Package org.wildfly.security.authz.jacc

Class ElytronPolicy

java.lang.Object

org.wildfly.security.authz.jacc.ElytronPolicy

All Implemented Interfaces:

jakarta.security.jacc.Policy

public class ElytronPolicy
extends Object
implements jakarta.security.jacc.Policy

A Policy implementation that knows how to process JACC permissions.

Elytron's JakartaAuthorization implementation is fully integrated with the Permission Mapping API, which allows users to specify custom permissions for a SecurityDomain and its identities by configuring a PermissionMapper. In this case, the permissions are evaluated considering both JACC-specific permissions (as defined by the specs) and also the ones associated with the current and authorized SecurityIdentity.

Author:

Pedro Igor, Darran Lofthouse

Constructor Summary

Constructors

Constructor	Description
ElytronPolicy()	Create a new instance.

Method Summary

Modifier and Type	Method	Description
PermissionCollection	getPermissionCollection(Subject subject)
boolean	implies(Permission permission, Subject subject)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface jakarta.security.jacc.Policy

implies, implies, impliesByRole, isExcluded, isUnchecked, refresh

Constructor Details

ElytronPolicy

public ElytronPolicy()

Create a new instance.

Method Details

implies

public boolean implies(Permission permission,
 Subject subject)

Specified by:

implies in interface jakarta.security.jacc.Policy

getPermissionCollection

public PermissionCollection getPermissionCollection(Subject subject)

Specified by:

getPermissionCollection in interface jakarta.security.jacc.Policy