Package com.tangosol.net.security

Interface StorageAccessAuthorizer

All Known Implementing Classes:

AuditingAuthorizer

public interface StorageAccessAuthorizer

A pluggable facility for the server side access control authorization.

Field Summary

Fields

Modifier and Type	Field	Description
static final int	REASON_AGGREGATE
static final int	REASON_CLEAR
static final int	REASON_ENTRYSET
static final int	REASON_GET
static final int	REASON_INDEX_ADD
static final int	REASON_INDEX_REMOVE
static final int	REASON_INTERCEPTOR_ADD
static final int	REASON_INTERCEPTOR_REMOVE
static final int	REASON_INVOKE
static final int	REASON_KEYSET
static final int	REASON_LISTENER_ADD
static final int	REASON_LISTENER_REMOVE
static final int	REASON_PUT
static final int	REASON_REMOVE
static final int	REASON_TRIGGER_ADD
static final int	REASON_TRIGGER_REMOVE
static final int	REASON_UNKNOWN
static final int	REASON_VALUES

Method Summary

Modifier and Type	Method	Description
void	checkRead(BinaryEntry entry, Subject subject, int nReason)	Check if the caller represented by the specified Subject is authorized to a read access for the specified entry.
void	checkReadAny(BackingMapContext context, Subject subject, int nReason)	Check if the caller represented by the specified Subject is authorized to read any data.
void	checkWrite(BinaryEntry entry, Subject subject, int nReason)	Check if the caller represented by the specified Subject is authorized to a write access for the specified entry.
void	checkWriteAny(BackingMapContext context, Subject subject, int nReason)	Check if the caller represented by the specified Subject is authorized to update any data.
static String	reasonToString(int nReason)	Return a human-readable description for the specified REASON_ constant.

Field Details

REASON_UNKNOWN

static final int REASON_UNKNOWN

See Also:

• Constant Field Values

REASON_GET

static final int REASON_GET

See Also:

• Constant Field Values

REASON_PUT

static final int REASON_PUT

See Also:

• Constant Field Values

REASON_REMOVE

static final int REASON_REMOVE

See Also:

• Constant Field Values

REASON_KEYSET

static final int REASON_KEYSET

See Also:

• Constant Field Values

REASON_ENTRYSET

static final int REASON_ENTRYSET

See Also:

• Constant Field Values

REASON_VALUES

static final int REASON_VALUES

See Also:

• Constant Field Values

REASON_CLEAR

static final int REASON_CLEAR

See Also:

• Constant Field Values

REASON_INVOKE

static final int REASON_INVOKE

See Also:

• Constant Field Values

REASON_AGGREGATE

static final int REASON_AGGREGATE

See Also:

• Constant Field Values

REASON_INDEX_ADD

static final int REASON_INDEX_ADD

See Also:

• Constant Field Values

REASON_INDEX_REMOVE

static final int REASON_INDEX_REMOVE

See Also:

• Constant Field Values

REASON_LISTENER_ADD

static final int REASON_LISTENER_ADD

See Also:

• Constant Field Values

REASON_LISTENER_REMOVE

static final int REASON_LISTENER_REMOVE

See Also:

• Constant Field Values

REASON_TRIGGER_ADD

static final int REASON_TRIGGER_ADD

See Also:

• Constant Field Values

REASON_TRIGGER_REMOVE

static final int REASON_TRIGGER_REMOVE

See Also:

• Constant Field Values

REASON_INTERCEPTOR_ADD

static final int REASON_INTERCEPTOR_ADD

See Also:

• Constant Field Values

REASON_INTERCEPTOR_REMOVE

static final int REASON_INTERCEPTOR_REMOVE

See Also:

• Constant Field Values

Method Details

checkRead

void checkRead(BinaryEntry entry,
 Subject subject,
 int nReason)

Check if the caller represented by the specified Subject is authorized to a read access for the specified entry.

Parameters:

entry - the entry

subject - the Subject

nReason - one of the REASON_* constants

Throws:

SecurityException - if the action is not authorized

checkWrite

void checkWrite(BinaryEntry entry,
 Subject subject,
 int nReason)

Check if the caller represented by the specified Subject is authorized to a write access for the specified entry.

Parameters:

entry - the entry

subject - the Subject

nReason - one of the REASON_* constants

Throws:

SecurityException - if the action is not authorized

checkReadAny

void checkReadAny(BackingMapContext context,
 Subject subject,
 int nReason)

Check if the caller represented by the specified Subject is authorized to read any data.

For example, this check would be performed to install a map listener (except for lite listeners)

Parameters:

context - the BackingMapContext

subject - the Subject

nReason - one of the REASON_* constants

Throws:

SecurityException - if the action is not authorized

checkWriteAny

void checkWriteAny(BackingMapContext context,
 Subject subject,
 int nReason)

Check if the caller represented by the specified Subject is authorized to update any data.

For example, this check would be performed to install a trigger.

Parameters:

context - the BackingMapContext

subject - the Subject

nReason - one of the REASON_* constants

Throws:

SecurityException - if the action is not authorized

reasonToString

static String reasonToString(int nReason)

Return a human-readable description for the specified REASON_ constant.

Parameters:

nReason - one of the REASON_ constants

Returns:

the operation description