBean

canPublishPredicate

public boolean canPublishPredicate(Property predicate,
                                   BaseResourceBean.RoleLevel userRole)

Description copied from class: PropertyRestrictionBean

If publishing of a predicate is restricted, the user's role must be at least as high as the restriction level.

Specified by:

canPublishPredicate in class PropertyRestrictionBean

updateProperty

public void updateProperty(PropertyRestrictionLevels levels)

Description copied from class: PropertyRestrictionBean

The threshold values for this property may have changed.

Specified by:

updateProperty in class PropertyRestrictionBean

toString

public String toString()

Overrides:

toString in class Object